Internet Bug Bounty: Perl $ENV Key Stack Buffer Overflow

The CPerlHost::Add method in win32\perlhost.h is vulnerable to a stack buffer overflow. void CPerlHost::AddLPCSTR lpStr char szBuffer1024; LPSTR lpPtr; int index, length = strlenlpStr+1; forindex = 0; lpStrindex != '\0' && lpStrindex != '='; ++index szBufferindex = lpStrindex; szBufferindex = '\0...

libfpx Denial of Service Vulnerability (CNVD-2017-25764)

libfpx is a library for manipulating FlashPIX images. A denial of service vulnerability exists in OLEStream::WriteVTLPSTR in olestrm.cpp in libfpx, which can be exploited by a remote attacker to cause a denial of service null pointer dereference via a specially crafted fpx image...

PT-2017-12774

Name of the Vulnerable Software and Affected Versions libfpx version 1.3.1 p6 Description The issue is a heap-based buffer overflow in the OLEStream::WriteVT LPSTR function in olestrm.cpp, which can be triggered by remote attackers using a crafted fpx image, leading to a denial of service...

PT-2017-12779

Name of the Vulnerable Software and Affected Versions libfpx version 1.3.1 p6 Description The issue allows remote attackers to cause a denial of service, specifically a NULL pointer dereference, by providing a crafted fpx image. This is due to a problem in the OLEStream::WriteVT LPSTR function in...