Internet Bug Bounty: Perl $ENV Key Stack Buffer Overflow

The CPerlHost::Add method in win32\perlhost.h is vulnerable to a stack buffer overflow. void CPerlHost::AddLPCSTR lpStr char szBuffer1024; LPSTR lpPtr; int index, length = strlenlpStr+1; forindex = 0; lpStrindex != '\0' && lpStrindex != '='; ++index szBufferindex = lpStrindex; szBufferindex = '\0...

libfpx Denial of Service Vulnerability (CNVD-2017-25764)

libfpx is a library for manipulating FlashPIX images. A denial of service vulnerability exists in OLEStream::WriteVTLPSTR in olestrm.cpp in libfpx, which can be exploited by a remote attacker to cause a denial of service null pointer dereference via a specially crafted fpx image...