Stack overflow

Stack buffer overflow in hasplms in Gemalto ACC Admin Control Center, all versions ranging from HASP SRM 2.10 to Sentinel LDK 7.50, allows remote attackers to execute arbitrary code via malformed ASN.1 streams in V2C and similar input files...

gstreamer: Out-of-bounds read in gst_date_time_new_from_iso8601_string()

The gstdatetimenewfromiso8601string function in gst/gstdatetime.c in GStreamer before 1.10.3 allows remote attackers to cause a denial of service out-of-bounds heap read via a malformed datetime string...

LAME denial of service vulnerability

LAME is LAME team developed a set of open source MP3 audio compression software . A security vulnerability exists in LAME version 3.99.5. An attacker can exploit this vulnerability to cause a denial of service except for a zero error with a malformed input file...

Design/Logic Flaw

There is a division-by-zero vulnerability in LAME 3.99.5, caused by a malformed input file...

ALPINE-CVE-2017-11720

There is a division-by-zero vulnerability in LAME 3.99.5, caused by a malformed input file...

CVE-2017-11720

There is a division-by-zero vulnerability in LAME 3.99.5, caused by a malformed input file...

DEBIAN-CVE-2017-11720

There is a division-by-zero vulnerability in LAME 3.99.5, caused by a malformed input file...

UBUNTU-CVE-2017-11720

There is a division-by-zero vulnerability in LAME 3.99.5, caused by a malformed input file...

CVE-2017-11720

There is a division-by-zero vulnerability in LAME 3.99.5, caused by a malformed input file...

CVE-2017-11720

There is a division-by-zero vulnerability in LAME 3.99.5, caused by a malformed input file...

PT-2017-12199 · None +3 · Lame +3

Name of the Vulnerable Software and Affected Versions: LAME version 3.99.5 Description: A division-by-zero issue exists due to a malformed input file. Recommendations: For LAME version 3.99.5, at the moment, there is no information about a newer version that contains a fix for this vulnerability...

UBUNTU-CVE-2017-11410

In Wireshark through 2.0.13 and 2.2.x through 2.2.7, the WBXML dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-wbxml.c by adding validation of the relationships between indexes and lengths. NOTE: thi...

LibSass: stack overflow in libsass

By pasting @H into ./sassc -s, we're able to trigger this stack overflow. ==3470==ERROR: AddressSanitizer: stack-overflow on address 0x7ffe1b09ffc8 pc 0x00000059bc77 bp 0x7ffe1b0a0820 sp 0x7ffe1b09ffd0 T0 0 0x59bc76 in interceptormalloc /home/geeknik/sassc/bin/sassc+0x59bc76 1 0x7f842fedb2e7 in...

DEBIAN-CVE-2017-7748

In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the WSP dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-wsp.c by adding a length check...

SUSE-SU-2016:2302-1 Security update for gd

This update for gd fixes the following issues: - security update: CVE-2016-6161: global out of bounds read when encoding gif from malformed input withgd2togif bsc988032...

SUSE-SU-2016:1512-1 Security update for expat

This update for expat fixes the following issues: Security issue fixed: - CVE-2016-0718: Fix Expat XML parser that mishandles certain kinds of malformed input documents. bsc979441 - CVE-2015-1283: Fix multiple integer overflows. bnc980391...

openSUSE Security Update : expat (openSUSE-2016-660)

This update for expat fixes the following security issues : - CVE-2015-1283: Fixed multiple integer overflows that could lead to buffer overflows boo980391 - CVE-2016-0718: Fixed Expat XML parser that mishandles certain kinds of malformed input documents boo979441. %NASLMINLEVEL 70300 C Tenable...

DEBIAN-CVE-2016-0718

Expat allows context-dependent attackers to cause a denial of service crash or possibly execute arbitrary code via a malformed input document, which triggers a buffer overflow...

ALPINE-CVE-2016-0718

Expat allows context-dependent attackers to cause a denial of service crash or possibly execute arbitrary code via a malformed input document, which triggers a buffer overflow...

PSF-2016-2 Expat 2.2 (Expat bug #537)

Expat allows context-dependent attackers to cause a denial of service crash or possibly execute arbitrary code via a malformed input document, which triggers a buffer overflow...