Design/Logic Flaw

There is a division-by-zero vulnerability in LAME 3.99.5, caused by a malformed input file...

ALPINE-CVE-2017-11720

There is a division-by-zero vulnerability in LAME 3.99.5, caused by a malformed input file...

DEBIAN-CVE-2017-11720

There is a division-by-zero vulnerability in LAME 3.99.5, caused by a malformed input file...

CVE-2017-11720

There is a division-by-zero vulnerability in LAME 3.99.5, caused by a malformed input file...

UBUNTU-CVE-2017-11720

There is a division-by-zero vulnerability in LAME 3.99.5, caused by a malformed input file...

CVE-2017-11720

There is a division-by-zero vulnerability in LAME 3.99.5, caused by a malformed input file...

PT-2017-12199 · None +3 · Lame +3

Name of the Vulnerable Software and Affected Versions: LAME version 3.99.5 Description: A division-by-zero issue exists due to a malformed input file. Recommendations: For LAME version 3.99.5, at the moment, there is no information about a newer version that contains a fix for this vulnerability...

UBUNTU-CVE-2017-11410

In Wireshark through 2.0.13 and 2.2.x through 2.2.7, the WBXML dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-wbxml.c by adding validation of the relationships between indexes and lengths. NOTE: thi...

LibSass: stack overflow in libsass

By pasting @H into ./sassc -s, we're able to trigger this stack overflow. ==3470==ERROR: AddressSanitizer: stack-overflow on address 0x7ffe1b09ffc8 pc 0x00000059bc77 bp 0x7ffe1b0a0820 sp 0x7ffe1b09ffd0 T0 0 0x59bc76 in interceptormalloc /home/geeknik/sassc/bin/sassc+0x59bc76 1 0x7f842fedb2e7 in...

DEBIAN-CVE-2017-7748

In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the WSP dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-wsp.c by adding a length check...

SUSE-SU-2016:2302-1 Security update for gd

This update for gd fixes the following issues: - security update: CVE-2016-6161: global out of bounds read when encoding gif from malformed input withgd2togif bsc988032...

SUSE-SU-2016:1512-1 Security update for expat

This update for expat fixes the following issues: Security issue fixed: - CVE-2016-0718: Fix Expat XML parser that mishandles certain kinds of malformed input documents. bsc979441 - CVE-2015-1283: Fix multiple integer overflows. bnc980391...

openSUSE Security Update : expat (openSUSE-2016-660)

This update for expat fixes the following security issues : - CVE-2015-1283: Fixed multiple integer overflows that could lead to buffer overflows boo980391 - CVE-2016-0718: Fixed Expat XML parser that mishandles certain kinds of malformed input documents boo979441. %NASLMINLEVEL 70300 C Tenable...

ALPINE-CVE-2016-0718

Expat allows context-dependent attackers to cause a denial of service crash or possibly execute arbitrary code via a malformed input document, which triggers a buffer overflow...

DEBIAN-CVE-2016-0718

Expat allows context-dependent attackers to cause a denial of service crash or possibly execute arbitrary code via a malformed input document, which triggers a buffer overflow...

CVE-2016-0718

Expat allows context-dependent attackers to cause a denial of service crash or possibly execute arbitrary code via a malformed input document, which triggers a buffer overflow...

PSF-2016-2 Expat 2.2 (Expat bug #537)

Expat allows context-dependent attackers to cause a denial of service crash or possibly execute arbitrary code via a malformed input document, which triggers a buffer overflow...

expat: arbitrary code execution

CVE-2015-1283 arbitrary code execution Multiple integer overflows in the XMLGetBuffer function allow remote attackers to cause a denial of service heap-based buffer overflow or possibly arbitrary code execution via crafted XML data. This problem has already been fixed in version 2.1.0-1 but this...

Debian Security Advisory DSA 3582-1 (expat - security update)

Gustavo Grieco discovered that Expat, an XML parsing C library, does not properly handle certain kinds of malformed input documents, resulting in buffer overflows during processing and error reporting. A remote attacker can take advantage of this flaw to cause an application using the Expat libra...

expat -- denial of service vulnerability on malformed input

Gustavo Grieco reports: The Expat XML parser mishandles certain kinds of malformed input documents, resulting in buffer overflows during processing and error reporting. The overflows can manifest as a segmentation fault or as memory corruption during a parse operation. The bugs allow for a denial...