CVE-2018-10016

Netwide Assembler NASM 2.14rc0 has a division-by-zero vulnerability in the expr5 function in asm/eval.c via a malformed input file...

CVE-2018-10016

CVE-2018-10016 : Netwide Assembler (NASM) 2.14rc0 has a division-by-zero in the expr5 function (asm/eval.c) triggered by a malformed input file. The vulnerability is in NASM’s evaluation path and is described with a CVSS base score of 5.5 (MEDIUM) for a local, low‑complexity to exploit vector. Th...

rubygem-will_paginate: XSS vulnerabilities

It was found that ruby willpaginate is vulnerable to a XSS via malformed input that cause pagination to occur on an improper boundary. This could allow an attacker with the ability to pass data to the willpaginate gem to display arbitrary HTML including scripting code within the web interface...

collectd: double free in csnmp_read_table function in snmp.c

A double-free vulnerability was found in the csnmpreadtable function in the SNMP plugin of collectd. A network-based attacker could exploit this by sending malformed data, causing collectd to crash or possibly other impact...

SWFTools Software Handles wav Format with Denial of Service Vulnerability

SWFTools is a collection of utilities to work with Adobe Flash files SWF files. A denial of service vulnerability exists in the SWFTools software when handling the wav file format. An attacker can exploit the vulnerability to cause the program to crash by constructing malformed wav format files...

PostgreSQL Information Disclosure Vulnerability (Dec 2017) - Windows

PostgreSQL is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

GLSA-201710-16 : Shadow: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-201710-16 Shadow: Buffer overflow Malformed input in the newusers tool may produce crashes and other unspecified behaviors. Impact : A remote attacker could possibly cause a Denial of Service condition or bypass privilege boundari...

UBUNTU-CVE-2017-15018

LAME 3.99.5, 3.99.4, 3.99.3, 3.99.2, 3.99.1, 3.99, 3.98.4, 3.98.2 and 3.98 have a heap-based buffer over-read when handling a malformed file in k344 in vbrquantize.c...

Stack overflow

Stack buffer overflow in hasplms in Gemalto ACC Admin Control Center, all versions ranging from HASP SRM 2.10 to Sentinel LDK 7.50, allows remote attackers to execute arbitrary code via malformed ASN.1 streams in V2C and similar input files...

gstreamer: Out-of-bounds read in gst_date_time_new_from_iso8601_string()

The gstdatetimenewfromiso8601string function in gst/gstdatetime.c in GStreamer before 1.10.3 allows remote attackers to cause a denial of service out-of-bounds heap read via a malformed datetime string...

LAME denial of service vulnerability

LAME is LAME team developed a set of open source MP3 audio compression software . A security vulnerability exists in LAME version 3.99.5. An attacker can exploit this vulnerability to cause a denial of service except for a zero error with a malformed input file...

Design/Logic Flaw

There is a division-by-zero vulnerability in LAME 3.99.5, caused by a malformed input file...

ALPINE-CVE-2017-11720

There is a division-by-zero vulnerability in LAME 3.99.5, caused by a malformed input file...

UBUNTU-CVE-2017-11720

There is a division-by-zero vulnerability in LAME 3.99.5, caused by a malformed input file...

CVE-2017-11720

There is a division-by-zero vulnerability in LAME 3.99.5, caused by a malformed input file...

CVE-2017-11720

There is a division-by-zero vulnerability in LAME 3.99.5, caused by a malformed input file...

DEBIAN-CVE-2017-11720

There is a division-by-zero vulnerability in LAME 3.99.5, caused by a malformed input file...

CVE-2017-11720

There is a division-by-zero vulnerability in LAME 3.99.5, caused by a malformed input file...

PT-2017-12199 · None +3 · Lame +3

Name of the Vulnerable Software and Affected Versions: LAME version 3.99.5 Description: A division-by-zero issue exists due to a malformed input file. Recommendations: For LAME version 3.99.5, at the moment, there is no information about a newer version that contains a fix for this vulnerability...

UBUNTU-CVE-2017-11410

In Wireshark through 2.0.13 and 2.2.x through 2.2.7, the WBXML dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-wbxml.c by adding validation of the relationships between indexes and lengths. NOTE: thi...