PT-2017-19374

Name of the Vulnerable Software and Affected Versions Exiv2 version 0.26 Description A memory address dereference issue was found in Exiv2, specifically in the Exiv2::getULong function located in types.cpp. This issue leads to a segmentation fault, causing the application to crash and resulting i...

PT-2017-19369

Name of the Vulnerable Software and Affected Versions Exiv2 version 0.26 Description A memory address dereference issue was found in the read function of Exiv2::StringValueBase in value.cpp, causing a segmentation fault and application crash. This results in a denial of service. Recommendations F...

CVE-2017-14859: Improper Restriction of Operations within the Bounds of a Memory Buffer

An Invalid memory address dereference was discovered in Exiv2::StringValueBase::read in value.cpp in Exiv2 0.26. The vulnerability causes a segmentation fault and application crash, which leads to denial of service...

CVE-2017-14864: Improper Restriction of Operations within the Bounds of a Memory Buffer

An Invalid memory address dereference was discovered in Exiv2::getULong in types.cpp in Exiv2 0.26. The vulnerability causes a segmentation fault and application crash, which leads to denial of service...

CVE-2017-14862: Improper Restriction of Operations within the Bounds of a Memory Buffer

An Invalid memory address dereference was discovered in Exiv2::DataValue::read in value.cpp in Exiv2 0.26. The vulnerability causes a segmentation fault and application crash, which leads to denial of service...

CVE-2017-14859

An Invalid memory address dereference was discovered in Exiv2::StringValueBase::read in value.cpp in Exiv2 0.26. The vulnerability causes a segmentation fault and application crash, which leads to denial of service...

CVE-2017-14862

An Invalid memory address dereference was discovered in Exiv2::DataValue::read in value.cpp in Exiv2 0.26. The vulnerability causes a segmentation fault and application crash, which leads to denial of service...

CVE-2017-14864

An Invalid memory address dereference was discovered in Exiv2::getULong in types.cpp in Exiv2 0.26. The vulnerability causes a segmentation fault and application crash, which leads to denial of service...

CVE-2017-14859

CVE-2017-14859 affects Exiv2 up to version 0.26, where an invalid memory address dereference in Exiv2::StringValueBase::read (value.cpp) can cause a segmentation fault and denial of service. The connected documents confirm this precise root cause and the resulting crash vector, and cite multiple ...

CVE-2017-14864

CVE-2017-14864 : An invalid memory address dereference in Exiv2::getULong (types.cpp) of Exiv2 0.26 can cause a segmentation fault and denial of service. Connected advisories confirm Exiv2 exposure in multiple Linux distros and vendor advisories, with mitigations/patches released. The Debian LTS ...

CVE-2017-14859

An Invalid memory address dereference was discovered in Exiv2::StringValueBase::read in value.cpp in Exiv2 0.26. The vulnerability causes a segmentation fault and application crash, which leads to denial of service...

CVE-2017-14862

An Invalid memory address dereference was discovered in Exiv2::DataValue::read in value.cpp in Exiv2 0.26. The vulnerability causes a segmentation fault and application crash, which leads to denial of service...

CVE-2017-14864

An Invalid memory address dereference was discovered in Exiv2::getULong in types.cpp in Exiv2 0.26. The vulnerability causes a segmentation fault and application crash, which leads to denial of service...

PT-2017-4087

Name of the Vulnerable Software and Affected Versions Exiv2 version 0.26 Description A memory address dereference issue was found in the Exiv2::DataValue::read function in value.cpp, which can cause a segmentation fault and application crash, leading to denial of service. The vulnerability can be...

PT-2017-4064

Name of the Vulnerable Software and Affected Versions Exiv2 version 0.26 Description The issue is related to an invalid memory address dereference in the Exiv2::StringValueBase::read function in value.cpp of the Exiv2 library. This can cause a segmentation fault and application crash, leading to...

PT-2017-4063

Name of the Vulnerable Software and Affected Versions Exiv2 version 0.26 Description The issue is related to an invalid memory address dereference in the Exiv2::getULong function in types.cpp. This leads to a segmentation fault and application crash, resulting in denial of service. The...

CVE-2017-8677

The Windows GDI+ component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure vulnerability when it improperly discloses kerne...

Windows GDI+ Information Disclosure Vulnerability

A information disclosure vulnerability exists when the Windows GDI+ component improperly discloses kernel memory addresses. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. To exploit this vulnerability, an attacker would...

Windows Kernel Information Disclosure Vulnerability

An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. To exploit this vulnerability, an attacker would have t...

Mitsubishi Electric E-Designer TxStaticString Col Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Mitsubishi Electric E-Designer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...