CVE-2017-12444

The mdjvubitmapgetboundingbox function in base/4bitmap.c in minidjvu 0.8 can cause a denial of service invalid memory read and application crash via a crafted djvu file...

CVE-2017-11661

The WMSetupMidiEvent function in internalmidi.c:2318 in WildMIDI 0.4.2 can cause a denial of service invalid memory read and application crash via a crafted mid file...

CVE-2017-12443

The mdjvubitmappackrow function in base/4bitmap.c in minidjvu 0.8 can cause a denial of service invalid memory read and application crash via a crafted djvu file...

CVE-2017-12443

The CVE-2017-12443 entry relates to minidjvu 0.8, where the function mdjvu_bitmap_pack_row in base/4bitmap.c can trigger a denial of service via a crafted DJVU file due to an invalid memory read that crashes the application. The available connected documents confirm the vulnerable component and b...

CVE-2017-11661

The WMSetupMidiEvent function in internalmidi.c:2318 in WildMIDI 0.4.2 can cause a denial of service invalid memory read and application crash via a crafted mid file...

CVE-2017-11662

The WMParseNewMidi function in fmidi.c in WildMIDI 0.4.2 can cause a denial of service invalid memory read and application crash via a crafted mid file...

CVE-2017-11664

The WMSetupMidiEvent function in internalmidi.c:2122 in WildMIDI 0.4.2 can cause a denial of service invalid memory read and application crash via a crafted mid file...

PT-2017-12554

Name of the Vulnerable Software and Affected Versions minidjvu version 0.8 Description The issue is related to the row is empty function in the base/4bitmap.c file, which can cause a denial of service due to an invalid memory read and application crash when processing a crafted djvu file...

PT-2017-12556

Name of the Vulnerable Software and Affected Versions minidjvu version 0.8 Description The issue is related to the mdjvu bitmap pack row function in the base/4bitmap.c file, which can cause a denial of service due to an invalid memory read and application crash when processing a crafted djvu file...

PT-2017-12557

Name of the Vulnerable Software and Affected Versions minidjvu version 0.8 Description The issue is related to the mdjvu bitmap get bounding box function in the base/4bitmap.c file, which can cause a denial of service due to an invalid memory read and application crash when processing a crafted...

PT-2017-12558

Name of the Vulnerable Software and Affected Versions minidjvu version 0.8 Description The issue is related to the JB2BitmapCoder::code row by refinement function in minidjvu, which can cause a denial of service due to an invalid memory read and application crash when processing a crafted djvu...

PT-2017-12555

Name of the Vulnerable Software and Affected Versions minidjvu version 0.8 Description The issue is related to the row is empty function in base/4bitmap.c at line 272, which can cause a denial of service due to an invalid memory read and application crash when processing a crafted djvu file...

USN-3391-1 firefox vulnerabilities

Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to conduct cross-site scripting XSS attacks, bypass sandbox restrictions, obtain sensitive information, spoof the origin of modal...

Debian DSA-3939-1 : botan1.10 - security update

Aleksandar Nikolic discovered that an error in the x509 parser of the Botan crypto library could result in an out-of-bounds memory read, resulting in denial of service or an information leak if processing a malformed certificate. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptiv...

[SECURITY] [DSA 3939-1] botan1.10 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3939-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 12, 2017 https://www.debian.org/security/faq -...

CVE-2017-11358

The readsamples function in hcom.c in Sound eXchange SoX 14.4.2 allows remote attackers to cause a denial of service invalid memory read and application crash via a crafted hcom file...

Debian: Security Advisory (DSA-3939-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

WildMIDI 0.4.2 - Multiple Vulnerabilities

Exploit for linux platform in category dos / poc wildmidi multiple vulnerabilities ================ Author : qflb.wu =============== Introduction: ============= WildMIDI is a simple software midi player which has a core softsynth library that can be use with other applications.The WildMIDI librar...

WildMIDI 0.4.2 - Multiple Vulnerabilities

WildMIDI 0.4.2 - Multiple Vulnerabilities wildmidi multiple vulnerabilities ================ Author : qflb.wu =============== Introduction: ============= WildMIDI is a simple software midi player which has a core softsynth library that can be use with other applications.The WildMIDI library uses...

WildMIDI 0.4.2 - Multiple Vulnerabilities

wildmidi multiple vulnerabilities ================ Author : qflb.wu =============== Introduction: ============= WildMIDI is a simple software midi player which has a core softsynth library that can be use with other applications.The WildMIDI library uses Gravis Ultrasound patch files to convert...