4654 matches found
CVE-2017-9683
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while flashing a meta image, an integer overflow can occur, if user-defined image offset and size values are too large...
CVE-2017-9683
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while flashing a meta image, an integer overflow can occur, if user-defined image offset and size values are too large...
ImageMagick ReadEnhMetaFile Null Pointer Dereference Vulnerability
ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A security vulnerability exists in ReadEnhMetaFile in the coders/emf.c file in ImageMagick version 7.0.7-0 Q16. A remo...
CVE-2017-1000099
When asking to get a file from a file:// URL, libcurl provides a feature that outputs meta-data about the file using HTTP-like headers. The code doing this would send the wrong buffer to the user stdout or the application's provide callback, which could lead to other private data from the heap to...
[SECURITY] Fedora 26 Update: kernel-4.13.4-200.fc26
The kernel meta package...
CVE-2017-1000099
When asking to get a file from a file:// URL, libcurl provides a feature that outputs meta-data about the file using HTTP-like headers. The code doing this would send the wrong buffer to the user stdout or the application's provide callback, which could lead to other private data from the heap to...
Legal Robot: Allowance of Meta/Null characters
Dear sir, I am very happy to report a vulnerability to legalrobot. Recently, the report 260468 is disclosed publicly and that report describes about the restriction lengths of profile fields "first name and last name". Now, i am reporting an another vulnerability regarding those profile fields...
CVE-2017-14858
There is a heap-based buffer overflow in the Exiv2::l2Data function of types.cpp in Exiv2 0.26. A Crafted input will lead to a denial of service attack...
[SECURITY] Fedora 26 Update: kernel-4.12.14-300.fc26
The kernel meta package...
[SECURITY] Fedora 26 Update: kernel-4.12.11-300.fc26
The kernel meta package...
jRank Topsites 1.0 Cross Site Request Forgery / Code Injection
Meta Tags File Footer File /tbody...
[SECURITY] Fedora 25 Update: kernel-4.12.9-200.fc25
The kernel meta package...
[SECURITY] Fedora 26 Update: kernel-4.12.9-300.fc26
The kernel meta package...
[SECURITY] Fedora 26 Update: kernel-4.12.8-300.fc26
The kernel meta package...
GSA Bounty: Information disclosure (system username) in the x-amz-meta-s3cmd-attrs response header on federation.data.gov
Description Hi. I just noticed, that you are extended the scope for the bounty program. I looked to the first resource - https://federation.data.gov/ I noticed, that the x-amz-meta-s3cmd-attrs response header returns sensitive information, like system username:...
ImageMagick Denial of Service Vulnerability (CNVD-2017-236955)
ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A denial of service vulnerability exists in the 'formatIPTC' function of the coders/meta.c file in ImageMagick version...
UBUNTU-CVE-2017-13062
In ImageMagick 7.0.6-6, a memory leak vulnerability was found in the function formatIPTC in coders/meta.c, which allows attackers to cause a denial of service WriteMETAImage memory consumption via a crafted file...
CVE-2015-3649
The CVE-2015-3649 entry concerns the Ruby gem open-uri-cached. Affected component: open-uri-cached Ruby gem; root cause: insecure/predictable temporary file handling in /tmp, where a directory named with openuri- and a meta/marker file is created, allowing a local attacker to place Ruby code and ...
The vulnerability of the parse8BIMW and format8BIM functions in the coder/meta.c file of the console image editing tool ImageMagick allows a hacker to cause a memory access violation.
The vulnerability of the parse8BIMW and format8BIM functions in the coders/meta.c file related to the WriteImage function in coders/meta.c in the console-based graphic editor ImageMagick arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability could...