CVE-2016-10094

Off-by-one error in the t2preadwritepdfimagetile function in tools/tiff2pdf.c in LibTIFF 4.0.7 allows remote attackers to have unspecified impact via a crafted image...

CVE-2016-10094: Undefined Security Weakness

Off-by-one error in the t2preadwritepdfimagetile function in tools/tiff2pdf.c in LibTIFF 4.0.7 allows remote attackers to have unspecified impact via a crafted image...

FreeBSD : optipng -- multiple vulnerabilities (8fedf75c-ef2f-11e6-900e-003048f78448)

ifread.c in gif2png, as used in OptiPNG before 0.7.6, allows remote attackers to cause a denial of service uninitialized memory read via a crafted GIF file. The bmpreadrows function in pngxtern/pngxrbmp.c in OptiPNG before 0.7.6 allows remote attackers to cause a denial of service invalid memory...

PT-2018-4883

Name of the Vulnerable Software and Affected Versions zsh versions prior to 5.3 Description An off-by-one error in zsh resulted in undersized buffers that were intended to support PATH MAX characters. Recommendations For versions prior to 5.3, update to version 5.3 or later to resolve the issue...

PT-2017-1000

Name of the Vulnerable Software and Affected Versions libarchive version 3.3.2 Description The issue is related to an off-by-one error in the read header function for UTF-16 names in RAR archives, leading to an out-of-bounds read. This could allow a remote attacker to gain unauthorized access to...

CVE-2017-5550: Exposure of Sensitive Information to an Unauthorized Actor

Off-by-one error in the pipeadvance function in lib/ioviter.c in the Linux kernel before 4.9.5 allows local users to obtain sensitive information from uninitialized heap-memory locations in opportunistic circumstances by reading from a pipe after an incorrect buffer-release decision...

Denial Of Service (DoS)

FFMpeg is vulnerable to denial of service DoS attacks and possibly other attacks. These attacks are possible because of a off-by-one error in smc.c leads to out-of-bounds access through the use of Quicktime Graphics aka SMC video data...

PT-2019-7560 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.9.6 Description: The issue is related to an off-by-one error in the cqspi setup flash function, located in the drivers/mtd/spi-nor/cadence-quadspi.c file. This error occurs because there are CQSPI MAX CHIPSELE...

PHP Multiple Denial of Service Vulnerabilities - 02 (Jan 2017) - Windows

PHP is prone to multiple denial of service DoS vulnerabilities. This VT has been deprecated and merged into the VT SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

PHP Multiple Denial of Service Vulnerabilities - 02 (Jan 2017) - Linux

PHP is prone to multiple denial of service DoS vulnerabilities. This VT has been deprecated and merged into the VT SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Memory corruption

Off-by-one error in the pharparsepharfile function in ext/phar/phar.c in PHP before 5.6.30 and 7.0.x before 7.0.15 allows remote attackers to cause a denial of service memory corruption or possibly execute arbitrary code via a crafted PHAR archive with an alias mismatch...

CVE-2016-10160

Off-by-one error in the pharparsepharfile function in ext/phar/phar.c in PHP before 5.6.30 and 7.0.x before 7.0.15 allows remote attackers to cause a denial of service memory corruption or possibly execute arbitrary code via a crafted PHAR archive with an alias mismatch...

CVE-2016-10160: Off-by-one Error

Off-by-one error in the pharparsepharfile function in ext/phar/phar.c in PHP before 5.6.30 and 7.0.x before 7.0.15 allows remote attackers to cause a denial of service memory corruption or possibly execute arbitrary code via a crafted PHAR archive with an alias mismatch...

Design/Logic Flaw

An off by one error resulting in an allocation of zero size in FFmpeg in Google Chrome prior to 54.0.2840.98 for Mac, and 54.0.2840.99 for Windows, and 54.0.2840.100 for Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted video file...

ALPINE-CVE-2016-5199

An off by one error resulting in an allocation of zero size in FFmpeg in Google Chrome prior to 54.0.2840.98 for Mac, and 54.0.2840.99 for Windows, and 54.0.2840.100 for Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted video file...

CVE-2016-5199

CVE-2016-5199 is a heap corruption issue in the FFmpeg MP4 decoder used by Chromium/Chrome. The off-by-one error can lead to a 0-size allocation and heap-pointer corruption via a crafted video file, potentially allowing remote code execution. Affected software includes Chrome as shipped on Mac, W...

CVE-2016-5199: Improper Restriction of Operations within the Bounds of a Memory Buffer

An off by one error resulting in an allocation of zero size in FFmpeg in Google Chrome prior to 54.0.2840.98 for Mac, and 54.0.2840.99 for Windows, and 54.0.2840.100 for Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted video file...

CVE-2016-10145

Off-by-one error in coders/wpg.c in ImageMagick allows remote attackers to have unspecified impact via vectors related to a string copy...

CVE-2016-9809

Off-by-one error in the gsth264parsesetcaps function in GStreamer before 1.10.2 allows remote attackers to have unspecified impact via a crafted file, which triggers an out-of-bounds read...

CVE-2016-9809

Off-by-one error in the gsth264parsesetcaps function in GStreamer before 1.10.2 allows remote attackers to have unspecified impact via a crafted file, which triggers an out-of-bounds read...