CVE-2017-7210: Improper Restriction of Operations within the Bounds of a Memory Buffer

objdump in GNU Binutils 2.28 is vulnerable to multiple heap-based buffer over-reads of size 1 and size 8 while handling corrupt STABS enum type strings in a crafted object file, leading to program crash...

CVE-2017-7209: NULL Pointer Dereference

The dumpsectionasbytes function in readelf in GNU Binutils 2.28 accesses a NULL pointer while reading section contents in a corrupt binary, leading to a program crash...

DEBIAN-CVE-2017-6969

readelf in GNU Binutils 2.28 is vulnerable to a heap-based buffer over-read while processing corrupt RL78 binaries. The vulnerability can trigger program crashes. It may lead to an information leak as well...

CVE-2017-6313

Integer underflow in the loadresources function in io-icns.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service out-of-bounds read and program crash via a crafted image entry size in an ICO file...

CVE-2017-6313

CVE-2017-6313 in gdk-pixbuf2 (IO-ICNS handling) is documented in connected sources as an integer underflow in the load_resources function (io-icns.c) that can cause an out-of-bounds read and process crash when parsing ICO files. The vulnerability affects gdk-pixbuf2’s ICO image handling and is de...

CVE-2017-6313

Integer underflow in the loadresources function in io-icns.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service out-of-bounds read and program crash via a crafted image entry size in an ICO file...

CVE-2016-9354

An issue was discovered in Moxa DACenter Versions 1.4 and older. A specially crafted project file may cause the program to crash because of Uncontrolled Resource Consumption...

CVE-2016-9354

CVE-2016-9354 affects Moxa DACenter versions 1.4 and older. The issue is Uncontrolled Resource Consumption caused by a specially crafted project file, leading to a crash (resource exhaustion). The vulnerability also involves an Unquoted Search Path/Element (CWE-428) that could contribute to insta...

FTPShell Server '.csv' Local Denial of Service Vulnerability

FTPShell Server is a safe and reliable FTP client tool. A local denial of service vulnerability exists in FTPShell Server '.csv', which can be exploited by an attacker to cause a denial of service program crash...

XAMPP Control Panel Denial of Service Vulnerability

XAMPP is the United States Apache Friends project team developed is an Apache web server with PHP, Perl and MySQL collection of installation packages , it can help users to build web servers . A denial of service vulnerability exists in XAMPP version v3.1.0, which can be exploited by attackers to...

Serva HTTP Server Denial of Service Vulnerability (CNVD-2016-12618)

Serva is a centralized multi-protocol G http server. A denial of service vulnerability exists in the HTML httpd module of Serva HTTP Server version 3.0.0.1001, which can be exploited by an attacker to cause a denial of service program crash...

Dual DHCP DNS Server Denial of Service Vulnerability

Dual DHCP DNS Server is a LAN software that provides both DHCP and DNS servers. A denial of service vulnerability exists in Dual DHCP DNS Server version 7.29, which can be exploited by attackers to cause a denial of service program crash...

SmallFTPd Denial of Service Vulnerability

SmallFTPD is a small FTP server for Windows. A denial of service vulnerability exists in smallftpd version 1.0.3, which can be exploited by an attacker to cause a denial of service program crash...

CVE-2014-9906

CVE-2014-9906 describes a use-after-free vulnerability in the Perl DBD::mysql module prior to version 4.029. The issue arises from improper memory handling, allowing a remote attacker to cause a denial of service (crash) and potentially execute arbitrary code via vectors related to a lost server ...

CVE-2016-5845: Undefined Security Weakness

SAP SAPCAR does not check the return value of file operations when extracting files, which allows remote attackers to cause a denial of service program crash via an invalid file name in an archive file, aka SAP Security Note 2312905...

Halliburton LogView Pro 9.7.5 - '.cgm' / '.tif' / '.tiff' / &#0

Exploit for windows platform in category dos / poc Exploit Title: Haliburton LogView Pro v9.7.5 Exploit Author: Karn Ganeshen Download link: http://www.halliburton.com/public/lp/contents/InteractiveTools/web/Toolkits/lp/HalliburtonLogViewer.exe Version: Current version 9.7.5 Tested on: Windows...

The vulnerability of the libxml2 library allows attackers to obtain confidential information, cause service failures, or exert other types of damage.

The vulnerability of the htmlParseComment function in the libxml2 library is caused by buffer overflow. Exploiting this vulnerability could allow an attacker to obtain confidential information, cause service failure termination of the application, or have other effects through an unclosed HTML...

Everyone Piano Handles EOP File Memory Corruption Vulnerability

Everyone Piano is a program to play piano music through the keyboard. A memory corruption vulnerability exists in the handling of EOP files, which allows attackers to crash the program by constructing malformed EOP files...

Unspecified Vulnerability in libarchive ZIP Parser

libarchive is a multi-format archive and compression library. A security vulnerability exists in libarchive's ZIP parser that can be exploited by an attacker to cause a program crash...

Wireshark - alloc_address_wmem Assertion Failure

Exploit for multiple platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=804 The following crash due to an asserion failure can be observed in an ASAN build of Wireshark current git master, by feeding a malformed file to tshark "$ ./tshark -nVxr...