PT-2017-14200

Name of the Vulnerable Software and Affected Versions IrfanView versions 4.50 Description The issue allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dds file, related to "Read Access Violation starting at FORMATS!ReadBLP W+0x0000000000001b22."...

CVE-2017-15764: Improper Restriction of Operations within the Bounds of a Memory Buffer

IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation starting at BabaCAD4Image!ShowPlugInOptions+0x000000000001e6b0."...

CVE-2017-15781: Improper Restriction of Operations within the Bounds of a Memory Buffer

XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "Read Access Violation on Control Flow starting at CADImage+0x0000000000286a76."...

PT-2017-14218

Name of the Vulnerable Software and Affected Versions XnView Classic for Windows version 2.43 Description The issue allows attackers to cause a denial of service or possibly have other unspecified impacts via a crafted .dwg file. This is related to a "Read Access Violation" error. Recommendations...

CVE-2017-15778: Improper Restriction of Operations within the Bounds of a Memory Buffer

XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation starting at CADImage+0x0000000000285de7."...

PT-2017-14169

Name of the Vulnerable Software and Affected Versions IrfanView versions 4.50 with CADImage plugin version 12.0.0.5 Description The issue allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation starting a...

PT-2017-14205

Name of the Vulnerable Software and Affected Versions XnView Classic for Windows version 2.43 Description The issue allows attackers to cause a denial of service or possibly have other unspecified impacts via a crafted .dwg file. This is related to a "Read Access Violation" error. Recommendations...

PT-2017-14210

Name of the Vulnerable Software and Affected Versions XnView Classic for Windows version 2.43 Description The issue allows attackers to cause a denial of service or possibly have other unspecified impacts via a crafted .dwg file. This is related to a "Read Access Violation" error. Recommendations...

PT-2017-14168

Name of the Vulnerable Software and Affected Versions IrfanView versions 4.50 with CADImage plugin version 12.0.0.5 Description The issue allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation starting a...

PT-2017-14181

Name of the Vulnerable Software and Affected Versions IrfanView versions 4.50 with BabaCAD4Image plugin version 1.3 Description The issue allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation" error...

CVE-2017-15738: Improper Restriction of Operations within the Bounds of a Memory Buffer

IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation starting at CADIMAGE+0x00000000003d22d8."...

CVE-2017-15786: Improper Restriction of Operations within the Bounds of a Memory Buffer

XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation starting at CADImage+0x00000000001a78db."...

CVE-2017-15773: Improper Restriction of Operations within the Bounds of a Memory Buffer

XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation starting at CADImage+0x0000000000285d79."...

CVE-2017-15750: Improper Restriction of Operations within the Bounds of a Memory Buffer

IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation starting at BabaCAD4Image!ShowPlugInOptions+0x0000000000009ae0."...

CVE-2017-15742: Improper Restriction of Operations within the Bounds of a Memory Buffer

IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation starting at CADIMAGE+0x00000000003d2328."...

PT-2017-14182

Name of the Vulnerable Software and Affected Versions IrfanView versions 4.50 with BabaCAD4Image plugin version 1.3 Description The issue allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation" error...

PT-2017-14173

Name of the Vulnerable Software and Affected Versions IrfanView versions 4.50 with CADImage plugin version 12.0.0.5 Description The issue allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation" error...

Ruby Psych::Emitter start_document Heap Overflow Vulnerability(CVE-2016-2338)

DESCRIPTION An exploitable heap overflow vulnerability exists in the Psych::Emitter startdocument function of Ruby. In Psych::Emitter startdocument function heap buffer "head" allocation is made based on tags array length. Specially constructed object passed as element of tags array can increase...

Adobe Flash Player Infinite Recursion Arbitrary Read Access Violation(CVE-2016-4132)

SUMMARY A potentially exploitable read access violation vulnerability exists in the a way Adobe Flash Player handles infinitely recursive calls. A specially crafted ActionScript code can cause a read access violation which can potentially be further abused. To trriger this vulnerability user...

CVE-2017-10419

Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications subcomponent: PMS. Supported versions that are affected are 8.10.1 and 8.10.2. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Hospitality...