994 matches found
CVE-2017-10755
XnView Classic for Windows 2.40 is affected by CVE-2017-10755. A crafted .rle file may cause a denial of service and potentially other impact, connected to Data from Faulting Address influencing Branch Selection starting at ntdll_77df0000!LdrpInitializeThread+0x000000000000010b. The CVSS3 base sc...
CVE-2017-10739
CVE-2017-10739 affects XnView Classic for Windows, version 2.40. A crafted .rle file can lead to arbitrary code execution or a denial of service, due to a Data Execution Prevention Violation starting at an unknown symbol in the program flow. The description does not provide concrete vulnerable co...
CVE-2017-10746
CVE-2017-10746 affects XnView Classic for Windows 2.40. A buffer overflow in the .rle file handling can be exploited to execute arbitrary code or cause a denial of service, related to a User Mode Write AV starting at ntdll_77df0000!RtlEnterCriticalSection+0x0000000000000012. The vulnerability is ...
CVE-2017-10750
XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV near NULL starting at ntdll77df0000!RtlEnterCriticalSection+0x0000000000000012."...
CVE-2017-10757
XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!RtlpCoalesceFreeBlocks+0x00000000000001b6."...
CVE-2017-10751
XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at GDI32!GenericEngineGetGlyphs+0x0000000000000133."...
CVE-2017-10737
XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV starting at ntdll77df0000!RtlpCoalesceFreeBlocks+0x00000000000002e6."...
CVE-2017-10769
XnView Classic for Windows 2.40 is affected by a vulnerability triggered by a crafted .rle file, leading to denial of service and potentially other impact. The issue is associated with data from a faulting address influencing Branch Selection starting at ntdll_77df0000!memcmp, without RPC initial...
CVE-2017-10774
XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at KERNELBASE!FindSortHashNode+0x0000000000000040."...
CVE-2017-10766
XnView Classic for Windows Version 2.40 is vulnerable to a crafted .rle file leading to a denial of service (and potentially other impact). The issue is triggered by data flow from a faulting address that controls branch selection in GDI32!ScriptStringAnalyse+0x1c8. Impact is described as DoS wit...
CVE-2017-10783
XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!RtlpFreeHeap+0x0000000000000393."...
CVE-2017-10766
XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at GDI32!ScriptStringAnalyse+0x00000000000001c8."...
gdal: Heap-buffer-overflow in LercNS::RLE::decompress
Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=4726197688729600 Project: gdal Fuzzer: libFuzzergdalfuzzer Fuzz target binary: gdalfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address: 0x62a0000119...
gdal: Heap-buffer-overflow in LercNS::RLE::readCount
Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=6684589630160896 Project: gdal Fuzzer: libFuzzergdalfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x607000001177 Crash State:...
gdal: Heap-buffer-overflow in LercNS::RLE::decompress
Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5114295765434368 Project: gdal Fuzzer: libFuzzergdalfuzzer Fuzz target binary: gdalfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...
Debian DLA-953-1 : graphicsmagick security update
Chris Evans discovered that graphicsmagick used uninitialized memory in the RLE decoder, allowing an remote attacker to leak sensitive information from process memory space. More information are available at: https://scarybeastsecurity.blogspot.de/2017/05/bleed-continues-18-byte...
[SECURITY] [DLA 953-1] graphicsmagick security update
Package : graphicsmagick Version : 1.3.16-1.1+deb7u7 CVE ID : CVE-2017-9098 Debian Bug : 862967 Chris Evans discovered that graphicsmagick used uninitialized memory in the RLE decoder, allowing an remote attacker to leak sensitive information from process memory space. More information are...
CVE-2017-9144
In ImageMagick 7.0.5-5, a crafted RLE image can trigger a crash because of incorrect EOF handling in coders/rle.c...
AutoTrace heap buffer overflow vulnerability (CNVD-2017-08476)
AutoTrace is a set of software for converting bitmap files Bitmap to vector files Vector. A heap buffer overflow vulnerability exists in the 'rlefread' function in input-tga.c:252:15 of the libautotrace.a file in AutoTrace version 0.31.1. An attacker could exploit this vulnerability to execute...
