Code injection

In sam2p 0.49.3, there is an invalid read of size 2 in the parsergb function in inxpm.cpp. However, this can also cause a write to an illegal address...

CVE-2017-14637

In sam2p 0.49.3, there is an invalid read of size 2 in the parsergb function in inxpm.cpp. However, this can also cause a write to an illegal address...

UBUNTU-CVE-2017-14637

In sam2p 0.49.3, there is an invalid read of size 2 in the parsergb function in inxpm.cpp. However, this can also cause a write to an illegal address...

CVE-2017-14636

Because of an integer overflow in sam2p 0.49.3, a loop executes 0xffffffff times, ending with an invalid read of size 1 in the Image::Indexed::sortPal function in image.cpp. However, this also causes memory corruption because of an attempted write to the invalid d0xfffffffe array element...

Integer overflow

Because of an integer overflow in sam2p 0.49.3, a loop executes 0xffffffff times, ending with an invalid read of size 1 in the Image::Indexed::sortPal function in image.cpp. However, this also causes memory corruption because of an attempted write to the invalid d0xfffffffe array element...

CVE-2017-14636

CVE-2017-14636 affects sam2p 0.49.3. An integer overflow leads to a loop that may execute 0xffffffff times, causing an invalid read of size 1 in Image::Indexed::sortPal (image.cpp) and memory corruption from writing to d[0xfffffffe]. Downstream advisories (e.g., Debian DLA-1127-1, Mageia MGASA-20...

CVE-2017-14636

Because of an integer overflow in sam2p 0.49.3, a loop executes 0xffffffff times, ending with an invalid read of size 1 in the Image::Indexed::sortPal function in image.cpp. However, this also causes memory corruption because of an attempted write to the invalid d0xfffffffe array element...

CVE-2017-14637

CVE-2017-14637 affects sam2p 0.49.3, where an invalid read of size 2 in parse_rgb() inside in_xpm.cpp can also cause a write to an illegal address. This is documented in multiple feeds (including OSV/DEBIAN notes for sam2p vulnerabilities) and is tied to the set of related CVEs in sam2p 0.49.3. E...

CVE-2017-14637

In sam2p 0.49.3, there is an invalid read of size 2 in the parsergb function in inxpm.cpp. However, this can also cause a write to an illegal address...

sam2p integer overflow vulnerability

sam2p is a UNIX command line utility program written in C++ that converts images to PDF and other formats. An integer overflow vulnerability exists in the 'pcxLoadImage24' function of the inpcx.cpp file in sam2p version 0.49.3. An attacker can exploit this vulnerability to cause an invalid write...

sam2p heap buffer overflow vulnerability (CNVD-2017-34028)

sam2p is a UNIX command line utility program written in C++ that converts images to PDF and other formats. A heap buffer overflow vulnerability exists in the 'pcxLoadRaster' function of the inpcx.cpp file in sam2p version 0.49.3. An attacker can exploit this vulnerability to cause a denial of...

sam2p heap buffer overflow vulnerability

sam2p is a UNIX command line utility program written in C++ that converts images to PDF and other formats. A heap buffer overflow vulnerability exists in the 'pcxLoadImage24' function of the inpcx.cpp file in sam2p version 0.49.3. An attacker can exploit this vulnerability to cause a denial of...

sam2p denial of service vulnerability

sam2p is a UNIX command line utility program written in C++ that converts images to PDF and other formats. A denial of service vulnerability exists in the 'inxpmreader' function of inxpm.cpp in sam2p version 0.49.3. An attacker can exploit this vulnerability to cause a denial of service crash...

CVE-2017-14631

In sam2p 0.49.3, the pcxLoadRaster function in inpcx.cpp has an integer signedness error leading to a heap-based buffer overflow...

CVE-2017-14630

In sam2p 0.49.3, an integer overflow exists in the pcxLoadImage24 function of the file inpcx.cpp, leading to an invalid write operation...

Heap overflow

In sam2p 0.49.3, the pcxLoadRaster function in inpcx.cpp has an integer signedness error leading to a heap-based buffer overflow...

CVE-2017-14629

In sam2p 0.49.3, the inxpmreader function in inxpm.cpp has an integer signedness error, leading to a crash when writing to an out-of-bounds array element...

Integer overflow

In sam2p 0.49.3, the inxpmreader function in inxpm.cpp has an integer signedness error, leading to a crash when writing to an out-of-bounds array element...

CVE-2017-14631

In sam2p 0.49.3, the pcxLoadRaster function in inpcx.cpp has an integer signedness error leading to a heap-based buffer overflow...

CVE-2017-14630

In sam2p 0.49.3, an integer overflow exists in the pcxLoadImage24 function of the file inpcx.cpp, leading to an invalid write operation...