Memory Corruption Vulnerability in Inventec VT Designer

VT Designer is a screen editing software developed for VK/VT series touch panels by Shenzhen Inventec Electric Co. A memory corruption vulnerability exists in Inventec VT Designer. An attacker can exploit this vulnerability to cause the program to crash...

Privoxy Denial of Service Vulnerability

privoxy is a web proxy with advanced filtering features. A denial of service vulnerability exists in privoxy versions prior to 3.0.32. An attacker can exploit this vulnerability to crash a program via a specially crafted CGI request...

Denial of Service Vulnerability in Weilian Technologies WiSCADA

WiSCADA industrial configuration software is a 3D industrial configuration software product that supports Windows, Android and IOS cross-platform. A denial of service vulnerability exists in Weilian Technology WiSCADA. An attacker can exploit the vulnerability to cause the program to crash...

QEMU Resource Management Error Vulnerability (CNVD-2021-14790)

QEMU Quick Emulator is a set of simulation processor software by Fabrice Bellard, a French individual developer. The software is fast and cross-platform. A resource management error vulnerability exists in qemu 5.2.0-2, which can be exploited by an attacker to cause a denial of service situation ...

OSV-2021-443 Segv on unknown address in Imf_2_5::copyIntoFrameBuffer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31293 Crash type: Segv on unknown address Crash state: Imf25::copyIntoFrameBuffer Imf25::LineBufferTask::execute IlmThread::NullThreadPoolProvider::addTask...

OSV-2021-439 UNKNOWN READ in blosc_d

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31241 Crash type: UNKNOWN READ Crash state: bloscd dojob bloscrundecompressionwithcontext...

Null pointer dereference

A null pointer dereference in Teradici PCoIP Soft Client versions prior to 20.07.3 could allow an attacker to crash the software...

CVE-2021-25690

A null pointer dereference in Teradici PCoIP Soft Client versions prior to 20.07.3 could allow an attacker to crash the software...

OSV-2021-361 Stack-buffer-overflow in add_file

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30774 Crash type: Stack-buffer-overflow WRITE Crash state: addfile strfilenamecb handleoption...

openSUSE Security Update : gimp (openSUSE-2020-2357)

This update for gimp fixes the following issues : Security issue fixed : - CVE-2017-17787: Fixed an out-of-bounds read in the PSP importer bsc1073628. Non-security issue fixed : - Fixed a software crash while importing a PostScript file bsc1178726. This update was imported from the...

OSV-2017-159 Global-buffer-overflow in vte_write_debug

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=182 Crash type: Global-buffer-overflow READ 1 Crash state: vtewritedebug doaction parsedata...

Extreme Office suffers from a memory corruption vulnerability (CNVD-2021-03427)

Extreme Office is an independently controlled office learning software developed by Beijing Haiteng Times Technology Co. A memory corruption vulnerability exists in Extreme Office. An attacker can exploit this vulnerability to cause the program to crash...

Easy CD & DVD Cover Creator 4.13 - Denial of Service Exploit

Exploit Title: Easy CD & DVD Cover Creator 4.13 - Denial of Service PoC Software Link: http://www.tucows.com/download/windows/files/ezcdsetup.exe Exploit Author: Achilles Tested Version: 4.13 Tested on: Windows 7 x64 Sp1 1.- Run python code :Creator.py 2.- Open EVIL.txt and copy content to...

OPENSUSE-SU-2020:2357-1 Security update for gimp

This update for gimp fixes the following issues: Security issue fixed: - CVE-2017-17787: Fixed an out-of-bounds read in the PSP importer bsc1073628. Non-security issue fixed: - Fixed a software crash while importing a PostScript file bsc1178726. This update was imported from the SUSE:SLE-15:Updat...

SUSE-SU-2020:3940-1 Security update for gimp

This update for gimp fixes the following issues: Security issue fixed: - CVE-2017-17787: Fixed an out-of-bounds read in the PSP importer bsc1073628. Non-security issue fixed: - Fixed a software crash while importing a PostScript file bsc1178726...

Security update for gimp (important)

openSUSE Security Update: Security update for gimp Announcement ID: openSUSE-SU-2020:2357-1 Rating: important References: 1073628 1178726 Cross-References: CVE-2017-17787 Affected Products: openSUSE Leap 15.1 An update that solves one vulnerability and has one errata is now available. Description...

Denial of Service Vulnerability in Time Stamp (Windows Client)

Time Stamp is a fast, high-definition, ad-free image viewing software, compatible with all major image formats:JPG\PNG\GIF\BMP, etc; A denial of service vulnerability exists in Time Stamp Windows client, which can be exploited by an attacker to cause the software to crash via the poc...

Denial of Service Vulnerability in Time Stamp (Windows Client) (CNVD-2020-75029)

Time Stamp is a fast, high-definition, ad-free image viewing software, compatible with all major image formats:JPG\PNG\GIF\BMP, etc; A denial of service vulnerability exists in Time Stamp Windows client, which can be exploited by an attacker to cause the software to crash via the poc...

Denial Of Service (DoS)

kernel is vulnerable to denial of service. A buffer over-read in the function cryptoauthencextractkeys when a payload longer than 4 bytes is not aligned causes a system crash...

Design/Logic Flaw

A CWE-123: Write-what-where Condition vulnerability exists in EcoStruxure™ Control Expert all versions and Unity Pro former name of EcoStruxure™ Control Expert all versions, that could cause a crash of the software or unexpected code execution when opening a malicious file in EcoStruxure™ Control...