9706 matches found
CVE-2022-35099
SWFTools commit 772e55a2 was discovered to contain a stack overflow via ImageStream::getPixelunsigned char at /xpdf/Stream.cc...
CVE-2022-35094
CVE-2022-35094 affects SWFTools, specifically the commit 772e55a2, where a heap-buffer overflow is reported in DCTStream::readHuffSym(DCTHuffTable*) within /xpdf/Stream.cc. The connected documents confirm the root cause is a heap overflow in that function and reference the affected SWFTools commi...
CVE-2022-35091
Summary : CVE-2022-35091 stems from a floating point exception in SWFTools via DCTStream::readMCURow() in /xpdf/Stream.cc.ow(), tied to SWFTools commit 772e55a2. What’s affected : SWFTools (the SWF tools suite) using the referenced code path; explicit product/vendor/version details beyond the com...
OESA-2022-1941 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: A flaw was found in the sctpmakestrresetreq function in net/sctp/smmakechunk.c in the SCTP network protocol in the Linux kernel with a local user privilege access. In this flaw, an attempt to use more buffer than is allocated...
DEBIAN-CVE-2022-35951
Redis is an in-memory database that persists on disk. Versions 7.0.0 and above, prior to 7.0.5 are vulnerable to an Integer Overflow. Executing an XAUTOCLAIM command on a stream key in a specific state, with a specially crafted COUNT argument may cause an integer overflow, a subsequent heap...
UBUNTU-CVE-2022-35951
Redis is an in-memory database that persists on disk. Versions 7.0.0 and above, prior to 7.0.5 are vulnerable to an Integer Overflow. Executing an XAUTOCLAIM command on a stream key in a specific state, with a specially crafted COUNT argument may cause an integer overflow, a subsequent heap...
SWFTools 安全漏洞
SWFTools is a set of utilities for working with Adobe Flash files SWF files from the individual developer Matthias Kramm. A security vulnerability exists in SWFTools that stems from a floating point exception FPE issue in the DCTStream::readMCURow location of /xpdf/Stream.cc.ow...
SWFTools 缓冲区错误漏洞
SWFTools is a set of utilities for working with Adobe Flash files SWF files from the individual developer Matthias Kramm. A security vulnerability exists in SWFTools that stems from a global buffer overflow in the DCTStream::transformDataUnit location of /xpdf/Stream.cc...
SWFTools 缓冲区错误漏洞
SWFTools is a set of utilities for working with Adobe Flash files SWF files from the individual developer Matthias Kramm. A security vulnerability exists in SWFTools, which stems from a heap buffer overflow in the DCTStream::readHuffSymDCTHuffTable location of /xpdf/Stream.cc...
GSD-2022-1005534 drm/amd/display: Check correct bounds for stream encoder instances for DCN303
drm/amd/display: Check correct bounds for stream encoder instances for DCN303 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.63 by commit...
CVE-2020-25491
6Kare Emakin 5.0.341.0 is affected by Cross Site Scripting XSS via the /rpc/membership/setProfile DisplayName field, which is mishandled when rendering the Activity Stream page...
CVE-2020-25491
6Kare Emakin 5.0.341.0 is affected by Cross Site Scripting XSS via the /rpc/membership/setProfile DisplayName field, which is mishandled when rendering the Activity Stream page...
Cross site scripting
6Kare Emakin 5.0.341.0 is affected by Cross Site Scripting XSS via the /rpc/membership/setProfile DisplayName field, which is mishandled when rendering the Activity Stream page...
CVE-2020-25491
6Kare Emakin 5.0.341.0 is affected by Cross Site Scripting XSS via the /rpc/membership/setProfile DisplayName field, which is mishandled when rendering the Activity Stream page...
Buffer overflow
Certain The MPlayer Project products are vulnerable to Buffer Overflow via function asfinitaudiostream of libmpdemux/asfheader.c. This affects mplayer SVN-r38374-13.0.1 and mencoder SVN-r38374-13.0.1...
Archive_Tar: improper filename sanitization leads to file overwrites
A flaw was found in the ArchiveTar package. PEAR ArchiveTar could allow a local authenticated attacker to bypass security restrictions caused by a stream-wrapper attack. An attacker can overwrite arbitrary files on the system using a specially-crafted tar archive...
UBUNTU-CVE-2022-40737
An issue was discovered in Bento4 through 1.6.0-639. A buffer over-read exists in the function AP4StdcFileByteStream::WritePartial located in System/StdC/Ap4StdCFileByteStream.cpp, called from AP4ByteStream::Write and AP4HdlrAtom::WriteFields...
Bento4 缓冲区错误漏洞
Bento4 is an open source C++ library for reading and writing MP4 files. A security vulnerability exists in Bento4 version 1.6.0-639, which stems from its AP4ByteStream::Write and AP4HdlrAtom::WriteFields components calling the System/StdC/Ap4StdCFileByteStream.cpp component's AP4...
