341 matches found
CVE-2017-5884
gtk-vnc before 0.7.0 does not properly check boundaries of subrectangle-containing tiles, which allows remote servers to execute arbitrary code via the src x, y coordinates in a crafted 1 rre, 2 hextile, or 3 copyrect tile...
CVE-2017-5884: Incorrect Access of Indexable Resource
gtk-vnc before 0.7.0 does not properly check boundaries of subrectangle-containing tiles, which allows remote servers to execute arbitrary code via the src x, y coordinates in a crafted 1 rre, 2 hextile, or 3 copyrect tile...
Updated gtk-vnc packages fix security vulnerability
It was found that gtk-vnc code does not properly check boundaries of subrectangle-containing tiles. A malicious server can use this to overwrite parts of the client memory CVE-2017-5884. In addition, the vncconnectionservermessage and vnccolormapset functions do not check for integer overflow...
CVE-2017-5884
gtk-vnc before 0.7.0 does not properly check boundaries of subrectangle-containing tiles, which allows remote servers to execute arbitrary code via the src x, y coordinates in a crafted 1 rre, 2 hextile, or 3 copyrect tile...
UBUNTU-CVE-2017-5884
gtk-vnc before 0.7.0 does not properly check boundaries of subrectangle-containing tiles, which allows remote servers to execute arbitrary code via the src x, y coordinates in a crafted 1 rre, 2 hextile, or 3 copyrect tile...
PT-2017-16735
Name of the Vulnerable Software and Affected Versions gtk-vnc versions prior to 0.7.0 Description The issue arises from improper boundary checking of subrectangle-containing tiles, allowing remote servers to execute arbitrary code. This can be achieved by crafting specific tiles, including rre,...
CVE-2016-3173
An issue was discovered in Open-Xchange OX AppSuite before 7.8.0-rev27. The aria-label parameter of tiles at the Portal can be used to inject script code. Those labels use the name of the file e.g. an image which gets displayed at the portal application. Using script code at the file name leads t...
DEBIAN-CVE-2016-9539
tools/tiffcrop.c in libtiff 4.0.6 has an out-of-bounds read in readContigTilesIntoBuffer. Reported as MSVR 35092...
UBUNTU-CVE-2016-9539
tools/tiffcrop.c in libtiff 4.0.6 has an out-of-bounds read in readContigTilesIntoBuffer. Reported as MSVR 35092...
CVE-2016-3991
Heap-based buffer overflow in the loadImage function in the tiffcrop tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service out-of-bounds write or execute arbitrary code via a crafted TIFF image with zero tiles...
Piano Tiles - Dynamic Code Loading, External URLs, Unsafe deleting vulnerabilities
HackApp vulnerability scanner discovered that application Piano Tiles published at the 'play' market has multiple vulnerabilities...
Crazy Piano Tiles - Dynamic Code Loading, External URLs, Suspicious files vulnerabilities
HackApp vulnerability scanner discovered that application Crazy Piano Tiles published at the 'play' market has multiple vulnerabilities...
Piano Tiles - Dynamic Code Loading, External URLs, Native code usage vulnerabilities
HackApp vulnerability scanner discovered that application Piano Tiles published at the 'play' market has multiple vulnerabilities...
Ultra EDM White Drum Tiles! - Customized SSL, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Ultra EDM White Drum Tiles! published at the 'play' market has multiple vulnerabilities...
Mega Piano tiles - Dynamic Code Loading, External URLs, Unsafe deleting vulnerabilities
HackApp vulnerability scanner discovered that application Mega Piano tiles published at the 'play' market has multiple vulnerabilities...
Rainbow Rock Tiles Guitar Tabs - Customized SSL, Redefined SSL Common Names verifier, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Rainbow Rock Tiles Guitar Tabs published at the 'play' market has multiple vulnerabilities...
Piano Tiles - Dynamic Code Loading, External URLs, SD-card access vulnerabilities
HackApp vulnerability scanner discovered that application Piano Tiles published at the 'play' market has multiple vulnerabilities...
Piano Tiles - Dynamic Code Loading, External URLs, SD-card access vulnerabilities
HackApp vulnerability scanner discovered that application Piano Tiles published at the 'play' market has multiple vulnerabilities...
Piano Tiles Music Game - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities
HackApp vulnerability scanner discovered that application Piano Tiles Music Game published at the 'play' market has multiple vulnerabilities...
Piano Tiles Electric - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Piano Tiles Electric published at the 'play' market has multiple vulnerabilities...