892 matches found
CVE-2013-2126: Undefined Security Weakness
Multiple double free vulnerabilities in the LibRaw::unpack function in librawcxx.cpp in LibRaw before 0.15.2 allow context-dependent attackers to cause a denial of service application crash and possibly execute arbitrary code via a malformed full-color 1 Foveon or 2 sRAW image file...
PT-2013-4558
Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 1.2.1 Description The issue is related to the rle unpack function in vmdav.c in libavcodec, which does not properly use the bytestream2 API. This allows remote attackers to cause a denial of service, resulting in...
PT-2013-1245
Name of the Vulnerable Software and Affected Versions LibRaw versions prior to 0.15.4 LibRaw versions prior to 0.15.2 Description The issue concerns multiple vulnerabilities in the libraw package, which can be exploited remotely, potentially leading to breaches of confidentiality, integrity, and...
CVE-2013-2126
Multiple double free vulnerabilities in the LibRaw::unpack function in librawcxx.cpp in LibRaw before 0.15.2 allow context-dependent attackers to cause a denial of service application crash and possibly execute arbitrary code via a malformed full-color 1 Foveon or 2 sRAW image file...
UBUNTU-CVE-2013-2126
Multiple double free vulnerabilities in the LibRaw::unpack function in librawcxx.cpp in LibRaw before 0.15.2 allow context-dependent attackers to cause a denial of service application crash and possibly execute arbitrary code via a malformed full-color 1 Foveon or 2 sRAW image file...
msgpack-python
MessagePack for Python !Build Statushttps://github.com/ms...
minitar
minitar !RubyGems Versionshield-gemsrubygems !Covera...
PHP unpack()函数中断处理信息泄露漏洞
CVE ID: CVE-2010-2191 PHP是广泛使用的通用目的脚本语言，特别适合于Web开发，可嵌入到HTML中。 PHP的unpack函数中存在信息泄露漏洞： char format, input, formatarg, inputarg; int formatlen, formatarglen, inputarglen; int inputpos, inputlen, i; if zendparseparametersZENDNUMARGS TSRMLSCC, "ss", &formatarg, &formatarglen, &inputarg, &inputarglen =...
Memory corruption
The 1 parsestr, 2 pregmatch, 3 unpack, and 4 pack functions; the 5 ZENDFETCHRW, 6 ZENDCONCAT, and 7 ZENDASSIGNCONCAT opcodes; and the 8 ArrayObject::uasort method in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allow context-dependent attackers to obtain sensitive information memory contents or...
CVE-2010-2191
The 1 parsestr, 2 pregmatch, 3 unpack, and 4 pack functions; the 5 ZENDFETCHRW, 6 ZENDCONCAT, and 7 ZENDASSIGNCONCAT opcodes; and the 8 ArrayObject::uasort method in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allow context-dependent attackers to obtain sensitive information memory contents or...
CVE-2010-2191
The 1 parsestr, 2 pregmatch, 3 unpack, and 4 pack functions; the 5 ZENDFETCHRW, 6 ZENDCONCAT, and 7 ZENDASSIGNCONCAT opcodes; and the 8 ArrayObject::uasort method in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allow context-dependent attackers to obtain sensitive information memory contents or...
CVE-2010-2191: Improper Restriction of Operations within the Bounds of a Memory Buffer
The 1 parsestr, 2 pregmatch, 3 unpack, and 4 pack functions; the 5 ZENDFETCHRW, 6 ZENDCONCAT, and 7 ZENDASSIGNCONCAT opcodes; and the 8 ArrayObject::uasort method in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allow context-dependent attackers to obtain sensitive information memory contents or...
Design/Logic Flaw
The unpack feature in ClamAV 0.93.3 and earlier allows remote attackers to cause a denial of service segmentation fault via a corrupted LZH file...
DEBIAN-CVE-2008-6845
The unpack feature in ClamAV 0.93.3 and earlier allows remote attackers to cause a denial of service segmentation fault via a corrupted LZH file...
CVE-2008-6845
The unpack feature in ClamAV 0.93.3 and earlier allows remote attackers to cause a denial of service segmentation fault via a corrupted LZH file...
CVE-2008-6845: Undefined Security Weakness
The unpack feature in ClamAV 0.93.3 and earlier allows remote attackers to cause a denial of service segmentation fault via a corrupted LZH file...
OpenJDK Jar200 Decompression buffer overflow (6755943)
Integer overflow in the JAR unpacking utility unpack200 in the unpack library unpack.dll in Java Runtime Environment JRE for Sun JDK and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update 16 and earlier, allows untrusted applications and applets to gain privileges via a Pack200 compressed JA...
Integer overflow
Integer overflow in the JAR unpacking utility unpack200 in the unpack library unpack.dll in Java Runtime Environment JRE for Sun JDK and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update 16 and earlier, allows untrusted applications and applets to gain privileges via a Pack200 compressed JA...
