5348 matches found
CVE-2022-35095
SWFTools commit 772e55a2 was discovered to contain a segmentation violation via InfoOutputDev::type3D1 at /pdf/InfoOutputDev.cc...
CVE-2022-35097
SWFTools commit 772e55a2 was discovered to contain a segmentation violation via FoFiTrueType::writeTTF at /xpdf/FoFiTrueType.cc...
CVE-2022-35097
SWFTools commit 772e55a2 was discovered to contain a segmentation violation via FoFiTrueType::writeTTF at /xpdf/FoFiTrueType.cc...
CVE-2022-35097
CVE-2022-35097 affects SWFTools and is due to a segmentation violation in FoFiTrueType::writeTTF (file /xpdf/FoFiTrueType.cc). The impact described in sources aligns with a local exploit vector and a availability impact, with CVSSv3.1 vector AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H (base 5.5, MEDIUM)....
CVE-2022-35095
SWFTools commit 772e55a2 was discovered to contain a segmentation violation via InfoOutputDev::type3D1 at /pdf/InfoOutputDev.cc...
CVE-2022-35095
CVE-2022-35095 involves SWFTools and a segmentation violation in the InfoOutputDev::type3D1 path (file: /pdf/InfoOutputDev.cc). The issue is triggered within the SWFTools component named InfoOutputDev and is described across multiple sources as a segmentation fault, with no public details on an o...
CVE-2022-35092
SWFTools commit 772e55a2 was discovered to contain a segmentation violation via convertgfxline at /gfxpoly/convert.c...
CVE-2022-35092
CVE-2022-35092 affects SWFTools, with a segmentation violation reported in convert_gfxline() under /gfxpoly/convert.c. The Red Hat/RedHat and other feeds repeat the issue but do not publish explicit affected versions in the provided documents. No details on exploit vectors, preconditions, or avai...
EulerOS Virtualization 2.9.1 : ncurses (EulerOS-SA-2022-2356)
According to the versions of the ncurses packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convertstrings in tinfo/readentry.c in...
EulerOS Virtualization 2.9.1 : freetype (EulerOS-SA-2022-2343)
According to the versions of the freetype package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - FreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f was discovered to contain a heap buffer overflow via the function...
PT-2022-22566 · Swftools · Swftools
Name of the Vulnerable Software and Affected Versions: SWFTools affected versions not specified Description: A segmentation violation was discovered in SWFTools via the FoFiTrueType::writeTTF function at /xpdf/FoFiTrueType.cc. Recommendations: At the moment, there is no information about a newer...
SUSE SLES15 Security Update : freetype2 (SUSE-SU-2022:3252-2)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3252-2 advisory. - CVE-2022-27404 Fixed a segmentation fault via a crafted typeface bsc1198830. - CVE-2022-27405 Fixed a buffer overflow via a craft...
PT-2022-22564 · Swftools · Swftools
Name of the Vulnerable Software and Affected Versions: SWFTools affected versions not specified Description: A segmentation violation was discovered in SWFTools via the InfoOutputDev::type3D1 function at /pdf/InfoOutputDev.cc. This issue affects the InfoOutputDev component. Recommendations: At th...
The vulnerability of the Ghostscript software for document processing lies in the fact that operations are performed outside the buffer in memory. This allows attackers to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the Ghostscript document processing software lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service failures...
The vulnerability of the Libjpeg-turbo image processing library, related to writing beyond the buffer boundaries, allows attackers to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the Libjpeg-turbo library for image processing is related to improper compression/decompression of gigapixel images. Exploiting this vulnerability allows a remote attacker to access confidential data, compromise its integrity, and cause service interruptions...
CVE-2022-35030
OTFCC commit 617837b was discovered to contain a segmentation violation via /release-x64/otfccdump+0x4fe954...
CVE-2022-35032
OTFCC commit 617837b was discovered to contain a segmentation violation via /release-x64/otfccdump+0x6b6a8f...
CVE-2022-35032
OTFCC commit 617837b was discovered to contain a segmentation violation via /release-x64/otfccdump+0x6b6a8f...