PT-2017-17907

Name of the Vulnerable Software and Affected Versions IrfanView version 4.44 32bit with FPX Plugin Description The issue is related to an Access Violation and crash when processing a FlashPix .FPX file. Recommendations For IrfanView version 4.44 32bit with FPX Plugin, update to version 4.45 or...

FreeBSD : libsndfile -- multiple vulnerabilities (5a97805e-93ef-4dcb-8d5e-dbcac263bfc2)

NVD reports : In libsndfile before 1.0.28, an error in the 'flacbuffercopy' function flac.c can be exploited to cause a stack-based buffer overflow via a specially crafted FLAC file. In libsndfile before 1.0.28, an error in the 'headerread' function common.c when handling ID3 tags can be exploite...

CVE-2017-4969

The Cloud Controller in Cloud Foundry cf-release versions prior to v255 allows authenticated developer users to exceed memory and disk quotas for tasks...

Code injection

In libsndfile before 1.0.28, an error in the "flacbuffercopy" function flac.c can be exploited to cause a segmentation violation with write memory access via a specially crafted FLAC file during a resample attempt, a similar issue to CVE-2017-7585...

Code injection

In libsndfile before 1.0.28, an error in the "flacbuffercopy" function flac.c can be exploited to cause a segmentation violation with read memory access via a specially crafted FLAC file during a resample attempt, a similar issue to CVE-2017-7585...

CVE-2017-7742

In libsndfile before 1.0.28, an error in the "flacbuffercopy" function flac.c can be exploited to cause a segmentation violation with read memory access via a specially crafted FLAC file during a resample attempt, a similar issue to CVE-2017-7585...

CVE-2017-7741

In libsndfile before 1.0.28, an error in the "flacbuffercopy" function flac.c can be exploited to cause a segmentation violation with write memory access via a specially crafted FLAC file during a resample attempt, a similar issue to CVE-2017-7585...

CVE-2017-7741

In libsndfile before 1.0.28, an error in the "flacbuffercopy" function flac.c can be exploited to cause a segmentation violation with write memory access via a specially crafted FLAC file during a resample attempt, a similar issue to CVE-2017-7585...

CVE-2017-7742

CVE-2017-7742 affects libsndfile prior to 1.0.28. The issue lies in the flac_buffer_copy() function (flac.c), allowing a specially crafted FLAC file to trigger a segmentation fault via a resample operation (read access). This is the same class of issue as CVE-2017-7585. Public references note the...

CVE-2017-7741

In libsndfile before 1.0.28, an error in the "flacbuffercopy" function flac.c can be exploited to cause a segmentation violation with write memory access via a specially crafted FLAC file during a resample attempt, a similar issue to CVE-2017-7585...

CVE-2017-7742

In libsndfile before 1.0.28, an error in the "flacbuffercopy" function flac.c can be exploited to cause a segmentation violation with read memory access via a specially crafted FLAC file during a resample attempt, a similar issue to CVE-2017-7585...

CVE-2017-7741

CVE-2017-7741 affects libsndfile prior to 1.0.28. The flaw is in flac_buffer_copy() (flac.c) and can cause a segmentation fault with write memory access during a resample of a specially crafted FLAC file, similar to CVE-2017-7585. Connected sources confirm the vulnerability in libsndfile and reco...

CVE-2017-7742

In libsndfile before 1.0.28, an error in the "flacbuffercopy" function flac.c can be exploited to cause a segmentation violation with read memory access via a specially crafted FLAC file during a resample attempt, a similar issue to CVE-2017-7585...

CVE-2017-7742: Improper Restriction of Operations within the Bounds of a Memory Buffer

In libsndfile before 1.0.28, an error in the "flacbuffercopy" function flac.c can be exploited to cause a segmentation violation with read memory access via a specially crafted FLAC file during a resample attempt, a similar issue to CVE-2017-7585...

PT-2017-17920

Name of the Vulnerable Software and Affected Versions libsndfile versions prior to 1.0.28 Description The issue is related to an error in the flac buffer copy function, which can be exploited to cause a segmentation violation with write memory access. This can occur when a specially crafted FLAC...

CVE-2017-7741: Improper Restriction of Operations within the Bounds of a Memory Buffer

In libsndfile before 1.0.28, an error in the "flacbuffercopy" function flac.c can be exploited to cause a segmentation violation with write memory access via a specially crafted FLAC file during a resample attempt, a similar issue to CVE-2017-7585...

PT-2017-17921

Name of the Vulnerable Software and Affected Versions libsndfile versions prior to 1.0.28 Description The issue is related to an error in the flac buffer copy function, which can be exploited to cause a segmentation violation with read memory access via a specially crafted FLAC file during a...

MATESO GmbH Password Safe And Repository Enterprise 7.4.4 Build 2247 SQL Injection Vulnerability

Exploit for multiple platform in category web applications Products: Password Safe and Repository Enterprise Manufacturer: MATESO GmbH Affected Versions: 7.4.4 Build 2247 Tested Versions: 7.4.4 Build 2247 Vulnerability Type: Violation of Secure Design Principles CWE-657 SQL Injection CWE-89 Risk...

Apple WebKit / Safari 10.0.3 (12602.4.8) - Synchronous Page Load Universal Cross-Site Scripting

URL scriptURL; URL url; if protocolIsJavaScripturlString scriptURL = completeURLurlString; // completeURL encodes the URL. url = blankURL; else url = completeURLurlString; if shouldConvertInvalidURLsToBlank && !url.isValid url = blankURL; Frame frame = loadOrRedirectSubframeownerElement, url,...

WebKit: UXSS via a synchronous page load（CVE-2017-2480）

Here's a snippet of the method SubframeLoader::requestFrame which is invoked when the |src| of an iframe object is changed. bool SubframeLoader::requestFrameHTMLFrameOwnerElement& ownerElement, const String& urlString, const AtomicString& frameName, LockHistory lockHistory, LockBackForwardList...