|
256211
|
7.5 |
HIGH
Network
|
jasper_project
|
jasper
|
There is an infinite loop in the jpc_dec_tileinit function in jpc/jpc_dec.c of Jasper 2.0.13. It will lead to a remote denial of service attack.
|
CWE-835
Loop with Unreachable Exit Condition ('Infinite Loop')
|
CVE-2017-14229
|
2024-11-21 12:12 |
2017-09-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
256212
|
5.5 |
MEDIUM
Local
|
nasm
canonical
|
netwide_assembler
ubuntu_linux
|
In Netwide Assembler (NASM) 2.14rc0, there is an illegal address access in the function paste_tokens() in preproc.c, aka a NULL pointer dereference. It will lead to remote denial of service.
|
CWE-476
NULL Pointer Dereference
|
CVE-2017-14228
|
2024-11-21 12:12 |
2017-09-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
256213
|
7.5 |
HIGH
Network
|
mongodb
|
mongodb
|
In MongoDB libbson 1.7.0, the bson_iter_codewscope function in bson-iter.c miscalculates a bson_utf8_validate length argument, which allows remote attackers to cause a denial of service (heap-based b…
|
CWE-125
Out-of-bounds Read
|
CVE-2017-14227
|
2024-11-21 12:12 |
2017-09-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
256214
|
7.5 |
HIGH
Network
|
libreoffice
libwpd
|
libreoffice
libwpd
|
WP1StylesListener.cpp, WP5StylesListener.cpp, and WP42StylesListener.cpp in libwpd 0.10.1 mishandle iterators, which allows remote attackers to cause a denial of service (heap-based buffer over-read …
|
CWE-125
Out-of-bounds Read
|
CVE-2017-14226
|
2024-11-21 12:12 |
2017-09-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
256215
|
8.8 |
HIGH
Network
|
ffmpeg
|
ffmpeg
|
The av_color_primaries_name function in libavutil/pixdesc.c in FFmpeg 3.3.3 may return a NULL pointer depending on a value contained in a file, but callers do not anticipate this, as demonstrated by …
|
CWE-476
NULL Pointer Dereference
|
CVE-2017-14225
|
2024-11-21 12:12 |
2017-09-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
256216
|
8.8 |
HIGH
Network
|
imagemagick
|
imagemagick
|
A heap-based buffer overflow in WritePCXImage in coders/pcx.c in ImageMagick 7.0.6-8 Q16 allows remote attackers to cause a denial of service or code execution via a crafted file.
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2017-14224
|
2024-11-21 12:12 |
2017-09-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
256217
|
6.5 |
MEDIUM
Network
|
ffmpeg
debian
|
ffmpeg
debian_linux
|
In libavformat/asfdec_f.c in FFmpeg 3.3.3, a DoS in asf_build_simple_index() due to lack of an EOF (End of File) check might cause huge CPU consumption. When a crafted ASF file, which claims a large …
|
CWE-400
Uncontrolled Resource Consumption
|
CVE-2017-14223
|
2024-11-21 12:12 |
2017-09-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
256218
|
6.5 |
MEDIUM
Network
|
ffmpeg
|
ffmpeg
|
In libavformat/mov.c in FFmpeg 3.3.3, a DoS in read_tfra() due to lack of an EOF (End of File) check might cause huge CPU and memory consumption. When a crafted MOV file, which claims a large "item_c…
|
CWE-834
Excessive Iteration
|
CVE-2017-14222
|
2024-11-21 12:12 |
2017-09-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
256219
|
8.8 |
HIGH
Local
|
qemu
debian
|
qemu
debian_linux
|
Integer overflow in the load_multiboot function in hw/i386/multiboot.c in QEMU (aka Quick Emulator) allows local guest OS users to execute arbitrary code on the host via crafted multiboot header addr…
|
CWE-190
Integer Overflow or Wraparound
|
CVE-2017-14167
|
2024-11-21 12:12 |
2017-09-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
256220
|
6.1 |
MEDIUM
Network
|
intelbras
|
wrn_240_firmware
|
XSS (persistent) on the Intelbras Wireless N 150Mbps router with firmware WRN 240 allows attackers to steal wireless credentials without being connected to the network, related to userRpm/popupSiteSu…
|
CWE-79
Cross-site Scripting
|
CVE-2017-14219
|
2024-11-21 12:12 |
2017-09-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
