CVE Vulnerability Catalog

Off-by-one error in the t2p_readwrite_pdf_image_tile function in tools/tiff2pdf.c in LibTIFF 4.0.7 allows remote attackers to have unspecified impact via a crafted image.

Integer overflow in tools/tiffcp.c in LibTIFF versions 4.0.7 and 3.9.x allows remote attackers to have unspecified impact via a crafted image, leading to a heap-based buffer overflow.

Heap-based buffer overflow in the readContigStripsIntoBuffer function in tif_unix.c in LibTIFF allows remote attackers to have unspecified impact via a crafted image. Versions 4.0.7 and 3.9.x up to 4.0.6 are affected.

The Intel PSET Application Install wrapper in Intel Parallel Studio XE and other products before 2017 Update 2 allows an attacker to launch a process with escalated privileges.

A directory traversal vulnerability in the Chorus2 2.4.2 add-on for Kodi allows remote attackers to read arbitrary files via an encoded sequence %2E%2E%252e in the image path.

In versions of gtk-vnc before 0.7.0, the boundaries of subrectangle-containing tiles are not properly checked, allowing remote servers to execute arbitrary code via manipulated x, y coordinates in crafted rre, hextile, or copyrect tiles.

The Xvnc server in TigerVNC allows remote attackers to cause a denial of service by terminating a TLS handshake early, leading to invalid memory access and server crash.

A heap corruption vulnerability exists in the loadTrailer functionality of Iceni Argus version 6.6.05. A specially crafted PDF file can cause a heap corruption resulting in arbitrary code execution.

An exploitable integer-overflow vulnerability exists within Iceni Argus when converting a malformed PDF to XML. The application attempts to convert each character from a font into a polygon, leading to writing outside the bounds of the buffer.

An exploitable arbitrary heap-overwrite vulnerability exists within Iceni Argus. The issue arises when converting a malformed PDF to XML, as the software trusts an index within the font object and uses it to write the font's name to an object within an array.

There is a heap-based buffer overflow vulnerability in Iceni Argus that can be exploited. The issue occurs when converting a malformed PDF, leading to a lack of bounds checking by the LZW decoder.

There is a heap-based buffer overflow vulnerability in Iceni Argus that can be exploited. The issue occurs when converting a PDF with a malformed font to XML, leading to a buffer smaller than the requested size being returned.

An exploitable uninitialized variable vulnerability leading to a stack-based buffer overflow exists in Iceni Argus. The issue occurs when converting a malformed PDF to XML, allowing an attacker to write outside the bounds of a stack buffer.

A non-privileged user of the Siemens web application RUGGEDCOM NMS < V1.2 on port 8080/TCP and 8081/TCP could perform a persistent Cross-Site Scripting (XSS) attack, potentially resulting in obtaining administrative permissions.

The Siemens web application RUGGEDCOM NMS version below 1.2 on ports 8080/TCP and 8081/TCP is vulnerable to a Cross-Site Request Forgery (CSRF) attack. An attacker could perform administrative operations if the targeted user has an active session and is induced to trigger a malicious request.

The web interface on Dahua DHI-HCVR7216A-S3 devices with specified firmware versions allows remote attackers to gain login access by leveraging knowledge of the MD5 Admin Hash without knowing the corresponding password.

Side-channel attacks on MMU operations in modern ARM processors can lead to the leakage of data and code pointers from JavaScript, breaking ASLR.

A side-channel attack on MMU operations in modern AMD processors can lead to the leakage of data and code pointers from JavaScript, breaking ASLR.

A side-channel attack on MMU operations in modern Intel processors can lead to the leakage of data and code pointers from JavaScript, breaking ASLR.