CVE-2012-1182

samba: Multiple heap-based buffer overflows in memory management based on NDR marshalling code output

The RPC code generator in Samba 3.x before 3.4.16, 3.5.x before 3.5.14, and 3.6.x before 3.6.4 does not implement validation of an array length in a manner consistent with validation of array memory allocation, which allows remote attackers to execute arbitrary code via a crafted RPC call.

CVSS 2.0 · 10.0 Critical EPSS 74.4% KEV · Not listed

Vendors

Redhat Samba

Products

Enterprise Linux Rhel Els Rhel Eus and 2 more

CVE-2012-1595

wireshark: Heap-based buffer overflow when reading ERF packets from pcap/pcap-ng trace files

The pcap_process_pseudo_header function in wiretap/pcap-common.c in Wireshark 1.4.x before 1.4.12 and 1.6.x before 1.6.6 allows remote attackers to cause a denial of service (application crash) via a WTAP_ENCAP_ERF file containing an Extension or Multi-Channel header with an invalid pseudoheader size, related to the pcap and pcap-ng file parsers.

CVSS 2.0 · 4.3 Medium EPSS 1.8% KEV · Not listed

Vendors

Redhat Wireshark

Products

Enterprise Linux Wireshark

CVE-2012-2088

libtiff: Type conversion flaw leading to heap-buffer overflow

Integer signedness error in the TIFFReadDirectory function in tif_dirread.c in libtiff 3.9.4 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a negative tile depth in a tiff image, which triggers an improper conversion between signed and unsigned types, leading to a heap-based buffer overflow.

CVSS 2.0 · 7.5 High EPSS 6.5% KEV · Not listed

Vendors

Libtiff Redhat

Products

Libtiff Enterprise Linux

CVE-2012-2113

libtiff: integer overflow in tiff2pdf leading to heap-buffer overflow when reading a tiled tiff file

Multiple integer overflows in tiff2pdf in libtiff before 4.0.2 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted tiff image, which triggers a heap-based buffer overflow.

CVSS 2.0 · 6.8 Medium EPSS 5.5% KEV · Not listed

Vendors

Libtiff Redhat

Products

Libtiff Enterprise Linux

CVE-2012-2763

gimp: Heap-based buffer overflow in the script-fu console by sending overly long arguments to script-fu server

Buffer overflow in the readstr_upto function in plug-ins/script-fu/tinyscheme/scheme.c in GIMP 2.6.12 and earlier, and possibly 2.6.13, allows remote attackers to execute arbitrary code via a long string in a command to the script-fu server.

CVSS 2.0 · 7.5 High EPSS 81.7% KEV · Not listed

Vendors

Gimp

Products

Gimp

CVE-2012-2871

libxslt: Heap-buffer overflow caused by bad cast in XSL transforms

libxml2 2.9.0-rc1 and earlier, as used in Google Chrome before 21.0.1180.89, does not properly support a cast of an unspecified variable during handling of XSL transforms, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted document, related to the _xmlNs data structure in include/libxml/tree.h.

CVSS 2.0 · 6.8 Medium EPSS 2.4% KEV · Not listed

Vendors

Apple Google Redhat and 1 more

Products

Iphone Os Chrome Enterprise Linux and 1 more

CVE-2012-4433

gegl: Integer overflow, leading to heap-based buffer overflow by parsing PPM image headers

Multiple integer overflows in operations/external/ppm-load.c in GEGL (Generic Graphics Library) 0.2.0 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a large (1) width or (2) height value in a Portable Pixel Map (ppm) image, which triggers a heap-based buffer overflow.

CVSS 2.0 · 7.5 High EPSS 13.3% KEV · Not listed

Vendors

Gegl Redhat

Products

Gegl Enterprise Linux

CVE-2012-4447

libtiff: Heap-buffer overflow when processing a TIFF image with PixarLog Compression

Heap-based buffer overflow in tif_pixarlog.c in LibTIFF before 4.0.3 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted TIFF image using the PixarLog Compression format.

CVSS 2.0 · 6.8 Medium EPSS 6.7% KEV · Not listed

Vendors

Libtiff Redhat

Products

Libtiff Enterprise Linux

CVE-2012-4540

icedtea-web: IcedTeaScriptableJavaObject:: invoke off-by-one heap-based buffer overflow

Off-by-one error in the invoke function in IcedTeaScriptablePluginObject.cc in IcedTea-Web 1.1.x before 1.1.7, 1.2.x before 1.2.2, 1.3.x before 1.3.1, and 1.4.x before 1.4.1 allows remote attackers to obtain sensitive information, cause a denial of service (crash), or possibly execute arbitrary code via a crafted webpage that triggers a heap-based buffer overflow, related to an error message and a "triggering event attached to applet." NOTE: the 1.4.x versions were originally associated with CVE-2013-4349, but that entry has been MERGED with this one.

CVSS 2.0 · 6.8 Medium EPSS 3.4% KEV · Not listed

Vendors

Opensuse Redhat

Products

Opensuse Enterprise Linux Icedtea-web

CVE-2012-4564

libtiff: Missing return value check in ppm2tiff leading to heap-buffer overflow when reading a tiff file

ppm2tiff does not check the return value of the TIFFScanlineSize function, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PPM image that triggers an integer overflow, a zero-memory allocation, and a heap-based buffer overflow.

CVSS 2.0 · 6.8 Medium EPSS 13.5% KEV · Not listed

Vendors

Canonical Debian Libtiff and 2 more

Products

Ubuntu Linux Debian Linux Libtiff and 6 more

CVE-2012-5612

mysql: MDL subsystem heap-based buffer overflow

Heap-based buffer overflow in Oracle MySQL 5.5.19 and other versions through 5.5.28, and MariaDB 5.5.28a and possibly other versions, allows remote authenticated users to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code, as demonstrated using certain variations of the (1) USE, (2) SHOW TABLES, (3) DESCRIBE, (4) SHOW FIELDS FROM, (5) SHOW COLUMNS FROM, (6) SHOW INDEX FROM, (7) CREATE TABLE, (8) DROP TABLE, (9) ALTER TABLE, (10) DELETE FROM, (11) UPDATE, and (12) SET PASSWORD commands.

CVSS 2.0 · 6.5 Medium EPSS 21.0% KEV · Not listed

Vendors

Canonical Mariadb Oracle and 1 more

Products

Ubuntu Linux Mariadb Mysql and 3 more

CVE-2013-6045

openjpeg: heap-based buffer overflows

Multiple heap-based buffer overflows in OpenJPEG 1.3 and earlier might allow remote attackers to execute arbitrary code via unspecified vectors.

CVSS 3.0 · 7.5 High EPSS 5.5% KEV · Not listed

Vendors

Redhat Uclouvain

Products

Enterprise Linux Openjpeg

CVE-2013-6054

openjpeg: heap-based buffer overflows in version 1.3

Heap-based buffer overflow in OpenJPEG 1.3 has unspecified impact and remote vectors, a different vulnerability than CVE-2013-6045.

CVSS 2.0 · 7.5 High EPSS 2.2% KEV · Not listed

Vendors

Redhat Uclouvain

Products

Enterprise Linux Openjpeg

CVE-2013-6393

libyaml: heap-based buffer overflow when parsing YAML tags

The yaml_parser_scan_tag_uri function in scanner.c in LibYAML before 0.1.5 performs an incorrect cast, which allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted tags in a YAML document, which triggers a heap-based buffer overflow.

CVSS 2.0 · 6.8 Medium EPSS 7.4% KEV · Not listed

Vendors

Canonical Debian Opensuse and 2 more

Products

Ubuntu Linux Debian Linux Leap and 5 more

CVE-2013-6485

pidgin: Heap-based buffer overflow when parsing chunked HTTP responses

Buffer overflow in util.c in libpurple in Pidgin before 2.10.8 allows remote HTTP servers to cause a denial of service (application crash) or possibly have unspecified other impact via an invalid chunk-size field in chunked transfer-coding data.

CVSS 2.0 · 5.0 Medium EPSS 2.4% KEV · Not listed

Vendors

Pidgin Redhat

Products

Pidgin Enterprise Linux

CVE-2013-6487

pidgin: Heap-based buffer overflow in Gadu-Gadu protocol plugin

Integer overflow in libpurple/protocols/gg/lib/http.c in the Gadu-Gadu (gg) parser in Pidgin before 2.10.8 allows remote attackers to have an unspecified impact via a large Content-Length value, which triggers a buffer overflow.

CVSS 2.0 · 7.5 High EPSS 8.2% KEV · Not listed

Vendors

Pidgin Redhat

Products

Pidgin Enterprise Linux

CVE-2013-6489

pidgin: Heap-based buffer overflow in MXit emoticon parsing

Integer signedness error in the MXit functionality in Pidgin before 2.10.8 allows remote attackers to cause a denial of service (segmentation fault) via a crafted emoticon value, which triggers an integer overflow and a buffer overflow.

CVSS 2.0 · 5.0 Medium EPSS 5.8% KEV · Not listed

Vendors

Pidgin Redhat

Products

Pidgin Enterprise Linux

CVE-2013-6490

pidgin: Heap-based buffer overflow in SIMPLE protocol plugin

The SIMPLE protocol functionality in Pidgin before 2.10.8 allows remote attackers to have an unspecified impact via a negative Content-Length header, which triggers a buffer overflow.

CVSS 2.0 · 10.0 Critical EPSS 14.8% KEV · Not listed

Vendors

Pidgin Redhat

Products

Pidgin Enterprise Linux

CVE-2013-6712

php: heap-based buffer over-read in DateInterval

The scan function in ext/date/lib/parse_iso_intervals.c in PHP through 5.5.6 does not properly restrict creation of DateInterval objects, which might allow remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted interval specification.

CVSS 2.0 · 5.0 Medium EPSS 4.6% KEV · Not listed

Vendors

Apple Canonical Debian and 3 more

Products

Mac Os X Ubuntu Linux Debian Linux and 4 more

CVE-2013-6885

hw: AMD CPU erratum may cause core hang

The microcode on AMD 16h 00h through 0Fh processors does not properly handle the interaction between locked instructions and write-combined memory types, which allows local users to cause a denial of service (system hang) via a crafted application, aka the errata 793 issue.

CVSS 2.0 · 4.7 Medium EPSS < 1% KEV · Not listed

Vendors

Amd Redhat

Products

16h Model 00h Processor 16h Model 0fh Processor 16h Model Processor Firmware and 1 more