Vulnerabilities

DATE CVE VULNERABILITY TITLE RISK
2017-03-23 CVE-2016-9389 Unspecified vulnerability in Jasper Project Jasper
The jpc_irct and jpc_iict functions in jpc_mct.c in JasPer before 1.900.14 allow remote attackers to cause a denial of service (assertion failure).
network
low complexity
jasper-project
7.5
2017-03-23 CVE-2016-9388 Reachable Assertion vulnerability in multiple products
The ras_getcmap function in ras_dec.c in JasPer before 1.900.14 allows remote attackers to cause a denial of service (assertion failure) via a crafted image file.
local
low complexity
jasper-project canonical CWE-617
5.5
2017-03-23 CVE-2016-9387 Integer Overflow or Wraparound vulnerability in Jasper Project Jasper
Integer overflow in the jpc_dec_process_siz function in libjasper/jpc/jpc_dec.c in JasPer before 1.900.13 allows remote attackers to have unspecified impact via a crafted file, which triggers an assertion failure.
local
low complexity
jasper-project CWE-190
7.8
2017-03-23 CVE-2016-9276 Out-of-bounds Read vulnerability in Libdwarf Project Libdwarf
The dwarf_get_aranges_list function in dwarf_arrange.c in Libdwarf before 20161124 allows remote attackers to cause a denial of service (out-of-bounds read).
network
low complexity
libdwarf-project CWE-125
7.5
2017-03-23 CVE-2016-9275 Out-of-bounds Write vulnerability in Libdwarf Project Libdwarf
Heap-based buffer overflow in the _dwarf_skim_forms function in libdwarf/dwarf_macro5.c in Libdwarf before 20161124 allows remote attackers to cause a denial of service (out-of-bounds read).
network
low complexity
libdwarf-project CWE-787
7.5
2017-03-23 CVE-2016-9266 Numeric Errors vulnerability in Libming 0.4.7
listmp3.c in libming 0.4.7 allows remote attackers to unspecified impact via a crafted mp3 file, which triggers an invalid left shift.
network
low complexity
libming CWE-189
6.5
2017-03-23 CVE-2016-9265 Divide By Zero vulnerability in Libming 0.4.7
The printMP3Headers function in listmp3.c in Libming 0.4.7 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted mp3 file.
local
low complexity
libming CWE-369
5.5
2017-03-23 CVE-2016-9264 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Libming 0.4.7
Buffer overflow in the printMP3Headers function in listmp3.c in Libming 0.4.7 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted mp3 file.
local
low complexity
libming CWE-119
5.5
2017-03-23 CVE-2016-9262 Integer Overflow or Wraparound vulnerability in Jasper Project Jasper
Multiple integer overflows in the (1) jas_realloc function in base/jas_malloc.c and (2) mem_resize function in base/jas_stream.c in JasPer before 1.900.22 allow remote attackers to cause a denial of service via a crafted image, which triggers use after free vulnerabilities.
local
low complexity
jasper-project CWE-190
5.5
2017-03-23 CVE-2016-9011 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Wvware Libwmf 0.2.8.4
The wmf_malloc function in api.c in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (application crash) via a crafted wmf file, which triggers a memory allocation failure.
local
low complexity
wvware CWE-119
5.5