Vulnerabilities > GNU > Libextractor > 1.5

DATE CVE VULNERABILITY TITLE RISK
2019-08-23 CVE-2019-15531 Out-of-bounds Read vulnerability in multiple products
GNU Libextractor through 1.9 has a heap-based buffer over-read in the function EXTRACTOR_dvi_extract_method in plugins/dvi_extractor.c.
network
low complexity
gnu debian fedoraproject CWE-125
6.5
2018-12-24 CVE-2018-20431 NULL Pointer Dereference vulnerability in multiple products
GNU Libextractor through 1.8 has a NULL Pointer Dereference vulnerability in the function process_metadata() in plugins/ole2_extractor.c.
network
gnu debian CWE-476
4.3
2018-12-24 CVE-2018-20430 Out-of-bounds Read vulnerability in multiple products
GNU Libextractor through 1.8 has an out-of-bounds read vulnerability in the function history_extract() in plugins/ole2_extractor.c, related to EXTRACTOR_common_convert_to_utf8 in common/convert.c.
network
gnu debian CWE-125
4.3
2018-09-04 CVE-2018-16430 Out-of-bounds Read vulnerability in multiple products
GNU Libextractor through 1.7 has an out-of-bounds read vulnerability in EXTRACTOR_zip_extract_method() in zip_extractor.c.
network
gnu debian CWE-125
6.8
2018-07-17 CVE-2018-14347 Infinite Loop vulnerability in multiple products
GNU Libextractor before 1.7 contains an infinite loop vulnerability in EXTRACTOR_mpeg_extract_method (mpeg_extractor.c).
network
debian gnu CWE-835
4.3
2018-07-17 CVE-2018-14346 Out-of-bounds Write vulnerability in multiple products
GNU Libextractor before 1.7 has a stack-based buffer overflow in ec_read_file_func (unzip.c).
network
debian gnu CWE-787
6.8