RSS   Podatności dla 'Libmobi'   RSS

2021-10-19
 
CVE-2021-3888

CWE-119
 

 
libmobi is vulnerable to Use of Out-of-range Pointer Offset

 
 
CVE-2021-3889

CWE-119
 

 
libmobi is vulnerable to Use of Out-of-range Pointer Offset

 
2021-10-15
 
CVE-2021-3881

CWE-125
 

 
libmobi is vulnerable to Out-of-bounds Read

 
2018-06-19
 
CVE-2018-11726

CWE-119
 

 
The mobi_decode_font_resource function in util.c in Libmobi 0.3 allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted mobi file.

 
 
CVE-2018-11725

CWE-125
 

 
The mobi_parse_index_entry function in index.c in Libmobi 0.3 allows remote attackers to cause an information disclosure (heap-based buffer over-read) via a crafted mobi file.

 
 
CVE-2018-11724

CWE-125
 

 
The mobi_pk1_decrypt function in encryption.c in Libmobi 0.3 allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted mobi file.

 
2018-05-30
 
CVE-2018-11438

CWE-119
 

 
The mobi_decompress_lz77 function in compression.c in Libmobi 0.3 allows remote attackers to cause remote code execution (heap-based buffer overflow) via a crafted mobi file.

 
 
CVE-2018-11437

CWE-200
 

 
The mobi_reconstruct_parts function in parse_rawml.c in Libmobi 0.3 allows remote attackers to cause information disclosure (read access violation) via a crafted mobi file.

 
 
CVE-2018-11436

CWE-125
 

 
The buffer_addraw function in buffer.c in Libmobi 0.3 allows remote attackers to cause information disclosure (heap-based buffer over-read) via a crafted mobi file.

 
 
CVE-2018-11435

CWE-200
 

 
The mobi_decompress_huffman_internal function in compression.c in Libmobi 0.3 allows remote attackers to cause information disclosure (read access violation) via a crafted mobi file.

 


Copyright 2021, cxsecurity.com

 

Back to Top