# CVEs published 2017-07-23 35 CVEs were published on July 23, 2017: 0 critical, 0 high. Days are UTC. - [CVE-2017-11568](https://cve.now/CVE-2017-11568.md): FontForge 20161012 is vulnerable to a heap-based buffer over-read in PSCharStringToSplines (psread.c) resulting in DoS or code execution via (no CVSS) - [CVE-2017-11569](https://cve.now/CVE-2017-11569.md): FontForge 20161012 is vulnerable to a heap-based buffer over-read in readttfcopyrights (parsettf.c) resulting in DoS or code execution via a (no CVSS) - [CVE-2017-11570](https://cve.now/CVE-2017-11570.md): FontForge 20161012 is vulnerable to a buffer over-read in umodenc (parsettf.c) resulting in DoS or code execution via a crafted otf file. (no CVSS) - [CVE-2017-11571](https://cve.now/CVE-2017-11571.md): FontForge 20161012 is vulnerable to a stack-based buffer overflow in addnibble (parsettf.c) resulting in DoS or code execution via a crafted (no CVSS) - [CVE-2017-11572](https://cve.now/CVE-2017-11572.md): FontForge 20161012 is vulnerable to a heap-based buffer over-read in readcfftopdicts (parsettf.c) resulting in DoS or code execution via a c (no CVSS) - [CVE-2017-11573](https://cve.now/CVE-2017-11573.md): FontForge 20161012 is vulnerable to a buffer over-read in ValidatePostScriptFontName (parsettf.c) resulting in DoS or code execution via a c (no CVSS) - [CVE-2017-11574](https://cve.now/CVE-2017-11574.md): FontForge 20161012 is vulnerable to a heap-based buffer overflow in readcffset (parsettf.c) resulting in DoS or code execution via a crafted (no CVSS) - [CVE-2017-11575](https://cve.now/CVE-2017-11575.md): FontForge 20161012 is vulnerable to a buffer over-read in strnmatch (char.c) resulting in DoS or code execution via a crafted otf file, rela (no CVSS) - [CVE-2017-11576](https://cve.now/CVE-2017-11576.md): FontForge 20161012 does not ensure a positive size in a weight vector memcpy call in readcfftopdict (parsettf.c) resulting in DoS via a craf (no CVSS) - [CVE-2017-11577](https://cve.now/CVE-2017-11577.md): FontForge 20161012 is vulnerable to a buffer over-read in getsid (parsettf.c) resulting in DoS or code execution via a crafted otf file. (no CVSS) - [CVE-2017-11565](https://cve.now/CVE-2017-11565.md): debian/tor.init in the Debian tor\_0.2.9.11-1~deb9u1 package for Tor was designed to execute aa-exec from the standard system pathname if the (no CVSS) - [CVE-2017-11524](https://cve.now/CVE-2017-11524.md): The WriteBlob function in MagickCore/blob.c in ImageMagick before 6.9.8-10 and 7.x before 7.6.0-0 allows remote attackers to cause a denial (no CVSS) - [CVE-2017-11525](https://cve.now/CVE-2017-11525.md): The ReadCINImage function in coders/cin.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of (no CVSS) - [CVE-2017-11526](https://cve.now/CVE-2017-11526.md): The ReadOneMNGImage function in coders/png.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial (no CVSS) - [CVE-2017-11527](https://cve.now/CVE-2017-11527.md): The ReadDPXImage function in coders/dpx.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of (no CVSS) - [CVE-2017-11528](https://cve.now/CVE-2017-11528.md): The ReadDIBImage function in coders/dib.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of (no CVSS) - [CVE-2017-11529](https://cve.now/CVE-2017-11529.md): The ReadMATImage function in coders/mat.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of (no CVSS) - [CVE-2017-11530](https://cve.now/CVE-2017-11530.md): The ReadEPTImage function in coders/ept.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of (no CVSS) - [CVE-2017-11531](https://cve.now/CVE-2017-11531.md): When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the WriteHISTOGRAMImage() function in coders/h (no CVSS) - [CVE-2017-11532](https://cve.now/CVE-2017-11532.md): When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the WriteMPCImage() function in coders/mpc.c. (no CVSS) - [CVE-2017-11533](https://cve.now/CVE-2017-11533.md): When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a heap-based buffer over-read in the WriteUILImage() function i (no CVSS) - [CVE-2017-11534](https://cve.now/CVE-2017-11534.md): When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the lite\_font\_map() function in coders/wmf.c. (no CVSS) - [CVE-2017-11535](https://cve.now/CVE-2017-11535.md): When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a heap-based buffer over-read in the WritePSImage() function in (no CVSS) - [CVE-2017-11536](https://cve.now/CVE-2017-11536.md): When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the WriteJP2Image() function in coders/jp2.c. (no CVSS) - [CVE-2017-11537](https://cve.now/CVE-2017-11537.md): When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Floating Point Exception (FPE) in the WritePALMImage() functi (no CVSS) - [CVE-2017-11538](https://cve.now/CVE-2017-11538.md): When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the WriteOnePNGImage() function in coders/png. (no CVSS) - [CVE-2017-11539](https://cve.now/CVE-2017-11539.md): When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the ReadOnePNGImage() function in coders/png.c (no CVSS) - [CVE-2017-11540](https://cve.now/CVE-2017-11540.md): When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a heap-based buffer over-read in the GetPixelIndex() function, (no CVSS) - [CVE-2017-11541](https://cve.now/CVE-2017-11541.md): tcpdump 4.9.0 has a heap-based buffer over-read in the lldp\_print function in print-lldp.c, related to util-print.c. (no CVSS) - [CVE-2017-11542](https://cve.now/CVE-2017-11542.md): tcpdump 4.9.0 has a heap-based buffer over-read in the pimv1\_print function in print-pim.c. (no CVSS) - [CVE-2017-11543](https://cve.now/CVE-2017-11543.md): tcpdump 4.9.0 has a buffer overflow in the sliplink\_print function in print-sl.c. (no CVSS) - [CVE-2017-11553](https://cve.now/CVE-2017-11553.md): There is an illegal address access in the extend\_alias\_table function in localealias.c of Exiv2 0.26. (no CVSS) - [CVE-2017-11554](https://cve.now/CVE-2017-11554.md): There is a stack consumption vulnerability in the lex function in parser.hpp (as used in sassc) in LibSass 3.4.5. (no CVSS) - [CVE-2017-11555](https://cve.now/CVE-2017-11555.md): There is an illegal address access in the Eval::operator function in eval.cpp in LibSass 3.4.5. (no CVSS) - [CVE-2017-11556](https://cve.now/CVE-2017-11556.md): There is a stack consumption vulnerability in the Parser::advanceToNextToken function in parser.cpp in LibSass 3.4.5. (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2017-07-23 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.