Lucene search
+L

1684 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/20 12:00 a.m.•6 views

CVE-2021-40784: Access of Memory Location After End of Buffer

Adobe Premiere Rush version 1.5.16 and earlier is affected by a memory corruption vulnerability due to insecure handling of a malicious WAV file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability...

7.8CVSS7.8AI score0.02078EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/20 12:00 a.m.•4 views

CVE-2021-43024: Out-of-bounds Write

Adobe Premiere Rush version 1.5.16 and earlier is affected by a memory corruption vulnerability due to insecure handling of a malicious WAV file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability...

9.3CVSS7.8AI score0.02348EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/20 12:00 a.m.•8 views

CVE-2021-43747: Access of Memory Location After End of Buffer

Adobe Premiere Rush version 1.5.16 and earlier is affected by a memory corruption vulnerability due to insecure handling of a malicious WAV file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability...

9.3CVSS7.8AI score0.02348EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/20 12:00 a.m.•5 views

CVE-2021-40783: Access of Memory Location After End of Buffer

Adobe Premiere Rush version 1.5.16 and earlier is affected by a memory corruption vulnerability due to insecure handling of a malicious WAV file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability...

7.8CVSS7.8AI score0.02078EPSS
SaveExploits0References3
Microsoft CVE
Microsoft CVE
•added 2021/12/16 8:00 a.m.•14 views

oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (divide-by-zero error and crash) via a WAV file with the number of channels set to zero.

...

5CVSS7AI score0.03579EPSS
SaveExploits1
Microsoft CVE
Microsoft CVE
•added 2021/12/16 8:00 a.m.•12 views

Integer overflow in oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (crash) via a crafted number of channels in a WAV file which triggers an out-of-bounds memory access.

...

5CVSS7AI score0.03575EPSS
SaveExploits1
Positive Technologies
Positive Technologies
•added 2021/12/14 12:00 a.m.•14 views

PT-2021-5702 · Adobe · Premiere Rush

Name of the Vulnerable Software and Affected Versions: Adobe Premiere Rush versions 1.5.16 and earlier Description: The issue is caused by a memory corruption vulnerability due to insecure handling of a malicious WAV file. This could potentially result in arbitrary code execution in the context o...

9.3CVSS7.7AI score0.02078EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2021/12/14 12:00 a.m.•1 views

PT-2021-5700

Name of the Vulnerable Software and Affected Versions Adobe Premiere Rush versions 1.5.16 and earlier Description The issue is caused by insecure handling of a malicious WAV file, leading to a memory corruption vulnerability. This could result in arbitrary code execution in the context of the...

9.3CVSS0.02348EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2021/12/14 12:00 a.m.•2 views

PT-2021-5515

Name of the Vulnerable Software and Affected Versions Adobe Premiere Rush version 1.5.16 and earlier Description The issue is related to insecure handling of malicious WAV files, potentially leading to memory corruption and arbitrary code execution in the context of the current user. This can occ...

9.3CVSS0.02348EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2021/12/02 12:00 a.m.•31 views

openSUSE 15 Security Update : speex (openSUSE-SU-2021:3860-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:3860-1 advisory. - A Divide by Zero vulnerability in the function static int readsamples of Speex v1.2 allows attackers to cause a denial of service DoS via a crafte...

5.5CVSS6.2AI score0.01011EPSS
SaveExploits1References4
OSV
OSV
•added 2021/11/22 4:15 p.m.•17 views

CVE-2021-42737

Adobe Prelude version 10.1 and earlier is affected by a memory corruption vulnerability due to insecure handling of a malicious WAV file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required in that the victim must open a specially...

7.8CVSS6.3AI score0.01746EPSS
SaveExploits0References1
NVD
NVD
•added 2021/11/22 4:15 p.m.•38 views

CVE-2021-42737

Adobe Prelude version 10.1 and earlier is affected by a memory corruption vulnerability due to insecure handling of a malicious WAV file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required in that the victim must open a specially...

7.8CVSS0.01746EPSS
SaveExploits0References1
OSV
OSV
•added 2021/11/22 4:15 p.m.•19 views

CVE-2021-40771

Adobe Prelude version 10.1 and earlier is affected by a memory corruption vulnerability due to insecure handling of a malicious WAV file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required in that the victim must open a specially...

7.8CVSS7.6AI score0.01775EPSS
SaveExploits0References1
NVD
NVD
•added 2021/11/22 4:15 p.m.•30 views

CVE-2021-40771

Adobe Prelude version 10.1 and earlier is affected by a memory corruption vulnerability due to insecure handling of a malicious WAV file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required in that the victim must open a specially...

7.8CVSS0.01775EPSS
SaveExploits0References1
Prion
Prion
•added 2021/11/22 4:15 p.m.•18 views

Memory corruption

Adobe Prelude version 10.1 and earlier is affected by a memory corruption vulnerability due to insecure handling of a malicious WAV file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required in that the victim must open a specially...

6.8CVSS7.9AI score0.01775EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2021/11/22 4:15 p.m.•34 views

Memory corruption

Adobe Prelude version 10.1 and earlier is affected by a memory corruption vulnerability due to insecure handling of a malicious WAV file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required in that the victim must open a specially...

6.8CVSS7.9AI score0.01746EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2021/11/22 3:23 p.m.•12 views

CVE-2021-42737 Adobe Prelude WAV File Parsing Memory Corruption Arbitrary Code Execution

Adobe Prelude version 10.1 and earlier is affected by a memory corruption vulnerability due to insecure handling of a malicious WAV file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required in that the victim must open a specially...

7.8CVSS7.8AI score0.01746EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2021/11/22 3:23 p.m.•47 views

CVE-2021-42737 Adobe Prelude WAV File Parsing Memory Corruption Arbitrary Code Execution

Adobe Prelude version 10.1 and earlier is affected by a memory corruption vulnerability due to insecure handling of a malicious WAV file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required in that the victim must open a specially...

7.8CVSS8.1AI score0.01746EPSS
SaveExploits0References1
CVE
CVE
•added 2021/11/22 3:23 p.m.•102 views

CVE-2021-42737

CVE-2021-42737 affects Adobe Prelude (≤10.1) via a memory corruption vulnerability in WAV handling that can lead to arbitrary code execution in the context of the current user. Exploitation requires the user to open a specially crafted WAV file. Reports in multiple feeds (NVD, CNVD, CNNVD) confir...

7.8CVSS7.8AI score0.01746EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2021/11/22 3:18 p.m.•88 views

CVE-2021-40771

CVE-2021-40771 affects Adobe Prelude 10.1 and earlier and involves a memory corruption flaw in WAV file parsing caused by insecure handling of a malicious WAV. The vulnerability can lead to arbitrary code execution in the context of the current user and requires user interaction (victim opens a c...

7.8CVSS7.8AI score0.01775EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder