Irfanview 数字错误漏洞

IrfanView is a very fast, small, compact and innovative free graphics viewer for Windows 9x, ME, NT, 2000, XP, 2003, 2008, Vista, Windows 7, Windows 8, Windows 10. Irfanview version 4.53 is vulnerable to a denial of service. An attacker can exploit this vulnerability via specially crafted JPEG 20...

PT-2021-10914

Name of the Vulnerable Software and Affected Versions Irfanview version 4.53 Description The issue allows attackers to cause a denial of service DoS via a crafted JPEG 2000 file. It is related to an "Integer Divide By Zero" error starting at JPEG2000!ShowPlugInSaveOptions W+0x00000000000082ea...

HackTool.Win32.Agent.gi Buffer Overflow

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/e60606d19a36789662ba97b4bb5c4ccf.txt Contact: [email protected] Media: twitter.com/malvuln Threat: HackTool.Win32.Agent.gi Vulnerability: Local Stack Buffer Overflow SEH Description: The Hack Office...

Fedora: Security Advisory for ntfs-3g (FEDORA-2021-4dd269a76c)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for ntfs-3g (FEDORA-2021-c0235d9d79)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ffmpeg:ffmpeg_AV_CODEC_ID_JPEG2000_fuzzer: Crash in find_frame_end

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5893420460146688 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDJPEG2000fuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x6121000009...

ICMP 'Etherleak' Information Disclosure

The remote host is prone to an information disclosure vulnerability over ICMP dubbed SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if...

PT-2021-4707

Name of the Vulnerable Software and Affected Versions КРУГ-2000 affected versions not specified Description The issue is related to the absence of authentication for a critical function in the KrugCorrectTime.exe service of the КРУГ-2000 SCADA system. Exploitation of this issue may allow an...

PT-2021-4708

Name of the Vulnerable Software and Affected Versions КРУГ-2000 affected versions not specified Description The issue is related to the lack of measures to neutralize special elements used in the operating system command. This could allow an attacker to cause a denial of service or execute...

PT-2021-4706

Name of the Vulnerable Software and Affected Versions КРУГ-2000 affected versions not specified Description The issue is related to insufficient integrity checking of scripts in the SCADA system. Exploitation of this issue may allow an attacker to cause a denial of service. Recommendations At the...

EulerOS 2.0 SP8 : openjpeg2 (EulerOS-SA-2021-2309)

According to the versions of the openjpeg2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The OpenJPEG library is an open-source JPEG 2000 library developed in order to promote the use of JPEG 2000. This package contains JPEG 2000...

CVE-2021-35312

A vulnerability was found in CIR 2000 / Gestionale Amica Prodigy v1.7. The Amica Prodigy's executable "RemoteBackup.Service.exe" has incorrect permissions, allowing a local unprivileged user to replace it with a malicious file that will be executed with "LocalSystem" privileges...

CVE-2021-35312

A vulnerability was found in CIR 2000 / Gestionale Amica Prodigy v1.7. The Amica Prodigy's executable "RemoteBackup.Service.exe" has incorrect permissions, allowing a local unprivileged user to replace it with a malicious file that will be executed with "LocalSystem" privileges...

CVE-2021-35312

CVE-2021-35312 affects CIR 2000 / Gestionale Amica Prodigy v1.7. The vulnerability stems from incorrect permissions on RemoteBackup.Service.exe, allowing a local unprivileged user to replace the executable and execute code with LocalSystem privileges (privilege escalation). Public documents (Expl...

PT-2021-20883

Name of the Vulnerable Software and Affected Versions: CIR 2000 / Gestionale Amica Prodigy version 1.7 Description: A vulnerability was found in the Amica Prodigy's executable "RemoteBackup.Service.exe" which has incorrect permissions. This allows a local unprivileged user to replace it with a...

CVE-2021-35312: Incorrect Default Permissions

A vulnerability was found in CIR 2000 / Gestionale Amica Prodigy v1.7. The Amica Prodigy's executable "RemoteBackup.Service.exe" has incorrect permissions, allowing a local unprivileged user to replace it with a malicious file that will be executed with "LocalSystem" privileges...

PT-2021-4704

Name of the Vulnerable Software and Affected Versions КРУГ-2000 affected versions not specified Description The issue is related to the absence of authentication for a critical function in the KrServerBDdemoRT.exe module of the КРУГ-2000 SCADA system. This could allow a remote attacker to cause a...

PT-2021-4705

Name of the Vulnerable Software and Affected Versions КРУГ-2000 affected versions not specified Description The issue is related to the lack of encryption of critical information in the KrServerBDdemoRT.exe module of the КРУГ-2000 SCADA system. This could allow a remote attacker to intercept...

JasPer numeric error vulnerability

JasPer is a C-based tool for image processing from Michael Adams' personal developer. The software supports the JPEG-2000 format as defined in ISO / IEC 15444-1 and is primarily used for image encoding and processing. A divide by zero vulnerability exists. No detailed vulnerability details are...

CVE-2021-34322

A vulnerability has been identified in JT2Go All versions V13.2, Teamcenter Visualization All versions V13.2. The JPEG2KLoader.dll library in affected applications lacks proper validation of user-supplied data when parsing J2K files. This could result in an out of bounds read past the end of an...