12 matches found
CVE-2022-36271
Outbyte PC Repair Installation File 1.7.112.7856 is vulnerable to Dll Hijacking. iertutil.dll is missing so an attacker can use a malicious dll with same name and can get admin privileges...
openSUSE 15 Security Update : libredwg (openSUSE-SU-2023:0201-1)
The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2023:0201-1 advisory. - LibreDWG v0.12.4.4608 was discovered to contain a heap-use-after-free via the function decodepreR13section at decoder11.c. CVE-2022-33025 -...
OPENSUSE-SU-2023:0201-1 Security update for libredwg
This update for libredwg fixes the following issues: Update to version 0.12.5.5907 Security issues fixed: CVE-2022-33025: Fixed multiple security issues boo1200898 CVE-2023-36271: Fixed heap buffer overflow via the function bitwcs2nlen boo1212709 CVE-2023-36272: Fixed heap buffer overflow via the...
CVE-2023-36271
creationtimestamp| type| source ---|---|--- 2023-06-23 18:38:34+00:00| seen| https://t.me/cibsecurity/65471 2025-03-06 21:34:37+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6766 2025-03-08 04:34:55+00:00| seen| Telegram/kC4TEACpoLIDIrQxj8Z8CJCx0aeH-lCnUqJBv2zfxX-tAem...
CVE-2023-36271
CVE-2023-36271 affects LibreDWG, with a heap buffer overflow in the function bit_wcs2nlen implemented in bits.c, impacting versions from 0.10 up to 0.12.5 . The root cause is a memory safety issue in the bit_wcs2nlen routine that can overflow a heap buffer. Impact is described as a high-severity ...
CVE-2022-36271
Outbyte PC Repair Installation File 1.7.112.7856 is vulnerable to Dll Hijacking. iertutil.dll is missing so an attacker can use a malicious dll with same name and can get admin privileges...
CVE-2022-36271
Outbyte PC Repair Installation File 1.7.112.7856 is vulnerable to Dll Hijacking. iertutil.dll is missing so an attacker can use a malicious dll with same name and can get admin privileges...
CVE-2022-36271
CVE-2022-36271 affects Outbyte PC Repair Installation File 1.7.112.7856, where a DLL hijacking flaw (missing iertutil.dll) enables a local attacker to place a malicious DLL with the same name and obtain admin privileges. Affected component is the installation file; root cause is uncontrolled sear...
CVE-2020-36271
CVE-2020-36271 entry is rejected/not used per initial description; does not represent an active vulnerability.
CVE-2022-36271
creationtimestamp| type| source ---|---|--- 2022-08-16 19:52:40+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/2963 2022-08-19 11:18:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/6631 2026-07-29 12:01:02+00:00| seen| https://t.me/CVEhub/1417 2026-07-3...
