28 matches found
VirtualBox_CVE-2019-2525-CVE-2019-2548
VirtualBox 3D PoCs & 漏洞利用 作者 : @niklasb 概览文章. 许可证 漏洞利用 请查看除 lib 之外的子目录。 调试构建 对于 Arch Linux，您可以使用 archpkg 中提供的 PKGBUILD 来获取5.2.18 的调试版本， 其中已撤销2018年7月的3D安全修复。 库 lib/hgcm.py 和 lib/chromium.py 提供了对 HGCM 接口以及 通过 VBoxGuest IOCTL 对 VBoxSharedCrOpenGL 服务的高级访问。 chromium.py 可用于非常轻松地从 Python 中...
EUVD-2018-18721
Malware in sbrugna...
[SECURITY] Fedora 42 Update: qt6-qt3d-6.9.1-1.fc42
Qt 3D provides functionality for near-realtime simulation systems with support for 2D and 3D rendering in both Qt C++ and Qt Quick applications...
Fedora: Security Advisory for qt5-qt3d (FEDORA-2024-2e27372d4c)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 40 Update: qt6-qt3d-6.7.1-1.fc40
Qt 3D provides functionality for near-realtime simulation systems with support for 2D and 3D rendering in both Qt C++ and Qt Quick applications...
Side Channels Are Common
Really interesting research: "Lend Me Your Ear: Passive Remote Physical Side Channels on PCs." Abstract: We show that built-in sensors in commodity PCs, such as microphones, inadvertently capture electromagnetic side-channel leakage from ongoing computation. Moreover, this information is often...
GPAC Project on Advanced Content Integer Overflow Vulnerability (CNVD-2021-82984)
GPAC Project on Advanced Content is an open source cross-platform library that implements the MPEG-4 system standard and provides tools for media playback, vector graphics, and 3D rendering. an integer overflow vulnerability exists in the MPEG-4 decoding functionality in GPAC Project on Advanced...
GPAC Project on Advanced Content Integer Overflow Vulnerability (CNVD-2021-64079)
GPAC Project on Advanced Content is an open source cross-platform library that implements the MPEG-4 system standard and provides tools for media playback, vector graphics, and 3D rendering. an integer overflow vulnerability exists in the MPEG-4 decoding functionality in GPAC Project on Advanced...
GPAC Project on Advanced Content Integer Overflow Vulnerability (CNVD-2021-64077)
GPAC Project on Advanced Content is an open source cross-platform library that implements the MPEG-4 system standard and provides tools for media playback, vector graphics, and 3D rendering. an integer overflow vulnerability exists in the MPEG-4 decoding functionality in GPAC Project on Advanced...
GPAC Project on Advanced Content integer overflow vulnerability
GPAC Project on Advanced Content is an open source cross-platform library that implements the MPEG-4 system standard and provides tools for media playback, vector graphics, and 3D rendering.The MPEG-4 decoding feature of GPAC Project on Advanced Content library 1.0.1 suffers from an integer...
GPAC Project on Advanced Content Integer Overflow Vulnerability (CNVD-2021-68450)
GPAC Project on Advanced Content is an open source cross-platform library that implements the MPEG-4 system standard and provides tools for media playback, vector graphics, and 3D rendering.The MPEG-4 decoding feature of GPAC Project on Advanced Content library 1.0.1 suffers from an integer...
Adobe Dimension Uncontrolled Search Path Element Vulnerability
Adobe Dimension is a 3D rendering and design software. An uncontrolled search path element vulnerability exists in Adobe Dimension 3.4 and earlier versions. An attacker can exploit the vulnerability to execute arbitrary code...
Pixar OpenUSD Binary File Format Compressed Value Reps Code Execution Vulnerabilities
Summary A heap overflow vulnerability exists in the Pixar OpenUSD 20.05 while parsing compressed value rep arrays in binary USD files. A specially crafted malformed file can trigger a heap overflow, which can result in remote code execution. To trigger this vulnerability, the victim needs to acce...
(0Day) AMD Radeon Divide By Zero Denial of Service Vulnerability
This vulnerability allows local attackers to trigger a Denial-of-Service condition on vulnerable installations of AMD Radeon drivers on Apple macOS. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific...
CVE-2018-6977
VMware ESXi 6.7, 6.5, 6.0, Workstation 15.x and 14.x and Fusion 11.x and 10.x contain a denial-of-service vulnerability due to an infinite loop in a 3D-rendering shader. Successfully exploiting this issue may allow an attacker with normal user privileges in the guest to make the VM unresponsive,...
Design/Logic Flaw
VMware ESXi 6.7, 6.5, 6.0, Workstation 15.x and 14.x and Fusion 11.x and 10.x contain a denial-of-service vulnerability due to an infinite loop in a 3D-rendering shader. Successfully exploiting this issue may allow an attacker with normal user privileges in the guest to make the VM unresponsive,...
CVE-2018-6977
CVE-2018-6977 affects VMware ESXi (6.7/6.5/6.0), Workstation (14/15.x) and Fusion (10/11.x) via an infinite loop in a 3D shader that can cause a guest VM to become unresponsive and, in some cases, make the host/other VMs unresponsive. Public details describe a denial-of-service condition triggere...
CVE-2018-6977
VMware ESXi 6.7, 6.5, 6.0, Workstation 15.x and 14.x and Fusion 11.x and 10.x contain a denial-of-service vulnerability due to an infinite loop in a 3D-rendering shader. Successfully exploiting this issue may allow an attacker with normal user privileges in the guest to make the VM unresponsive,...
CVE-2018-6977: Loop with Unreachable Exit Condition
VMware ESXi 6.7, 6.5, 6.0, Workstation 15.x and 14.x and Fusion 11.x and 10.x contain a denial-of-service vulnerability due to an infinite loop in a 3D-rendering shader. Successfully exploiting this issue may allow an attacker with normal user privileges in the guest to make the VM unresponsive,...
