Microsoft and Adobe Patch Tuesday, May 2023 Security Update Review

Microsoft has addressed 49 vulnerabilities in its May Patch Tuesday edition. The security advisories cover various vulnerabilities in different products, features, and roles. Lets guide you through this months Patch Tuesday details. Microsoft Patch Tuesday for May 2023 Microsoft has also addresse...

PT-2023-2747 · Adobe · Substance3D - Painter

Name of the Vulnerable Software and Affected Versions: Adobe Substance 3D Painter versions 8.3.0 and earlier Description: The issue is related to an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacke...

PT-2023-2741

Name of the Vulnerable Software and Affected Versions Adobe Substance 3D Painter versions 8.3.0 and earlier Description The issue is related to an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker...

PT-2023-2742

Name of the Vulnerable Software and Affected Versions Adobe Substance 3D Painter versions 8.3.0 and earlier Description The issue is related to an Access of Uninitialized Pointer vulnerability. This could allow an attacker to disclose sensitive memory and potentially bypass mitigations like ASLR...

PT-2023-2743

Name of the Vulnerable Software and Affected Versions Adobe Substance 3D Painter versions 8.3.0 and earlier Description The issue is related to an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue require...

PT-2023-2735 · Adobe · Substance3D - Painter

Name of the Vulnerable Software and Affected Versions: Adobe Substance 3D Painter versions 8.3.0 and earlier Description: The issue is related to an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacke...

PT-2023-2736

Name of the Vulnerable Software and Affected Versions Adobe Substance 3D Painter versions 8.3.0 and earlier Description The issue is related to an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue require...

PT-2023-2740

Name of the Vulnerable Software and Affected Versions Adobe Substance 3D Painter versions 8.3.0 and earlier Description The issue is related to an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker...

PT-2023-2744 · Adobe · Substance3D - Painter

Name of the Vulnerable Software and Affected Versions: Adobe Substance 3D Painter versions 8.3.0 and earlier Description: The issue is related to a Heap-based Buffer Overflow that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user...

PT-2023-2746

Name of the Vulnerable Software and Affected Versions Adobe Substance 3D Painter versions 8.3.0 and earlier Description The issue is related to an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigation...

APSB23-29 : Security update available for Adobe Substance 3D Painter

Adobe has released an update for Adobe Substance 3D Painter. This update addresses critical and important vulnerabilities in Adobe Substance 3D Painter. Successful exploitation could lead to arbitrary code execution and memory leak in the context of the current user...

3d-printing-expert.com Cross Site Scripting vulnerability OBB-3281317

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

The vulnerability of the Substance 3D Stager software lies in its ability to read data beyond the buffer limit in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Substance 3D Stager software lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

Slic3r libslic3r TriangleMesh clone heap-based buffer overflow vulnerability

Talos Vulnerability Report TALOS-2022-1593 Slic3r libslic3r TriangleMesh clone heap-based buffer overflow vulnerability April 20, 2023 CVE Number CVE-2022-36788 SUMMARY A heap-based buffer overflow vulnerability exists in the TriangleMesh clone functionality of Slic3r libslic3r 1.3.0 and Master...

Adobe Substance 3D Stager Out-of-Bounds Read Vulnerability (CNVD-2023-37606)

Adobe Substance 3D Stager is a virtual 3D studio from the American company Audobee Adobe. An out-of-bounds read vulnerability exists in Adobe Substance 3D Stager 2.0.1 and prior versions, which can be exploited by an attacker to execute arbitrary code in the context of the current user...

Adobe Substance 3D Stager Out-of-Bounds Read Vulnerability (CNVD-2023-37607)

Adobe Substance 3D Stager is a virtual 3D studio from the American company Audobee Adobe. An out-of-bounds read vulnerability exists in Adobe Substance 3D Stager 2.0.1 and prior versions, which can be exploited by an attacker to execute arbitrary code in the context of the current user...

Adobe Substance 3D Stager Uninitialized Pointer Access Vulnerability

Adobe Substance 3D Stager is a virtual 3D studio from the American company Audobee Adobe. An uninitialized pointer access vulnerability exists in Adobe Substance 3D Stager 2.0.1 and prior versions, which can be exploited by an attacker to cause a sensitive memory disclosure and bypass mitigations...

Adobe Substance 3D Stager Input Validation Error Vulnerability

Adobe Substance 3D Stager is a virtual 3D studio from the American company Audobee Adobe. An input validation error vulnerability exists in Adobe Substance 3D Stager version 2.0.1 and earlier versions, which can be exploited by an attacker to execute arbitrary code in the context of the current...

Adobe Substance 3D Stager Resource Management Error Vulnerability (CNVD-2023-41871)

Adobe Substance 3D Stager is a virtual 3D studio from the American company Audobee Adobe. A resource management error vulnerability exists in Adobe Substance 3D Stager 2.0.1 and prior versions, which can be exploited by an attacker to execute arbitrary code in the context of the current user...

Adobe Substance 3D Stager Out-of-Bounds Read Vulnerability (CNVD-2023-37604)

Adobe Substance 3D Stager is a virtual 3D studio from the American company Audobee Adobe. An out-of-bounds read vulnerability exists in Adobe Substance 3D Stager 2.0.1 and prior versions, which can be exploited by an attacker to execute arbitrary code in the context of the current user...