32 matches found
EUVD-2004-1257
Malware in sbrugna...
EUVD-2004-1254
Malware in sbrugna...
EUVD-2004-1256
Malware in sbrugna...
CVE-2024-11580
CVE-2024-11580 : Luxion KeyShot is affected by a heap-based buffer overflow in the parsing of ABC files. The flaw arises from insufficient validation of the length of user-supplied data before copying to a heap buffer, enabling remote code execution. Exploitation requires user interaction (the ta...
Autodesk FBX Review ABC File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk FBX Review. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...
CVE-2024-23139 ActionScript Byte Code “ABC” Vulnerability in the Autodesk FBX Review software
A maliciously crafted ABC file, when parsed through Autodesk FBX, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process...
CVE-2024-23139
Autodesk FBX Review is affected by CVE-2024-23139 through parsing of ActionScript Byte Code ABC files. The issue is an out-of-bounds write in the ABC file parser that can crash, corrupt data, or allow arbitrary code execution in the process context. Affected are Autodesk FBX Review versions 1.5.3...
PT-2024-19689 · Autodesk · Autodesk Fbx Review
Name of the Vulnerable Software and Affected Versions: Autodesk FBX Review versions 1.5.3.0 and prior Description: A maliciously crafted ABC file, when parsed through Autodesk FBX, may force an Out-of-Bounds Write issue. This can be leveraged to cause a crash, data corruption, or execute arbitrar...
USN-5961-1 abcm2ps vulnerabilities
It was discovered that abcm2ps incorrectly handled memory when parsing specially crafted ABC files. An attacker could use this issue to cause abcm2ps to crash, leading to a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 16.04 ESM and Ubuntu 18.04 LTS...
CVE-2022-25794
An Out-Of-Bounds Read Vulnerability in Autodesk FBX Review version 1.5.2 and prior may lead to code execution through maliciously crafted ActionScript Byte Code 'ABC' files or information disclosure. ABC files are created by the Flash compiler and contain executable code. This vulnerability in...
VLC Media Player ABC File Parts Field Parsing Heap Integer Overflow
A remote code execution vulnerability has been reported in the libmodplug library used by VLC Media Player. The vulnerability is due to an error while parsing Parts field in ABC files which can result in an integer overflow. A remote attacker can exploit this vulnerability by enticing an...
[SECURITY] [DSA 2751-1] libmodplug security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2751-1 [email protected] http://www.debian.org/security/ Raphael Geissert September 04, 2013 http://www.debian.org/security/faq -...
Debian DSA-2751-1 : libmodplug - several vulnerabilities
Several vulnerabilities have been discovered in libmodplug, a library for mod music based on ModPlug, that might allow arbitrary code execution when processing specially crafted ABC files through applications using the library, such as media players. %NASLMINLEVEL 70300 C Tenable Network Security...
[SECURITY] [DSA 2751-1] libmodplug security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2751-1 [email protected] http://www.debian.org/security/ Raphael Geissert September 04, 2013 http://www.debian.org/security/faq -...
VLC Media Player ABC File Instruction Field Parsing Heap Overflow
A remote code execution vulnerability has been reported in the libmodplug library used by VLC Media Player. The vulnerability is due to an error while parsing Instruction fields in ABC files with the style sheet directive "MIDI drum" or "MIDI gchord". Remote attackers could exploit this...
PT-2012-1533 · Modplug · Libmodplug
Name of the Vulnerable Software and Affected Versions: libmodplug versions prior to 0.8.8.3 Description: The issue is related to multiple stack-based buffer overflows in the abc new macro and abc new umacro functions, which can be triggered by a crafted ABC file. This can cause a denial of servic...
libmodplug library buffer overflow
ReadS3M buffer overflow. DoS on ABC files parsing...
DEBIAN-CVE-2006-1514
Multiple buffer overflows in the abcmidi-yaps translator in abcmidi 20050101, and other versions, allow remote attackers to execute arbitrary code via crafted ABC music files that trigger the overflows during translation into PostScript...
CVE-2004-1258
Buffer overflow in the putwords function in subs.c for abcm2ps 3.7.20 allows remote attackers to execute arbitrary code via crafted ABC files...
CVE-2004-1259
Multiple buffer overflows in the handledirective function in abcpp.c for abcpp 1.3.0 allow remote attackers to execute arbitrary code via crafted ABC files...