Lucene search
K

19 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2020-9387

Malware in sbrugna...

7.8CVSS4.5AI score0.00259EPSS
Exploits0References3
NVD
NVD
added 2024/11/22 9:15 p.m.9 views

CVE-2024-11520

IrfanView ARW File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious pag...

7.8CVSS0.00596EPSS
Exploits0References1
CVE
CVE
added 2024/11/22 8:49 p.m.51 views

CVE-2024-11520

IrfanView ARW file parsing is affected by an out-of-bounds write that can be exploited to execute arbitrary code. The issue arises from insufficient validation of ARW data during parsing, enabling a write past the end of an allocated object. Exploitation requires user interaction (the target must...

7.8CVSS8AI score0.00596EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/11/22 8:49 p.m.42 views

CVE-2024-11520 IrfanView ARW File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

IrfanView ARW File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious pag...

7.8CVSS7.5AI score0.00596EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/11/22 8:49 p.m.15 views

CVE-2024-11520 IrfanView ARW File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

IrfanView ARW File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious pag...

7.8CVSS0.00596EPSS
Exploits0References1
NVD
NVD
added 2021/04/29 5:15 p.m.12 views

CVE-2021-31433

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.931. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS0.01777EPSS
Exploits0References2
OSV
OSV
added 2021/04/29 5:15 p.m.1 views

CVE-2021-31433

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.931. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.2AI score0.01777EPSS
Exploits0References2
CVE
CVE
added 2021/04/29 4:31 p.m.39 views

CVE-2021-31433

Foxit Studio Photo 3.6.6.931 is affected by CVE-2021-31433. The root cause is improper validation during ARW file parsing, causing a write past the end of an allocated data structure. This enables remote code execution in the context of the current process, with user interaction required (target ...

7.8CVSS7.8AI score0.01777EPSS
Exploits0References2Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2021/04/26 12:0 a.m.42 views

Foxit Studio Photo ARW File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS4.5AI score0.01777EPSS
Exploits0References1
NVD
NVD
added 2021/02/09 6:15 p.m.10 views

CVE-2020-17434

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

7.8CVSS0.00259EPSS
Exploits0References2
NVD
NVD
added 2021/02/09 6:15 p.m.13 views

CVE-2020-17423

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS0.00342EPSS
Exploits0References2
OSV
OSV
added 2021/02/09 6:15 p.m.2 views

CVE-2020-17423

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.5AI score0.00342EPSS
Exploits0References2
Prion
Prion
added 2021/02/09 6:15 p.m.17 views

Heap overflow

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

6.8CVSS7.8AI score0.00342EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2021/02/09 3:46 p.m.45 views

CVE-2020-17434

CVE-2020-17434 concerns Foxit Studio Photo versions affected by an ARW file parsing flaw. The issue arises from insufficient validation of user-supplied data, causing a read past the end of an allocated structure and leading to information disclosure. Several connected sources (including ZDI advi...

7.8CVSS7.2AI score0.00259EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2021/02/09 3:46 p.m.48 views

CVE-2020-17423

Foxit Studio Photo 3.6.6.922 is affected by a heap-based buffer overflow in ARW file parsing. The root cause is improper validation of the length of user-supplied data before copying to a heap buffer, enabling remote code execution when a user opens a malicious ARW file or visits a crafted page. ...

7.8CVSS7.8AI score0.00342EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2021/02/09 3:46 p.m.18 views

CVE-2020-17423

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.8AI score0.00342EPSS
Exploits0References2
CNNVD
CNNVD
added 2021/02/09 12:0 a.m.3 views

Foxit Studio Photo 缓冲区错误漏洞

Foxit Studio Photo is a set of image editing software from the Chinese company Foxit Foxit. A remote code execution vulnerability exists in the handling of ARW files in Foxit Studio Photo 3.6.6.930 and earlier versions. The vulnerability stems from a failure to properly validate the length of...

7.8CVSS7.8AI score0.00342EPSS
Exploits0References2
Zero Day Initiative
Zero Day Initiative
added 2020/10/28 12:0 a.m.40 views

Foxit Studio Photo ARW File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.8CVSS4.9AI score0.00342EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/10/28 12:0 a.m.20 views

Foxit Studio Photo ARW File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS2.1AI score0.00259EPSS
Exploits0References1
Rows per page
Query Builder