Lucene search
+L

21 matches found

EUVD
EUVD
•added 2025/10/07 12:30 a.m.•11 views

EUVD-2020-9387

Malware in sbrugna...

7.8CVSS4.5AI score0.02865EPSS
SaveExploits0References3
NVD
NVD
•added 2024/11/22 9:15 p.m.•47 views

CVE-2024-11520

IrfanView ARW File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious pag...

7.8CVSS0.00393EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/11/22 8:49 p.m.•51 views

CVE-2024-11520 IrfanView ARW File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

IrfanView ARW File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious pag...

7.8CVSS0.00393EPSS
SaveExploits0References1
CVE
CVE
•added 2024/11/22 8:49 p.m.•77 views

CVE-2024-11520

IrfanView ARW file parsing is affected by an out-of-bounds write that can be exploited to execute arbitrary code. The issue arises from insufficient validation of ARW data during parsing, enabling a write past the end of an allocated object. Exploitation requires user interaction (the target must...

7.8CVSS8AI score0.00393EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/11/22 8:49 p.m.•47 views

CVE-2024-11520 IrfanView ARW File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

IrfanView ARW File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious pag...

7.8CVSS7.5AI score0.00393EPSS
SaveExploits0References1
OSV
OSV
•added 2021/04/29 5:15 p.m.•13 views

CVE-2021-31433

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.931. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.2AI score0.02761EPSS
SaveExploits0References2
NVD
NVD
•added 2021/04/29 5:15 p.m.•28 views

CVE-2021-31433

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.931. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS0.02761EPSS
SaveExploits0References2
CVE
CVE
•added 2021/04/29 4:31 p.m.•63 views

CVE-2021-31433

Foxit Studio Photo 3.6.6.931 is affected by CVE-2021-31433. The root cause is improper validation during ARW file parsing, causing a write past the end of an allocated data structure. This enables remote code execution in the context of the current process, with user interaction required (target ...

7.8CVSS7.8AI score0.02761EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/04/29 12:00 a.m.•4 views

CVE-2021-31433: Out-of-bounds Write

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.931. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.6AI score0.02761EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
•added 2021/04/26 12:00 a.m.•53 views

Foxit Studio Photo ARW File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS4.5AI score0.02761EPSS
SaveExploits0References1
NVD
NVD
•added 2021/02/09 6:15 p.m.•38 views

CVE-2020-17434

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

7.8CVSS0.02865EPSS
SaveExploits0References2
OSV
OSV
•added 2021/02/09 6:15 p.m.•13 views

CVE-2020-17423

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.5AI score0.0372EPSS
SaveExploits0References2
NVD
NVD
•added 2021/02/09 6:15 p.m.•39 views

CVE-2020-17423

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS0.0372EPSS
SaveExploits0References2
Prion
Prion
•added 2021/02/09 6:15 p.m.•27 views

Heap overflow

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

6.8CVSS7.8AI score0.0372EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2021/02/09 3:46 p.m.•57 views

CVE-2020-17434

CVE-2020-17434 concerns Foxit Studio Photo versions affected by an ARW file parsing flaw. The issue arises from insufficient validation of user-supplied data, causing a read past the end of an allocated structure and leading to information disclosure. Several connected sources (including ZDI advi...

7.8CVSS7.2AI score0.02865EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2021/02/09 3:46 p.m.•64 views

CVE-2020-17423

Foxit Studio Photo 3.6.6.922 is affected by a heap-based buffer overflow in ARW file parsing. The root cause is improper validation of the length of user-supplied data before copying to a heap buffer, enabling remote code execution when a user opens a malicious ARW file or visits a crafted page. ...

7.8CVSS7.8AI score0.0372EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2021/02/09 3:46 p.m.•52 views

CVE-2020-17423

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.8AI score0.0372EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/02/09 12:00 a.m.•17 views

Foxit Studio Photo 缓冲区错误漏洞

Foxit Studio Photo is a set of image editing software from the Chinese company Foxit Foxit. A remote code execution vulnerability exists in the handling of ARW files in Foxit Studio Photo 3.6.6.930 and earlier versions. The vulnerability stems from a failure to properly validate the length of...

7.8CVSS7.8AI score0.0372EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/02/09 12:00 a.m.•4 views

CVE-2020-17423: Heap-based Buffer Overflow

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.6AI score0.0372EPSS
SaveExploits0References3
Zero Day Initiative
Zero Day Initiative
•added 2020/10/28 12:00 a.m.•56 views

Foxit Studio Photo ARW File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.8CVSS4.9AI score0.0372EPSS
SaveExploits0References1
Rows per page
Query Builder