Lucene search
+L

519 matches found

CNVD
CNVD
added 2021/12/12 12:00 a.m.76 views

Bentley View BMP File Parsing Stack Buffer Overflow Vulnerability

Bentley View, a free viewer from Bentley Systems, Inc. A stack buffer overflow vulnerability exists in Bentley View BMP file parsing, which is due to a failure to properly validate the length of user-supplied data before copying it to the heap buffer. An attacker could exploit this vulnerability ...

7.8CVSS4.4AI score0.02123EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/12/08 12:00 a.m.41 views

Bentley View BMP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of BMP...

7.8CVSS5.9AI score0.02123EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/12/08 12:00 a.m.65 views

Bentley View BMP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of BMP...

7.8CVSS5AI score0.02113EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/12/08 12:00 a.m.46 views

Bentley View BMP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of BMP...

7.8CVSS5.9AI score0.02005EPSS
SaveExploits0References1
OSV
OSV
added 2021/11/18 5:15 p.m.6 views

CVE-2021-42524

Adobe Animate version 21.0.9 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious BMP file...

7.8CVSS8AI score0.02722EPSS
SaveExploits0References1
NVD
NVD
added 2021/11/18 5:15 p.m.26 views

CVE-2021-42524

Adobe Animate version 21.0.9 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious BMP file...

9.3CVSS0.02722EPSS
SaveExploits0References1
OSV
OSV
added 2021/11/18 5:15 p.m.2 views

CVE-2021-42271

Adobe Animate version 21.0.9 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious BMP file...

7.8CVSS7.6AI score0.02722EPSS
SaveExploits0References1
NVD
NVD
added 2021/11/18 5:15 p.m.25 views

CVE-2021-42270

Adobe Animate version 21.0.9 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious BMP file...

9.3CVSS0.02722EPSS
SaveExploits0References1
NVD
NVD
added 2021/11/18 5:15 p.m.19 views

CVE-2021-42271

Adobe Animate version 21.0.9 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious BMP file...

9.3CVSS0.02722EPSS
SaveExploits0References1
Prion
Prion
added 2021/11/18 5:15 p.m.19 views

Cross site scripting

Adobe Animate version 21.0.9 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious BMP file...

9.3CVSS7.8AI score0.02722EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/11/18 4:45 p.m.25 views

CVE-2021-42524 Adobe Animate BMP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Adobe Animate version 21.0.9 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious BMP file...

7.8CVSS8AI score0.02722EPSS
SaveExploits0References1
CVE
CVE
added 2021/11/18 4:45 p.m.102 views

CVE-2021-42524

Adobe Animate (version 21.0.9 and earlier) is affected by an out-of-bounds write vulnerability that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a malicious BMP file. The issue is documented as CVE-2021-42524. ...

9.3CVSS7.8AI score0.02722EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2021/11/18 4:45 p.m.9 views

CVE-2021-42524 Adobe Animate BMP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Adobe Animate version 21.0.9 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious BMP file...

7.8CVSS7.7AI score0.02722EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2021/11/18 4:43 p.m.8 views

CVE-2021-42271 Adobe Animate BMP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Adobe Animate version 21.0.9 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious BMP file...

7.8CVSS7.7AI score0.02722EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2021/11/18 4:43 p.m.7 views

CVE-2021-42270 Adobe Animate BMP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Adobe Animate version 21.0.9 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious BMP file...

7.8CVSS7.7AI score0.02722EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2021/11/18 4:43 p.m.34 views

CVE-2021-42270 Adobe Animate BMP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Adobe Animate version 21.0.9 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious BMP file...

7.8CVSS8AI score0.02722EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2021/11/12 5:49 p.m.50 views

CVE-2021-43579

A stack-based buffer overflow in imageloadbmp in HTMLDOC = 1.9.13 results in remote code execution if the victim converts an HTML document linking to a crafted BMP file...

8.2AI score0.07349EPSS
SaveExploits4References5
Debian CVE
Debian CVE
added 2021/11/12 5:49 p.m.62 views

CVE-2021-43579

A stack-based buffer overflow in imageloadbmp in HTMLDOC = 1.9.13 results in remote code execution if the victim converts an HTML document linking to a crafted BMP file...

7.8CVSS7.8AI score0.07349EPSS
SaveExploits4
Zero Day Initiative
Zero Day Initiative
added 2021/10/28 12:00 a.m.34 views

Adobe Animate BMP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Animate. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of BMP...

7.8CVSS4.4AI score0.02722EPSS
SaveExploits0References1
Prion
Prion
added 2021/09/28 4:15 p.m.16 views

Design/Logic Flaw

Irfanview 4.57 is affected by an infinite loop when processing a crafted BMP file in the EFFECTS!AutoCropW component. This can cause a denial of service DOS...

4.3CVSS5.4AI score0.00659EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder