6407 matches found
CVE-2019-6728
This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
CVE-2019-6729
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of P...
CVE-2019-6732
This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit PhantomPDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
UBUNTU-CVE-2019-3832
It was discovered the fix for CVE-2018-19758 libsndfile was not complete and still allows a read beyond the limits of a buffer in wavwriteheader function in wav.c. A local attacker may use this flaw to make the application crash...
The vulnerability of the ext4_extDropRefs() function in the Linux operating system allows a hacker to cause a service failure or execute arbitrary code.
The vulnerability of the ext4extDropRefs function in the Linux operating system relates to reading data beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code using a specially created ext4 file system image...
The vulnerability of the WebGL component in the Chrome web browser allows a hacker to copy arbitrary files to the target directory.
The vulnerability of the WebGL component in the Chrome web browser is related to reading data beyond the buffer boundaries. Exploiting this vulnerability allows a malicious actor to write arbitrary files to the target directory remotely...
The vulnerability of the NTLM type-2 function of the libcurl library, which allows a hacker to trigger a service failure
The vulnerability of NTLM type-2 in the libcurl library is related to incorrect validation of incoming data, which leads to reading beyond the buffer of dynamic memory. Exploiting this vulnerability allows a remote attacker to cause a service failure...
The vulnerability of the libcurl library, related to reading beyond the buffer boundaries of memory, allows an attacker to cause a service failure.
The vulnerability of the libcurl library relates to reading data beyond the buffer boundaries for SMTP communication. Exploiting this vulnerability allows a remote attacker to cause service interruptions...
The vulnerability of the NTLM type-3 password creation function in the libcurl library allows a hacker to induce a service failure.
The vulnerability of the libcurl library is related to the issue of reading operations going beyond the buffer boundaries in the NTLM type-3 header creation function. This function generates the HTTP request header based on previously obtained data without checking the local buffer. Exploiting th...
UBUNTU-CVE-2019-9631
Poppler 0.74.0 has a heap-based buffer over-read in the CairoRescaleBox.cc downsamplerowboxfilter function...
The vulnerability of Microsoft Excel spreadsheet editors, as well as Microsoft Office and Office 365 products, relates to reading data beyond the buffer in memory. This allows attackers to gain access to protected information.
The vulnerability of Microsoft Excel spreadsheet editors, as well as Microsoft Office and Office 365 products, stems from the reading of data beyond the buffer in memory. Exploitation of this vulnerability can allow an attacker to gain access to protected information by using a specially created...
PT-2019-5304 · Advancecomp +4 · Advancecomp +4
Name of the Vulnerable Software and Affected Versions: AdvanceCOMP version 2.1 Description: The issue is caused by an integer overflow in the png compress function in pngex.cc of the AdvanceCOMP utility. This overflow occurs when encountering an invalid PNG size, leading to an attempted memcpy in...
The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser, caused by an operation that goes beyond the buffer in memory, allows attackers to execute arbitrary code.
The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is caused by an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using a...
MATIO stack buffer overread vulnerability (CNVD-2019-28417)
matio is a C library for reading and writing MATLAB MAT files. A stack buffer over-read vulnerability exists in the memcpy of the ReadNextCell function in mat5.c in libmatio.a in matio 1.5.13. No details of the vulnerability are provided at this time...
DEBIAN-CVE-2019-9070
An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32. It is a heap-based buffer over-read in dexpression1 in cp-demangle.c after many recursive calls...
DEBIAN-CVE-2019-9037
An issue was discovered in libmatio.a in matio aka MAT File I/O Library 1.5.13. There is a buffer over-read in the function MatVarPrint in mat.c...
UBUNTU-CVE-2019-9034
An issue was discovered in libmatio.a in matio aka MAT File I/O Library 1.5.13. There is a stack-based buffer over-read for a memcpy in the function ReadNextCell in mat5.c...
DEBIAN-CVE-2019-9034
An issue was discovered in libmatio.a in matio aka MAT File I/O Library 1.5.13. There is a stack-based buffer over-read for a memcpy in the function ReadNextCell in mat5.c...