CVE-2024-11507

IrfanView DXF File Parsing Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or...

CVE-2024-6822 IrfanView CIN File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

IrfanView CIN File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious pag...

CVE-2024-6822

CVE-2024-6822 (IrfanView CIN file parsing) is an out-of-bounds write vulnerability in the CIN file parser that can lead to remote code execution. The flaw arises from insufficient validation of user-supplied CIN data, enabling a write past the end of an allocated buffer. An attacker can leverage ...

CVE-2024-6822 IrfanView CIN File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

IrfanView CIN File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious pag...

CVE-2024-6820

CVE-2024-6820 – IrfanView AWD file parsing vulnerability identified in IrfanView. The flaw is an out-of-bounds write in the AWD parser caused by insufficient validation of input data, which can lead to arbitrary code execution in the context of the affected process. Exploitation requires user int...

CVE-2024-6820 IrfanView AWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

IrfanView AWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious pag...

CVE-2024-6819 IrfanView PSP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

IrfanView PSP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious pag...

CVE-2024-6819

Summary (CVE-2024-6819): IrfanView is affected by an out-of-bounds write in the PSP file parser that can lead to remote code execution. The flaw arises from insufficient validation of user-supplied data in PSP parsing, allowing a write past the end of an allocated buffer. Successful exploitation ...

CVE-2024-6818 IrfanView PSP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

IrfanView PSP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious pag...

CVE-2024-7242

CVE-2024-7242 is a local privilege escalation impacting Panda Security Dome. The flaw exists in the PSANHost executable: an attacker who can run low-privileged code can create a junction to abuse the service, enabling deletion of arbitrary files and escalation to SYSTEM, potentially enabling arbi...

CVE-2024-7242 Panda Security Dome Link Following Local Privilege Escalation Vulnerability

Panda Security Dome Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Panda Security Dome. An attacker must first obtain the ability to execute low-privileged code on the target system in order to...

CVE-2024-7242 Panda Security Dome Link Following Local Privilege Escalation Vulnerability

Panda Security Dome Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Panda Security Dome. An attacker must first obtain the ability to execute low-privileged code on the target system in order to...

CVE-2024-7241

The CVE-2024-7241 entry describes a local privilege escalation in Panda Security Dome caused by the PSANHost service. According to the sources, an attacker who can run low-privileged code can abuse a junction in PSANHost to create an arbitrary file, enabling code execution with SYSTEM privileges....

CVE-2024-7241 Panda Security Dome Link Following Local Privilege Escalation Vulnerability

Panda Security Dome Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Panda Security Dome. An attacker must first obtain the ability to execute low-privileged code on the target system in order to...

CVE-2024-7241 Panda Security Dome Link Following Local Privilege Escalation Vulnerability

Panda Security Dome Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Panda Security Dome. An attacker must first obtain the ability to execute low-privileged code on the target system in order to...

CVE-2024-7244 Panda Security Dome VPN DLL Hijacking Local Privilege Escalation Vulnerability

Panda Security Dome VPN DLL Hijacking Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Panda Security Dome. An attacker must first obtain the ability to execute low-privileged code on the target system in order...

CVE-2024-7244

CVE-2024-7244 affects Panda Security Dome VPN. The vulnerability is a DLL hijacking flaw in the VPN process caused by not restricting DLL search to trusted paths, enabling a local attacker who can execute low-privilege code to load a malicious DLL and escalate to SYSTEM. Root cause: untrusted DLL...

CVE-2024-7244 Panda Security Dome VPN DLL Hijacking Local Privilege Escalation Vulnerability

Panda Security Dome VPN DLL Hijacking Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Panda Security Dome. An attacker must first obtain the ability to execute low-privileged code on the target system in order...

CVE-2024-7243 Panda Security Dome Link Following Local Privilege Escalation Vulnerability

Panda Security Dome Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Panda Security Dome. An attacker must first obtain the ability to execute low-privileged code on the target system in order to...

CVE-2024-7243

CVE-2024-7243 affects Panda Security Dome via the PSANHost executable. The flaw allows a local attacker who can run low-privileged code to craft a junction and abuse the service to create arbitrary files, enabling privilege escalation to SYSTEM and arbitrary code execution. This is a local privil...