CVE-2024-7229

CVE-2024-7229 describes a local privilege escalation in Avast Cleanup Premium. The flaw exists in the Avast Cleanup Service : by creating a symbolic link, an attacker who can run low-privileged code can abuse the service to delete a file and escalate privileges, gaining the ability to execute arb...

CVE-2024-7229 Avast Cleanup Premium Link Following Local Privilege Escalation Vulnerability

Avast Cleanup Premium Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Avast Cleanup Premium. An attacker must first obtain the ability to execute low-privileged code on the target system in orde...

CVE-2024-7229 Avast Cleanup Premium Link Following Local Privilege Escalation Vulnerability

Avast Cleanup Premium Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Avast Cleanup Premium. An attacker must first obtain the ability to execute low-privileged code on the target system in orde...

CVE-2024-7231

CVE-2024-7231 relates to Avast Cleanup Premium. The vulnerability exists in the Avast Cleanup Service: by creating a symbolic link, a local attacker who can run low-privileged code can abuse the service to delete a file and escalate privileges to SYSTEM. This is a local privilege escalation, with...

CVE-2024-7230

CVE-2024-7230 describes a local privilege escalation in Avast Cleanup Premium. The flaw exists in the Avast Cleanup Service: an attacker who can run low-privilege code can abuse symbolic links to delete a file and escalate to SYSTEM, potentially executing arbitrary code. Affected product: Avast C...

CVE-2024-7228

CVE-2024-7228 affects Avast Free Antivirus. The flaw exists in the Avast Service where an attacker can abuse a symbolic link to create a folder, enabling a local, low-privilege code execution path that can drive a denial-of-service condition on vulnerable installations. Reports from ZDI describe ...

CVE-2024-7228 Avast Free Antivirus Link Following Denial-of-Service Vulnerability

Avast Free Antivirus Link Following Denial-of-Service Vulnerability. This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Avast Free Antivirus. An attacker must first obtain the ability to execute low-privileged code on the target system i...

CVE-2024-8025 Nikon NEF Codec Thumbnail Provider NRW File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Nikon NEF Codec Thumbnail Provider NRW File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Nikon NEF Codec. User interaction is required to exploit this vulnerability in that...

CVE-2024-8025 Nikon NEF Codec Thumbnail Provider NRW File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Nikon NEF Codec Thumbnail Provider NRW File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Nikon NEF Codec. User interaction is required to exploit this vulnerability in that...

CVE-2024-9261 IrfanView SID File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

IrfanView SID File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a...

CVE-2024-9260 IrfanView SID File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

IrfanView SID File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious pag...

CVE-2024-9260

CVE-2024-9260 affects IrfanView via SID file parsing. The root cause is insufficient validation of user-supplied SID data, leading to a write past the end of an allocated buffer (out-of-bounds write). This vulnerability can allow remote code execution in the context of the current process and req...

CVE-2024-9259

CVE-2024-9259 pertains to IrfanView and is rooted in the SID-file parsing code. The vulnerability is an out-of-bounds write caused by insufficient validation of SID data, allowing an attacker to write past the end of an allocated buffer and execute code in the process context. Exploitation requir...

CVE-2024-9767 IrfanView SID File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

IrfanView SID File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page...

CVE-2024-9258

CVE-2024-9258 affects IrfanView via SID file parsing, where an uninitialized pointer is accessed, enabling remote code execution. The flaw requires user interaction (visiting a malicious page or opening a malicious file) and could execute code in the context of the current process. Root cause is ...

CVE-2024-8849 PDF-XChange Editor AcroForm Out-Of-Bounds Read Information Disclosure Vulnerability

PDF-XChange Editor AcroForm Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must vis...

CVE-2024-8849 PDF-XChange Editor AcroForm Out-Of-Bounds Read Information Disclosure Vulnerability

PDF-XChange Editor AcroForm Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must vis...

CVE-2024-8848 PDF-XChange Editor AcroForm Out-Of-Bounds Read Information Disclosure Vulnerability

PDF-XChange Editor AcroForm Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must vis...

CVE-2024-8848

PDF-XChange Editor (AcroForm) vulnerability CVE-2024-8848 is an out-of-bounds read that can disclose sensitive information. The flaw occurs in AcroForms handling due to improper validation, potentially allowing a read past the end of an allocated object. The NVD notes remote information disclosur...

CVE-2024-8847 PDF-XChange Editor Doc Object Out-Of-Bounds Read Remote Code Execution Vulnerability

PDF-XChange Editor Doc Object Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a...