CVE-2022-40663

CVE-2022-40663 affects Nikon NIS-Elements Viewer 1.2100.1483.0. The vulnerability is an out-of-bounds read in the TIF image parser that can lead to remote code execution when a user opens a crafted TIF image or visits a malicious page. The flaw is triggered by data causing a read past the end of ...

CVE-2022-40662

This vulnerability allows remote attackers to execute arbitrary code on affected installations of NIKON NIS-Elements Viewer 1.2100.1483.0. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2022-40661

This vulnerability allows remote attackers to execute arbitrary code on affected installations of NIKON NIS-Elements Viewer 1.2100.1483.0. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2022-40661

Vulnerability summary (CVE-2022-40661) : Nikon NIS-Elements Viewer 1.2100.1483.0 contains a BMP image parsing flaw that fails to validate the length of user-supplied data before copying to a heap-based buffer, enabling heap-based buffer overflow. This can allow remote code execution in the contex...

CVE-2022-40660

This vulnerability allows remote attackers to execute arbitrary code on affected installations of NIKON NIS-Elements Viewer 1.2100.1483.0. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2022-40660

CVE-2022-40660 affects Nikon NIS-Elements Viewer 1.2100.1483.0. The vulnerability arises in the PSD image parsing code, where lack of validation of the length of user-supplied data enables a heap-based buffer overflow. An attacker who can entice a user to visit a malicious page or open a maliciou...

CVE-2022-40659

CVE-2022-40659 affects Nikon NIS-Elements Viewer 1.2100.1483.0. The flaw is in the parsing of TIF images, where crafted data can trigger a write past the end of an allocated buffer, enabling remote code execution in the context of the current process. User interaction is required (target must vis...

CVE-2022-40659

This vulnerability allows remote attackers to execute arbitrary code on affected installations of NIKON NIS-Elements Viewer 1.2100.1483.0. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2022-40658

CVE-2022-40658 affects Nikon NIS-Elements Viewer 1.2100.1483.0. The flaw is in the parsing of TIF images, where crafted data can trigger a write past the end of an allocated buffer, allowing an attacker to execute code in the context of the current process. User interaction is required (target mu...

CVE-2022-40657

CVE-2022-40657 affects Nikon NIS-Elements Viewer 1.2100.1483.0. The flaw is in PSD file parsing, where crafted PSD data can trigger a write past the end of an allocated buffer, enabling remote code execution in the context of the current process. Exploitation requires user interaction (visiting a...

CVE-2022-40655

CVE-2022-40655 affects Nikon NIS-Elements Viewer (version 1.2100.1483.0). The flaw is in ND2 file parsing, caused by insufficient validation of the length of user-supplied data before copying to a heap-based buffer, enabling remote code execution with the attacker’s code running in the user’s pro...

CVE-2022-40656

CVE-2022-40656 affects Nikon NIS-Elements Viewer 13.2.0.21165. The root cause is an out-of-bounds read in the ND2 file parsing, which can be triggered by crafted ND2 data and may allow code execution in the attacker’s context after user interaction (visiting a malicious page or opening a maliciou...

CVE-2022-40653

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

CVE-2022-40652

CVE-2022-40652 affects Ansys SpaceClaim 2022 R1 and involves a parsing flaw in X_B files. The issue allows an attacker to execute arbitrary code with the current process context by exploiting a write past the end of an allocated data structure during parsing. Exploitation requires user interactio...

CVE-2022-40650

CVE-2022-40650 affects Ansys SpaceClaim 2022 R1. The vulnerability arises from parsing X_B files, where insufficient validation of user-supplied data leads to a write past the end of an allocated data structure. This can enable remote attackers to execute arbitrary code in the context of the curr...

CVE-2022-40649

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

CVE-2022-40649

CVE-2022-40649 affects Ansys SpaceClaim 2022 R1. The vulnerability stems from parsing X_B files where a pointer is not properly initialized, enabling a remote code execution when a user visits a malicious page or opens a malicious file. Exploitation requires user interaction and is actionable in ...

CVE-2022-40648

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

CVE-2022-40648

CVE-2022-40648 affects Ansys SpaceClaim 2022 R1. The vulnerability resides in the parsing of X_B files, where insufficient validation leads to a write before the start of an allocated data structure, enabling arbitrary code execution. Exploitation requires user interaction (visit a malicious page...

CVE-2022-40647

CVE-2022-40647 affects Ansys SpaceClaim 2022 R1. The flaw is in parsing X_B files, caused by insufficient validation, leading to an out-of-bounds read that can allow code execution in the target process. User interaction is required (target must open a malicious file/page). Multiple sources refer...