CVE-2022-24359

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-24359

CVE-2022-24359 affects Foxit PDF Reader 11.1.0.52543. The issue arises from not validating the existence of an object before performing operations on it within Doc handling, enabling arbitrary code execution in the current process when a user visits a malicious page or opens a malicious file. The...

CVE-2022-24358

CVE-2022-24358 affects Foxit PDF Reader 11.1.0.52543. The flaw lies in the handling of Doc objects: by performing JavaScript actions, an attacker can trigger a read past the end of an allocated buffer, enabling arbitrary code execution in the context of the current process. User interaction is re...

CVE-2022-24357

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-24357

CVE-2022-24357 affects Foxit PDF Reader 11.1.0.52543. The issue is a flaw in handling of Annotation objects caused by not validating the existence of an object before performing operations, enabling remote code execution in the context of the current process. Exploitation requires user interactio...

CVE-2022-24356

Foxit PDF Reader for macOS (CVE-2022-24356) is affected by an onMouseExit out-of-bounds/read past end vulnerability in the 11.0.1.0719 build, enabling code execution with user interaction (visit a malicious page or open a crafted file). Root cause: insufficient validation of user data leading to ...

CVE-2022-24355

CVE-2022-24355 affects TP-Link TL-WR940N routers (3.20.1 Build 200316 Rel.34392n) where the httpd parsing of file name extensions fails to validate the length of user-supplied data before copying to a fixed-size stack buffer, enabling network-adjacent, unauthenticated remote code execution as roo...

CVE-2022-24354

The CVE-2022-24354 entry concerns TP-Link AC1750 routers. The vulnerability stems from the NetUSB.ko module, where improper validation of user-supplied data can cause an integer overflow during buffer allocation, enabling network-adjacent attackers to execute code with root privileges. Auth is no...

CVE-2022-24064

CVE-2022-24064 affects Sante DICOM Viewer Pro 11.8.8.0. The vulnerability lies in the J2K image parsing code, where crafted data in a J2K file can trigger a write past the end of an allocated buffer, enabling remote code execution. Exploitation requires user interaction (the target must visit a m...

CVE-2022-24063

CVE-2022-24063 affects Sante DICOM Viewer Pro 13.2.0.21165. The issue is a memory corruption caused by improper validation in the JP2 file parsing path, enabling arbitrary code execution when a user visits a malicious page or opens a malicious file. Exploitation requires user interaction, and ZDI...

CVE-2022-24063

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pro 13.2.0.21165. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...

CVE-2022-24062

CVE-2022-24062 affects Sante DICOM Viewer Pro 13.2.0.21165. The issue arises in JP2 file parsing where the code fails to validate the existence of an object before performing operations, enabling remote code execution. Exploitation requires user interaction (visiting a malicious page or opening a...

CVE-2022-24062

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pro 13.2.0.21165. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...

CVE-2022-24061

CVE-2022-24061 affects Sante DICOM Viewer Pro (11.8.7.0). The vulnerability lies in DCM file parsing where the code fails to validate the existence of an object before operating on it, enabling an information disclosure condition. The ZDI advisory (ZDI-22-253) labels it as a Use-After-Free Inform...

CVE-2022-24060

The CVE-2022-24060 entry affects Sante DICOM Viewer Pro 11.8.7.0. The vulnerability stems from the parsing of DCM files, where crafted DCM data can trigger a read past the end of an allocated buffer. This can disclose sensitive information and, in conjunction with other vulnerabilities, could ena...

CVE-2022-24058

CVE-2022-24058 affects Sante DICOM Viewer Pro 11.8.7.0. The flaw lies in the parsing of J2K files, where crafted data can trigger a write past the end of an allocated buffer, enabling remote code execution in the context of the current process. Exploitation requires user interaction (visiting a m...

CVE-2022-24057

Sante DICOM Viewer Pro 11.8.7.0 is affected by CVE-2022-24057 due to a flaw in J2K file parsing. Crafted J2K data can trigger a write past the end of an allocated buffer, enabling remote code execution in the context of the current process. Exploitation requires user interaction (visiting a malic...

CVE-2022-24056

Summary (Mature details available): CVE-2022-24056 affects Sante DICOM Viewer Pro (e.g., 11.8.7.0). The root cause is a flaw in the J2K file parsing logic that can trigger a write past the end of an allocated buffer, enabling remote code execution in the context of the current process. Exploitati...

CVE-2022-24056

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pro 11.8.7.0. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

CVE-2022-24055

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Sante DICOM Viewer Pro 11.8.7.0. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...