CVE-2020-27000

A vulnerability has been identified in JT2Go All versions V13.1.0.1, Teamcenter Visualization All versions V13.1.0.1. Affected applications lack proper validation of user-supplied data when parsing BMP files. This can result in a memory corruption condition. An attacker could leverage this...

Memory corruption

A vulnerability has been identified in JT2Go All versions V13.1.0.1, Teamcenter Visualization All versions V13.1.0.1. Affected applications lack proper validation of user-supplied data when parsing BMP files. This can result in a memory corruption condition. An attacker could leverage this...

Design/Logic Flaw

A vulnerability has been identified in SINEC NMS All versions V1.0 SP1 Update 1, SINEMA Server All versions V14.0 SP2 Update 2. When uploading files to an affected system using a zip container, the system does not correctly check if the relative file path of the extracted files is still within th...

Design/Logic Flaw

A vulnerability has been identified in JT2Go All versions V13.1.0.2, Teamcenter Visualization All versions V13.1.0.2. Affected applications lack proper validation of user-supplied data when parsing of PAR files. This could result in a memory access past the end of an allocated buffer. An attacker...

Design/Logic Flaw

A vulnerability has been identified in JT2Go All versions V13.1.0.1, Teamcenter Visualization All versions V13.1.0.1. Affected applications lack proper validation of user-supplied data when parsing TIFF files. This could lead to pointer dereferences of a value obtained from untrusted source. An...

Memory corruption

A vulnerability has been identified in JT2Go All versions V13.1.0.1, Teamcenter Visualization All versions V13.1.0.1. Affected applications lack proper validation of user-supplied data when parsing of PCT files. This could result in a memory corruption condition. An attacker could leverage this...

CVE-2020-27857

Foxit Studio Photo 3.6.6.922 is affected by CVE-2020-27857 due to an out-of-bounds write during NEF file parsing, allowing remote code execution when a user opens a malicious file or visits a crafted page. Root cause: improper validation of user-supplied data leading to a write past the end of an...

CVE-2020-27855

Foxit Studio Photo 3.6.6.922 is affected by CVE-2020-27855 due to an SR2 file parsing flaw. The root cause is improper validation of user-supplied data, causing a read past the end of an allocated structure. This information-disclosure/possible code-execution vector requires user interaction (tar...

CVE-2020-27855

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

CVE-2020-17436

Foxit Studio Photo 3.6.6.922 is affected by a CMP file parsing vulnerability causing an out-of-bounds read in the target process. The issue arises from insufficient validation of user-supplied data and can be leveraged with other vulnerabilities to execute code in the context of the current proce...

CVE-2020-17436

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

CVE-2020-17434

CVE-2020-17434 concerns Foxit Studio Photo versions affected by an ARW file parsing flaw. The issue arises from insufficient validation of user-supplied data, causing a read past the end of an allocated structure and leading to information disclosure. Several connected sources (including ZDI advi...

CVE-2020-17435

CVE-2020-17435 affects Foxit Studio Photo (versions around 3.6.6.x). The vulnerability is a CR2 file parsing flaw that allows an information disclosure due to an out-of-bounds read caused by inadequate validation of user-supplied data. Exploitation requires user interaction (visiting a malicious ...

CVE-2020-17433

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

CVE-2020-17432

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

CVE-2020-17430

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2020-17430

Foxit Studio Photo is affected by CVE-2020-17430. The vulnerability resides in CR2 file parsing where improper validation can cause a write past the end of an allocated structure, enabling arbitrary code execution with the current process context after user interaction (e.g., visiting a malicious...

CVE-2020-17429

Foxit Studio Photo information disclosure (CVE-2020-17429) affects Foxit Studio Photo 3.6.6.922 and earlier (variants in linked sources also reference 3.6.6.930 and older). The root cause is improper validation of user-supplied data within CMP file handling, leading to a read past the end of an a...

CVE-2020-17428

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

CVE-2020-17428

Foxit Studio Photo CMP file parsing vulnerability (CVE-2020-17428) allows information disclosure via a CMP data handling flaw that can read past the end of an allocated structure. Evidence from ZDI-20-1339 confirms an out-of-bounds read, enabling leakage when a user visits a malicious page or ope...