CVE-2022-21165

All versions of package font-converter are vulnerable to Arbitrary Command Injection due to missing sanitization of input that potentially flows into the childprocess.exec function...

node-js-font-converter 安全漏洞

node-js-font-converter is a FontForge wrapper for zgec individual developers. It allows conversion between different font formats TTF, WOFF, OTF. A security vulnerability exists in all versions of the node-js-font-converter package, which stems from a lack of sanitization of input that may be...

PT-2022-14895 · Unknown · Font-Converter

Name of the Vulnerable Software and Affected Versions: font-converter versions all Description: The issue is related to Arbitrary Command Injection due to missing sanitization of input that potentially flows into the child process.exec function. This affects a FontForge wrapper used for conversio...

Debian dla-3076 : freecad - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3076 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3076-1 [email protected] https://www.debian.org/lts/security/...

DEBIAN-CVE-2022-35463

OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6b0478...

tifig 安全漏洞

tifig is Monostream open source a fast HEIF image converter for thumbnails. tifig v0.2.2 version has a security vulnerability , the vulnerability stems from its /asan/asannewdelete.cpp component in the new has a memory leak...

tifig 资源管理错误漏洞

tifig is a Monostream open source fast HEIF image converter for thumbnails. A security vulnerability exists in tifig version v0.2.2, which stems from a heap-release reuse of its temInfoEntry function...

PT-2022-22828 · Otfcc +1 · Otfcc +1

Name of the Vulnerable Software and Affected Versions: OTFCC version 0.10.4 Description: A heap-buffer overflow issue was discovered in OTFCC. The issue occurs via the /release-x64/otfccdump+0x6c08a6 endpoint. Recommendations: For OTFCC version 0.10.4, at the moment, there is no information about...

tifig 代码问题漏洞

tifig is a fast HEIF image converter for thumbnails from Monostream open source. A code issue vulnerability exists in tifig version v0.2.2, which stems from a memory segment exception in the getType function in its /common/bbox.cpp component...

@fb24m/etc (>=1.0.0, <=1.2.0), pdf-exports (1.0.0) +1 more potentially affected by CVE-2022-21165 via font-converter (1.1.1)

font-converter NPM version 1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on font-converter and may be impacted: - @fb24m/etc =1.0.0, =1.2.0 - pdf-exports 1.0.0 - pdf-img-exports 1.0.0 Source cves: CVE-2022-21165 Source advisory:...

Arbitrary Command Injection

Overview font-converter is a FontForge wrapper that allows conversion between different font formats TTF, WOFF, OTF Affected versions of this package are vulnerable to Arbitrary Command Injection due to missing sanitization of input that potentially flows into the childprocess.exec function. PoC ...

PT-2022-15843 · Open Xchange · Ox App Suite

Name of the Vulnerable Software and Affected Versions: OX App Suite versions 7.10.6 and earlier Description: The issue allows OS Command Injection via Documentconverter, for example, through an email attachment. Recommendations: For OX App Suite versions 7.10.6 and earlier, update to a version...

CVE-2017-20144

A vulnerability has been found in Anvsoft PDFMate PDF Converter Pro 1.7.5.0 and classified as critical. The manipulation leads to memory corruption. The attack can be launched remotely. The exploit has been disclosed to the public and may be used...

Memory corruption

A vulnerability has been found in Anvsoft PDFMate PDF Converter Pro 1.7.5.0 and classified as critical. The manipulation leads to memory corruption. The attack can be launched remotely. The exploit has been disclosed to the public and may be used...

CVE-2017-20144 Anvsoft PDFMate PDF Converter Pro memory corruption

A vulnerability has been found in Anvsoft PDFMate PDF Converter Pro 1.7.5.0 and classified as critical. The manipulation leads to memory corruption. The attack can be launched remotely. The exploit has been disclosed to the public and may be used...

CVE-2017-20144 Anvsoft PDFMate PDF Converter Pro memory corruption

A vulnerability has been found in Anvsoft PDFMate PDF Converter Pro 1.7.5.0 and classified as critical. The manipulation leads to memory corruption. The attack can be launched remotely. The exploit has been disclosed to the public and may be used...

CVE-2017-20144

CVE-2017-20144 affects Anvsoft PDFMate PDF Converter Pro 1.7.5.0. The vulnerability is described as memory corruption in the program’s handling, with the attack reported as remote capable and the exploit publicly disclosed. Connected sources consistently identify the affected product and the memo...

Anvsoft PDFMate PDF Converter Pro 缓冲区错误漏洞

Anvsoft PDFMate PDF Converter Pro is a comprehensive PDF conversion application from Anvsoft. A buffer error vulnerability exists in Anvsoft PDFMate PDF Converter Pro version 1.7.5, which originates from an operation that can lead to memory corruption, and attacks can be launched remotely...

PT-2022-8011 · Anvsoft · Anvsoft Pdfmate Pdf Converter Pro

Name of the Vulnerable Software and Affected Versions: Anvsoft PDFMate PDF Converter Pro version 1.7.5.0 Description: A critical issue has been found, leading to memory corruption. The attack can be launched remotely. Recommendations: For Anvsoft PDFMate PDF Converter Pro version 1.7.5.0, at the...

Open-Xchange OX App Suite 操作系统命令注入漏洞

Open-Xchange OX App Suite is an email and productivity suite client software from Open-Xchange Germany. An operating system command injection vulnerability exists in Open-Xchange OX App Suite versions 7.10.6 and below, which stems from a remote code execution flaw in OX Documentconverter that cou...