CVE-2021-45288

A Double Free vulnerability exists in filedump.c in GPAC 1.0.1, which could cause a Denail of Service via a crafted file in the MP4Box command...

CVE-2021-45288

CVE-2021-45288 affects GPAC 1.0.1; a Double Free in filedump.c can cause Denial of Service via a crafted MP4Box file. Root cause: memory mismanagement leading to a crash. Impact is DoS; no explicit exploitation details provided in the sources. Remediation is not standardized across documents, but...

CVE-2021-45292

The gfisomhintrtpread function in GPAC 1.0.1 allows attackers to cause a denial of service Invalid memory address dereference via a crafted file in the MP4Box command...

CVE-2021-45292

The gfisomhintrtpread function in GPAC 1.0.1 allows attackers to cause a denial of service Invalid memory address dereference via a crafted file in the MP4Box command...

PT-2021-24225 · Gpac · Gpac

Name of the Vulnerable Software and Affected Versions: GPAC version 1.0.1 Description: The issue allows malicious users to cause a denial of service due to an invalid memory address dereference. This can be achieved via a crafted file in the MP4Box command, specifically exploiting the gf dump set...

CVE-2021-45291

The gfdumpsetup function in GPAC 1.0.1 allows malicoius users to cause a denial of service Invalid memory address dereference via a crafted file in the MP4Box command...

PT-2021-24226 · Gpac · Gpac

Name of the Vulnerable Software and Affected Versions: GPAC version 1.0.1 Description: The issue allows attackers to cause a denial of service due to an invalid memory address dereference. This can be achieved via a crafted file in the MP4Box command, specifically exploiting the gf isom hint rtp...

CVE-2021-45291

The gfdumpsetup function in GPAC 1.0.1 allows malicoius users to cause a denial of service Invalid memory address dereference via a crafted file in the MP4Box command...

The vulnerability of the ActiveX control of Internet Explorer allows a hacker to execute arbitrary code.

The vulnerability of the ActiveX control in Internet Explorer is related to errors in processing the .mht file’s header. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted file to the user...

The vulnerability of PDF viewer programs such as Adobe Reader and Document Cloud lies in the use of memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of PDF viewer programs like Adobe Reader and Document Cloud lies in the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted PDF file...

The vulnerability of the Foxit PDF Reader and Foxit PDF Editor programs arises from a buffer out-of-bounds exception, allowing an attacker to execute arbitrary code.

The vulnerability of Foxit PDF Reader and Foxit PDF Editor lies in the execution of an operation outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the target system by having the user open a specially crafted PDF file...

The vulnerability of Adobe After Effects’ video and dynamic image editing software relates to the manipulation of the null pointer, allowing attackers to trigger a service failure.

The vulnerability of Adobe After Effects video and dynamic image editing software relates to the handling of the zero pointer. Exploiting this vulnerability can allow a malicious actor to cause a service failure using a specially crafted PDF file...

The vulnerability of the F2fs-Tools utility, related to incorrect external manipulation of file names or file paths, allows a malicious user to delete any files they desire.

The vulnerability of the F2fs-Tools tool is related to improper external manipulation of the file name or file path. Exploiting this vulnerability allows an attacker to delete arbitrary files by creating a specially crafted file system called f2fs...

The vulnerability of the vim drawscreen.c win_redr_status() function in the Vim text editor, which allows an attacker to trigger a buffer overflow.

The vulnerability of the vim drawscreen.c winredrstatus function in the Vim text editor is related to writing beyond the buffer’s boundaries. Exploiting this vulnerability could allow a remote attacker to trigger a buffer overflow attack using a specially crafted file...

The vulnerability of the Vim text editor lies in the fact that an operation outside the buffer boundaries into memory is allowed, enabling a hacker to trigger buffer overflow attacks.

The vulnerability of the Vim text editor is related to the execution of an operation beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to trigger a buffer overflow by using a specially crafted file with the "-s" parameter...

The vulnerability of the F2fs-Tools tool, related to reading beyond the memory boundaries, allows a intruder to access confidential information.

The vulnerability of the F2fs-Tools tool is related to reading data beyond the memory boundaries. Exploiting this vulnerability can allow an attacker to access confidential information by causing a read error beyond the allowed range, thereby creating a specially crafted file system for F2fs...

Sharutils sharutils (unshar command) version 4.15.2 contains a Buffer Overflow vulnerability in Affected component on the file unshar.c at line 75, function looks_like_c_code. Failure to perform checking of the buffer containing input line. that can result in Could lead to code execution. This attack appear to be exploitable via Victim have to run unshar command on a specially crafted file..

...

Sql injection

KNIME Analytics Platform before 4.5.0 is vulnerable to XXE external XML entity injection via a crafted workflow file .knwf, aka AP-17730...

Privilege Escalation

github.com/ether/etherpad-lite is vulnerable to Privilege Escalation. The library does not properly validate the .etherpad import files, allowing an attacker to gain admin privileges and execute arbitrary code using malicious crafted import file...

CVE-2021-37322

A use-after-free flaw was found in binutils’ cxxfilt functionality. The attack needs to be initiated locally where an attacker could convince a victim to read a specially crafted file which is processed by cxxfilt, leading to disclosure of memory and possibly leading to the execution of arbitrary...