The vulnerability of the nv_replace() function in the VIM text editor allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the nvreplace function in the VIM text editor is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause a service failure using a specially created file...

The vulnerability of Microsoft Office, Microsoft Excel, and Microsoft 365 Apps for Enterprise programs relates to the use of memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office, Microsoft Excel, and Microsoft 365 Apps for Enterprise packages is related to the use of memory after it is released. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

Design/Logic Flaw

A User Mode Write AV starting at Editor!TMethodImplementationIntercept+0x4189c6 of WildBit Viewer v6.6 allows attackers to cause a denial of service DoS via a crafted ico file...

CVE-2020-23900

A buffer overflow in WildBit Viewer v6.6 allows attackers to cause a denial of service DoS via a crafted tga file. Related to Data from Faulting Address controls Code Flow starting at Editor!TMethodImplementationIntercept+0x57a3b...

CVE-2020-23896

CVE-2020-23896 affects WildBit Viewer 6.6, where a vulnerability in Editor+0x576b enables a crafted TIFF file to trigger a User-Mode Write AV, resulting in a DoS. The issue is described across multiple sources as a vulnerability in the Editor component leading to denial of service via crafted TIF...

CVE-2020-23889

A User Mode Write AV starting at Editor!TMethodImplementationIntercept+0x4189c6 of WildBit Viewer v6.6 allows attackers to cause a denial of service DoS via a crafted ico file...

openSUSE 15 Security Update : binutils (openSUSE-SU-2021:3643-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:3643-1 advisory. - A flaw was found in binutils readelf 2.35 program. An attacker who is able to convince a victim using readelf to read a crafted file could trigger...

binutils: Excessive debug section size can cause excessive memory consumption in bfd's dwarf2.c read_section()

There's a flaw in the BFD library of binutils. An attacker who supplies a crafted file to an application linked with BFD, and using the DWARF functionality, could cause an impact to system availability by way of excessive memory consumption...

exiv2: Out-of-bounds read in Exiv2::Internal::CrwMap::encode

There is a flaw in exiv2. An attacker who is able to submit a crafted file to be processed by an application linked with exiv2 could trigger an out-of-bounds read. The greatest risk of this flaw is to application availability and data confidentiality...

exiv2: Use of uninitialized memory in isWebPType() may lead to information leak

There's a flaw in exiv2's isWebPType function. An attacker who submits a crafted file to be processed by an application linked with exiv2 could trigger an out-of-bounds read of unitialized memory, saving it to the stack. The great impact of this flaw is most likely to application availability wit...

vim: heap-based buffer overflow in utf_ptr2char() in mbyte.c

A flaw was found in vim. A possible heap-based buffer overflow could allow an attacker to input a specially crafted file leading to a crash or code execution. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

vim: use-after-free in nv_replace() in normal.c

A use-after-free vulnerability in vim could allow an attacker to input a specially crafted file leading to memory corruption and a potentially exploitable crash or code execution. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

UBUNTU-CVE-2021-3933

An integer overflow could occur when OpenEXR processes a crafted file on systems where sizet 64 bits. This could cause an invalid bytesPerLine and maxBytesPerLine value, which could lead to problems with application stability or lead to other attack paths...

CVE-2021-3933

An integer overflow could occur when OpenEXR processes a crafted file on systems where sizet is less than 64 bits. This issue could cause an invalid bytesPerLine and maxBytesPerLine value, which leads to problems with application stability or other attack paths...

CVE-2020-23567

Irfanview v4.53 allows attackers to to cause a denial of service DoS via a crafted JPEG 2000 file. Related to "Integer Divide By Zero starting at JPEG2000!ShowPlugInSaveOptionsW+0x00000000000082ea"...

CVE-2020-23567

CVE-2020-23567 affects IrfanView 4.53. The vulnerability allows a DoS via a crafted JPEG 2000 file, related to an Integer Divide By Zero starting at JPEG2000!ShowPlugInSaveOptions_W+0x00000000000082ea. Multiple connected sources (Red Hat, CNVD, CNNVD, CNVD-2021) confirm the issue and provide the ...

PT-2021-5359 · Vim +6 · Vim +6

Name of the Vulnerable Software and Affected Versions: Vim affected versions not specified Description: The issue is related to a buffer overflow in memory due to an operation exceeding buffer boundaries. This can be exploited by a remote attacker using a specially crafted file with the -s script...

CVE-2021-27836

An issue was discoverered in in function xlsgetWorkSheet in xls.c in libxls 1.6.2, allows attackers to cause a denial of service, via a crafted XLS file...

CVE-2020-23109

CVE-2020-23109 : A buffer overflow in libheif 1.6.2 (function convert_colorspace in heif_colorconversion.cc) can be triggered by a crafted HEIF file, enabling denial of service and potential information disclosure. Connected advisories confirm affected packages and that a fix is available in libh...

The vulnerability of the XML object encoding function in the Libxml2 library, related to writing beyond buffer boundaries, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of XML object encoding functions in the Libxml2 library is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even cause service failures through a specially...