CVE-2020-27762

A flaw was found in ImageMagick in coders/hdr.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type unsigned char. This would most likely lead to an impact to application availability, but could...

CVE-2020-27758

A flaw was found in ImageMagick in coders/txt.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type unsigned long long. This would most likely lead to an impact to application availability, but...

CVE-2020-27752

A flaw was found in ImageMagick in MagickCore/quantum-private.h. This flaw allows an attacker who submits a crafted file processed by ImageMagick to trigger a heap buffer overflow. The highest threat from this vulnerability is to system availability and also a potential impact on data integrity...

CVE-2020-27751

A flaw was found in ImageMagick in MagickCore/quantum-export.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type unsigned long long as well as a shift exponent that is too large for 64-bit type...

CVE-2020-4739

IBM DB2 Accessories Suite for Linux, UNIX, and Windows, DB2 for Linux, UNIX and Windows includes DB2 Connect Server 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local authenticated attacker to execute arbitrary code on the system, caused by DLL search order hijacking vulnerability in Microsoft...

Schneider Electric Modicon Quantum and Schneider Electric Modicon M340 Buffer Error Vulnerability

The Schneider Electric Modicon Quantum and Schneider Electric Modicon M340 are both products of Schneider Electric, France.The Schneider Electric Modicon Quantum is a large programmable logic controller PLC for The Schneider Electric Modicon Quantum is a large programmable logic controller PLC fo...

Google Chrome 安全漏洞

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A PDFium improperly implemented vulnerability exists in versions of Google Chrome prior to 87.0.4280.66. An attacker can exploit this vulnerability to bypass...

The vulnerability of the Adobe Photoshop graphic editor lies in its uncontrolled search path, which allows a hacker to execute arbitrary code in the context of the current user.

The vulnerability of the Adobe Photoshop graphic editor is related to an uncontrolled element in the search process. Exploiting this vulnerability allows a hacker to execute arbitrary code in the context of the current user, using a specially crafted file...

The vulnerability of the professional video editing software Adobe Premiere Pro, related to an uncontrolled search element, allows a hacker to execute arbitrary code in the context of the current user.

The vulnerability of the professional video editing software Adobe Premiere Pro lies in its uncontrolled search process. Exploiting this vulnerability allows an attacker to execute arbitrary code in the context of the current user, using a specially crafted file...

The vulnerability of the Adobe Creative Cloud Desktop Application’s graphic editor app relates to an uncontrolled search path element, allowing a malicious actor to execute arbitrary code within the context of the current user.

The vulnerability of the Adobe Creative Cloud Desktop Application’s graphic editor app relates to an uncontrolled search path element. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code in the context of the current user, using a specially crafted file...

The vulnerability of Adobe After Effects’ video and dynamic image editing software lies in its uncontrolled search path, allowing attackers to execute arbitrary code within the context of the current user.

The vulnerability of Adobe After Effects video and dynamic image editing software is related to an uncontrolled element in the search process. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using a specially crafted file...

PT-2020-4871 · Microsoft · Raw Image Extension

Name of the Vulnerable Software and Affected Versions: Raw Image Extension affected versions not specified Description: The issue is related to a buffer overflow, which can be exploited by a remote attacker using a specially crafted file to execute arbitrary code. Recommendations: At the moment,...

BIMx Desktop Viewer Resource Parsing Integer Overflow Vulnerability

Talos Vulnerability Report TALOS-2020-1032 BIMx Desktop Viewer Resource Parsing Integer Overflow Vulnerability November 6, 2020 CVE Number CVE-2020-6099 SUMMARY An exploitable code execution vulnerability exists in the file format parsing functionality of Graphisoft BIMx Desktop Viewer 2019.2.232...

Cisco SD-WAN vManage Software XML External Entity Vulnerability

A vulnerability in the web UI of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to gain read and write access to information that is stored on an affected system. The vulnerability is due to improper handling of XML External Entity XXE entries when parsing certain XML...

freetype: Heap-based buffer overflow due to integer truncation in Load_SBit_Png

A heap buffer overflow leading to out-of-bounds write was found in freetype. Memory allocation based on truncated PNG width and height values allows for an out-of-bounds write to occur in application memory when an attacker supplies a specially crafted TTF file...

binutils: denial of service via crafted ELF file

findabstractinstance in dwarf2.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.32, allows remote attackers to cause a denial of service infinite recursion and application crash via a crafted ELF file...

tcpdump: Out of bounds read/write in in get_next_file() in tcpdump.c

An out-of-bounds write vulnerability was discovered in tcpdump while reading the file passed to the -V option of the command line program. An attacker may abuse this flaw by tricking a victim user into using a malicious file with the -V option, which would make the program read one byte before a...

IBM i2 Analysts Notebook Memory Corruption Vulnerability (CNVD-2020-60086)

IBM i2 Analysts Notebook is a data visualization and analysis tool from IBM USA. The product supports features such as data storage and data analysis. A memory corruption vulnerability exists in IBM i2 Analysts Notebook versions 9.2.0 and 9.2.1. An attacker can exploit this vulnerability by...

IBM i2 Analysts Notebook Memory Corruption Vulnerability (CNVD-2020-60085)

IBM i2 Analysts Notebook is a data visualization and analysis tool from IBM USA. The product supports features such as data storage and data analysis. A memory corruption vulnerability exists in IBM i2 Analysts Notebook versions 9.2.0 and 9.2.1. An attacker can exploit this vulnerability by...

CVE-2020-4722

IBM i2 Analyst Notebook 9.2.0 and 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially-crafted file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force I...