The vulnerability of the Microsoft Office software package and the Microsoft Outlook email client arises from operations that occur outside the buffer in memory. This allows attackers to exploit their privileges and execute arbitrary code.

The vulnerability of the Microsoft Office software and the Microsoft Outlook email client relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to enhance their privileges and execute arbitrary code using a special...

The vulnerability of the Click-to-Run component of Microsoft Office applications, which stems from the operation of transferring data out of the buffer into memory, allows attackers to exploit their privileges.

The vulnerability of the Click-to-Run component of Microsoft Office applications relates to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created file...

CVE-2020-9750

Adobe Animate version 20.5 and earlier is affected by an out-of-bounds read vulnerability, which could result in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted .fla file in Animate...

CVE-2020-9748

Adobe Animate version 20.5 and earlier is affected by a stack overflow vulnerability, which could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted .fla file in Animate...

CVE-2020-9749

Adobe Animate version 20.5 and earlier is affected by an out-of-bounds read vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted .fla file in Animate...

Apple macOS Catalina, iOS and iPadOS Model I/O Component Buffer Overflow Vulnerability

Apple iPadOS and Apple macOS Catalina are both products of Apple Inc. Apple iPadOS is an operating system for the iPad tablet computer. apple macOS Catalina is a specialized operating system developed for Mac computers. A security vulnerability exists in the Model I/O component of Apple macOS...

EulerOS Virtualization 3.0.2.2 : blktrace (EulerOS-SA-2020-2217)

According to the version of the blktrace package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - blktrace aka Block IO Tracing 1.2.0, as used with the Linux kernel and Android, has a buffer overflow in the devmapread function in...

Apple iOS Arbitrary Code Execution Vulnerability (CNVD-2020-59479)

Apple iOS is an operating system for mobile devices developed by Apple Inc. in the United States. A security vulnerability exists in Apple iOS. The vulnerability stems from the fact that Apple Xcode could allow an authenticated remote attacker to execute arbitrary code on the system. By tricking ...

CVE-2020-9747

Adobe Animate version 20.5 and earlier is affected by a double free vulnerability when parsing a crafted .fla file, which could result in arbitrary code execution in the context of the current user. This vulnerability requires user interaction to exploit...

The vulnerability of Microsoft Word’s text editor, related to errors in processing files with the .LNK extension, allows a hacker to execute arbitrary code.

The vulnerability of Microsoft Word is related to errors in processing files with the extension .LNK. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially crafted file with the extension .LNK...

USN-4588-1 flightgear vulnerability

It was discovered that FlightGear could write arbitrary files if received a special nasal script. A remote attacker could exploit this with a crafted file to execute arbitrary code...

CVE-2020-1167

A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory. An attacker who successfully exploited the vulnerability could execute arbitrary code on a target system. To exploit the vulnerability, a user would have to open a specially crafte...

CVE-2020-16955

An elevation of privilege vulnerability exists in the way that Microsoft Office Click-to-Run C2R AppVLP handles certain files. An attacker who successfully exploited the vulnerability could elevate privileges. To exploit this vulnerability, an attacker would need to convince a user to open a...

CVE-2020-16967

A remote code execution vulnerability exists when the Windows Camera Codec Pack improperly handles objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user...

CVE-2020-16957

A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system. An attacker could exploit this vulnerability by entici...

CVE-2020-16968

A remote code execution vulnerability exists when the Windows Camera Codec Pack improperly handles objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user...

CVE-2020-16934

An elevation of privilege vulnerability exists in the way that Microsoft Office Click-to-Run C2R AppVLP handles certain files. An attacker who successfully exploited the vulnerability could elevate privileges. To exploit this vulnerability, an attacker would need to convince a user to open a...

CVE-2020-16929

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with...

CVE-2020-16928

An elevation of privilege vulnerability exists in the way that Microsoft Office Click-to-Run C2R AppVLP handles certain files. An attacker who successfully exploited the vulnerability could elevate privileges. To exploit this vulnerability, an attacker would need to convince a user to open a...

CVE-2020-16932

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with...