Memory corruption

IBM i2 Analyst Notebook 9.2.1 and 9.2.2 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially-crafted file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force I...

CVE-2020-4551

IBM i2 Analyst Notebook 9.2.1 and 9.2.2 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially-crafted file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force I...

Memory Corruption Vulnerability in CAJViewer 7.2

CAJViewer is a specialized viewer for reading and editing literature in the CNKI series of databases. CAJViewer 7.2 suffers from a memory corruption vulnerability that could allow an attacker to cause the software to crash via a specially constructed file, and could also execute arbitrary code...

Heap Out-of-Bounds Read Vulnerability in CAJViewer 7.2

CAJViewer is a specialized viewer for reading and editing literature in the CNKI series of databases. CAJViewer 7.2 suffers from a heap out-of-bounds write vulnerability, which can be triggered by an attacker by opening a specially constructed file, causing the software to crash, and can be...

The vulnerability of Microsoft Office, Microsoft Word, and Microsoft SharePoint packages lies in the lack of protection for operational data, which allows attackers to gain unauthorized access to protected information.

The vulnerability of Microsoft Office, Microsoft Word, and Microsoft SharePoint lies in the lack of protection for operational data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created file...

Huawei EulerOS: Security Advisory for ImageMagick (EulerOS-SA-2020-1806)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated podofo packages fix security vulnerability

The updated packages fix security vulnerabilities: A stack-based buffer over-read in the PdfEncryptMD5Base::ComputeEncryptionKey function in PdfEncrypt.cpp in PoDoFo 0.9.6-rc1 could be leveraged by remote attackers to cause a denial-of-service via a crafted pdf file. CVE-2018-12983 An issue was...

Arbitrary Code Execution

grub2 is vulnerable to arbitrary code execution. The vulnerability exists through a crafted grub.cfg file during boot process...

Vulnerability of the Microsoft Graphics component in the Windows operating system, allowing a hacker to execute arbitrary code

The vulnerability of the Microsoft Graphics component in the Windows operating system relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted file...

The vulnerability of the Windows Jet Database Engine database management system allows a hacker to execute arbitrary code.

The vulnerability of the Windows Jet Database Engine database management system in Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

CVE-2020-15592

SteelCentral Aternity Agent before 11.0.0.120 on Windows allows Privilege Escalation via a crafted file. It uses an executable running as a high privileged Windows service to perform administrative tasks and collect data from other processes. It distributes functionality among different processes...

The vulnerability of Microsoft Office, Microsoft Word, and Microsoft SharePoint packages lies in the improper handling of objects in memory, which allows an attacker to execute arbitrary code.

The vulnerability of Microsoft Office, Microsoft Word, and Microsoft SharePoint programs is related to incorrect handling of objects in memory. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code using a specially created file...

The vulnerability of Microsoft Office, Microsoft Word, and Microsoft SharePoint packages lies in the improper handling of objects in memory, which allows an attacker to execute arbitrary code.

The vulnerability of Microsoft Office, Microsoft Word, and Microsoft SharePoint programs is related to incorrect handling of objects in memory. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code using a specially created file...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : FFmpeg vulnerabilities (USN-4431-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4431-1 advisory. It was discovered that FFmpeg incorrectly verified empty audio packets or HEVC data. An attacker could possibly use this issue to...

The vulnerability of Microsoft 365 Apps for Enterprise, Microsoft Office, and the Microsoft Outlook email client relates to object processing errors in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft 365 Apps for Enterprise, Microsoft Office, and the Microsoft Outlook email client is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

Unspecified Vulnerability in Sylabs Singularity (CNVD-2020-52437)

Singularity is a Linux-based container platform for running standalone applications. A security vulnerability exists in Sylabs Singularity versions 3.0 through 3.5, which stems from a lack of integrity checks in the program. A remote attacker could exploit the vulnerability by sending a specially...

PT-2020-3820 · Microsoft · Office Excel

Name of the Vulnerable Software and Affected Versions: Microsoft Excel affected versions not specified Description: A remote code execution issue exists in Microsoft Excel software when it fails to properly handle objects in memory. An attacker who successfully exploits this issue could run...

Microsoft Outlook Remote Code Execution Vulnerability (CNVD-2020-45313)

Microsoft Outlook is a suite of e-mail applications from the American company Microsoft. A remote code execution vulnerability exists in Microsoft Outlook, which arises from the program's failure to properly handle objects in memory. An attacker can exploit the vulnerability by means of a special...

GNU LibreDWG decode_R13_R2000 Buffer Overflow Vulnerability

GNU LibreDWG is a C language library for working with DWG files. A buffer overflow vulnerability exists in GNU LibreDWG decodeR13R2000, which can be exploited by a remote attacker to submit a specially crafted malicious file that can be tricked into parsing it to execute arbitrary code in the...

Foxit Studio Photo tif Buffer Overflow Vulnerability

Foxit Studio Photo is a suite of image editing software. A buffer overflow vulnerability exists in Foxit Studio Photo's handling of tif images, which allows remote attackers to exploit the vulnerability by submitting a specially crafted malicious file that can be tricked into parsing and executin...