CVE-2020-10809

An issue was discovered in HDF5 through 1.12.0. A heap-based buffer overflow exists in the function Decompress located in decompress.c. It can be triggered by sending a crafted file to the gif2h5 binary. It allows an attacker to cause Denial of Service...

UBUNTU-CVE-2020-10809

An issue was discovered in HDF5 through 1.12.0. A heap-based buffer overflow exists in the function Decompress located in decompress.c. It can be triggered by sending a crafted file to the gif2h5 binary. It allows an attacker to cause Denial of Service...

Code Execution Vulnerability in Foxit Reader U3D Plug-in (CNVD-2020-26511)

Foxit Software Incorporated Foxit Software is a provider of product technology and solutions that cover the document lifecycle, including document generation, conversion, display, editing, searching, printing, storage, signing, forms, protection, and secure distribution management. A code executi...

The vulnerability of Microsoft Office package-related office programs lies in the improper handling of objects in memory, which allows an attacker to execute arbitrary code.

The vulnerability of Microsoft Office package-related programs is related to incorrect handling of objects in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

Design/Logic Flaw

The hncbd90 component in Hancom Office 9.6.1.9403 allows a use-after-free via an unknown object in a crafted .docx file...

Microsoft Office package vulnerabilities, related to deficiencies in object handling in memory, allow attackers to execute arbitrary code.

The vulnerability of Microsoft Office packages is related to deficiencies in object processing in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created file...

Microsoft Office package vulnerabilities, related to deficiencies in object handling in memory, allow attackers to execute arbitrary code.

The vulnerability of Microsoft Office packages is related to deficiencies in object processing in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created file...

Microsoft Word Remote Code Execution Vulnerability (CNVD-2020-17174)

Microsoft Word is a word processing software in the Office suite of the U.S. company Microsoft Microsoft. A remote code execution vulnerability exists in Microsoft Word. An attacker could exploit the vulnerability by using a specially crafted file to perform an operation in the current user's...

Microsoft Word HTML Rendering Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Word. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of D...

Microsoft Word and Microsoft Outlook Buffer Overflow Vulnerability

Microsoft Word and Microsoft Outlook are both products of Microsoft Corporation.Microsoft Word is a set of word processing software in the Office suite.Microsoft Outlook is a set of e-mail applications. Microsoft Word and Microsoft Outlook have security vulnerabilities. An attacker could exploit...

Microsoft Word Remote Code Execution Vulnerability (CNVD-2020-19248)

Microsoft Word is a word processing software in the Office suite of the U.S. company Microsoft Microsoft. A remote code execution vulnerability exists in Microsoft Word, which can be exploited by an attacker with the help of a specially crafted file to perform an operation in the security context...

Security Updates for Microsoft Office Products (March 2020) (macOS)

The Microsoft Office application installed on the remote macOS or Mac OS X host is missing a security update. It is, therefore, affected by multiple remote code execution vulnerabilities in Microsoft Word software due to failure to properly handle objects in memory. An attacker could use a...

The vulnerability of the Windows operating system’s image library, allowing a hacker to execute arbitrary code

The vulnerability of the Windows operating system’s image library relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

The vulnerability of microprogrammed software in HP PageWide and HP OfficeJet Pro printers arises from the use of an operator like “assert()”, which allows a malicious actor to trigger a service failure or gain unauthorized access to protected information.

The vulnerability of Microprogrammed Software in HP PageWide and HP OfficeJet Pro printers is related to the use of the assert function or similar operators. Exploiting this vulnerability can allow attackers to cause malfunctions during maintenance or gain unauthorized access to protected...

The vulnerability of microprogrammed software in HP PageWide and HP OfficeJet Pro printers stems from the use of an assert() or similar operator function, which allows a malicious actor to trigger a service failure.

The vulnerability of Microprogrammed Software in HP PageWide and HP OfficeJet Pro printers is related to the use of the assert function or similar operators. Exploiting this vulnerability can allow attackers to trigger a service failure using a specially created file...

PT-2021-6495 · Libde265 +4 · Libde265 +4

Name of the Vulnerable Software and Affected Versions: libde265 version 1.0.4 Description: The issue is related to a heap buffer overflow in the mc chroma function of the libde265 video codec implementation for h.265. This can be exploited by a remote attacker using a specially crafted file,...

The vulnerability of the TIFFSetDirectory function in the LibTIFF library, related to uncontrolled resource consumption, allows attackers to cause service failures.

The vulnerability of the TIFFSetDirectory function in the LibTIFF library is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures through the use of a specially created tiff file...

The vulnerability of the LibTIFF library, related to writing beyond the buffer boundaries in memory, allows an attacker to cause a service failure or execute arbitrary code.

The vulnerability of the LibTIFF library lies in the writing beyond buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary code using a specially crafted file...

CVE-2018-1000654

GNU Libtasn1-4.13 libtasn1-4.13 version libtasn1-4.13, libtasn1-4.12 contains a DoS, specifically CPU usage will reach 100% when running asn1Paser against the POC due to an issue in asn1expandobjectidptree, after a long time, the program will be killed. This attack appears to be exploitable via...

Microsoft Windows Jet Database Remote Code Execution (CVE-2019-1249)

A remote code execution vulnerability exists in the Jet Database Engine component of Microsoft Windows. The vulnerability is due to improper handling of objects in memory. A remote attacker could exploit this vulnerability by enticing a target user into opening a crafted file. Successful...