UBUNTU-CVE-2019-20093

The PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo 0.9.6 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted file, because of ImageExtractor.cpp...

CVE-2019-20093

The PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo 0.9.6 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted file, because of ImageExtractor.cpp...

PoDoFo null pointer dereference vulnerability (CNVD-2020-03876)

PoDoFo is an open source , written in C++ using the PDF file format library . A security vulnerability exists in the 'PoDoFo::PdfVariant::DelayedLoad' function in the PdfVariant.h file in PoDoFo version 0.9.6. A remote attacker can exploit this vulnerability to cause a denial of service null...

The vulnerability of the Windows operating system, related to incorrect handling of the search path, allows a perpetrator to escalate their privileges and execute arbitrary code.

The vulnerability of the Windows operating system is related to incorrect handling of the search path. Exploiting this vulnerability allows a remote attacker to increase their privileges and execute arbitrary code using a specially created file...

PT-2019-6199 · Struktur Ag +4 · Libde265 +4

Name of the Vulnerable Software and Affected Versions: libde265 version 1.0.4 Description: The issue is related to a global buffer overflow in the decode CABAC bit function. This can be exploited via a crafted file, potentially allowing a remote attacker to cause a denial of service. The...

PT-2019-6186 · Struktur Ag +4 · Libde265 +4

Name of the Vulnerable Software and Affected Versions: libde265 version 1.0.4 Description: The issue is related to a heap buffer overflow in the put weighted pred avg 16 fallback function of the libde265 video codec implementation. This can be exploited by a remote attacker using a specially...

CVE-2018-10535

The ignoresectionsym function in elf.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.30, does not validate the outputsection pointer in the case of a symtab entry with a "SECTION" type that has a "0" value, which allows remote attackers to cause a denial o...

EulerOS 2.0 SP5 : exiv2 (EulerOS-SA-2019-2710)

According to the versions of the exiv2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Exiv2::Internal::PngChunk::parseTXTChunk in Exiv2 v0.26 allows remote attackers to cause a denial of service heap-based buffer over-read via a...

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, and Adobe Acrobat 2017/Adobe Acrobat Reader 2017 involve reading beyond the buffer in memory, allowing attackers to gain unauthorized access to protected information.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, and Adobe Acrobat Reader 2017 are related to reading data beyond the buffer in memory. Exploiting these vulnerabilities can allow an attacker to...

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, and Adobe Acrobat 2017/Adobe Acrobat Reader 2017 involve reading beyond the buffer in memory, allowing attackers to gain unauthorized access to protected information.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, and Adobe Acrobat Reader 2017 are related to reading data beyond the buffer in memory. Exploiting these vulnerabilities can allow an attacker to...

The vulnerability of Netweaver Application Server Java web applications lies in insufficient validation of requests on the server side, allowing attackers to expose privileged user credentials.

The vulnerability of Netweaver Application Server Java web applications is related to insufficient validation of requests on the server side. Exploiting this vulnerability allows a malicious actor to obtain privileged user credentials by using a specially created XML file...

CVE-2019-8738

A memory corruption issue was addressed with improved state management. This issue is fixed in Xcode 11.0. Processing a maliciously crafted file may lead to arbitrary code execution...

Memory corruption

A memory corruption issue was addressed with improved validation. This issue is fixed in Xcode 11.2. Processing a maliciously crafted file may lead to arbitrary code execution...

EulerOS 2.0 SP3 : wavpack (EulerOS-SA-2019-2680)

According to the versions of the wavpack package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The function WavpackPackInit in packutils.c in libwavpack.a in WavPack through 5.1.0 allows attackers to cause a denial-of-service resource...

EulerOS 2.0 SP3 : libplist (EulerOS-SA-2019-2613)

According to the versions of the libplist package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - libplist allows attackers to cause a denial of service large memory allocation and crash via vectors involving an offset size of...

The vulnerability in the Microsoft PowerPoint presentation preparation and viewing software, as well as in the Microsoft Office and Office 365 programs, allows a hacker to execute arbitrary code.

The vulnerability of Microsoft PowerPoint presentation preparation and viewing programs, as well as Microsoft Office and Office 365 suites, is related to errors in memory object handling. Exploiting this vulnerability allows a malicious actor to execute arbitrary code via a specially crafted web...

The vulnerability of the Windows GDI component in Windows operating systems allows attackers to disclose protected information.

The vulnerability of the Windows GDI component in Windows operating systems is related to deficiencies in security mechanisms. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially crafted web page or file...

The vulnerability of the Windows Jet Database Engine component allows a perpetrator to execute arbitrary code.

The vulnerability of the Windows Jet Database Engine component in the operating system is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially crafted file...

The vulnerability of the Windows Media Player component of the Windows operating system, which allows a hacker to disclose protected information

The vulnerability of Windows Media Player on the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially created file...

The vulnerability of Microsoft Excel spreadsheet editors, as well as Microsoft Office and Office 365 products, allows attackers to gain unauthorized access to protected information.

The vulnerability of Microsoft Excel spreadsheet editors, as well as Microsoft Office and Office 365 products, is related to the lack of protection for operational data. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information through a specially...