Vulnerability of the ReadDIBImage and WriteDIBImage functions in the console-based image editing tool ImageMagick, allowing a hacker to execute arbitrary code.

The vulnerability of the ReadDIBImage and WriteDIBImage functions in the ImageMagick console-based graphic editor is related to writing data beyond the buffer boundaries. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using a specially created file...

The vulnerability of Firefox browsers, Firefox ESR, and the email client Thunderbird lies in the ability to write beyond the buffer boundaries of memory, allowing an attacker to execute arbitrary code.

The vulnerabilities of Firefox browsers, Firefox ESR, and the email client Thunderbird are related to the writing beyond the buffer boundaries of memory. Exploiting these vulnerabilities can allow attackers to execute arbitrary code using a specially crafted file with the .MAR extension...

The vulnerability of Microsoft Office packages, related to errors in information presentation by the user interface, allows an intruder to gain unauthorized access to protected information.

The vulnerability of Microsoft Office packages is related to errors in information representation by the user interface. Exploiting this vulnerability allows an attacker, operating remotely, to gain unauthorized access to protected information using a specially crafted file...

The vulnerability in the implementation of the WebRTC technology in Google Chrome browser allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the WebRTC technology implemented in Google Chrome browser is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information through a specially created fi...

The vulnerability of the Microsoft Office suite arises from insufficient data validation, allowing attackers to execute arbitrary code.

The vulnerability of the Microsoft Office suite is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted file...

The vulnerability of the Windows Jet Database Engine component allows a perpetrator to execute arbitrary code.

The vulnerability of the Windows Jet Database Engine component in the operating system is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially crafted file...

Unspecified Vulnerability in TCL Communication Alcatel Cingular Flip 2 B9HUAH1

The TCL Communication Alcatel Cingular Flip 2 B9HUAH1 is a cell phone from TCL Communication TCL, a Chinese company. A security vulnerability exists in the TCL Communication Alcatel Cingular Flip 2 B9HUAH1. The vulnerability can be exploited to bypass PIN authentication by creating a specially...

The vulnerability of the ParseJSS component in the VideoLAN VLC media player software allows a hacker to gain unauthorized access to protected information.

The vulnerability of the ParseJSS component in the VideoLAN VLC media player software arises from reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created file...

Cisco Email Security Appliance MP3 Content Filter Bypass Vulnerability

A vulnerability in the MP3 detection engine of Cisco AsyncOS Software for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to bypass configured content filters on the device. The vulnerability is due to improper validation of certain MP3 file types. An attacker...

IrfanView Memory Corruption Vulnerability

IrfanView is an image viewer by Irfan Skiljan software developer in Bosnia and Herzegovina that supports image browsing, image editing, image format conversion and more. A security vulnerability exists in IrfanView version 4.53. An attacker can exploit this vulnerability to cause the application ...

The vulnerability in the DrawImage function (magick/render.c) of the cross-platform graphics library GraphicsMagick, which allows a hacker to trigger a service failure.

The vulnerability of the DrawImage function in the cross-platform graphics library GraphicsMagick is related to a buffer overflow error. Exploiting this vulnerability could allow an attacker to cause a service failure by using a specially created file...

The vulnerability of the coders/wpg.c component in the cross-platform library for working with GraphicsMagick allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the coders/wpg.c component in the cross-platform library for working with GraphicsMagick arises from an operation that occurs outside the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary code...

CVE-2019-1449

A security feature bypass vulnerability exists in the way that Office Click-to-Run C2R components handle a specially crafted file, which could lead to a standard user, any AppContainer sandbox, and Office LPAC Protected View to escalate privileges to SYSTEM.To exploit this bug, an attacker would...

CVE-2019-1443

An information disclosure vulnerability exists in Microsoft SharePoint when an attacker uploads a specially crafted file to the SharePoint Server.An authenticated attacker who successfully exploited this vulnerability could potentially leverage SharePoint functionality to obtain SMB hashes.The...

CVE-2019-1442

A security feature bypass vulnerability exists when Microsoft Office does not validate URLs.An attacker could send a victim a specially crafted file, which could trick the victim into entering credentials, aka 'Microsoft Office Security Feature Bypass Vulnerability'...

Jet Database Engine Remote Code Execution Vulnerability

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system. An attacker could exploit this vulnerability by enticing a victim to...

Microsoft Office Excel Security Feature Bypass

A security feature bypass vulnerability exists in Microsoft Office software by not enforcing macro settings on an Excel document. The security feature bypass by itself does not allow arbitrary code execution. To successfully exploit the vulnerability, an attacker would have to embed a control in ...

Microsoft SharePoint Information Disclosure Vulnerability

An information disclosure vulnerability exists in Microsoft SharePoint when an attacker uploads a specially crafted file to the SharePoint Server. An authenticated attacker who successfully exploited this vulnerability could potentially leverage SharePoint functionality to obtain SMB hashes. The...

EulerOS 2.0 SP5 : exempi (EulerOS-SA-2019-2143)

According to the versions of the exempi package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in Exempi before 2.4.4. The ASFSupport::ReadHeaderObject function in XMPFiles/source/FormatSupport/ASFSupport.cpp allows...

The vulnerability of the TY demux plugin (ty.c) in the Media Player software VideoLAN VLC allows a hacker to execute arbitrary code.

The vulnerability of the TY demux plugin ty.c in the Media Player software VideoLAN VLC is related to errors in number processing. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted .ty file...