The vulnerability of the Windows shell of the operating system, which allows a hacker to execute arbitrary code

The vulnerability of the Windows shell of the operating system is related to access control deficiencies. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely, using a specially crafted file that must be opened by the user...

Aviosoft DVD X Player Standar Buffer Overflow Vulnerability

Aviosoft DVD X Player Standard is a DVD player from the American company Aviosoft. A buffer overflow vulnerability exists in Aviosoft DVD X Player Standard version 5.5.3.9. The vulnerability can be exploited to execute arbitrary code or cause a denial of service via a specially crafted .plf file...

IBM Endpoint Manager for Remote Control on-demand Plug-in Code Execution Vulnerability

IBM Endpoint Manager for Remote Control is a set of IBM's software for managing endpoints using a single agent and a single console. on-demand plugin is one of the plugins that supports loading other plugins without installation. A security vulnerability exists in the on-demand plugin in IBM...

CVE-2018-10177

In ImageMagick 7.0.7-28, there is an infinite loop in the ReadOneMNGImage function of the coders/png.c file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted mng file...

CVE-2018-10177

In ImageMagick 7.0.7-28, there is an infinite loop in the ReadOneMNGImage function of the coders/png.c file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted mng file...

KLA11254 DoS vulnerability in LibreOffice

A heap buffer overflow vulnerability was found in LibreOffice. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely via a specially crafted file. Original advisories LibreOffice Security Advisory Related products LibreOffice CV...

PT-2018-5351 · Libxls · Libxls

Name of the Vulnerable Software and Affected Versions: libxls version 1.4 Description: An integer overflow issue exists in the xls preparseWorkSheet function when handling a MULBLANK record, allowing a specially crafted XLS file to cause memory corruption and potentially result in remote code...

Microsoft Excel Remote Code Execution Vulnerability (CNVD-2018-09644)

Microsoft Excel is a trial balance software component of Microsoft's Office software. A security vulnerability in the way Microsoft Excel handles in-memory objects allows remote attackers to exploit the vulnerability by submitting a special file and tricking the user into parsing it, which could...

UBUNTU-CVE-2018-10177

In ImageMagick 7.0.7-28, there is an infinite loop in the ReadOneMNGImage function of the coders/png.c file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted mng file...

PT-2018-10098 · Exiv2 +6 · Exiv2 +6

Name of the Vulnerable Software and Affected Versions: Exiv2 versions prior to 0.27 Description: The issue allows remote attackers to cause a denial of service, resulting in an application crash, or possibly have other unspecified impacts through a crafted file. This is due to the tEXtToDataBuf...

Microsoft Excel Remote Code Execution Vulnerability (CNVD-2018-08761)

Microsoft Excel 2010 SP2, Excel 2013 RT SP1 and Excel 2013 SP1 are spreadsheet processing software in the Office suite of Microsoft Corporation USA. A remote code execution vulnerability exists in Microsoft Excel 2010 SP2, Excel 2013 RT SP1, and Excel 2013 SP1, which stems from the program failin...

Microsoft Excel Remote Code Execution Vulnerability (CNVD-2018-08416)

Microsoft Excel 2010 SP2 is a set of spreadsheet processing software in the Office suite of the U.S. company Microsoft Microsoft. A remote code execution vulnerability exists in Microsoft Excel 2010 SP2, which stems from the program's failure to properly handle objects in memory. A remote attacke...

CVE-2014-0158

Heap-based buffer overflow in the JPEG2000 image tile decoder in OpenJPEG before 1.5.2 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted file because of incorrect j2kdecode, j2kreadeoc, and tcddecodetile interaction, a...

Heap overflow

Heap-based buffer overflow in the JPEG2000 image tile decoder in OpenJPEG before 1.5.2 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted file because of incorrect j2kdecode, j2kreadeoc, and tcddecodetile interaction, a...

CVE-2014-0158

CVE-2014-0158: OpenJPEG before 1.5.2 contains a heap-based buffer overflow in the JPEG2000 image tile decoder caused by incorrect interactions among j2k_decode, j2k_read_eoc, and tcd_decode_tile. This allows remote attackers to cause a denial of service (application crash) or potentially other im...

Microsoft Excel Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with...

Buffer overflow

Buffer overflow in Buffalo WZR-1750DHP2 Ver.2.30 and earlier allows an attacker to execute arbitrary code via a specially crafted file...

CVE-2018-0555

Buffer overflow in Buffalo WZR-1750DHP2 Ver.2.30 and earlier allows an attacker to execute arbitrary code via a specially crafted file...

Design/Logic Flaw

The xzhead function in xzlib.c in libxml2 before 2.9.6 allows remote attackers to cause a denial of service memory consumption via a crafted LZMA file, because the decoder functionality does not restrict memory usage to what is required for a legitimate file...

CoreText Denial of Service Vulnerability in Multiple Apple Products (CNVD-2018-08312)

Apple iOS, macOS Sierra, tvOS, and watchOS are products of Apple Inc. Apple iOS is an operating system for mobile devices; tvOS is a smart TV operating system; and watchOS is a smart watch operating system. coreText is one of the typography engines. CoreText is a typography engine. A security...