Foxit PDF Reader和Foxit PDF Editor 缓冲区错误漏洞

Foxit PDF Reader is a PDF reader. Foxit PDF Reader handles a buffer overflow vulnerability in some Javascript methods, which can be exploited by a remote attacker to submit a special file request and trick the user into parsing it, which can crash the application or execute arbitrary code in the...

USN-5247-1 vim vulnerabilities

It was discovered that vim incorrectly handled parsing of filenames in its search functionality. If a user was tricked into opening a specially crafted file, an attacker could crash the application, leading to a denial of service. This issue only affected Ubuntu 21.10. CVE-2021-3973 It was...

CVE-2022-0204

A heap overflow vulnerability was found in bluez in versions prior to 5.63. An attacker with local network access could pass specially crafted files causing an application to halt or crash, leading to a denial of service...

USN-5236-1 A security issue was fixed in pngcrush

Brian Carpenter discovered that pngcrush incorrectly handled specially crafted file. An attacker could possibly use this issue to cause a denial of service...

Adobe Bridge Buffer Overflow Vulnerability (CNVD-2022-05037)

Adobe Bridge, a file viewer from Adobe, is vulnerable to a buffer overflow vulnerability that results from a boundary error when handling untrusted input. A remote attacker could use the vulnerability to create specially crafted files to trick victims into using the affected software, trigger an...

CVE-2021-44741

Acrobat Reader DC version 21.007.20099 and earlier, 20.004.30017 and earlier and 17.011.30204 and earlier are affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application...

CVE-2021-44709

Acrobat Reader DC version 21.007.20099 and earlier, 20.004.30017 and earlier and 17.011.30204 and earlier are affected by a heap overflow vulnerability due to insecure handling of a crafted file, potentially resulting in arbitrary code execution in the context of the current user. Exploitation of...

The vulnerability of the DirectWrite programming interface in Microsoft Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the DirectWrite programming interface in Microsoft Windows operating systems is related to improper handling of code generation. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

CVE-2021-44740

Acrobat Reader DC version 21.007.20099 and earlier, 20.004.30017 and earlier and 17.011.30204 and earlier are affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application...

Adobe Bridge 缓冲区错误漏洞

Adobe Bridge, a file viewer from Adobe, is vulnerable to a buffer overflow vulnerability that results from a boundary error when handling untrusted input. A remote attacker could use the vulnerability to create specially crafted files to trick victims into using the affected software, trigger an...

CVE-2021-36414

A heab-based buffer overflow vulnerability exists in MP4Box in GPAC 1.0.1 via media.c, which allows attackers to cause a denial of service or execute arbitrary code via a crafted file...

The vulnerability of the monitoring software for PLK devices from Fuji Electric, V-Server Lite and Tellus Lite V-Simulator, arises from buffer overflow in the stack. This allows a hacker to execute arbitrary code.

The vulnerability of the monitoring software for Fujitsu V-Server Lite and Tellus Lite V-Simulator lies in buffer overflows during syntax analysis of X1 files in the V-Simulator module. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially created...

The vulnerability of the libjpeg-turbo codec, related to reading beyond the buffer boundary, allows attackers to access confidential information or cause service failures.

The vulnerability of the libjpeg-turbo codec is related to reading beyond the buffer boundaries. Exploiting this vulnerability can allow a remote attacker to access confidential information or cause service failures by creating a specially crafted file...

An issue has been fixed in Qt versions 5.14.0 where QPluginLoader attempts to load plugins relative to the working directory allowing attackers to execute arbitrary code via crafted files.

...

CVE-2021-40827

Clementine Music Player through 1.3.1 when a GLib 2.0.0 DLL is used is vulnerable to a Read Access Violation on Block Data Move, affecting the MP3 file parsing functionality at memcpy+0x265. The vulnerability is triggered when the user opens a crafted MP3 file or loads a remote stream URL that is...

DEBIAN-CVE-2021-40827

Clementine Music Player through 1.3.1 when a GLib 2.0.0 DLL is used is vulnerable to a Read Access Violation on Block Data Move, affecting the MP3 file parsing functionality at memcpy+0x265. The vulnerability is triggered when the user opens a crafted MP3 file or loads a remote stream URL that is...

CVE-2021-44433

A vulnerability has been identified in JT Utilities All versions V13.1.1.0, JTTK All versions V11.1.1.0. JTTK library in affected products contains a use after free vulnerability that could be triggered while parsing specially crafted JT files. An attacker could leverage this vulnerability to...

CVE-2021-44435

A vulnerability has been identified in JT Utilities All versions V13.1.1.0, JTTK All versions V11.1.1.0. JTTK library in affected products is vulnerable to stack based buffer overflow while parsing specially crafted JT files. An attacker could leverage this vulnerability to execute code in the...

CVE-2021-44439

A vulnerability has been identified in JT Utilities All versions V13.1.1.0, JTTK All versions V11.1.1.0. JTTK library in affected products is vulnerable to an out of bounds read past the end of an allocated buffer when parsing specially crafted JT files. An attacker could leverage this...

CVE-2021-44442

A vulnerability has been identified in JT Utilities All versions V13.1.1.0, JTTK All versions V11.1.1.0. JTTK library in affected products contains an out of bounds write past the fixed-length heap-based buffer while parsing specially crafted JT files. This could allow an attacker to execute code...