Foxit Studio Photo Buffer Overflow Vulnerability (CNVD-2020-21062)

Foxit Studio Photo is a set of image editing software from the Chinese company Foxit Foxit. A buffer overflow vulnerability exists in the handling of TIF files in Foxit Studio Photo 3.6.6.918 and earlier versions for Windows-based platforms, which originates from the program failing to properly...

The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems arises from insufficient validation of input data, allowing a malicious actor to execute arbitrary code.

The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code by sending a specially crafted ARF or WRF file...

Microsoft Word Remote Code Execution Vulnerability (CNVD-2020-19916)

Microsoft Word is a word processing software in the Office suite of the American Microsoft Microsoft. A security vulnerability exists in Microsoft Word that stems from the program's inability to properly handle memory objects. The vulnerability can be exploited by an attacker with a specially...

The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems arises from insufficient validation of input data, allowing a perpetrator to execute arbitrary code.

The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code by sending a specially crafted ARF or WRF file...

Western Digital WesternDigitalSSDDashboardSetup.exe Code Issue Vulnerability

Western Digital WesternDigitalSSDDashboardSetup.exe is an installer for SSD performance monitoring dashboard software from Western Digital. A code issue vulnerability exists in Western Digital WesternDigitalSSDDashboardSetup.exe versions prior to 3.0.2.0. An attacker could exploit this...

Android System Elevation of Privilege Vulnerability (CNVD-2020-16081)

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. System is one of the system components. A security vulnerability exists in System in Android 9. A local attacker can exploit the vulnerability with the help of specially crafted files t...

Debian DLA-2126-1 : gst-plugins-base0.10 security update

Some isses have been found in gst-plugins-base0.10, a package that provides GStreamer plugins from the 'base' set. All issues are related to crafted ico-files that could result in an out-of-bounds read or crafted video- and ASDF-files that could produce floating point exceptions, which could caus...

[SECURITY] [DLA 2126-1] gst-plugins-base0.10 security update

Package : gst-plugins-base0.10 Version : 0.10.36-2+deb8u2 CVE ID : CVE-2016-9811 CVE-2017-5837 CVE-2017-5844 Some isses have been found in gst-plugins-base0.10, a package that provides GStreamer plugins from the "base" set. All issues are related to crafted ico-files that could result in an...

MGASA-2020-0084 Updated exiv2 packages fix security vulnerability

The updated packages fix a security vulnerability: In Jp2Image::readMetadata in jp2image.cpp in Exiv2 0.27.2, an input file can result in an infinite loop and hang, with high CPU consumption. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted file...

Denial of Service Vulnerability in FreeImage TIFF Files

FreeImage is a free , open source , cross-platform Windows, Linux and Mac OS X , supports more than 20 types of images such as BMP, JPEG, GIF, PNG, TIFF , etc. image processing library . A denial of service vulnerability exists in the FreeImage image parsing library when parsing meta information ...

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to writing beyond the buffer in memory, allowing attackers to execute arbitrary code.

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 is related to writing beyond the buffer in memory. Exploiting this vulnerability can allow an...

Vulnerability Spotlight: Accusoft ImageGear library code execution vulnerabilities

Emmanuel Tacheau of Cisco Talos discovered these vulnerabilities. Blog by Jon Munshaw. Cisco Talos recently discovered three code execution vulnerabilities in Accusoft ImageGear. The ImageGear library is a document-imaging developer toolkit to assist users with image conversion, creation, editing...

USN-4265-1 spamassassin vulnerabilities

It was discovered that SpamAssassin incorrectly handled certain CF files. If a user or automated system were tricked into using a specially-crafted CF file, a remote attacker could possibly run arbitrary code...

CVE-2018-5158

The PDF viewer does not sufficiently sanitize PostScript calculator functions, allowing malicious JavaScript to be injected through a crafted PDF file. This JavaScript can then be run with the permissions of the PDF viewer by its worker. This vulnerability affects Firefox ESR 52.8 and Firefox 60...

Huawei EulerOS: Security Advisory for openjpeg (EulerOS-SA-2019-2503)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for binutils (EulerOS-SA-2019-1836)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for ImageMagick (EulerOS-SA-2017-1112)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft ASP.NET Core Remote Code Execution Vulnerability

Microsoft ASP.NET Core is a framework of cross-platform open source framework from Microsoft. The framework is used to build cloud-based applications such as Web applications, Internet of Things applications, and mobile backends. A remote code execution vulnerability exists in Microsoft ASP.NET...

Microsoft Windows Graphics Component Information Disclosure Vulnerability (CNVD-2020-03540)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation, U.S.A. Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. Windows Graphics is one of the graphics components. An information disclosure...

Microsoft .NET Framework Remote Code Execution Vulnerability (CNVD-2020-08132)

Microsoft .NET Framework is a comprehensive and consistent programming model from Microsoft Corporation USA and a Windows Store, Windows Phone, Windows Server, and Microsoft Azure applications. The platform includes the C and Visual Basic programming languages, a public language runtime library,...