Google Chrome memory misreference vulnerability (CNVD-2019-42589)

Google Chrome is the United States Google Google company's a Web browser. PDFium is one of the open source PDF rendering engine. Google Chrome 76.0.3809.100 previous version of a security vulnerability. Remote attackers can exploit the vulnerability through specially crafted PDF files to cause he...

IrfanView memory corruption vulnerability (CNVD-2019-42234)

IrfanView is an image viewer by Irfan Skiljan software developer in Bosnia and Herzegovina that supports image browsing, image editing, image format conversion and more. A security vulnerability exists in IrfanView version 4.53. An attacker exploits the vulnerability by tricking users into clicki...

Microsoft Office Input Validation Error Vulnerability

Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. The product's common components include Word, Excel, Access, Powerpoint, FrontPage, etc.. A security vulnerability exists in Microsoft SharePoint Server 2019 that stems from Microsoft Office failin...

Microsoft SharePoint Information Disclosure Vulnerability (CNVD-2019-41633)

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. An information...

Microsoft Office ClickToRun Security Feature Bypass Vulnerability

Microsoft Office ClickToRun is a component of Microsoft Corporation USA for downloading and installing Microsoft Office products. A security vulnerability exists in the way files are handled in the Microsoft Office ClickToRun component. An attacker could exploit the vulnerability to elevate...

EulerOS 2.0 SP8 : openjpeg (EulerOS-SA-2019-2110)

According to the versions of the openjpeg package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - convert.c in OpenJPEG before 2.1.2 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via...

Security Bulletin: Vulnerabilities in GNU binutils affect IBM Netezza Analytics

Summary Open Source Binutils is used by IBM Netezza Analytics. IBM Netezza Analytics has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2018-10534 DESCRIPTION: GNU Binutils is vulnerable to a denial of service, caused by an out-of-bounds memory write in the...

The vulnerability of the mkv::event_thread_t() function in the VideoLAN VLC media player software allows a attacker to compromise data integrity, gain unauthorized access to protected information, and cause service failures.

The vulnerability of the mkv::eventthreadt function in the VideoLAN VLC media player software is related to a buffer overflow attack. Exploiting this vulnerability could allow an attacker to compromise data integrity, gain unauthorized access to protected information, and even cause service...

NewStart CGSL CORE 5.04 / MAIN 5.04 : exempi Multiple Vulnerabilities (NS-SA-2019-0186)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has exempi packages installed that are affected by multiple vulnerabilities: - An issue was discovered in Exempi before 2.4.3. It allows remote attackers to cause a denial of service invalid memcpy with resultant use-after-free...

PT-2019-5730 · Imagemagick +5 · Imagemagick +5

Name of the Vulnerable Software and Affected Versions: ImageMagick versions prior to 6.9.10-69 and 7.0.8-69 Description: The issue is related to the IntensityCompare function in the /magick/quantize.c file of the ImageMagick console graphic editor, which is associated with an integer overflow. Th...

Microsoft Graphics Component Information Disclosure Vulnerability

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. Graphics Components is one of the graphics components. An information disclosure...

Microsoft Windows Jet Database Engine Remote Code Execution Vulnerability (CNVD-2019-34741)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. Windows Jet Database Engine is one of the database engines. A remote code execution...

PT-2019-5845 · Imagemagick +5 · Imagemagick +5

Name of the Vulnerable Software and Affected Versions: ImageMagick versions prior to 7.0.9-0 Description: A flaw was found in ImageMagick in MagickCore/quantum.h, related to an integer overflow value. This issue allows a remote attacker to cause a denial of service using a specially crafted file...

PT-2019-5870 · Imagemagick +5 · Imagemagick +5

Name of the Vulnerable Software and Affected Versions: ImageMagick versions prior to 7.0.9-0 Description: A flaw was found in ImageMagick in MagickCore/statistic.c, related to an integer overflow of the value. An attacker who submits a crafted file that is processed by ImageMagick could trigger...

PT-2019-5865 · Imagemagick +5 · Imagemagick +5

Name of the Vulnerable Software and Affected Versions: ImageMagick versions prior to 7.0.9-0 Description: A flaw was found in ImageMagick in MagickCore/gem-private.h, related to division by zero. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined...

PT-2019-5851 · Imagemagick +5 · Imagemagick +5

Name of the Vulnerable Software and Affected Versions: ImageMagick versions prior to 7.0.8-69 Description: A flaw was found in ImageMagick in MagickCore/statistic.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values...

PT-2019-3510

Name of the Vulnerable Software and Affected Versions Windows Imaging API affected versions not specified Description The issue is related to the improper handling of objects in memory by the Windows Imaging API, which can be exploited to execute arbitrary code. This can be achieved by using a...

PT-2019-5862 · Imagemagick +5 · Imagemagick +5

Name of the Vulnerable Software and Affected Versions: ImageMagick versions prior to 7.0.8-68 Description: A flaw was found in ImageMagick in MagickCore/resize.c, where an attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math...

The vulnerability of the Jet Database Engine database management system in the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the Jet Database Engine database management system for the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

The vulnerability of the Jet Database Engine database management system in the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the Jet Database Engine database management system for the Windows operating system exists due to errors in object processing in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...