2546 matches found
Exiv2 Information Disclosure Vulnerability
Exiv2 is a set of C++ libraries and command line applications for managing image metadata by software developer Andreas Huggel, which provides for reading and writing image metadata in a variety of formats including EXIF, IPTC and XMP. A security vulnerability exists in the...
Rockwell Automation Arena Denial of Service Vulnerability
Rockwell Automation Arena is a suite of discrete event simulation and automation software from Rockwell Automation. A denial of service vulnerability exists in Rockwell Automation Arena version 16.10.00 and earlier. An attacker can exploit this vulnerability by means of specially crafted Arena...
CVE-2018-10971
An issue was discovered in Free Lossless Image Format FLIF 0.3. The Plane function in image/image.hpp allows remote attackers to cause a denial of service attempted excessive memory allocation via a crafted file...
Microsoft Excel Remote Code Execution Vulnerability (CNVD-2018-10432)
Microsoft Excel 2010 SP2 and others are products of Microsoft Corporation.Microsoft Office 2010 SP2 is an office software suite product.Excel 2010 SP2 is a set of spreadsheet processing software in the Office suite. A remote code execution vulnerability exists in Microsoft Excel that stems from t...
Microsoft InfoPath Remote Code Execution Vulnerability
Microsoft InfoPath 2013 SP1 is a set of tools for collecting information and creating forms based on XML technology from Microsoft USA. The tool supports the design and completion of electronic forms, collection, management and sharing of business processes, as well as from external database...
PT-2019-18998 · Advancecomp +4 · Advancecomp +4
Name of the Vulnerable Software and Affected Versions: AdvanceCOMP versions prior to 2.1 Description: An issue exists in the function be uint32 read located in endianrw.h, which can cause a NULL pointer dereference. This can be triggered by sending a crafted file to a binary, allowing an attacker...
gd: Integer overflow in gd_io.c
An integer overflow flaw, leading to a heap-based buffer overflow was found in the way libgd read some specially-crafted gd2 files. A remote attacker could use this flaw to crash an application compiled with libgd or in certain cases execute arbitrary code with the privileges of the user running...
Advantech WebAccess HMI Designer Arbitrary Code Execution Vulnerability
Advantech WebAccess HMI Designer is a human machine interface HMI runtime development software. An arbitrary code execution vulnerability exists in Advantech WebAccess HMI Designer 2.1.7.32 and prior versions when handling specially crafted .pm3 files, which can cause the system to write outside ...
Advantech WebAccess HMI Designer Heap Buffer Overflow Vulnerability
Advantech WebAccess HMI Designer is a human machine interface HMI runtime development software. A heap buffer overflow vulnerability exists in Advantech WebAccess HMI Designer 2.1.7.32 and prior versions when handling specially crafted .pm3 files, which can be exploited by an attacker to remotely...
Apache Tika infinite loop vulnerability (CNVD-2018-10140)
Apache Tika can leverage existing parsing libraries to detect and extract metadata and structured content from documents in different formats e.g. HTML, PDF, Doc. An infinite loop vulnerability exists in BPGParser in Apache Tika before 1.18. An attacker can exploit this vulnerability via speciall...
CVE-2018-8835
Double free vulnerabilities in Advantech WebAccess HMI Designer 2.1.7.32 and prior caused by processing specially crafted .pm3 files may allow remote code execution...
CVE-2018-8835
Double free vulnerabilities in Advantech WebAccess HMI Designer 2.1.7.32 and prior caused by processing specially crafted .pm3 files may allow remote code execution...
PT-2018-2292 · Exiv2 +3 · Exiv2 +3
Name of the Vulnerable Software and Affected Versions: Exiv2 version 0.26 Description: The issue is related to a heap-based buffer overflow in the getData function, located in preview.cpp, which can be exploited by a remote attacker using a specially crafted malicious file. This could potentially...
Microsoft Office Remote Code Execution Vulnerability (CNVD-2018-09645)
Microsoft Excel is a trial balance software component of Microsoft's Office software. A security vulnerability in the way Microsoft Excel handles in-memory objects allows remote attackers to exploit the vulnerability by submitting a special file and tricking the user into parsing it, which could...
Buffalo WZR-1750DHP2 Buffer Overflow Vulnerability
The Buffalo WZR-1750DHP2 is a router product from the Buffalo Group of Japan. A buffer overflow vulnerability exists in the Buffalo WZR-1750DHP2 version 2.30 and earlier. An attacker can exploit this vulnerability to execute arbitrary code with the help of specially crafted files...
USN-3622-1 wayland vulnerability
It was discovered that the Wayland Xcursor support incorrectly handled certain files. An attacker could use these issues to cause Wayland to crash, resulting in a denial of service, or possibly execute arbitrary code...
CVE-2018-0986
A remote code execution vulnerability exists when the Microsoft Malware Protection Engine does not properly scan a specially crafted file, leading to memory corruption, aka "Microsoft Malware Protection Engine Remote Code Execution Vulnerability." This affects Windows Defender, Windows Intune...
ImageMagick Denial of Service Vulnerability (CNVD-2018-06648)
ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. The 'MogrifyImageList' function in the MagickWand/mogrify.c file in ImageMagick has a security vulnerability. An...
Exiv2 Denial of Service Vulnerability (CNVD-2018-06873)
Exiv2 is a set of C++ libraries and command line applications for managing image metadata by software developer Andreas Huggel, which provides fast and easy reading and writing of image metadata in a variety of EXIF, IPTC and XMP formats. A security vulnerability exists in the...