DEBIAN-CVE-2020-16298

A buffer overflow vulnerability in mjcolorcorrect in contrib/japanese/gdevmjc.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51...

ALPINE-CVE-2020-16299

A Division by Zero vulnerability in bj10vprintpage in contrib/japanese/gdev10v.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51...

DEBIAN-CVE-2020-16295

A null pointer dereference vulnerability in cljmediasize in devices/gdevclj.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51...

UBUNTU-CVE-2020-16302

A buffer overflow vulnerability in jetp3852printpage in devices/gdev3852.c of Artifex Software GhostScript v9.50 allows a remote attacker to escalate privileges via a crafted PDF file. This is fixed in v9.51...

UBUNTU-CVE-2020-16290

A buffer overflow vulnerability in jetp3852printpage in devices/gdev3852.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51...

UBUNTU-CVE-2020-16303

A use-after-free vulnerability in xpsfinishimagepath in devices/vector/gdevxps.c of Artifex Software GhostScript v9.50 allows a remote attacker to escalate privileges via a crafted PDF file. This is fixed in v9.51...

UBUNTU-CVE-2020-16300

A buffer overflow vulnerability in tiff12printpage in devices/gdevtfnx.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51...

UBUNTU-CVE-2020-16310

A division by zero vulnerability in dot24printpage in devices/gdevdm24.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51...

PT-2020-5544 · Artifex +7 · Ghostscript +7

Name of the Vulnerable Software and Affected Versions: GhostScript versions prior to 9.51 Description: A null pointer dereference issue in the compose group nonknockout nonblend isolated allmask common function in base/gxblend.c allows a remote attacker to cause a denial of service via a crafted...

Media Foundation Memory Corruption Vulnerability

A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory. An attacker who successfully exploited the vulnerability could install programs; view, change, or delete data; or create new accounts with full user rights. There are multiple ways an...

PT-2020-3653 · Microsoft · Windows Media Foundation +1

Name of the Vulnerable Software and Affected Versions: Windows Media Foundation affected versions not specified Description: The issue is caused by a memory corruption vulnerability in Windows Media Foundation, allowing an attacker to install programs, view, change, or delete data, or create new...

PT-2020-3716 · Microsoft · Office Word +1

Name of the Vulnerable Software and Affected Versions: Microsoft Word affected versions not specified Description: An information disclosure issue exists due to Microsoft Word's improper handling of objects in memory. This could allow a remote attacker to disclose protected information. The...

PT-2020-3813 · Microsoft · Office Word +1

Name of the Vulnerable Software and Affected Versions: Microsoft Word affected versions not specified Description: An information disclosure issue exists due to Microsoft Word improperly disclosing its memory contents. This could allow an attacker to compromise a user's computer or data by...

PT-2020-3675 · Microsoft · Windows Media Audio Decoder +1

Name of the Vulnerable Software and Affected Versions: Windows Media Audio Codec affected versions not specified Description: A remote code execution issue exists due to improper handling of objects by Windows Media Audio Codec, allowing an attacker to potentially take control of an affected...

PT-2020-3819 · Microsoft · Office +3

Name of the Vulnerable Software and Affected Versions: Microsoft Word affected versions not specified Microsoft Office affected versions not specified Microsoft Office Online Server affected versions not specified SharePoint Server affected versions not specified Description: An information...

PT-2020-3815 · Microsoft · Office +1

Name of the Vulnerable Software and Affected Versions: Microsoft Excel affected versions not specified Microsoft Office affected versions not specified Description: An information disclosure issue exists due to improper handling of objects in memory by Microsoft Excel. This could allow an attacke...

The vulnerability of the Microsoft 365 Apps for Enterprise package lies in the use of an insecure search path, allowing a hacker to execute arbitrary code.

The vulnerability of the Microsoft 365 Apps for Enterprise package is related to the use of an insecure search path. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created document...

UBUNTU-CVE-2020-6513

Heap buffer overflow in PDFium in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file...

.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability

A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the process responsible...

CVE-2019-20860

An issue was discovered in Mattermost Server before 5.14.0, 5.13.3, 5.12.6, and 5.9.4. It allows remote attackers to cause a denial of service application hang via a crafted SVG document...