Lucene search
+L

512 matches found

Zero Day Initiative
Zero Day Initiative
added 2024/11/21 12:00 a.m.22 views

IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DXF files...

7.8CVSS7AI score0.00393EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2024/10/31 12:00 a.m.29 views

Autodesk AutoCAD DXF File Parsing Unitialized Variable Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DX...

7.8CVSS6.9AI score0.00203EPSS
SaveExploits0References1
NVD
NVD
added 2024/10/29 10:15 p.m.38 views

CVE-2024-8896

A maliciously crafted DXF file when parsed in acdb25.dll through Autodesk AutoCAD can force to access a variable prior to initialization. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process...

7.8CVSS0.00203EPSS
SaveExploits0References1
OSV
OSV
added 2024/10/29 10:15 p.m.26 views

CVE-2024-8896

A maliciously crafted DXF file when parsed in acdb25.dll through Autodesk AutoCAD can force to access a variable prior to initialization. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process...

7.8CVSS6.1AI score0.00203EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/10/29 9:43 p.m.19 views

CVE-2024-8896 Autodesk AutoCAD DXF File Parsing Unitialized Variable Code Execution Vulnerability

A maliciously crafted DXF file when parsed in acdb25.dll through Autodesk AutoCAD can force to access a variable prior to initialization. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process...

7.8CVSS7.4AI score0.00203EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/10/29 9:43 p.m.48 views

CVE-2024-8896 Autodesk AutoCAD DXF File Parsing Unitialized Variable Code Execution Vulnerability

A maliciously crafted DXF file when parsed in acdb25.dll through Autodesk AutoCAD can force to access a variable prior to initialization. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process...

7.8CVSS0.00203EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/08/06 12:00 a.m.7 views

(0Day) Microsoft Office Visio DXF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Microsoft Office Visio. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS6.3AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2024/08/06 12:00 a.m.7 views

(0Day) Microsoft Office Visio DXF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Microsoft Office Visio. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS6.3AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2024/08/06 12:00 a.m.7 views

(0Day) Microsoft Office Visio DXF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Microsoft Office Visio. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS6.3AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2024/07/29 12:00 a.m.9 views

Microsoft Office Visio DXF File Parsing Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Office Visio. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

7.8CVSS7.3AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2024/05/09 12:00 a.m.20 views

Dassault Systèmes eDrawings Viewer DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Dassault Syst��me eDrawings Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

7.8CVSS7.2AI score0.00322EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/05/09 12:00 a.m.27 views

Dassault Systèmes eDrawings Viewer DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Dassault Syst��mes eDrawings Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...

7.8CVSS7.2AI score0.00322EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/05/09 12:00 a.m.22 views

Dassault Systèmes eDrawings Viewer DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Dassault Syst��mes eDrawings Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...

7.8CVSS7.2AI score0.00322EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/07/12 12:00 a.m.29 views

Dassault Systèmes SolidWorks DXF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Dassault Syst��mes SolidWorks. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.8AI score0.00354EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
added 2023/05/10 12:00 a.m.17 views

Microsoft Office Visio DXF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Microsoft Office Visio. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS5.8AI score
SaveExploits0References1
NVD
NVD
added 2023/04/15 1:15 a.m.21 views

CVE-2023-22670

A heap-based buffer overflow exists in the DXF file reading procedure in Open Design Alliance Drawings SDK before 2023.6. The specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of the length of user-supplied XRecord data prior to copying it ...

7.8CVSS8AI score0.00216EPSS
SaveExploits0References1
Prion
Prion
added 2023/04/15 1:15 a.m.53 views

Heap overflow

A heap-based buffer overflow exists in the DXF file reading procedure in Open Design Alliance Drawings SDK before 2023.6. The specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of the length of user-supplied XRecord data prior to copying it ...

4.4CVSS8AI score0.00216EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/04/15 12:00 a.m.8 views

CVE-2023-22670

A heap-based buffer overflow exists in the DXF file reading procedure in Open Design Alliance Drawings SDK before 2023.6. The specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of the length of user-supplied XRecord data prior to copying it ...

7.8AI score0.00216EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/04/15 12:00 a.m.43 views

CVE-2023-22670

A heap-based buffer overflow exists in the DXF file reading procedure in Open Design Alliance Drawings SDK before 2023.6. The specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of the length of user-supplied XRecord data prior to copying it ...

8AI score0.00216EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/03/29 12:00 a.m.9 views

CVE-2022-28311

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.034. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

7.8CVSS7.8AI score0.00959EPSS
SaveExploits0References2
Rows per page
Query Builder