Lucene search
K

17 matches found

CNVD
CNVD
added 2025/07/23 12:0 a.m.1 views

IrfanView CADImage Plugin Buffer Overflow Vulnerability (CNVD-2025-17041)

IrfanView CADImage Plugin is a CAD plugin from IrfanView. IrfanView CADImage Plugin suffers from a buffer overflow vulnerability that stems from a lack of validation of user data when parsing DWG files, which can be exploited by an attacker to execute code in the context of the current process...

7.8CVSS7.7AI score0.00185EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/07/21 12:0 a.m.1 views

IrfanView CADImage Plugin 缓冲区错误漏洞

IrfanView CADImage Plugin is a CAD plugin from IrfanView. IrfanView CADImage Plugin suffers from a buffer overflow vulnerability that stems from a lack of validation of user data when parsing DWG files, which can be exploited by an attacker to execute code in the context of the current process...

7.8CVSS7.6AI score0.00185EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/07/21 12:0 a.m.1 views

IrfanView CADImage Plugin 缓冲区错误漏洞

IrfanView CADImage Plugin is a CAD plugin from IrfanView. IrfanView CADImage Plugin suffers from a buffer overflow vulnerability that stems from a lack of validation of user-supplied data when parsing DWG files, which can be exploited by an attacker to execute code in the context of the current...

7.8CVSS7.6AI score0.00185EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/07/21 12:0 a.m.1 views

IrfanView CADImage Plugin 缓冲区错误漏洞

IrfanView CADImage Plugin is a CAD plugin from IrfanView. IrfanView CADImage Plugin suffers from a buffer overflow vulnerability that stems from a lack of validation of user data when parsing DXF files, which can be exploited by an attacker to execute code in the context of the current process...

7.8CVSS7.6AI score0.00185EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/07/21 12:0 a.m.1 views

IrfanView CADImage Plugin 缓冲区错误漏洞

IrfanView CADImage Plugin is a CAD plugin from IrfanView. IrfanView CADImage Plugin suffers from a buffer overflow vulnerability that stems from a lack of validation of user data when parsing DWG files, which can be exploited by an attacker to execute code in the context of the current process...

7.8CVSS7.6AI score0.00185EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/07/21 12:0 a.m.1 views

IrfanView CADImage Plugin 缓冲区错误漏洞

IrfanView CADImage Plugin is a CAD plugin from IrfanView. IrfanView CADImage Plugin suffers from a buffer overflow vulnerability that stems from a lack of validation of user data when parsing DWG files, which can be exploited by an attacker to execute code in the context of the current process...

7.8CVSS7.6AI score0.00185EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/07/21 12:0 a.m.1 views

IrfanView CADImage Plugin 缓冲区错误漏洞

IrfanView CADImage Plugin is a CAD plugin from IrfanView. IrfanView CADImage Plugin suffers from a buffer overflow vulnerability that stems from a lack of validation of user-supplied data when parsing DWG files, which can be exploited by an attacker to execute code in the context of the current...

7.8CVSS7.6AI score0.00185EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/07/21 12:0 a.m.1 views

IrfanView CADImage Plugin 缓冲区错误漏洞

IrfanView CADImage Plugin is a CAD plugin from IrfanView. IrfanView CADImage Plugin suffers from a buffer overflow vulnerability that stems from a lack of validation of user data when parsing DWG files, which can be exploited by an attacker to execute code in the context of the current process...

7.8CVSS7.6AI score0.00185EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 3:15 a.m.2 views

CVE-2023-22669

Parsing of DWG files in Open Design Alliance Drawings SDK before 2023.6 lacks proper validation of the length of user-supplied XRecord data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process...

7.8CVSS7.2AI score0.00061EPSS
Exploits0References1
OSV
OSV
added 2023/08/08 10:15 a.m.0 views

CVE-2023-39549

A vulnerability has been identified in Solid Edge SE2023 All versions V223.0 Update 2. The affected application contains a use-after-free vulnerability that could be triggered while parsing specially crafted DWG file. An attacker could leverage this vulnerability to execute code in the context of...

7.8CVSS5.9AI score0.0016EPSS
Exploits0References1
OSV
OSV
added 2023/04/15 1:15 a.m.1 views

CVE-2023-22669

Parsing of DWG files in Open Design Alliance Drawings SDK before 2023.6 lacks proper validation of the length of user-supplied XRecord data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process...

7.8CVSS6AI score
Exploits0References1
OSV
OSV
added 2022/02/18 8:15 p.m.1 views

CVE-2021-46594

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...

5.5CVSS4.9AI score
Exploits0References2
OSV
OSV
added 2022/01/13 10:15 p.m.0 views

CVE-2021-34902

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

3.3CVSS4.9AI score
Exploits0References2
CNNVD
CNNVD
added 2021/12/08 12:0 a.m.1 views

Bentley Systems Bentley View 缓冲区错误漏洞

Bentley View is a free viewer from Bentley Systems, Inc. An out-of-bounds read information disclosure vulnerability exists in Bentley View DWG file parsing, which stems from the lack of proper validation of user-supplied data in the parsing of PDF files resulting in reading beyond the end of the...

4.3CVSS5.5AI score0.00489EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2021/11/16 12:0 a.m.3 views

PT-2021-23886 · Open Design Alliance · Open Design Alliance Drawings Sdk

Name of the Vulnerable Software and Affected Versions: Open Design Alliance Drawings SDK versions prior to 2022.11 Description: A Use-After-Free Remote issue exists when reading a DWG file using the parsing functionality. The issue results from the lack of validating the existence of an object...

7.8CVSS7.6AI score0.00533EPSS
Exploits0References7
CNNVD
CNNVD
added 2021/06/02 12:0 a.m.1 views

OpenText Brava! 缓冲区错误漏洞

OpenText Brava! Desktop is a Windows-based viewing and collaboration tool that lets you easily view and collaborate on almost any file. An out-of-bounds read vulnerability exists in the parsing of DWG files in OpenText Brava! Desktop. The vulnerability stems from a lack of proper validation of...

4.3CVSS5.6AI score0.00309EPSS
Exploits0References5
CNVD
CNVD
added 2019/10/22 12:0 a.m.2 views

Foxit PhantomPDF Information Disclosure Vulnerability (CNVD-2019-36963)

Foxit PhantomPDF is China's Foxit Foxit company a PDF document reader. There is an information disclosure vulnerability in the parsing of DWG files in Foxit PhantomPDF, which arises from the failure of the program to verify the existence of an object before performing an operation on it, which ca...

4.3CVSS6.1AI score0.00424EPSS
Exploits0References1
Rows per page
Query Builder