Lucene search
+L

145 matches found

CNNVD
CNNVD
added 2024/01/08 12:0 a.m.8 views

GTKWave 缓冲区错误漏洞

GTKWave is a full-featured, GTK+-based waveform viewer from GTKWave. A code execution vulnerability exists in GTKWave version 3.3.118, which can be exploited by an attacker to potentially cause arbitrary code execution via a specially crafted fst file...

7.8CVSS7.7AI score0.00432EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2024/01/08 12:0 a.m.8 views

GTKWave 输入验证错误漏洞

GTKWave is a full-featured, GTK+-based waveform viewer from GTKWave. An integer overflow vulnerability exists in GTKWave version 3.3.115, which can be exploited by an attacker to cause arbitrary code execution via a specially crafted fst file...

7.8CVSS7.9AI score0.00432EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2024/01/08 12:0 a.m.8 views

GTKWave 安全漏洞

GTKWave is a full-featured, GTK+-based waveform viewer from GTKWave. An integer overflow vulnerability exists in GTKWave version 3.3.115, which stems from a failure of the fstReaderIterBlocks2 vesc allocation function to properly handle integer operations, and can be exploited by an attacker to...

7.8CVSS7.1AI score0.0038EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2024/01/08 12:0 a.m.10 views

GTKWave 输入验证错误漏洞

GTKWave is a full-featured, GTK+-based waveform viewer from GTKWave. GTKWave suffers from an integer overflow vulnerability that can be exploited by an attacker to cause arbitrary code execution via a specially crafted fst file...

7.8CVSS7.9AI score0.00434EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2024/01/08 12:0 a.m.10 views

GTKWave 缓冲区错误漏洞

GTKWave is a full-featured, GTK+-based waveform viewer from GTKWave. GTKWave version 3.3.115 suffers from a heap buffer overflow vulnerability that can be exploited by an attacker to potentially cause arbitrary code execution via a specially crafted fst file...

7.8CVSS8.1AI score0.00438EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2024/01/08 12:0 a.m.3 views

PT-2024-12508 · Gtkwave · Gtkwave

Name of the Vulnerable Software and Affected Versions: GTKWave version 3.3.115 Description: Multiple stack-based buffer overflow vulnerabilities exist in the FST LEB128 varint functionality. A specially crafted .fst file can lead to arbitrary code execution. A victim would need to open a maliciou...

7.8CVSS8.5AI score0.01493EPSS
SaveExploits82References134
CNNVD
CNNVD
added 2024/01/08 12:0 a.m.15 views

GTKWave 输入验证错误漏洞

GTKWave is a full-featured, GTK+-based waveform viewer from GTKWave. An integer overflow vulnerability exists in GTKWave version 3.3.118, which can be exploited by an attacker to cause arbitrary code execution via a specially crafted fst file...

7.8CVSS7.9AI score0.0038EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2024/01/08 12:0 a.m.10 views

GTKWave 资源管理错误漏洞

GTKWave is a full-featured, GTK+-based waveform viewer from GTKWave. A memory misreference vulnerability exists in GTKWave version 3.3.118, which can be exploited by an attacker to cause arbitrary code execution via a specially crafted fst file...

7.8CVSS7.7AI score0.00403EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2024/01/08 12:0 a.m.13 views

GTKWave 输入验证错误漏洞

GTKWave is a full-featured, GTK+-based waveform viewer from GTKWave. An integer overflow vulnerability exists in GTKWave version 3.3.115, which can be exploited by an attacker to cause arbitrary code execution via a specially crafted fst file...

7.8CVSS7.9AI score0.00414EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2024/01/08 12:0 a.m.11 views

GTKWave 操作系统命令注入漏洞

GTKWave is a full-featured, GTK+-based waveform viewer from GTKWave. GTKWave version 3.3.118 suffers from an operating system command injection vulnerability that can be exploited by an attacker to cause arbitrary code execution via a specially crafted fst file...

7.8CVSS8.3AI score0.01481EPSS
SaveExploits1References2
Talos
Talos
added 2024/01/08 12:0 a.m.44 views

GTKWave FST fstReaderIterBlocks2 VCDATA parsing heap-based buffer overflow vulnerabilities

Talos Vulnerability Report TALOS-2023-1785 GTKWave FST fstReaderIterBlocks2 VCDATA parsing heap-based buffer overflow vulnerabilities January 8, 2024 CVE Number CVE-2023-35956,CVE-2023-35957,CVE-2023-35958,CVE-2023-35955 SUMMARY Multiple heap-based buffer overflow vulnerabilities exist in the...

7.8CVSS7.9AI score0.00438EPSS
SaveExploits4
Positive Technologies
Positive Technologies
added 2024/01/08 12:0 a.m.8 views

PT-2024-12542 · Gtkwave · Gtkwave

Name of the Vulnerable Software and Affected Versions: GTKWave version 3.3.115 Description: The issue is related to improper array index validation vulnerabilities in the fstReaderIterBlocks2 tdelta functionality. A specially crafted .fst file can lead to arbitrary code execution. To trigger the...

7.8CVSS8.1AI score0.01493EPSS
SaveExploits82References131
CNNVD
CNNVD
added 2024/01/08 12:0 a.m.10 views

GTKWave 输入验证错误漏洞

GTKWave is a full-featured, GTK+-based waveform viewer from GTKWave. GTKWave suffers from an integer overflow vulnerability that can be exploited by an attacker to cause arbitrary code execution via a specially crafted fst file...

7.8CVSS7.9AI score0.00375EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2024/01/08 12:0 a.m.8 views

GTKWave 输入验证错误漏洞

GTKWave is a full-featured, GTK+-based waveform viewer from GTKWave. A code execution vulnerability exists in GTKWave version 3.3.115, which can be exploited by an attacker to potentially cause arbitrary code execution via a specially crafted fst file...

7.8CVSS7.7AI score0.00432EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2024/01/08 12:0 a.m.7 views

GTKWave 缓冲区错误漏洞

GTKWave is a full-featured, GTK+-based waveform viewer from GTKWave. An out-of-bounds read vulnerability exists in GTKWave version 3.3.118, which can be exploited by an attacker to potentially cause arbitrary code execution via a specially crafted fst file...

7.8CVSS7.7AI score0.00436EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2024/01/08 12:0 a.m.10 views

GTKWave 输入验证错误漏洞

GTKWave is a full-featured, GTK+-based waveform viewer from GTKWave. An integer overflow vulnerability exists in GTKWave version 3.3.118, which can be exploited by an attacker to potentially cause arbitrary code execution via a specially crafted fst file...

7.8CVSS7.9AI score0.00432EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2024/01/08 12:0 a.m.8 views

GTKWave 操作系统命令注入漏洞

GTKWave is a full-featured, GTK+-based waveform viewer from GTKWave. GTKWave version 3.3.115 suffers from an operating system command injection vulnerability that can be exploited by an attacker to cause arbitrary code execution via a specially crafted fst file...

7.8CVSS8.3AI score0.01481EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2024/01/08 12:0 a.m.8 views

GTKWave 缓冲区错误漏洞

GTKWave is a full-featured, GTK+-based waveform viewer from GTKWave. A code execution vulnerability exists in GTKWave version 3.3.118, which can be exploited by an attacker to potentially cause arbitrary code execution via a specially crafted fst file...

7.8CVSS7.7AI score0.00432EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2024/01/08 12:0 a.m.8 views

GTKWave 输入验证错误漏洞

GTKWave is a full-featured, GTK+-based waveform viewer from GTKWave. A code execution vulnerability exists in GTKWave version 3.3.115, which can be exploited by an attacker to potentially cause arbitrary code execution via a specially crafted fst file...

7.8CVSS7.7AI score0.00418EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2024/01/08 12:0 a.m.7 views

GTKWave 操作系统命令注入漏洞

GTKWave is a full-featured, GTK+-based waveform viewer from GTKWave. GTKWave version 3.3.115 suffers from an operating system command injection vulnerability that can be exploited by an attacker to cause arbitrary code execution via a specially crafted fst file...

7.8CVSS8.3AI score0.01481EPSS
SaveExploits1References2
Rows per page
Query Builder