CVE-2021-45844

CVE-2021-45844 affects FreeCAD 0.19 via improper sanitization when invoking the ODA File Converter, enabling OS command injection through a crafted filename. Mitigations include upgrading FreeCAD to fixed releases cited by Debian/Mageia advisories (e.g., FreeCAD 0.19.1+dfsg1-2+deb11u1 for Debian ...

FreeCad 操作系统命令注入漏洞

FreeCad is a free and open source general-purpose parametric 3D Cad modeler from the FreeCad community and supports the finite element method of building information modeling software. A command injection vulnerability exists in FreeCAD version 0.19, which stems from improper cleanup when calling...

CVE-2021-45844: Improper Neutralization of Special Elements used in an OS Command

Improper sanitization in the invocation of ODA File Converter from FreeCAD 0.19 allows an attacker to inject OS commands via a crafted filename...

PT-2022-12432 · Freecad +1 · Freecad +1

Name of the Vulnerable Software and Affected Versions: FreeCAD version 0.19 Description: The issue is related to improper sanitization in the invocation of ODA File Converter from FreeCAD, allowing an attacker to inject OS commands via a crafted filename. Recommendations: For FreeCAD version 0.19...

PT-2021-14439 · Typo3 · Typo3

Name of the Vulnerable Software and Affected Versions: TYPO3 versions prior to 8.7.40 TYPO3 versions prior to 9.5.25 TYPO3 versions prior to 10.4.14 TYPO3 versions prior to 11.1.1 Description: The issue arises from the lack of ensuring file extensions belong to configured allowed mime-types,...

ExpressionEngine: Import File Converter - local File inclusion

@lawrenceamer discovered a local file inclusion vulnerability that logged in users with access to the control panel and permission to access developer utilities may be able to exploit. @lawrenceamer gave a detailed report with step-by-step instructions for replicating and screen captures of a the...

All File Converter - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application All File Converter published at the 'play' market has multiple vulnerabilities...

Switch Sound File Converter .mpga BOF DoS

No description provided by source. Exploit Title: Switch Sound File Converter .mpga BOF DOS Date: 2009-1-1 Author: Jacky Version: 0.0.0.0 Tested on: Windows XP SP2 Switch Sound File Converter .mpga BOF POS Vulnerability Discovered and written by : Jacky Greetz to Corelan team and Peter Van...

Microsoft Works 8.0 File Converter Field Length Remote Code Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/27659/info Microsoft Works File Converter is prone to a remote code-execution vulnerability because it fails to adequately validate user-supplied input. An attacker could exploit this issue by enticing a victim to open a...

ZendTo 'emailAddr' 脚本插入漏洞

CVECAN ID: CVE-2013-6808 ZendTo是基于Web的文件转换器。 ZendTo 4.11-12版本没有正确过滤pickup.php的 "emailAddr" 参数值，可导致插入任意HTML和脚本代码，被查看后，在受影响站点的用户浏览器上下文中执行这些代码。 0 ZendTo ZendTo = 4.11-12 厂商补丁： ZendTo ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.zend.to/changelog.phpZendTo ZendTo = 4.11-12...

Microsoft Office Works File Converter堆缓冲区溢出漏洞(CVE-2012-0177) (MS12-027)

No description provided by source...

CVE-2012-0177

CVE-2012-0177 affects the Office Works File Converter in Microsoft Office 2007 SP2, Works 9, and Works 6–9 File Converter. The vulnerability is a heap-based buffer overflow when parsing .wps (Works) files, enabling remote code execution. The attacker could trigger this without user interaction, p...

PT-2012-2375

Name of the Vulnerable Software and Affected Versions Microsoft Office versions prior to the fixed version Microsoft Works versions 6 through 9 Description A heap-based buffer overflow issue exists in the Office Works File Converter, allowing remote attackers to execute arbitrary code via a craft...

CVE-2012-0177: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the Office Works File Converter in Microsoft Office 2007 SP2, Works 9, and Works 6-9 File Converter allows remote attackers to execute arbitrary code via a crafted Works aka .wps file, aka "Office WPS Converter Heap Overflow Vulnerability."...

Buffer overflow

Microsoft Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac obtain a certain length value from an uninitialized memory location, which allows remote attackers to trigger a buffer overflow and execute arbitrary code via a crafted Excel file, aka "Excel Data...

Heap overflow

Heap-based buffer overflow in Microsoft Office Excel 2002 SP3, Office 2004 for Mac, Office 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via an Excel file with malformed 1 EDG 0x88 and 2 Publisher 0x89 records, aka "Excel EDG Memory...

Microsoft Works File Converter WPS File Section Header Index Table Stack Overflow (MS08-011; CVE-2008-0105)

Microsoft Works is a home/office productivity software suite. Its core functionality includes a word processor, a spreadsheet, and a database. A Microsoft Works Document, normally denoted by the extension .wps, has numerous properties which define the appearance of the document, as well as some...

Switch Sound File Converter Denial Of Service

Exploit Title: Switch Sound File Converter .mpga BOF DOS Date: 2009-1-1 Author: Jacky Version: 0.0.0.0 Tested on: Windows XP SP2 Switch Sound File Converter .mpga BOF POS Vulnerability Discovered and written by : Jacky Greetz to Corelan team and Peter Van Eeckhoutte !!! When you create a file tha...

Switch Sound File Converter - .mpga Buffer Overflow (Denial of Service) (PoC)

Switch Sound File Converter - .mpga Buffer Overflow Denial of Service PoC Exploit Title: Switch Sound File Converter .mpga BOF DOS Date: 2009-1-1 Author: Jacky Version: 0.0.0.0 Tested on: Windows XP SP2 Switch Sound File Converter .mpga BOF POS Vulnerability Discovered and written by : Jacky Gree...

Switch Sound File Converter .mpga BOF DOS

Exploit for unknown platform in category dos / poc ========================================= Switch Sound File Converter .mpga BOF DOS ========================================= Title: Switch Sound File Converter .mpga BOF DOS CVE-ID: OSVDB-ID: Author: Jacky Published: 2010-01-01 Verified: yes vie...