Microsoft Office Code Execution

The vulnerability of Microsoft Office packages and Microsoft Office Web Apps is related to improper code generation during XLS file syntax analysis. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created malicious file or a specially crafted malicious...

PT-2021-4336

Name of the Vulnerable Software and Affected Versions Solid Edge SE2021 versions prior to SE2021MP8 Description A use-after-free vulnerability has been identified in the affected application while parsing OBJ files. This issue could allow an attacker to execute code in the context of the current...

Adobe InDesign PCX File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe InDesign. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PCX...

Adobe After Effects TIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe After Effects. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Adobe InCopy DOCX File Parsing Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe InCopy. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the conversion of DOC...

Microsoft Excel XLS File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Excel. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of XLS...

Omron CX-One CX-Position NCI File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Omron CX-One. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of NCI...

CVE-2021-27397

A vulnerability has been identified in Tecnomatix Plant Simulation All versions V16.0.5. The PlantSimCore.dll library lacks proper validation of user-supplied data when parsing SPP files. This could result in a memory corruption condition. An attacker could leverage this vulnerability to execute...

CVE-2021-27398

A vulnerability has been identified in Tecnomatix Plant Simulation All versions V16.0.5. The PlantSimCore.dll library lacks proper validation of user-supplied data when parsing SPP files. This could result in a stack based buffer overflow, a different vulnerability than CVE-2021-27396. An attacke...

CVE-2021-27396

A vulnerability has been identified in Tecnomatix Plant Simulation All versions V16.0.5. The PlantSimCore.dll library lacks proper validation of user-supplied data when parsing SPP files. This could result in a stack based buffer overflow, a different vulnerability than CVE-2021-27398. An attacke...

(0Day) Siemens Solid Edge Viewer PRT File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Solid Edge Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Siemens Solid Edge 安全漏洞

Siemens Solid Edge is a 3D CAD software from Siemens, Germany. An untrustworthy pointer reference vulnerability exists in Siemens Solid Edge. The vulnerability is due to the application lacking proper validation of user-supplied data when parsing PRT files. An attacker can exploit the vulnerabili...

CVE-2021-27396: Stack-based Buffer Overflow

A vulnerability has been identified in Tecnomatix Plant Simulation All versions V16.0.5. The PlantSimCore.dll library lacks proper validation of user-supplied data when parsing SPP files. This could result in a stack based buffer overflow, a different vulnerability than CVE-2021-27398. An attacke...

PT-2021-17477

Name of the Vulnerable Software and Affected Versions KeyShot versions prior to v10.1 Datakit Software libraries CatiaV5 3dRead, CatiaV6 3dRead, Step3dRead, Ug3dReadPsr, Jt3dReadPsr modules in KeyShot versions v10.1 and prior Description The issue is related to the lack of proper validation of...

CVE-2021-28580

Medium by Adobe version 2.4.5.331 and earlier is affected by a buffer overflow vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to achieve remote code execution in the context of the current user. Exploitation of this issue requires user...

PT-2021-3408

Name of the Vulnerable Software and Affected Versions Adobe Media Encoder version 15.1 and earlier Description The issue is related to an Out-of-bounds Read vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to disclose sensitive...

Foxit Reader U3D File Parsing Out-of-Bounds Read Information Disclosure Vulnerability (CNVD-2021-36468)

Foxit Reader is a Chinese Foxit Foxit company's a PDF document reader. A security vulnerability exists in Foxit Reader U3D file parsing, which stems from the lack of proper validation of user-supplied data, which could lead to reading more than the end of an allocated object. An attacker can...

Foxit Reader U3D File Parsing Out-of-Bounds Read Remote Code Execution Vulnerability (CNVD-2021-36467)

Foxit Reader is a Chinese Foxit Foxit company's a PDF document reader. A security vulnerability exists in Foxit Reader U3D file parsing, which stems from the lack of proper validation of user-supplied data, which could lead to reading more than the end of the allocated object. An attacker can...

Foxit Reader U3D File Parsing Out-of-Bounds Read Information Leakage Vulnerability (CNVD-2021-36472)

Foxit Reader is a Chinese Foxit Foxit company's a PDF document reader. A security vulnerability exists in the parsing of U3D files in Foxit Reader. The vulnerability stems from the lack of proper validation of user-supplied data. The vulnerability can be exploited to obtain sensitive information ...

Foxit Reader U3D File Parsing Out-of-Bounds Read Information Disclosure Vulnerability (CNVD-2021-36473)

Foxit Reader is a Chinese Foxit Foxit company's a PDF document reader. A security vulnerability exists in the parsing of U3D files in Foxit Reader. The vulnerability stems from the lack of proper validation of user-supplied data. The vulnerability can be exploited to obtain sensitive information ...