CVE-2023-23431

CVE-2023-23431 affects some Honor products and is caused by a signature management vulnerability. An attacker with local access and low privileges could exploit it to forge a system file and overwrite the legitimate file, potentially impacting integrity and availability. The CVSS metrics assign a...

CVE-2023-23432

Some Honor products are affected by signature management vulnerability, successful exploitation could cause the forged system file overwrite the correct system file...

CVE-2023-23432

Some Honor products are affected by signature management vulnerability, successful exploitation could cause the forged system file overwrite the correct system file...

Honor NTH-AN00 Data Forgery Issue Vulnerability

The Honor NTH-AN00 Honor 50 is a smartphone from the Chinese company Honor. The Honor NTH-AN00 suffers from a security vulnerability that stems from a signature management vulnerability, successful exploitation of which could result in a forged system file overwriting a correct system file...

CVE-2023-23433: Improper Verification of Cryptographic Signature

Some Honor products are affected by signature management vulnerability, successful exploitation could cause the forged system file overwrite the correct system file...

Honor NTH-AN00 Data Forgery Issue Vulnerability

The Honor NTH-AN00 Honor 50 is a smartphone from the Chinese company Honor. The Honor NTH-AN00 suffers from a security vulnerability that stems from a signature management vulnerability, successful exploitation of which could result in a forged system file overwriting a correct system file...

CVE-2023-23431: Improper Verification of Cryptographic Signature

Some Honor products are affected by signature management vulnerability, successful exploitation could cause the forged system file overwrite the correct system file...

Honor Magic Ui Data Forgery Issue Vulnerability

Honor Magic Ui is an Android-based mobile operating system developed by Chinese company Honor. A security vulnerability exists in Honor Magic Ui, which stems from the presence of a signature management vulnerability, the successful exploitation of which may result in a forged system file...

CVE-2023-23435: Improper Verification of Cryptographic Signature

Some Honor products are affected by signature management vulnerability, successful exploitation could cause the forged system file overwrite the correct system file...

CVE-2023-23432: Improper Verification of Cryptographic Signature

Some Honor products are affected by signature management vulnerability, successful exploitation could cause the forged system file overwrite the correct system file...

CVE-2023-23436: Improper Verification of Cryptographic Signature

Some Honor products are affected by signature management vulnerability, successful exploitation could cause the forged system file overwrite the correct system file...

CVE-2023-50254

Deepin Linux's default document reader deepin-reader software suffers from a serious vulnerability in versions prior to 6.0.7 due to a design flaw that leads to remote command execution via crafted docx document. This is a file overwrite vulnerability. Remote code execution RCE can be achieved by...

Design/Logic Flaw

Deepin Linux's default document reader deepin-reader software suffers from a serious vulnerability in versions prior to 6.0.7 due to a design flaw that leads to remote command execution via crafted docx document. This is a file overwrite vulnerability. Remote code execution RCE can be achieved by...

CVE-2023-50254 Deepin Reader RCE vulnerability due to a design flaw

Deepin Linux's default document reader deepin-reader software suffers from a serious vulnerability in versions prior to 6.0.7 due to a design flaw that leads to remote command execution via crafted docx document. This is a file overwrite vulnerability. Remote code execution RCE can be achieved by...

CVE-2023-50254

Deepin Linux's default document reader deepin-reader software suffers from a serious vulnerability in versions prior to 6.0.7 due to a design flaw that leads to remote command execution via crafted docx document. This is a file overwrite vulnerability. Remote code execution RCE can be achieved by...

CVE-2023-50254 Deepin Reader RCE vulnerability due to a design flaw

Deepin Linux's default document reader deepin-reader software suffers from a serious vulnerability in versions prior to 6.0.7 due to a design flaw that leads to remote command execution via crafted docx document. This is a file overwrite vulnerability. Remote code execution RCE can be achieved by...

Exploit for Path Traversal in Deepin Deepin_Reader

CVE-2023-50254 - Deepin Linux's default document viewer deepin...

deepin-reader Security Vulnerabilities

deepin-reader is a small, fast, full-featured document viewing tool open source by Wuhan deepin Technology Co. deepin-reader 6.0.7 before the version of a security vulnerability , the vulnerability stems from the existence of file overwrite vulnerability , which may lead to remote code execution...

CVE-2023-50254: Path Traversal: 'dir/../../filename'

Deepin Linux's default document reader deepin-reader software suffers from a serious vulnerability in versions prior to 6.0.7 due to a design flaw that leads to remote command execution via crafted docx document. This is a file overwrite vulnerability. Remote code execution RCE can be achieved by...

PT-2023-9081

Name of the Vulnerable Software and Affected Versions Deepin Linux's default document reader deepin-reader versions prior to 6.0.7 Description The issue is caused by a design flaw in the deepin-reader software, leading to remote command execution via crafted docx documents. This is a file overwri...