Lucene search
K

1315 matches found

Prion
Prion
added 2020/09/10 7:15 p.m.21 views

Design/Logic Flaw

Adobe FrameMaker version 2019.0.6 and earlier versions has an out-of-bounds read vulnerability that could be exploited to read past the end of an allocated buffer, possibly resulting in a crash or disclosure of sensitive information from other memory locations. User interaction is required to...

5.8CVSS6AI score0.02747EPSS
Exploits0References1Affected Software1
Prion
Prion
added 2020/09/10 7:15 p.m.30 views

Stack overflow

Adobe FrameMaker version 2019.0.6 and earlier versions lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. This could be exploited to execute arbitrary code with the privileges of the current user. User interaction is required to...

6.8CVSS7.8AI score0.03728EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2020/09/10 6:36 p.m.81 views

CVE-2020-9726

Adobe FrameMaker 2019.0.6 and earlier versions contain an out-of-bounds read in the FM file parsing path that can crash or disclose memory contents. Exploitation requires user interaction (open a malicious FrameMaker file or visit a malicious page). Affected products: FrameMaker 2019 and earlier....

6.1CVSS6.1AI score0.02747EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2020/09/10 6:36 p.m.29 views

CVE-2020-9726 FrameMaker File Parsing Out-Of-Bounds Read Vulnerability

Adobe FrameMaker version 2019.0.6 and earlier versions has an out-of-bounds read vulnerability that could be exploited to read past the end of an allocated buffer, possibly resulting in a crash or disclosure of sensitive information from other memory locations. User interaction is required to...

6.1CVSS6.5AI score0.02747EPSS
Exploits0References1
EUVD
EUVD
added 2020/09/10 6:35 p.m.3 views

EUVD-2020-30505

Adobe FrameMaker version 2019.0.6 and earlier versions lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. This could be exploited to execute arbitrary code with the privileges of the current user. User interaction is required to...

7.8CVSS7.7AI score0.03728EPSS
Exploits0References1
CVE
CVE
added 2020/09/10 6:35 p.m.74 views

CVE-2020-9725

CVE-2020-9725 affects Adobe FrameMaker 2019.0.6 and earlier, due to lack of proper validation of user-supplied data length before copying to a fixed-length stack-based buffer. This can enable arbitrary code execution with the current user’s privileges. Exploitation requires user interaction (the ...

7.8CVSS7.7AI score0.03728EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2020/09/10 6:35 p.m.22 views

CVE-2020-9725 FrameMaker File Parsing Stack-based Buffer Overflow

Adobe FrameMaker version 2019.0.6 and earlier versions lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. This could be exploited to execute arbitrary code with the privileges of the current user. User interaction is required to...

7.8CVSS7.7AI score0.03728EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/09/10 12:0 a.m.51 views

Adobe FrameMaker FM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe FrameMaker. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of FM...

7.8CVSS5.7AI score0.03728EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/09/10 12:0 a.m.48 views

Adobe FrameMaker FM File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe FrameMaker. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of FM...

7.8CVSS5.1AI score0.02747EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2020/09/10 12:0 a.m.35 views

Adobe FrameMaker 2019 < 15.0.7 (2019.0.7) Arbitrary Code Execution (APSB20-54)

The version of Adobe FrameMaker installed on the remote Windows host is prior to Adobe FrameMaker 2019 15.0.7. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb20-54 advisory. - Adobe FrameMaker version 2019.0.6 and earlier versions lacks proper validation of the...

7.8CVSS7.1AI score0.03728EPSS
Exploits0References3
NCSC
NCSC
added 2020/09/10 12:0 a.m.2 views

Vulnerabilities fixed in Adobe Framemaker

Adobe has fixed vulnerabilities in Framemaker. The vulnerabilities allow a malicious person to execute arbitrary code execute arbitrary code under user privileges. Adobe designates these vulnerabilities as critical. Adobe has made updates available to address the vulnerabilities. fix. More...

7.8CVSS7.6AI score0.03728EPSS
Exploits0
OpenVAS
OpenVAS
added 2020/09/10 12:0 a.m.23 views

Adobe Framemaker Security Update (APSB20-54) - Windows

Adobe Framemaker is prone to multiple vulnerabilities SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:framemaker"; if...

7.8CVSS7.1AI score0.03728EPSS
Exploits0References1
CNVD
CNVD
added 2020/09/09 12:0 a.m.2 views

Adobe Framemaker Stack Buffer Overflow Vulnerability

Adobe FrameMaker is a document processing program for writing and editing large or complex documents, including structured documents. A stack buffer overflow vulnerability exists in Adobe Framemaker 2019.0.6 and earlier versions. An attacker can exploit this vulnerability to execute arbitrary cod...

7.8CVSS7.8AI score0.03728EPSS
Exploits0References1
CNVD
CNVD
added 2020/09/09 12:0 a.m.3 views

Adobe Framemaker Out-of-Bounds Read Vulnerability

Adobe FrameMaker is a document processing program for writing and editing large or complex documents, including structured documents. An out-of-bounds read vulnerability exists in Adobe Framemaker 2019.0.6 and earlier versions. An attacker can exploit the vulnerability to execute arbitrary code...

6.1CVSS7.3AI score0.02747EPSS
Exploits0References1
ThreatPost
ThreatPost
added 2020/09/08 4:52 p.m.473 views

Critical Adobe Flaws Allow Attackers to Run JavaScript in Browsers

UPDATE Adobe has released fixes addressing five critical flaws in its popular Experience Manager content-management solution for building websites, mobile apps and forms. The cross-site scripting XSS flaws could allow attackers to execute JavaScript in targets’ browsers. Including Adobe Experienc...

6.8CVSS1.1AI score0.11294EPSS
Exploits1References17
CISA
CISA
added 2020/09/08 12:0 a.m.10 views

Adobe Releases Security Updates

Adobe has released security updates to address vulnerabilities in multiple products. An attacker could exploit some of these vulnerabilities to take control of an affected system. The Cybersecurity and Infrastructure Security Agency CISA encourages users and administrators to review the following...

7AI score
Exploits0References3
Adobe
Adobe
added 2020/09/08 12:0 a.m.31 views

APSB20-54 Security Updates Available for Adobe FrameMaker

Adobe has released a security update for Adobe Framemaker. This update addresses multiple critical vulnerabilities. Successful exploitation could lead to arbitrary code execution in the context of the current user...

7.4AI score
Exploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/07/03 12:0 a.m.2 views

The vulnerability of the Adobe Framemaker desktop publishing system, related to writing beyond the buffer boundaries in memory, allows a hacker to execute arbitrary code.

The vulnerability of the Adobe Framemaker desktop publishing system lies in the writing of code beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

10CVSS7.9AI score0.04463EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/07/03 12:0 a.m.1 views

The vulnerability of the Adobe Framemaker desktop publishing system, related to writing beyond the buffer boundaries in memory, allows a hacker to execute arbitrary code.

The vulnerability of the Adobe Framemaker desktop publishing system lies in the writing of code beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

10CVSS7.9AI score0.04463EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/07/03 12:0 a.m.2 views

The vulnerability of the Adobe Framemaker desktop publishing system arises from the possibility of an operation going beyond the buffer boundaries in memory, allowing a hacker to execute arbitrary code.

The vulnerability of the Adobe Framemaker desktop publishing system lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

10CVSS8.4AI score0.03939EPSS
Exploits0References3Affected Software1
Rows per page
Query Builder