CVE-2024-8587 Autodesk AutoCAD SLDPRT File Parsing Heap-based Buffer Overflow Code Execution Vulnerability

A maliciously crafted SLDPRT file when parsed in odxswdll.dll through Autodesk AutoCAD can force a Heap Based Buffer Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process...

CVE-2024-8587

CVE-2024-8587 affects Autodesk AutoCAD via a heap-based buffer overflow in the odxsw_dll.dll component when parsing a malicious SLDPRT file. The vulnerability can cause a crash, potentially read/write of memory, and arbitrary code execution in the context of the current process. Public sources co...

CVE-2024-8587 Autodesk AutoCAD SLDPRT File Parsing Heap-based Buffer Overflow Code Execution Vulnerability

A maliciously crafted SLDPRT file when parsed in odxswdll.dll through Autodesk AutoCAD can force a Heap Based Buffer Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process...

[SECURITY] [DSA 5800-1] xorg-server security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5800-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 29, 2024 https://www.debian.org/security/faq -...

SUSE-SU-2024:3770-1 Security update for libgsf

This update for libgsf fixes the following issues: - CVE-2016-9888: Fixed null pointer dereference with corrupted tar files bsc1014609 - CVE-2024-36474: Fixed out-of-bounds index when processing a directory via an integer overflow in the compound document binary file format parser bsc1231282 -...

Debian dsa-5800 : xnest - security update

The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dsa-5800 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5800-1 [email protected] https://www.debian.org/security/...

Huawei EulerOS: Security Advisory for sqlite (EulerOS-SA-2024-2627)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Nikon NEF Codec Thumbnail Provider NRW File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Nikon NEF Codec. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of NRW...

[SECURITY] [DLA 3931-1] ghostscript security update

Debian LTS Advisory DLA-3931-1 [email protected] https://www.debian.org/lts/security/ Sean Whitton October 22, 2024 https://wiki.debian.org/LTS Package : ghostscript Version : 9.53.3dfsg-7+deb11u8 CVE ID : CVE-2024-29508 A heap-based pointer disclosure problem was found in Ghostscript, ...

ROS-20241021-02

GNOME Project G libgsf structured file library vulnerability is related to heap-based integer overflow during processing of sector allocation table. heap-based integers when processing the sector allocation table. Exploitation of the vulnerability could allow an attacker to execute arbitrary code...

Adobe After Effects < 18.4.5 / 22.0.0 < 22.2.1 Multiple Arbitrary code execution (APSB22-17) (macOS)

The version of Adobe After Effects installed on the remote macOS host is prior to 18.4.5, 22.2.1. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB22-17 advisory. - Adobe After Effects versions 22.2 and earlier and 18.4.4 and earlier are affected by an out-of-bounds...

Adobe Animate 20.x < 20.5.2 / 21.x < 21.0.4 Multiple Vulnerabilities (APSB21-21)

The version of Adobe Animate installed on the remote macOS or Mac OS X host is prior to 20.5.2 or 21.0.4. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb21-21 advisory. - Adobe Animate version 21.0.3 and earlier is affected by a Heap-based Buffer Overflow...

Adobe Bridge 6.x < 6.1.1 Multiple Vulnerabilities (APSB15-13)

The version of Adobe Bridge installed on the remote Windows host is prior to 6.1.1. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb15-13 advisory. - Heap-based buffer overflow in Adobe Photoshop CC before 16.0 aka 2015.0.0 and Adobe Bridge CC before 6.11 allows...

Adobe Acrobat < 11.0.17 / 15.006.30198 / 15.017.20050 Multiple Vulnerabilities (APSB16-26) (macOS)

The version of Adobe Acrobat installed on the remote macOS host is a version prior to 11.0.17, 15.006.30198, or 15.017.20050. It is, therefore, affected by multiple vulnerabilities. - Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic...

Adobe Animate 21.x < 21.0.7 Multiple Vulnerabilities (APSB21-50)

The version of Adobe Animate installed on the remote macOS or Mac OS X host is prior to 21.0.7. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb21-50 advisory. - Adobe Animate version 21.0.6 and earlier is affected by an Out-of-bounds Read vulnerability. An...

Adobe Reader < 15.006.30198 / 15.017.20050 Multiple Vulnerabilities (APSB16-26) (macOS)

The version of Adobe Reader installed on the remote macOS host is a version prior to 15.006.30198 or 15.017.20050. It is, therefore, affected by multiple vulnerabilities. - Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before...

Oracle VirtualBox TPM Heap-based Buffer Overflow Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Oracle VirtualBox. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the...

Medium: libtiff

Issue Overview: Multiple potential integer overflow in raw2tiff.c in libtiff = 4.5.1 can allow remote attackers to cause a denial of service application crash or possibly execute an arbitrary code via a crafted tiff image which triggers a heap-based buffer overflow. CVE-2023-41175 Affected...

Qnap QTS Heap-based Buffer Overflow (CVE-2023-50364)

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to execute code via a network. We have already fixed the vulnerability in the following versions: QTS...

Qnap QTS Out-of-bounds Write (CVE-2023-41273)

A heap-based buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.2.2533...