Debian dla-3594 : cups - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3594 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3594-1 [email protected]...

Updated indent package fixes security vulnerabilities

GNU indent 2.2.13 has a heap-based buffer overflow in searchbrace in indent.c via a crafted file. CVE-2023-40305 GNU indent 2.2.13 has a heap overread in lexi...

MGASA-2023-0274 Updated indent package fixes security vulnerabilities

GNU indent 2.2.13 has a heap-based buffer overflow in searchbrace in indent.c via a crafted file. CVE-2023-40305 GNU indent 2.2.13 has a heap overread in lexi...

[SECURITY] [DSA 5510-1] libvpx security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5510-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 29, 2023 https://www.debian.org/security/faq -...

PT-2023-9366 · Gimp +9 · Gimp +9

Name of the Vulnerable Software and Affected Versions: GIMP versions prior to 2.10.18-1ubuntu0.1 GIMP versions prior to 2.10.22-4+deb11u1 GIMP versions prior to 2.10.34-1+deb12u1 Description: GIMP GNU Image Manipulation Program contains a vulnerability related to improper handling of crafted PSD...

Debian dla-3588 : vim - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3588 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3588-1 [email protected]...

CVE-2023-5217

A heap-based buffer overflow flaw was found in the way libvpx, a library used to process VP8 and VP9 video codecs data, processes certain specially formatted video data via a crafted HTML page. This flaw allows an attacker to crash or remotely execute arbitrary code in an application, such as a w...

CBL Mariner 2.0 Security Update: vim (CVE-2023-4781)

The version of vim installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-4781 advisory. - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1873. CVE-2023-4781 Note that Nessus has no...

10 new vulnerabilities disclosed by Talos, including use-after-free issue in Google Chrome

Cisco Talos disclosed 10 vulnerabilities over the past two weeks affecting a range of software, including the popular Google Chrome web browser. Attackers could exploit these vulnerabilities to carry out a variety of attacks, in some cases gaining the ability to execute remote code on the targete...

Amazon Linux 2 : libsepol (ALASSELINUX-NG-2023-001)

The version of libsepol installed on the remote host is prior to 2.5-10. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2SELINUX-NG-2023-001 advisory. The CIL compiler in SELinux 3.2 has a use-after-free in cilverifyclassperms called from cilverifyclasspermission...

Microsoft Visual Studio FBX File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Visual Studio. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

Microsoft Visual Studio FBX File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Visual Studio. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

Fedora 38 : libppd (2023-00484b4120)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-00484b4120 advisory. CVE-2023-4504 libppd: Postscript Parsing Heap Overflow Tenable has extracted the preceding description block directly from the Fedora security...

Fedora 38 : cups (2023-96519dc6fd)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-96519dc6fd advisory. 2239982 - cups-2.4.7 is available Security fix for CVE-2023-4504 2233078 - cupsd spamming journal Tenable has extracted the preceding description...

CVE-2023-23567

Accusoft ImageGear 20.1 is affected by CVE-2023-23567 in the CreateDIBfromPict functionality. Talos reports a heap-based buffer overflow caused by a mis-sized heap buffer when processing DirectBitsRect/PICt data, allowing potential arbitrary code execution via a specially crafted file. The vulner...

CVE-2023-32614

A heap-based buffer overflow vulnerability exists in the createpngobject functionality of Accusoft ImageGear 20.1. A specially crafted malformed file can lead to memory corruption. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2023-35002

CVE-2023-35002 affects Accusoft ImageGear 20.1, with a heap-based buffer overflow in the pictwread functionality that can lead to arbitrary code execution via a specially crafted file. Reports in multiple sources (NVD/Red Hat/CVE listings) confirm the vulnerability in the 20.1 release. The connec...

CVE-2023-32614

Mode C: TALOS reports a heap-based buffer overflow in Accusoft ImageGear 20.1, specifically in the create_png_object path used to process PNGs. The root cause is an invalid memory/size handling during raster processing of PNG IHDR-width-derived data, leading to memory corruption when a malformed ...

OPENSUSE-SU-2023:0253-1 Security update for renderdoc

This update for renderdoc fixes the following issues: Security issues fixed: CVE-2023-33863: integer overflow to heap-based buffer overflow CVE-2023-33864: integer underflow to heap-based buffer overflow CVE-2023-33865: symlink vulnerability in /tmp/RenderDoc...

Accusoft ImageGear CreateDIBfromPict out-of-bounds write vulnerability

Talos Vulnerability Report TALOS-2023-1729 Accusoft ImageGear CreateDIBfromPict out-of-bounds write vulnerability September 25, 2023 CVE Number CVE-2023-23567 SUMMARY A heap-based buffer overflow vulnerability exists in the CreateDIBfromPict functionality of Accusoft ImageGear 20.1. A specially...