Adobe Substance 3D Designer DAE File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Substance 3D Designer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2023-26394: Heap-based Buffer Overflow

Adobe Substance 3D Stager version 2.0.1 and earlier is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

openSUSE 15 Security Update : upx (openSUSE-SU-2023:0088-1)

The remote openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2023:0088-1 advisory. - A flaw was found in upx canPack in plxelf.cpp in UPX 3.96. This flaw allows attackers to cause a denial of service SEGV or buffer overflow and...

CVE-2023-26394 ZDI-CAN-20236: Adobe Substance 3D Stager USD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Adobe Substance 3D Stager version 2.0.1 and earlier is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2023-1906

A heap-based buffer overflow issue was discovered in ImageMagick's ImportMultiSpectralQuantum function in MagickCore/quantum-import.c. An attacker could pass specially crafted file to convert, triggering an out-of-bounds read error, allowing an application to crash, resulting in a denial of servi...

CVE-2023-28254: Heap-based Buffer Overflow

Windows DNS Server Remote Code Execution Vulnerability...

CVE-2023-24912: Heap-based Buffer Overflow

Windows Graphics Component Elevation of Privilege Vulnerability...

CVE-2023-28231: Heap-based Buffer Overflow

DHCP Server Service Remote Code Execution Vulnerability...

CVE-2023-23384: Heap-based Buffer Overflow

Microsoft SQL Server Remote Code Execution Vulnerability...

CVE-2023-24928: Heap-based Buffer Overflow

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability...

CVE-2023-28275: Heap-based Buffer Overflow

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...

CVE-2023-28225: Heap-based Buffer Overflow

Windows NTLM Elevation of Privilege Vulnerability...

CVE-2023-21727: Heap-based Buffer Overflow

Remote Procedure Call Runtime Remote Code Execution Vulnerability...

CVE-2023-28218: Heap-based Buffer Overflow

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability...

CVE-2023-28311: Heap-based Buffer Overflow

Microsoft Word Remote Code Execution Vulnerability...

CVE-2023-28269: Heap-based Buffer Overflow

Windows Boot Manager Security Feature Bypass Vulnerability...

CVE-2023-24926: Heap-based Buffer Overflow

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability...

CVE-2023-28292: Heap-based Buffer Overflow

Raw Image Extension Remote Code Execution Vulnerability...

CVE-2023-28227: Heap-based Buffer Overflow

Windows Bluetooth Driver Remote Code Execution Vulnerability...

PT-2023-2281

Name of the Vulnerable Software and Affected Versions Adobe Substance 3D Designer versions 12.4.0 and earlier Description The issue is a Heap-based Buffer Overflow that could result in arbitrary code execution in the context of the current user. Exploitation requires user interaction, where a...