CVE-2020-7822

DaviewIndy has a Heap-based overflow vulnerability, triggered when the user opens a malformed image file that is mishandled by Daview.exe. Attackers could exploit this and arbitrary code execution...

CVE-2020-7822

CVE-2020-7822 corresponds to a heap-based overflow in DaviewIndy, triggered when opening a malformed image file mishandled by Daview.exe. The vulnerability arises from a heap corruption condition that could allow arbitrary code execution. Multiple connected sources (e.g., CNVD-2020-45106) describ...

PT-2020-19818

Name of the Vulnerable Software and Affected Versions DaviewIndy affected versions not specified Description The issue is triggered when a user opens a malformed image file that is mishandled by Daview.exe, leading to a Heap-based overflow. This could allow attackers to exploit the issue and...

CVE-2020-7822: Improper Input Validation

DaviewIndy has a Heap-based overflow vulnerability, triggered when the user opens a malformed image file that is mishandled by Daview.exe. Attackers could exploit this and arbitrary code execution...

CentOS 7 : kernel (RHSA-2020:3220)

The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:3220 advisory. - Insufficient access control in the IntelR PROSet/Wireless WiFi Software driver before version 21.10 may allow an unauthenticated user to potentially...

CVE-2020-7829

DaviewIndy 8.98.4 and earlier version contain Heap-based overflow vulnerability, triggered when the user opens a malformed specific file that is mishandled by Daview.exe. Attackers could exploit this and arbitrary code execution...

CVE-2020-7828

CVE-2020-7828 affects DaviewIndy 8.98.4 and earlier. A heap-based overflow is triggered when opening a specially crafted file mishandled by Daview.exe, enabling an attacker to potentially execute arbitrary code. Multiple connected sources (Red Hat CVE, CNVD, NVD listing) corroborate a heap overfl...

CVE-2020-7829

CVE-2020-7829 affects DaviewIndy 8.98.4 and earlier. The issue is a heap-based overflow triggered by opening a specially crafted file mishandled by Daview.exe, allowing arbitrary code execution. Multiple connected sources (NVD, Red Hat, CNVD, CNVD, CVE lists) corroborate the same description acro...

PT-2020-19825

Name of the Vulnerable Software and Affected Versions DaviewIndy versions 8.98.4 and earlier Description The issue is triggered when a user opens a malformed specific file that is mishandled by Daview.exe, leading to a heap-based overflow. This could allow attackers to exploit the issue and achie...

PT-2020-19824

Name of the Vulnerable Software and Affected Versions DaviewIndy versions 8.98.4 and earlier Description The issue is triggered when a user opens a malformed specific file that is mishandled by Daview.exe, leading to a heap-based overflow. This could allow attackers to exploit the issue and achie...

CVE-2020-15888

Lua through 5.4.0 mishandles the interaction between stack resizes and garbage collection, leading to a heap-based buffer overflow, heap-based buffer over-read, or use-after-free...

jbig2dec: heap-based buffer overflow in jbig2_image_compose in jbig2_image.c

An integer overflow was found in jbig2dec, which causes an out-of-bounds read/write in the jbig2imagecompose function. This flaw could potentially result in the execution of code on the system. Applications that use jbig2dec with untrusted input may be vulnerable to this flaw. The highest threat...

Security Bulletin: Spice-server vulnerabilities affect IBM SmartCloud Entry (CVE-2016-0749 CVE-2016-2150 )

Summary SmartCloud Entry is vulerable to Spice-server vulnerabilities. Attackers could exploit them to cause improper bounds checking by smartcard interaction or bypass security restrictions Vulnerability Details CVEID: CVE-2016-0749 DESCRIPTION: Red Hat spice is vulnerable to a heap-based buffer...

CVE-2020-7818

DaviewIndy 8.98.9 and earlier has a Heap-based overflow vulnerability, triggered when the user opens a malformed PDF file that is mishandled by Daview.exe. Attackers could exploit this and arbitrary code execution...

Heap overflow

DaviewIndy 8.98.9 and earlier has a Heap-based overflow vulnerability, triggered when the user opens a malformed PDF file that is mishandled by Daview.exe. Attackers could exploit this and arbitrary code execution...

CVE-2020-7818

DaviewIndy is a document viewing application. The connected documents confirm CVE-2020-7818 affects DaviewIndy 8.98.9 and earlier, via a heap/buffer overflow in handling a malformed PDF file mishandled by Daview.exe, enabling arbitrary code execution. CNVD-2020-43162 specifies the vulnerability a...

CVE-2020-7818 DaviewIndy Heap Overflow Vulnerability

DaviewIndy 8.98.9 and earlier has a Heap-based overflow vulnerability, triggered when the user opens a malformed PDF file that is mishandled by Daview.exe. Attackers could exploit this and arbitrary code execution...

PT-2020-19815

Name of the Vulnerable Software and Affected Versions DaviewIndy versions 8.98.9 and earlier Description The issue is triggered when a user opens a malformed PDF file that is mishandled by Daview.exe, leading to a Heap-based overflow. This could allow attackers to exploit the issue and achieve...

CVE-2020-7818: Improper Input Validation

DaviewIndy 8.98.9 and earlier has a Heap-based overflow vulnerability, triggered when the user opens a malformed PDF file that is mishandled by Daview.exe. Attackers could exploit this and arbitrary code execution...

SUSE SLED15 / SLES15 Security Update : gstreamer-plugins-base (SUSE-SU-2020:1300-2)

This update for gstreamer-plugins-base fixes the following issue : Security issue fixed : CVE-2019-9928: Fixed a heap-based overflow in the rtsp connection parser bsc1133375. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory...