CVE-2021-28629

Adobe Animate is affected in versions prior to 21.0.7 (notably 21.0.6 and earlier) by a Heap-based Buffer Overflow vulnerability. An unauthenticated attacker could trigger arbitrary code execution in the context of the current user, but exploitation requires the user to open a malicious file. The...

CVE-2021-32263

ok-file-formats through 2021-04-29 has a heap-based buffer overflow in the okcsvcircularbufferread function in okcsv.c...

Heap overflow

Adobe After Effects version 18.2 and earlier is affected by a Heap-based Buffer Overflow vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this...

Heap overflow

Adobe After Effects version 18.2 and earlier is affected by a Heap-based Buffer Overflow vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this...

CVE-2021-28608

CVE-2021-28608 affects Adobe After Effects 18.2 and earlier. A heap-based buffer overflow occurs when parsing a specially crafted file, allowing an unauthenticated, context-user arbitrary code execution, with exploitation requiring user interaction (victim opens a malicious file). Remediation: ap...

CVE-2021-28610

CVE-2021-28610 affects Adobe After Effects 18.2 and earlier. The vulnerability is a heap-based buffer overflow that occurs while parsing a specially crafted file, allowing arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim opens a malicious...

CVE-2021-28603

CVE-2021-28603 affects Adobe After Effects 18.2 and earlier. It is a heap-based buffer overflow triggered while parsing a specially crafted file, allowing arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim must open a malicious file). Affec...

CVE-2021-32263

CVE-2021-32263 affects the ok-file-formats project. The vulnerability is a heap-based buffer overflow in the ok_csv_circular_buffer_read function within ok_csv.c, with affected releases up to 2021-04-29. The initial entry provides no explicit exploitation details, affected versions beyond the dat...

Debian DLA-2748-1 : tnef - LTS security update

The remote Debian 9 host has a package installed that is affected by a vulnerability as referenced in the dla-2748 advisory. - In tnef before 1.4.18, an attacker may be able to write to the victim's .ssh/authorizedkeys file via an e-mail message with a crafted winmail.dat application/ms-tnef...

CVE-2020-18778

In Libav 12.3, there is a heap-based buffer over-read in vc1decodepmbintfi in vc1block.c that allows an attacker to cause denial-of-service via a crafted file...

CVE-2020-18778

CVE-2020-18778 describes a heap-based buffer over-read in Libav 12.3, specifically in vc1_decode_p_mb_intfi of vc1_block.c. This flaw can allow a denial-of-service when processing a crafted VC-1 file. The available sources consistently identify the affected component and the nature of the vulnera...

openSUSE: Security Advisory for libass (openSUSE-SU-2021:1174-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE 15 Security Update : libass (openSUSE-SU-2021:2792-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:2792-1 advisory. - libass 0.15.x before 0.15.1 has a heap-based buffer overflow in decodechars called from decodefont and processtext because the wrong integer data...

SUSE SLED15 / SLES15 Security Update : aspell (SUSE-SU-2021:2794-1)

The remote SUSE Linux SLED15 / SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:2794-1 advisory. - CVE-2019-25051: Fixed heap-buffer-overflow in acommon:ObjStack:duptop bsc1188576. Tenable has extracted the preceding description block...

openSUSE 15 Security Update : libass (openSUSE-SU-2021:1174-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:1174-1 advisory. - libass 0.15.x before 0.15.1 has a heap-based buffer overflow in decodechars called from decodefont and processtext because the wrong integer data...

SUSE SLED15 / SLES15 Security Update : libass (SUSE-SU-2021:2792-1)

The remote SUSE Linux SLED15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:2792-1 advisory. - CVE-2020-36430: Fixed heap-based buffer overflow in decodechars bsc1188539. Tenable has extracted the preceding description block...

Security update for libass (important)

openSUSE Security Update: Security update for libass Announcement ID: openSUSE-SU-2021:1174-1 Rating: important References: 1188539 Cross-References: CVE-2020-36430 CVSS scores: CVE-2020-36430 NVD : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2020-36430 SUSE: 7.5...

openSUSE 15 Security Update : aspell (openSUSE-SU-2021:2794-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:2794-1 advisory. - objstack in GNU Aspell 0.60.8 has a heap-based buffer overflow in acommon::ObjStack::duptop called from acommon::StringMap::add and...

CVE-2021-21826

A heap-based buffer overflow vulnerability exists in the XML Decompression DecodeTreeBlock functionality of AT&T Labs Xmill 0.7. Within DecodeTreeBlock which is called during the decompression of an XMI file, a UINT32 is loaded from the file and used as trusted input as the length of a buffer. An...

CVE-2021-21827

A heap-based buffer overflow vulnerability exists in the XML Decompression DecodeTreeBlock functionality of AT&T Labs Xmill 0.7. Within DecodeTreeBlock which is called during the decompression of an XMI file, a UINT32 is loaded from the file and used as trusted input as the length of a buffer. An...