Binary vulnerability in FFmpeg tiff format

FFmpeg is a set of open source computer programs that can be used to record and convert digital audio and video into streams. A binary vulnerability exists in the FFmpeg tiff format, which can be exploited by attackers to cause a denial-of-service attack...

Heap out-of-bounds read vulnerability exists in ABC Lookout of Shanghai Zhanmeng Network Technology Co. Ltd (CNVD-2020-66605)

ABC Viewer is a permanent free image viewing software, intelligently turns on hardware acceleration and supports a variety of image formats. Shanghai Zhanmeng Network Science and Technology Co., Ltd. ABC to see the map of the existence of heap out-of-bounds read vulnerability, the vulnerability f...

Heap out-of-bounds read vulnerability exists in ABC Lookout of Shanghai Zhanmeng Network Technology Co. Ltd (CNVD-2020-66602)

ABC Viewer is a permanent free image viewing software, intelligently turns on hardware acceleration and supports a variety of image formats. Shanghai Zhanmeng Network Science and Technology Co., Ltd. ABC to see the map of the existence of heap out-of-bounds read vulnerability, the vulnerability f...

Heap out-of-bounds read vulnerability exists in ABC Lookout of Shanghai Zhanmeng Network Technology Co. Ltd (CNVD-2020-66604)

ABC Viewer is a permanent free image viewing software, intelligently turns on hardware acceleration and supports a variety of image formats. Shanghai Zhanmeng Network Science and Technology Co., Ltd. ABC to see the map of the existence of heap out-of-bounds read vulnerability, the vulnerability f...

About the security content of tvOS 14.2

About the security content of tvOS 14.2 This document describes the security content of tvOS 14.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

Apple macOS Catalina buffer overflow vulnerability (CNVD-2020-60824)

Apple macOS Catalina is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS Catalina versions prior to 10.15.6, which originates from viewing a maliciously created JPEG file could lead to arbitrary code execution. No details of...

Foxit Studio Photo Information Disclosure Vulnerability (CNVD-2020-59767)

Foxit Studio Photo is a set of image editing software from the Chinese company Foxit Foxit. An information disclosure vulnerability exists in the handling of CR2 files in Foxit Studio Photo 3.6.6.930 and earlier versions. The vulnerability stems from a lack of proper validation of user-supplied...

Foxit Studio Photo Remote Code Execution Vulnerability (CNVD-2020-59779)

Foxit Studio Photo is a set of image editing software from the Chinese company Foxit Foxit. A remote code execution vulnerability exists in the handling of CR2 files in Foxit Studio Photo 3.6.6.930 and earlier versions. The vulnerability stems from a lack of proper validation of user-supplied dat...

Ubuntu 16.04 LTS : Collabtive vulnerability (USN-4590-1)

The remote Ubuntu 16.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-4590-1 advisory. It was discovered that Collabtive did not properly validate avatar image file uploads. An authenticated user could exploit this with a crafted file to cause...

CVE-2020-17022

A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory. An attacker who successfully exploited the vulnerability could execute arbitrary code. Exploitation of the vulnerability requires that a program process a specially crafted ima...

EUVD-2020-8979

A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory. An attacker who successfully exploited the vulnerability could execute arbitrary code. Exploitation of the vulnerability requires that a program process a specially crafted ima...

Microsoft Windows Codecs Library Remote Code Execution Vulnerability

A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory. An attacker who successfully exploited the vulnerability could execute arbitrary code. Exploitation of the vulnerability requires that a program process a specially crafted ima...

Moderate: Red Hat Security Advisory: libexif security, bug fix, and enhancement update

An update for libexif is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Microsoft Windows Codecs Library AV1 RCE (August 2020)

The Windows 'AV1 Video Extension' or 'AV1 from Device Manufacturer' app installed on the remote host is affected by two code execution vulnerabilities. An unauthenticated, remote attacker can exploit either of these vulnerabilities via a image file to execute code and gain control of the system. ...

CVE-2020-1319

A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; or...

CVE-2020-1129

A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; or...

Remote code execution

A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; or...

Remote code execution

A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; or...

CVE-2020-6345

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated TGA file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

Microsoft Windows Codecs Library Remote Code Execution Vulnerability

A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; or...