Lucene search
+L

957 matches found

CNNVD
CNNVD
added 2021/05/17 12:00 a.m.8 views

GNU LibreDWG 缓冲区错误漏洞

LibreDWG is a free C library for reading and writing DWG files. A heap buffer overflow vulnerability exists in GNU LibreDWG version 0.10. An attacker can exploit this vulnerability via the bitcalcCRC ... /... /src/bits.c:2213 to exploit the vulnerability and cause a heap buffer overflow...

8.8CVSS6.2AI score0.01133EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2021/05/17 12:00 a.m.10 views

PT-2021-10674

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.10.2641 Description: A heap-based buffer overflow issue exists. The problem is located in the escape.c file at line 51, specifically via htmlescape. Recommendations: For GNU LibreDWG version 0.10.2641, consider...

8.8CVSS7.4AI score0.01133EPSS
SaveExploits1References7
CNNVD
CNNVD
added 2021/05/17 12:00 a.m.8 views

GNU LibreDWG 缓冲区错误漏洞

LibreDWG is a free C library for reading and writing DWG files. A heap buffer overflow vulnerability exists in GNU LibreDWG version 0.10.2641. An attacker can exploit this vulnerability via htmlescape ... /... /programs/escape.c:48 to exploit the vulnerability and cause a heap buffer overflow...

8.8CVSS6.2AI score0.01121EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2021/05/17 12:00 a.m.12 views

GNU LibreDWG 代码问题漏洞

LibreDWG is a free C library for reading and writing DWG files. A null pointer dereference vulnerability exists in GNU LibreDWG version 0.10.2641. An attacker can exploit this vulnerability via htmlescape ... /... /programs/escape.c:29 to exploit the vulnerability and cause the application to cra...

6.5CVSS5.6AI score0.00911EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2021/05/17 12:00 a.m.15 views

PT-2021-10678

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.10 Description: A heap-based buffer overflow issue exists, which can be triggered via the read 2004 compressed section function in the decode.c file. Recommendations: For GNU LibreDWG version 0.10, consider applying a...

8.8CVSS7.4AI score0.01133EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2021/05/17 12:00 a.m.15 views

PT-2021-10683

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.10 Description: A heap-based buffer overflow issue exists in the read 2004 section appinfo function, located in the decode.c file. This issue can be exploited via the read 2004 section appinfo function. Recommendations:...

8.8CVSS7.4AI score0.01073EPSS
SaveExploits1References8
CNNVD
CNNVD
added 2021/05/17 12:00 a.m.10 views

GNU LibreDWG 代码问题漏洞

LibreDWG is a free C library for reading and writing DWG files. A null pointer dereference vulnerability exists in GNU LibreDWG version 0.10.2641. An attacker can pass the outputTEXT ... /... /programs/dwg2SVG.c:114 to exploit the vulnerability and cause the application to crash...

6.5CVSS5.6AI score0.00911EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2021/05/17 12:00 a.m.10 views

PT-2021-10671

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.10.2641 Description: A heap-based buffer overflow issue exists in GNU LibreDWG. The issue is related to the htmlescape function in the escape.c file. Recommendations: For GNU LibreDWG version 0.10.2641, at the moment,...

8.8CVSS7.3AI score0.01133EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2021/05/17 12:00 a.m.9 views

GNU LibreDWG 安全漏洞

LibreDWG is a free C library for reading and writing DWG files. The read2004sectionheader in GNU LibreDWG version 0.10 ... /... /src/decode.c:2580 contains a security vulnerability in memcpy-param-overlap. An attacker can exploit this vulnerability to execute arbitrary code...

8.8CVSS6.1AI score0.01525EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2021/05/17 12:00 a.m.9 views

GNU LibreDWG 缓冲区错误漏洞

LibreDWG is a free C library for reading and writing DWG files. A heap buffer overflow vulnerability exists in GNU LibreDWG version 0.10. An attacker can exploit this vulnerability via the bitreadB ... /... /src/bits.c:135 to exploit the vulnerability and cause a heap buffer overflow...

8.8CVSS6.2AI score0.01073EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2021/05/17 12:00 a.m.11 views

GNU LibreDWG 缓冲区错误漏洞

LibreDWG is a free C library for reading and writing DWG files. A heap buffer overflow vulnerability exists in GNU LibreDWG version 0.10. An attacker can exploit this vulnerability via the bitsearchsentinel ... /... /src/bits.c:1985 to cause a heap buffer overflow...

8.8CVSS6.2AI score0.01073EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2021/05/17 12:00 a.m.10 views

GNU LibreDWG 代码问题漏洞

LibreDWG is a free C library for reading and writing DWG files. A null pointer dereference vulnerability exists in GNU LibreDWG version 0.10. An attacker can read2004compressedsection ... /... /src/decode.c:2337 to exploit the vulnerability and cause a denial of service...

6.5CVSS5.7AI score0.00863EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2021/05/17 12:00 a.m.12 views

PT-2021-10679

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.10 Description: A heap-based buffer overflow issue exists in the read 2004 section classes function, located in the decode.c file. This issue is related to the line 2440 of the decode.c file. Recommendations: For GNU...

8.8CVSS7.4AI score0.01133EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
added 2021/05/17 12:00 a.m.15 views

PT-2021-10676

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.10 Description: A heap-based buffer overflow issue exists in the software. The problem is located in the bit calc CRC function in the bits.c file. Recommendations: For GNU LibreDWG version 0.10, at the moment, there is ...

8.8CVSS7.3AI score0.01133EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2021/05/17 12:00 a.m.10 views

GNU LibreDWG 缓冲区错误漏洞

LibreDWG is a free C library for reading and writing DWG files. A heap buffer overflow vulnerability exists in GNU LibreDWG version 0.10. An attacker can exploit this vulnerability by reading2004compressedsection ... /... /src/decode.c:2417 to cause a heap buffer overflow...

8.8CVSS6.1AI score0.01133EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2021/05/17 12:00 a.m.11 views

PT-2021-10689

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.10 Description: The issue allows for the execution of arbitrary code remotely due to a memcpy-param-overlap. The component affected is the read 2004 section header in the decode.c file. Recommendations: For GNU LibreDWG...

8.8CVSS7.6AI score0.01525EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
added 2021/05/17 12:00 a.m.12 views

PT-2021-10680

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.10 Description: A null pointer dereference issue exists in GNU LibreDWG. This issue is related to the get bmp function in the dwgbmp.c file. Recommendations: For GNU LibreDWG version 0.10, consider avoiding the use of t...

6.5CVSS6.6AI score0.00863EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2021/05/17 12:00 a.m.10 views

PT-2021-10669

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.10.2641 Description: A heap-based buffer overflow issue exists in the software. The issue is located in the ../../programs/escape.c file at line 97, and is related to the htmlwescape function. Recommendations: For GNU...

8.8CVSS7.4AI score0.01073EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2021/05/17 12:00 a.m.13 views

PT-2021-10687

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.10 Description: A heap-based buffer overflow issue exists due to a problem in the read 2004 section revhistory function located in decode.c at line 3051. This could potentially lead to exploitation. Recommendations: For...

8.8CVSS7.4AI score0.01133EPSS
SaveExploits1References7
CNNVD
CNNVD
added 2021/05/17 12:00 a.m.8 views

GNU LibreDWG 缓冲区错误漏洞

LibreDWG is a free C library for reading and writing DWG files. A heap buffer overflow vulnerability exists in GNU LibreDWG version 0.10. An attacker can exploit this vulnerability via the read2004sectionpreview ... /... /src/decode.c:3175 to cause a heap buffer overflow...

8.8CVSS6.2AI score0.01073EPSS
SaveExploits1References3
Rows per page
Query Builder