Pixar OpenUSD Binary File Format Compressed Value Reps Code Execution Vulnerabilities

Summary A heap overflow vulnerability exists in the Pixar OpenUSD 20.05 while parsing compressed value rep arrays in binary USD files. A specially crafted malformed file can trigger a heap overflow, which can result in remote code execution. To trigger this vulnerability, the victim needs to acce...

kubernetes: Docker config secrets leaked when file is malformed and loglevel >= 4

A flaw was found in kubernetes. In Kubernetes, if the logging level is to at least 4, processing a malformed docker config file will result in the contents of the docker config file being leaked, which can include pull secrets or other registry credentials. This can occur with client tools like...

OPENSUSE-SU-2020:1452-1 Security update for libqt4

This update for libqt4 fixes the following issues: Fix buffer over-read in readxbmbody boo1176315, CVE-2020-17507 Fix 'double free or corruption' in QXmlStreamReader boo1118595, CVE-2018-15518 Fix QBmpHandler segfault on malformed BMP file boo1118596, CVE-2018-19873 Fix crash when parsing malform...

CVE-2020-7828

DaviewIndy 8.98.4 and earlier version contain Heap-based overflow vulnerability, triggered when the user opens a malformed specific file that is mishandled by Daview.exe. Attackers could exploit this and arbitrary code execution...

CVE-2020-7827

DaviewIndy 8.98.7 and earlier version contain Use-After-Free vulnerability, triggered when the user opens a malformed specific file that is mishandled by Daview.exe. Attackers could exploit this and arbitrary code execution...

CVE-2020-7829

DaviewIndy 8.98.4 and earlier version contain Heap-based overflow vulnerability, triggered when the user opens a malformed specific file that is mishandled by Daview.exe. Attackers could exploit this and arbitrary code execution...

Directory traversal

In radare2 before version 4.5.0, malformed PDB file names in the PDB server path cause shell injection. To trigger the problem it's required to open the executable in radare2 and run idpd to trigger the download. The shell code will execute, and will create a file called pwned in the current...

CVE-2020-15121

In radare2 before version 4.5.0, malformed PDB file names in the PDB server path cause shell injection. To trigger the problem it's required to open the executable in radare2 and run idpd to trigger the download. The shell code will execute, and will create a file called pwned in the current...

CVE-2020-6076

An exploitable out-of-bounds write vulnerability exists in the igcore19d.dll ICO icoread parser of the Accusoft ImageGear 19.5.0 library. A specially crafted ICO file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a malformed file to the victi...

Out-of-bounds

An exploitable out-of-bounds write vulnerability exists in the storedatabuffer function of the igcore19d.dll library of Accusoft ImageGear 19.5.0. A specially crafted PNG file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a malformed file to...

Out-of-bounds

An exploitable out-of-bounds write vulnerability exists in the icoread function of the igcore19d.dll library of Accusoft ImageGear 19.6.0. A specially crafted ICO file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a malformed file to the vict...

CVE-2020-6082

An exploitable out-of-bounds write vulnerability exists in the icoread function of the igcore19d.dll library of Accusoft ImageGear 19.6.0. A specially crafted ICO file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a malformed file to the vict...

Memory Corruption Vulnerability in Display Controls SamDraw

Ltd. was founded in 2007, the R & D center is located in Shenzhen Software Park in Shenzhen High-tech Zone, the production base is located in the Shenzhen-Shantou Cooperation Zone Fashion Brand Industrial Park, is a professional engaged in the development of industry 4.0 core product development,...

Memory Corruption Vulnerability in TP300 Text Screen Software

The TP300 Text Screen Software is a screen setup tool for various... A memory corruption vulnerability exists in TP300 Text Screen Software, which can be exploited by an attacker to cause the program to crash by constructing a malformed evp file...

Memory Corruption Vulnerability in Xinjie Electric Touch Screen Editing Software Twin 2.C.6c

Wuxi Xinjie Electric Co., Ltd XINJE is a well-known domestic enterprise specializing in the research, development and application of industrial automation products. A memory corruption vulnerability exists in Xinjie Electric's touchscreen screen editing software, Twin 2.C.6c, which can be exploit...

Memory Corruption Vulnerability in Xinjie Electric's Touch Screen Screen Editing Software Twin 2.E.2

Wuxi Xinjie Electric Co., Ltd XINJE is a well-known domestic enterprise specializing in the research, development and application of industrial automation products. A memory corruption vulnerability exists in Xinjie Electric's touch screen screen editing software Twin 2.E.2, which can be exploite...

Memory Corruption Vulnerability in Xinjie Electric's Touch Screen Screen Editing Software Twin 2.D.3o

Wuxi Xinjie Electric Co., Ltd XINJE is a well-known domestic enterprise specializing in the research, development and application of industrial automation products. A memory corruption vulnerability exists in Xinjie Electric's touch screen screen editing software Twin 2.D.3o, which can be exploit...

Denial of Service Vulnerability in NAop401 at Nanda Aotuo Technology

NAop401 is an OP series text screen design tool. NAop401 has a denial of service vulnerability that can be exploited by an attacker to cause a program crash by constructing a malformed evp file...

Memory Corruption Vulnerability in AT Uplink at Taian Technology (Wuxi) Co.

Ltd. is a wholly foreign owned enterprise established in China on July 1, 2000 by Antai International Investment Singapore Pte Ltd, a subsidiary of TECO Group, a renowned Taiwanese multinational corporation. A memory corruption vulnerability exists in the AT uplink of Taian Technology Wuxi Co. An...

Memory Corruption Vulnerability in PM Designer by Yonghong (CNVD-2020-23803)

Ltd. was founded in Taiwan in 1992 by a group of engineers engaged in PLC design and development. A memory corruption vulnerability exists in PM Designer, a PM3 file that is a project file for the software. The software has a security vulnerability in the handling of PM3 images, which can be...