CVE-2023-44435 Kofax Power PDF File Parsing Use-After-Free Remote Code Execution Vulnerability

Kofax Power PDF File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious...

CVE-2023-44433

Kofax Power PDF is affected by an AcroForm Annotation out-of-bounds read information disclosure vulnerability (CVE-2023-44433). The flaw stems from insufficient validation of user-supplied data in Annotation objects, allowing a read past the end of an allocated buffer. Impact stated: potential in...

CVE-2023-44434

CVE-2023-44434 (Kofax Power PDF) is a PDF parsing vulnerability where improper validation of user-supplied data allows an out-of-bounds read, potentially disclosing sensitive information. Affected product: Kofax Power PDF. The issue resides in the PDF handling code and can be triggered when a use...

CVE-2023-44432 Kofax Power PDF PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Kofax Power PDF PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a...

CVE-2023-44430 Bentley View SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

Bentley View SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the target must visit a malicious pa...

CVE-2023-44428 MuseScore CAP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

MuseScore CAP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MuseScore. User interaction is required to exploit this vulnerability in that the target must visit a...

CVE-2023-44428

CVE-2023-44428 affects MuseScore’s CAP file parser. The issue is a heap-based buffer overflow caused by insufficient validation of the length of user-supplied CAP data before copying it into a heap buffer. This leads to remote code execution in the context of the current process. Exploitation req...

CVE-2023-42131 Ansys SpaceClaim X_B File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Ansys SpaceClaim XB File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim. User interaction is required to exploit this vulnerability in that the target must visit a...

CVE-2023-42131

CVE-2023-42131 targets Ansys SpaceClaim, exploiting an out-of-bounds write in the parsing of X_B files. The flaw arises from insufficient validation of user-supplied data, allowing an attacker to write past the end of an allocated data structure and execute arbitrary code in the target process. E...

CVE-2023-42113

PDF-XChange Editor is affected by an EMF file parsing vulnerability (CVE-2023-42113) that causes an out-of-bounds read, enabling information disclosure. The flaw stems from inadequate validation of user-supplied data when parsing EMF content, which can read past the end of an allocated object. Ex...

CVE-2023-42113 PDF-XChange Editor EMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

PDF-XChange Editor EMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target...

CVE-2023-42111 PDF-XChange Editor JPG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

PDF-XChange Editor JPG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visi...

CVE-2023-42111 PDF-XChange Editor JPG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

PDF-XChange Editor JPG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visi...

CVE-2023-42110 PDF-XChange Editor EMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

PDF-XChange Editor EMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target...

CVE-2023-42110 PDF-XChange Editor EMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

PDF-XChange Editor EMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target...

CVE-2023-42108 PDF-XChange Editor EMF File Parsing Use-After-Free Remote Code Execution Vulnerability

PDF-XChange Editor EMF File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a...

CVE-2023-42105

The connected sources confirm CVE-2023-42105 affects Ashlar-Vellum Cobalt, with a vulnerability in the AR file parser that leads to a type confusion when parsing AR data. Root cause: insufficient validation of user-supplied data, allowing an attacker to trigger a type confusion and execute code i...

CVE-2023-42104

The CVE-2023-42104 entry concerns Ashlar-Vellum Cobalt AR File Parsing Use-After-Free Remote Code Execution. Affected software: Ashlar-Vellum Cobalt. The vulnerability arises in the parsing of AR files where the code fails to validate the existence of an object before performing operations, enabl...

CVE-2023-42103

Ashlar-Vellum Cobalt AR File Parsing Use-After-Free allows remote code execution via AR file parsing. The flaw stems from not validating the existence of an object before performing operations, enabling code execution in the current process. Exploitation requires user interaction (visiting a mali...

CVE-2023-42102 Ashlar-Vellum Cobalt AR File Parsing Type Confusion Remote Code Execution Vulnerability

Ashlar-Vellum Cobalt AR File Parsing Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit...