CVE-2019-11493

VeryPDF 4.1 has a Memory Overflow leading to Code Execution because pdfocx!CxImageTIF::operator in pdfocx.ocx used by pdfeditor.exe and pdfcmd.exe is mishandled...

CVE-2019-11493

VeryPDF 4.1 has a Memory Overflow leading to Code Execution because pdfocx!CxImageTIF::operator in pdfocx.ocx used by pdfeditor.exe and pdfcmd.exe is mishandled...

Design/Logic Flaw

VeryPDF 4.1 has a Memory Overflow leading to Code Execution because pdfocx!CxImageTIF::operator in pdfocx.ocx used by pdfeditor.exe and pdfcmd.exe is mishandled...

CVE-2019-11493

VeryPDF 4.1 is affected by a memory overflow in pdfocx.ocx (CxImageTIF::operator) used by pdfeditor.exe and pdfcmd.exe, enabling code execution. Root cause: mishandling in pdfocx.ocx leading to overflow. Affected software/parts are confirmed by NVD entry CVE-2019-11493 and related records; exploi...

CVE-2019-11493

VeryPDF 4.1 has a Memory Overflow leading to Code Execution because pdfocx!CxImageTIF::operator in pdfocx.ocx used by pdfeditor.exe and pdfcmd.exe is mishandled...

CVE-2019-11493: Improper Restriction of Operations within the Bounds of a Memory Buffer

VeryPDF 4.1 has a Memory Overflow leading to Code Execution because pdfocx!CxImageTIF::operator in pdfocx.ocx used by pdfeditor.exe and pdfcmd.exe is mishandled...

CVE-2019-9136

DaviewIndy 8.98.7 and earlier versions have a Heap-based overflow vulnerability, triggered when the user opens a malformed JPEG2000 format file that is mishandled by Daview.exe. Attackers could exploit this and arbitrary code execution...

The vulnerability of Samba software, related to overflow of dynamic memory buffers, allows a hacker to execute arbitrary code.

The vulnerability of Samba software is related to the overflow of dynamic memory buffers when the file name in the directory is too long. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Libmspack library and the CAB-file decompression utility SabExtract, which allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the Libmspack library mspack/cab.h and the CAB-file decompression utilities provided by SabExtract are related to memory buffer overflow attacks. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause system failures remotely...

PT-2023-1054

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free flaw was found in the Linux kernel’s nouveau driver, related to how a user triggers a memory overflow that causes the nvkm vma tail function to fail. This issue allows a...

The vulnerability of the _bfd_generic_read_minisymbols function in the GNU Binutils set of system utilities, related to memory overflow, allows an attacker to trigger a service failure.

The vulnerability of the bfdgenericreadminisymbols function in the descriptor library BFD, which is included in the GNU Binutils package, is related to a memory leak. Exploiting this vulnerability could allow an attacker to cause a service failure using a specially crafted ELF file...

Marvell Avastar wireless SoCs have multiple vulnerabilities

Overview Some Marvell Avastar wireless system on chip SoC models have multiple vulnerabilities, including a block pool overflow during Wi-Fi network scan. Description A presentation at the ZeroNights 2018 conference describes multiple security issues with Marvell Avastar SoCs models 88W8787,...

The vulnerability of the Win32k component in Windows operating systems allows attackers to enhance their privileges and execute arbitrary code.

The vulnerability of the Win32k.sys component in Windows operating systems arises due to an overflow in memory buffers. Exploiting this vulnerability allows an attacker to execute arbitrary code through a specially created application...

CVE-2019-6983

The CVE-2019-6983 issue affects Foxit 3D Plugin Beta in Foxit Reader/PhantomPDF prior to 9.4.0.16807. The vulnerability is an Integer Overflow in the 3D content handling path that can cause a crash via freeing memory in certain crafted PDF files containing 3D content. No exploit details are provi...

The vulnerability of Siemens Sinumerik CNC microprogramming software, related to overflow in dynamic memory, allows a intruder to execute arbitrary code.

The vulnerability of Siemens Sinumerik CNC microprogramming software is related to overflow in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code with privileged privileges by sending specially crafted packets via port 4842/TCP...

Tron Foundation: DOS attack by consuming all CPU and using all available memory

Summary: A single request to submit a post to /wallet/deploycontract with several megabytes of bytecode along with CPU intensive long parsing will consume CPU for about 10 minutes while still holding several megabytes of bytecode in heap. With enough requests lets say 1K-10K depending upon...

VBScript - VbsErase Reference Leak Use-After-Free

VBScript - VbsErase Reference Leak Use-After-Free There is an reference leak in Microsoft VBScript that can be turned into an use-after-free given sufficient time. The vulnerability has been confirmed in Internet Explorer on various Windows versions with the latest patches applied. Details:...

The vulnerability of the `pack` function in the Perl interpreter allows attackers to cause service failures, gain access to confidential data, or compromise its integrity.

The vulnerability of the pack function in the Perl interpreter is related to an error that causes overflow in the dynamic memory when writing data to it during operations involving a large number of elements within the pack function. Exploiting this vulnerability allows a remote attacker to execu...

Mozilla Firefox and Firefox ESR integer overflow vulnerability (CNVD-2018-25865)

Mozilla Firefox and Firefox ESR are both browser products developed by the Mozilla Foundation in the U.S. Firefox is an open source web browser; Firefox ESR is an extended support version of Firefox. A security vulnerability exists in Mozilla Firefox version 63 and Firefox ESR version 60.3. An...

The vulnerability of Qualcomm Biometrics’ component in the Android operating system allows a perpetrator to execute arbitrary code.

The vulnerability of Qualcomm Biometrics’ component in the Android operating system is caused by an overflow in the memory buffer. Exploiting this vulnerability could allow a perpetrator to execute arbitrary code...