82 matches found
Heap overflow
This vulnerability allows remote attackers to execute arbitrary code on affected installations of NIKON NIS-Elements Viewer 1.2100.1483.0. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...
CVE-2022-40663
This vulnerability allows remote attackers to execute arbitrary code on affected installations of NIKON NIS-Elements Viewer 1.2100.1483.0. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...
CVE-2022-40663
This vulnerability allows remote attackers to execute arbitrary code on affected installations of NIKON NIS-Elements Viewer 1.2100.1483.0. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...
CVE-2022-40663
CVE-2022-40663 affects Nikon NIS-Elements Viewer 1.2100.1483.0. The vulnerability is an out-of-bounds read in the TIF image parser that can lead to remote code execution when a user opens a crafted TIF image or visits a malicious page. The flaw is triggered by data causing a read past the end of ...
CVE-2022-40662
This vulnerability allows remote attackers to execute arbitrary code on affected installations of NIKON NIS-Elements Viewer 1.2100.1483.0. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...
CVE-2022-40662
CVE-2022-40662 affects Nikon NIS-Elements Viewer 1.2100.1483.0. The vulnerability is a TIF image parsing out-of-bounds read that can allow remote code execution in the context of the current process. Exploitation requires user interaction (the target must visit a malicious page or open a maliciou...
CVE-2022-40661
This vulnerability allows remote attackers to execute arbitrary code on affected installations of NIKON NIS-Elements Viewer 1.2100.1483.0. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...
CVE-2022-40661
Vulnerability summary (CVE-2022-40661) : Nikon NIS-Elements Viewer 1.2100.1483.0 contains a BMP image parsing flaw that fails to validate the length of user-supplied data before copying to a heap-based buffer, enabling heap-based buffer overflow. This can allow remote code execution in the contex...
CVE-2022-40660
CVE-2022-40660 affects Nikon NIS-Elements Viewer 1.2100.1483.0. The vulnerability arises in the PSD image parsing code, where lack of validation of the length of user-supplied data enables a heap-based buffer overflow. An attacker who can entice a user to visit a malicious page or open a maliciou...
CVE-2022-40660
This vulnerability allows remote attackers to execute arbitrary code on affected installations of NIKON NIS-Elements Viewer 1.2100.1483.0. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...
CVE-2022-40659
This vulnerability allows remote attackers to execute arbitrary code on affected installations of NIKON NIS-Elements Viewer 1.2100.1483.0. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...
CVE-2022-40659
CVE-2022-40659 affects Nikon NIS-Elements Viewer 1.2100.1483.0. The flaw is in the parsing of TIF images, where crafted data can trigger a write past the end of an allocated buffer, enabling remote code execution in the context of the current process. User interaction is required (target must vis...
CVE-2022-40658
CVE-2022-40658 affects Nikon NIS-Elements Viewer 1.2100.1483.0. The flaw is in the parsing of TIF images, where crafted data can trigger a write past the end of an allocated buffer, allowing an attacker to execute code in the context of the current process. User interaction is required (target mu...
CVE-2022-40658
This vulnerability allows remote attackers to execute arbitrary code on affected installations of NIKON NIS-Elements Viewer 1.2100.1483.0. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...
CVE-2022-40657
CVE-2022-40657 affects Nikon NIS-Elements Viewer 1.2100.1483.0. The flaw is in PSD file parsing, where crafted PSD data can trigger a write past the end of an allocated buffer, enabling remote code execution in the context of the current process. Exploitation requires user interaction (visiting a...
CVE-2022-40657
This vulnerability allows remote attackers to execute arbitrary code on affected installations of NIKON NIS-Elements Viewer 1.2100.1483.0. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...
CVE-2022-40655
This vulnerability allows remote attackers to execute arbitrary code on affected installations of NIKON NIS-Elements Viewer 1.2100.1483.0. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...
CVE-2022-40655
This vulnerability allows remote attackers to execute arbitrary code on affected installations of NIKON NIS-Elements Viewer 1.2100.1483.0. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...
CVE-2022-40655
CVE-2022-40655 affects Nikon NIS-Elements Viewer (version 1.2100.1483.0). The flaw is in ND2 file parsing, caused by insufficient validation of the length of user-supplied data before copying to a heap-based buffer, enabling remote code execution with the attacker’s code running in the user’s pro...
CVE-2022-40656
CVE-2022-40656 affects Nikon NIS-Elements Viewer 13.2.0.21165. The root cause is an out-of-bounds read in the ND2 file parsing, which can be triggered by crafted ND2 data and may allow code execution in the attacker’s context after user interaction (visiting a malicious page or opening a maliciou...