1644 matches found
CVE-2023-42523
Certain WithSecure products allow a remote crash of a scanning engine via unpacking of a PE file. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 and later, WithSecure Client Security fo...
CVE-2023-42522
Certain WithSecure products allow a remote crash of a scanning engine via processing of an import struct in a PE file. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 and later, WithSecu...
CVE-2023-42522
The CVE-2023-42522 issue affects WithSecure products and is triggered by processing an import structure in a PE file, causing a remote crash of the scanning engine. Affected software includes WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, Wi...
CVE-2023-42523
Certain WithSecure products allow a remote crash of a scanning engine via unpacking of a PE file. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 and later, WithSecure Client Security fo...
CVE-2023-42523
Summary: CVE-2023-42523 affects WithSecure products and causes a remote crash of the scanning engine when unpacking a PE file. Affected products/versions (from documents): WithSecure Client Security 15; WithSecure Server Security 15; WithSecure Email and Server Security 15; WithSecure Elements En...
PT-2023-28388
Name of the Vulnerable Software and Affected Versions WithSecure Client Security version 15 WithSecure Server Security version 15 WithSecure Email and Server Security version 15 WithSecure Elements Endpoint Protection versions 17 and later WithSecure Client Security for Mac version 15 WithSecure...
CVE-2023-42522: Uncontrolled Resource Consumption
Certain WithSecure products allow a remote crash of a scanning engine via processing of an import struct in a PE file. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 and later, WithSecu...
CVE-2023-42522
Certain WithSecure products allow a remote crash of a scanning engine via processing of an import struct in a PE file. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 and later, WithSecu...
CVE-2023-40012
uthenticode is a small cross-platform library for partially verifying Authenticode digital signatures. Versions of uthenticode prior to the 2.x series did not check Extended Key Usages in certificates, in violation of the Authenticode X.509 certificate profile. As a result, a malicious user could...
CVE-2023-40012 uthenticode EKU validation bypass
uthenticode is a small cross-platform library for partially verifying Authenticode digital signatures. Versions of uthenticode prior to the 2.x series did not check Extended Key Usages in certificates, in violation of the Authenticode X.509 certificate profile. As a result, a malicious user could...
CVE-2023-40012
uthenticode is a small cross-platform library for partially verifying Authenticode digital signatures. Versions of uthenticode prior to the 2.x series did not check Extended Key Usages in certificates, in violation of the Authenticode X.509 certificate profile. As a result, a malicious user could...
PT-2023-27207 · Unknown · Uthenticode
Name of the Vulnerable Software and Affected Versions: uthenticode versions prior to 2.x Description: The issue concerns uthenticode, a library for partially verifying Authenticode digital signatures. It does not check Extended Key Usages in certificates, which is against the Authenticode X.509...
CVE-2023-40012: Missing Cryptographic Step
uthenticode is a small cross-platform library for partially verifying Authenticode digital signatures. Versions of uthenticode prior to the 2.x series did not check Extended Key Usages in certificates, in violation of the Authenticode X.509 certificate profile. As a result, a malicious user could...
KLA51715 PE vulnerability in Microsoft System Center
An elevation of privilege vulnerability was found in Microsoft System Center. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2023-38175 Exploitation Public exploits exist for this vulnerability. Related products Microsoft-Windows Windows-Defender CVE li...
CVE-2023-39129
GNU gdb GDB 13.0.50.20220805-git was discovered to contain a heap use after free via the function addpeexportedsym at /gdb/coff-pe-read.c...
GNU gdb Heap Buffer Overflow Vulnerability
GNU gdb is a program debugging tool developed by the GNU open source organization that supports C, C++, Go, Fortran and many other programming languages. GNU gdb suffers from a heap buffer overflow vulnerability that originates from the failure of the function peas16 in /gdb/coff-pe-read.c to...
SUSE CVE-2023-39130
GNU gdb GDB 13.0.50.20220805-git was discovered to contain a heap buffer overflow via the function peas16 at /gdb/coff-pe-read.c...
AZL-34725 CVE-2023-39130 affecting package gdb for versions less than 13.2-3
GNU gdb GDB 13.0.50.20220805-git was discovered to contain a heap buffer overflow via the function peas16 at /gdb/coff-pe-read.c...