4289 matches found
UBUNTU-CVE-2023-29323
asciiloadsockaddr in smtpd in OpenBSD before 7.1 errata 024 and 7.2 before errata 020, and OpenSMTPD Portable before 7.0.0-portable commit f748277, can abort upon a connection from a local, scoped IPv6 address...
PT-2023-22230 · Unknown +2 · Opensmtpd Portable +2
Name of the Vulnerable Software and Affected Versions: OpenBSD versions prior to 7.1 errata 024 OpenBSD versions prior to 7.2 errata 020 OpenSMTPD Portable versions prior to 7.0.0-portable commit f748277 Description: The issue can cause ascii load sockaddr in smtpd to abort upon a connection from...
CVE-2023-29323
asciiloadsockaddr in smtpd in OpenBSD before 7.1 errata 024 and 7.2 before errata 020, and OpenSMTPD Portable before 7.0.0-portable commit f748277, can abort upon a connection from a local, scoped IPv6 address...
CVE-2023-29323
asciiloadsockaddr in smtpd in OpenBSD before 7.1 errata 024 and 7.2 before errata 020, and OpenSMTPD Portable before 7.0.0-portable commit f748277, can abort upon a connection from a local, scoped IPv6 address...
CVE-2022-43615
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Corel CorelDRAW Graphics Suite 23.5.0.506. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific fla...
Security Bulletin: Vulnerabilities in Network Security Services (NSS) and Netscape Portable Runtime (NSPR) affect IBM SAN Volume Controller and Storwize Family (CVE-2013-1740, CVE-2014-1490, CVE-2014-1491, CVE-2014-1492, CVE-2014-1544, CVE-2014-1545)
Summary Security Bulletin: Vulnerabilities in Network Security Services NSS and Netscape Portable Runtime NSPR affect IBM SAN Volume Controller and Storwize Family CVE-2013-1740, CVE-2014-1490, CVE-2014-1491, CVE-2014-1492, CVE-2014-1544, CVE-2014-1545 Vulnerability Details Security Bulletin ---...
PDF-XChange Editor 缓冲区错误漏洞
Tracker Software PDF-XChange Editor is a suite of software for viewing and editing PDF format files from Tracker Software, a Canadian company. A buffer error vulnerability exists in PDF-XChange Editor, which is caused by a buffer overflow problem in the parsing of PDF files...
CVE-2023-24304
Improper input validation in the PDF.dll plugin of IrfanView v4.60 allows attackers to execute arbitrary code via opening a crafted PDF file...
CVE-2023-24308
A potential memory vulnerability due to insufficient input validation in PDFXEditCore.x64.dll in PDF-XChange Editor version 9.3 by Tracker Software may allow attackers to execute code when a user opens a crafted PDF file. The issue occurs when handling a large number of objects in a PDF file...
IrfanView 输入验证错误漏洞
IrfanView is an image viewer by the individual developer Irfan Skiljan in Bosnia and Herzegovina, which supports image browsing, image editing, image format conversion and more. A security vulnerability exists in IrfanView version v4.60, which stems from incorrect input validation. The...
PT-2023-19520 · Irfanview · Irfanview
Name of the Vulnerable Software and Affected Versions: IrfanView version 4.60 Description: The issue is related to improper input validation in the PDF.dll plugin, which allows attackers to execute arbitrary code when a crafted PDF file is opened. Recommendations: For IrfanView version 4.60,...
PT-2023-4206 · Apple · Webkit +3
Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.3 iOS versions prior to 16.4 iPadOS versions prior to 16.4 Description: The issue is related to a type confusion problem in the WebKit PDF module, which can be exploited by a remote attacker to execute arbitrary cod...
The vulnerability of the PDF document viewing program Foxit PDF Reader (formerly Foxit Reader) lies in the use of memory after it is freed, allowing an attacker to execute arbitrary code.
The vulnerability of the PDF document viewing program Foxit PDF Reader formerly Foxit Reader is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created PDF file...
PortexAnalyzerGUI - Graphical Interface For PortEx, A Portable Executable And Malware Analysis Library
Graphical interface for PortEx, a Portable Executable and Malware Analysis Library Download Releases page Features Header information from: MSDOS Header, Rich Header, COFF File Header, Optional Header, Section Table PE Structures: Import Section, Resource Section, Export Section, Debug Section...
Medium: apr-util
Issue Overview: 2023-05-23: The severity level was changed from Critical to Medium. Integer Overflow or Wraparound vulnerability in aprbase64 functions of Apache Portable Runtime Utility APR-util allows an attacker to write beyond bounds of a buffer. This issue affects Apache Portable Runtime...
Critical: apr
Issue Overview: An out-of-bounds array read in the aprtimeexp functions was fixed in the Apache Portable Runtime 1.6.3 release CVE-2017-12613. The fix for this issue was not carried forward to the APR 1.7.x branch, and hence version 1.7.0 regressed compared to 1.6.3 and is vulnerable to the same...
Google Chrome 资源管理错误漏洞
Google Chrome is a web browser from Google USA. A security vulnerability exists in versions prior to Google Chrome 111.0.5563.110, which stems from the presence of post-release reuse in Chrome pdf, allowing remote attackers to potentially exploit heap corruption via a crafted HTML page...
Amazon Linux 2023 : apr-util, apr-util-devel, apr-util-ldap (ALAS2023-2023-066)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-066 advisory. Integer Overflow or Wraparound vulnerability in aprbase64 functions of Apache Portable Runtime Utility APR-util allows an attacker to write beyond bounds of a buffer. This issue affects Apache Portable...
Amazon Linux 2023 : apr, apr-devel (ALAS2023-2023-016)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-016 advisory. An out-of-bounds array read in the aprtimeexp functions was fixed in the Apache Portable Runtime 1.6.3 release CVE-2017-12613. The fix for this issue was not carried forward to the APR 1.7.x...
PDFio 安全漏洞
PDFio is a simple C library for reading and writing PDF files. A security vulnerability exists in PDFio 1.1.0 and earlier versions, which stems from the presence of a denial of service vulnerability. An attacker could exploit this vulnerability to create PDF files to trigger a denial of service...