4286 matches found
CVE-2022-22023
Windows Portable Device Enumerator Service Security Feature Bypass Vulnerability...
Security feature bypass
Windows Portable Device Enumerator Service Security Feature Bypass Vulnerability...
CVE-2022-22023 Windows Portable Device Enumerator Service Security Feature Bypass Vulnerability
...
PT-2022-3722 · Microsoft · Windows Portable Device Enumerator Service +1
Name of the Vulnerable Software and Affected Versions: Windows Portable Device Enumerator Service affected versions not specified Description: The issue is related to a security feature bypass in the Windows Portable Device Enumerator Service, which is caused by inadequate access control. This ca...
Microsoft Windows 安全漏洞
Microsoft Windows is a suite of operating systems used by Microsoft Corporation USA for personal devices. A security vulnerability exists in the Microsoft Windows Portable Device Enumerator Service. The following products and versions are affected:Windows 10 Version 1607 for 32-bit Systems,Window...
KLA12581 Multiple vulnerabilities in Microsoft Products (ESU)
Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to gain privileges, bypass security restrictions, obtain sensitive information, execute arbitrary code, cause denial of service. Below is a complete list of...
OESA-2022-1745 libjpeg-turbo security update
Security Fixes: The PPM reader in libjpeg-turbo through 2.0.90 mishandles use of tjLoadImage for loading a 16-bit binary PPM file into a grayscale buffer and loading a 16-bit binary PGM file into an RGB buffer. This is related to a heap-based buffer overflow in the getwordrgbrow function in...
[SECURITY] Fedora 36 Update: webkit2gtk3-2.36.4-1.fc36
WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. This package contains WebKit2 based WebKitGTK for GTK 3...
DEBIAN-CVE-2021-3695
A crafted 16-bit grayscale PNG image may lead to a out-of-bounds write in the heap area. An attacker may take advantage of that to cause heap data corruption or eventually arbitrary code execution and circumvent secure boot protections. This issue has a high complexity to be exploited as an...
UBUNTU-CVE-2021-3696
A heap out-of-bounds write may heppen during the handling of Huffman tables in the PNG reader. This may lead to data corruption in the heap space. Confidentiality, Integrity and Availablity impact may be considered Low as it's very complex to an attacker control the encoding and positioning of...
The vulnerability of the Authplay.dll library (AuthPlayLib.bundle) in the Flash Player software, as well as in programs for viewing and editing PDF files such as Adobe Reader and Adobe Acrobat, allows a perpetrator to execute arbitrary code or cause service interruptions.
The vulnerability of the Authplay.dll library AuthPlayLib.bundle in the Flash Player software, as well as in programs for viewing and editing PDF files like Adobe Reader and Adobe Acrobat, arises due to the execution of operations outside the buffer in memory when incompatible data types are used...
The vulnerability of Adobe Reader and Adobe Acrobat PDF viewer/editor programs, related to the execution of operations beyond the buffer in memory, allows attackers to execute arbitrary code or cause service interruptions.
The vulnerability of PDF viewing and editing programs like Adobe Reader and Adobe Acrobat lies in the execution of operations beyond the buffer limits in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure by using a specially create...
PDFAlto 缓冲区错误漏洞
PDFAlto is a PDF to XML ALTO file converter from the individual developer Patrice Lopez. A security vulnerability exists in PDFAlto v0.4, which stems from the discovery that PDFAlto v0.4 contains a heap buffer overflow via the component /pdfalto/src/pdfalto.cc...
The vulnerability of Adobe Reader and Adobe Acrobat PDF viewer/editor programs, related to the execution of operations beyond the buffer in memory, allows attackers to execute arbitrary code.
The vulnerability of PDF viewing and editing programs like Adobe Reader and Adobe Acrobat lies in the execution of operations beyond the buffer limits in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created PDF file...
CVE-2022-33009
A stored cross-site scripting XSS vulnerability in LightCMS v1.3.11 allows attackers to execute arbitrary web scripts or HTML via uploading a crafted PDF file...
The vulnerability of Adobe InCopy, a program for creating and editing PDF files, allows a perpetrator to execute arbitrary code.
The vulnerability of Adobe InCopy, a program for creating and editing PDF files, is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code using specially created data in the PDF file...
The vulnerability of Adobe Illustrator, related to insufficient validation of input data, allows a hacker to execute arbitrary code.
The vulnerability of Adobe Illustrator’s graphic editor is related to insufficient verification of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code in the target system using a specially crafted PDF file...
The vulnerability of the Adobe Illustrator graphic editor lies in the ability to write beyond the buffer in memory, allowing an attacker to execute arbitrary code.
The vulnerability of Adobe Illustrator’s graphic editor is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code on the target system using a specially crafted PDF file...
The vulnerability of the Adobe Illustrator graphic editor lies in the ability to write beyond the buffer in memory, allowing an attacker to execute arbitrary code.
The vulnerability of Adobe Illustrator’s graphic editor is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code on the target system using a specially crafted PDF file...
The vulnerability of the library for viewing, printing, rendering, creating, and processing PDF files. The PDFTron SDK software from Autodesk allows a perpetrator to execute arbitrary code.
The vulnerability of the PDFTron SDK software’s library for viewing, printing, rendering, creating, and processing PDF files is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code in the context of the current...