Buffer overflow

A buffer overflow vulnerability in FORMATS!ReadUtahRLE+0x340 of Irfanview 4.57 allows attackers to execute arbitrary code via a crafted RLE file...

CVE-2021-29366

A buffer overflow vulnerability in FORMATS!GetPlugInInfo+0x2de9 of Irfanview 4.57 allows attackers to execute arbitrary code via a crafted RLE file...

CVE-2021-29364

A buffer overflow vulnerability in Formats!ReadRASW+0x1001 of Irfanview 4.57 allows attackers to execute arbitrary code via a crafted RLE file...

CVE-2021-29364

The CVE-2021-29364 entry concerns IrfanView 4.57, with a vulnerability in Formats!ReadRAS_W+0x1001 that allows a crafted RLE file to cause a buffer overflow and execute arbitrary code. Affected component/function: Formats!ReadRAS_W+0x1001 in IrfanView 4.57. Root cause is a buffer overflow when pr...

CVE-2021-29363

IrfanView 4.57 is affected by a buffer overflow in FORMATS!ReadRAS_W+0xa74 triggered by crafted RLE files, enabling arbitrary code execution. Exploitation status and specific remediation are not provided in the connected documents.

CVE-2021-29363

A buffer overflow vulnerability in FORMATS!ReadRASW+0xa74 of Irfanview 4.57 allows attackers to execute arbitrary code via a crafted RLE file.0xa74...

CVE-2021-29362

A buffer overflow vulnerability in FORMATS!ReadRASW+0xa30 of Irfanview 4.57 allows attackers to execute arbitrary code via a crafted RLE file...

CVE-2021-29362

CVE-2021-29362 affects IrfanView 4.57 with a buffer overflow in FORMATS!ReadRAS_W+0xa30, exploitable via a crafted RLE file to execute arbitrary code. The connected records consistently describe IrfanView’s buffer overflow vulnerability but do not supply additional technical details (no patch/ver...

CVE-2021-29361

CVE-2021-29361 affects IrfanView 4.57: a buffer overflow in the formats module (FORMATS!Read_Utah_RLE+0x340) can lead to arbitrary code execution via crafted RLE files. Affected component: Read_Utah_RLE; root cause described as unsafe memory handling causing overflow. Documented by multiple sourc...

CVE-2021-29361

A buffer overflow vulnerability in FORMATS!ReadUtahRLE+0x340 of Irfanview 4.57 allows attackers to execute arbitrary code via a crafted RLE file...

CVE-2021-29360

A buffer overflow vulnerability in FORMATS!ReadUtahRLE+0x37a of Irfanview 4.57 allows attackers to execute arbitrary code via a crafted RLE file...

CVE-2021-29360

CVE-2021-29360 affects IrfanView 4.57. A buffer overflow in FORMAT S!Read_Utah_RLE+0x37a (component handling RLE files) can allow arbitrary code execution when processing a crafted RLE file. The CVE details consistently describe the vulnerability as a buffer overflow in IrfanView’s RLE handling, ...

IrfanView 缓冲区错误漏洞

IrfanView is an image viewer that supports image browsing, image editing, image format conversion, etc. Irfanview is vulnerable to a buffer overflow vulnerability that can be exploited by attackers to execute arbitrary code via a crafted RLE file...

CVE-2021-21453

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated RLE file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

Input validation

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated RLE file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

CVE-2021-21453

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated RLE file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

CVE-2021-21454

SAP 3D Visual Enterprise Viewer 9 is affected by a vulnerability in RLE file parsing. The issue stems from improper input validation that allows a crafted RLE file to trigger an out-of-bounds write, enabling remote code execution or a crash. Several sources (including ZDI-21-008) describe that ex...

CVE-2021-21454

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated RLE file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

SAP 3D Visual Enterprise Viewer RLE File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

CVE-2020-6361

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated RLE files received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...