CVE-2022-36142

Removed by vendor...

Vulnerabilities fixed in ArcGis products

Esri has fixed vulnerabilities in ArcGis Portal and ArcReader. A malicious party could exploit the vulnerabilities to obtain system information, access sensitive data without prior authorization, or to perform a cross-site scripting XSS attack. Such attacks can lead to the execution of JavaScript...

XPDF 安全漏洞

XPDF is an open source PDF reader from FOO Labs. The product supports decoding files in LZW compressed format and reading encrypted PDF files. XPDF has a security vulnerability that originates from DCTStream::decodeImage in /xpdf/Stream.cc contains a floating point exception FPE...

XPDF 缓冲区错误漏洞

XPDF is an open source PDF reader from FOO Labs. The product supports decoding files in LZW compressed format and reading encrypted PDF files. XPDF suffers from a buffer error vulnerability that stems from asanmemcpy containing a stack overflow in asaninterceptorsmemintrinsics.cpp...

XPDF 代码问题漏洞

XPDF is an open source PDF reader from FOO Labs. The product supports decoding files in LZW compressed format and reading encrypted PDF files. XPDF has a code issue vulnerability that stems from Lexer::getObjObject in /xpdf/Lexer.cc contains a segmentation violation...

XPDF 缓冲区错误漏洞

XPDF is an open source PDF reader from FOO Labs. The product supports decoding files in LZW compressed format and reading encrypted PDF files. XPDF has a buffer error vulnerability that originates from DCTStream::readHuffSymDCTHuffTable in /xpdf/Stream.cc contains a heap buffer overflow...

XPDF 代码问题漏洞

XPDF is an open source PDF reader from FOO Labs. The product supports decoding files in LZW compressed format and reading encrypted PDF files. XPDF commit id ffaf11c has a security vulnerability that stems from a segmentation violation contained in DCTStream::getChar in /xpdf/Stream.cc...

XPDF 缓冲区错误漏洞

XPDF is an open source PDF reader from FOO Labs. The product supports decoding files in LZW compressed format and reading encrypted PDF files. XPDF commit id ffaf11c has a security vulnerability that originates from DCTStream::lookChar in /xpdf/Stream.cc contains a heap buffer overflow...

SWFMill 代码问题漏洞

SWFMill is a tool for working with Adobe Flash SWF files by Daniel Cassidy, a personal developer in the UK. A code issue vulnerability exists in SWFMill commit number: 53d7690 that stems from a memory segment exception in its SWF::Reader::getWord function...

fdkaac 安全漏洞

fdkaac is a command-line front-end for the libfdk-aac encoder by the Japanese individual developer nu774. A security vulnerability exists in fdkaac commit number: 53fe239, which stems from a floating point exception in its wavopen at /src/wavreader.c component...

Exploit for CVE-2022-36163

CVE-2022-36163 Suggested description A format string vul...

golang: compress/gzip: stack exhaustion in Reader.Read

A flaw was found in golang. Calling the Reader, Read method on an archive that contains a large number of concatenated 0-length compressed files can cause a panic issue due to stack exhaustion...

golang: compress/gzip: stack exhaustion in Reader.Read

A flaw was found in golang. Calling the Reader, Read method on an archive that contains a large number of concatenated 0-length compressed files can cause a panic issue due to stack exhaustion...

golang: compress/gzip: stack exhaustion in Reader.Read

A flaw was found in golang. Calling the Reader, Read method on an archive that contains a large number of concatenated 0-length compressed files can cause a panic issue due to stack exhaustion...

golang: compress/gzip: stack exhaustion in Reader.Read

A flaw was found in golang. Calling the Reader, Read method on an archive that contains a large number of concatenated 0-length compressed files can cause a panic issue due to stack exhaustion...

Adobe Acrobat Reader Resource Management Error Vulnerability (CNVD-2022-56977)

Adobe Acrobat Reader is a PDF viewer from Adobe, a U.S. company. The software is used to print, sign, and annotate PDFs. Adobe Acrobat Reader is vulnerable to a resource management error that stems from post-release reuse, resulting in a memory leak. No details of the vulnerability are currently...

OESA-2022-1831 game-music-emu security update

GameMusicEmu is a collection of video game music file simulators that supports the following formats and systems: Security Fixes: The MemFileReader::readavail function in DataReader.cpp in the GameMusicEmu library aka game-music-emu 0.6.1 does not ensure a non-negative size, which allows remote...

Adobe Acrobat Reader Input Validation Error Vulnerability (CNVD-2022-58462)

Adobe Acrobat Reader is a PDF viewer from Adobe. The software is used to print, sign, and annotate PDFs. Adobe Acrobat Reader is vulnerable to an input validation error, which stems from improper input validation. An attacker could exploit this vulnerability to execute arbitrary code...

Adobe Acrobat Reader Buffer Overflow Vulnerability (CNVD-2022-58463)

Adobe Acrobat Reader is a PDF viewer from Adobe, Inc. The software is used to print, sign, and annotate PDFs. Adobe Acrobat Reader is vulnerable to a buffer overflow vulnerability that stems from a lack of proper validation of user-supplied data, which could result in reading beyond the end of th...

Adobe Acrobat Reader Input Validation Error Vulnerability

Adobe Acrobat Reader is a PDF viewer from the American company Audobee Adobe. The software is used to print, sign and annotate PDF. An input validation error vulnerability exists in Adobe Acrobat Reader that stems from improper input validation and can be exploited by an attacker to cause a memor...