CVE-2020-13545

An exploitable signed conversion vulnerability exists in the TextMaker document parsing functionality of SoftMaker Office 2021’s TextMaker application. A specially crafted document can cause the document parser to miscalculate a length used to allocate a buffer, later upon usage of this buffer th...

CVE-2020-13545

CVE-2020-13545 affects SoftMaker Office TextMaker 2021. The TALOS analysis details a signed/unsigned conversion issue in TextMaker’s document parsing that can cause heap-based memory corruption when loading a crafted TextMaker Document (.tmd). The root cause involves miscalculation of a length us...

CVE-2020-13545

An exploitable signed conversion vulnerability exists in the TextMaker document parsing functionality of SoftMaker Office 2021’s TextMaker application. A specially crafted document can cause the document parser to miscalculate a length used to allocate a buffer, later upon usage of this buffer th...

CVE-2020-13544

An exploitable sign extension vulnerability exists in the TextMaker document parsing functionality of SoftMaker Office 2021’s TextMaker application. A specially crafted document can cause the document parser to sign-extend a length used to terminate a loop, which can later result in the loop’s...

CVE-2020-13544

CVE-2020-13544 targets SoftMaker Office 2021 TextMaker: a sign-extension vulnerability in the TextMaker document parser can cause a loop index to be used as a heap-offset, enabling heap corruption from crafted .tmd documents. The TALOS report outlines detailed disassembly showing an unsigned 16-b...

Vulnerability Spotlight: Multiple vulnerabilities in SoftMaker Office TextMaker

A Cisco Talos team member discovered these vulnerabilities. Blog by Jon Munshaw. Cisco Talos recently discovered multiple vulnerabilities in SoftMaker's TextMaker software. A user could trigger these vulnerabilities by opening an attacker-created, malicious document. An adversary could use these...

Softmaker Office 安全漏洞

Softmaker Office is a multi-platform office software from Softmaker Germany. A symbol expansion vulnerability exists in SoftMaker Office 2021, which originates when the index of the TextMaker document parsing function loop of the TextMaker application is written outside the boundaries of the heap...

SoftMaker Office TextMaker Document Record 0x001f sign-extension vulnerability

Summary An exploitable sign extension vulnerability exists in the TextMaker document parsing functionality of SoftMaker Office 2021’s TextMaker application. A specially crafted document can cause the document parser to sign-extend a length used to terminate a loop, which can later result in the...

SoftMaker Office TextMaker Document Record 0x003f integer conversion vulnerability

Summary An exploitable signed conversion vulnerability exists in the TextMaker document parsing functionality of SoftMaker Office 2021’s TextMaker application. A specially crafted document can cause the document parser to miscalculate a length used to allocate a buffer, later upon usage of this...

SoftMaker Office TextMaker Document Record 0x002a integer overflow vulnerability

Summary An exploitable integer overflow vulnerability exists in the TextMaker document parsing functionality of SoftMaker Office 2021’s TextMaker application. A specially crafted document can cause the document parser to miscalculate a length used to allocate a buffer, later upon usage of this...

Softmaker Office Buffer Error Vulnerability

Softmaker Office is a multi-platform supported office software from the German company Softmaker. The software is used for word processing, spreadsheets, presentation design, and can also be scripted, and supports a wide range of common Office file formats, as well as a variety of internal format...

Softmaker Office Buffer Error Vulnerability

Softmaker Office is a multi-platform supported office software from the German company Softmaker. The software is used for word processing, spreadsheets, presentation design, and can also be scripted, and supports a variety of common Office file formats, as well as a variety of internal formats...

SoftMaker Office 201x Privilege Escalation

Hi @ll, the service pack installers for SoftMaker Office 201x, available from , are surprise.- vulnerable. The executable installer OUCH ofw16763.exe, a 7z SFX OUCH, creates an UNPROTECTED directory "%TEMP%\7zSxxxxxxxx" to extract its payload, then executes "%TEMP%\7zSxxxxxxxx\spsetup.exe"...

SoftMaker Office 201x Privilege Escalation Vulnerability

SoftMaker Office 201x suffers from a local privilege escalation vulnerability due to an unprotected directory. Hi @ll, the service pack installers for SoftMaker Office 201x, available from , are surprise.- vulnerable. The executable installer OUCH ofw16763.exe, a 7z SFX OUCH, creates an UNPROTECT...

Softmaker Office 2012 - TextMaker Memory Corruption Vulnerability

No description provided by source. / Title : Softmaker Office 2012 TextMaker Memory Corruption Vulnerability 0day Version : 2012.12.20.654 Author : Arash Allebrahim Contact : [email protected] Date : 2013-10-30 Vendor : http://www.softmaker.com/english/ofen.htm tested : Win XP SP3 ENG &...

SoftMaker Office 2012 - TextMaker Memory Corruption

SoftMaker Office 2012 - TextMaker Memory Corruption / Title : Softmaker Office 2012 TextMaker Memory Corruption Vulnerability 0day Version : 2012.12.20.654 Author : Arash Allebrahim Contact : [email protected] Date : 2013-10-30 Vendor : http://www.softmaker.com/english/ofen.htm tested :...

SoftMaker Office 2012 - TextMaker Memory Corruption

/ Title : Softmaker Office 2012 TextMaker Memory Corruption Vulnerability 0day Version : 2012.12.20.654 Author : Arash Allebrahim Contact : [email protected] Date : 2013-10-30 Vendor : http://www.softmaker.com/english/ofen.htm tested : Win XP SP3 ENG & Win 7 sp 1 x64 Ultimate Descriptio...

Cross site scripting

Cross-site scripting XSS vulnerability in resultat.asp in SoftMaker Shop allows remote attackers to inject arbitrary web script or HTML via a strSok parameter containing a javascript: URI in an IMG SRC attribute...

CVE-2006-0532

Cross-site scripting XSS vulnerability in resultat.asp in SoftMaker Shop allows remote attackers to inject arbitrary web script or HTML via a strSok parameter containing a javascript: URI in an IMG SRC attribute...

CVE-2006-0532

Cross-site scripting XSS vulnerability in resultat.asp in SoftMaker Shop allows remote attackers to inject arbitrary web script or HTML via a strSok parameter containing a javascript: URI in an IMG SRC attribute...