Lucene search
+L

2013 matches found

OSV
OSV
added 2024/11/22 7:15 p.m.13 views

CVE-2024-52998

Substance3D - Stager versions 3.0.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a...

5.5CVSS5.6AI score0.00278EPSS
SaveExploits0References1
NVD
NVD
added 2024/11/22 7:15 p.m.16 views

CVE-2024-52998

Substance3D - Stager versions 3.0.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a...

5.5CVSS0.00278EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/11/22 7:11 p.m.44 views

CVE-2024-52998 Substance3D - Stager | Out-of-bounds Read (CWE-125)

Substance3D - Stager versions 3.0.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a...

5.5CVSS0.00278EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/11/22 7:11 p.m.14 views

CVE-2024-52998 Substance3D - Stager | Out-of-bounds Read (CWE-125)

Substance3D - Stager versions 3.0.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a...

5.5CVSS6.1AI score0.00278EPSS
SaveExploits0References1
CVE
CVE
added 2024/11/22 7:11 p.m.77 views

CVE-2024-52998

The CVE-2024-52998 entry applies to Substance3D Stager, with affected versions 3.0.2 and earlier. The root cause is an out-of-bounds read vulnerability that can disclose sensitive memory and could bypass mitigations such as ASLR. Exploitation requires user interaction, specifically the victim ope...

5.5CVSS5.1AI score0.00278EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2024/11/22 12:00 a.m.16 views

Adobe Substance 3D Stager 缓冲区错误漏洞

Adobe Substance 3D Stager is a virtual 3D studio from the American company Audobee Adobe. Adobe Substance 3D Stager suffers from a buffer overflow vulnerability that stems from susceptibility to an out-of-bounds read vulnerability that could lead to sensitive memory disclosure. An attacker can...

5.5CVSS7.4AI score0.00278EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2024/10/23 12:00 a.m.18 views

The vulnerability of the Substance 3D Stager software lies in its ability to store arbitrary values anywhere and to overflow the buffer, allowing an attacker to execute arbitrary code.

The vulnerability of the Substance 3D Stager software-related 3D design software lies in the ability to write any arbitrary value anywhere in the memory, thereby overflowing the buffer. Exploiting this vulnerability allows an attacker to execute arbitrary code in the context of the current user,...

7.8CVSS6AI score0.00309EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/10/23 12:00 a.m.9 views

The vulnerability of the Substance 3D Stager software lies in its susceptibility to overflowing buffer spaces, allowing attackers to execute arbitrary code.

The vulnerability of the Substance 3D Stager software lies in the overflow of the buffer based on a queue. Exploiting this vulnerability allows an attacker to execute arbitrary code in the context of the current user, using a specially created file...

7.8CVSS6.3AI score0.0034EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/10/23 12:00 a.m.9 views

The vulnerability of the Substance 3D Stager software lies in its software, which is exposed due to a buffer overflow in the dynamic memory. This allows an attacker to execute arbitrary code.

The vulnerability of the Substance 3D Stager software lies in the overflow of memory buffer in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code in the context of the current user, using a specially created file...

7.8CVSS6.2AI score0.00281EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/10/23 12:00 a.m.13 views

The vulnerability of the Substance 3D Stager software lies in its software, which is exposed due to a buffer overflow in the dynamic memory. This allows an attacker to execute arbitrary code.

The vulnerability of the Substance 3D Stager software lies in the overflow of memory buffer in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code in the context of the current user, using a specially created file...

7.8CVSS6.2AI score0.00281EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/10/23 12:00 a.m.11 views

The vulnerability of the Substance 3D Stager software lies in its software, which is exposed due to a buffer overflow in the dynamic memory. This allows an attacker to execute arbitrary code.

The vulnerability of the Substance 3D Stager software lies in the overflow of memory buffer in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code in the context of the current user, using a specially created file...

7.8CVSS6.2AI score0.00281EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/10/23 12:00 a.m.12 views

The vulnerability of the Substance 3D Stager software lies in its software, which is exposed due to a buffer overflow in the dynamic memory. This allows an attacker to execute arbitrary code.

The vulnerability of the Substance 3D Stager software lies in the overflow of memory buffer in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code in the context of the current user, using a specially created file...

7.8CVSS6.2AI score0.00281EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/10/16 12:00 a.m.13 views

The vulnerability of the Substance 3D Stager software lies in its reliance on memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of the Substance 3D Stager software relates to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to execute arbitrary code on the device while analyzing SKP files...

7.8CVSS7.7AI score0.00352EPSS
SaveExploits0References4Affected Software1
CNVD
CNVD
added 2024/10/11 12:00 a.m.20 views

Adobe Substance 3D Stager Code Execution Vulnerability (CNVD-2024-40923)

Adobe Substance 3D Stager is a virtual 3D studio from the American company Audobee Adobe. A security vulnerability exists in Adobe Substance 3D Stager that originates from a heap-based buffer overflow. An attacker could exploit the vulnerability to execute arbitrary code in the current user's...

7.8CVSS7.6AI score0.0034EPSS
SaveExploits0References1
CNVD
CNVD
added 2024/10/11 12:00 a.m.24 views

Adobe Substance 3D Stager Buffer Overflow Vulnerability (CNVD-2024-40922)

Adobe Substance 3D Stager is a virtual 3D studio from the American company Audobee Adobe. Adobe Substance 3D Stager suffers from a buffer overflow vulnerability that originates from allowing out-of-bounds writes to memory. An attacker could exploit the vulnerability to execute arbitrary code in t...

7.8CVSS7.9AI score0.00281EPSS
SaveExploits0References1
CNVD
CNVD
added 2024/10/11 12:00 a.m.42 views

Adobe Substance 3D Stager Code Execution Vulnerability (CNVD-2024-40924)

Adobe Substance 3D Stager is a virtual 3D studio from the American company Audobee Adobe. A security vulnerability exists in Adobe Substance 3D Stager. An attacker could exploit the vulnerability to execute arbitrary code in the current user's environment...

7.8CVSS7.5AI score0.00309EPSS
SaveExploits0References1
NVD
NVD
added 2024/10/09 2:15 p.m.26 views

CVE-2024-45152

Substance3D - Stager versions 3.0.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS0.00281EPSS
SaveExploits0References1
OSV
OSV
added 2024/10/09 2:15 p.m.13 views

CVE-2024-45152

Substance3D - Stager versions 3.0.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS6.4AI score0.00281EPSS
SaveExploits0References1
OSV
OSV
added 2024/10/09 2:15 p.m.9 views

CVE-2024-45144

Substance3D - Stager versions 3.0.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS6.4AI score0.00281EPSS
SaveExploits0References1
NVD
NVD
added 2024/10/09 2:15 p.m.27 views

CVE-2024-45142

Substance3D - Stager versions 3.0.3 and earlier are affected by a Write-what-where Condition vulnerability that could allow an attacker to execute arbitrary code in the context of the current user. This vulnerability allows an attacker to write a controlled value to an arbitrary memory location,...

7.8CVSS0.00309EPSS
SaveExploits0References1
Rows per page
Query Builder