CVE-2020-17425

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2020-17425

CVE-2020-17425 affects Foxit Studio Photo (reported as 3.6.6.922 and earlier). The root cause is improper validation during EPS file parsing, causing a write past the end of an allocated structure. This leads to remote code execution in the context of the current process. Exploitation requires us...

CVE-2020-17424

Foxit Studio Photo 3.6.6.922 and earlier are affected by an EZI file parsing flaw that allows out-of-bounds write due to insufficient input validation. This can let remote attackers execute arbitrary code in the context of the vulnerable process. User interaction is required (visit a malicious pa...

CVE-2020-17424

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2020-17423

Foxit Studio Photo 3.6.6.922 is affected by a heap-based buffer overflow in ARW file parsing. The root cause is improper validation of the length of user-supplied data before copying to a heap buffer, enabling remote code execution when a user opens a malicious ARW file or visits a crafted page. ...

CVE-2020-17422

Foxit Studio Photo information disclosure (CVE-2020-17422) stems from improper validation in EPS file parsing, causing an out-of-bounds read of an allocated structure. Affected versions include Foxit Studio Photo 3.6.6.x; an attacker must lure a user to open a malicious page/file, enabling inform...

CVE-2020-17420

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

CVE-2020-17420

Foxit Studio Photo NEF handling in version 3.6.6.922 is affected by an out-of-bounds read due to insufficient input validation, leading to information disclosure. Exploitation requires user interaction (visiting a malicious page or opening a malicious file) and, per the description, an attacker c...

CVE-2020-17421

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2020-17421

Foxit Studio Photo vulnerable to remote code execution via NEF file parsing (CVE-2020-17421). The flaw is an out-of-bounds write due to improper validation in handling NEF data, allowing code execution in the context of the current process when a user visits a malicious page or opens a crafted fi...

CVE-2020-17419

Foxit Studio Photo CVE-2020-17419 affects Foxit Studio Photo 3.6.6.922 (CNVD notes 3.6.6.930 and earlier). The issue is an out-of-bounds write in NEF file parsing due to improper validation of user-supplied data, allowing remote code execution. Exploitation requires user interaction (visiting a m...

CVE-2020-17418

Foxit Studio Photo EZIX channel id out-of-bounds write vulnerability (CVE-2020-17418) affects Foxit Studio Photo 3.6.6.922 and earlier. The flaw occurs in EZIX file handling where a crafted id in a channel element triggers a write past the end of an allocated buffer, enabling arbitrary code execu...

Visual Studio Code npm-script Extension Remote Code Execution Vulnerability

...

.NET Core and Visual Studio Denial of Service Vulnerability

...

Visual Studio Code Remote Code Execution Vulnerability

...

Microsoft Visual Studio Code Security Vulnerability

Microsoft Visual Studio Code is an open source code editor from Microsoft Corporation USA. A security vulnerability exists in Microsoft Visual Studio Code. The following products and versions are affected:Microsoft Visual Studio 2019 version 16.8,Visual Studio Code,Microsoft Visual Studio 2017...

Foxit Studio Photo 缓冲区错误漏洞

Foxit Studio Photo is a set of image editing software from the Chinese company Foxit Foxit. An information disclosure vulnerability exists in the handling of CMP files in Foxit Studio Photo 3.6.6.930 and earlier versions. The vulnerability stems from a lack of proper validation of user-supplied...

Foxit Studio Photo 缓冲区错误漏洞

Foxit Studio Photo is a set of image editing software from the Chinese company Foxit Foxit. An information disclosure vulnerability exists in the handling of CR2 files in Foxit Studio Photo 3.6.6.930 and earlier versions. The vulnerability stems from a lack of proper validation of user-supplied...

Foxit Studio Photo 缓冲区错误漏洞

Foxit Studio Photo is a set of image editing software from the Chinese company Foxit Foxit. A remote code execution vulnerability exists in the handling of CR2 files in Foxit Studio Photo 3.6.6.930 and earlier versions. The vulnerability stems from a lack of proper validation of user-supplied dat...

Foxit Studio Photo 缓冲区错误漏洞

Foxit Studio Photo is a set of image editing software from the Chinese company Foxit Foxit. A remote code execution vulnerability exists in the handling of EZI files in Foxit Studio Photo 3.6.6.930 and earlier versions. The vulnerability stems from a lack of proper validation of user-supplied dat...