Lucene search
+L

1630 matches found

BDU FSTEC
BDU FSTEC
•added 2023/10/24 12:00 a.m.•12 views

The vulnerability of the Substance 3D Stager software lies in the possibility of an operation going beyond the buffer boundaries in memory, allowing a hacker to execute arbitrary code.

The vulnerability of the Substance 3D Stager software relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

7.8CVSS8AI score0.00326EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2023/10/24 12:00 a.m.•11 views

The vulnerability of the Substance 3D Stager software lies in the possibility of an operation going beyond the buffer boundaries in memory, allowing a hacker to execute arbitrary code.

The vulnerability of the Substance 3D Stager software relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

7.8CVSS8AI score0.00345EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2023/10/24 12:00 a.m.•12 views

The vulnerability of the Substance 3D Stager software lies in its reliance on memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of the Substance 3D Stager software-related 3D design software is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

7.8CVSS7.6AI score0.00379EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2023/08/18 12:00 a.m.•13 views

The vulnerability of the Open Babel software for converting chemical substance file formats lies in the use of an uninitialized pointer, which allows a hacker to execute arbitrary code.

The vulnerability of the pFormat function in the Open Babel software for converting chemical substance formats is related to the use of an uninitialized pointer. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

10CVSS7.8AI score0.00802EPSS
SaveExploits1References4Affected Software1
Zero Day Initiative
Zero Day Initiative
•added 2023/08/14 12:00 a.m.•15 views

Adobe Substance 3D Stager SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Substance 3D Stager. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.8AI score
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/08/14 12:00 a.m.•11 views

Adobe Substance 3D Stager SKP File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Substance 3D Stager. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.8AI score
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/08/14 12:00 a.m.•12 views

Adobe Substance 3D Stager SKP File Parsing Uninitialized Variable Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Substance 3D Stager. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

3.3CVSS5.9AI score
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/08/14 12:00 a.m.•16 views

Adobe Substance 3D Stager SKP File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Substance 3D Stager. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.8AI score
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/08/14 12:00 a.m.•17 views

Adobe Substance 3D Stager SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Substance 3D Stager. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.8AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2023/06/26 12:00 a.m.•15 views

The vulnerability of the 3D model texturing program Adobe Substance Designer, which allows a hacker to execute arbitrary code.

The vulnerability of the 3D model texturing program Adobe Substance Designer is related to the use of an uninitialized pointer. Exploiting this vulnerability could allow an attacker to execute arbitrary code during the analysis of SBS files...

7.8CVSS7.6AI score0.00347EPSS
SaveExploits0References6Affected Software1
CNVD
CNVD
•added 2023/06/18 12:00 a.m.•41 views

Adobe Substance 3D Designer Buffer Overflow Vulnerability

Adobe Substance 3D Designer is a 3D design software from the American company Audobee Adobe. A buffer overflow vulnerability exists in Adobe Substance 3D Designer 12.4.1 and prior versions, which originates from a boundary error when the application processes untrusted input. A remote attacker...

7.8CVSS8.2AI score0.00347EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/06/16 12:00 a.m.•38 views

Adobe Substance 3D Designer SBS File Parsing Uninitialized Variable Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Substance 3D Designer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.8AI score0.00347EPSS
SaveExploits0References1
OSV
OSV
•added 2023/06/15 7:15 p.m.•15 views

CVE-2023-21618

Adobe Substance 3D Designer version 12.4.1 and earlier is affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS6.3AI score0.00347EPSS
SaveExploits0References1
NVD
NVD
•added 2023/06/15 7:15 p.m.•31 views

CVE-2023-21618

Adobe Substance 3D Designer version 12.4.1 and earlier is affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS7.8AI score0.00347EPSS
SaveExploits0References1
CVE
CVE
•added 2023/06/15 12:00 a.m.•118 views

CVE-2023-21618

Adobe Substance 3D Designer (Windows/macOS) versions 12.4.1 and earlier are affected by an Access of Uninitialized Pointer vulnerability in SBS file parsing, leading to arbitrary code execution in the current user context. Exploitation requires user interaction (opening a malicious SBS file); no ...

7.8CVSS7.8AI score0.00347EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2023/06/15 12:00 a.m.•20 views

Adobe Substance 3D Designer 缓冲区错误漏洞

Adobe Substance 3D Designer is a 3D design software from the American company Audobee Adobe. A buffer overflow vulnerability exists in Adobe Substance 3D Designer 12.4.1 and prior versions, which originates from a boundary error when the application processes untrusted input. A remote attacker...

7.8CVSS7.9AI score0.00347EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2023/06/15 12:00 a.m.•12 views

CVE-2023-21618 ZDI-CAN-20963: Adobe Substance 3D Designer SBS File Parsing Uninitialized Variable Remote Code Execution Vulnerability

Adobe Substance 3D Designer version 12.4.1 and earlier is affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS7.5AI score0.00347EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2023/06/15 12:00 a.m.•40 views

CVE-2023-21618 ZDI-CAN-20963: Adobe Substance 3D Designer SBS File Parsing Uninitialized Variable Remote Code Execution Vulnerability

Adobe Substance 3D Designer version 12.4.1 and earlier is affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS7.9AI score0.00347EPSS
SaveExploits0References1
Qualys Blog
Qualys Blog
•added 2023/06/13 7:58 p.m.•75 views

Microsoft and Adobe Patch Tuesday, June 2023 Security Update Review

Microsoft has released Junes edition of Patch Tuesday! This installment of security updates addressed 94 security vulnerabilities in various products, features, and roles. Microsoft Patch Tuesday for June 2023 No zero-day vulnerabilities known to be exploited in the wild have been fixed in this...

7.5CVSS9.8AI score0.99984EPSS
SaveExploits12
CISA
CISA
•added 2023/06/13 12:00 p.m.•13 views

Adobe Releases Security Updates for Multiple Products

Adobe has released security updates to address multiple vulnerabilities in Adobe software. An attacker can exploit these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following Adobe Security Bulletins and apply the necessary updates...

7.7AI score
SaveExploits0References4
Rows per page
Query Builder