Lucene search
+L

1986 matches found

Zero Day Initiative
Zero Day Initiative
•added 2021/03/22 12:00 a.m.•49 views

Foxit PhantomPDF U3D File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of U...

7.8CVSS3.8AI score0.02491EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/03/22 12:00 a.m.•47 views

Foxit PhantomPDF U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS1.8AI score0.02023EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/03/15 12:00 a.m.•46 views

SAP 3D Visual Enterprise Viewer U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

7.8CVSS4.7AI score0.01431EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2021/03/15 12:00 a.m.•39 views

SAP 3D Visual Enterprise Viewer U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

7.8CVSS4.7AI score0.01431EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2021/03/15 12:00 a.m.•46 views

SAP 3D Visual Enterprise Viewer U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

7.8CVSS4.7AI score0.01431EPSS
SaveExploits0
OSV
OSV
•added 2021/03/09 3:15 p.m.•23 views

CVE-2021-27592

When a user opens manipulated Universal 3D .U3D files received from untrusted sources in SAP 3D Visual Enterprise Viewer, the application crashes and becomes temporarily unavailable to the user until restart of the application...

7.8CVSS6.1AI score0.01431EPSS
SaveExploits0References5
NVD
NVD
•added 2021/03/09 3:15 p.m.•43 views

CVE-2021-27592

When a user opens manipulated Universal 3D .U3D files received from untrusted sources in SAP 3D Visual Enterprise Viewer, the application crashes and becomes temporarily unavailable to the user until restart of the application...

7.8CVSS0.01431EPSS
SaveExploits0References5
Prion
Prion
•added 2021/03/09 3:15 p.m.•31 views

Code injection

When a user opens manipulated Universal 3D .U3D files received from untrusted sources in SAP 3D Visual Enterprise Viewer, the application crashes and becomes temporarily unavailable to the user until restart of the application...

6.8CVSS7.5AI score0.01431EPSS
SaveExploits0References5Affected Software1
CVE
CVE
•added 2021/03/09 2:13 p.m.•67 views

CVE-2021-27592

SAP 3D Visual Enterprise Viewer is affected by a vulnerability in U3D file parsing that can trigger an out-of-bounds write, allowing remote code execution when a user opens a manipulated U3D file or is lured to a malicious page. Exploitation details in the connected advisories indicate user inter...

7.8CVSS7.5AI score0.01431EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
•added 2021/03/09 2:13 p.m.•44 views

CVE-2021-27592

When a user opens manipulated Universal 3D .U3D files received from untrusted sources in SAP 3D Visual Enterprise Viewer, the application crashes and becomes temporarily unavailable to the user until restart of the application...

4.3CVSS7.8AI score0.01431EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2021/03/09 12:00 a.m.•1 views

PT-2021-17530

Name of the Vulnerable Software and Affected Versions SAP 3D Visual Enterprise Viewer affected versions not specified Description The issue occurs when a user opens manipulated Universal 3D .U3D files received from untrusted sources in SAP 3D Visual Enterprise Viewer, causing the application to...

7.8CVSS0.01431EPSS
SaveExploits0References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/03/09 12:00 a.m.•5 views

CVE-2021-27592: Undefined Security Weakness

When a user opens manipulated Universal 3D .U3D files received from untrusted sources in SAP 3D Visual Enterprise Viewer, the application crashes and becomes temporarily unavailable to the user until restart of the application...

7.8CVSS8.2AI score0.01431EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/02/10 12:00 a.m.•48 views

Adobe Photoshop U3D File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Photoshop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of U3D...

7.8CVSS4.5AI score0.03476EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/02/10 12:00 a.m.•55 views

Adobe Photoshop U3D File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Photoshop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of...

7.8CVSS4.2AI score0.03476EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2020/12/18 12:00 a.m.•44 views

Foxit 3D Plugin Beta 9.x < 9.7.4.29600 / 10.x < 10.1.0.37494 RCE

The version of the Foxit 3D plugin installed on the remote Windows host is 9.x prior to 9.7.4.29600, or 10.x prior to 10.1.0.37494. It is, therefore affected by an Out-of-Bounds Read/Write or Stack-based Buffer Overflow vulnerability due to improper validation of data when parsing certain U3D...

7.8CVSS6.3AI score0.04175EPSS
SaveExploits0References4
NVD
NVD
•added 2020/10/13 5:15 p.m.•36 views

CVE-2020-17411

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 10.0.0.35798. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

4.3CVSS0.03113EPSS
SaveExploits0References2
NVD
NVD
•added 2020/10/13 5:15 p.m.•35 views

CVE-2020-17412

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.0.0.35798. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS0.04175EPSS
SaveExploits0References2
NVD
NVD
•added 2020/10/13 5:15 p.m.•42 views

CVE-2020-17413

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.0.0.35798. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS0.04175EPSS
SaveExploits0References2
Prion
Prion
•added 2020/10/13 5:15 p.m.•31 views

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.0.0.35798. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

6.8CVSS7.8AI score0.04175EPSS
SaveExploits0References2Affected Software1
Prion
Prion
•added 2020/10/13 5:15 p.m.•27 views

Stack overflow

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.0.0.35798. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

6.8CVSS7.8AI score0.04175EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder