python-reportlab: code injection in paraparser.py allows code execution

A code injection vulnerability was found in python-reportlab that may allow an attacker to execute code while parsing a unichar element attribute. An application that uses python-reportlab to parse untrusted input files may be vulnerable and could allow remote code execution...

python-reportlab: code injection in paraparser.py allows code execution

A code injection vulnerability was found in python-reportlab that may allow an attacker to execute code while parsing a unichar element attribute. An application that uses python-reportlab to parse untrusted input files may be vulnerable and could allow remote code execution...

python-reportlab: code injection in paraparser.py allows code execution

A code injection vulnerability was found in python-reportlab that may allow an attacker to execute code while parsing a unichar element attribute. An application that uses python-reportlab to parse untrusted input files may be vulnerable and could allow remote code execution...

python-reportlab: code injection in paraparser.py allows code execution

A code injection vulnerability was found in python-reportlab that may allow an attacker to execute code while parsing a unichar element attribute. An application that uses python-reportlab to parse untrusted input files may be vulnerable and could allow remote code execution...

Yifan YF325 Buffer Overflow Vulnerability

Yifan YF325 is a wireless router from Yifan. The Yifan YF325 suffers from a buffer overflow vulnerability that stems from a boundary error in the gwcfgcgisetmanagepostdata function malloc function when handling untrusted input. An attacker can exploit this vulnerability to cause a buffer overflow...

Adobe Photoshop Buffer Overflow Vulnerability (CNVD-2023-76927)

Adobe Photoshop is a set of image processing software from the American company Audobee Adobe. The software is mainly used for processing pictures. Adobe Photoshop suffers from a buffer overflow vulnerability that originates from a boundary error when the application processes untrusted input. A...

Yifan YF325 cgi_handler function buffer overflow vulnerability

Yifan YF325 is an industrial cellular router. A buffer overflow vulnerability exists in Yifan YF325 v1.020221108, which originates from a boundary error in the nextpage parameter of the cgihandler function when handling untrusted input. An attacker can exploit this vulnerability to cause a buffer...

SUSE CVE-2023-44821

Gifsicle through 1.94, if deployed in a way that allows untrusted input to affect GifRealloc calls, might allow a denial of service memory consumption. NOTE: this has been disputed by multiple parties because the Gifsicle code is not commonly used for unattended operation in which new input arriv...

Yifan YF325 安全漏洞

Yifan YF325 is an industrial cellular router. A buffer overflow vulnerability exists in Yifan YF325 v1.020221108, which originates from a boundary error in the nextpage parameter of the cgihandler function when handling untrusted input. An attacker can exploit this vulnerability to cause a buffer...

Vim buffer overflow vulnerability (CNVD-2024-40470)

Vim is a cross-platform text editor. A buffer overflow vulnerability exists in Vim versions prior to 9.0.1969, which stems from a boundary error in the function truncstring in src/message.c when handling untrusted input. A remote attacker could exploit this vulnerability to execute arbitrary code...

Yifan YF325 安全漏洞

Yifan YF325 is an industrial cellular router. The Yifan YF325 gozilacgi function suffers from a buffer overflow vulnerability that originates from a boundary error in the nextpage parameter of the gozilacgi function when handling untrusted input. An attacker can exploit this vulnerability to caus...

Yifan YF325 缓冲区错误漏洞

Yifan YF325 is a wireless router from Yifan. The Yifan YF325 suffers from a buffer overflow vulnerability that stems from a boundary error in the gwcfgcgisetmanagepostdata function malloc function when handling untrusted input. An attacker can exploit this vulnerability to cause a buffer overflow...

Adobe Photoshop 缓冲区错误漏洞

Adobe Photoshop is a set of image processing software from the American company Audobee Adobe. The software is mainly used for processing pictures. Adobe Photoshop suffers from a buffer overflow vulnerability that originates from a boundary error when the application processes untrusted input. A...

Xiaomi Router 安全漏洞

Xiaomi Router is a series of wireless routers from the Chinese company Xiaomi. Xiaomi Router suffers from a buffer overflow vulnerability that originates from a boundary error when the application processes untrusted input. An attacker could exploit the vulnerability to execute arbitrary code or...

python-reportlab: code injection in paraparser.py allows code execution

A code injection vulnerability was found in python-reportlab that may allow an attacker to execute code while parsing a unichar element attribute. An application that uses python-reportlab to parse untrusted input files may be vulnerable and could allow remote code execution...

DEBIAN-CVE-2023-44821

Gifsicle through 1.94, if deployed in a way that allows untrusted input to affect GifRealloc calls, might allow a denial of service memory consumption. NOTE: this has been disputed by multiple parties because the Gifsicle code is not commonly used for unattended operation in which new input arriv...

Input validation

Gifsicle through 1.94, if deployed in a way that allows untrusted input to affect GifRealloc calls, might allow a denial of service memory consumption. NOTE: this has been disputed by multiple parties because the Gifsicle code is not commonly used for unattended operation in which new input arriv...

CVE-2023-44821

Gifsicle through 1.94, if deployed in a way that allows untrusted input to affect GifRealloc calls, might allow a denial of service memory consumption. NOTE: this has been disputed by multiple parties because the Gifsicle code is not commonly used for unattended operation in which new input arriv...

UBUNTU-CVE-2023-44821

DISPUTED Gifsicle through 1.94, if deployed in a way that allows untrusted input to affect GifRealloc calls, might allow a denial of service memory consumption. NOTE: this has been disputed by multiple parties because the Gifsicle code is not commonly used for unattended operation in which new...

PT-2023-29303 · Gifsicle +2 · Gifsicle +2

Name of the Vulnerable Software and Affected Versions: Gifsicle versions 1.92 through 1.94 Description: The issue might allow a denial of service due to memory consumption if Gifsicle is deployed in a way that allows untrusted input to affect Gif Realloc calls. However, this has been disputed by...