PT-2023-6283 · Unknown · Sante Dicom Viewer Pro

Name of the Vulnerable Software and Affected Versions: Sante DICOM Viewer Pro affected versions not specified Description: The issue is related to the lack of proper validation of user-supplied data when parsing DICOM files, which could lead to a stack-based buffer overflow. An attacker could...

Santesoft Sante DICOM Viewer Pro

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION : Low attack complexity Vendor : Santesoft Equipment : Sante DICOM Viewer Pro Vulnerabilities : Out-of-bounds Write, Stack-based Buffer Overflow 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to...

Adobe Acrobat Reader Buffer Overflow Vulnerability (CNVD-2023-82282)

Adobe Acrobat Reader is a PDF viewer from the American company Audobee Adobe. The software is used to print, sign and annotate PDF. Adobe Acrobat and Adobe Reader has a buffer overflow vulnerability, the vulnerability stems from the processing of PDF files when the "reuse after release" error...

CVE-2023-42138

Out-of-bounds read vulnerability exists in KV STUDIO Ver. 11.62 and earlier and KV REPLAY VIEWER Ver. 2.62 and earlier. If this vulnerability is exploited, information may be disclosed or arbitrary code may be executed by having a user of KV STUDIO PLAYER open a specially crafted file...

CVE-2023-42138

Out-of-bounds read vulnerability exists in KV STUDIO Ver. 11.62 and earlier and KV REPLAY VIEWER Ver. 2.62 and earlier. If this vulnerability is exploited, information may be disclosed or arbitrary code may be executed by having a user of KV STUDIO PLAYER open a specially crafted file...

CVE-2023-42138

Out-of-bounds read vulnerability exists in KV STUDIO Ver. 11.62 and earlier and KV REPLAY VIEWER Ver. 2.62 and earlier. If this vulnerability is exploited, information may be disclosed or arbitrary code may be executed by having a user of KV STUDIO PLAYER open a specially crafted file...

CVE-2023-42138

Out-of-bounds read vulnerability exists in KV STUDIO Ver. 11.62 and earlier and KV REPLAY VIEWER Ver. 2.62 and earlier. If this vulnerability is exploited, information may be disclosed or arbitrary code may be executed by having a user of KV STUDIO PLAYER open a specially crafted file...

CVE-2023-42138

KV STUDIO and KV REPLAY VIEWER are impacted by CVE-2023-42138 (out-of-bounds read) in versions 11.62 and earlier and 2.62 and earlier. Exploitation requires a user to open a specially crafted file, which may disclose information or allow arbitrary code execution. Concrete affected products/compon...

Out-of-bounds read vulnerability in Keyence KV STUDIO and KV REPLAY VIEWER

Overview KV STUDIO and KV REPLAY VIEWER provided by KEYENCE CORPORATION contain an out-of-bounds read vulnerability CWE-125, CVE-2023-42138. Michael Heinzl reported this vulnerability to JPCERT/CC. JPCERT/CC coordinated with the developer. Impact If this vulnerability is exploited, information ma...

PT-2023-28281 · Unknown +1 · Kv Replay Viewer +2

Name of the Vulnerable Software and Affected Versions: KV STUDIO versions 11.62 and earlier KV REPLAY VIEWER versions 2.62 and earlier Description: An out-of-bounds read issue exists, potentially allowing information disclosure or arbitrary code execution if a user of KV STUDIO PLAYER opens a...

less: Denial of service

Background less is a pager and text file viewer. Description less suffered from a flaw in its terminal escape sequence handling which made its filtering incomplete. Impact Malicious input could clear the terminal output or otherwise manipulate it with faked interactions. Workaround There is no...

Keyence KV STUDIO Buffer Error Vulnerability

Keyence KV STUDIO is a PLC programming software from Keyence Corporation. A security vulnerability exists in Keyence KV STUDIO Ver. 11.62 and earlier, KV REPLAY VIEWER Ver. 2.62 and earlier, which originates from a user opening a specially crafted file that may disclose information or execute...

The vulnerability of the U3D File Parser component in the PDF-XChange PDF document viewing and editing software allows a hacker to execute arbitrary code.

The vulnerability of the U3D File Parser component in the PDF-XChange PDF viewing and editing software is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the App ObjectHandler component in the PDF-XChange PDF document viewing and editing software allows a perpetrator to execute arbitrary code.

The vulnerability of the App ObjectHandler component in the PDF-XChange PDF viewing and editing software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the U3D File Parser component in the PDF-XChange PDF document viewing and editing software allows a hacker to execute arbitrary code.

The vulnerability of the U3D File Parser component in the PDF-XChange PDF viewing and editing software is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Unable to launch resources or Studio - connection between broker service and database has been lost

Users unable to launch resources such as published applications and desktops. Administrators unable to use Studio to manage environment. When checking event viewer logs on the DDC, we see event 1201 warning: When accessing the SQL Database, below error is see:...

WordPress Vrm 360 3D Model Viewer Plugin <= 1.2.1 is vulnerable to Sensitive Data Exposure

Software Vrm 360 3D Model Viewer Type Plugin Vulnerable versions = 1.2.1 Fixed in N/A OWASP Top 10 A5: Security Misconfiguration Classification Sensitive Data Exposure CVE CVE-2023-5177 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 41f6e6c8c32c Credits Jonatas Souza Vill...

Vrm 360 3D Model Viewer <= 1.2.1 - Full Path Disclosure

Description The plugin exposes the full path of a file when putting in a non-existent file in a parameter of the shortcode. 1. Create a page 2. Place the shortcode vrm360 canvasname=s1 modelurl=SACharacter.zip aspectratio=1.8 initialoffset=0.9 on the page SACharacter.zip should be a non-existent...

Vrm 360 3D Model Viewer <= 1.2.1 - Full Path Disclosure

Description The plugin exposes the full path of a file when putting in a non-existent file in a parameter of the shortcode. PoC 1. Create a page 2. Place the shortcode vrm360 canvasname=s1 modelurl=SACharacter.zip aspectratio=1.8 initialoffset=0.9 on the page SACharacter.zip should be a...

The vulnerability of the IW44EncodeCodec.cpp component in the viewer library, which is used for viewing, creating, and editing DjVu files, related to division by zero. This vulnerability allows an attacker to cause a service failure.

The vulnerability of the IW44EncodeCodec.cpp component in the viewer, editor, and DjVu-file creation library associated with DjVuLibre is related to the lack of checks for division by zero. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...