10872 matches found
CVE-2017-8785
FastStone Image Viewer 6.2 has a "Data from Faulting Address may be used as a return value" issue. This issue can be triggered by a malformed JPEG 2000 file that is mishandled by FSViewer.exe. Attackers could exploit this issue for DoS Access Violation or possibly unspecified other impact...
CVE-2017-8387
STDU Viewer version 1.6.375 might allow user-assisted attackers to execute code via a crafted file. One threat model is a victim who obtains an untrusted crafted file from a remote location and issues several user-defined commands including Ctrl-+ commands...
CVE-2017-8785
FastStone Image Viewer 6.2 is affected by a vulnerability in FSViewer.exe triggered by malformed JPEG 2000 files, described as “Data from Faulting Address may be used as a return value.” The issue could allow a DoS (Access Violation) and potentially other impact. The available documents confirm t...
CVE-2017-8387
STDU Viewer 1.6.375 is affected by a buffer overflow vulnerability leading to code execution via crafted files. Exploitation appears to require user interaction (e.g., handling a crafted file and navigating commands such as Ctrl-+); CVE notes user-assisted execution. CNVD-2017-14002 confirms a bu...
CVE-2017-8826
FastStone Image Viewer 6.2 is affected by a vulnerability described as a “User Mode Write AV” that can be triggered by processing a malformed JPEG file. The issue is linked to the jpeg_mem_term function in jmemnobs.c of libjpeg and can be exploited by a malformed JPEG that causes an access violat...
proquote-solutions.com XSS vulnerability
Vulnerable URL: http://proquote-solutions.com/Downloads-Viewer.asp?literature=1"...
Vulnerability of the Microsoft Office software package, the Microsoft Silverlight software platform, and the Word document viewing tool – Microsoft Office Word Viewer. Also vulnerable are the Microsoft Windows operating system, and the Microsoft Lync and Skype for Business instant messaging applications. These vulnerabilities allow attackers to inject arbitrary code into these systems.
The vulnerabilities of the Microsoft Office software package, the Microsoft Silverlight software platform, and the Word document viewing tool – Microsoft Office Word Viewer – as well as the Microsoft Windows operating system, and the Microsoft Lync and Skype for Business instant messaging...
masshist.org XSS vulnerability
Vulnerable URL: http://www.masshist.org/revolution/doc-viewer.php?old=1=navid=1/-///'/"//--...
Mozilla: Use-after-free with content viewer listeners (MFSA 2017-16)
A use-after-free vulnerability with content viewer listeners that results in a potentially exploitable crash. This vulnerability affects Firefox 54, Firefox ESR 52.2, and Thunderbird 52.2...
wildfly: Arbitrary file read via path traversal
It was found that the log file viewer in Red Hat JBoss Enterprise Application 6 and 7 allows arbitrary file read to authenticated user via path traversal...
wildfly: Arbitrary file read via path traversal
It was found that the log file viewer in Red Hat JBoss Enterprise Application 6 and 7 allows arbitrary file read to authenticated user via path traversal...
wildfly: Arbitrary file read via path traversal
It was found that the log file viewer in Red Hat JBoss Enterprise Application 6 and 7 allows arbitrary file read to authenticated user via path traversal...
wildfly: Arbitrary file read via path traversal
It was found that the log file viewer in Red Hat JBoss Enterprise Application 6 and 7 allows arbitrary file read to authenticated user via path traversal...
wildfly: Arbitrary file read via path traversal
It was found that the log file viewer in Red Hat JBoss Enterprise Application 6 and 7 allows arbitrary file read to authenticated user via path traversal...
Microsoft Office Word Viewer Information Disclosure Vulnerability (KB3203484)
This host is missing an important security update according to Microsoft KB3203484. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...
Remote code execution
Uniscribe in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, Windows Server 2016, Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office Word Viewer, Microsoft Lync 2013 SP1, Skype for...
HPESBGN03761 rev.1 - HPE Virtualization Performance Viewer (VPV)/ Cloud Optimizer using Linux, Remote Escalation of Privilege
Potential Security Impact: Remote: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Cloud Optimizer - v1.10, v1.20, v2.0, v2.01, v2.10, v2.20/ CO – v3.0, v3.01 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2016-5195 |...
Mozilla: Use-after-free with content viewer listeners (MFSA 2017-16)
A use-after-free vulnerability with content viewer listeners that results in a potentially exploitable crash. This vulnerability affects Firefox 54, Firefox ESR 52.2, and Thunderbird 52.2...
Microsoft Office Word Viewer Remote Code Execution Vulnerability (KB3203427)
This host is missing a critical security update according to Microsoft KB3203427. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
UBUNTU-CVE-2017-7751
A use-after-free vulnerability with content viewer listeners that results in a potentially exploitable crash. This vulnerability affects Firefox 54, Firefox ESR 52.2, and Thunderbird 52.2...