772 matches found
CVE-2021-42737
CVE-2021-42737 affects Adobe Prelude (≤10.1) via a memory corruption vulnerability in WAV handling that can lead to arbitrary code execution in the context of the current user. Exploitation requires the user to open a specially crafted WAV file. Reports in multiple feeds (NVD, CNVD, CNNVD) confir...
CVE-2021-40771 Adobe Prelude WAV File Parsing Memory Corruption Arbitrary Code Execution
Adobe Prelude version 10.1 and earlier is affected by a memory corruption vulnerability due to insecure handling of a malicious WAV file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required in that the victim must open a specially...
CVE-2021-40771
CVE-2021-40771 affects Adobe Prelude 10.1 and earlier and involves a memory corruption flaw in WAV file parsing caused by insecure handling of a malicious WAV. The vulnerability can lead to arbitrary code execution in the context of the current user and requires user interaction (victim opens a c...
CVE-2021-40754
Adobe After Effects version 18.4.1 and earlier is affected by a memory corruption vulnerability due to insecure handling of a malicious WAV file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required in that the victim must open a...
CVE-2021-40758
Adobe After Effects version 18.4.1 and earlier is affected by a memory corruption vulnerability due to insecure handling of a malicious WAV file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required in that the victim must open a...
Memory corruption
Adobe After Effects version 18.4.1 and earlier is affected by a memory corruption vulnerability due to insecure handling of a malicious WAV file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required in that the victim must open a...
CVE-2021-40758 Adobe After Effects WAV File Parsing Memory Corruption Arbitrary Code Execution
Adobe After Effects version 18.4.1 and earlier is affected by a memory corruption vulnerability due to insecure handling of a malicious WAV file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required in that the victim must open a...
CVE-2021-40758
CVE-2021-40758 affects Adobe After Effects versions 18.4.1 and earlier. The vulnerability is a memory corruption flaw caused by insecure handling of a malicious WAV file, potentially allowing arbitrary code execution in the context of the current user. Exploitation requires the user to open a cra...
CVE-2021-40758 Adobe After Effects WAV File Parsing Memory Corruption Arbitrary Code Execution
Adobe After Effects version 18.4.1 and earlier is affected by a memory corruption vulnerability due to insecure handling of a malicious WAV file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required in that the victim must open a...
CVE-2021-40754 Adobe After Effects WAV File Parsing Memory Corruption Arbitrary Code Execution
Adobe After Effects version 18.4.1 and earlier is affected by a memory corruption vulnerability due to insecure handling of a malicious WAV file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required in that the victim must open a...
CVE-2020-23904
A stack-based buffer overflow flaw was found in speex within the readsamples at src/speexenc.c function. This flaw allows a malicious user to provide a crafted wav file to the speexenc utility, and in some cases, possibly lead to arbitrary code execution. The highest threat from this vulnerabilit...
Huawei EulerOS: Security Advisory for libsndfile (EulerOS-SA-2021-2715)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Speex has unspecified vulnerabilities
Speex is a free software proprietary audio compression format designed for speech. Speex v1.2 contains a security vulnerability that could be exploited by an attacker to cause a denial of service DoS via a crafted WAV file...
Speex Dezero Error Vulnerability
Speex is an open source audio codec. version 1.2 of Speex is vulnerable to a divide by zero error in the static int readsamples function. An attacker can exploit the vulnerability to cause a denial of service via a specially crafted WAV file...
EulerOS 2.0 SP9 : libsndfile (EulerOS-SA-2021-2690)
According to the versions of the libsndfile package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A heap buffer overflow vulnerability in msadpcmdecodeblock of libsndfile 1.0.30 allows attackers to execute arbitrary code via a crafted WAV...
Mozilla Firefox Security Advisory (MFSA2014-17) - Linux
This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...
EulerOS 2.0 SP9 : libsndfile (EulerOS-SA-2021-2715)
According to the versions of the libsndfile package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A heap buffer overflow vulnerability in msadpcmdecodeblock of libsndfile 1.0.30 allows attackers to execute arbitrary code via a crafted WAV...
CVE-2020-23903
A Divide by Zero vulnerability in the function static int readsamples of Speex v1.2 allows attackers to cause a denial of service DoS via a crafted WAV file...
