Microsoft Windows NTFS 代码注入漏洞

Microsoft Windows NTFS is a file system from Microsoft USA that serves computer files. The file system has error warning, disk self-healing and logging capabilities. A remote code execution vulnerability exists in Microsoft Windows NTFS, which can be exploited by an attacker to execute code on th...

PT-2021-4430 · Microsoft · Windows Fast Fat File System Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Fast FAT File System Driver affected versions not specified Description: The issue is related to an information disclosure vulnerability in the Windows Fast FAT File System Driver. It allows attackers to obtain sensitive information,...

PT-2021-4381 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to an information disclosure vulnerability in the Windows exFAT File System. It allows attackers to obtain sensitive information and potentially affect the system. Ther...

ntfs-3g: Out-of-bounds read in ntfs_runlists_merge_i()

The ntfs3g package is susceptible to an input validation flaw. When processing a crafted NTFS image there is an improper check which leads to an out of bounds read. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability...

Dell SupportAssist Client 后置链接漏洞

Dell SupportAssist Client is a client application from Dell of America DELL. The program provides automated, proactive and predictive techniques for troubleshooting, etc. An arbitrary file deletion vulnerability exists in Dell SupportAssist Client Consumer 3.9.13.0 and prior versions. An attacker...

PT-2021-21204 · Microsoft +1 · Windows +1

Name of the Vulnerable Software and Affected Versions: Dell SupportAssist Client Consumer versions 3.9.13.0 and any versions prior to 3.9.13.0 Description: The issue concerns an arbitrary file deletion vulnerability that can be exploited using the Windows feature of NTFS called Symbolic links...

DEBIAN-CVE-2021-39261

A crafted NTFS image can cause a heap-based buffer overflow in ntfscompressedpwrite in NTFS-3G 2021.8.22...

UBUNTU-CVE-2021-39258

A crafted NTFS image can cause out-of-bounds reads in ntfsattrfind and ntfsexternalattrfind in NTFS-3G 2021.8.22...

UBUNTU-CVE-2021-33287

In NTFS-3G versions 2021.8.22, when specially crafted NTFS attributes are read in the function ntfsattrpreadi, a heap buffer overflow can occur and allow for writing to arbitrary memory or denial of service of the application...

UBUNTU-CVE-2021-39254

A crafted NTFS image can cause an integer overflow in memmove, leading to a heap-based buffer overflow in the function ntfsattrrecordresize, in NTFS-3G 2021.8.22...

CVE-2021-39252

A crafted NTFS image can cause an out-of-bounds read in ntfsielookup in NTFS-3G 2021.8.22...

Tuxera NTFS-3G 缓冲区错误漏洞

Tuxera NTFS-3G is a set of open source, cross-platform drivers from Tuxera Finland that support reading and writing to NTFS partitions. NTFS-3G is vulnerable to a buffer overflow vulnerability that could be exploited to cause a heap buffer overflow and allow code execution...

USN-5060-2 ntfs-3g vulnerabilities

USN-5060-1 fixed a vulnerability in NTFS-3G. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: It was discovered that NTFS-3G incorrectly handled certain image file. An attacker could possibly use this issue to execute arbitrary co...

PT-2021-3303

Name of the Vulnerable Software and Affected Versions Windows NTFS affected versions not specified Description An elevation of privilege issue exists in the ntfs.sys driver due to improper access control. The flaw involves a heap overflow—a condition where data exceeds the allocated memory buffer...

CVE-2021-28312

Windows NTFS Denial of Service Vulnerability...

tomcat: Information disclosure when using NTFS file system

A flaw was found in Apache Tomcat. When serving resources from a network location using the NTFS file system, it was possible to bypass security constraints and view the source code for JSPs in some configurations. The root cause was the unexpected behavior of the JRE API File.getCanonicalPath,...

tomcat: Information disclosure when using NTFS file system

A flaw was found in Apache Tomcat. When serving resources from a network location using the NTFS file system, it was possible to bypass security constraints and view the source code for JSPs in some configurations. The root cause was the unexpected behavior of the JRE API File.getCanonicalPath,...

The vulnerability of the Windows file system filter driver allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Windows file system filter driver is related to the disclosure of information. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

The vulnerability of the file system driver in the Windows operating system allows a hacker to gain unauthorized access to protected information.

The vulnerability of the file system driver filter in the Windows operating system exists due to insufficient checking of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

PT-2020-5296 · Microsoft · Windows Ntfs +1

Name of the Vulnerable Software and Affected Versions: Windows NTFS affected versions not specified Description: The vulnerability exists due to insufficient input validation in the Windows operating system, allowing a remote attacker to execute arbitrary code. This issue can be exploited by a...