12 matches found
Access of Resource Using Incompatible Type ('Type Confusion')
Overview org.webjars.npm:electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Access of Resource Using Incompatible Type 'Type Confusion' in v8. Remediation A fix was pushed into the...
Adobe Reader < 20.005.30680 / 24.003.20112 Multiple Vulnerabilities (APSB24-70)
The version of Adobe Reader installed on the remote Windows host is a version prior to 20.005.30680 or 24.003.20112. It is, therefore, affected by multiple vulnerabilities. - Access of Resource Using Incompatible Type 'Type Confusion' potentially leading to Arbitrary code execution CVE-2024-45112...
Adobe Reader < 20.005.30680 / 24.003.20112 Multiple Vulnerabilities (APSB24-70) (macOS)
The version of Adobe Reader installed on the remote macOS host is a version prior to 20.005.30680 or 24.003.20112. It is, therefore, affected by multiple vulnerabilities. - Access of Resource Using Incompatible Type 'Type Confusion' potentially leading to Arbitrary code execution CVE-2024-45112 -...
Adobe Acrobat < 20.005.30680 / 24.001.30187 / 24.003.20112 Multiple Vulnerabilities (APSB24-70)
The version of Adobe Acrobat installed on the remote Windows host is a version prior to 20.005.30680, 24.001.30187, or 24.003.20112. It is, therefore, affected by multiple vulnerabilities. - Access of Resource Using Incompatible Type 'Type Confusion' potentially leading to Arbitrary code executio...
Adobe Acrobat < 20.005.30680 / 24.001.30187 / 24.003.20112 Multiple Vulnerabilities (APSB24-70) (macOS)
The version of Adobe Acrobat installed on the remote macOS host is a version prior to 20.005.30680, 24.001.30187, or 24.003.20112. It is, therefore, affected by multiple vulnerabilities. - Access of Resource Using Incompatible Type 'Type Confusion' potentially leading to Arbitrary code execution...
Foxit Reader Lock object fields property type confusion vulnerability
Talos Vulnerability Report TALOS-2024-1963 Foxit Reader Lock object fields property type confusion vulnerability April 30, 2024 CVE Number CVE-2024-25575 SUMMARY A type confusion vulnerability vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a Lock object. A specially crafted...
Type confusion
Adobe Acrobat Reader versions 22.001.20142 and earlier, 20.005.30334 and earlier and 17.012.30229 and earlier are affected by an Access of Resource Using Incompatible Type 'Type Confusion' vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation...
Adobe Acrobat < 17.012.30249 / 20.005.30362 / 22.001.20169 Multiple Vulnerabilities (APSB22-32) (macOS)
The version of Adobe Acrobat installed on the remote macOS host is a version prior to 17.012.30249, 20.005.30362, or 22.001.20169. It is, therefore, affected by multiple vulnerabilities. - Adobe Acrobat Reader versions 22.001.20142 and earlier, 20.005.30334 and earlier and 17.012.30229 and earlie...
Siemens Capital VSTAR
1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION: Exploitable remotely / Low attack complexity Vendor: Siemens Equipment: Capital VSTAR Vulnerabilities: Access of Resource Using Incompatible Type, Improper Validation of Specified Quantity in Input, Out-of-Bounds Read, Improper Restriction of Operations...
ICSA-21-040-06_Siemens JT2Go and Teamcenter Visualization (Update A)
1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Siemens Equipment: JT2Go and Teamcenter Visualization Vulnerabilities: Out-of-bounds Read, Improper Restriction of Operations within the Bounds of a Memory Buffer, Stack-based Buffer overflow, Out-of-Bounds Write, Type...
Design/Logic Flaw
Parsing malformed project files in Omron CX-One versions 4.42 and prior, including the following applications: CX-FLnet versions 1.00 and prior, CX-Protocol versions 1.992 and prior, CX-Programmer versions 9.65 and prior, CX-Server versions 5.0.22 and prior, Network Configurator versions 3.63 and...
VMware VNC Pointer Decode Code Execution Vulnerability(CVE-2017-4941)
Summary An exploitable code execution vulnerability exists in the remote management functionality of VMware . A specially crafted set of VNC packets can cause a type confusion resulting in stack overwrite, which could lead to code execution. An attacker can initiate a VNC session to trigger this...