CVE-2024-8819 PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target...

CVE-2024-8819 PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target...

CVE-2024-9735 Tungsten Automation Power PDF JPF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Tungsten Automation Power PDF JPF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tungsten Automation Power PDF. User interaction is required to exploit this vulnerability in th...

CVE-2024-9736

CVE-2024-9736 is a vulnerability in Tungsten Automation Power PDF where the PDF file parsing lacks validation, enabling an out-of-bounds write that can allow remote code execution . The issue affects Power PDF’s PDF parsing component and requires user interaction (visiting a malicious page or ope...

CVE-2024-11534 IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page...

CVE-2024-11534

CVE-2024-11534 concerns IrfanView. The vulnerability is an out-of-bounds read in the DXF file parsing path that can allow arbitrary code execution. It requires user interaction (visiting a malicious page or opening a malicious file) and stems from insufficient validation of input, allowing read p...

CVE-2024-11536

CVE-2024-11536 describes an out-of-bounds read in IrfanView’s DXF file parsing that enables remote code execution after a user opens a malicious DXF file or visits a malicious page. The root cause is insufficient validation while parsing DXF data, enabling a read past the end of an allocated buff...

CVE-2024-11569 IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page...

CVE-2024-11569 IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page...

CVE-2024-11562

CVE-2024-11562 (IrfanView) refers to an out-of-bounds read during CGM file parsing that can lead to remote code execution. The flaw stems from improper validation of data inside CGM files, allowing a read past the end of an allocated buffer and enabling arbitrary code execution in the context of ...

CVE-2024-11571

CVE-2024-11571 describes an out-of-bounds read in IrfanView during DXF file parsing, allowing an attacker to execute code remotely. The flaw stems from insufficient validation of user-supplied data in DXF processing, enabling a read past the end of an allocated buffer when parsing files. Exploita...

CVE-2024-11568

CVE-2024-11568 affects IrfanView, where the DXF file parser is vulnerable to an out-of-bounds read. The fault stems from insufficient validation of user-supplied data during DXF parsing, which can cause a read past the end of an allocated buffer and enable remote code execution in the context of ...

CVE-2024-11529

CVE-2024-11529 affects IrfanView due to an out-of-bounds read in the DWG file parser that can lead to remote code execution . The vulnerability arises from insufficient validation of user-supplied data, causing a read past the end of an allocated buffer. Exploitation requires user interaction (ta...

CVE-2024-11531 IrfanView CGM File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

IrfanView CGM File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page...

CVE-2024-6815 IrfanView RLE File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

IrfanView RLE File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious pag...

CVE-2024-5875

Affected software/impact: IrfanView’s SHP file parsing is vulnerable to an out-of-bounds write that can lead to remote code execution. The flaw stems from insufficient validation of user-supplied data during SHP parsing, enabling an attacker to write past the end of an allocated buffer and execut...

CVE-2023-39179 Kernel: ksmbd: read request out-of-bounds read information disclosure vulnerability

A flaw was found within the handling of SMB2 read requests in the kernel ksmbd module. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this to disclose sensitive information on...

CVE-2023-39176 Kernel: ksmbd: transform header out-of-bounds read information disclosure vulnerability

A flaw was found within the parsing of SMB2 requests that have a transform header in the kernel ksmbd module. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this to disclose...

CVE-2023-39176

CVE-2023-39176 concerns the ksmbd kernel module in Linux, where parsing of SMB2 transform-header requests allows reading past the end of an allocated buffer. This results in information disclosure on affected systems with ksmbd enabled. Public sources in the connected documents consistently descr...

CVE-2023-4458

A flaw was found within the parsing of extended attributes in the kernel ksmbd module. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this to disclose sensitive information on...