81 matches found
PT-2023-7316 · Nginx · Nginx Njs
Name of the Vulnerable Software and Affected Versions: Nginx NJS version 0.7.10 Description: The issue is related to a segmentation violation via the function njs dump is recursive at src/njs vmcode.c. This is caused by a memory boundary read issue in the njs dump is recursive function of the Ngi...
Adobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability
Adobe Acrobat and Reader contains an array boundary issue in Universal 3D U3D support that could lead to remote code execution...
Tenda AC10 缓冲区错误漏洞
Tenda AC10-1200 is a wireless router from Tenda China.A buffer error vulnerability exists in the Tenda AC10-1200, which stems from a failure to properly validate data boundaries when performing operations on memory in the setSmartPowerManagement function. An attacker could exploit this...
DEBIAN-CVE-2021-37231
A stack-buffer-overflow occurs in Atomicparsley 20210124.204813.840499f through AParreadX in src/util.cpp while parsing a crafted mp4 file because of the missing boundary check...
Apple macOS 缓冲区错误漏洞
Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A buffer error vulnerability exists in macOS that originates from a boundary error within the CoreGraphics component. 10.14.4 18E226, 10.14.4 18E227, 10.14.5 18F132, 10.14.6...
PYSEC-2021-37
An issue was discovered in Pillow before 8.1.1. In TiffDecode.c, there is an out-of-bounds read in TiffreadRGBATile via invalid tile boundaries...
PT-2021-16503
Name of the Vulnerable Software and Affected Versions: Pillow versions prior to 8.1.1 Description: An issue was discovered in Pillow, where there is an out-of-bounds read in TiffreadRGBATile via invalid tile boundaries in TiffDecode.c. Recommendations: For Pillow versions prior to 8.1.1, update t...
NETGEAR R7800, PLW1000 and PLW1010 Buffer Overflow Vulnerability
NETGEAR R7800 and others are products of NETGEAR, Inc.NETGEAR R7800 is a wireless router.NETGEAR PLW1000 is a power line communication modem.NETGEAR PLW1010 is a power line communication modem.NETGEAR R7800 is a wireless router.NETGEAR PLW1010 is a wireless router. A buffer overflow vulnerability...
The vulnerability of the syntax analysis function for HTTP headers of TP-Link TL-R600VPN software routers allows a hacker to execute arbitrary code.
The vulnerability of the syntax analysis function for HTTP headers of TP-Link TL-R600VPN software lies in the fact that the operation is performed outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a specially crafted HTTP...
Virtuozzo 6 : httpd / httpd-devel / httpd-manual / httpd-tools / etc (VZLSA-2017-1721)
An update for httpd is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...
VulnCheck KEV: CVE-2009-3953
Adobe Acrobat and Reader contains an array boundary issue in Universal 3D U3D support that could lead to remote code execution...
acroread: multiple code execution flaws (APSB10-02)
The U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, 8.x before 8.2 on Windows and Mac OS X, and 7.x before 7.1.4 allows remote attackers to execute arbitrary code via malformed U3D data in a PDF document, related to a CLODProgressiveMeshDeclaration "array boundary issue," a differe...
acroread: multiple code execution flaws (APSB10-02)
The U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, 8.x before 8.2 on Windows and Mac OS X, and 7.x before 7.1.4 allows remote attackers to execute arbitrary code via malformed U3D data in a PDF document, related to a CLODProgressiveMeshDeclaration "array boundary issue," a differe...
PT-2010-1309 · Adobe · Reader +1
Name of the Vulnerable Software and Affected Versions: Adobe Reader and Acrobat versions 9.x before 9.3 Adobe Reader and Acrobat versions 8.x before 8.2 Adobe Reader and Acrobat versions 7.x before 7.1.4 Description: The issue is related to a problem in the U3D implementation, allowing remote...
CVE-2009-3953: Out-of-bounds Write
The U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, 8.x before 8.2 on Windows and Mac OS X, and 7.x before 7.1.4 allows remote attackers to execute arbitrary code via malformed U3D data in a PDF document, related to a CLODProgressiveMeshDeclaration "array boundary issue," a differe...
Adobe Reader < 9.3 / 8.2 Multiple Vulnerabilities (APSB10-02)
The version of Adobe Reader installed on the remote host is earlier than 9.3 / 8.2. Such versions are reportedly affected by multiple vulnerabilities : - A use-after-free vulnerability in 'Multimedia.api' can lead to code execution. CVE-2009-4324 - An array boundary issue in 'U3D' support can lea...
Adobe Acrobat < 9.3 / 8.2 Multiple Vulnerabilities (APSB10-02)
The version of Adobe Acrobat installed on the remote host is earlier than 9.3 / 8.2. Such versions are reportedly affected by multiple vulnerabilities : - A use-after-free vulnerability in 'Multimedia.api' can lead to code execution. CVE-2009-4324 - An array boundary issue in 'U3D' support can le...
CVE-2004-0075
The Vicam USB driver in Linux before 2.4.25 does not use the copyfromuser function when copying data from userspace to kernel space, which crosses security boundaries and allows local users to cause a denial of service...
CVE-2003-0700
The C-Media PCI sound driver in Linux before 2.4.22 does not use the getuser function to access userspace in certain conditions, which crosses security boundaries and may facilitate the exploitation of vulnerabilities, a different vulnerability than CVE-2003-0699...
