The vulnerability of the software for opening, viewing, printing, and transforming DWG TrueView file drawings lies in the writing beyond buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the software for opening, viewing, printing, and transforming DWG drawing files in TrueView is related to writing beyond the buffer boundaries in memory during DWG file syntax analysis. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the...

The vulnerability of the TGA file syntax analysis implementation in the Autodesk Design Review software lies in the ability to write beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the TGA file syntax analysis implementation in the Autodesk Design Review software relates to the writing beyond buffer boundaries in memory during DWG file syntax analysis. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code in the context o...

The vulnerability in the implementation of the vim regsub_both() function in the Vim text editor allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the vim regsubboth function in the Vim text editor is related to writing data beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause a service failure using a specially created file...

The vulnerability in the implementation of the vim_strncpy find_word() function in the Vim text editor allows a hacker to cause a service failure or execute arbitrary code.

The vulnerability of the vimstrncpy findword function in the Vim text editor is related to the execution of the operation beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to trigger a system failure or execute arbitrary code by loading a specially...

The vulnerability of the Corel PDF Fusion software for converting PDF files lies in the fact that it allows for writing beyond the buffer boundaries, enabling an attacker to execute arbitrary code.

The vulnerability of the Corel PDF Fusion software for converting PDF files is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the Adobe Framemaker desktop publishing system, related to writing beyond the buffer boundaries in memory, allows a hacker to execute arbitrary code.

The vulnerability of the Adobe Framemaker desktop publishing system lies in the writing of code beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code in the context of the current user, using a specially created file...

The vulnerability of the AhciBusDxe driver in the InsydeH2O UEFI firmware creation framework allows a hacker to escalate their privileges.

The vulnerability of the AhciBusDxe driver used by the InsydeH2O UEFI firmware creation framework lies in the writing of data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...

The vulnerability of the software for working with animations in Adobe Character Animator lies in the ability to write code beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Adobe Character Animator software for animating graphics is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code in the context of the current user, using a specially crafted SVG file...

The vulnerability of Adobe InDesign’s computer layout automation tool, related to writing beyond the buffer in memory, allows a hacker to execute arbitrary code.

The vulnerability of Adobe InDesign’s computer layout automation tool is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

The vulnerability of the get_user_pages_fast() function implementation in the KVM virtualization subsystem of Linux operating systems allows a attacker to cause a service failure or gain increased privileges.

The vulnerability of the getuserpagesfast function implementation in the KVM virtualization subsystem of Linux operating systems is related to writing data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure or increase their privileges...

CLSA-2022-1652706523 Fixed CVE-2022-24903 in rsyslog

CVE-2022-24903: fix potential buffer overrun when using octet-counted framing...

CLSA-2022-1652706426 Fixed CVE-2022-24903 in rsyslog

CVE-2022-24903: fix potential buffer overrun when using octet-counted framing...

kernel: DoS in sctp_addto_chunk in net/sctp/sm_make_chunk.c

A flaw was found in the sctpmakestrresetreq function in net/sctp/smmakechunk.c in the SCTP network protocol in the Linux kernel with a local user privilege access. In this flaw, an attempt to use more buffer than is allocated triggers a BUGON issue, leading to a denial of service DOS...

kernel: DoS in sctp_addto_chunk in net/sctp/sm_make_chunk.c

A flaw was found in the sctpmakestrresetreq function in net/sctp/smmakechunk.c in the SCTP network protocol in the Linux kernel with a local user privilege access. In this flaw, an attempt to use more buffer than is allocated triggers a BUGON issue, leading to a denial of service DOS...

CVE-2022-24903 Buffer overflow in TCP syslog server (receiver) components in rsyslog

Rsyslog is a rocket-fast system for log processing. Modules for TCP syslog reception have a potential heap buffer overflow when octet-counted framing is used. This can result in a segfault or some other malfunction. As of our understanding, this vulnerability can not be used for remote code...

CVE-2022-25785 Buffer overrun

Stack-based Buffer Overflow vulnerability in SiteManager allows logged-in or local user to cause arbitrary code execution. This issue affects: Secomea SiteManager all versions prior to 9.7...

SUSE-SU-2022:1512-1 Security update for ruby2.5

This update for ruby2.5 fixes the following issues: - CVE-2022-28739: Fixed a buffer overrun in String-to-Float conversion bsc1198441. - CVE-2021-41817: Fixed a regular expression denial of service in Date Parsing Methods bsc1193035. - CVE-2021-32066: Fixed a StartTLS stripping vulnerability in...

SUSE: Security Advisory (SUSE-SU-2022:1512-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD : eb -- Potential buffer overrun vulnerability (17a30a24-c579-11ec-bbbd-0800270512f4)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 17a30a24-c579-11ec-bbbd-0800270512f4 advisory. - Kazuhiro Ito reports: Potential buffer overrun vulnerability is found in eb/multiplex.c...

The vulnerability of Adobe Illustrator’s graphic editor arises from an operation that goes beyond buffer boundaries in memory, allowing attackers to gain unauthorized access to protected information.

The vulnerability of Adobe Illustrator’s graphic editor arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious individual to gain unauthorized access to protected information through a specially crafted PDF file...