cad quick draw suffers from dll hijacking vulnerability

Shanghai Xiaomai Technology is an Internet software and engineering data service provider for the building decoration and related manufacturing industries in China. There is a dll hijacking vulnerability in cad quick draw. An attacker can use this vulnerability to load malicious dll and execute...

cad smart garden has dll hijacking vulnerability

Shanghai Xiaomai Technology is an Internet software and engineering data service provider for the building decoration and related manufacturing industries in China. There is a dll hijacking vulnerability in cad smart garden. Attackers can use the vulnerability to load malicious dll and execute...

cad mini drawing suffers from dll hijacking vulnerability (CNVD-2019-33724)

Shanghai Xiaomai Technology is an Internet software and engineering data service provider for the building decoration and related manufacturing industries in China. A dll hijacking vulnerability exists in cad mini drawing CNVD-C-2019-128647. An attacker can exploit the vulnerability to load a...

cad mini home improvement suffers from dll hijacking vulnerability (CNVD-2019-33722)

Shanghai Xiaomai Technology is an Internet software and engineering data service provider for the building decoration and related manufacturing industries in China. There is a dll hijacking vulnerability in cad mini home decoration CNVD-C-2019-128671. An attacker can exploit the vulnerability to...

cad intelligent weak power has dll hijacking vulnerability

Shanghai Xiaomai Technology is an Internet software and engineering data service provider for the building decoration and related manufacturing industries in China. There is a dll hijacking vulnerability in cad intelligent weak power. Attackers can use this vulnerability to load malicious dll and...

cad mini viewer suffers from dll hijacking vulnerability (CNVD-2019-33721)

Shanghai Xiaomai Technology is an Internet software and engineering data service provider for the building decoration and related manufacturing industries in China. A dll hijacking vulnerability exists in cad mini viewer CNVD-C-2019-128672. An attacker can exploit the vulnerability to load a...

Baltimore’ 911 CAD system hacked; remained suspended for 17 hours

By Waqas The 911 dispatch system of Baltimore became the target of This is a post from HackRead.com Read the original post: Baltimore’ 911 CAD system hacked; remained suspended for 17 hours...

gdal/cad_fuzzer: Heap-buffer-overflow in OGRCADLayer::GetFeature

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5934311539736576 Project: gdal Fuzzer: aflgdalcadfuzzer Fuzz target binary: cadfuzzer Job Type: aflasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x61a000002fb0 Crash...

cad-helpdesk.de XSS vulnerability

Open Bug Bounty ID: OBB-548232 Description| Value ---|--- Affected Website:| cad-helpdesk.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Typo3 Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

gdal/cad_fuzzer: Heap-buffer-overflow in DWGFileRNUMBER::GetGeometry

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=4802112279019520 Project: gdal Fuzzer: aflgdalcadfuzzer Fuzz target binary: cadfuzzer Job Type: aflasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x602000001716 Crash...

cad-ausbildung.de XSS vulnerability

Open Bug Bounty ID: OBB-434506 Description| Value ---|--- Affected Website:| cad-ausbildung.de Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

IrfanView CADImage plugin buffer overflow vulnerability (CNVD-2017-33230)

IrfanView is an image viewer developed by Irfan Skiljan, a software developer from Bosnia and Herzegovina, which supports image browsing, image editing, image format conversion, etc. CADImage plugin is one of the plugins for viewing CAD files. A buffer overflow vulnerability exists in version...

IrfanView BabaCAD4Image plugin buffer overflow vulnerability (CNVD-2017-32371)

IrfanView is an image viewer developed by Irfan Skiljan, a software developer from Bosnia and Herzegovina, which supports image browsing, image editing, image format conversion, etc. BabaCAD4Image plugin is one of the plugins for reading DXF and DWG CAD files. A buffer overflow vulnerability exis...

IrfanView BabaCAD4Image plugin buffer overflow vulnerability (CNVD-2017-32362)

IrfanView is an image viewer developed by Irfan Skiljan, a software developer from Bosnia and Herzegovina, which supports image browsing, image editing, image format conversion, etc. BabaCAD4Image plugin is one of the plugins for reading DXF and DWG CAD files. A buffer overflow vulnerability exis...

IrfanView BabaCAD4Image plugin buffer overflow vulnerability (CNVD-2017-33235)

IrfanView is an image viewer developed by Irfan Skiljan, a software developer from Bosnia and Herzegovina, which supports image browsing, image editing, image format conversion, etc. BabaCAD4Image plugin is one of the plugins for reading DXF and DWG CAD files. A buffer overflow vulnerability exis...

IrfanView BabaCAD4Image plugin buffer overflow vulnerability (CNVD-2017-32363)

IrfanView is an image viewer developed by Irfan Skiljan, a software developer from Bosnia and Herzegovina, which supports image browsing, image editing, image format conversion, etc. BabaCAD4Image plugin is one of the plugins for reading DXF and DWG CAD files. A buffer overflow vulnerability exis...

CVE-2017-15783

XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address controls Branch Selection starting at CADImage+0x0000000000285ce1."...

CVE-2017-15765

IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at...

CVE-2017-15740

IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to "Data from Faulting Address controls Code Flow starting at CADIMAGE+0x000000000033228e."...

CVE-2017-15753

IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address controls Branch Selection starting at...