CVE-2020-6328: Improper Restriction of Operations within the Bounds of a Memory Buffer

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated CGM file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

cgm-arena.de Cross Site Scripting vulnerability

Security Researcher raviakp1004 Helped patch 490 vulnerabilities Received 3 Coordinated Disclosure badges Received 4 recommendations , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting cgm-arena.de website and its users. Following coordinate...

libreoffice:cgmfuzzer: Heap-buffer-overflow in CGM::ImplDoClass7

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=5658636202541056 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: cgmfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 9 Crash...

libreoffice:cgmfuzzer: Heap-use-after-free in CGM::ImplDoClass7

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=5681761959018496 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: cgmfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-use-after-free WRITE 9 Crash...

cgm-arena.de XSS vulnerability

Open Bug Bounty ID: OBB-626114 Description| Value ---|--- Affected Website:| cgm-arena.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

libreoffice/cgmfuzzer: Heap-buffer-overflow in CGM::ImplDoClass7

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5741937450549248 Project: libreoffice Fuzzer: libFuzzerlibreofficecgmfuzzer Fuzz target binary: cgmfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-buffer-overfl...

libreoffice: Heap-buffer-overflow in CGM::ImplDoClass4

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=6107955046907904 Project: libreoffice Fuzzer: libFuzzerlibreofficecgmfuzzer Fuzz target binary: cgmfuzzer Job Type: libfuzzerasanlibreofficeuntrusted Platform Id: linux Crash Type:...

libreoffice: Heap-use-after-free in Bundle::GetIndex

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5288817537843200 Project: libreoffice Fuzzer: libFuzzerlibreofficecgmfuzzer Fuzz target binary: cgmfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-use-after-fre...

Halliburton LogView Pro 9.7.5 - '.cgm' / '.tif' / '.tiff' / '.tifh' Crash (PoC)

Exploit Title: Haliburton LogView Pro v9.7.5 Exploit Author: Karn Ganeshen Download link: http://www.halliburton.com/public/lp/contents/InteractiveTools/web/Toolkits/lp/HalliburtonLogViewer.exe Version: Current version 9.7.5 Tested on: Windows Vista Ultimate SP2 Open cgm/tif/tiff/tifh file -...

Microsoft Graphics Filters CGM Image Converter Buffer Overrun (MS10-105) - Ver2 (CVE-2010-3945)

Computer Graphics Metafile CGM is a free and open international standard file format for 2D vector graphics, raster graphics, and text. A remote code execution vulnerability has been discovered in the way that Microsoft Office allocates buffer size when handling CGM image files. The vulnerability...

CVE-2012-2524

Microsoft Office 2007 SP2 and SP3 and 2010 SP1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted Computer Graphics Metafile CGM file, aka "CGM File Format Memory Corruption Vulnerability."...

Memory corruption

Microsoft Office 2007 SP2 and SP3 and 2010 SP1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted Computer Graphics Metafile CGM file, aka "CGM File Format Memory Corruption Vulnerability."...

CVE-2012-2524

Microsoft Office 2007 SP2 and SP3 and 2010 SP1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted Computer Graphics Metafile CGM file, aka "CGM File Format Memory Corruption Vulnerability."...

CVE-2012-2524

The CVE-2012-2524 issue affects Microsoft Office 2007 SP2/SP3 and Office 2010 SP1 (32/64-bit) where parsing a crafted CGM file triggers memory corruption, enabling remote code execution or memory denial of service. Root cause: memory corruption during CGM processing in Office components (mso.dll/...

PT-2012-4081

Name of the Vulnerable Software and Affected Versions Microsoft Office versions 2007 SP2 through 2007 SP3 Microsoft Office version 2010 SP1 Description A remote code execution issue exists in the way Microsoft Office handles specially crafted Computer Graphics Metafile CGM graphics files. This...

Microsoft Office Remote Code Execution Vulnerability (2731879)

This host is missing an important security update according to Microsoft Bulletin MS12-057. OpenVAS Vulnerability Test $Id: secpodms12-057.nasl 5958 2017-04-17 09:02:19Z teissa $ Microsoft Office Remote Code Execution Vulnerability 2731879 Authors: Antu Sanadi Copyright: Copyright c 2012 SecPod,...

CVE-2012-2524: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Office 2007 SP2 and SP3 and 2010 SP1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted Computer Graphics Metafile CGM file, aka "CGM File Format Memory Corruption Vulnerability."...

Microsoft Office Remote Code Execution Vulnerability (2731879)

This host is missing an important security update according to Microsoft Bulletin MS12-057. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Office Memory Corruption CVE-2012-2524 Remote Code Execution Vulnerability

Description Microsoft Office is prone to a remote code-execution vulnerability due to a memory-corruption error. Attackers can exploit this issue by enticing an unsuspecting user to open a specially crafted Computer Graphics Metafile CGM graphics file. Successful exploits may allow attackers to...

CVE-2010-3945

Buffer overflow in the CGM image converter in the graphics filters in Microsoft Office XP SP3, Office 2003 SP3, and Office Converter Pack allows remote attackers to execute arbitrary code via a crafted CGM image in an Office document, aka "CGM Image Converter Buffer Overrun Vulnerability."...