Microsoft Office Memory Corruption Vulnerability

Microsoft Office contains a memory corruption vulnerability that allows remote attackers to execute arbitrary code via a crafted document...

Debian DLA-2908-1 : librecad - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2908 advisory. Several security vulnerabilities have been discovered in librecad, a computer-aided design CAD system. Buffer overflows may lead to remote code execution if a...

iText 缓冲区错误漏洞

iText is an open source library for creating and manipulating PDF files in Java. It is written by Bruno Lowagie, Paulo Soares and others. A buffer error vulnerability exists in iText that stems from the iText v7.1.17 component readStreamBytesRaw contains an out-of-memory error that can be exploit...

CVE-2021-45846

A flaw in the AMF parser of Slic3r libslic3r 1.3.0 allows an attacker to cause an application crash using a crafted AMF document, where a metadata tag lacks a "type" attribute...

CVE-2021-45846

A flaw in the AMF parser of Slic3r libslic3r 1.3.0 allows an attacker to cause an application crash using a crafted AMF document, where a metadata tag lacks a "type" attribute...

CVE-2021-45846

A flaw in the AMF parser of Slic3r libslic3r 1.3.0 allows an attacker to cause an application crash using a crafted AMF document, where a metadata tag lacks a "type" attribute...

CVE-2021-45846

The CVE-2021-45846 vulnerability affects Slic3r’s libslic3r 1.3.0: an AMF parser flaw where a metadata tag is missing a type attribute can cause an application crash when processing a crafted AMF document. This is rooted in the AMF parser handling malformed metadata tags, leading to denial of ser...

CVE-2021-45845

The Path Sanity Check script of FreeCAD 0.19 is vulnerable to OS command injection, allowing an attacker to execute arbitrary commands via a crafted FCStd document...

Slic3r 代码问题漏洞

slic3r is a slic3r open source 3D printing toolkit used to convert various 3-D print model file types to printer-specific machine code. slic3r version 1.3.0 has a denial-of-service vulnerability in the AMF parser that stems from not properly handling incoming error messages. An attacker could use...

The vulnerability of the library for viewing, printing, rendering, creating, and processing PDF files. The PDFTron SDK is software for modeling, designing, and drafting in AutoCAD. This vulnerability relates to errors in the mechanism for checking path searching for dynamically attached libraries, allowing a perpetrator to execute arbitrary code.

The vulnerability of the library for viewing, printing, rendering, creating, and processing PDF files is related to errors in the mechanism for checking the path to dynamically linked libraries DLLs. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by opening a...

FreeCad 操作系统命令注入漏洞

FreeCad is a free and open source general-purpose parametric 3D Cad modeler from the FreeCad community and supports the Finite Element Method of building information modeling software. A security vulnerability exists in FreeCAD 0.19 that allows attackers to execute arbitrary commands via a crafte...

Xerces 安全漏洞

Xerces is an organization promoted by Apache an XML document parsing open source project . A denial of service vulnerability exists in the XML parser in Apache Xerces Java version 2.12.1 and prior versions, which stems from a failure to properly handle incoming error messages, and can be exploite...

CVE-2022-23850

xhtmltranslateentity in xhtml.c in epub2txt aka epub2txt2 through 2.02 allows a stack-based buffer overflow via a crafted EPUB document...

CVE-2022-20698

A vulnerability in the OOXML parsing module in Clam AntiVirus ClamAV Software version 0.104.1 and LTS version 0.103.4 and prior versions could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to improper checks that m...

Adobe Acrobat and Reader 资源管理错误漏洞

Adobe Acrobat, a PDF file editing and conversion tool from Adobe, is vulnerable to a resource management error in Adobe Acrobat and Reader, which results from a post-release usage error when processing PDF files. A remote attacker could exploit the vulnerability to create a specially crafted PDF...

Adobe Acrobat and Reader 资源管理错误漏洞

Adobe Acrobat is the United States of America Odo than Adobe company's set of PDF file editing and conversion tools. A resource management error vulnerability exists in Adobe Acrobat and Reader, which stems from a post-release usage error when processing PDF files. An attacker could exploit this...

Adobe Acrobat Reader Dc 代码问题漏洞

Adobe Acrobat Reader Dc is a Pdf reading tool from Adobe USA. Used to reliably view, print and annotate Pdf documents. Adobe Acrobat Reader Dc has a code issue vulnerability that stems from a NULL pointer dereference error. A remote attacker could use the vulnerability to trick victims into openi...

Adobe Acrobat Reader Dc缓冲区错误漏洞

Adobe Acrobat Reader Dc is a Pdf reading tool from Adobe. Adobe Acrobat Reader Dc suffers from a buffer overflow vulnerability that originates from a boundary error when handling untrusted input. A remote attacker could exploit the vulnerability by creating a specially crafted PDF file, tricking...

Adobe Acrobat Reader Dc 缓冲区错误漏洞

Adobe Acrobat Reader Dc is a Pdf reading tool from Adobe. Adobe Acrobat Reader Dc has a buffer overflow vulnerability that can be exploited by an attacker to trick a victim into opening a carefully constructed PDF file, triggering an out-of-bounds read error and reading the contents of system...

The vulnerability of the Foxit PDF Reader and Foxit PDF Editor programs arises from a buffer out-of-bounds exception, allowing an attacker to execute arbitrary code.

The vulnerability of Foxit PDF Reader and Foxit PDF Editor lies in the execution of an operation outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the target system by having the user open a specially crafted PDF file...