PT-2020-3942 · Microsoft · Windows Gdi +1

Name of the Vulnerable Software and Affected Versions: Windows GDI affected versions not specified Description: The issue is related to the improper handling of objects in memory by the Windows GDI component, which can lead to information disclosure. An attacker could exploit this by convincing a...

EulerOS Virtualization 3.0.6.0 : ghostscript (EulerOS-SA-2020-1738)

According to the version of the ghostscript package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - The InsMIRP function in base/ttinterp.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of servic...

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to memory usage after it is released. This allows attackers to execute arbitrary code.

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015/Reader 2015 is related to the use of memory after it is freed. Exploiting this vulnerability allow...

The vulnerability of the Windows Media Foundation component in Windows operating systems allows attackers to install programs, view, modify, or delete data with the privileges of a legitimate user.

The vulnerability of the Windows Media Foundation component in Windows operating systems arises from operations that occur outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to install programs, view, modify, or delete data with the privileges of a legitimate use...

Apache OpenOffice -- Unrestricted actions leads to arbitrary code execution in crafted documents

The Apache Openofffice project reports: CVE-2020-13958 Unrestricted actions leads to arbitrary code execution in crafted documents Description A vulnerability in Apache OpenOffice scripting events allows an attacker to construct documents containing hyperlinks pointing to an executable on the...

MS15-128: Description of the security update for the .NET Framework 3.5 in Windows 8.1 and Windows Server 2012 R2: December 8, 2015

MS15-128: Description of the security update for the .NET Framework 3.5 in Windows 8.1 and Windows Server 2012 R2: December 8, 2015 View products that this article applies to. Summary This update resolves vulnerabilities in the Microsoft .NET Framework. The vulnerabilities could allow remote code...

CVE-2019-16338

The tfocommon component in HwordApp.dll in Hancom Office 9.6.1.7634 allows a use-after-free via a crafted .docx file...

The vulnerability of the Graphics Device Interface (GDI) component in Windows operating systems allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Graphics Device Interface GDI component in Windows operating systems is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, working remotely, to gain unauthorized access to protected information through a specially...

The vulnerability of the Media Foundation component in Windows operating systems allows a hacker to gain access and modify data.

The vulnerability of the Media Foundation component in Windows operating systems is related to incorrect handling of objects in memory. Exploiting this vulnerability can allow an attacker to gain access to, modify, or delete data through a specially created document or a specially created web pag...

The vulnerability of the Graphics Device Interface (GDI) component in Windows operating systems allows a hacker to gain full control over the system or execute arbitrary code.

The vulnerability of the Graphics Device Interface GDI component in Windows operating systems is related to incorrect handling of objects in memory. Exploiting this vulnerability can allow an attacker to gain full control over the system or execute arbitrary code using a specially created documen...

WAGO PFC 200 Data Forgery Problem Vulnerability

The WAGO PFC 200 is a programmable logic controller PLC from the German company WAGO. A remote code execution vulnerability exists in the cloud connectivity feature of the WAGO PFC 200 using firmware versions 03.02.0214, 03.01.0713, and 03.00.3912. The vulnerability can be exploited by an attacke...

Google Chrome Heap Corruption Vulnerability (CNVD-2020-05126)

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A heap corruption vulnerability exists in Google Chrome versions prior to 80.0.3987.87. The vulnerability stems from the use of uninitialized data by PDFium in Goog...

USN-4273-1 python-reportlab vulnerability

It was discovered that ReportLab incorrectly handled certain XML documents. If a user or automated system were tricked into processing a specially crafted document, a remote attacker could possibly use this issue to execute arbitrary code...

Microsoft Windows GDI Information Leakage Vulnerability

Microsoft Windows is a family of operating systems from Microsoft. An information disclosure vulnerability exists in Microsoft Windows GDI. An attacker could exploit this vulnerability by obtaining information in a variety of ways, including tricking a user into opening a specially crafted docume...

Microsoft Windows GDI Information Leakage Vulnerability (CNVD-2020-02185)

Microsoft Windows is a family of operating systems from Microsoft. An information leakage vulnerability exists in Microsoft Windows GDI. An attacker could exploit this vulnerability by obtaining information through a variety of methods, including tricking a user into opening a specially crafted...

Microsoft Excel Information Leakage Vulnerability

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. An information disclosure vulnerability exists in Microsoft Excel. An attacker can exploit this vulnerability to compromise a user's computer or data with the help of specially crafted document files...

Microsoft Windows Graphics Device Interface Information Disclosure Vulnerability (CNVD-2019-45917)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. Windows Graphics Device Interface GDI is one of the graphic device interfaces. An...

Windows GDI Information Disclosure Vulnerability

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. There are multiple ways an attacker could explo...

The vulnerability of the DirectWrite programming interface in Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the DirectWrite programming interface in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially crafted document or web page...

Windows GDI Information Disclosure Vulnerability

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. There are multiple ways an attacker could explo...