338 matches found
CVE-2020-7553
A CWE-787 Out-of-bounds Write vulnerability exists in IGSS Definition Def.exe version 14.0.0.20247 that could cause Remote Code Execution when malicious CGF Configuration Group File file is imported to IGSS Definition...
Out-of-bounds
A CWE-787: Out-of-bounds Write vulnerability exists in IGSS Definition Def.exe version 14.0.0.20247, that could cause Remote Code Execution when malicious CGF Configuration Group File file is imported to IGSS Definition...
Out-of-bounds
A CWE-787 Out-of-bounds Write vulnerability exists in IGSS Definition Def.exe version 14.0.0.20247 that could cause Remote Code Execution when malicious CGF Configuration Group File file is imported to IGSS Definition...
Out-of-bounds
A CWE-787 Out-of-bounds Write vulnerability exists in IGSS Definition Def.exe version 14.0.0.20247 that could cause Remote Code Execution when malicious CGF Configuration Group File file is imported to IGSS Definition...
Out-of-bounds
A CWE-787 Out-of-bounds Write vulnerability exists in IGSS Definition Def.exe version 14.0.0.20247 that could cause Remote Code Execution when malicious CGF Configuration Group File file is imported to IGSS Definition...
CVE-2020-7558
The CVE-2020-7558 entry concerns Schneider Electric IGSS Definition (Def.exe) version 14.0.0.20247 with an Out-of-bounds Write (CWE-787) that can lead to Remote Code Execution when a malicious CGF file is imported. Public sources (ZDI advisory and Red Hat/NVD/NVD-derived records) confirm the affe...
CVE-2020-7558
A CWE-787 Out-of-bounds Write vulnerability exists in IGSS Definition Def.exe version 14.0.0.20247 that could cause Remote Code Execution when malicious CGF Configuration Group File file is imported to IGSS Definition...
CVE-2020-7551
A CWE-787: Out-of-bounds Write vulnerability exists in IGSS Definition Def.exe version 14.0.0.20247, that could cause Remote Code Execution when malicious CGF Configuration Group File file is imported to IGSS Definition...
CVE-2020-7551
Schneider Electric IGSS exposes an out-of-bounds write in the IGSS Definition module (Def.exe) version 14.0.0.20247 when parsing a malicious CGF file, allowing Remote Code Execution. The vulnerability (CWE-787) affects Def.exe; exploitation requires user interaction (e.g., opening a malicious CGF...
CVE-2020-7563
A CWE-787: Out-of-bounds Write vulnerability exists in the Web Server on Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their Communication Modules see notification for details which could cause corruption of data, a crash, or code execution when uploading a specially crafted...
Out-of-bounds
A CWE-787: Out-of-bounds Write vulnerability exists in the Web Server on Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their Communication Modules see notification for details which could cause corruption of data, a crash, or code execution when uploading a specially crafted...
CVE-2020-7563
CVE-2020-7563 is an Out-of-bounds Write (CWE-787) vulnerability in Schneider Electric’s Modicon Web Server used on M340, Quantum, and Premium legacy products and their communication modules. The issue could allow data corruption, a crash, or code execution when a specially crafted FTP file is upl...
NVIDIA D3D10 driver nvwgf2umx_cfg.dll nvwg MOV code execution vulnerability
Summary An exploitable code execution vulnerability exists in the nvwg MOV functionality of the NVIDIA D3D10 driver, version 442.50 - 26.21.14.4250. A specially crafted shader can cause remote code execution. An attacker can use this vulnerability to guest-to-host escape through Hyper-V RemoteFX...
AMD Radeon DirectX 11 Driver atidxx64.dll Shader Functionality DCL_OUTPUT Code Execution Vulnerability
Summary An exploitable code execution vulnerability exists in the Shader functionality of AMD Radeon DirectX 11 Driver atidxx64.dll 26.20.15019.19000. An attacker can provide a a specially crafted shader file to trigger this vulnerability, resulting in code execution. This vulnerability can be...
Intel IGC64.DLL shader functionality DCL_INDEXABLETEMP code execution vulnerability
Summary An exploitable memory corruption vulnerability exists in Intel’s IGC64.DLL graphics driver, version 26.20.100.7584. A specially crafted vertex shader can cause an out-of-bounds write, which could lead to arbitrary code execution. An attacker can provide a specially crafted shader file to...
AMD Radeon DirectX 11 Driver atidxx64.dll Shader Functionality ROUND_NI Code Execution Vulnerability
Summary An exploitable code execution vulnerability exists in the Shader functionality of AMD Radeon DirectX 11 Driver atidxx64.dll 26.20.15019.19000. An attacker can provide a a specially crafted shader file to trigger this vulnerability, resulting in code execution. This vulnerability can be...
Leadtools Image Parser Animated Icon Code Execution Vulnerability
Summary An exploitable code execution vulnerability exists in the ANI file format parser of Leadtools 20. A specially crafted ANI file can cause a buffer overflow resulting in remote code execution. An attacker can provide a malicious file to trigger this vulnerability. Tested Versions Leadtools ...
CVE-2020-7502
A CWE-787: Out-of-bounds Write vulnerability exists in Modicon M218 Logic Controller Firmware version 4.3 and prior, which may cause a Denial of Service when specific TCP/IP crafted packets are sent to the Modicon M218 Logic Controller...
NVIDIA D3D10 Driver nvwgf2umx_cfg.dll nvwg FTOI code execution vulnerability
Summary An exploitable code execution vulnerability exists in the nvwg functionality of NVIDIA Corporation NVIDIA D3D10 driver nvwgf2umxcfg.dll, version 442.50 - 26.21.14.4250. A specially crafted shader could allow an adversary to execute remote code. An attacker can use this vulnerability to...
LEADTOOLS DICOM UI Parsing Code Execution Vulnerability
Summary An exploitable heap out of bounds write vulnerability exists in the UI tag parsing functionality of the DICOM image format of LEADTOOLS 20. A specially crafted DICOM image can cause an offset beyond the bounds of a heap allocation to be written, potentially resulting in code execution. An...