Lucene search
+L

26 matches found

FreeBSD
FreeBSD
added 2021/12/28 12:00 a.m.18 views

librecad -- out-of-bounds read in importshp plugin

Albin Eldstål-Ahrens reports: An out-of-bounds read on a heap buffer in the importshp plugin may allow an attacker to read sensitive data via a crafted DBF file...

5.5CVSS6.8AI score0.00318EPSS
SaveExploits1References1
Prion
Prion
added 2021/10/01 1:15 p.m.24 views

Buffer overflow

Scalabium dBase Viewer version 2.6 Build 5.751 is vulnerable to remote code execution via a crafted DBF file that triggers a buffer overflow. An attacker can use the Structured Exception Handler SEH records and redirect execution to attacker-controlled code...

6.8CVSS7.9AI score0.01251EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/10/01 12:54 p.m.40 views

CVE-2021-35297

Scalabium dBase Viewer version 2.6 Build 5.751 is vulnerable to remote code execution via a crafted DBF file that triggers a buffer overflow. An attacker can use the Structured Exception Handler SEH records and redirect execution to attacker-controlled code...

8.2AI score0.01251EPSS
SaveExploits0References1
CVE
CVE
added 2021/10/01 12:54 p.m.55 views

CVE-2021-35297

CVE-2021-35297 affects Scalabium dBase Viewer 2.6 (Build 5.751). It is vulnerable to remote code execution via a crafted DBF file that triggers a buffer overflow, enabling an attacker to direct execution through SEH records. The available documents describe the vulnerability and its exploit path ...

7.8CVSS7.9AI score0.01251EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/09/23 8:10 a.m.42 views

CVE-2021-33035 Buffer overflow from a crafted DBF file

Apache OpenOffice opens dBase/DBF documents and shows the contents as spreadsheets. DBF are database files with data organized in fields. When reading DBF data the size of certain fields is not checked: the data is just copied into local variables. A carefully crafted document could overflow the...

8AI score0.50563EPSS
SaveExploits0References4
Zero Day Initiative
Zero Day Initiative
added 2019/09/10 12:00 a.m.35 views

Microsoft Windows JET Database Engine Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the JET database...

7CVSS4.1AI score0.11924EPSS
SaveExploits0References1
Rows per page
Query Builder