CVE-2021-43013

Adobe Media Encoder version 15.4.1 and earlier are affected by a memory corruption vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a...

Memory corruption

Adobe Media Encoder version 15.4.1 and earlier are affected by a memory corruption vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a...

CVE-2021-43013 Adobe Media Encoder memory corruption vulnerability could lead to remote code execution

Adobe Media Encoder version 15.4.1 and earlier are affected by a memory corruption vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a...

CVE-2021-43013 Adobe Media Encoder memory corruption vulnerability could lead to remote code execution

Adobe Media Encoder version 15.4.1 and earlier are affected by a memory corruption vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a...

CVE-2021-43013

CVE-2021-43013 affects Adobe Media Encoder 15.4.1 and earlier, with a memory corruption vulnerability that could lead to arbitrary code execution in the current user context. Exploitation requires the victim to open a malicious file (user interaction). Multiple connected advisories corroborate th...

Adobe Media Encoder 资源管理错误漏洞

Adobe Media Encoder is an audio and video encoding application from Adobe.Adobe Media Encoder in version 15.4 and earlier is vulnerable to a memory corruption vulnerability that stems from incorrect restrictions on operations within the context of a memory buffer vulnerability. An unauthenticated...

PT-2021-5508

Name of the Vulnerable Software and Affected Versions Acrobat Bridge versions 11.1.1 and earlier Adobe Media Encoder version 15.4 and earlier Description The issue is related to a use-after-free vulnerability in the processing of Format event actions and a memory corruption vulnerability that cou...

PT-2021-5509

Name of the Vulnerable Software and Affected Versions Adobe Bridge versions 11.1.1 and earlier Adobe Media Encoder versions 15.4 and earlier Description The issue is related to a memory corruption vulnerability due to insecure handling of a malicious M4A file, potentially resulting in arbitrary...

CVE-2021-43013: Access of Memory Location After End of Buffer

Adobe Media Encoder version 15.4.1 and earlier are affected by a memory corruption vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a...

Adobe Media Encoder 缓冲区错误漏洞

Adobe Media Encoder, an audio and video encoding application from Adobe, has a security vulnerability in Adobe Media Encoder 15.4 and earlier versions that could be exploited by attackers to trick current users into opening specially crafted files to execute arbitrary code...

Adobe Media Encoder Buffer Overflow

The vulnerability of the Adobe Media Encoder application relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code in the context of the current user, using a specially created file...

jasper: Heap-based buffer overflow in cp_create() in jpc_enc.c

A flaw was found in the Jasper tool’s jpc encoder. This flaw allows an attacker to craft input provided to Jasper, causing an arbitrary out-of-bounds write. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability...

openjpeg: heap-buffer-overflow write in opj_tcd_dc_level_shift_encode()

A flaw was found in OpenJPEG’s encoder. This flaw allows an attacker to pass specially crafted x,y offset input to OpenJPEG to use during encoding. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability...

openjpeg: integer overflow in opj_j2k_setup_encoder function in openjp2/j2k.c

In OpenJPEG 2.3.0, there is an integer overflow caused by an out-of-bounds left shift in the opjj2ksetupencoder function openjp2/j2k.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file...

imagemagick:encoder_dng_fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5975982159298560 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderdngfuzzer Job Type: libfuzzerasani386imagemagick Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xbebebed2 Crash State: NULL Sanitizer: address ASAN...

FusionPBX 4.5.29 - Remote Code Execution (Authenticated) Exploit

Exploit Title: FusionPBX 4.5.29 - Remote Code Execution RCE Authenticated Exploit Author: Luska Vendor Homepage: https://www.fusionpbx.com/ Software Link: https://github.com/fusionpbx/fusionpbx Version: 4.5.30 Tested on: Debian CVE : CVE-2021-43405 !/usr/bin/python3 import requests from...

Adobe Media Encoder memory corruption vulnerability

A memory corruption vulnerability exists in Adobe Media Encoder, an audio and video encoding application from Adobe, which stems from a boundary error when handling untrusted input. An attacker could use this vulnerability to trigger memory corruption and execute arbitrary code on the target syst...

Adobe Media Encoder 缓冲区错误漏洞

A memory corruption vulnerability exists in Adobe Media Encoder, an audio and video encoding application from Adobe, which stems from a boundary error when handling untrusted input. An attacker could use this vulnerability to trigger memory corruption and execute arbitrary code on the target syst...

imagemagick:encoder_heic_fuzzer: Stack-buffer-overflow in void apply_sao_internal<unsigned short>

Detailed Report: https://oss-fuzz.com/testcase?key=5353262910930944 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzerasani386imagemagick Platform Id: linux Crash Type: Stack-buffer-overflow READ 4 Crash Address: 0xeeb00f0c Crash State: void...

Adobe Media Encoder < 15.4.2 Multiple Vulnerabilities (APSB21-99)

The version of Adobe Media Encoder installed on the remote Windows host is prior to 15.4.2. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB21-99 advisory. - Adobe Media Encoder version 15.4.1 and earlier are affected by a memory corruption vulnerability. An...