Lucene search
K

8 matches found

OSV
OSV
added 2021/08/13 11:15 p.m.0 views

CVE-2021-21812

A stack-based buffer overflow vulnerability exists in the command-line-parsing HandleFileArg functionality of AT&T Labs’ Xmill 0.7. Within the function HandleFileArg the argument filepattern is under control of the user who passes it in from the command line. filepattern is passed directly to...

7.8CVSS7.8AI score0.0006EPSS
Exploits1References1
OSV
OSV
added 2021/08/13 11:15 p.m.0 views

CVE-2021-21815

A stack-based buffer overflow vulnerability exists in the command-line-parsing HandleFileArg functionality of AT&T Labs' Xmill 0.7. Within the function HandleFileArg the argument filepattern is under control of the user who passes it in from the command line. filepattern is passed directly to...

7.8CVSS6.2AI score
Exploits0References1
Prion
Prion
added 2021/08/13 11:15 p.m.12 views

Design/Logic Flaw

Within the function HandleFileArg the argument filepattern is under control of the user who passes it in from the command line. filepattern is passed directly to strlen to determine the ending location of the char passed in by the user, no checks are done to see if the passed in char is longer th...

4.6CVSS7.9AI score0.00136EPSS
Exploits1References1Affected Software1
CNNVD
CNNVD
added 2021/08/12 12:0 a.m.2 views

AT&T Labs Xmill 缓冲区错误漏洞

Xmill is an efficient compressor of XML data. a stack buffer overflow vulnerability exists in the command line parsing HandleFileArg function in Xmill version 0.7. An attacker could exploit the vulnerability by providing malicious input via the filepattern parameter to cause a denial of service...

7.8CVSS6AI score0.0006EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2021/08/10 12:0 a.m.2 views

PT-2021-7818 · Xmill · Xmill

Name of the Vulnerable Software and Affected Versions: Xmill affected versions not specified Description: The issue is related to the function HandleFileArg in the Xmill XML compression tool, which is vulnerable to exploitation due to the lack of checks on user-provided input. Specifically, the...

7.8CVSS7.8AI score0.00136EPSS
Exploits1References7
Positive Technologies
Positive Technologies
added 2021/08/10 12:0 a.m.1 views

PT-2021-7822 · Xmill · Xmill

Name of the Vulnerable Software and Affected Versions: Xmill version 0.7 Description: A stack-based buffer overflow issue exists in the command-line-parsing HandleFileArg functionality. The filepattern argument, which is under user control, is passed to strcpy without length checks, leading to a...

7.8CVSS8.3AI score0.0006EPSS
Exploits1References8
Positive Technologies
Positive Technologies
added 2021/08/10 12:0 a.m.1 views

PT-2021-7821 · Xmill · Xmill

Name of the Vulnerable Software and Affected Versions: Xmill version 0.7 Description: The issue is related to a stack-based buffer overflow in the HandleFileArg functionality of Xmill, which occurs due to insufficient length checks when copying user-provided input into a statically sized buffer...

7.8CVSS8.3AI score0.0006EPSS
Exploits1References9
Positive Technologies
Positive Technologies
added 2021/08/10 12:0 a.m.2 views

PT-2021-7823 · Xmill · Xmill

Name of the Vulnerable Software and Affected Versions: Xmill affected versions not specified Description: The issue is related to a memory boundary error in the HandleFileArg function of the Xmill XML compression tool when processing an XML file. This can be exploited by a local attacker to execu...

7.8CVSS7.9AI score0.0006EPSS
Exploits1References7
Rows per page
Query Builder