CVE-2024-50400 QTS, QuTS hero

A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to obtain secret data or modify memory. We have already fixed the...

CVE-2024-50400 QTS, QuTS hero

A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to obtain secret data or modify memory. We have already fixed the...

CVE-2024-50400

CVE-2024-50400 affects QNAP QTS and QuTS hero where a use of externally-controlled format string vulnerability exists in the system. The root cause is a format string handling issue that could allow a remote attacker with administrator access to obtain secret data or modify memory. Affected detai...

CVE-2024-50401 QTS, QuTS hero

A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to obtain secret data or modify memory. We have already fixed the...

CVE-2024-50401 QTS, QuTS hero

A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to obtain secret data or modify memory. We have already fixed the...

CVE-2024-50401

Summary: CVE-2024-50401 is a use of externally-controlled format string vulnerability affecting QNAP QTS and QuTS hero. Affected components/versions (as stated): QTS 5.2.1.2930 build 20241025 and later; QuTS hero h5.2.1.2929 build 20241025 and later. Root cause/impact (as described): allows remot...

OESA-2024-2455 ghostscript security update

Ghostscript is an interpreter for PostScript™ and Portable Document Format PDF files. Ghostscript consists of a PostScript interpreter layer, and a graphics library. Security Fixes: Artifex Ghostscript before 10.03.0 sometimes has a stack-based buffer overflow via the CIDFSubstPath and...

OESA-2024-2457 ghostscript security update

Ghostscript is an interpreter for PostScript™ and Portable Document Format PDF files. Ghostscript consists of a PostScript interpreter layer, and a graphics library. Security Fixes: Artifex Ghostscript before 10.03.0 sometimes has a stack-based buffer overflow via the CIDFSubstPath and...

Tungsten Automation Power PDF security vulnerability

Tungsten Automation Power PDF Kofax Power PDF is a powerful PDF processing software from Tungsten Automation, Inc. A security vulnerability exists in Tungsten Automation Power PDF, which stems from a heap-based buffer overflow problem contained in the parsing of PDF files. An attacker exploiting...

IrfanView security vulnerabilities

IrfanView is an image viewer by the individual developer Irfan Skiljan. It supports image browsing, image editing, image format conversion and more. IrfanView suffers from a security vulnerability that stems from the DXF file parsing feature containing a memory corruption issue. An attacker...

IrfanView security vulnerabilities

IrfanView is an image viewer. It supports image browsing, image editing, image format conversion and so on. IrfanView suffers from an out-of-bounds write vulnerability that stems from the DXF file parsing function containing a memory corruption issue. An attacker could exploit this vulnerability ...

IrfanView security vulnerabilities

IrfanView is an image viewer. It supports image browsing, image editing, image format conversion and so on. A type-obfuscated remote code execution vulnerability exists in IrfanView DXF file parsing, which is caused by a lack of proper validation of user-supplied data and can be exploited by an...

QNAP Systems QTS and QuTS: Vulnerability due to formatting string errors

QNAP Systems QTS and QNAP Systems QuTS hero are both products of China Weilian Technology QNAP Systems.QNAP Systems QTS is an entry operating system.QNAP Systems QuTS hero is an operating system. A format string error vulnerability exists in QNAP Systems QTS prior to version 5.2.1.2930 build...

QNAP Systems QTS and QuTS: Vulnerability due to formatting string errors

QNAP Systems QTS and QNAP Systems QuTS hero are both products of China Weilian Technology QNAP Systems.QNAP Systems QTS is an entry operating system.QNAP Systems QuTS hero is an operating system. A format string error vulnerability exists in QNAP Systems QTS prior to version 5.2.1.2930 build...

CVE-2024-50401: Use of Externally-Controlled Format String

A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to obtain secret data or modify memory. We have already fixed the...

CVE-2024-50400: Use of Externally-Controlled Format String

A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to obtain secret data or modify memory. We have already fixed the...

PT-2024-34176 · Qnap · Qnap Qts +1

Name of the Vulnerable Software and Affected Versions: QNAP QTS versions prior to 5.2.1.2930 build 20241025 QNAP QuTS hero versions prior to h5.2.1.2929 build 20241025 Description: A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system...

PT-2024-34174 · Qnap · Qnap Qts +1

Name of the Vulnerable Software and Affected Versions: QNAP QTS versions prior to 5.2.1.2930 build 20241025 QNAP QuTS hero versions prior to h5.2.1.2929 build 20241025 Description: A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system...

Tungsten Automation Power PDF buffer error vulnerability

Tungsten Automation Power PDF Kofax Power PDF is a powerful PDF processing software from Tungsten Automation. Tungsten Automation Power PDF suffers from a buffer error vulnerability that stems from the parsing of PDF files containing a memory corruption issue. An attacker could exploit this...

Tungsten Automation Power PDF buffer error vulnerability

Tungsten Automation Power PDF Kofax Power PDF is a powerful PDF processing software from Tungsten Automation. Tungsten Automation Power PDF suffers from a buffer error vulnerability that stems from the parsing of BMP files containing an out-of-bounds write issue. An attacker exploiting this...