CVE-2020-23558

IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptionsW+0x0000000000007f4b...

CVE-2020-23558

CVE-2020-23558 affects IrfanView 4.54. The vulnerability is a user-mode write access violation triggered in FORMATS!ShowPlugInSaveOptions_W+0x7f4b. The available data indicate a local attack vector with no user interaction, and CVSS 3.1 base metrics assign a HIGH impact on confidentiality, integr...

CVE-2020-23557

Affected software: IrfanView 4.54. The vulnerability is a user‑mode write access violation in FORMATS!ShowPlugInSaveOptions_W+0x755d. CVE-2020-23557 documentation indicates a high impact (confidentiality, integrity, and availability) with local exploit conditions and low attack complexity, no use...

CVE-2020-23556

IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e28...

CVE-2020-23556

IrfanView 4.54 is affected by CVE-2020-23556 due to a user-mode write access violation in the FORMATSS!GetPlugInInfo function, which is the root cause identified across multiple records. The vulnerability involves IrfanView’s plugin formats handling, resulting in a local access violation that can...

CVE-2020-23555

IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e6e...

CVE-2020-23554

IrfanView 4.54 contains a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x7e20, exposed locally with no user interaction required (CVSSv3.1 base score 7.8, HIGH). The vulnerability affects the IrfanView 4.54 format/plugin handling as described in CVE-2020-23554; exploitation ...

CVE-2020-23553

IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007d33...

CVE-2020-23552

IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e62...

CVE-2020-23551

IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e30...

CVE-2020-23551

IrfanView 4.54 is affected by a user-mode write access violation that starts at FORMATS!GetPlugInInfo+0x0000000000007e30. The vulnerability is indicated in multiple sources (CVE-2020-23551) with a HIGH severity (CVSS 3.1: AV=L/AC=L/PR=L/UI=N/S:U/C:H/I:H/A:H) and is classified as a local exploit w...

CVE-2020-23550

IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e82...

[SECURITY] Fedora 37 Update: tcpreplay-4.4.2-1.fc37

Tcpreplay is a tool to replay captured network traffic. Currently, tcpreplay supports pcap tcpdump and snoop capture formats. Also included, is tcpprep a tool to pre-process capture files to allow increased performance under certain conditions as well as capinfo which provides basic information...

Aura - Python Source Code Auditing And Static Analysis On A Large Scale

Source code auditing and static code analysis Aura is a static analysis framework developed as a response to the ever-increasing threat of malicious packages and vulnerable code published on PyPI. Project goals: provide an automated monitoring system over uploaded packages to PyPI, alert on...

Libraw 缓冲区错误漏洞

Libraw is a C++ library from Libraw Inc. for processing RAW CRW/CR2, NEF, RAF, DNG, andothers format images on various operating systems. A security vulnerability exists in Libraw, which is caused by an out-of-bounds write in the "newnode" function...

[SECURITY] Fedora 36 Update: OpenImageIO-2.3.18.0-2.fc36

OpenImageIO is a library for reading and writing images, and a bunch of relat ed classes, utilities, and applications. Main features include: - Extremely simple but powerful ImageInput and ImageOutput APIs for reading a nd writing 2D images that is format agnostic. - Format plugins for TIFF,...

[SECURITY] Fedora 35 Update: OpenImageIO-2.2.21.0-2.fc35

OpenImageIO is a library for reading and writing images, and a bunch of relat ed classes, utilities, and applications. Main features include: - Extremely simple but powerful ImageInput and ImageOutput APIs for reading a nd writing 2D images that is format agnostic. - Format plugins for TIFF,...

node-js-font-converter 安全漏洞

node-js-font-converter is a FontForge wrapper for zgec individual developers. It allows conversion between different font formats TTF, WOFF, OTF. A security vulnerability exists in all versions of the node-js-font-converter package, which stems from a lack of sanitization of input that may be...

AZL-45324 CVE-2021-23159 affecting package sox 14.4.2.0-34

A vulnerability was found in SoX, where a heap-buffer-overflow occurs in function lsxreadwbuf in formatsi.c file. The vulnerability is exploitable with a crafted file, that could cause an application to crash...

Fedora: Security Advisory for ghostscript (FEDORA-2022-d287230630)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...