2457 matches found
CVE-2016-0040
CVE-2016-0040 이 익스플로잇은 SMMRootkit의 32비트 프로젝트https://github.com/Rootkitsmm/cve-2016-0040를 기반으로 하며, 이 취약점은 RCX에 모든 'a'와 RAX에 모든 'B'를 넣어 BSoD를 유발합니다. 이는 64비트 Windows 7 SP1로 포팅되었으며, 초기 단계 익스플로잇에 "mov rcx+06h, rax" 명령어를 사용하지 않고 대신 "mov rdx+8h, rdx 명령어를 사용하여 셀프 참조 포인터를 비트맵의 pvScan0 변수에 배치합니다. 부작용 손상을...
BrokenType
BrokenType BrokenType은 글꼴 래스터화 소프트웨어, 특히 메모리 손상 문제가 발생하기 쉬운C/C++ 및 유사 언어로 작성된 코드베이스의 견고성과 보안을 테스트하도록 설계된 도구 모음입니다. 다음 구성 요소로 구성됩니다: TrueType 프로그램 생성기 - 무작위하지만 유효한 TrueType 프로그램을 생성하는 Python 스크립트. TTF/OTF 뮤테이터 - C++로 작성된 반"스마트" 바이너리 글꼴 파일 변형기. Windows GDI용 TTF/OTF 로더 - Windows GDI / Uniscribe로...
Rocky Linux 8 [CIQ] Security Update: freerdp / freerdp-debuginfo / freerdp-debugsource / freerdp-devel / etc Multiple Vulnerabilities (crlsa-2026_6005)
The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20266005 advisory. freerdp: FreeRDP: Arbitrary code execution via heap out-of-bounds write in RLE planar decode path CVE-2026-26965 freerdp: FreeRDP: Arbitrary code execution...
Astra Linux – Vulnerability in freerdp2
FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The affected versions are subject to an IntegerOverflow issue, which leads to an Out-of-Bound Write Vulnerability in the gdiCreateSurface function. This issue only affects FreeRDP-based clients...
Astra Linux – Vulnerability in freerdp3
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, deleting offscreen bitmaps caused gdi-drawing to point to freed memory, leading to UAF when related update packets arrived. A malicious server could trigger client-side use after the objects were freed,...
Astra Linux – Vulnerability in freerdp3
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.0, the gdisurfacebits function processed SURFACEBITSCOMMAND messages sent by the RDP server. When these commands were processed using NSCodec, the bmp.width and bmp.height values provided by the server were not...
Astra Linux – Vulnerability in freerdp2
FreeRDP is a free implementation of the Remote Desktop Protocol. Clients that use the /bpp:32 legacy GDI drawing path with a version of FreeRDP prior to 3.5.0 or 2.11.6 are vulnerable to out-of-bounds read vulnerabilities. Versions 3.5.0 and 2.11.6 address this issue. As a workaround, use modern...
Astra Linux – Vulnerability in freerdp2
FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. In affected versions, a malicious server may trigger out-of-bound writes in a connected client. Connections that use GDI or SurfaceCommands to send graphics updates to the client may send...
CVE-2026-77491
Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally...
CVE-2026-69288
Use of uninitialized resource in Windows GDI+ allows an authorized attacker to disclose information locally...
CVE-2026-68827
Integer underflow wrap or wraparound in Windows GDI+ allows an authorized attacker to elevate privileges over a network...
EUVD-2026-73422
Use of uninitialized resource in Windows GDI+ allows an authorized attacker to disclose information locally...
CVE-2026-69288
CVE-2026-69288 is a use of uninitialized resource vulnerability in Windows GDI+ that allows a locally authenticated attacker with low privileges to disclose information . The attack vector is local , requires no user interaction , and has no impact on integrity or availability , with a high confi...
CVE-2026-68827
CVE-2026-68827 is an integer underflow (wrap or wraparound) vulnerability in Windows GDI+ that allows an authorized attacker to achieve elevation of privileges over a network . The vulnerability is rated HIGH severity (CVSS 8.0) with a vector of AV:N/AC:L/PR:L/UI:R, meaning exploitation requires ...
EUVD-2026-73399
Integer underflow wrap or wraparound in Windows GDI+ allows an authorized attacker to elevate privileges over a network...
CVE-2026-77491
CVE-2026-77491 is an out-of-bounds read in Windows GDI that allows an unauthorized local attacker to disclose information. The CVSS 3.1 base score is 5.5 (MEDIUM) with a local attack vector, no privileges required, user interaction required, and high confidentiality impact but no integrity or ava...
EUVD-2026-73263
Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally...
Windows GDI+ Elevation of Privilege Vulnerability
Integer underflow wrap or wraparound in Windows GDI+ allows an authorized attacker to elevate privileges over a network...