Accusoft ImageGear GEM Raster parser buffer overflow vulnerability

Accusoft ImageGear is a software development toolkit for image processing from Accusoft Corporation. A buffer overflow vulnerability exists in the Accusoft ImageGear GEM Raster parser, which can be exploited by a remote attacker to submit a special request for a GEM file and trick the user into...

CVE-2019-5132

An exploitable out-of-bounds write vulnerability exists in the igcore19d.dll GEM Raster parser of the Accusoft ImageGear 19.3.0 library. A specially crafted GEM file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a malformed file to the victim...

CVE-2019-5132

An exploitable out-of-bounds write vulnerability exists in the igcore19d.dll GEM Raster parser of the Accusoft ImageGear 19.3.0 library. A specially crafted GEM file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a malformed file to the victim...

Out-of-bounds

An exploitable out-of-bounds write vulnerability exists in the igcore19d.dll GEM Raster parser of the Accusoft ImageGear 19.3.0 library. A specially crafted GEM file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a malformed file to the victim...

CVE-2019-5132

CVE-2019-5132 affects Accusoft ImageGear 19.3.0 (igcore19d.dll GEM Raster parser). A crafted GEM file can trigger an out-of-bounds write, resulting in remote code execution. Root cause: out-of-bounds write in the GEM Raster parser. Exploitation requires a malformed file; TALOS notes the vulnerabi...

CVE-2019-5132: Out-of-bounds Write

An exploitable out-of-bounds write vulnerability exists in the igcore19d.dll GEM Raster parser of the Accusoft ImageGear 19.3.0 library. A specially crafted GEM file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a malformed file to the victim...

PT-2019-17497

Name of the Vulnerable Software and Affected Versions Accusoft ImageGear version 19.3.0 Description An out-of-bounds write issue exists in the igcore19d.dll GEM Raster parser of the library. This can be triggered by a specially crafted GEM file, potentially leading to remote code execution. An...

Accusoft ImageGear GEM Raster Code Execution Vulnerability

Summary An exploitable out-of-bounds write vulnerability exists in the igcore19d.dll GEM Raster parser of the Accusoft ImageGear 19.3.0 library. A specially crafted GEM file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a malformed file to th...

Unspecified vulnerability in CBC Gem application

CBC Gem application is an application for playing streaming videos. A security vulnerability exists in CBC Gem application versions prior to 9.24.1 Android and prior to 9.26.0 iOS. An attacker can exploit the vulnerability to capture sensitive information about and view some of the user's habits...

CVE-2019-19464

The CBC Gem application before 9.24.1 for Android and before 9.26.0 for iOS has Unencrypted Analytics...

CVE-2019-19464

The CBC Gem application before 9.24.1 for Android and before 9.26.0 for iOS has Unencrypted Analytics...

Code injection

The CBC Gem application before 9.24.1 for Android and before 9.26.0 for iOS has Unencrypted Analytics...

CVE-2019-19464

The CBC Gem mobile app is affected: Android versions prior to 9.24.1 and iOS versions prior to 9.26.0 expose Analytics data in unencrypted form. This enables potential leakage of user habits and sensitive information via analytics collection. Connected sources (CNVD-2020-00509, RH: CVE-2019-19464...

CVE-2019-19464

The CBC Gem application before 9.24.1 for Android and before 9.26.0 for iOS has Unencrypted Analytics...

CVE-2019-19464: Missing Encryption of Sensitive Data

The CBC Gem application before 9.24.1 for Android and before 9.26.0 for iOS has Unencrypted Analytics...

PT-2019-15847

Name of the Vulnerable Software and Affected Versions CBC Gem versions prior to 9.24.1 for Android CBC Gem versions prior to 9.26.0 for iOS Description The issue concerns unencrypted analytics in the CBC Gem application. Recommendations For Android versions prior to 9.24.1, update to version 9.24...

CVE-2014-0084

Ruby gem openshift-origin-node before 2014-02-14 does not contain a cronjob timeout which could result in a denial of service in cron.daily and cron.weekly...

CVE-2014-0083

The Ruby net-ldap gem before 0.11 uses a weak salt when generating SSHA passwords...

CVE-2014-0084

CVE-2014-0084 affects the Ruby gem openshift-origin-node prior to 2014-02-14, which does not enforce a cronjob timeout, potentially enabling a denial-of-service in cron.daily and cron.weekly. Public records in OSV/RH advisories reference the same issue (GHSA-756M-3QF2-HP58) and describe an improp...

CVE-2014-0083

Summary: CVE-2014-0083 concerns the Ruby net-ldap gem prior to 0.11, which uses a weak salt when generating SSHA passwords. Affected component: Ruby net-ldap (library for LDAP in Ruby). Root cause: weak or insufficiently random SSHA salt used during password hashing. Impact (as stated): password ...