CVE-2024-29189

PyAnsys Geometry is a Python client library for the Ansys Geometry service and other CAD Ansys products. On file src/ansys/geometry/core/connection/productinstance.py, upon calling this method startprogram directly, users could exploit its usage to perform malicious operations on the current...

CVE-2024-29189

CVE-2024-29189 affects the PyAnsys Geometry library (ansys-geometry-core) and specifically the internal _start_program routine in src/ansys/geometry/core/connection/product_instance.py. The vulnerability arises from invoking subprocess.Popen with a shell context (shell flag enables shell executio...

CVE-2024-29189 ansys-geometry-core OS Command Injection vulnerability

PyAnsys Geometry is a Python client library for the Ansys Geometry service and other CAD Ansys products. On file src/ansys/geometry/core/connection/productinstance.py, upon calling this method startprogram directly, users could exploit its usage to perform malicious operations on the current...

CVE-2024-29189 ansys-geometry-core OS Command Injection vulnerability

PyAnsys Geometry is a Python client library for the Ansys Geometry service and other CAD Ansys products. On file src/ansys/geometry/core/connection/productinstance.py, upon calling this method startprogram directly, users could exploit its usage to perform malicious operations on the current...

PyAnsys Geometry 安全漏洞

PyAnsys Geometry is an Ansys open source Python client library for the Ansys Geometrics service and other CAD Ansys products such as Ansys Discovery and Ansys SpaceClaim. A security vulnerability exists in PyAnsys Geometry. An attacker can exploit the vulnerability to perform malicious actions on...

ansys-geometry-core OS Command Injection vulnerability

subprocess call with shell=True identified, security issue. Code On file src/ansys/geometry/core/connection/productinstance.py: 403 def startprogramargs: Liststr, localenv: Dictstr, str - subprocess.Popen: 404 """ 405 Start the program where the path is the first item of the args array argument...

PT-2024-22792

Name of the Vulnerable Software and Affected Versions PyAnsys Geometry versions prior to 0.3.3 PyAnsys Geometry versions prior to 0.4.12 Description The issue concerns a Python client library for the Ansys Geometry service and other CAD Ansys products. Upon calling the start program method...

Siemens Parasolid Null Pointer Dereference Vulnerability

Parasolid is a 3D geometry modeling tool that supports a variety of techniques including solid modeling, direct editing and free-form surface/table modeling. Siemens Parasolid null pointer dereference vulnerability can be exploited by an attacker to crash an application, resulting in a denial of...

DEBIAN-CVE-2023-32650

An integer overflow vulnerability exists in the FSTBLGEOM parsing maxhandle functionality of GTKWave 3.3.115, when compiled as a 32-bit binary. A specially crafted .fst file can lead to memory corruption. A victim would need to open a malicious file to trigger this vulnerability...

UBUNTU-CVE-2023-38623

Multiple integer overflow vulnerabilities exist in the VZT facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the intege...

CVE-2023-34561

A buffer overflow in the level parsing code of RobTop Games AB Geometry Dash v2.113 allows attackers to execute arbitrary code via entering a Geometry Dash level...

CVE-2023-34561

A buffer overflow in the level parsing code of RobTop Games AB Geometry Dash v2.113 allows attackers to execute arbitrary code via entering a Geometry Dash level...

Buffer overflow

A buffer overflow in the level parsing code of RobTop Games AB Geometry Dash v2.113 allows attackers to execute arbitrary code via entering a Geometry Dash level...

CVE-2023-34561

A vulnerability CVE-2023-34561 affects Geometry Dash v2.113 from RobTop Games AB. The issue is a buffer overflow in the level parsing code, enabling arbitrary code execution when a level is entered. The connected documents confirm the affected product/version and the underlying cause (buffer over...

RobTop Games Geometry Dash 安全漏洞

RobTop Games Geometry Dash is a parkour game by RobTop Games. A security vulnerability exists in RobTop Games Geometry Dash version v2.113, which originates from a vulnerability that allows an attacker to execute arbitrary code by entering the Geometry Dash level...

CVE-2023-34561

A buffer overflow in the level parsing code of RobTop Games AB Geometry Dash v2.113 allows attackers to execute arbitrary code via entering a Geometry Dash level...

CVE-2023-34561

A buffer overflow in the level parsing code of RobTop Games AB Geometry Dash v2.113 allows attackers to execute arbitrary code via entering a Geometry Dash level...

The vulnerability of the ParseMetaGeometry() function in the MagickCore/geometry.c component of the ImageMagick console graphics editor allows a hacker to cause a service failure.

The vulnerability of the ParseMetaGeometry function in the MagickCore/geometry.c component of the ImageMagick console graphics editor is related to an incorrect implementation of the division operation. Exploiting this vulnerability allows a remote attacker to cause a service failure by using a...

PT-2023-35787 · Git +1 · Libheif

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow read issue is identified, potentially causing a crash. The crash occurs in the RegionGeometry Polygon::parse function, which is...

Debian: Security Advisory (DLA-3376-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...