Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : Vim vulnerabilities (USN-5613-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5613-1 advisory. It was discovered that Vim was not properly performing bounds checks when executing spell suggestion commands. An attacker could...

Adobe InDesign Multiple Vulnerabilities (APSB22-50) - Mac OS X

Adobe Indesign is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:indesignserver";...

Adobe Bridge Multiple Vulnerabilities (APSB22-49) - Mac OS X

Adobe Bridge is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:bridgecc"; if descriptio...

Adobe InDesign Multiple Vulnerabilities (APSB22-50) - Windows

Adobe Indesign is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:indesignserver";...

RHEL 8 : compat-exiv2-026 (RHSA-2021:3230)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2021:3230 advisory. Exiv2 is a C++ library to access image metadata, supporting read and write access to the Exif, IPTC and XMP metadata, Exif MakerNote support, extract...

Adobe Bridge Multiple Vulnerabilities (APSB22-49) - Windows

Adobe Bridge is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:bridgecc"; if descriptio...

Heap-based Buffer Overflow in function utfc_ptr2len

Description Heap-based Buffer Overflow in function utfcptr2len at vim/src/mbyte.c:2125. vim version git log commit 470a14140bc06f1653edf26ab0b3c9b801080353 grafted, HEAD - master, tag: v9.0.0461, origin/master, origin/HEAD Proof of Concept ./vim -u NONE -i NONE -n -m -X -Z -e -s -S...

LIEF vulnerable to heap based buffer overflow via print_binary function

LIEF commit 365a16a was discovered to contain a heap-buffer overflow via the function printbinary at /c/machoreader.c. Commit 0033b6312fd311b2e45e379c04a83d77c1e58578 contains a patch...

EulerOS 2.0 SP9 : vim (EulerOS-SA-2022-2336)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Buffer Over-read in function grabfilename in GitHub repository vim/vim prior to 8.2.4956. This vulnerability is capable of crashing the software,...

EulerOS 2.0 SP9 : libjpeg-turbo (EulerOS-SA-2022-2296)

According to the versions of the libjpeg-turbo package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The PPM reader in libjpeg-turbo through 2.0.90 mishandles use of tjLoadImage for loading a 16-bit binary PPM file into a grayscale buffer...

Adobe Bridge 11.x < 11.1.4 / 12.x < 12.0.3 Multiple Vulnerabilities (APSB22-49)

The version of Adobe Bridge installed on the remote Windows host is prior to 11.1.4 or 12.0.3. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb22-49 advisory. - Adobe Bridge version 12.0.2 and earlier and 11.1.3 and earlier are affected by a Heap-based Buffer...

Adobe Bridge 11.x < 11.1.4 / 12.x < 12.0.3 Multiple Vulnerabilities (APSB22-49)

The version of Adobe Bridge installed on the remote macOS or Mac OS X host is prior to 11.1.4 or 12.0.3. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb22-49 advisory. - Adobe Bridge version 12.0.2 and earlier and 11.1.3 and earlier are affected by a Heap-based...

EulerOS 2.0 SP9 : vim (EulerOS-SA-2022-2307)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Buffer Over-read in function grabfilename in GitHub repository vim/vim prior to 8.2.4956. This vulnerability is capable of crashing the software,...

Adobe InDesign PCX File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe InDesign. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PCX...

EulerOS 2.0 SP9 : libjpeg-turbo (EulerOS-SA-2022-2325)

According to the versions of the libjpeg-turbo package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The PPM reader in libjpeg-turbo through 2.0.90 mishandles use of tjLoadImage for loading a 16-bit binary PPM file into a grayscale buffer...

Adobe Photoshop 22.x < 22.5.9 / 23.x < 23.5 Multiple Vulnerabilities (macOS APSB22-52)

The version of Adobe Photoshop installed on the remote macOS or Mac OS X host is prior to 22.5.9/23.5. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb22-52 advisory. - Adobe Photoshop versions 22.5.8 and earlier and 23.4.2 and earlier are affected by a Use After...

PT-2022-5040 · Adobe · Bridge

Name of the Vulnerable Software and Affected Versions: Adobe Bridge versions 12.0.2 and earlier Adobe Bridge versions 11.1.3 and earlier Description: The issue is related to a Heap-based Buffer Overflow that could result in arbitrary code execution in the context of the current user. Exploitation...

Adobe Animate 21.x < 21.0.12 / 22.x < 22.0.8 Multiple Vulnerabilities (APSB22-54)

The version of Adobe Animate installed on the remote Windows host is prior to 21.0.12 or 22.0.8. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb22-54 advisory. - Adobe Animate version 21.0.11 and earlier and 22.0.7 and earlier are affected by an out-of-bounds read...

Debian dla-3105 : connman - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3105 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3105-1 [email protected]...

Adobe Animate 21.x < 21.0.12 / 22.x < 22.0.8 Multiple Vulnerabilities (APSB22-54)

The version of Adobe Animate installed on the remote macOS or Mac OS X host is prior to 21.0.12 or 22.0.8. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb22-54 advisory. - Adobe Animate version 21.0.11 and earlier and 22.0.7 and earlier are affected by an...