Adobe InDesign PCX File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe InDesign. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PCX...

EulerOS 2.0 SP9 : libjpeg-turbo (EulerOS-SA-2022-2325)

According to the versions of the libjpeg-turbo package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The PPM reader in libjpeg-turbo through 2.0.90 mishandles use of tjLoadImage for loading a 16-bit binary PPM file into a grayscale buffer...

PT-2022-5040 · Adobe · Bridge

Name of the Vulnerable Software and Affected Versions: Adobe Bridge versions 12.0.2 and earlier Adobe Bridge versions 11.1.3 and earlier Description: The issue is related to a Heap-based Buffer Overflow that could result in arbitrary code execution in the context of the current user. Exploitation...

Debian dla-3105 : connman - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3105 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3105-1 [email protected]...

Adobe Photoshop 22.x < 22.5.9 / 23.x < 23.5 Multiple Vulnerabilities (macOS APSB22-52)

The version of Adobe Photoshop installed on the remote macOS or Mac OS X host is prior to 22.5.9/23.5. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb22-52 advisory. - Adobe Photoshop versions 22.5.8 and earlier and 23.4.2 and earlier are affected by a Use After...

Adobe Animate 21.x < 21.0.12 / 22.x < 22.0.8 Multiple Vulnerabilities (APSB22-54)

The version of Adobe Animate installed on the remote Windows host is prior to 21.0.12 or 22.0.8. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb22-54 advisory. - Adobe Animate version 21.0.11 and earlier and 22.0.7 and earlier are affected by an out-of-bounds read...

Adobe Animate 21.x < 21.0.12 / 22.x < 22.0.8 Multiple Vulnerabilities (APSB22-54)

The version of Adobe Animate installed on the remote macOS or Mac OS X host is prior to 21.0.12 or 22.0.8. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb22-54 advisory. - Adobe Animate version 21.0.11 and earlier and 22.0.7 and earlier are affected by an...

Adobe Photoshop 22.x < 22.5.9 / 23.x < 23.5 Multiple Vulnerabilities (APSB22-52)

The version of Adobe Photoshop installed on the remote Windows host is prior to 22.5.9/23.5. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb22-52 advisory. - Adobe Photoshop versions 22.5.8 and earlier and 23.4.2 and earlier are affected by a Use After Free...

openSUSE: Security Advisory for qpdf (SUSE-SU-2022:3248-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : qpdf (SUSE-SU-2022:3248-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:3248-1 advisory. - CVE-2021-36978: Fixed heap-based buffer overflow in PlASCII85Decoder::write bsc1188514. Tenable has...

Debian dla-3103 : lib32z1 - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3103 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3103-1 [email protected] https://www.debian.org/lts/security/...

[SECURITY] [DSA 5228-1] gdk-pixbuf security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5228-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 11, 2022 https://www.debian.org/security/faq -...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : vim (SUSE-SU-2022:3229-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3229-1 advisory. Updated to version 9.0 with patch level 0313: - CVE-2022-2183: Fixed out-of-bounds read through...

openSUSE: Security Advisory for libyajl (SUSE-SU-2022:3162-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE-SU-2022:3162-1 Security update for libyajl

This update for libyajl fixes the following issues: - CVE-2022-24795: Fixed heap-based buffer overflow when handling large inputs bsc1198405...

Updated connman packages fix security vulnerability

In ConnMan through 1.41, remote attackers able to send HTTP requests to the gweb component are able to exploit a heap-based buffer overflow in receiveddata to execute code. CVE-2022-32292 In ConnMan through 1.41, a man-in-the-middle attack against a WISPR HTTP query could be used to trigger a...

Mageia: Security Advisory (MGASA-2022-0319)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-38533

A vulnerability was found in the strip utility of binutils. An attacker able to convince a victim to process a specially crafted COFF file by the strip utility can lead to a heap-based buffer overflow, causing the utility to crash. Mitigation Do not process untrusted files with the strip utility...

Amazon Linux 2022 : vim-common, vim-data, vim-default-editor (ALAS2022-2022-077)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-077 advisory. A flaw was found in vim. The vulnerability occurs due to a crash when recording and using Select mode and leads to an out-of-bounds read. This flaw allows an attacker to input a specially craft...

CVE-2022-39831

An issue was discovered in PSPP 1.6.2. There is a heap-based buffer overflow at the function readbytesinternal in utilities/pspp-dump-sav.c, which allows attackers to cause a denial of service application crash or possibly have unspecified other impact. This issue is different from CVE-2018-20230...