CVE-2021-34971

Foxit PDF Reader JPG2000 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target...

CVE-2022-43655

CVE-2022-43655 affects Bentley View via a heap-based buffer overflow in FBX file parsing, allowing remote code execution with user interaction. The flaw arises from insufficient validation of the length of user-supplied data before copying it into a fixed-length heap buffer. The vulnerability is ...

CVE-2021-34971 Foxit PDF Reader JPG2000 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Foxit PDF Reader JPG2000 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target...

CVE-2021-34971 Foxit PDF Reader JPG2000 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Foxit PDF Reader JPG2000 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target...

CVE-2021-34971

CVE-2021-34971 is a heap-based buffer overflow in Foxit PDF Reader JPG2000 file parsing that enables remote code execution when a user opens a crafted file or visits a malicious page. The root cause is improper validation of the length of user-supplied data before copying it to a heap buffer. The...

Oracle Linux 9 : tigervnc (ELSA-2024-2616)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-2616 advisory. - Fix crash caused by fix for CVE-2024-31083 Resolves: RHEL-30985 - Fix CVE-2024-31080 tigervnc: xorg-x11-server: Heap buffer overread/data leakage in...

Oracle Linux 9 : libjpeg-turbo (ELSA-2024-2295)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-2295 advisory. - Fix CVE-2021-29390 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not tested for...

Rocky Linux 8 : tigervnc (RLSA-2024:2037)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:2037 advisory. - A heap-based buffer over-read vulnerability was found in the X.org server's ProcXIGetSelectedEvents function. This issue occurs when byte-swapped leng...

Oracle Linux 9 : mingw / components (ELSA-2024-2353)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-2353 advisory. mingw-binutils 2.41-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora40MassRebuild 2.41-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora40MassRebuild...

Fedora 40 : gdcm (2024-fae33e6e9f)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-fae33e6e9f advisory. Security fixes - TALOS-2024-1924, CVE-2024-22391: heap overflow - TALOS-2024-1935, CVE-2024-22373: out-of-bounds write - TALOS-2024-1944,...

Fedora 38 : gdcm (2024-7a57842ec3)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-7a57842ec3 advisory. Security fixes - TALOS-2024-1924, CVE-2024-22391: heap overflow - TALOS-2024-1935, CVE-2024-22373: out-of-bounds write - TALOS-2024-1944,...

GLSA-202405-02 : ImageMagick: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202405-02 ImageMagick: Multiple Vulnerabilities - A flaw was found in ImageMagick. The vulnerability occurs due to improper use of open functions and leads to a denial of service. This flaw allows an attacker to crash the system...

Fedora 39 : gdcm (2024-11821b16ac)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-11821b16ac advisory. Security fixes - TALOS-2024-1924, CVE-2024-22391: heap overflow - TALOS-2024-1935, CVE-2024-22373: out-of-bounds write - TALOS-2024-1944,...

CVE-2023-51596

BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must...

CVE-2023-50229

BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must...

CVE-2023-50230

BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must...

CVE-2023-50230

BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must...

CVE-2023-50229

BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must...

CVE-2023-44441

GIMP DDS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page o...

CVE-2023-42077

PDF-XChange Editor EMF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target...