CVE-2021-39261

A crafted NTFS image can cause a heap-based buffer overflow in ntfscompressedpwrite in NTFS-3G 2021.8.22...

CVE-2021-39254

The CVE-2021-39254 issue affects NTFS-3G prior to 2021.8.22, where a crafted NTFS image can trigger an integer overflow in memmove, causing a heap-based buffer overflow in ntfs_attr_record_resize. Connected advisories confirm NTFS-3G is the vulnerable component and that upgrades to a fixed versio...

CVE-2021-39254

A crafted NTFS image can cause an integer overflow in memmove, leading to a heap-based buffer overflow in the function ntfsattrrecordresize, in NTFS-3G 2021.8.22...

Fedora 34 : 2:vim (2021-5fa81a2b04)

The remote Fedora 34 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-5fa81a2b04 advisory. - vim is vulnerable to Heap-based Buffer Overflow CVE-2021-3770 Note that Nessus has not tested for this issue but has instead relied only on the...

CVE-2021-39256

A crafted NTFS image can cause a heap-based buffer overflow in ntfsinodelookupbyname in NTFS-3G 2021.8.22...

CVE-2021-3770

vim is vulnerable to Heap-based Buffer Overflow...

CVE-2021-3770

vim is vulnerable to Heap-based Buffer Overflow...

CVE-2021-3770

vim is vulnerable to Heap-based Buffer Overflow...

CVE-2021-3770

vim is vulnerable to Heap-based Buffer Overflow...

CVE-2021-3770

CVE-2021-3770 : Vim is affected by a heap-based buffer overflow. In connected MARINER data, the issue is listed as affecting package vim 8.1.1667-1; an upgraded version is available that resolves the vulnerability. Remediation: upgrade vim to a newer package version as indicated by the advisory.

SUSE SLED12: file / file-devel / file-magic / libmagic1 / libmagic1-32bit / etc (SUSE-SU-2021:2930-1)

The remote SUSE Linux SLED12 / SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:2930-1 advisory. - CVE-2019-18218: Fixed heap-based buffer overflow in cdfreadpropertyinfo in cdf.c bsc1154661. Tenable has extracted the preceding...

Denial Of Service (DoS)

gpac:bullseye is vulnerable to denial of service. An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input using the “ctts” FOURCC code can cause an integer overflow due t...

Denial Of Service (DoS)

gpac:bullseye is vulnerable to denial of service. Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library. A specially crafted MPEG-4 input can cause an integer overflow due to unchecked arithmetic...

Denial Of Service (DoS)

gpac:bullseye is vulnerable to denial of service. An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library. A specially crafted MPEG-4 input used to process an atom using the “saio” FOURCC code cause an integer...

Denial Of Service (DoS)

GPAC is vulnerable to denial of service. An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library. A specially crafted MPEG-4 input can cause an integer overflow when processing an atom using the 'ssix' FOURCC...

Denial Of Service (DoS)

gpac:bullseye is vulnerable to denial of service. Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library. A specially crafted MPEG-4 input in “stsz” decoder can cause an integer overflow due to unchecked...

Denial Of Service (DoS)

gpac:sid is vulnerable to denial of service. Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input can cause an integer overflow due to unchecked addition...

Denial Of Service (DoS)

Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input can cause an integer overflow due to unchecked addition arithmetic resulting in a heap-based buffer overflo...

Denial Of Service (DoS)

gpac:bullseye is vulnerable to denial of service. An exploitable integer truncation vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. When processing the 'hdlr' FOURCC code, a specially crafted MPEG-4 input can cause an improper...

CVE-2021-28558

Acrobat Reader DC versions versions 2021.001.20150 and earlier, 2020.001.30020 and earlier and 2017.011.30194 and earlier are affected by an Heap-based buffer overflow vulnerability in the PDFLibTool component. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary cod...