CVE-2022-35676 Adobe FrameMaker SVG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Adobe FrameMaker versions 2019 Update 8 and earlier and 2020 Update 4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must...

CVE-2022-35677 Adobe FrameMaker SVG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Adobe FrameMaker versions 2019 Update 8 and earlier and 2020 Update 4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must...

CVE-2022-35677

Adobe FrameMaker 2019 Update 8 and earlier, and 2020 Update 4 and earlier, are affected by a heap-based buffer overflow (CVE-2022-35677) that could allow arbitrary code execution in the context of the current user when a malicious file is opened. Exploitation requires user interaction. Remediatio...

Denial Of Service (DoS)

vim is vulnerable to denial of service. It is possible to cause heap-based buffer overflow in GitHub repository which allows an attacker to crash the application by providing malicious input...

Schneider Electric EcoStruxure, EcoStruxure Process Expert, SCADAPack RemoteConnect for x70

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Schneider Electric Equipment: EcoStruxure, EcoStruxure Process Expert, SCADAPack RemoteConnect for x70 Vulnerabilities: Heap-based Buffer Overflow, Wrap or Wraparound, Classic Buffer Overflow,...

Siemens JT2Go < 13.3.0.5 RCE (SSA-829738)

The version of Siemens JT2Go installed on the remote Windows hosts is prior to 13.3.0.5. It is, therefore, affected by a heap-based buffer overflow flaw that could cause a denial of service DoS condition or remote code execution if exploited by an attacker. Note that Nessus has not tested for thi...

Adobe FrameMaker 2019 < 15.0.8 (2019.0.8) / Adobe FrameMaker 2020 < 16.0.4 (2020.0.4) Multiple Vulnerabilities (APSB22-42)

The version of Adobe FrameMaker installed on the remote Windows host is prior to Adobe FrameMaker 2019 15.0.8 / Adobe FrameMaker 2020 16.0.4. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb22-42 advisory. - Adobe FrameMaker versions 2019 Update 8 and earlier and...

GLSA-202208-13 : libass: Denial of service

The remote host is affected by the vulnerability described in GLSA-202208-13 libass: Denial of service - libass 0.15.x before 0.15.1 has a heap-based buffer overflow in decodechars called from decodefont and processtext because the wrong integer data type is used for subtraction. CVE-2020-36430...

Ubuntu 16.04 ESM : libcdio vulnerabilities (USN-5558-1)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5558-1 advisory. Zhao Liang discovered that libcdio was not properly performing memory management operations when processing ISO files, which could result in a heap buffe...

CVE-2022-37434

A security vulnerability was found in zlib. The flaw triggered a heap-based buffer in inflate in the inflate.c function via a large gzip header extra field. This flaw is only applicable in the call inflateGetHeader...

Denial Of Service (DoS)

zlib is vulnerable Denial Of Service DoS. The vulnerability exists due to a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field...

Unspecified Vulnerability in Exim (CNVD-2022-56952)

Exim is an open source messaging agent MTA running on Unix systems that routes, forwards and delivers mail. A security vulnerability exists in Exim versions prior to 4.95, which stems from a heap-based buffer overflow in the alias list in hostnamelookup when senderhostname is set. No details of t...

Ubuntu 16.04 ESM : libjpeg-turbo vulnerabilities (USN-5553-1)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5553-1 advisory. It was discovered that libjpeg-turbo was not properly handling EOF characters, which could lead to excessive memory consumption through the execution of ...

PT-2022-4388 · Adobe · Framemaker

Name of the Vulnerable Software and Affected Versions: Adobe FrameMaker versions 2019 Update 8 and earlier Adobe FrameMaker versions 2020 Update 4 and earlier Description: The issue is related to a heap-based buffer overflow in Adobe FrameMaker, which could allow an attacker to execute arbitrary...

Ubuntu 20.04 LTS : GDK-PixBuf vulnerability (USN-5554-1)

The remote Ubuntu 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5554-1 advisory. Pedro Ribeiro discovered that the GDK-PixBuf library did not properly handle certain GIF images. If an user or automated system were tricked into opening a...

Heap overflow

Exim before 4.95 has a heap-based buffer overflow for the alias list in hostnamelookup in host.c when senderhostname is set...

CVE-2022-37452

Exim before 4.95 has a heap-based buffer overflow for the alias list in hostnamelookup in host.c when senderhostname is set...

AlmaLinux 8 : virt:rhel and virt-devel:rhel (5821) (ALSA-2022:5821)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2022:5821 advisory. QEMU: QXL: integer overflow in cursoralloc can lead to heap buffer overflow CVE-2021-4206 QEMU: QXL: double fetch in qxlcursor can lead to heap buffer...

CVE-2022-33730

CVE-2022-33730 describes a heap-based buffer overflow in Samsung Dex for PC prior to SMR Aug-2022 Release 1, allowing arbitrary code execution by physical attackers. Affected: Samsung Dex for PC (pre‑SMR Aug‑2022 Release 1). Root cause: heap-based overflow in Samsung Dex for PC. Impact: potential...

CVE-2022-37434

zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call...