Adobe InCopy Font Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe InCopy. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of embedd...

CVE-2023-21605: Heap-based Buffer Overflow

Adobe Acrobat Reader versions 22.003.20282 and earlier, 22.003.20281 and earlier and 20.005.30418 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user...

CVE-2023-21605 Adobe Acrobat Reader DC Font Parsing Heap-based Buffer Overflow Arbitrary code execution

Adobe Acrobat Reader versions 22.003.20282 and earlier, 22.003.20281 and earlier and 20.005.30418 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user...

CVE-2023-21605

CVE-2023-21605 affects Adobe Acrobat Reader and Acrobat, where a Heap-based Buffer Overflow in the runtime (reported as CVE-2023-21605; noted in APSB23-01) could lead to arbitrary code execution in the context of the current user. Affected versions: 22.003.20282 and earlier, 22.003.20281 and earl...

openSUSE 15 Security Update : libheimdal (openSUSE-SU-2023:0020-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2023:0020-1 advisory. - All Samba versions 4.x.x before 4.9.17, 4.10.x before 4.10.11 and 4.11.x before 4.11.3 have an issue, where the S4U MS-SFU Kerberos...

CVE-2023-21594

Adobe InCopy versions 18.0 and earlier, 17.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

SUSE SLES12: ctdb / libsamba-policy-devel / libsamba-policy-python3-devel / etc (SUSE-SU-2023:0081-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:0081-1 advisory. - Updated to version 4.15.13: - CVE-2022-38023: Removed weak cryptographic algorithms from the Netlogon RPC implementation...

CVE-2022-3160: Heap-based Buffer Overflow

The APDFL.dll contains an out-of-bounds write past the fixed-length heap-based buffer while parsing specially crafted PDF files. This could allow an attacker to execute code in the context of the current process...

CVE-2023-21594: Heap-based Buffer Overflow

Adobe InCopy versions 18.0 and earlier, 17.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

Slackware Linux 14.1 / 14.2 / 15.0 / current netatalk Vulnerability (SSA:2023-013-01)

The version of netatalk installed on the remote host is prior to 3.1.14. It is, therefore, affected by a vulnerability as referenced in the SSA:2023-013-01 advisory. - Netatalk through 3.1.13 has an afpgetappl heap-based buffer overflow resulting in code execution via a crafted .appl file. This...

Fedora 36 : mbedtls (2023-3c4a525dcc)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-3c4a525dcc advisory. - Update to 2.28.2 Release notes: https://github.com/Mbed-TLS/mbedtls/releases/tag/v2.28.2 Tenable has extracted the preceding description block...

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : Vim vulnerabilities (USN-5801-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5801-1 advisory. It was discovered that Vim makes illegal memory calls when pasting brackets in Ex mode. An attacker could possibly use this to...

CVE-2023-0288 Heap-based Buffer Overflow in vim/vim

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189...

CVE-2023-0288: Heap-based Buffer Overflow

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189...

CVE-2023-0288

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189...

CVE-2023-21594 Adobe InCopy Font Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Adobe InCopy versions 18.0 and earlier, 17.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2023-21587: Heap-based Buffer Overflow

Adobe InDesign version 18.0 and earlier, 17.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2023-0288

CVE-2023-0288 affects vim/vim with a heap-based buffer overflow in the Vim source prior to 9.0.1189. Connected advisories corroborate a fixed version around 9.0.1191+ (e.g., Apple lists Vim updated to 9.0.1191; ALAS/ALAS2 advisories reference 9.0.1189+ fixes). Impact is high in the CVE entries; e...

Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a heap-based buffer overflow in Perl (CVE-2020-10543).

Summary IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a heap-based buffer overflow in Perl, caused by an integer overflow in the nested regular expression quantifiers CVE-2020-10543. This could allow a remote attacker to overflow a buffer and execute arbitrary...

Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a heap-based buffer overflow in rsyslog (CVE-2022-24903).

Summary IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a heap-based buffer overflow, caused by improper bounds checking by the TCP syslog server receiver components CVE-2022-24903. This is used as part of our speech runtime component. Please read the details for...