17110 matches found
CVE-2023-34474
A heap-based buffer overflow issue was discovered in ImageMagick's ReadTIM2ImageData function in coders/tim2.c. A local attacker could trick the user in opening specially crafted file, triggering an out-of-bounds read error, allowing an application to crash, resulting in a denial of service...
CVE-2023-32026: Heap-based Buffer Overflow
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability...
CVE-2023-3291 Heap-based Buffer Overflow in gpac/gpac
Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.2.2...
CVE-2023-32028: Heap-based Buffer Overflow
Microsoft SQL OLE DB Remote Code Execution Vulnerability...
CVE-2023-34474
CVE-2023-34474 is an ImageMagick vulnerability involving a heap-based buffer overflow in ReadTIM2ImageData() (coders/tim2.c). A local attacker can entice a user to open a crafted TIM file, causing an out-of-bounds read that may crash the application and lead to a denial of service. Public referen...
Fortinet FortiOS Remote Code Execution Vulnerability
Fortinet FortiOS is a set of security operating system dedicated to FortiGate network security platform from American Fita Fortinet. The system provides users with firewall, antivirus, IPSec/SSLVPN, Web content filtering and anti-spam and other security features. A security vulnerability exists i...
CVE-2023-34474: Heap-based Buffer Overflow
A heap-based buffer overflow issue was discovered in ImageMagick's ReadTIM2ImageData function in coders/tim2.c. A local attacker could trick the user in opening specially crafted file, triggering an out-of-bounds read error, allowing an application to crash, resulting in a denial of service...
CVE-2023-32025: Heap-based Buffer Overflow
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability...
CVE-2023-3291
CVE-2023-3291 concerns the GPAC multimedia framework (gpac/gpac) with a heap-based buffer overflow in versions prior to 2.2.2. Public advisories (Debian DSA-5452-1) state these issues could lead to a denial of service or the execution of arbitrary code. Other sources reiterate the affected compon...
CVE-2023-3291: Heap-based Buffer Overflow
Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.2.2...
CVE-2023-32027: Heap-based Buffer Overflow
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability...
(0Day) Ashlar-Vellum Cobalt Heap-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...
(0Day) Ashlar-Vellum Cobalt CO File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...
CVE-2023-24897: Heap-based Buffer Overflow
.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability...
CVE-2023-27997
A heap-based buffer overflow vulnerability CWE-122 in FortiOS version 7.2.4 and below, version 7.0.11 and below, version 6.4.12 and below, version 6.0.16 and below and FortiProxy version 7.2.3 and below, version 7.0.9 and below, version 2.0.12 and below, version 1.2 all versions, version 1.1 all...
CVE-2023-27997
A heap-based buffer overflow vulnerability CWE-122 in FortiOS version 7.2.4 and below, version 7.0.11 and below, version 6.4.12 and below, version 6.0.16 and below and FortiProxy version 7.2.3 and below, version 7.0.9 and below, version 2.0.12 and below, version 1.2 all versions, version 1.1 all...
Critical FortiOS and FortiProxy Vulnerability Likely Exploited - Patch Now!
Fortinet on Monday disclosed that a newly patched critical flaw impacting FortiOS and FortiProxy may have been "exploited in a limited number of cases" in attacks targeting government, manufacturing, and critical infrastructure sectors. The vulnerability, dubbed XORtigate and tracked as...
EulerOS Virtualization 3.0.6.0 : pixman (EulerOS-SA-2023-2228)
According to the versions of the pixman packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In libpixman in Pixman before 0.42.2, there is an out-of-bounds write aka heap-based buffer overflow in rasterizeedges8 due to an...
EulerOS Virtualization 3.0.6.0 : libjpeg-turbo (EulerOS-SA-2023-2200)
According to the versions of the libjpeg-turbo packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The PPM reader in libjpeg-turbo through 2.0.90 mishandles use of tjLoadImage for loading a 16-bit binary PPM file into a...