CVE-2023-35350: Heap-based Buffer Overflow

Windows Active Directory Certificate Services AD CS Remote Code Execution Vulnerability...

CVE-2023-35302: Heap-based Buffer Overflow

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability...

CVE-2023-33152: Heap-based Buffer Overflow

Microsoft ActiveX Remote Code Execution Vulnerability...

CVE-2023-32047: Heap-based Buffer Overflow

Paint 3D Remote Code Execution Vulnerability...

CVE-2023-32083: Heap-based Buffer Overflow

Microsoft Failover Cluster Information Disclosure Vulnerability...

CVE-2023-35305: Heap-based Buffer Overflow

Windows Kernel Elevation of Privilege Vulnerability...

CVE-2023-35363: Heap-based Buffer Overflow

Windows Kernel Elevation of Privilege Vulnerability...

CVE-2023-37246: Heap-based Buffer Overflow

A vulnerability has been identified in Tecnomatix Plant Simulation V2201 All versions V2201.0008, Tecnomatix Plant Simulation V2302 All versions V2302.0002. The affected application is vulnerable to heap-based buffer overflow while parsing specially crafted PRT files. This could allow an attacker...

Integer Overflow

klibc is vulnerable to Integer Overflow. The vulnerability occurs due to the multiplication in the calloc function in klibc which could result in heap-based buffer overflow...

ImageMagick 7.1.1-13 Heap-based Buffer Overflow DoS

The remote Windows host has a version of ImageMagick installed that is 7.1.1-13 or prior. It is, therefore, affected by heap-based buffer overflow vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...

GStreamer SRT File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the parsing of SRT...

CVE-2022-48512: Heap-based Buffer Overflow

Use After Free UAF vulnerability in the Vdecoderservice service. Successful exploitation of this vulnerability may cause the image decoding feature to perform abnormally...

CVE-2023-27390

A heap-based buffer overflow vulnerability exists in the Sequence::DrawText functionality of Diagon v1.0.139. A specially crafted markdown file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger this vulnerability...

CVE-2023-27390

Diagon v1.0.139 contains a heap-based buffer overflow in Sequence::DrawText that can lead to arbitrary code execution when processing a specially crafted Markdown file. Talos-TALOS-2023-1744 confirms the vulnerable version and describes the path where DrawText writes text to the Screen buffer, en...

CVE-2023-27390

A heap-based buffer overflow vulnerability exists in the Sequence::DrawText functionality of Diagon v1.0.139. A specially crafted markdown file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger this vulnerability...

CVE-2023-27390: Heap-based Buffer Overflow

A heap-based buffer overflow vulnerability exists in the Sequence::DrawText functionality of Diagon v1.0.139. A specially crafted markdown file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger this vulnerability...

Diagon Sequence::DrawText heap-based buffer overflow vulnerability

Talos Vulnerability Report TALOS-2023-1744 Diagon Sequence::DrawText heap-based buffer overflow vulnerability July 5, 2023 CVE Number CVE-2023-27390 SUMMARY A heap-based buffer overflow vulnerability exists in the Sequence::DrawText functionality of Diagon v1.0.139. A specially crafted markdown...

Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2023-2304)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP11 : vim (EulerOS-SA-2023-2280)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1376. CVE-2023-1170 - Incorrect Calculation of Buffer Size in GitHub repositor...

EulerOS 2.0 SP11 : vim (EulerOS-SA-2023-2304)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1376. CVE-2023-1170 - Incorrect Calculation of Buffer Size in GitHub repositor...