Debian DLA-2559-1 : busybox security update

Busybox, utility programs for small and embedded systems, was affected by several security vulnerabilities. The Common Vulnerabilities and Exposures project identifies the following issues. CVE-2011-5325 A path traversal vulnerability was found in Busybox implementation of tar. tar will extract a...

Arbitrary Code Execution

GraphicsMagick is vulnerable to arbitrary code execution. An integer overflow and heap-based buffer overflow in HuffmanDecodeImage in magick/compress.c allows an attacker to execute arbitrary code on the host OS...

CVE-2021-21017

CVE-2021-21017 affects Adobe Acrobat/Reader (DC Continuous and prior releases) with a heap-based buffer overflow that could allow arbitrary code execution in the user’s context after opening a malicious file. The linked exploit analyses describe a flaw in URL/baseURL handling within PDFs (potenti...

Adobe Reader < 2017.011.30190 / 2020.001.30020 / 2021.001.20135 Multiple Vulnerabilities (APSB21-09) (macOS)

The version of Adobe Reader installed on the remote macOS host is a version prior to 2017.011.30190, 2020.001.30020, or 2021.001.20135. It is, therefore, affected by multiple vulnerabilities. - Acrobat Reader DC versions versions 2020.013.20074 and earlier, 2020.001.30018 and earlier and...

Adobe Reader < 2017.011.30190 / 2020.001.30020 / 2021.001.20135 Multiple Vulnerabilities (APSB21-09)

The version of Adobe Reader installed on the remote Windows host is a version prior to 2017.011.30190, 2020.001.30020, or 2021.001.20135. It is, therefore, affected by multiple vulnerabilities. - Acrobat Reader DC versions versions 2020.013.20074 and earlier, 2020.001.30018 and earlier and...

Adobe Acrobat < 2017.011.30190 / 2020.001.30020 / 2021.001.20135 Multiple Vulnerabilities (APSB21-09)

The version of Adobe Acrobat installed on the remote Windows host is a version prior to 2017.011.30190, 2020.001.30020, or 2021.001.20135. It is, therefore, affected by multiple vulnerabilities. - Acrobat Reader DC versions versions 2020.013.20074 and earlier, 2020.001.30018 and earlier and...

macOS 10.14.x < 10.14.6 Security Update 2021-002 / 10.15.x < 10.15.7 Supplemental Update / macOS 11.x < 11.2.1 (HT212177)

The remote host is running a version of macOS / Mac OS X that is 10.14.x prior to 10.14.6 Security Update 2021-002 Mojave, 10.15.x prior to 10.15.7 Supplemental Update Catalina, or 11.x prior to 11.2.1 Big Sur. It is, therefore, affected by multiple vulnerabilities, including the following: - An...

CVE-2020-13581

In SoftMaker Software GmbH SoftMaker Office PlanMaker 2021 Revision 1014, a specially crafted document can cause the document parser to copy data from a particular record type into a buffer that is smaller than the size used for the copy which will cause a heap-based buffer overflow. An attacker...

CVE-2020-27250

In SoftMaker Software GmbH SoftMaker Office PlanMaker 2021 Revision 1014, a specially crafted document can cause the document parser to copy data from a particular record type into a static-sized buffer within an object that is smaller than the size used for the copy, which will cause a heap-base...

CVE-2020-27250

SoftMaker Office PlanMaker 2021 (Revision 1014) contains a heap-based buffer overflow in the Office Art record parsing path. The vulnerability involves 0x00eb MsoDrawingGroup processing and a nested OfficeArtDggContainer (0xf000) containing a 0xf150 sub-record. Depending on Version/Instance (0x00...

CVE-2020-13581

Summary (CVE-2020-13581) : A heap-based buffer overflow exists in SoftMaker Office PlanMaker 2021 (Revision 1014) parsing the PlanMaker Document format. The 0x800D record handler allocates a 2048-byte buffer, reads a length from the record, and copies the data with memcpy using that length. If th...

Heap overflow

In SoftMaker Software GmbH SoftMaker Office TextMaker 2021 revision 1014, a specially crafted document can cause the document parser to miscalculate a length used to allocate a buffer, later upon usage of this buffer the application will write outside its bounds resulting in a heap-based buffer...

CVE-2020-36244

The daemon in GENIVI diagnostic log and trace DLT, is vulnerable to a heap-based buffer overflow that could allow an attacker to remotely execute arbitrary code on the DLT-Daemon versions prior to 2.18.6...

Arbitrary Code Execution

chromium is vulnerable to arbitrary code execution. A heap-based buffer overflow in V8 allows a remote attacker to execute arbitrary code on the host OS via a heap corruption via a malicious HTML page...

CVE-2020-36244

The daemon in GENIVI diagnostic log and trace DLT, is vulnerable to a heap-based buffer overflow that could allow an attacker to remotely execute arbitrary code on the DLT-Daemon versions prior to 2.18.6...

Debian DLA-2551-1 : slirp security update

Two issues have been found in slirp, a SLIP/PPP emulator using a dial up shell account. CVE-2020-7039 Due to mismanagement of memory, a heap-based buffer overflow or other out-of-bounds access might happen, which can lead to a DoS or potential execute arbitrary code. CVE-2020-8608 Prevent a buffe...

Attackers Exploit Critical Adobe Bug, Target Windows

Adobe is warning of a critical vulnerability that has been exploited in the wild to target Adobe Reader users on Windows. The vulnerability CVE-2021-21017 has been exploited in “limited attacks,” according to Adobe’s Tuesday advisory, part of its regularly scheduled February updates. The flaw in...

CVE-2020-17423

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Arbitrary Code Execution

libmysofa.so is vulnerable to arbitrary code execution. The heap-based buffer overflow caused by a segmentation fault in loudness in libmysofa/src/hrtf/tools.c allows arbitrary code execution through access to unallocated memory block...

VulnCheck KEV: CVE-2021-21017

Acrobat Acrobat and Reader contain a heap-based buffer overflow vulnerability that could allow an unauthenticated attacker to achieve code execution in the context of the current user...