PT-2025-11196 · Autodesk · Autodesk Autocad

Name of the Vulnerable Software and Affected Versions: Autodesk AutoCAD affected versions not specified Description: A maliciously crafted MODEL file, when parsed through Autodesk AutoCAD, can force a Heap-Based Overflow, allowing a malicious actor to cause a crash, read sensitive data, or execut...

IrfanView JPM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JPM files...

Important: Red Hat Security Advisory: tigervnc security update

An update for tigervnc is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

Oracle Linux 9 : tigervnc (ELSA-2024-10090)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-10090 advisory. 1.14.1-1 - 1.14.1 Resolves: RHEL-66600 - Fix CVE-2024-9632: xorg-x11-server: heap-based buffer overflow privilege escalation vulnerability Resolves: RHEL-62000...

Important: tigervnc security update

Virtual Network Computing VNC is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients...

tigervnc security update

An update is available for tigervnc. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Virtual Network Computing VNC is a remote display system which allows users ...

RLSA-2024:9689 Low: binutils security update

The binutils packages provide a collection of binary utilities for the manipulation of object code in various object file formats. It includes the ar, as, gprof, ld, nm, objcopy, objdump, ranlib, readelf, size, strings, strip, and addr2line utilities. Security Fixes: binutils: heap-based buffer...

CVE-2024-10204 Heap-based Buffer Overflow and Uninitialized Variable vulnerabilities exist in eDrawings from Release SOLIDWORKS 2024 through Release SOLIDWORKS 2025

Heap-based Buffer Overflow and Uninitialized Variable vulnerabilities exist in the XB and SAT file reading procedure in eDrawings from Release SOLIDWORKS 2024 through Release SOLIDWORKS 2025. These vulnerabilities could allow an attacker to execute arbitrary code while opening a specially crafted...

Oracle Linux 9 : vim (ELSA-2024-9405)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-9405 advisory. 8.2.2637-21.0.1 - Remove upstream references Orabug: 31197557 2:8.2.2637-21 - RHEL-40602 CVE-2021-3903 vim: heap-based buffer overflow vulnerability Tenable has...

RockyLinux 8 : binutils (RLSA-2024:9689)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2024:9689 advisory. binutils: heap-based buffer overflow in finishstab in stabs.c CVE-2018-12699 Tenable has extracted the preceding description block directly from the RockyLinux...

Important: Red Hat Security Advisory: tigervnc security update

An update for tigervnc is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.4 Telecommunications Update Service. Red Hat Product Security has rated this update as...

Important: Red Hat Security Advisory: tigervnc security update

An update for tigervnc is now available for Red Hat Enterprise Linux 9.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

Adobe InDesign < 18.5.4 / 19.0 < 20.0.0 Multiple Vulnerabilities (APSB24-88)

The version of Adobe InDesign installed on the remote Windows host is prior to 18.5.4, 20.0.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB24-88 advisory. - InDesign Desktop versions ID18.5.3, ID19.5 and earlier are affected by a Heap-based Buffer Overflow...

CVE-2024-49778

A heap-based buffer overflow in tsMuxer version nightly-2024-05-12-02-01-18 allows attackers to cause Denial of Service DoS and Code Execution via a crafted MOV video file...

Fedora 37 : rsyslog (2022-f2c4c83cc1)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-f2c4c83cc1 advisory. Automatic update for rsyslog-8.2204.0-1.fc37. Changelog Mon May 9 2022 Attila Lakatos - 8.2204.0-1 - rebase to 8.2204.0 resolves: rhbz1951970 - CVE-2022-2490...

CVE-2024-52613

CVE-2024-52613 concerns tsMuxer, where a heap-based buffer under-read in tsMuxer version nightly-2024-05-12-02-01-18 can cause a DoS via a crafted MOV file. The issue affects the tsMuxer component and is documented across multiple feeds (NVD/Red Hat/CVE lists). According to the PT-2024-35398 advi...

CVE-2024-52613

A heap-based buffer under-read in tsMuxer version nightly-2024-05-12-02-01-18 allows attackers to cause Denial of Service DoS via a crafted MOV video file...

CVE-2024-41209

A heap-based buffer overflow in tsMuxer version nightly-2024-03-14-01-51-12 allows attackers to cause Denial of Service DoS and Code Execution via a crafted MOV video file...

CVE-2024-49778

A heap-based buffer overflow in tsMuxer version nightly-2024-05-12-02-01-18 allows attackers to cause Denial of Service DoS and Code Execution via a crafted MOV video file...

CVE-2024-49778

Summary: CVE-2024-49778 affects the tsMuxer project. A heap-based buffer overflow in tsMuxer nightly-2024-05-12-02-01-18 can be triggered by a crafted MOV video file, enabling Denial of Service and Code Execution. The exposure is indicated as network-based with user interaction required, per CVSS...