CVE-2021-28608

CVE-2021-28608 affects Adobe After Effects 18.2 and earlier. A heap-based buffer overflow occurs when parsing a specially crafted file, allowing an unauthenticated, context-user arbitrary code execution, with exploitation requiring user interaction (victim opens a malicious file). Remediation: ap...

CVE-2021-28610

CVE-2021-28610 affects Adobe After Effects 18.2 and earlier. The vulnerability is a heap-based buffer overflow that occurs while parsing a specially crafted file, allowing arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim opens a malicious...

CVE-2021-28603

CVE-2021-28603 affects Adobe After Effects 18.2 and earlier. It is a heap-based buffer overflow triggered while parsing a specially crafted file, allowing arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim must open a malicious file). Affec...

CVE-2021-32263

CVE-2021-32263 affects the ok-file-formats project. The vulnerability is a heap-based buffer overflow in the ok_csv_circular_buffer_read function within ok_csv.c, with affected releases up to 2021-04-29. The initial entry provides no explicit exploitation details, affected versions beyond the dat...

Debian DLA-2748-1 : tnef - LTS security update

The remote Debian 9 host has a package installed that is affected by a vulnerability as referenced in the dla-2748 advisory. - In tnef before 1.4.18, an attacker may be able to write to the victim's .ssh/authorizedkeys file via an e-mail message with a crafted winmail.dat application/ms-tnef...

CVE-2020-18778

In Libav 12.3, there is a heap-based buffer over-read in vc1decodepmbintfi in vc1block.c that allows an attacker to cause denial-of-service via a crafted file...

CVE-2020-18778

CVE-2020-18778 describes a heap-based buffer over-read in Libav 12.3, specifically in vc1_decode_p_mb_intfi of vc1_block.c. This flaw can allow a denial-of-service when processing a crafted VC-1 file. The available sources consistently identify the affected component and the nature of the vulnera...

openSUSE: Security Advisory for libass (openSUSE-SU-2021:1174-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE 15 Security Update : libass (openSUSE-SU-2021:2792-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:2792-1 advisory. - libass 0.15.x before 0.15.1 has a heap-based buffer overflow in decodechars called from decodefont and processtext because the wrong integer data...

SUSE SLED15 / SLES15 Security Update : aspell (SUSE-SU-2021:2794-1)

The remote SUSE Linux SLED15 / SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:2794-1 advisory. - CVE-2019-25051: Fixed heap-buffer-overflow in acommon:ObjStack:duptop bsc1188576. Tenable has extracted the preceding description block...

SUSE SLED15 / SLES15 Security Update : libass (SUSE-SU-2021:2792-1)

The remote SUSE Linux SLED15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:2792-1 advisory. - CVE-2020-36430: Fixed heap-based buffer overflow in decodechars bsc1188539. Tenable has extracted the preceding description block...

openSUSE 15 Security Update : libass (openSUSE-SU-2021:1174-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:1174-1 advisory. - libass 0.15.x before 0.15.1 has a heap-based buffer overflow in decodechars called from decodefont and processtext because the wrong integer data...

Security update for libass (important)

openSUSE Security Update: Security update for libass Announcement ID: openSUSE-SU-2021:1174-1 Rating: important References: 1188539 Cross-References: CVE-2020-36430 CVSS scores: CVE-2020-36430 NVD : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2020-36430 SUSE: 7.5...

openSUSE 15 Security Update : aspell (openSUSE-SU-2021:2794-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:2794-1 advisory. - objstack in GNU Aspell 0.60.8 has a heap-based buffer overflow in acommon::ObjStack::duptop called from acommon::StringMap::add and...

CVE-2021-21826

A heap-based buffer overflow vulnerability exists in the XML Decompression DecodeTreeBlock functionality of AT&T Labs Xmill 0.7. Within DecodeTreeBlock which is called during the decompression of an XMI file, a UINT32 is loaded from the file and used as trusted input as the length of a buffer. An...

CVE-2021-21827

A heap-based buffer overflow vulnerability exists in the XML Decompression DecodeTreeBlock functionality of AT&T Labs Xmill 0.7. Within DecodeTreeBlock which is called during the decompression of an XMI file, a UINT32 is loaded from the file and used as trusted input as the length of a buffer. An...

CVE-2021-21828

A heap-based buffer overflow vulnerability exists in the XML Decompression DecodeTreeBlock functionality of AT&T Labs Xmill 0.7. In the default case of DecodeTreeBlock a label is created via CurPath::AddLabel in order to track the label for later reference. An attacker can provide a malicious fil...

CVE-2021-21826

A heap-based buffer overflow vulnerability exists in the XML Decompression DecodeTreeBlock functionality of AT&T Labs Xmill 0.7. Within DecodeTreeBlock which is called during the decompression of an XMI file, a UINT32 is loaded from the file and used as trusted input as the length of a buffer. An...

CVE-2021-28638 Adobe Acrobat Reader DC PDF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Acrobat Reader DC versions 2021.005.20054 and earlier, 2020.004.30005 and earlier and 2017.011.30197 and earlier are affected by a Heap-based Buffer overflow vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the...

CVE-2021-28638

CVE-2021-28638 affects Adobe Acrobat Reader DC/Classic/Continuous in various older builds (Reader DC 2021.005.20054 and earlier; 2020.004.30005 and earlier; 2017.011.30197 and earlier) and is a heap-based buffer overflow in PDF parsing. An unauthenticated attacker could achieve arbitrary code exe...