Lucene search
K

11 matches found

Prion
Prion
added 2021/05/10 8:15 p.m.11 views

Cross site scripting

An out-of-bounds write vulnerability exists in the importstl.cc:importstl functionality of Openscad openscad-2020.12-RC2. A specially crafted STL file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...

6.8CVSS7.7AI score0.00696EPSS
Exploits1References1Affected Software1
CVE
CVE
added 2021/05/10 7:18 p.m.170 views

CVE-2020-28600

The CVE-2020-28600 entry concerns OpenSCAD (openscad-2020.12-RC2) with an out-of-bounds write in import_stl():import_stl() that allows code execution via a specially crafted STL file. The vulnerability impacts the STL import path and is referenced in multiple advisories (openSUSE/OpenSCAD securit...

8.8CVSS7.6AI score0.00696EPSS
Exploits1References1Affected Software1
Debian CVE
Debian CVE
added 2021/05/10 7:18 p.m.18 views

CVE-2020-28600

An out-of-bounds write vulnerability exists in the importstl.cc:importstl functionality of Openscad openscad-2020.12-RC2. A specially crafted STL file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...

8.8CVSS8.3AI score0.00696EPSS
Exploits1
Mageia
Mageia
added 2021/03/27 2:27 p.m.24 views

Updated openscad package fixes a security vulnerability

A stack-based buffer overflow vulnerability exists in the importstl.cc:importstl functionality of Openscad openscad-2020.12-RC2. A specially crafted STL file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability CVE-2020-28599...

8.8CVSS4.2AI score0.01358EPSS
Exploits1References2
Veracode
Veracode
added 2021/02/26 1:47 a.m.16 views

Arbitrary Code Execution

openscad is vulnerable to arbitrary code execution. A stack-based buffer overflow vulnerability in the importstl.cc:importstl functionality allows an attacker to execute arbitrary code on the host OS via a malicious STL file...

7.8CVSS4.8AI score0.01358EPSS
Exploits1References8Affected Software1
NVD
NVD
added 2021/02/24 4:15 p.m.11 views

CVE-2020-28599

A stack-based buffer overflow vulnerability exists in the importstl.cc:importstl functionality of Openscad openscad-2020.12-RC2. A specially crafted STL file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...

8.8CVSS0.01358EPSS
Exploits1References5
OSV
OSV
added 2021/02/24 4:15 p.m.13 views

CVE-2020-28599

A stack-based buffer overflow vulnerability exists in the importstl.cc:importstl functionality of Openscad openscad-2020.12-RC2. A specially crafted STL file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...

7.8CVSS7.4AI score
Exploits0References5
Prion
Prion
added 2021/02/24 4:15 p.m.16 views

Stack overflow

A stack-based buffer overflow vulnerability exists in the importstl.cc:importstl functionality of Openscad openscad-2020.12-RC2. A specially crafted STL file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...

6.8CVSS8.8AI score0.01358EPSS
Exploits1References5Affected Software2
Cvelist
Cvelist
added 2021/02/24 3:58 p.m.15 views

CVE-2020-28599

A stack-based buffer overflow vulnerability exists in the importstl.cc:importstl functionality of Openscad openscad-2020.12-RC2. A specially crafted STL file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...

8.8CVSS7.7AI score0.01358EPSS
Exploits1References5
Debian CVE
Debian CVE
added 2021/02/24 3:58 p.m.22 views

CVE-2020-28599

A stack-based buffer overflow vulnerability exists in the importstl.cc:importstl functionality of Openscad openscad-2020.12-RC2. A specially crafted STL file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...

8.8CVSS8.4AI score0.01358EPSS
Exploits1
Talos
Talos
added 2021/02/23 12:0 a.m.38 views

Openscad import_stl.cc:import_stl() stack-based buffer overflow vulnerability

Summary A stack-based buffer overflow vulnerability exists in the importstl.cc:importstl functionality of Openscad openscad-2020.12-RC2. A specially crafted STL file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability. Tested Versions Openscad...

8.8CVSS8AI score0.01358EPSS
Exploits1
Rows per page
Query Builder