Lucene search
K

12 matches found

BDU FSTEC
BDU FSTEC
added 2021/09/20 12:0 a.m.3 views

The vulnerability of the function import_stl() in the import_stl.cc component of the OpenSCAD automated design system, related to writing outside the buffer boundaries, allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the importstl function in the importstl.cc component of the OpenSCAD automated design system is related to writing outside the buffer boundaries. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and even caus...

8.8CVSS7.5AI score0.01274EPSS
Exploits1References4Affected Software2
Prion
Prion
added 2021/05/10 8:15 p.m.12 views

Cross site scripting

An out-of-bounds write vulnerability exists in the importstl.cc:importstl functionality of Openscad openscad-2020.12-RC2. A specially crafted STL file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...

6.8CVSS7.7AI score0.01274EPSS
Exploits1References1Affected Software1
CVE
CVE
added 2021/05/10 7:18 p.m.173 views

CVE-2020-28600

The CVE-2020-28600 entry concerns OpenSCAD (openscad-2020.12-RC2) with an out-of-bounds write in import_stl():import_stl() that allows code execution via a specially crafted STL file. The vulnerability impacts the STL import path and is referenced in multiple advisories (openSUSE/OpenSCAD securit...

8.8CVSS7.6AI score0.01274EPSS
Exploits1References1Affected Software1
Debian CVE
Debian CVE
added 2021/05/10 7:18 p.m.19 views

CVE-2020-28600

An out-of-bounds write vulnerability exists in the importstl.cc:importstl functionality of Openscad openscad-2020.12-RC2. A specially crafted STL file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...

8.8CVSS8.3AI score0.01274EPSS
Exploits1
Mageia
Mageia
added 2021/03/27 2:27 p.m.25 views

Updated openscad package fixes a security vulnerability

A stack-based buffer overflow vulnerability exists in the importstl.cc:importstl functionality of Openscad openscad-2020.12-RC2. A specially crafted STL file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability CVE-2020-28599...

8.8CVSS4.2AI score0.01956EPSS
Exploits1References2
Veracode
Veracode
added 2021/02/26 1:47 a.m.18 views

Arbitrary Code Execution

openscad is vulnerable to arbitrary code execution. A stack-based buffer overflow vulnerability in the importstl.cc:importstl functionality allows an attacker to execute arbitrary code on the host OS via a malicious STL file...

7.8CVSS4.8AI score0.01956EPSS
Exploits1References8Affected Software1
NVD
NVD
added 2021/02/24 4:15 p.m.14 views

CVE-2020-28599

A stack-based buffer overflow vulnerability exists in the importstl.cc:importstl functionality of Openscad openscad-2020.12-RC2. A specially crafted STL file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...

8.8CVSS0.01956EPSS
Exploits1References5
OSV
OSV
added 2021/02/24 4:15 p.m.15 views

CVE-2020-28599

A stack-based buffer overflow vulnerability exists in the importstl.cc:importstl functionality of Openscad openscad-2020.12-RC2. A specially crafted STL file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...

7.8CVSS7.4AI score
Exploits0References5
Prion
Prion
added 2021/02/24 4:15 p.m.20 views

Stack overflow

A stack-based buffer overflow vulnerability exists in the importstl.cc:importstl functionality of Openscad openscad-2020.12-RC2. A specially crafted STL file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...

6.8CVSS8.8AI score0.01956EPSS
Exploits1References5Affected Software2
Cvelist
Cvelist
added 2021/02/24 3:58 p.m.30 views

CVE-2020-28599

A stack-based buffer overflow vulnerability exists in the importstl.cc:importstl functionality of Openscad openscad-2020.12-RC2. A specially crafted STL file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...

8.8CVSS7.7AI score0.01956EPSS
Exploits1References5
Debian CVE
Debian CVE
added 2021/02/24 3:58 p.m.23 views

CVE-2020-28599

A stack-based buffer overflow vulnerability exists in the importstl.cc:importstl functionality of Openscad openscad-2020.12-RC2. A specially crafted STL file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...

8.8CVSS8.4AI score0.01956EPSS
Exploits1
Talos
Talos
added 2021/02/23 12:0 a.m.41 views

Openscad import_stl.cc:import_stl() stack-based buffer overflow vulnerability

Summary A stack-based buffer overflow vulnerability exists in the importstl.cc:importstl functionality of Openscad openscad-2020.12-RC2. A specially crafted STL file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability. Tested Versions Openscad...

8.8CVSS8AI score0.01956EPSS
Exploits1
Rows per page
Query Builder