lz4_flex 安全漏洞

lz4flex is a high-performance LZ4 compression library written by PSeitz’s individual developers in the Rust language. Versions of lz4flex prior to 0.11.5 and 0.12.0 contain security vulnerabilities. These vulnerabilities stem from improper decompression of LZ4 data, leading to out-of-bounds read...

CVE-2018-8413

A remote code execution vulnerability exists when "Windows Theme API" does not properly decompress files, aka "Windows Theme API Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows...

PT-2018-2088

Name of the Vulnerable Software and Affected Versions Windows versions prior to the fixed version Description A remote code execution issue exists due to improper decompression of files by the Windows Theme API, allowing remote attackers to execute arbitrary code in the context of the current use...