CVE-2020-14344

The CVE-2020-14344 issue is described in Connected Document ALAS2-2021-1661 as an integer overflow in libX11 that leads to a heap-buffer overflow when setuid processes call XIM client functions. Affected packages include libX11 and related libX11-devel/debuginfo across aarch64, i686, noarch, src,...

CVE-2020-14344

An integer overflow leading to a heap-buffer overflow was found in The X Input Method XIM client was implemented in libX11 before version 1.6.10. As per upstream this is security relevant when setuid programs call XIM client functions while running with elevated privileges. No such programs are...

libX11 -- Heap corruption in the X input method client in libX11

The X.org project reports: The X Input Method XIM client implementation in libX11 has some integer overflows and signed/unsigned comparison issues that can lead to heap corruption when handling malformed messages from an input method...

ALSA-2020:1880 Moderate: ibus and glib2 security and bug fix update

GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures. The Intelligent Input Bus IBus is an input...

Directory traversal

An issue was discovered on Samsung mobile devices with KK4.4 and later software through 2015-06-16. In some cases, HTTP is used for an Inputmethod, rather than HTTPS. A man-in-the-middle attacker can modify the client-server data stream to insert directory traversal sequences into an extracted fi...

CVE-2018-21088

An issue was discovered on Samsung mobile devices with N7.x software. An attacker can cause a reboot because InputMethodManagerService has an unprotected system service. The Samsung ID is SVE-2017-9995 January 2018...

Code Execution Vulnerability in Coyote Hair Input Method

Coyote Hair Input Method is the Windows version of the Zhongzhou Rhyme Input Method engine. A code execution vulnerability exists in Coyote Hair Input Method, which can be exploited by attackers to execute malicious code...

The vulnerability of the Input Method Editor (IME) component of the Windows operating system, which allows a hacker to gain elevated privileges

The vulnerability of the Input Method Editor IME component in the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...

Baidu Five Strokes Input Method Exploits Dll Hijacking Vulnerability

Baidu 5-stroke Input Method is a Chinese 5-stroke input method software under Baidu. Baidu Five Strokes Input Method suffers from a Dll hijacking vulnerability, which can be exploited by attackers to load a malicious dll and execute arbitrary code...

Baidu Pinyin Input Method Exploits Dll Hijacking Vulnerability

Baidu Pinyin Input Method is a Chinese pinyin input method software under Baidu. Baidu Pinyin Input Method suffers from a Dll hijacking vulnerability, which can be exploited by an attacker to load a malicious dll and execute arbitrary code...

Sogou Input Method of Beijing Sogou Information Service Co.

Sogou Input Method is a Chinese character input method tool launched in June 2006 by Sogou Sogou. Sogou Input Method has a dll hijacking vulnerability, which can be exploited by attackers to remotely control a user's computer or implant a Trojan horse...

Baidu Input Method of Beijing Baidu Netcom Technology Co. Ltd. suffers from dll hijacking vulnerability

Baidu Input Method is an input method that integrates handwriting, voice, win10, strokes, mouse handwriting and mobile input method. Ltd. Baidu Input Method has a dll hijacking vulnerability, which can be exploited by attackers to cause a user's computer to be remote controlled or implanted with ...

Code Execution Vulnerability in QQ Pinyin Input Method Installer

QQ Pinyin Input Method is a Chinese pinyin input method software. A code execution vulnerability exists in the QQ Pinyin Input Method installer. It can be exploited by an attacker to execute arbitrary code...

Microsoft Windows IME Privilege Vulnerability

Microsoft Windows is a set of operating systems used for personal devices.Microsoft Windows Server is a set of server operating systems. An elevation of privilege vulnerability exists in Microsoft Windows IME, which arises from a program's failure to properly handle memory. An attacker could...

CVE-2020-0707

An elevation of privilege vulnerability exists when the Windows IME improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows IME Elevation of Privilege Vulnerability'...

Unspecified Vulnerability in Tecno Camon

The Tecno Camon is a Camon series smartphone from the Chinese company Transocean. An unspecified vulnerability exists in Tecno Camon. The vulnerability can be exploited to execute code or commands with system privileges to record the screen, restore factory settings, obtain the user's Wi-Fi...

Unspecified Vulnerability in Tecno Camon iClick (CNVD-2020-14790)

The Transn Tecno Camon iClick is a smartphone from the Chinese company Transn. An unspecified vulnerability exists in Tecno Camon iClick. The vulnerability can be exploited to execute code or commands with system privileges to record the screen, restore factory settings, obtain the user's Wi-Fi...

Unspecified Vulnerability in Tecno Camon iClick

The Transn Tecno Camon iClick is a smartphone from the Chinese company Transn. An unspecified vulnerability exists in Tecno Camon iClick. The vulnerability can be exploited to execute code or commands with system privileges to record the screen, restore factory settings, obtain the user's Wi-Fi...

Unspecified Vulnerability in Tecno Camon (CNVD-2020-14795)

The Tecno Camon is a Camon series smartphone from the Chinese company Transocean. An unspecified vulnerability exists in Tecno Camon. The vulnerability can be exploited to execute code or commands with system privileges to record the screen, restore factory settings, obtain the user's Wi-Fi...

Sogou Pinyin Input Method Exploits DLL Hijacking Vulnerability

Sogou Pinyin Input Method is a Chinese character input method tool. A DLL hijacking vulnerability exists in Sogou Pinyin Input Method. An attacker can exploit this vulnerability to load a malicious dll and execute arbitrary code...