Lucene search
K

4779 matches found

Prion
Prion
added 2023/08/31 10:15 p.m.19 views

Integer overflow

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. Affected versions are subject to an Integer-Underflow leading to Out-Of-Bound Read in the zgfxdecompresssegment function. In the context of CopyMemory, it's possible to read data beyond the...

6.4CVSS9.1AI score0.01432EPSS
Exploits1References8Affected Software3
OSV
OSV
added 2023/08/31 10:15 p.m.0 views

UBUNTU-CVE-2023-40181

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. Affected versions are subject to an Integer-Underflow leading to Out-Of-Bound Read in the zgfxdecompresssegment function. In the context of CopyMemory, it's possible to read data beyond the...

9.1CVSS6.7AI score0.01432EPSS
Exploits1References6
CVE
CVE
added 2023/08/31 9:6 p.m.97 views

CVE-2023-40181

CVE-2023-40181 (FreeRDP) is an integer-underflow in the zgfx_decompress_segment path that can cause an out-of-bounds read during CopyMemory, potentially crashing the client. Affected are FreeRDP variants implementing RDP; the issue is fixed in versions 2.11.0 and 3.0.0-beta3. The vulnerability st...

9.1CVSS7.1AI score0.01432EPSS
Exploits1References9Affected Software1
Cvelist
Cvelist
added 2023/08/31 9:6 p.m.19 views

CVE-2023-40181 Integer-Underflow leading to Out-Of-Bound Read in FreeRDP

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. Affected versions are subject to an Integer-Underflow leading to Out-Of-Bound Read in the zgfxdecompresssegment function. In the context of CopyMemory, it's possible to read data beyond the...

5.3CVSS9.5AI score0.01432EPSS
Exploits1References8
OSV
OSV
added 2023/08/31 9:6 p.m.26 views

CVE-2023-40181 Integer-Underflow leading to Out-Of-Bound Read in FreeRDP

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. Affected versions are subject to an Integer-Underflow leading to Out-Of-Bound Read in the zgfxdecompresssegment function. In the context of CopyMemory, it's possible to read data beyond the...

5.3CVSS7.2AI score0.01432EPSS
Exploits1References11
Debian CVE
Debian CVE
added 2023/08/31 9:6 p.m.23 views

CVE-2023-40181

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. Affected versions are subject to an Integer-Underflow leading to Out-Of-Bound Read in the zgfxdecompresssegment function. In the context of CopyMemory, it's possible to read data beyond the...

9.1CVSS8.4AI score0.01432EPSS
Exploits1
AlpineLinux
AlpineLinux
added 2023/08/31 8:15 p.m.23 views

CVE-2023-39350

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. This issue affects Clients only. Integer underflow leading to DOS e.g. abort due to WINPRASSERT with default compilation flags. When an insufficient blockLen is provided, and proper length...

7.5CVSS7.1AI score0.01385EPSS
Exploits1
OSV
OSV
added 2023/08/31 8:15 p.m.1 views

DEBIAN-CVE-2023-39350

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. This issue affects Clients only. Integer underflow leading to DOS e.g. abort due to WINPRASSERT with default compilation flags. When an insufficient blockLen is provided, and proper length...

7.5CVSS7.3AI score0.01385EPSS
Exploits1References1
NVD
NVD
added 2023/08/31 8:15 p.m.25 views

CVE-2023-39350

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. This issue affects Clients only. Integer underflow leading to DOS e.g. abort due to WINPRASSERT with default compilation flags. When an insufficient blockLen is provided, and proper length...

7.5CVSS7.5AI score0.01385EPSS
Exploits1References8
Prion
Prion
added 2023/08/31 8:15 p.m.24 views

Integer overflow

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. This issue affects Clients only. Integer underflow leading to DOS e.g. abort due to WINPRASSERT with default compilation flags. When an insufficient blockLen is provided, and proper length...

5CVSS7.8AI score0.01385EPSS
Exploits1References7Affected Software3
UbuntuCve
UbuntuCve
added 2023/08/31 8:15 p.m.22 views

CVE-2023-39350

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. This issue affects Clients only. Integer underflow leading to DOS e.g. abort due to WINPRASSERT with default compilation flags. When an insufficient blockLen is provided, and proper length...

7.5CVSS6.7AI score0.01385EPSS
Exploits1References4
OSV
OSV
added 2023/08/31 8:15 p.m.1 views

UBUNTU-CVE-2023-39350

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. This issue affects Clients only. Integer underflow leading to DOS e.g. abort due to WINPRASSERT with default compilation flags. When an insufficient blockLen is provided, and proper length...

7.5CVSS6.8AI score0.01385EPSS
Exploits1References5
OSV
OSV
added 2023/08/31 7:31 p.m.23 views

CVE-2023-39350 Incorrect offset calculation leading to denial of service in FreeRDP

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. This issue affects Clients only. Integer underflow leading to DOS e.g. abort due to WINPRASSERT with default compilation flags. When an insufficient blockLen is provided, and proper length...

5.9CVSS7.5AI score0.01385EPSS
Exploits1References10
Cvelist
Cvelist
added 2023/08/31 7:31 p.m.30 views

CVE-2023-39350 Incorrect offset calculation leading to denial of service in FreeRDP

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. This issue affects Clients only. Integer underflow leading to DOS e.g. abort due to WINPRASSERT with default compilation flags. When an insufficient blockLen is provided, and proper length...

5.9CVSS8.8AI score0.01385EPSS
Exploits1References7
Debian CVE
Debian CVE
added 2023/08/31 7:31 p.m.24 views

CVE-2023-39350

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. This issue affects Clients only. Integer underflow leading to DOS e.g. abort due to WINPRASSERT with default compilation flags. When an insufficient blockLen is provided, and proper length...

7.5CVSS7.8AI score0.01385EPSS
Exploits1
Tenable Nessus
Tenable Nessus
added 2023/08/31 12:0 a.m.196 views

7-Zip < 23.00 Multiple Vulnerabilities

The version of 7-Zip installed on the remote Windows host is below 23.00. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability exists in 7-zip due to an integer underflow. An unauthenticated, remote attacker can exploit this, by tricking a user into...

7.8CVSS7.8AI score0.7104EPSS
Exploits0References4
SUSE CVE
SUSE CVE
added 2023/08/29 2:9 a.m.2 views

SUSE CVE-2023-31102

Ppmd7.c in 7-Zip before 23.00 allows an integer underflow and invalid read operation via a crafted 7Z archive...

7.8CVSS6.8AI score0.7104EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2023/08/28 12:0 a.m.8 views

PT-2023-4666 · Freerdp +8 · Freerdp +8

Name of the Vulnerable Software and Affected Versions: FreeRDP versions prior to 2.11.0 FreeRDP versions prior to 3.0.0-beta3 Description: The issue affects FreeRDP clients only and is related to an integer underflow leading to a Denial of Service DOS vulnerability. When an insufficient blockLen ...

9.8CVSS6.5AI score0.0375EPSS
Exploits25References316
Positive Technologies
Positive Technologies
added 2023/08/23 12:0 a.m.3 views

PT-2023-4537

Name of the Vulnerable Software and Affected Versions 7-Zip versions prior to 23.00 Description The issue is related to an integer underflow in the 7z file parser component of 7-Zip, allowing a remote attacker to execute arbitrary code on affected installations. This can be achieved by tricking t...

10CVSS7.5AI score0.7104EPSS
Exploits0References25
Zero Day Initiative
Zero Day Initiative
added 2023/08/23 12:0 a.m.38 views

7-Zip 7Z File Parsing Integer Underflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of 7Z files. The...

7.8CVSS6.8AI score0.7104EPSS
Exploits0References1
Rows per page
Query Builder