929 matches found
Design/Logic Flaw
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...
CVE-2022-24369
CVE-2022-24369 affects Foxit PDF Reader 11.1.0.52543. The flaw occurs in JP2 image parsing, where crafted data can trigger a write past the end of an allocated buffer, enabling arbitrary code execution in the context of the current process. User interaction is required (target must visit a malici...
CVE-2022-24369
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
CVE-2022-24063
CVE-2022-24063 affects Sante DICOM Viewer Pro 13.2.0.21165. The issue is a memory corruption caused by improper validation in the JP2 file parsing path, enabling arbitrary code execution when a user visits a malicious page or opens a malicious file. Exploitation requires user interaction, and ZDI...
CVE-2022-24063
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pro 13.2.0.21165. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...
CVE-2022-24062
CVE-2022-24062 affects Sante DICOM Viewer Pro 13.2.0.21165. The issue arises in JP2 file parsing where the code fails to validate the existence of an object before performing operations, enabling remote code execution. Exploitation requires user interaction (visiting a malicious page or opening a...
CVE-2022-24062
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pro 13.2.0.21165. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...
CVE-2021-46632
CVE-2021-46632 affects Bentley View 10.15.0.75. The bug resides in JP2 image parsing and stems from improper validation, causing a read past end of allocated buffer. This can enable information disclosure and, in conjunction with other flaws, may allow arbitrary code execution in the current proc...
CVE-2021-46632
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...
CVE-2021-46611
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...
CVE-2021-46611
CVE-2021-46611 affects Bentley MicroStation CONNECT 10.16.0.80. The issue is a JP2 image parsing flaw caused by insufficient validation, leading to a read past the end of an allocated buffer. This can enable an attacker to disclose sensitive information and, per the CVE entry, may be leveraged (i...
CVE-2021-46582
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...
CVE-2021-46582
Bentley MicroStation CONNECT (versions including 10.16.0.80) is affected by a JP2 image parsing vulnerability. The flaw arises from not validating the existence of an object before performing operations on it, enabling use-after-free-like behavior that can lead to remote code execution. Exploitat...
CVE-2021-46632: Out-of-bounds Read
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...
CVE-2021-46582: Use After Free
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...
CVE-2022-24369: Out-of-bounds Write
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
CVE-2021-46611: Out-of-bounds Read
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...
CVE-2022-24063: Improper Restriction of Operations within the Bounds of a Memory Buffer
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pro 13.2.0.21165. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...
CVE-2022-24062: Use After Free
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pro 13.2.0.21165. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...
Foxit PDF Reader Buffer Overflow Vulnerability (CNVD-2023-49839)
Foxit PDF Reader is a Chinese Foxit Foxit company's a PDF reader. A security vulnerability exists in Foxit PDF Reader, which stems from carefully crafted data in JP2 images that can trigger the reading of data beyond the end of the allocated buffer. The vulnerability can be exploited by an attack...