EUVD-2016-2721

Malware in sbrugna...

tpm2-tss: Buffer Overlow in TSS2_RC_Decode

A flaw was found in tpm2-tss, which is an open source software implementation of the Trusted Computing Group TCG Trusted Platform Module TPM 2 Software Stack TSS2. In affected versions, Tss2RCSetHandler and Tss2RCDecode index into the layerhandler with an 8-bit layer number, but the array only ha...

Malware in editor-layer-index

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in editor-layer-index (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c27267283420f53586172a7d6b227c424aeb92e63c242a01287112a092a7247a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1168 Malicious code in editor-layer-index (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c27267283420f53586172a7d6b227c424aeb92e63c242a01287112a092a7247a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview editor-layer-index is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this packag...

SUSE CVE-2016-1626

The opjpiupdatedecodepoc function in pi.c in OpenJPEG, as used in PDFium in Google Chrome before 48.0.2564.109, miscalculates a certain layer index value, which allows remote attackers to cause a denial of service out-of-bounds read via a crafted PDF document...

Google Chrome opj_pi_update_decode_poc function denial of service vulnerability

Google Chrome is a web browsing tool developed by Google. Google Chrome 48.0.2564.109 previous version of the existence of a denial of service vulnerability, due to PDFium within OpenJPEG in the function opjpiupdatedecodepoc wrongly calculated a certain layer index value. A remote attacker could...

DEBIAN-CVE-2016-1626

The opjpiupdatedecodepoc function in pi.c in OpenJPEG, as used in PDFium in Google Chrome before 48.0.2564.109, miscalculates a certain layer index value, which allows remote attackers to cause a denial of service out-of-bounds read via a crafted PDF document...