PT-2018-3122

Name of the Vulnerable Software and Affected Versions Blender version 2.78c Description The issue is caused by an integer overflow in the TIFF loading functionality. Exploitation can occur through a specially crafted '.tif' file, leading to a buffer overflow and potentially allowing code executio...

PT-2018-3123

Name of the Vulnerable Software and Affected Versions Blender version 2.78c Description The issue is caused by an integer overflow in the PNG loading functionality. This can be exploited by using a specially crafted '.png' file, which can cause a buffer overflow and allow for code execution under...

CVE-2017-2903: Integer Overflow or Wraparound

An exploitable integer overflow exists in the DPX loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted '.cin' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application...

PT-2018-3126

Name of the Vulnerable Software and Affected Versions Blender version 2.78c Description An integer overflow exists in the DPX loading functionality, which can be exploited using a specially crafted '.cin' file. This can cause a buffer overflow, allowing for code execution under the context of the...

PT-2018-3125

Name of the Vulnerable Software and Affected Versions Blender version 2.78c Description The issue is related to an integer overflow in the DPX loading functionality, which can lead to a buffer overflow. This can be exploited by using a specially crafted '.cin' file, potentially allowing an attack...

CVE-2017-2902: Integer Overflow or Wraparound

An exploitable integer overflow exists in the DPX loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted '.cin' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application...

CVE-2017-2901: Integer Overflow or Wraparound

An exploitable integer overflow exists in the IRIS loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted '.iris' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the applicatio...

Debian DSA-4177-1 : libsdl2-image - security update

Multiple vulnerabilities have been discovered in the image loading library for Simple DirectMedia Layer 2, which could result in denial of service or the execution of arbitrary code if malformed image files are opened. C Tenable Network Security, Inc. The descriptive text and package checks in th...

Chrome OS Buffer Overflow DoS

The vulnerability of the Chrome OS operating system arises from operations that occur outside of the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands during the loading of the operating system...

KLA11237 Multiple vulnerabilities in Foxit Reader and Foxit PhantomPDF

Multiple serious vulnerabilities have been found in Foxit Reader and Foxit PhantomPDF. Malicious users can exploit these vulnerabilities to obtain sensitive information, cause denial of service and execute arbitrary code. Below is a complete list of vulnerabilities: 1. An unsafe DLL loading...

PT-2018-4667

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 Description The issue concerns the loading of image types in Android. Specifically, three image types are loaded in the same manner without distinguishing them, which could lead to potential security issues...

Amazon Linux 2 : java-1.8.0-openjdk (ALAS-2018-949)

SingleEntryRegistry incorrect setup of deserialization filter JMX, 8186998 It was discovered that the JMX component of OpenJDK failed to properly set the deserialization filter for the SingleEntryRegistry in certain cases. A remote attacker could possibly use this flaw to bypass intended...

GDK-PixBuf: Remote code execution

Background GDK-PixBuf is an image loading library for GTK+. Description Several integer overflows were discovered in GDK-PixBuf’s gifgetlzw function. Impact A remote attacker, by enticing a user to process a specially crafted image file, could execute arbitrary code or cause a Denial of Service...

Ubuntu 14.04 LTS / 16.04 LTS : Perl vulnerabilities (USN-3625-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3625-1 advisory. It was discovered that Perl incorrectly handled certain regular expressions. An attacker could possibly use this issue to cause Perl to hang,...

CVE-2018-10170

NordVPN 6.12.7.0 for Windows suffers from a SYSTEM privilege escalation vulnerability through the "nordvpn-service" service. This service establishes an NetNamedPipe endpoint that allows arbitrary installed applications to connect and call publicly exposed methods. The "Connect" method accepts a...

USN-3625-1 perl vulnerabilities

It was discovered that Perl incorrectly handled certain regular expressions. An attacker could possibly use this issue to cause Perl to hang, resulting in a denial of service. This issue only affected Ubuntu 14.04 LTS. CVE-2015-8853 It was discovered that Perl incorrectly loaded libraries from th...

Installer of SoundEngine Free may insecurely load Dynamic Link Libraries

Overview Installer of SoundEngine Free contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Eili Masami of Tachibana Lab. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warni...

JVN#85056623: Installer of SoundEngine Free may insecurely load Dynamic Link Libraries

Installer of SoundEngine Free contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Impact Arbitrary code may be executed with the privilege of the user invoking the installer. Solution Use the latest installer Use the latest installer...

The installer of PhishWall Client Internet Explorer edition may insecurely load Dynamic Link Libraries

Overview PhishWall Client Internet Explorer edition provided by SecureBrain Corporation is anti-phishing and anti-MITB software. The installer of PhishWall Client Internet Explorer edition contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries...

Adobe ColdFusion Multiple Vulnerabilities (APSB18-14)

Adobe ColdFusion is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:coldfusion";...