(0Day) Microsoft Print 3D OBJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Print 3D. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

(0Day) Microsoft 3D Builder OBJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft 3D Builder. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

PT-2021-4337

Name of the Vulnerable Software and Affected Versions Solid Edge SE2021 versions prior to SE2021MP8 Description The issue is related to a use-after-free vulnerability when parsing OBJ files. This could allow a remote attacker to execute arbitrary code in the context of the current process by usin...

PT-2021-4336

Name of the Vulnerable Software and Affected Versions Solid Edge SE2021 versions prior to SE2021MP8 Description A use-after-free vulnerability has been identified in the affected application while parsing OBJ files. This issue could allow an attacker to execute code in the context of the current...

PT-2021-4335

Name of the Vulnerable Software and Affected Versions Solid Edge SE2021 versions prior to SE2021MP8 Description The issue is related to a use-after-free vulnerability that occurs when parsing OBJ files. This could allow a remote attacker to execute arbitrary code in the context of the current...

PT-2021-4334

Name of the Vulnerable Software and Affected Versions Solid Edge SE2021 versions prior to SE2021MP8 Description A use-after-free vulnerability has been identified in the affected application while parsing OBJ files. This issue could allow an attacker to execute code in the context of the current...

WS-2021-0089

Prototype pollution vulnerability in obj-ease versions 0.0.2 through 1.0.1 allows an attacker to cause a denial of service and may lead to remote code execution...

Prototype Pollution

safe-obj is vulnerable to prototype pollution. An attacker is able to inject properties into existing construct prototypes and modify attributes such as proto, constructor and prototype...

CVE-2021-25928

Prototype pollution vulnerability in 'safe-obj' versions 1.0.0 through 1.0.2 allows an attacker to cause a denial of service and may lead to remote code execution...

CVE-2021-25928

Prototype pollution vulnerability in 'safe-obj' versions 1.0.0 through 1.0.2 allows an attacker to cause a denial of service and may lead to remote code execution...

Remote code execution

Prototype pollution vulnerability in 'safe-obj' versions 1.0.0 through 1.0.2 allows an attacker to cause a denial of service and may lead to remote code execution...

CVE-2021-25928

Prototype pollution vulnerability in 'safe-obj' versions 1.0.0 through 1.0.2 allows an attacker to cause a denial of service and may lead to remote code execution...

CVE-2021-25928

CVE-2021-25928 concerns a prototype pollution vulnerability in the npm package ‘safe-obj’ affecting versions 1.0.0 through 1.0.2. The issue allows an attacker to cause a denial of service and may lead to remote code execution via prototype pollution. Several connected sources corroborate the impa...

CVE-2021-25928

Prototype pollution vulnerability in 'safe-obj' versions 1.0.0 through 1.0.2 allows an attacker to cause a denial of service and may lead to remote code execution...

CVE-2021-25928

Prototype pollution vulnerability in 'safe-obj' versions 1.0.0 through 1.0.2 allows an attacker to cause a denial of service and may lead to remote code execution...

CVE-2021-25928: Improperly Controlled Modification of Object Prototype Attributes

Prototype pollution vulnerability in 'safe-obj' versions 1.0.0 through 1.0.2 allows an attacker to cause a denial of service and may lead to remote code execution...

safe-obj security vulnerability

A security vulnerability exists in safe-obj versions 1.0.0 through 1.0.2 that can be exploited by an attacker to cause a denial of service and possibly remote code execution...

Prusa Research PrusaSlicer Objparser::objparse() stack-based buffer overflow vulnerability

Summary A stack-based buffer overflow vulnerability exists in the Objparser::objparse functionality of Prusa Research PrusaSlicer 2.2.0 and Master commit 4b040b856. A specially crafted obj file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...

Prusa Research PrusaSlicer Obj.cpp load_obj() out-of-bounds write vulnerability

Summary An out-of-bounds write vulnerability exists in the Obj.cpp loadobj functionality of Prusa Research PrusaSlicer 2.2.0 and Master commit 4b040b856. A specially crafted obj file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability. Tested Version...

CVE-2020-28590

An out-of-bounds read vulnerability exists in the Obj File TriangleMesh::TriangleMesh functionality of Slic3r libslic3r 1.3.0 and Master Commit 92abbc42. A specially crafted obj file could lead to information disclosure. An attacker can provide a malicious file to trigger this vulnerability...