Vulnerability of software for modeling, design, and drawing in AutoCAD, related to data writing beyond the buffer, allowing a perpetrator to execute arbitrary code

The vulnerability of software for modeling, designing, and drawing in AutoCAD is related to the writing of data beyond the buffer during syntax analysis of DWG files. Exploiting this vulnerability can allow a perpetrator to execute arbitrary code using a specially created malicious DWG file...

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2020 are related to writing beyond the buffer in memory, allowing attackers to execute arbitrary code.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 are related to writing beyond the buffer in memory. Exploiting these...

OpenSSL Multiple Vulnerabilities (20140605 - 1) - Windows

OpenSSL is prone to multiple vulnerabilities. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud and Adobe Acrobat Reader Document Cloud, as well as Adobe Acrobat 2017 and Adobe Acrobat Reader 2017, are related to an operation that goes beyond the buffer in memory. This allows attackers to execute arbitrary code.

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, and Adobe Acrobat Reader 2017 is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow a...

The vulnerability of the PDFium browser’s PDF-content processor in Google Chrome allows a hacker to execute arbitrary code.

The vulnerability of the PDFium browser for processing PDF content in Google Chrome is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially crafted file...

The vulnerability of the Adobe Bridge file manager, related to writing beyond the buffer boundaries in memory, allows a hacker to execute arbitrary code.

The vulnerability of the Adobe Bridge file manager is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code remotely...

kernel: size_t-to-int conversion vulnerability in the filesystem layer

An out-of-bounds write flaw was found in the Linux kernel's seqfile in the Filesystem layer. This flaw allows a local attacker with a user privilege to gain access to out-of-bound memory, leading to a system crash, leak of internal kernel information and can escalate privileges. The issue results...

The vulnerability of Google Chrome’s V8 engine, related to the execution of operations beyond the buffer in memory, allows attackers to access confidential information or cause service failures.

The vulnerability of Google Chrome’s V8 engine is related to insufficient input validation. Exploiting this vulnerability can allow an attacker to access confidential information or cause service failures...

The vulnerability of the dbd_db_login6_sv() function in the Perl programming language, related to the execution of operations outside the buffer in memory, allows an attacker to cause a service failure.

The vulnerability of the dbddblogin6sv function in the Perl programming language is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the zmq::tcp_read() function in the libzmq library, a library for asynchronous messaging in ZeroMQ, allows a attacker to cause a service failure.

The vulnerability of the zmq::tcpread function in the libzmq library, a library for asynchronous messaging, is related to the failure of write operations outside of the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Adobe Media Encoder 缓冲区错误漏洞

Adobe Media Encoder, a video and audio encoding application, is vulnerable to an out-of-bounds read vulnerability in Adobe Media Encoder version 15.2 and earlier. An attacker could exploit this vulnerability to execute arbitrary code...

The vulnerability of the generateDirectionalRuns() function in the Qt library, related to the operation of writing data beyond the buffer boundaries in memory, allows a hacker to trigger a service failure.

The vulnerability of the generateDirectionalRuns function in the Qt library is related to an error in closing the application through a text file that contains unidirectional symbols. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability in the ImfMisc.cpp library of software for storing images in OpenEXR format, which has a wide dynamic range of brightness levels, arises from writing beyond the buffer boundaries. This allows an attacker to cause a service failure.

The vulnerability in the ImfMisc.cpp library of the OpenEXR image storage software lies in the handling of operations that exceed the allowable buffer data size. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of many components of the JSON processing library in C# relates to writing beyond buffer boundaries. This allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of many components of the JSON file processing library in C is related to the operation that goes beyond the allowable buffer size limits. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the implementation of syntax analysis for TIF format files in the Autodesk Design Review software allows a perpetrator to execute arbitrary code.

The vulnerability of the TIF file syntax analysis implementation in the Autodesk Design Review software relates to the writing of data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

The vulnerability of the dynamically linked library ugeom2d.dll, a set of tools for design and simulation in Siemens Solid Edge, allows a hacker to execute arbitrary code.

The vulnerability of the dynamically linked library ugeom2d.dll, which is part of Siemens Solid Edge’s design and modeling tools, relates to the writing beyond buffer boundaries in memory during DFT file syntax analysis. Exploiting this vulnerability could allow an attacker to execute arbitrary...

PT-2021-20448 · Jt2Go +1 · Jt2Go +2

Name of the Vulnerable Software and Affected Versions: JT2Go versions prior to V13.2 Teamcenter Visualization versions prior to V13.2 Description: A vulnerability has been identified in the BMP loader.dll library, which lacks proper validation of user-supplied data when parsing PCX files. This...

openSUSE: Security Advisory for dhcp (openSUSE-SU-2021:1841-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2021:1841-1 Security update for dhcp

This update for dhcp fixes the following issues: - CVE-2021-25217: A buffer overrun in lease file parsing code can be used to exploit a common vulnerability shared by dhcpd and dhclient bsc1186382...

Security update for dhcp (important)

openSUSE Security Update: Security update for dhcp Announcement ID: openSUSE-SU-2021:1841-1 Rating: important References: 1186382 Cross-References: CVE-2021-25217 CVSS scores: CVE-2021-25217 SUSE: 7.4 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H Affected Products: openSUSE Leap 15.3 An update tha...