485 matches found
Microsoft Paint 3D 安全漏洞
Paint 3D is a computer graphics software that has been optimized and adjusted to include new and comprehensive drawing tools that can gradually transform flat 2D images into 3D ones. A security vulnerability exists in Microsoft Paint 3D. An attacker can exploit this vulnerability to remotely...
Paint 3D 安全漏洞
Paint 3D is a computer graphics software that has been optimized and adjusted to include new and comprehensive drawing tools that can gradually transform flat 2D images into 3D ones. A security vulnerability exists in Microsoft Paint 3D. An attacker can exploit this vulnerability to remotely...
PT-2023-3538 · Microsoft · Paint 3D
Name of the Vulnerable Software and Affected Versions: Paint 3D affected versions not specified Description: The issue is related to insufficient input validation in the Paint 3D application, which can be exploited by an attacker to execute arbitrary code using a specially crafted malicious file...
KLA50776 Multiple vulnerabilities in Microsoft Apps
Remote code execution vulnerabilities were found in Microsoft Apps. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2023-32047 CVE-2023-35374 Related products Paint-3D CVE list CVE-2023-32047 critical CVE-2023-35374 critical KB list Solution Insta...
The vulnerability of the Windows command-line interpreter allows a hacker to execute arbitrary code.
The vulnerability of the Windows command-line interpreter arises from the lack of mechanisms to stop the execution of a script after an error is detected in it. Exploiting this vulnerability allows an attacker to execute arbitrary code by creating images using the built-in graphics editor MS Pain...
Information Disclosure
Google Chrome is vulnerable to Information Disclosure. The vulnerability exists due to the inappropriate implementation in Paint, which allows an attacker to leak cross-origin data outside an iframe via a crafted HTML page...
SUSE CVE-2010-4543
Heap-based buffer overflow in the readchanneldata function in file-psp.c in the Paint Shop Pro PSP plugin in GIMP 2.6.11 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a PSPCOMPRLE aka RLE compression image file that begins a long run...
SUSE CVE-2012-2880
Race condition in Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the plug-in paint buffer...
SUSE CVE-2014-1748
The ScrollView::paint function in platform/scroll/ScrollView.cpp in Blink, as used in Google Chrome before 35.0.1916.114, allows remote attackers to spoof the UI by extending scrollbar painting into the parent frame...
SUSE CVE-2015-2706
Race condition in the AsyncPaintWaitEvent::AsyncPaintWaitEvent function in Mozilla Firefox before 37.0.2 allows remote attackers to execute arbitrary code or cause a denial of service use-after-free via a crafted plugin that does not properly complete initialization...
SUSE CVE-2018-6137
CSS Paint API in Blink in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to leak cross-origin data via a crafted HTML page...
CVE-2022-4025
Inappropriate implementation in Paint in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to leak cross-origin data outside an iframe via a crafted HTML page. Chrome security severity: Low...
CVE-2022-4025
Inappropriate implementation in Paint in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to leak cross-origin data outside an iframe via a crafted HTML page. Chrome security severity: Low...
CVE-2022-4025
Inappropriate implementation in Paint in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to leak cross-origin data outside an iframe via a crafted HTML page. Chrome security severity: Low...
DEBIAN-CVE-2022-4025
Inappropriate implementation in Paint in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to leak cross-origin data outside an iframe via a crafted HTML page. Chrome security severity: Low...
CVE-2022-4025
Inappropriate implementation in Paint in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to leak cross-origin data outside an iframe via a crafted HTML page. Chrome security severity: Low...
UBUNTU-CVE-2022-4025
Inappropriate implementation in Paint in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to leak cross-origin data outside an iframe via a crafted HTML page. Chrome security severity: Low...
CVE-2022-4025
CVE-2022-4025 relates to Google Chrome prior to 98.0.4758.80, where an inappropriate implementation in Paint could leak cross-origin data outside an iframe via a crafted HTML page. The vulnerability affects multiple platforms; exploitation would involve a user loading a crafted page to trigger da...
The vulnerability of the application for 3D modeling and Paint 3D printing relates to the execution of operations beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.
The vulnerability of the application for 3D modeling and Paint 3D printing is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows for the execution of arbitrary code using a specially created file...
