PT-2020-21651

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read, which was identified through an OSS-Fuzz report. The crash state indicates the involvement of specific...

Microsoft Windows Print Workflow Service Elevation of Privilege Vulnerability

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. An elevation of privilege vulnerability exists in Microsoft Windows Print Workflow Service...

The vulnerability of the Print Workflow service in Windows operating systems allows a perpetrator to escalate their privileges.

The vulnerability of the Print Workflow service in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

CVE-2020-1366

An elevation of privilege vulnerability exists when the Windows Print Workflow Service improperly handles objects in memory, aka 'Windows Print Workflow Service Elevation of Privilege Vulnerability'...

CVE-2020-1366

An elevation of privilege vulnerability exists when the Windows Print Workflow Service improperly handles objects in memory, aka 'Windows Print Workflow Service Elevation of Privilege Vulnerability'...

Privilege escalation

An elevation of privilege vulnerability exists when the Windows Print Workflow Service improperly handles objects in memory, aka 'Windows Print Workflow Service Elevation of Privilege Vulnerability'...

CVE-2020-1366

An elevation of privilege vulnerability exists when the Windows Print Workflow Service improperly handles objects in memory, aka 'Windows Print Workflow Service Elevation of Privilege Vulnerability'...

CVE-2020-1366

CVE-2020-1366 is a Windows vulnerability in the Print Workflow Service described as an elevation of privilege where the service improperly handles objects in memory. The underlying cause is memory handling in the affected component, enabling a local attacker to escalate privileges (no user intera...

Windows Print Workflow Service Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the Windows Print Workflow Service improperly handles objects in memory. An attacker who successfully exploited this vulnerability could gain elevated privileges and break out of the AppContainer sandbox. To exploit this vulnerability, an attack...

PT-2020-3096

Name of the Vulnerable Software and Affected Versions Windows Print Workflow Service affected versions not specified Description The issue is related to an elevation of privilege vulnerability that occurs when the Windows Print Workflow Service improperly handles objects in memory. This...

CVE-2020-1366: Undefined Security Weakness

An elevation of privilege vulnerability exists when the Windows Print Workflow Service improperly handles objects in memory, aka 'Windows Print Workflow Service Elevation of Privilege Vulnerability'...

Cross-Site Scripting (XSS)

print-lib/print-servlet is vulnerable to cross-site scripting. A remote attacker is able to inject and execute Javascript in a user's browser via JSONP...

XML External Entity (XXE)

mapfish-print is vulnerable to XML External Entity XXE. The vulnerability exists as the disallow-doctype-decl feature was not set in the removeIndexReference method used in SLDParserPlugin...

F5 Networks BIG-IP : FRF.16 parser vulnerability (K04367730)

The version of F5 Networks BIG-IP installed on the remote host is prior to 13.1.4.1 / 14.1.3.1 / 15.1.3 / 16.0.0. It is, therefore, affected by a vulnerability as referenced in the K04367730 advisory. The FRF.16 parser in tcpdump before 4.9.3 has a buffer over-read in print-...

XSS in Mapfish Print relating to JSONP support

Impact A user can use the JSONP support to do a Cross-site scripting. Patches Use version = 3.24 Workarounds No References https://github.com/mapfish/mapfish-print/pull/1397/commits/89155f2506b9cee822e15ce60ccae390a1419d5e https://cwe.mitre.org/data/definitions/79.html For more information If you...

GHSA-W534-Q4XF-H5V2 XSS in Mapfish Print relating to JSONP support

Impact A user can use the JSONP support to do a Cross-site scripting. Patches Use version = 3.24 Workarounds No References https://github.com/mapfish/mapfish-print/pull/1397/commits/89155f2506b9cee822e15ce60ccae390a1419d5e https://cwe.mitre.org/data/definitions/79.html For more information If you...

XXE attack in Mapfish Print

Impact A user can do to an XML External Entity XXE attack with the provided SDL style. Patches Use version = 3.24 Workarounds No References https://cwe.mitre.org/data/definitions/611.html https://github.com/mapfish/mapfish-print/pull/1397/commits/e1d0527d13db06b2b62ca7d6afb9e97dacd67a0e For more...

GHSA-VJV6-GQ77-3MJW XXE attack in Mapfish Print

Impact A user can do to an XML External Entity XXE attack with the provided SDL style. Patches Use version = 3.24 Workarounds No References https://cwe.mitre.org/data/definitions/611.html https://github.com/mapfish/mapfish-print/pull/1397/commits/e1d0527d13db06b2b62ca7d6afb9e97dacd67a0e For more...

PT-2020-14298

Name of the Vulnerable Software and Affected Versions mapfish-print versions prior to 3.24 Description The issue allows a user to perform an XML External Entity XXE attack using the provided SDL style. This can be exploited by manipulating the XML input to access unauthorized data or disrupt...

PT-2020-14297

Name of the Vulnerable Software and Affected Versions mapfish-print versions prior to 3.24 Description The issue allows a user to perform a Cross-site scripting attack using the JSONP support. Recommendations For versions prior to 3.24, use version 3.24 or later to resolve the issue. As a tempora...