Buffer overflow

A buffer overflow vulnerability in FORMATS!ReadPVRW+0xfa of Irfanview 4.57 allows attackers to cause a denial of service DOS via a crafted PVR file...

CVE-2021-29358

A buffer overflow vulnerability in FORMATS!ReadPVRW+0xfa of Irfanview 4.57 allows attackers to cause a denial of service DOS via a crafted PVR file...

Irfanview缓冲区错误漏洞

IrfanView is an image viewer that supports image browsing, image editing, image format conversion, etc. Irfanview suffers from a buffer overflow vulnerability. An attacker can exploit the vulnerability to cause a denial of service via a specially crafted PVR file...

Smoking Out a DARKSIDE Affiliate’s Supply Chain Software Compromise

Mandiant observed DARKSIDE affiliate UNC2465 accessing at least one victim through a Trojanized software installer downloaded from a legitimate website. While this victim organization detected the intrusion, engaged Mandiant for incident response, and avoided ransomware, others may be at risk. As...

The vulnerability in the `hw/rdma/rdma_backend.c` component of the PVRDMA virtual network adapter emulator for hardware infrastructure, QEMU, allows a hacker to trigger a service failure.

The vulnerability in the hw/rdma/rdmabackend.c component of the PVRDMA virtual network adapter, within the QEMU hardware emulation software, is related to the execution of operations outside the buffer boundaries. Exploiting this vulnerability could allow an attacker to trigger a service failure...

MGASA-2014-0071 Updated xbmc package fixes a security vulnerability

Due to flaws in the embedded copy of libDCR, a fork of dcraw.c, in the embedded copy of CxImage, opening a specially crafted photo file could trigger a division by zero, an infinite loop, or a null pointer dereference, resulting in a denial of service CVE-2013-1438. This update fixes those flaws...

Updated xbmc package fixes a security vulnerability

Due to flaws in the embedded copy of libDCR, a fork of dcraw.c, in the embedded copy of CxImage, opening a specially crafted photo file could trigger a division by zero, an infinite loop, or a null pointer dereference, resulting in a denial of service CVE-2013-1438. This update fixes those flaws...