Lucene search
+L

159 matches found

CNNVD
CNNVD
•added 2021/02/03 12:00 a.m.•18 views

SoftMaker Office PlanMaker 缓冲区错误漏洞

SoftMaker Office PlanMaker is a German Softmaker SoftMaker company supports multi-platform office software in the spreadsheet suite. A buffer overflow vulnerability exists in SoftMaker Office PlanMaker 2021. No detailed vulnerability details are provided at this time...

8.8CVSS7.4AI score0.01249EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/02/03 12:00 a.m.•23 views

SoftMaker Office PlanMaker 缓冲区错误漏洞

SoftMaker Office PlanMaker is a German Softmaker SoftMaker company supports multi-platform office software in the spreadsheet suite. SoftMaker Software GmbH SoftMaker Office PlanMaker 2021 suffers from a memory corruption vulnerability that can be exploited by an attacker to cause a heap buffer...

8.8CVSS7.5AI score0.01525EPSS
SaveExploits1References2
Talos
Talos
•added 2021/02/03 12:00 a.m.•184 views

SoftMaker Office PlanMaker Excel document record 0x00fc memory corruption vulnerability

Summary A memory corruption vulnerability exists in the Excel Document SST Record 0x00fc functionality of SoftMaker Software GmbH SoftMaker Office PlanMaker 2021 Revision 1014. A specially crafted malformed file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigg...

8.8CVSS8.1AI score0.01525EPSS
SaveExploits1
Talos
Talos
•added 2021/02/03 12:00 a.m.•163 views

SoftMaker Office PlanMaker Document Record 0x8010 out-of-bounds write vulnerability

Summary An exploitable heap-based buffer overflow vulnerability exists in the PlanMaker document parsing functionality of SoftMaker Office 2021’s PlanMaker application. A specially crafted document can cause the document parser to explicitly trust a length from a particular record type and use it...

8.8CVSS7.9AI score0.70688EPSS
SaveExploits1
Talos
Talos
•added 2021/02/03 12:00 a.m.•155 views

SoftMaker Office PlanMaker Document Records 0x8011 and 0x820a integer overflow vulnerability

Summary An exploitable integer overflow vulnerability exists in the PlanMaker document parsing functionality of SoftMaker Office 2021’s PlanMaker application. A specially crafted document can cause the document parser perform arithmetic that may overflow which can result in an undersized heap...

8.8CVSS7.9AI score0.70688EPSS
SaveExploits1
Talos
Talos
•added 2021/02/03 12:00 a.m.•152 views

SoftMaker Office PlanMaker Document Record 0x800d memory corruption vulnerability

Summary An exploitable heap-based buffer overflow vulnerability exists in the PlanMaker document parsing functionality of SoftMaker Office 2021’s PlanMaker application. A specially crafted document can cause the document parser to copy data from a particular record type into a buffer that is...

8.8CVSS7.9AI score0.01032EPSS
SaveExploits1
CNNVD
CNNVD
•added 2021/02/03 12:00 a.m.•19 views

SoftMaker Office PlanMaker 缓冲区错误漏洞

SoftMaker Office PlanMaker is a spreadsheet suite in office software that supports multiple platforms. A buffer overflow vulnerability exists in the SoftMaker Office PlanMaker Version/Instance 0x0005/0x0016 field handling, which can be exploited by an attacker to crash the application or execute...

8.8CVSS7.7AI score0.00949EPSS
SaveExploits1References2
CNVD
CNVD
•added 2021/01/13 12:00 a.m.•15 views

SoftMaker Office Symbol Extension Vulnerability

Softmaker Office is a multi-platform office software from Softmaker Germany. A symbol expansion vulnerability exists in SoftMaker Office 2021, which originates when the index of the TextMaker document parsing function loop of the TextMaker application is written outside the boundaries of the heap...

8.8CVSS6.8AI score0.016EPSS
SaveExploits1References1
OSV
OSV
•added 2021/01/06 3:15 p.m.•13 views

CVE-2020-13545

An exploitable signed conversion vulnerability exists in the TextMaker document parsing functionality of SoftMaker Office 2021’s TextMaker application. A specially crafted document can cause the document parser to miscalculate a length used to allocate a buffer, later upon usage of this buffer th...

7.8CVSS7.4AI score0.016EPSS
SaveExploits1References1
NVD
NVD
•added 2021/01/06 3:15 p.m.•24 views

CVE-2020-13545

An exploitable signed conversion vulnerability exists in the TextMaker document parsing functionality of SoftMaker Office 2021’s TextMaker application. A specially crafted document can cause the document parser to miscalculate a length used to allocate a buffer, later upon usage of this buffer th...

8.8CVSS7.9AI score0.016EPSS
SaveExploits1References1
OSV
OSV
•added 2021/01/06 3:15 p.m.•13 views

CVE-2020-13544

An exploitable sign extension vulnerability exists in the TextMaker document parsing functionality of SoftMaker Office 2021’s TextMaker application. A specially crafted document can cause the document parser to sign-extend a length used to terminate a loop, which can later result in the loop’s...

7.8CVSS7.4AI score0.016EPSS
SaveExploits1References1
NVD
NVD
•added 2021/01/06 3:15 p.m.•42 views

CVE-2020-13544

An exploitable sign extension vulnerability exists in the TextMaker document parsing functionality of SoftMaker Office 2021’s TextMaker application. A specially crafted document can cause the document parser to sign-extend a length used to terminate a loop, which can later result in the loop’s...

8.8CVSS8AI score0.016EPSS
SaveExploits1References1
CVE
CVE
•added 2021/01/06 2:50 p.m.•79 views

CVE-2020-13545

CVE-2020-13545 affects SoftMaker Office TextMaker 2021. The TALOS analysis details a signed/unsigned conversion issue in TextMaker’s document parsing that can cause heap-based memory corruption when loading a crafted TextMaker Document (.tmd). The root cause involves miscalculation of a length us...

8.8CVSS7.6AI score0.016EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2021/01/06 2:50 p.m.•34 views

CVE-2020-13545

An exploitable signed conversion vulnerability exists in the TextMaker document parsing functionality of SoftMaker Office 2021’s TextMaker application. A specially crafted document can cause the document parser to miscalculate a length used to allocate a buffer, later upon usage of this buffer th...

8.8CVSS7.6AI score0.016EPSS
SaveExploits1References1
CVE
CVE
•added 2021/01/06 2:48 p.m.•75 views

CVE-2020-13544

CVE-2020-13544 targets SoftMaker Office 2021 TextMaker: a sign-extension vulnerability in the TextMaker document parser can cause a loop index to be used as a heap-offset, enabling heap corruption from crafted .tmd documents. The TALOS report outlines detailed disassembly showing an unsigned 16-b...

8.8CVSS7.6AI score0.016EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2021/01/06 2:48 p.m.•50 views

CVE-2020-13544

An exploitable sign extension vulnerability exists in the TextMaker document parsing functionality of SoftMaker Office 2021’s TextMaker application. A specially crafted document can cause the document parser to sign-extend a length used to terminate a loop, which can later result in the loop’s...

8.8CVSS7.7AI score0.016EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/01/06 12:00 a.m.•6 views

CVE-2020-13544: Unexpected Sign Extension

An exploitable sign extension vulnerability exists in the TextMaker document parsing functionality of SoftMaker Office 2021’s TextMaker application. A specially crafted document can cause the document parser to sign-extend a length used to terminate a loop, which can later result in the loop’s...

8.8CVSS6.1AI score0.016EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/01/06 12:00 a.m.•6 views

CVE-2020-13545: Unsigned to Signed Conversion Error

An exploitable signed conversion vulnerability exists in the TextMaker document parsing functionality of SoftMaker Office 2021’s TextMaker application. A specially crafted document can cause the document parser to miscalculate a length used to allocate a buffer, later upon usage of this buffer th...

8.8CVSS6.1AI score0.016EPSS
SaveExploits1References4
Talos Blog
Talos Blog
•added 2021/01/05 10:35 a.m.•47 views

Vulnerability Spotlight: Multiple vulnerabilities in SoftMaker Office TextMaker

A Cisco Talos team member discovered these vulnerabilities. Blog by Jon Munshaw. Cisco Talos recently discovered multiple vulnerabilities in SoftMaker's TextMaker software. A user could trigger these vulnerabilities by opening an attacker-created, malicious document. An adversary could use these...

1.1AI score
SaveExploits0
CNNVD
CNNVD
•added 2021/01/05 12:00 a.m.•21 views

Softmaker Office 安全漏洞

Softmaker Office is a multi-platform office software from Softmaker Germany. A symbol expansion vulnerability exists in SoftMaker Office 2021, which originates when the index of the TextMaker document parsing function loop of the TextMaker application is written outside the boundaries of the heap...

8.8CVSS7.2AI score0.016EPSS
SaveExploits1References2
Rows per page
Query Builder