2148 matches found
Stack-based Buffer Overflow
Overview Affected versions of this package are vulnerable to Stack-based Buffer Overflow due to a segmentation violation in the findKeyParent function in PdfDictionary.cpp. Remediation Upgrade podofo to version 0.10.4 or higher. References - GitHub Commit - GitHub Issue...
CVE-2023-2676 H3C R160 aspForm stack-based overflow
A vulnerability, which was classified as critical, has been found in H3C R160 V1004004. Affected by this issue is some unknown functionality of the file /goForm/aspForm. The manipulation of the argument go leads to stack-based buffer overflow. The exploit has been disclosed to the public and may ...
CVE-2023-2676 H3C R160 aspForm stack-based overflow
A vulnerability, which was classified as critical, has been found in H3C R160 V1004004. Affected by this issue is some unknown functionality of the file /goForm/aspForm. The manipulation of the argument go leads to stack-based buffer overflow. The exploit has been disclosed to the public and may ...
CVE-2023-23580
Stack-based buffer overflow for some IntelR Trace Analyzer and Collector software before version 2021.8.0 published Dec 2022 may allow an authenticated user to potentially escalation of privilege via local access...
PT-2023-17449 · Unknown · Asp Bootloader
Name of the Vulnerable Software and Affected Versions: ASP Bootloader affected versions not specified Description: The issue is related to improper access control settings in ASP Bootloader, which may allow an attacker to corrupt the return address, causing a stack-based buffer overrun. This coul...
Stack-based Buffer Overflow
Overview Affected versions of this package are vulnerable to Stack-based Buffer Overflow via the parseexpr5 function in the /nasm/nasm-parse.c file. Remediation There is no fixed version for yasm. References - GitHub Issue - PoC Credit: z1r00...
CVE-2023-30371
In Tenda AC15 V15.03.05.19, the function "subED14" contains a stack-based buffer overflow vulnerability...
CVE-2023-30376
In Tenda AC15 V15.03.05.19, the function "henanpppoeuser" contains a stack-based buffer overflow vulnerability...
CVE-2023-30373
In Tenda AC15 V15.03.05.19, the function "xianpppoeuser" contains a stack-based buffer overflow vulnerability...
CVE-2023-26412
Adobe Substance 3D Designer version 12.4.0 and earlier is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2022-43613
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Corel CorelDRAW Graphics Suite 23.5.0.506. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...
Xiongmai NVR devices 缓冲区错误漏洞
Xiongmai NVR devices are a series of network video recorders from China-based Xiongmai Technology Xiongmai. A security vulnerability exists in Xiongmai NVR devices that stems from the presence of a stack-based buffer overflow. An attacker can exploit this vulnerability by sending a specially...
CVE-2023-1646 IObit Malware Fighter IOCTL IMFCameraProtect.sys 0x8018E004 stack-based overflow
A vulnerability was found in IObit Malware Fighter 9.4.0.776. It has been declared as critical. This vulnerability affects the function 0x8018E000/0x8018E004 in the library IMFCameraProtect.sys of the component IOCTL Handler. The manipulation leads to stack-based buffer overflow. An attack has to...
The vulnerability of PDF viewing and editing programs developed by Adobe Acrobat Reader arises from overflowing stack-based buffers, allowing attackers to execute arbitrary code.
The vulnerability of PDF viewing and editing programs developed by Adobe Acrobat Reader arises from buffer overflow attacks based on stacks. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
CVE-2023-27590 Rizin has stack-based buffer overflow when parsing GDB registers profile files
Rizin is a UNIX-like reverse engineering framework and command-line toolset. In version 0.5.1 and prior, converting a GDB registers profile file into a Rizin register profile can result in a stack-based buffer overflow when the name, type, or groups fields have longer values than expected. Users...
CVE-2023-27406
A vulnerability has been identified in Tecnomatix Plant Simulation All versions V2201.0006. The affected application is vulnerable to stack-based buffer while parsing specially crafted SPP files. An attacker could leverage this vulnerability to execute code in the context of the current process...
Rizin 缓冲区错误漏洞
Rizin is a free open source reverse engineering framework from the Rizin organization. It is used for analyzing binary files, disassembling code, debugging programs, as a forensic tool, as a scriptable command-line hex editor capable of opening disk files, and more. A security vulnerability exist...
Debian: Security Advisory (DLA-790-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2023-13271 · Qualcomm · Snapdragon +45
Name of the Vulnerable Software and Affected Versions: Software affected versions not specified Description: The issue is related to memory corruption caused by a stack-based buffer overflow in the core when sending a command from a USB device of large size. Recommendations: At the moment, there ...