17983 matches found
(Pwn2Own) Sonos One Speaker ALAC Frame Parser Stack-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sonos One Speaker. Authentication is not required to exploit this vulnerability. The specific flaw exists within the ALAC audio codec. The issue results from the lack of proper validation of the leng...
Autodesk Inventor JT File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Inventor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of J...
CVE-2022-20040
In powerhalmanagerservice, there is a possible permission bypass due to a stack-based buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06219150; Issue ID: ALPS06219150...
Stack overflow
A vulnerability has been identified in Simcenter Femap V2020.2 All versions, Simcenter Femap V2021.1 All versions. Affected application contains a stack based buffer overflow vulnerability while parsing NEU files. This could allow an attacker to execute code in the context of the current process...
CVE-2022-20040: Out-of-bounds Write
In powerhalmanagerservice, there is a possible permission bypass due to a stack-based buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06219150; Issue ID: ALPS06219150...
CVE-2022-20030: Out-of-bounds Write
In vow driver, there is a possible out of bounds write due to a stack-based buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05837793; Issue ID: ALPS05837793...
CVE-2022-24313: Buffer Copy without Checking Size of Input
A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow potentially leading to remote code execution when an attacker sends a specially crafted message. Affected Product: Interactive Graphical SCADA System Data Server V15.0.0.22020...
CVE-2021-46155: Stack-based Buffer Overflow
A vulnerability has been identified in Simcenter Femap V2020.2 All versions, Simcenter Femap V2021.1 All versions. Affected application contains a stack based buffer overflow vulnerability while parsing NEU files. This could allow an attacker to execute code in the context of the current process...
CVE-2021-46154: Stack-based Buffer Overflow
A vulnerability has been identified in Simcenter Femap V2020.2 All versions, Simcenter Femap V2021.1 All versions. Affected application contains a stack based buffer overflow vulnerability while parsing NEU files. This could allow an attacker to execute code in the context of the current process...
PT-2022-12587
Name of the Vulnerable Software and Affected Versions Simcenter Femap V2020.2 All versions Simcenter Femap V2021.1 All versions Description A stack-based buffer overflow vulnerability has been identified in the affected application while parsing NEU files. This could allow an attacker to execute...
PT-2022-12588
Name of the Vulnerable Software and Affected Versions Simcenter Femap V2020.2 All versions Simcenter Femap V2021.1 All versions Description A stack-based buffer overflow vulnerability has been identified in the affected application while parsing NEU files. This could allow an attacker to execute...
PT-2022-14287
Name of the Vulnerable Software and Affected Versions power hal manager service affected versions not specified Description The issue is related to a stack-based buffer overflow in the power hal manager service, which could lead to a permission bypass. This might result in local escalation of...
AlmaLinux 8 : GNOME (ALSA-2020:1766)
The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2020:1766 advisory. - There is a stack-based buffer overflow in the parsemakernote function of dcrawcommon.cpp in LibRaw 0.19.1. Crafted input will lead to a denial of servic...
PT-2022-14277
Name of the Vulnerable Software and Affected Versions vow driver affected versions not specified Description The issue is related to a stack-based buffer overflow in the vow driver, which could lead to a local escalation of privilege. System execution privileges are needed for exploitation, and...
Debian DLA-2915-1 : connman - LTS security update
The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2915 advisory. Several issues were found in ConnMan, a connection manager for embedded devices, that could cause denial of service via service crash or excessive CPU usage. For...
CVE-2021-46158: Stack-based Buffer Overflow
A vulnerability has been identified in Simcenter Femap V2020.2 All versions, Simcenter Femap V2021.1 All versions. Affected application contains a stack based buffer overflow vulnerability while parsing NEU files. This could allow an attacker to execute code in the context of the current process...
AlmaLinux 8 : libsndfile (ALSA-2020:1636)
The remote AlmaLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2020:1636 advisory. - A stack-based buffer overflow in psfmemset in common.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service application crash or...
AlmaLinux 8 : libjpeg-turbo (ALSA-2021:4288)
The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2021:4288 advisory. - Libjpeg-turbo all version have a stack-based buffer overflow in the transform component. A remote attacker can send a malformed jpeg file to the service and caus...
PT-2022-2577
Name of the Vulnerable Software and Affected Versions Simcenter Femap versions prior to V2022.1.1 Description A stack-based buffer overflow vulnerability has been identified in Simcenter Femap while parsing specially crafted BDF files. This could allow an attacker to execute code in the context o...
