Backdoor.Win32.Zombam.j Remote Stack Buffer Overflow

Discovery / credits: malvuln - Malvuln.com c 2021 Original source: http://malvuln.com/advisory/a4212f23e1cc3bb34b0dfe15b2ad323e.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Zombam.j Vulnerability: Remote Stack Buffer Overflow Description: Listens on TCP port...

Trojan.Win32.Barjac Remote Stack Buffer Overflow

Discovery / credits: malvuln - Malvuln.com c 2021 Original source: http://malvuln.com/advisory/62ad686f97faaa68f580d32d25333f51.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Trojan.Win32.Barjac Vulnerability: Remote Stack Buffer Overflow. Description: Trojan.Win32.Barjac mak...

WS-2021-0593

In assimp 5.1.0 through 5.1.5 there is Stack-buffer-overflow in Assimp::ZipArchiveIOSystem::Implement::MapArchive...

CVE-2020-35492

A flaw was found in cairo's image-compositor.c. This flaw allows an attacker who can provide a crafted input file to cairo's image-compositor for example, by convincing a user to open a file in an application using cairo, or if an application uses cairo on untrusted input to cause a stack buffer...

imagemagick:ping_ptif_fuzzer: Stack-buffer-overflow in _TIFFVGetField

Detailed Report: https://oss-fuzz.com/testcase?key=5137035853692928 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pingptiffuzzer Job Type: libfuzzerasani386imagemagick Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 4 Crash Address: 0xff989030 Crash State: TIFFVGetField...

CVE-2020-14231

A vulnerability in the input parameter handling of HCL Client Application Access v9 could potentially be exploited by an authenticated attacker resulting in a stack buffer overflow. This could allow the attacker to crash the program or inject code into the system which would execute with the...

Stack overflow

A vulnerability in the input parameter handling of HCL Client Application Access v9 could potentially be exploited by an authenticated attacker resulting in a stack buffer overflow. This could allow the attacker to crash the program or inject code into the system which would execute with the...

CVE-2020-14231

CVE-2020-14231 describes a buffer overflow vulnerability in the input parameter handling of HCL Client Application Access v9 . The underlying issue is in handling of input parameters, leading to a stack buffer overflow. It could be exploited by an authenticated attacker (network-facing) to crash ...

CVE-2020-14231

A vulnerability in the input parameter handling of HCL Client Application Access v9 could potentially be exploited by an authenticated attacker resulting in a stack buffer overflow. This could allow the attacker to crash the program or inject code into the system which would execute with the...

app (>=0.2.0, <=0.6.5), bench_timer (>=0.1.0, <=0.1.1) +2 more potentially affected by unknown CVE via stderr (>=0.2.2, <=0.8.0)

stderr CARGO version =0.2.2, =0.2.0, =0.1.0, =0.2.0, =0.1.0, =0.3.3 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2020-0109...

CVE-2020-14231: Improper Input Validation

A vulnerability in the input parameter handling of HCL Client Application Access v9 could potentially be exploited by an authenticated attacker resulting in a stack buffer overflow. This could allow the attacker to crash the program or inject code into the system which would execute with the...

PT-2020-13946

Name of the Vulnerable Software and Affected Versions HCL Client Application Access version 9 Description A vulnerability in the input parameter handling could potentially be exploited by an authenticated attacker, resulting in a stack buffer overflow. This could allow the attacker to crash the...

Arbitrary Code Execution

chromium is vulnerable to arbitrary code execution. The vulnerability exists through a stack buffer overflow in WebRTC caused by a crafted WebRTC packet...

opensc:fuzz_pkcs15_reader: Stack-buffer-overflow in sc_path_print

Detailed Report: https://oss-fuzz.com/testcase?key=5766033038245888 Project: opensc Fuzzing Engine: libFuzzer Fuzz Target: fuzzpkcs15reader Job Type: libfuzzerasanopensc Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address: 0x7f624040b380 Crash State: scpathprint scprintpath...

OSV-2020-2273 Stack-buffer-overflow in perfetto::trace_processor::MemoryTrackerSnapshotParser::EmitRows

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28766 Crash type: Stack-buffer-overflow READ 4 Crash state: perfetto::traceprocessor::MemoryTrackerSnapshotParser::EmitRows perfetto::traceprocessor::MemoryTrackerSnapshotParser::GenerateGraphFromRawNode...

PT-2020-22188

Name of the Vulnerable Software and Affected Versions perfetto affected versions not specified Description The issue is related to a stack-buffer-overflow read crash. Technical details about the crash include the perfetto::trace processor::MemoryTrackerSnapshotParser class and its methods:...

CVE-2020-14224

A vulnerability in the MIME message handling of the HCL Notes v9 client could potentially be exploited by an unauthenticated attacker resulting in a stack buffer overflow. This could allow a remote attacker to crash the Notes application or inject code into the system which would execute with the...

Stack overflow

A vulnerability in the MIME message handling of the HCL Notes v9 client could potentially be exploited by an unauthenticated attacker resulting in a stack buffer overflow. This could allow a remote attacker to crash the Notes application or inject code into the system which would execute with the...

CVE-2020-14224

A vulnerability in the MIME message handling of the HCL Notes v9 client could potentially be exploited by an unauthenticated attacker resulting in a stack buffer overflow. This could allow a remote attacker to crash the Notes application or inject code into the system which would execute with the...

CVE-2020-14224

CVE-2020-14224 describes a stack buffer overflow in the MIME message handling of the HCL Notes v9 client. The vulnerability can be exploited by an unauthenticated, remote attacker to crash Notes or inject code that runs with the privileges of the current user. Public metrics indicate a critical i...