ghostscript:gstoraster_fuzzer: Stack-buffer-overflow in pdfi_annot_draw

Detailed Report: https://oss-fuzz.com/testcase?key=5662241045741568 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address: 0x7fbc61ad24d4 Crash State: pdfiannotdraw...

Backdoor.Win32.Ncx.b Buffer Overflow

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/991c1f02c809cee860cb712896a45338B.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Ncx.b Vulnerability: Remote Stack Buffer Overflow Description: The malware listens o...

Fortinet FortiWeb Buffer Overflow Vulnerability (CNVD-2021-99680)

Fortinet FortiWeb is a web application layer firewall from Fortinet that blocks threats such as cross-site scripting, SQL injection, cookie poisoning, schema poisoning, and other attacks to secure web applications and protect sensitive database content. A buffer overflow vulnerability exists, whi...

D-Link DIR-809 Function Use-After-Free

The vulnerability of the FUN80046eb4 /formSetPortTr function of the wireless router D-Link DIR-809 is related to stack buffer overflow. Exploiting this vulnerability allows a remote attacker to execute arbitrary code within the system using the created POST request...

PT-2021-22359 · Ibm · Ibm Spectrum Protect Client

Name of the Vulnerable Software and Affected Versions: IBM Spectrum Protect Client versions 7.1 through 8.1 Description: The issue is caused by improper bounds checking, leading to a stack-based buffer overflow. A local attacker could exploit this and cause a denial of service. Recommendations: F...

ghostscript:gstoraster_fuzzer: Stack-buffer-overflow in pdfi_read_cff_dict

Detailed Report: https://oss-fuzz.com/testcase?key=6750173575905280 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 4 Crash Address: 0x7ffc82339080 Crash State: pdfireadcffdi...

ghostscript:gstoraster_fuzzer: Stack-buffer-underflow in read_xref

Detailed Report: https://oss-fuzz.com/testcase?key=6186925189365760 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Stack-buffer-underflow WRITE 1 Crash Address: 0x7f42c7439f1f Crash State: readxref...

OSV-2021-1670 Dynamic-stack-buffer-overflow in zend_calc_live_ranges

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42156 Crash type: Dynamic-stack-buffer-overflow READ 4 Crash state: zendcalcliveranges passtwo zendcompilefuncdecl...

Bentley View Stack Buffer Overflow Vulnerability

Bentley View is a free viewer from Bentley Systems, U.S.A. Bentley View is vulnerable to a stack buffer overflow vulnerability that exists due to a boundary error in the handling of untrusted input. An attacker could exploit this vulnerability to execute arbitrary code on the system...

PT-2021-27927

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash caused by a dynamic stack buffer overflow. The crash occurs in the zend calc live ranges function, specifically during the...

PT-2021-5952

Name of the Vulnerable Software and Affected Versions Surveillance Station versions prior to 5.2.0.4.2 Surveillance Station versions prior to 5.2.0.3.2 Surveillance Station versions prior to 5.1.5.4.6 Surveillance Station versions prior to 5.1.5.3.6 Description A stack buffer overflow issue has...

php:php-fuzz-parser: Dynamic-stack-buffer-overflow in zend_calc_live_ranges

Detailed Report: https://oss-fuzz.com/testcase?key=4681290541039616 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-parser Job Type: libfuzzerasani386php Platform Id: linux Crash Type: Dynamic-stack-buffer-overflow READ 4 Crash Address: 0xffdcb0e8 Crash State: zendcalcliveranges...

libraw:libraw_fuzzer: Stack-buffer-overflow in LibRaw::parseCR3

Project: https://github.com/libraw/libraw.git Detailed Report: https://oss-fuzz.com/testcase?key=5585935610281984 Project: libraw Fuzzing Engine: libFuzzer Fuzz Target: librawfuzzer Job Type: libfuzzerasanlibraw Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1 Crash Address:...

CVE-2021-20038

A Stack-based buffer overflow vulnerability in SMA100 Apache httpd server's modcgi module environment variables allows a remote unauthenticated attacker to potentially execute code as a 'nobody' user in the appliance. This vulnerability affected SMA 200, 210, 400, 410 and 500v appliances firmware...

Huawei HarmonyOS Stack Buffer Overflow Vulnerability (CNVD-2021-99966)

Huawei HarmonyOS is an operating system from Huawei China. It provides a microkernel-based distributed operating system. A stack buffer overflow vulnerability exists in the Kernel module of Huawei HarmonyOS, which provides a microkernel-based, full-scenario distributed operating system. An attack...

Huawei HarmonyOS stack buffer overflow vulnerability (CNVD-2021-99968)

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A stack buffer overflow vulnerability exists in the Kernel module of Huawei HarmonyOS. An attacker can exploit this vulnerability to cause the device to beco...

Huawei HarmonyOS Stack Buffer Overflow Vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A stack buffer overflow vulnerability exists in the Kernel module of Huawei HarmonyOS. An attacker can exploit the vulnerability to cause an out-of-bounds re...

Huawei HarmonyOS Stack Buffer Overflow Vulnerability (CNVD-2021-99967)

Huawei HarmonyOS is an operating system from Huawei China. It provides a microkernel-based distributed operating system. A stack buffer overflow vulnerability exists in the Kernel module of Huawei HarmonyOS, which provides a microkernel-based, full-scenario distributed operating system. An attack...

Ubuntu 18.04 LTS : Long Range ZIP vulnerabilities (USN-5171-1)

The remote Ubuntu 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5171-1 advisory. It was discovered that Long Range ZIP incorrectly handled certain specially crafted lrz files. A remote attacker could possibly use this issue to cause a...

Wecon PLC Editor Code Execution

The vulnerability of the Wecon PLC Editor software for programming PLCs on the Microsoft Windows operating system is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to execute arbitrary code...