SUSE SLED15 / SLES15 Security Update : ImageMagick (SUSE-SU-2021:0081-1)

This update for ImageMagick fixes the following issues : CVE-2020-19667 bsc1179103: Stack buffer overflow in XPM coder could result in a crash Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...

SUSE-SU-2021:0081-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: - CVE-2020-19667 bsc1179103: Stack buffer overflow in XPM coder could result in a crash...

PT-2021-5503

Name of the Vulnerable Software and Affected Versions D-Link DIR-809 devices with firmware through DIR-809Ax FW1.12WWB03 20190410 Description A stack buffer overflow issue exists in the FUN 8004776c function, located in the /formVirtualApp endpoint. This issue can be triggered via a crafted POST...

PT-2021-5582

Name of the Vulnerable Software and Affected Versions D-Link DIR-809 devices with firmware through DIR-809Ax FW1.12WWB03 20190410 Description A stack buffer overflow issue exists in the function FUN 80034d60 in the /formStaticDHCP endpoint. This issue can be triggered via a crafted POST request,...

PT-2021-5504

Name of the Vulnerable Software and Affected Versions D-Link DIR-809 devices with firmware through DIR-809Ax FW1.12WWB03 20190410 Description A stack buffer overflow issue was found in the sub 80046EB4 function in the /formSetPortTr endpoint. This issue can be triggered via a crafted POST request...

PT-2021-5204

Name of the Vulnerable Software and Affected Versions D-Link DIR-809 devices with firmware through DIR-809Ax FW1.12WWB03 20190410 Description The issue is related to a stack buffer overflow vulnerability in the function FUN 80046eb4 in the /formSetPortTr endpoint. This vulnerability can be...

PT-2021-5502

Name of the Vulnerable Software and Affected Versions D-Link DIR-809 versions through DIR-809Ax FW1.12WWB03 20190410 Description The issue is related to a stack buffer overflow vulnerability in the function sub 8003183C in the /fromLogin endpoint. This vulnerability can be triggered via a crafted...

PT-2021-5506

Name of the Vulnerable Software and Affected Versions D-Link DIR-809 devices with firmware through DIR-809Ax FW1.12WWB03 20190410 Description A stack buffer overflow issue exists in the FUN 80040af8 function, located in the /formWlanSetup endpoint. This issue can be triggered via a crafted POST...

PT-2021-5507

Name of the Vulnerable Software and Affected Versions D-Link DIR-809 versions through DIR-809Ax FW1.12WWB03 20190410 Description The issue is related to a stack buffer overflow vulnerability in the function FUN 8004776c, located in the /formVirtualServ endpoint. This vulnerability can be triggere...

PT-2021-5505

Name of the Vulnerable Software and Affected Versions D-Link DIR-809 devices with firmware through DIR-809Ax FW1.12WWB03 20190410 Description A stack buffer overflow issue exists in the FUN 800462c4 function, located in the /formAdvFirewall endpoint. This issue can be triggered via a crafted POST...

Backdoor.Win32.Levelone.a Remote Stack Buffer Overflow

Discovery / credits: malvuln - Malvuln.com c 2021 Original source: https://malvuln.com/advisory/6a2d09c4527cf222e4e2571b074fcc0c.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Levelone.a Vulnerability: Remote Stack Buffer Overflow Description: The malware liste...

Backdoor.Win32.Ketch.b Remote Stack Buffer Overflow

Discovery / credits: malvuln - Malvuln.com c 2021 Original source: https://malvuln.com/advisory/9d7be3799594a82bf7056905f501af03.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Ketch.b Vulnerability: Remote Stack Buffer Overflow Description: Makes HTTP GET reque...

Backdoor.Win32.NinjaSpy.c Remote Stack Buffer Overflow

Discovery / credits: malvuln - Malvuln.com c 2021 Original source: https://malvuln.com/advisory/6eece319bc108576bd1f4a8364616264.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.NinjaSpy.c Vulnerability: Remote Stack Buffer Overflow Description: The specimen drop...

Foxit Reader and PhantomPDF Competitive Conditions Vulnerability (CNVD-2021-04397)

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A security vulnerability exists in Foxit Reader and PhantomPDF. An attacker could exploit the vulnerability to cause a stack buffer overflow or out-of-bounds read...

Foxit Reader and PhantomPDF Competitive Conditions Vulnerability (CNVD-2021-04398)

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A security vulnerability exists in Foxit Reader and PhantomPDF. An attacker could exploit the vulnerability to cause a stack buffer overflow or out-of-bounds read...

Foxit Reader and PhantomPDF: Competition Condition Vulnerabilities

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A security vulnerability exists in Foxit Reader and PhantomPDF. An attacker could exploit the vulnerability to cause a stack buffer overflow or out-of-bounds read...

OSV-2021-16 Stack-buffer-overflow in JS::Heap::gather_conservative_roots

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29266 Crash type: Stack-buffer-overflow READ 8 Crash state: JS::Heap::gatherconservativeroots JS::Heap::gatherroots JS::Heap::collectgarbage...

PT-2021-27904

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description The issue is related to a stack-buffer-overflow read error. Technical details about the crash include the involvement of JS::Heap::gather conservative...

Fortinet FortiWeb buffer error vulnerability

FortiWeb is a Web Application Firewall WAF that protects hosted web applications from attacks targeting known and unknown vulnerabilities. FortiWeb suffers from a stack buffer overflow vulnerability. An attacker can exploit the vulnerability by sending a specially crafted request with a large...

Fortinet FortiWeb buffer error vulnerability

Fortinet FortiWeb is a Web application layer firewall from the U.S. company Fita Fortinet, which can block threats such as cross-site scripting, SQL injection, cookie poisoning, schema poisoning and other attacks to ensure the security of Web applications and protect sensitive database content. A...