9 matches found
EUVD-2018-8826
Malware in sbrugna...
Design/Logic Flaw
In EVE OS, the “measured boot” mechanism prevents a compromised device from accessing the encrypted data located in the vault. As per the “measured boot” design, the PCR values calculated at different stages of the boot process will change if any of their respective parts are changed. This...
PT-2023-28892
Name of the Vulnerable Software and Affected Versions EVE OS versions 9.0.0 and earlier Description The "measured boot" mechanism in EVE OS is designed to prevent a compromised device from accessing the encrypted data located in the vault. However, this mechanism does not validate the entire...
CVE-2018-17043
An issue has been found in doc2txt through 2014-03-19. It is a heap-based buffer overflow in the function Storage::init in Storage.cpp, called from parsedoc in parsedoc.cpp...
CVE-2018-17043
An issue has been found in doc2txt through 2014-03-19. It is a heap-based buffer overflow in the function Storage::init in Storage.cpp, called from parsedoc in parsedoc.cpp...
Heap overflow
An issue has been found in doc2txt through 2014-03-19. It is a heap-based buffer overflow in the function Storage::init in Storage.cpp, called from parsedoc in parsedoc.cpp...
CVE-2018-17043
An issue has been found in doc2txt through 2014-03-19. It is a heap-based buffer overflow in the function Storage::init in Storage.cpp, called from parsedoc in parsedoc.cpp...
CVE-2018-17043
The CVE-2018-17043 entry concerns doc2txt up to 2014-03-19 with a heap-based buffer overflow in Storage::init (Storage.cpp), invoked via parse_doc (parse_doc.cpp). Affected component is doc2txt’s storage initialization logic, and the root cause is a heap buffer overflow within Storage::init. Repo...
doc2txt Heap Buffer Overflow Vulnerability
doc2txt is a tool for extracting text from .doc binary files. doc2txt A heap buffer overflow vulnerability exists in the 'Storage::init' function of the Storage.cpp file in versions 2014-03-19 and earlier. An attacker can exploit this vulnerability to cause a denial of service or code execution...