SAP 3D visual Enterprise Viewer input validation error vulnerability (CNVD-2020-65565)

SAP 3D Visual Enterprise Viewer is a free 3D visualization viewer for Windows. An input validation error vulnerability exists in SAP 3D Visual Enterprise Viewer version 9. The vulnerability stems from improper input validation. An attacker could exploit the vulnerability by means of a specially...

SAP 3D visual Enterprise Viewer input validation error vulnerability (CNVD-2020-65566)

SAP 3D Visual Enterprise Viewer is a free 3D visualization viewer for Windows. An input validation error vulnerability exists in SAP 3D Visual Enterprise Viewer version 9. The vulnerability stems from improper input validation. An attacker could exploit the vulnerability by means of a specially...

Foxit PhantomPDF U3DBrowser U3D file parsing out-of-bounds read vulnerability (CNVD-2020-24457)

Foxit PhantomPDF is China's Foxit Foxit a PDF document reader.Foxit 3D Plugin is China's Foxit Foxit a use in the PDF document reader in the 3D plug-in. A security vulnerability exists in Foxit PhantomPDF when processing U3D objects in PDF files. The vulnerability stems from the program failing t...

Foxit PhantomPDF U3DBrowser U3D file parsing out-of-bounds write vulnerability (CNVD-2020-24459)

Foxit PhantomPDF is China's Foxit Foxit a PDF document reader.Foxit 3D Plugin is China's Foxit Foxit a use in the PDF document reader in the 3D plug-in. A security vulnerability exists in Foxit PhantomPDF when processing U3D objects in PDF files. The vulnerability stems from the program failing t...

Foxit PhantomPDF U3DBrowser U3D file parsing out-of-bounds write remote code execution vulnerability (CNVD-2020-24449)

Foxit PhantomPDF is China's Foxit Foxit a PDF document reader.Foxit 3D Plugin is China's Foxit Foxit a use in the PDF document reader in the 3D plug-in. A security vulnerability exists in Foxit PhantomPDF for Windows platforms when handling U3D objects embedded in PDFs, which stems from the progr...

Platform update for Windows 7 SP1 and Windows Server 2008 R2 SP1

Platform update for Windows 7 SP1 and Windows Server 2008 R2 SP1 Summary This article describes a platform update for Windows 7 Service Pack 1 SP1 and Windows Server 2008 R2 SP1. This update improves the range and performance of the following graphics and imaging components: Direct2D DirectWrite...

NVIDIA Windows GPU Display Driver Privilege License and Access Control Issues Vulnerability

The NVIDIA Windows GPU Display Driver is a display driver for Windows systems. A vulnerability exists in the 3D visual component of the NVIDIA Windows GPU display driver. The vulnerability stems from the Stereo Services software not checking for hard links when opening files. An attacker could us...

CVE-2019-6982

An issue was discovered in Foxit 3D Plugin Beta before 9.4.0.16807 for Foxit Reader and PhantomPDF. The application could encounter an Out-of-Bounds Write and crash during the handling of certain PDF files that embed specifically crafted 3D content, because of the improper handling of a logic...

January 22, 2019—KB4476976 (OS Build 17763.292)

None None...

CVE-2018-19342

The u3d plugin 9.3.0.10809 aka plugins\U3DBrowser.fpi in FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service out-of-bounds read or obtain sensitive information via a U3D sample because of a "Read Access Violation starting at...

QEMU Denial of Service Vulnerability (CNVD-2017-01853)

QEMU aka Quick Emulator is a set of simulation processor software developed by French programmer Fabrice Bellard. The software is fast and cross-platform. A denial of service vulnerability exists in the 'virtio-gpu-3d.c' file in QEMU. An attacker can exploit this vulnerability to cause a QEMU...

January 26, 2017—KB 3216755 (OS Build 14393.726)

None None...

SAP 3D Visual Enterprise Viewer SketchUp Document Memory Error References Remote Code Execution Vulnerability

SAP 3D Visual Enterprise Viewer is the 3D visualization viewer. A vulnerability exists in SAP 3D Visual Enterprise Viewer's handling of SketchUp documents. An attacker can reuse a freed hanging pointer to execute arbitrary code in the current process context...

UBUNTU-CVE-2014-0983

Multiple array index errors in programs that are automatically generated by VBox/HostServices/SharedOpenGL/crserverlib/serverdispatch.py in Oracle VirtualBox 4.2.x through 4.2.20 and 4.3.x before 4.3.8, when using 3D Acceleration, allow local guest OS users to execute arbitrary code on the Chromi...

flash-plugin: arbitrary code exec via integer overflow in copyRawDataTo method in Matrix3D class

Integer overflow in the copyRawDataTo method in the Matrix3D class in Adobe Flash Player before 11.4.402.265 allows remote attackers to execute arbitrary code via malformed arguments...

DEBIAN-CVE-2005-3488

Scorched 3D 39.1 bf and earlier allows remote attackers to cause a denial of service long loop and server hang via a negative numplayers value that bypasses a signed check in ServerConnectHandler.cpp...

DEBIAN-CVE-2005-3486

Multiple format string vulnerabilities in Scorched 3D 39.1 bf and earlier allow remote attackers to execute arbitrary code via various 1 GLConsole::addLine, 2 ServerCommon::sendString, 3 ServerCommon::serverLog functions, and possibly other unspecified vectors...