Intel SGX SDK 安全漏洞

The Intel SGX SDK is a set of software development kits based on SGX Intel Software Security Extensions technology from Intel Corporation. A security vulnerability exists in Intel® SGX versions prior to 2.0 91ee496, which stems from the inclusion of improper access control in this Crypto API...

Intel Distribution for Python 代码问题漏洞

Intel Distribution for Python is an IntelR distribution of Python optimized for Intel hardware. A security vulnerability exists in the Intel Distribution for Python programming language prior to version 2022.1, which stems from an uncontrolled search path element in the IntelR oneAPI toolkit, whi...

Intel(R) oneAPI DPC++/C++ Compiler 代码问题漏洞

IntelR oneAPI DPC++/C++ Compiler is a compiler from Intel Corporation USA. A security vulnerability exists in IntelR oneAPI Data Analytics Library oneDAL versions prior to 2021.5, which stems from an uncontrolled search path element in the IntelR oneAPI Base Toolkit, and can be exploited by an...

PT-2023-12663 · Intel · Crypto Api Toolkit For Intel Sgx

Name of the Vulnerable Software and Affected Versions: Crypto API Toolkit for IntelR SGX versions prior to 2.0 commit ID 91ee496 Description: The issue is related to improper access control, which may allow an authenticated user to potentially enable escalation of privilege via local access...

Intel OneApi Toolkits 代码问题漏洞

Intel OneApi Toolkits is a set of core tools and libraries from the United States Intel Intel. It is used to develop high-performance, data-centric applications across different architectures. A security vulnerability exists in Intel oneAPI Collective Communications Library oneCCL versions prior ...

Intel OneApi Toolkits 代码问题漏洞

Intel OneApi Toolkits is a set of core tools and libraries from the United States Intel Intel. It is used to develop high-performance, data-centric applications across different architectures. A security vulnerability exists in IntelR oneAPI Toolkit OpenMP prior to version 2022.1, which stems fro...

PT-2023-12858 · Intel · Intel Trace Analyzer/Collector

Name of the Vulnerable Software and Affected Versions: IntelR Trace Analyzer and Collector versions prior to 2021.6 for IntelR oneAPI HPC Toolkit Description: The issue is related to an uncontrolled search path element in the IntelR Trace Analyzer and Collector, which may allow an authenticated...

SUSE CVE-2004-0753

The BMP image processor for 1 gdk-pixbuf before 0.22 and 2 gtk2 before 2.2.4 allows remote attackers to cause a denial of service infinite loop via a crafted BMP file...

SUSE CVE-2004-0782

Integer overflow in pixbufcreatefromxpm io-xpm.c in the XPM image decoder for gtk+ 2.4.4 gtk2 and earlier, and gdk-pixbuf before 0.22, allows remote attackers to execute arbitrary code via certain ncol and cpp values that enable a heap-based buffer overflow. NOTE: this identifier is ONLY for gtk+...

SUSE CVE-2004-0783

Stack-based buffer overflow in xpmextractcolor io-xpm.c in the XPM image decoder for gtk+ 2.4.4 gtk2 and earlier, and gdk-pixbuf before 0.22, may allow remote attackers to execute arbitrary code via a certain color string. NOTE: this identifier is ONLY for gtk+. It was incorrectly referenced in a...

SUSE CVE-2007-0010

The GdkPixbufLoader function in GIMP ToolKit GTK+ in GTK 2 gtk2 before 2.4.13 allows context-dependent attackers to cause a denial of service crash via a malformed image file...

SUSE CVE-2007-3728

Buffer overflow in lib/silcclient/clientnotify.c of SILC Client and SILC Toolkit before 1.1.2 allows remote attackers to cause a denial of service via "NICKCHANGE" notifications...

SUSE CVE-2008-1227

Stack-based buffer overflow in the silcfingerprint function in lib/silcutil/silcutil.c in Secure Internet Live Conferencing SILC Toolkit 1.1.5, and unspecified earlier versions, allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via long input data. NOTE...

SUSE CVE-2008-1552

The silcpkcs1decode function in the silccrypt library silcpkcs1.c in Secure Internet Live Conferencing SILC Toolkit before 1.1.7, SILC Client before 1.1.4, and SILC Server before 1.1.2 allows remote attackers to execute arbitrary code via a crafted PKCS1 message, which triggers an integer...

SUSE CVE-2008-5005

Multiple stack-based buffer overflows in 1 University of Washington IMAP Toolkit 2002 through 2007c, 2 University of Washington Alpine 2.00 and earlier, and 3 Panda IMAP allow a local users to gain privileges by specifying a long folder extension argument on the command line to the tmail or dmail...

SUSE CVE-2008-7159

The silcasn1encoder function in lib/silcasn1/silcasn1encode.c in Secure Internet Live Conferencing SILC Toolkit before 1.1.8 allows remote attackers to overwrite a stack location and possibly execute arbitrary code via a crafted OID value, related to incorrect use of a %lu format string...

SUSE CVE-2008-7160

The silchttpserverparse function in lib/silchttp/silchttpserver.c in the internal HTTP server in silcd in Secure Internet Live Conferencing SILC Toolkit before 1.1.9 allows remote attackers to overwrite a stack location and possibly execute arbitrary code via a crafted Content-Length header,...

SUSE CVE-2009-3051

Multiple format string vulnerabilities in lib/silcclient/cliententry.c in Secure Internet Live Conferencing SILC Toolkit before 1.1.10, and SILC Client before 1.1.8, allow remote attackers to execute arbitrary code via format string specifiers in a nickname field, related to the 1...

SUSE CVE-2009-3163

Multiple format string vulnerabilities in lib/silcclient/command.c in Secure Internet Live Conferencing SILC Toolkit before 1.1.10, and SILC Client 1.1.8 and earlier, allow remote attackers to execute arbitrary code via format string specifiers in a channel name, related to 1...

SUSE CVE-2009-3865

The launch method in the Deployment Toolkit plugin in Java Runtime Environment JRE in Sun Java SE in JDK and JRE 6 before Update 17 allows remote attackers to execute arbitrary commands via a crafted web page, aka Bug Id 6869752...