Lucene search
K

4 matches found

BDU FSTEC
BDU FSTEC
added 2023/05/22 12:0 a.m.2 views

Vulnerability of the Decompression Enumeration function in Uncompressor::UncompressItem. This compression tool for XML data allows attackers to execute arbitrary code.

Vulnerability of Decompression Enumeration function: Uncompressor::UncompressItem, an XML data compression tool, is vulnerable to a memory boundary error during XML file processing. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

8.1CVSS7.8AI score0.02268EPSS
Exploits1References8Affected Software1
OSV
OSV
added 2021/08/18 1:15 p.m.2 views

CVE-2021-21825

A heap-based buffer overflow vulnerability exists in the XML Decompression PlainTextUncompressor::UncompressItem functionality of AT&T Labs’ Xmill 0.7. A specially crafted XMI file can lead to remote code execution. An attacker can provide a malicious file to trigger this vulnerability...

9.8CVSS7.8AI score
Exploits0References1
Prion
Prion
added 2021/08/18 1:15 p.m.19 views

Heap overflow

A heap-based buffer overflow vulnerability exists in the XML Decompression PlainTextUncompressor::UncompressItem functionality of AT&T Labs’ Xmill 0.7. A specially crafted XMI file can lead to remote code execution. An attacker can provide a malicious file to trigger this vulnerability...

7.5CVSS9.8AI score0.02268EPSS
Exploits1References1Affected Software1
Talos
Talos
added 2021/08/10 12:0 a.m.45 views

AT&T Labs Xmill XML decompression EnumerationUncompressor::UncompressItem heap-based buffer overflow vulnerability

Summary A heap-based buffer overflow vulnerability exists in the XML Decompression EnumerationUncompressor::UncompressItem functionality of AT&T Labs’ Xmill 0.7. A specially crafted XMI file can lead to remote code execution. An attacker can provide a malicious file to trigger this vulnerability...

9.8CVSS9.3AI score0.02268EPSS
Exploits1
Rows per page
Query Builder