Lucene search
K

1102 matches found

Prion
Prion
added 2018/10/01 8:29 p.m.12 views

Design/Logic Flaw

An exploitable uninitialized variable vulnerability exists in the RTF-parsing functionality of Atlantis Word Processor 3.2.6 version. A specially crafted RTF file can leverage an uninitialized stack address, resulting in an out-of-bounds write, which in turn could lead to code execution...

6.8CVSS7.7AI score0.01202EPSS
Exploits1References1Affected Software1
NVD
NVD
added 2018/10/01 8:29 p.m.21 views

CVE-2018-3975

An exploitable uninitialized variable vulnerability exists in the RTF-parsing functionality of Atlantis Word Processor 3.2.6 version. A specially crafted RTF file can leverage an uninitialized stack address, resulting in an out-of-bounds write, which in turn could lead to code execution...

7.8CVSS7.6AI score0.01202EPSS
Exploits1References1
Cvelist
Cvelist
added 2018/10/01 8:0 p.m.23 views

CVE-2018-3975

An exploitable uninitialized variable vulnerability exists in the RTF-parsing functionality of Atlantis Word Processor 3.2.6 version. A specially crafted RTF file can leverage an uninitialized stack address, resulting in an out-of-bounds write, which in turn could lead to code execution...

7.5CVSS7.7AI score0.01202EPSS
Exploits1References1
CVE
CVE
added 2018/10/01 8:0 p.m.57 views

CVE-2018-3975

Cisco Talos reports CVE-2018-3975 as an Atlants Word Processor 3.2.6 RTF-parsing vulnerability. The flaw is an exploitable uninitialized OLE document pointer (offset -0x8e0) used when parsing RTF tokens; if an attacker can control the stack, they can trigger an out-of-bounds write that can lead t...

7.8CVSS7.7AI score0.01202EPSS
Exploits1References1Affected Software1
Talos
Talos
added 2018/10/01 12:0 a.m.317 views

Atlantis Word Processor uninitialized TDocOleObject code execution vulnerability

Summary An exploitable uninitialized variable vulnerability exists in the RTF-parsing functionality of Atlantis Word Processor. A specially crafted RTF file can leverage an uninitialized stack address, resulting in an out-of-bounds write, which in turn could lead to code execution. Tested Version...

7.8CVSS7.6AI score0.01202EPSS
Exploits1
Positive Technologies
Positive Technologies
added 2018/08/20 12:0 a.m.2 views

PT-2018-3684 · Google +8 · Libwebp +8

Name of the Vulnerable Software and Affected Versions: libwebp versions prior to 1.0.1 Description: The issue is related to the use of an uninitialized variable in the libwebp library, which is used for encoding and decoding WebP images. This could allow a remote attacker to execute arbitrary cod...

10CVSS8.4AI score0.02558EPSS
Exploits0References111
OSV
OSV
added 2018/08/15 5:29 p.m.6 views

CVE-2018-8378

An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, which could disclose the contents of memory, aka "Microsoft Office Information Disclosure Vulnerability." This affects Word, Microsoft SharePoint Server,...

5.5CVSS5.8AI score0.06849EPSS
Exploits0References2
CVE
CVE
added 2018/08/15 5:0 p.m.192 views

CVE-2018-8378

CVE-2018-8378 describes an information disclosure in Microsoft Office when Office reads out-of-bounds memory due to an uninitialized variable, potentially exposing memory contents. Affected components include Word, SharePoint Server, Word/Excel Viewers, and related Office products. Connected Open...

5.5CVSS4.9AI score0.06849EPSS
Exploits0References2Affected Software8
OpenVAS
OpenVAS
added 2018/08/15 12:0 a.m.40 views

Microsoft Office Word Viewer Information Disclosure Vulnerability (KB4092434)

This host is missing an important security update according to Microsoft KB4092434 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

5.5CVSS5.8AI score0.06849EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2018/08/15 12:0 a.m.73 views

Microsoft Office 2010 Service Pack 2 Information Disclosure Vulnerability (KB4022198)

This host is missing an important security update according to Microsoft KB4022198 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

5.5CVSS5.8AI score0.06849EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2018/08/15 12:0 a.m.54 views

Microsoft Office 2013 Service Pack 1 Information Disclosure Vulnerability (KB4032239)

This host is missing an important security update according to Microsoft KB4032239 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

5.5CVSS5.8AI score0.06849EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2018/08/15 12:0 a.m.48 views

Microsoft Office Word Viewer Information Disclosure Vulnerability (KB4092433)

This host is missing an important security update according to Microsoft KB4092433 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

5.5CVSS5.8AI score0.06849EPSS
Exploits0References1
Microsoft CVE
Microsoft CVE
added 2018/08/14 7:0 a.m.34 views

Microsoft Office Information Disclosure Vulnerability

An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, which could disclose the contents of memory. An attacker who successfully exploited the vulnerability could view out of bound memory. Exploitation of the...

5.5CVSS2.2AI score0.06849EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2018/08/14 12:0 a.m.44 views

Security Updates for Microsoft Office Web Apps (August 2018)

The Microsoft Office Web Apps installation on the remote host is missing a security update. It is, therefore, affected by the following vulnerability : - An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, which...

5.5CVSS6.1AI score0.06849EPSS
Exploits0References3
OSV
OSV
added 2018/07/23 8:29 a.m.1 views

DEBIAN-CVE-2018-14551

The ReadMATImageV4 function in coders/mat.c in ImageMagick 7.0.8-7 uses an uninitialized variable, leading to memory corruption...

9.8CVSS6.9AI score0.04033EPSS
Exploits1References1
Prion
Prion
added 2018/07/23 8:29 a.m.18 views

Memory corruption

The ReadMATImageV4 function in coders/mat.c in ImageMagick 7.0.8-7 uses an uninitialized variable, leading to memory corruption...

7.5CVSS9.2AI score0.04033EPSS
Exploits1References3Affected Software2
NVD
NVD
added 2018/07/23 8:29 a.m.19 views

CVE-2018-14551

The ReadMATImageV4 function in coders/mat.c in ImageMagick 7.0.8-7 uses an uninitialized variable, leading to memory corruption...

9.8CVSS9.3AI score0.04033EPSS
Exploits1References3
UbuntuCve
UbuntuCve
added 2018/07/23 12:0 a.m.25 views

CVE-2018-14551

The ReadMATImageV4 function in coders/mat.c in ImageMagick 7.0.8-7 uses an uninitialized variable, leading to memory corruption...

9.8CVSS6.9AI score0.04033EPSS
Exploits1References2
OSV
OSV
added 2018/06/19 9:29 p.m.2 views

ALPINE-CVE-2018-10811

strongSwan 5.6.0 and older allows Remote Denial of Service because of Missing Initialization of a Variable...

7.5CVSS7AI score0.0741EPSS
Exploits0References1
android
android
added 2018/06/01 12:0 a.m.35 views

CVE-2017-18155

While playing HEVC content using HD DMB in Snapdragon Automobile and Snapdragon Mobile in version MSM8996AU, SD 450, SD 625, SD 820, SD 820A, SD 835, an uninitialized variable can be used leading to a kernel fault...

4.6CVSS2.4AI score0.00226EPSS
Exploits0References2
Rows per page
Query Builder