74 matches found
Code injection
PlugIns\IDEACDStd.apl in ACDSee Professional 2021 14.0 1721 has a User Mode Write Access Violation starting at IDEACDStd!JPEGTransW+0x000000000000c7f4 via a crafted BMP image...
Code injection
PlugIns\IDEACDStd.apl in ACDSee Professional 2021 14.0 1721 has a User Mode Write Access Violation starting at IDEACDStd!zlibVersion+0x0000000000004e5e via a crafted BMP image...
CVE-2021-26025
CVE-2021-26025 affects ACDSee Professional 2021 (version 14.0.1721). The vulnerability is a User Mode Write Access Violation in PlugIns\IDE_ACDStd.apl triggered by a crafted BMP image, starting at IDE_ACDStd!zlibVersion+0x4e5e. Exploitation context: local access, low attack complexity, no authent...
CVE-2021-26026
PlugIns\IDEACDStd.apl in ACDSee Professional 2021 14.0 1721 has a User Mode Write Access Violation starting at IDEACDStd!JPEGTransW+0x000000000000c7f4 via a crafted BMP image...
CVE-2021-26026
CVE-2021-26026 affects ACDSee Professional 2021 (version 14.0 build 1721). The vulnerability is a User Mode Write Access Violation in the IDE_ACDStd.apl component, triggered by a crafted BMP image, with the fault location reported as IDE_ACDStd!JPEGTransW+0x... The CVE is documented across multip...
CVE-2020-13905
CVE-2020-13905 affects IrfanView 4.54, with a user‑mode write access violation starting at FORMATS!GetPlugInInfo+0x38ed4. The connected Red Hat and CVE records corroborate a vulnerability in IrfanView 4.54 but do not provide additional technical details such as impacted components beyond the plug...
IrfanView User Mode Write Access Conflict Vulnerability (CNVD-2019-36931)
IrfanView is an image viewer by Irfan Skiljan software developer in Bosnia and Herzegovina that supports image browsing, image editing, image format conversion and more. IrfanView 4.53 suffers from a user-mode write access conflict vulnerability. An attacker can exploit this vulnerability to read...
KLA11653 Multiple vulnerabilities in IrfanView
Multiple vulnerabilities were found in IrfanView. Malicious users can exploit these vulnerabilities to cause denial of service, obtain sensitive information. Below is a complete list of vulnerabilities: 1. User Mode Write Access Violation vulnerability in IrfanView can be exploited to cause denia...
KLA11649 User Mode Write Access Violation vulnerabilities in IrfanView
User Mode Write Access Violation vulnerabilities were found in IrfanView. Malicious users can exploit this vulnerability to cause denial of service. Original advisories - Related products IrfanView CVE list CVE-2019-13242 high CVE-2019-13243 high Solution Update to the latest version Download...
CVE-2018-14332
An issue was discovered in Clementine Music Player 1.3.1. Clementine.exe is vulnerable to a user mode write access violation due to a NULL pointer dereference in the Init call in the MoodbarPipeline::NewPadCallback function in moodbar/moodbarpipeline.cpp. The vulnerability is triggered when the...
CVE-2018-14332
CVE-2018-14332 affects Clementine Music Player 1.3.1: a NULL pointer dereference in MoodbarPipeline::NewPadCallback can cause a user-mode write access violation when opening malformed MP3 files. Technical details across connected sources pin the flaw to moodbar/moodbarpipeline.cpp Init, enabling ...
CVE-2018-8065
An issue was discovered in the web server in Flexense SyncBreeze Enterprise 10.6.24. There is a user mode write access violation on the syncbrs.exe memory region that can be triggered by rapidly sending a variety of HTTP requests with long HTTP header values or long URIs...
Wiz 5.0.3 User Mode Write Access Violation Vulnerability
Wiz version 5.0.3 suffers from a user mode write access violation vulnerability. Title: User Mode Write Access Violation in Wiz 5.0.3 Severity: Medium History: 16.Apr.2013 Vulnerability reported Authors: Josep Pi Rodriguez, Pedro Guillen Nuñez, Miguel Angel de Castro Simon Organization:...
Nitro Pro 8.0.3.1 - Crash PoC
Exploit for windows platform in category dos / poc !C:\Python27\python.exe Exploit Title: Nitro Pro 8.0.3.1 - DoS Date: 2012-10-07 Exploit Author: John Cobb Author Homepage: www.NoBytes.com Vendor Homepage: www.nitropdf.com Version: 8.0.3.1 Tested on: Win7 64bit CVE : None When the Object Index...