CVE-2024-9760

CVE-2024-9760 affects Tungsten Automation Power PDF. The vulnerability stems from parsing PNG files where improper validation allows a read past the end of an allocated object, causing an information disclosure. Exploitation requires user interaction (the target must open a malicious file or visi...

CVE-2024-9754 Tungsten Automation Power PDF PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Tungsten Automation Power PDF PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Tungsten Automation Power PDF. User interaction is required to exploit this vulnerabili...

CVE-2024-9752

CVE-2024-9752 affects Tungsten Automation Power PDF. The issue is in the JPG file parsing path, caused by insufficient validation that can lead to an out-of-bounds read and information disclosure. Exploitation requires user interaction (target user must visit a malicious page or open a malicious ...

CVE-2024-9733 Tungsten Automation Power PDF PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Tungsten Automation Power PDF PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tungsten Automation Power PDF. User interaction is required to exploit this vulnerability in th...

CVE-2024-9750

CVE-2024-9750 concerns Tungsten Automation Power PDF. The collected documents confirm a vulnerability in PNG file parsing that causes an out-of-bounds read, allowing remote code execution. The root cause is the lack of proper validation of user-supplied data within the PNG parsing logic. Exploita...

CVE-2024-9740 Tungsten Automation Power PDF BMP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Tungsten Automation Power PDF BMP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tungsten Automation Power PDF. User interaction is required to exploit this vulnerability in th...

CVE-2024-9740 Tungsten Automation Power PDF BMP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Tungsten Automation Power PDF BMP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tungsten Automation Power PDF. User interaction is required to exploit this vulnerability in th...

CVE-2024-11507

CVE-2024-11507 affects IrfanView and involves a DXF file parsing bug that causes a type confusion due to insufficient input validation. This enables remote code execution when a user opens a malicious DXF or visits a page/file, with exploitation requiring user interaction. The underlying issue is...

CVE-2024-11507 IrfanView DXF File Parsing Type Confusion Remote Code Execution Vulnerability

IrfanView DXF File Parsing Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or...

CVE-2024-11523

Affected software: IrfanView. Vulnerability: DXF file parsing memory corruption that can lead to remote code execution. Root cause: lack of proper validation of user-supplied data during DXF parsing, enabling memory corruption. Impact: arbitrary code execution in the context of the current proces...

CVE-2024-11534 IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page...

CVE-2024-11535 IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page...

CVE-2024-11560

CVE-2024-11560 concerns IrfanView’s DXF file parsing, where improper validation of DXF data can trigger memory corruption and remote code execution. The vulnerability is described as exploitable when a target opens a malicious DXF file or visits a malicious page, with user interaction required. T...

CVE-2024-11568

CVE-2024-11568 affects IrfanView, where the DXF file parser is vulnerable to an out-of-bounds read. The fault stems from insufficient validation of user-supplied data during DXF parsing, which can cause a read past the end of an allocated buffer and enable remote code execution in the context of ...

CVE-2024-11556 IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability

IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page ...

CVE-2024-11542 IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability

IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page ...

CVE-2024-11527

CVE-2024-11527 affects IrfanView with a memory corruption condition in DWG file parsing that can lead to remote code execution. The flaw arises from insufficient validation of DWG data during parsing, allowing an attacker to execute code in the target process after the user opens a malicious file...

CVE-2024-11581

Luxion KeyShot is affected by a CVE-2024-11581 vulnerability in the JT file parsing code. The issue is an out-of-bounds read caused by insufficient validation of data during parsing of .jt files, which can allow an attacker to execute code in the context of the current process. Exploitation requi...

CVE-2024-11477 7-Zip Zstandard Decompression Integer Underflow Remote Code Execution Vulnerability

7-Zip Zstandard Decompression Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. Interaction with this library is required to exploit this vulnerability but attack vectors may vary dependi...

CVE-2024-6249

Wyze Cam v3 TCP Traffic Handling Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Wyze Cam v3 IP cameras. Authentication is not required to exploit this vulnerability. The...