GTKWave 输入验证错误漏洞

GTKWave is a full-featured, GTK+-based waveform viewer from GTKWave. GTKWave suffers from an integer overflow vulnerability that can be exploited by an attacker to execute arbitrary code via a specially crafted .lxt2 file...

GTKWave 输入验证错误漏洞

GTKWave is a full-featured, GTK+-based waveform viewer from GTKWave. An integer overflow vulnerability exists in GTKWave version 3.3.115. An attacker can exploit this vulnerability to cause arbitrary code execution via a specially crafted .lxt2 file...

GTKWave 输入验证错误漏洞

GTKWave is a full-featured, GTK+-based waveform viewer from GTKWave. An integer overflow vulnerability exists in GTKWave version 3.3.115, which can be exploited by an attacker to cause arbitrary code execution via a specially crafted fst file...

JustSystems Ichitaro Input Validation Error Vulnerability

JustSystems Ichitaro is a Japanese word processing software from JustSystems. An input validation error vulnerability exists in JustSystems Ichitaro 2023 version 1.0.1.59372, which is caused by an integer overflow in the HyperLinkFrame stream parser, where a specially crafted document may cause t...

PT-2023-5327 · Unknown · Ansi C Opc Ua Sdk

Name of the Vulnerable Software and Affected Versions: OPC UA implementations ANSI C and C++ affected versions not specified Description: The OPC UA implementations contain an integer overflow vulnerability that could cause the application to run into an infinite loop during certificate validatio...

MediaTek 芯片输入验证错误漏洞

MediaTek chips are a variety of chips from MediaTek, a Chinese company MediaTek. The MediaTek chips contain a security vulnerability that originates from an integer overflow that results in an out-of-bounds write. An attacker could exploit the vulnerability to escalate privileges. The following...

NVIDIA DGX 输入验证错误漏洞

NVIDIA DGX is a high-performance workstation for deep learning applications from NVIDIA. The NVIDIA DGX A100 suffers from an input validation error vulnerability that stems from an integer overflow in the SBIOS in SmmCore. An attacker could exploit the vulnerability by passing specially crafted...

FISCO-BCOS 输入验证错误漏洞

FISCO-BCOS is an open source, secure and controlled enterprise-level financial blockchain underlying technology platform. A security vulnerability exists in FISCO-BCOS release-3.0.0-rc2, which can be exploited by an attacker to trigger an integer overflow and cause a denial of service DoS via an...

Fortinet FortiOS 输入验证错误漏洞

Fortinet FortiOS is a security operating system dedicated to the FortiGate network security platform from Fortinet, a US-based company. Fortinet FortiOS is vulnerable to an integer overflow vulnerability that could be exploited by an attacker to corrupt control data on the heap with a specially...

CVE-2017-1000456

freedesktop.org libpoppler 0.60.1 fails to validate boundaries in TextPool::addWord, leading to overflow in subsequent calculations...

CVE-2017-1000456

freedesktop.org libpoppler 0.60.1 fails to validate boundaries in TextPool::addWord, leading to overflow in subsequent calculations...

Sendmail 8.118.12 Debugger - Arbitrary Code Execution (2)

Sendmail 8.118.12 Debugger - Arbitrary Code Execution 2 // source: https://www.securityfocus.com/bid/3163/info An input validation error exists in Sendmail's debugging functionality. The problem is the result of the use of signed integers in the program's tTflag function, which is responsible for...