A heap overflow vulnerability exists in the PC version of Beijing Aqiyi Technology Co.'s Aqiyi Watch PC version (CNVD-2020-31415)

Aiki Viewer for PC is a viewer tool from Aiki. Ltd. Aqiyi Viewer for PC suffers from a heap overflow vulnerability that can be exploited by an attacker to cause a software crash, and further exploitation can lead to arbitrary code execution...

PDF Viewer Null Pointer Execution

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to the use of a null pointer. Exploiting these vulnerabilities can allow an attacker...

PDF Viewer Heap Buffer Overflow Code Execution

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 lies in the execution of operations beyond the buffer in memory. Exploiting this vulnerability cou...

PDF Viewer Code Execution

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to data conversion deficiencies. Exploiting these vulnerabilities can allow attacker...

TestLink has an unspecified vulnerability

TestLink is the TestLink team's set of open source software for managing the software testing process and providing statistical analysis. An unspecified vulnerability exists in TestLink. An attacker can exploit this vulnerability to obtain credentials in plaintext with the 'viewer' parameter of t...

CVE-2020-12273

In TestLink 1.9.20, a crafted login.php viewer parameter exposes cleartext credentials...

PT-2020-13086

Name of the Vulnerable Software and Affected Versions TestLink version 1.9.20 Description A crafted viewer parameter in the login.php endpoint exposes cleartext credentials. Recommendations For TestLink version 1.9.20, avoid using the viewer parameter in the login.php endpoint until the issue is...

Memory Corruption Vulnerability in XnView Classic wlm Files

XnView Classic is an image viewing software. A memory corruption vulnerability exists in XnView Classic wlm files. An attacker can exploit the vulnerability to cause the program to deny service...

Description of the Visio 2010 Viewer update: September 10, 2013

Description of the Visio 2010 Viewer update: September 10, 2013 INTRODUCTION Microsoft has released an update for Microsoft Visio 2010 Viewer. This update provides the latest fix for the 32-bit and 64-bit editions of Visio 2010 Viewer. Additionally, this update contains stability and performance...

List of all Office 2010 SP1 packages

List of all Office 2010 SP1 packages Summary This article lists all the Microsoft Office 2010 Service Pack 1 SP1 client packages and the information about how to obtain them. Resolution To obtain these SP1 packages, use one of the following methods. Method 1: Microsoft Update recommended To...

Description of Office Compatibility Pack Service Pack 2

Describes Office Compatibility Pack Service Pack 2 SP2.INTRODUCTIONMicrosoft Office Compatibility Pack Service Pack 2 SP2 gives customers the latest updates to the Office Compatibility Pack for the Microsoft Office Word 2007 file format, for the Microsoft Office Excel 2007 file format, and for th...

Description of Office Excel Viewer 2007 SP3

Describes the improvements that Office Excel Viewer 2007 SP3 provides and the issues that it fixes.IntroductionMicrosoft Office Excel Viewer 2007 Service Pack 3 SP3 provides the latest updates to Office Excel Viewer 2007. These updates include two main categories of fixes: Previously unreleased...

Rubo DICOM Viewer 2.0 - Buffer Overflow (SEH) Exploit

Exploit Title: Rubo DICOM Viewer 2.0 - Buffer Overflow SEH Exploit Author: bzyo Vulnerable Software: Rubo Medical Imaging - DICOM Viewer 2.0 Vendor Homepage: http://www.rubomedical.com/ Version: 2.0 Software Link : http://www.rubomedical.com/download/index.php Tested Windows 7 SP1 x86 PoC 1...

Rubo DICOM Viewer 2.0 - Buffer Overflow (SEH)

Exploit Title: Rubo DICOM Viewer 2.0 - Buffer Overflow SEH Exploit Author: bzyo Date: 2020-04-17 Vulnerable Software: Rubo Medical Imaging - DICOM Viewer 2.0 Vendor Homepage: http://www.rubomedical.com/ Version: 2.0 Software Link : http://www.rubomedical.com/download/index.php Tested Windows 7 SP...

February 10, 2015 update for PowerPoint Viewer 2010 (KB2880522)

February 10, 2015 update for PowerPoint Viewer 2010 KB2880522 This article describes update KB2880522 for Microsoft PowerPoint Viewer 2010 that was released on February 10, 2015. This update has a prerequisite. Improvements and Fixes Fixes an issue in which the Align Selected Objects andAlign to...

Rubo DICOM Viewer 2.0 Buffer Overflow

Exploit Title: Rubo DICOM Viewer 2.0 - Buffer Overflow SEH Exploit Author: bzyo Date: 2020-04-17 Vulnerable Software: Rubo Medical Imaging - DICOM Viewer 2.0 Vendor Homepage: http://www.rubomedical.com/ Version: 2.0 Software Link : http://www.rubomedical.com/download/index.php Tested Windows 7 SP...

Foxit PhantomPDF U3DBrowser U3D File Parsing Heap Buffer Overflow Vulnerability

Foxit PhantomPDF is China's Foxit Foxit a PDF document reader.Foxit 3D Plugin is China's Foxit Foxit a use in the PDF document reader in the 3D plug-in. A security vulnerability exists in Foxit PhantomPDF when processing U3D objects in PDF files. The vulnerability stems from the program failing t...

Memory Corruption Vulnerability in MicroDicom viewer

MicroDicom viewer is a very comprehensive medical image viewing tool. MicroDicom viewer suffers from a memory corruption vulnerability that can be exploited to crash the program by constructing malformed BMP images...

Crescendo - A Swift Based, Real Time Event Viewer For macOS - It Utilizes Apple's Endpoint Security Framework

Crescendo is a swift based, real time event viewer for macOS. It utilizes Apple's Endpoint Security Framework. Getting Started Apple has introduced some new security mechanisms that we need to enable to get Crescendo running. 1.- Ensure that you have moved the app to your /Applications director o...

Oracle E-Business Suite Human Resources Organization Hierarchy Viewer PosServer SQL Injection Privilege Escalation Vulnerability

This vulnerability allows remote attackers to escalate privileges on affected installations of Oracle E-Business Suite Human Resources. Authentication is required to exploit this vulnerability. The specific flaw exists within the Organization Hierarchy Viewer. The issue results from the lack of...