Out-of-bounds read vulnerability in Keyence KV STUDIO and KV REPLAY VIEWER

Overview KV STUDIO and KV REPLAY VIEWER provided by KEYENCE CORPORATION contain an out-of-bounds read vulnerability CWE-125, CVE-2023-42138. Michael Heinzl reported this vulnerability to JPCERT/CC. JPCERT/CC coordinated with the developer. Impact If this vulnerability is exploited, information ma...

PT-2023-28281 · Unknown +1 · Kv Replay Viewer +2

Name of the Vulnerable Software and Affected Versions: KV STUDIO versions 11.62 and earlier KV REPLAY VIEWER versions 2.62 and earlier Description: An out-of-bounds read issue exists, potentially allowing information disclosure or arbitrary code execution if a user of KV STUDIO PLAYER opens a...

less: Denial of service

Background less is a pager and text file viewer. Description less suffered from a flaw in its terminal escape sequence handling which made its filtering incomplete. Impact Malicious input could clear the terminal output or otherwise manipulate it with faked interactions. Workaround There is no...

Keyence KV STUDIO Buffer Error Vulnerability

Keyence KV STUDIO is a PLC programming software from Keyence Corporation. A security vulnerability exists in Keyence KV STUDIO Ver. 11.62 and earlier, KV REPLAY VIEWER Ver. 2.62 and earlier, which originates from a user opening a specially crafted file that may disclose information or execute...

The vulnerability of the App ObjectHandler component in the PDF-XChange PDF document viewing and editing software allows a perpetrator to execute arbitrary code.

The vulnerability of the App ObjectHandler component in the PDF-XChange PDF viewing and editing software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the U3D File Parser component in the PDF-XChange PDF document viewing and editing software allows a hacker to execute arbitrary code.

The vulnerability of the U3D File Parser component in the PDF-XChange PDF viewing and editing software is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the U3D File Parser component in the PDF-XChange PDF document viewing and editing software allows a hacker to execute arbitrary code.

The vulnerability of the U3D File Parser component in the PDF-XChange PDF viewing and editing software is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Unable to launch resources or Studio - connection between broker service and database has been lost

Users unable to launch resources such as published applications and desktops. Administrators unable to use Studio to manage environment. When checking event viewer logs on the DDC, we see event 1201 warning: When accessing the SQL Database, below error is see:...

WordPress Vrm 360 3D Model Viewer Plugin <= 1.2.1 is vulnerable to Sensitive Data Exposure

Software Vrm 360 3D Model Viewer Type Plugin Vulnerable versions = 1.2.1 Fixed in N/A OWASP Top 10 A5: Security Misconfiguration Classification Sensitive Data Exposure CVE CVE-2023-5177 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 41f6e6c8c32c Credits Jonatas Souza Vill...

Vrm 360 3D Model Viewer <= 1.2.1 - Full Path Disclosure

Description The plugin exposes the full path of a file when putting in a non-existent file in a parameter of the shortcode. PoC 1. Create a page 2. Place the shortcode vrm360 canvasname=s1 modelurl=SACharacter.zip aspectratio=1.8 initialoffset=0.9 on the page SACharacter.zip should be a...

Vrm 360 3D Model Viewer <= 1.2.1 - Full Path Disclosure

Description The plugin exposes the full path of a file when putting in a non-existent file in a parameter of the shortcode. 1. Create a page 2. Place the shortcode vrm360 canvasname=s1 modelurl=SACharacter.zip aspectratio=1.8 initialoffset=0.9 on the page SACharacter.zip should be a non-existent...

The vulnerability of the IW44EncodeCodec.cpp component in the viewer library, which is used for viewing, creating, and editing DjVu files, related to division by zero. This vulnerability allows an attacker to cause a service failure.

The vulnerability of the IW44EncodeCodec.cpp component in the viewer, editor, and DjVu-file creation library associated with DjVuLibre is related to the lack of checks for division by zero. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability in component IW44Image.cpp of the viewer library for creating and editing DjVu files allows a perpetrator to cause a service failure.

The vulnerability of component IW44Image.cpp in the viewer, editor, and DjVu-file creation library from DjVuLibre is related to the lack of checks for division by zero. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the 3D viewing tool JT and JT2Go, as well as the Teamcenter Visualization lifecycle management system, relates to buffer overflow in dynamic memory. This vulnerability allows attackers to execute arbitrary code.

The vulnerability of the 3D viewing tool JT and the Teamcenter Visualization lifecycle management system lies in buffer overflow in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created WRL file...

The vulnerability of the 3D viewing tool JT and the Teamcenter Visualization lifecycle management system lies in the use of memory after it is released. This allows a perpetrator to execute arbitrary code.

The vulnerability of the 3D viewing tool JT and the Teamcenter Visualization product lifecycle management system lies in the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created WRL file...

The vulnerability of the 3D viewer, which involves insufficient validation of input data, allows a perpetrator to execute arbitrary code.

The vulnerability of the 3D viewer software relates to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the 3D viewing tool JT and the Teamcenter Visualization lifecycle management system, related to access to resources through incompatible types, allows attackers to execute arbitrary code.

The vulnerability of the 3D viewing tool JT and the Teamcenter Visualization lifecycle management system lies in the access to resources through incompatible types. Exploiting this vulnerability allows attackers to execute arbitrary code using a specially created WRL file...

The vulnerability of the 3D viewing tool JT and the Teamcenter Visualization lifecycle management system, related to buffer overflow in the stack, allows a attacker to execute arbitrary code.

The vulnerability of the 3D viewing tool JT and the Teamcenter Visualization product lifecycle management system is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created WRL file...

The vulnerability of the 3D viewing tool JT and the Teamcenter Visualization lifecycle management system, related to access to resources through incompatible types, allows attackers to execute arbitrary code.

The vulnerability of the 3D viewing tool JT and the Teamcenter Visualization lifecycle management system lies in the access to resources through incompatible types. Exploiting this vulnerability allows attackers to execute arbitrary code using a specially created WRL file...

The vulnerability of the 3D viewing tool JT and JT2Go, as well as the Teamcenter Visualization lifecycle management system, relates to buffer overflow in dynamic memory. This vulnerability allows attackers to execute arbitrary code.

The vulnerability of the 3D viewing tool JT and the Teamcenter Visualization lifecycle management system lies in buffer overflow in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created WRL file...