Lucene search
+L

71 matches found

CNNVD
CNNVD
added 2024/01/08 12:0 a.m.6 views

GTKWave 输入验证错误漏洞

GTKWave is a full-featured, GTK+-based waveform viewer from GTKWave. A code execution vulnerability exists in GTKWave version 3.3.118, which can be exploited by an attacker to potentially cause arbitrary code execution via a specially crafted fst file...

7.8CVSS7.7AI score0.00418EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2024/01/08 12:0 a.m.9 views

GTKWave 安全漏洞

GTKWave is a full-featured, GTK+-based waveform viewer from GTKWave. A buffer overflow vulnerability exists in GTKWave version 3.3.115, which stems from a boundary error in the LXT2 lxt2rdexpandintegertobits function when handling untrusted input, and can be exploited by an attacker to cause...

7.8CVSS8AI score0.00435EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2024/01/08 12:0 a.m.9 views

GTKWave 缓冲区错误漏洞

GTKWave is a full-featured, GTK+-based waveform viewer from GTKWave. An out-of-bounds write vulnerability exists in GTKWave version 3.3.115, which can be exploited by an attacker to cause arbitrary code execution via specially crafted .vcd files...

7.8CVSS7.9AI score0.00432EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2024/01/08 12:0 a.m.10 views

GTKWave 缓冲区错误漏洞

GTKWave is a full-featured, GTK+-based waveform viewer from GTKWave. A buffer overflow vulnerability exists in GTKWave version 3.3.115. The vulnerability stems from a boundary error in the fstReaderIterBlocks2 chaintable parsing function when processing untrusted input, which can be exploited by ...

7.8CVSS8AI score0.00416EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2024/01/08 12:0 a.m.8 views

GTKWave 缓冲区错误漏洞

GTKWave is a full-featured, GTK+-based waveform viewer from GTKWave. A buffer overflow vulnerability exists in GTKWave version 3.3.115, which can be exploited by an attacker to cause arbitrary code execution via specially crafted .fst files...

7.8CVSS8AI score0.00435EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2024/01/08 12:0 a.m.8 views

GTKWave 输入验证错误漏洞

GTKWave is a full-featured, GTK+-based waveform viewer from GTKWave. An integer overflow vulnerability exists in GTKWave version 3.3.118, which can be exploited by an attacker to potentially cause arbitrary code execution via a specially crafted fst file...

7.8CVSS7.9AI score0.00436EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2024/01/08 12:0 a.m.9 views

GTKWave 缓冲区错误漏洞

GTKWave is a full-featured, GTK+-based waveform viewer from GTKWave. A code execution vulnerability exists in GTKWave version 3.3.115, which can be exploited by an attacker to potentially cause arbitrary code execution via a specially crafted fst file...

7.8CVSS7.7AI score0.00432EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2024/01/08 12:0 a.m.7 views

GTKWave 输入验证错误漏洞

GTKWave is a full-featured, GTK+-based waveform viewer from GTKWave. GTKWave suffers from an integer overflow vulnerability that can be exploited by an attacker to cause arbitrary code execution via a specially crafted fst file...

7.8CVSS7.9AI score0.00432EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2024/01/08 12:0 a.m.4 views

PT-2024-2952 · Gtkwave · Gtkwave

Name of the Vulnerable Software and Affected Versions: GTKWave version 3.3.115 Description: An integer overflow vulnerability exists in the VZT longest len value allocation functionality. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious...

7.8CVSS8.3AI score0.01493EPSS
SaveExploits82References136
SUSE CVE
SUSE CVE
added 2023/02/15 5:30 a.m.3 views

SUSE CVE-2014-1577

The mozilla::dom::OscillatorNodeEngine::ComputeCustom function in the Web Audio subsystem in Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.2, and Thunderbird 31.x before 31.2 allows remote attackers to obtain sensitive information from process memory or cause a denial of service...

6.4CVSS8.6AI score0.02896EPSS
SaveExploits0References11
SUSE CVE
SUSE CVE
added 2023/02/15 4:25 a.m.6 views

SUSE CVE-2018-14394

libavformat/movenc.c in FFmpeg before 4.0.2 allows attackers to cause a denial of service application crash caused by a divide-by-zero error with a user crafted Waveform audio file...

2.8CVSS9.2AI score0.01121EPSS
SaveExploits0References5
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.26 views

Mageia: Security Advisory (MGASA-2019-0127)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7.4AI score0.03299EPSS
SaveExploits11References4
BDU FSTEC
BDU FSTEC
added 2020/10/15 12:0 a.m.7 views

The vulnerability of the SDL_LoadWAV_RW function in the Simple DirectMedia Layer library allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the SDLLoadWAVRW function audio/SDLwave.c. in the Simple DirectMediaLayer library is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

8.8CVSS7AI score0.02992EPSS
SaveExploits1References29Affected Software7
Tenable Nessus
Tenable Nessus
added 2019/05/08 12:0 a.m.13 views

Schweitzer Engineering Laboratories AC Metering Module Detection

Binary data 755362.prm...

7.3AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2019/03/04 12:0 a.m.33 views

Fedora 28 : SDL (2019-6092f8c0dc)

This release fixes various buffer overflows when parsing or processing damaged Waveform audio and BMP image files. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and form...

8.8CVSS6.8AI score0.03299EPSS
SaveExploits11References12
Prion
Prion
added 2018/07/19 5:29 a.m.26 views

Design/Logic Flaw

libavformat/movenc.c in FFmpeg before 4.0.2 allows attackers to cause a denial of service application crash caused by a divide-by-zero error with a user crafted Waveform audio file...

4.3CVSS6.2AI score0.01121EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2018/07/19 5:29 a.m.23 views

CVE-2018-14394

libavformat/movenc.c in FFmpeg before 4.0.2 allows attackers to cause a denial of service application crash caused by a divide-by-zero error with a user crafted Waveform audio file...

6.5CVSS6.2AI score0.01121EPSS
SaveExploits0References2
OSV
OSV
added 2018/07/19 5:29 a.m.4 views

UBUNTU-CVE-2018-14394

libavformat/movenc.c in FFmpeg before 4.0.2 allows attackers to cause a denial of service application crash caused by a divide-by-zero error with a user crafted Waveform audio file...

6.5CVSS7.3AI score0.01121EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2018/07/19 5:29 a.m.27 views

CVE-2018-14394

libavformat/movenc.c in FFmpeg before 4.0.2 allows attackers to cause a denial of service application crash caused by a divide-by-zero error with a user crafted Waveform audio file...

6.5CVSS6.7AI score0.01121EPSS
SaveExploits0References2
OSV
OSV
added 2018/07/19 5:29 a.m.33 views

CVE-2018-14394

libavformat/movenc.c in FFmpeg before 4.0.2 allows attackers to cause a denial of service application crash caused by a divide-by-zero error with a user crafted Waveform audio file...

6.5CVSS6.5AI score
SaveExploits0References2
Rows per page
Query Builder