IrfanView User Mode Write Access Conflict Vulnerability

IrfanView is an image viewer by Irfan Skiljan software developer in Bosnia and Herzegovina that supports image browsing, image editing, image format conversion and more. IrfanView 4.52 suffers from a user-mode write access conflict vulnerability starting at image00400000+0x00000000000249c6. An...

ACDSee Free User Mode Write Access Conflict Vulnerability (CNVD-2019-24226)

ACDSee is an image manager, viewer and editor program for Windows, macOS and iOS developed by ACD Systems International.ACDSee Free is the free version of ACDSee. ACDSee Free 1.1.21 suffers from a user mode write access conflict vulnerability starting at IDEACDStd!JPEGTransW+0x0000000000002450. A...

IrfanView User Mode Write Access Conflict Vulnerability (CNVD-2019-42242)

IrfanView is an image viewer by Irfan Skiljan software developer in Bosnia and Herzegovina that supports image browsing, image editing, image format conversion and more. IrfanView 4.52 suffers from a user-mode write access conflict vulnerability starting at image00400000+0x0000000000013a98. An...

ACDSee Free User Mode Write Access Conflict Vulnerability

ACDSee is an image manager, viewer and editor program for Windows, macOS and iOS developed by ACD Systems International.ACDSee Free is the free version of ACDSee. ACDSee Free 1.1.21 suffers from a user mode write access conflict vulnerability starting at...

CVE-2019-13262

XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x00000000003283eb...

CVE-2019-13257

XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x00000000003273aa...

CVE-2019-13246

FastStone Image Viewer 7.0 has a User Mode Write AV starting at image00400000+0x00000000001a9601...

CVE-2019-13255

XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x0000000000327464...

The vulnerability of the configuration import utility for the Cisco Integrated Management Controller allows a perpetrator to gain write access and load any data into the file system.

The vulnerability of the configuration import utility for the Cisco Integrated Management Controller remote management software lies in the lack of authentication for a critical function. Exploiting this vulnerability allows a malicious actor to gain write access and load any data into the file...

KLA11649 User Mode Write Access Violation vulnerabilities in IrfanView

User Mode Write Access Violation vulnerabilities were found in IrfanView. Malicious users can exploit this vulnerability to cause denial of service. Original advisories - Related products IrfanView CVE list CVE-2019-13242 high CVE-2019-13243 high Solution Update to the latest version Download...

CVE-2019-13083

XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x0000000000384e2a...

CVE-2019-1629

A vulnerability in the configuration import utility of Cisco Integrated Management Controller IMC could allow an unauthenticated, remote attacker to have write access and upload arbitrary data to the filesystem. The vulnerability is due to a failure to delete temporarily uploaded files. An attack...

Design/Logic Flaw

A vulnerability in the configuration import utility of Cisco Integrated Management Controller IMC could allow an unauthenticated, remote attacker to have write access and upload arbitrary data to the filesystem. The vulnerability is due to a failure to delete temporarily uploaded files. An attack...

The vulnerability of Siemens Simatic device software, related to errors in permission management, allows a perpetrator to gain access to read and write SNMP data.

The vulnerability of Siemens Simatic device software is related to errors in permission management. Exploiting this vulnerability can allow attackers to gain access to SNMP read and write operations using built-in authentication data community string...

CVE-2018-15664

CVE-2018-15664 affects Docker prior to fix in 18.06.1-ce-rc2, enabling a symlink-exchange attack via the docker cp API that can grant an attacker arbitrary read/write access to the host filesystem with root privileges due to archive handling on non-frozen/chrooted filesystems. Public advisories (...

CVE-2018-7824

An Externally Controlled Reference to a Resource CWE-610 vulnerability exists in Schneider Electric Modbus Serial Driver For 64-bit Windows OS:V3.17 IE 37 and prior , For 32-bit Windows OS:V2.17 IE 27 and prior, and as part of the Driver Suite version:V14.12 and prior which could allow write acce...

Spoofing

An Externally Controlled Reference to a Resource CWE-610 vulnerability exists in Schneider Electric Modbus Serial Driver For 64-bit Windows OS:V3.17 IE 37 and prior , For 32-bit Windows OS:V2.17 IE 27 and prior, and as part of the Driver Suite version:V14.12 and prior which could allow write acce...

Denial Of Service (DoS)

Linux kernel is vulnerable to denial of service. This is because the usbdestroyconfiguration function, in config.c in the USB core subsystem does not consider the maximum number of configurations and interfaces before attempting to release resources which allows local users to cause a denial of...

The vulnerability of the Dr.Web Enterprise Security Suite, an anti-virus protection tool, lies in the lack of restrictions on writing, reading, and creating files within the server folder. This allows attackers to execute arbitrary Lua scripts.

The vulnerability of the Dr.Web Enterprise Security Suite antivirus protection lies in the absence of restrictions on writing, reading, and creating files within the server’s directory. Exploiting this vulnerability allows a malicious actor to execute arbitrary Lua scripts without the need for th...

Stack-based Buffer Overflow

Linux kernel is vulnerable to stack-based buffer overflow vulnerability. The vulnerability exists in the sgioctl function in drivers/scsi/sg.c in the Linux kernel. A local user could cause a a denial of service condition or possibly have unspecified other impacts via a large command size in an...