PT-2021-4670 · Adobe +4 · Xmp Toolkit Sdk +4

Name of the Vulnerable Software and Affected Versions: XMP Toolkit SDK versions 2020.1 and earlier Description: The issue is related to a buffer overflow vulnerability in the XMP Toolkit SDK, potentially allowing arbitrary code execution in the context of the current user. Exploitation requires...

PT-2021-4667 · Adobe +4 · Xmp Toolkit Sdk +4

Name of the Vulnerable Software and Affected Versions: XMP Toolkit SDK versions 2020.1 and earlier Description: The issue is related to a use-after-free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user...

Adobe XMP Toolkit SDK 缓冲区错误漏洞

Adobe XMP Toolkit SDK is a tagging technology from Adobe that allows you to embed data about a file called metadata into the file itself. an out-of-bounds read vulnerability exists in Adobe XMP Toolkit SDK 2020.1 and earlier. An attacker could exploit this vulnerability to cause a denial of servi...

Adobe XMP Toolkit SDK 缓冲区错误漏洞

Adobe XMP Toolkit SDK is a tagging technology from Adobe that allows you to embed data about a file called metadata into the file itself.Adobe XMP Toolkit SDK 2020.1 and earlier versions are vulnerable to a heap buffer overflow. An attacker could exploit this vulnerability to cause a denial of...

PT-2021-4735 · Adobe +4 · Xmp Toolkit Sdk +4

Name of the Vulnerable Software and Affected Versions: XMP Toolkit SDK versions 2020.1 and earlier Description: The issue is related to insufficient input validation in the Adobe XMP-Toolkit-SDK, which can lead to arbitrary code execution in the context of the current user. This can be achieved b...

PT-2021-5099 · Adobe +4 · Xmp Toolkit +4

Name of the Vulnerable Software and Affected Versions: XMP Toolkit versions 2020.1 and earlier Description: The issue is related to a memory corruption vulnerability, potentially resulting in arbitrary code execution in the context of the current user. This can be achieved through a buffer overfl...

PT-2021-4669 · Adobe +4 · Xmp Toolkit Sdk +4

Name of the Vulnerable Software and Affected Versions: XMP Toolkit SDK versions 2020.1 and earlier Description: The issue is related to a buffer overflow vulnerability in the XMP Toolkit SDK, potentially allowing arbitrary code execution in the context of the current user. Exploitation requires...

PT-2021-4888 · Adobe +2 · Xmp Toolkit Sdk +2

Name of the Vulnerable Software and Affected Versions: XMP Toolkit SDK versions 2020.1 and earlier Description: The issue is related to a write-what-where condition vulnerability caused during the application's memory allocation process. This may cause the memory management functions to become...

Adobe XMP Toolkit 缓冲区错误漏洞

Adobe XMP Toolkit SDK is a tagging technology from Adobe that allows you to embed data about a file called metadata into the file itself.Adobe XMP Toolkit SDK 2020.1 and earlier versions are vulnerable to memory out-of-bounds access. An attacker could exploit this vulnerability to execute arbitra...

PT-2021-4761 · Adobe +4 · Xmp Toolkit Sdk +4

Name of the Vulnerable Software and Affected Versions: XMP Toolkit SDK versions 2020.1 and earlier Description: The issue is related to a buffer overflow vulnerability in the XMP Toolkit SDK, which can potentially result in arbitrary code execution in the context of the current user. Exploitation...

PT-2021-5097 · Adobe +4 · Xmp Toolkit +4

Name of the Vulnerable Software and Affected Versions: XMP Toolkit versions 2020.1 and earlier Description: The issue is related to a Buffer Underflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user...

PT-2021-4643 · Adobe +4 · Xmp Toolkit Sdk +4

Name of the Vulnerable Software and Affected Versions: XMP Toolkit SDK versions 2020.1 and earlier Description: The issue is related to an Improper Input Validation vulnerability, which could potentially result in arbitrary code execution in the context of the current user. Exploitation of this...

PT-2021-4666 · Adobe +4 · Xmp Toolkit Sdk +4

Name of the Vulnerable Software and Affected Versions: XMP Toolkit SDK versions 2020.1 and earlier Description: The issue is related to an out-of-bounds read vulnerability that could lead to disclosure of arbitrary memory. An attacker could leverage this vulnerability to bypass mitigations such a...

PT-2021-4885 · Adobe +4 · Xmp Toolkit +4

Name of the Vulnerable Software and Affected Versions: XMP Toolkit versions 2020.1 and earlier Description: The issue is related to a memory corruption vulnerability, potentially allowing arbitrary code execution in the context of the current user. This can be achieved through a buffer overflow i...

Adobe XMP Toolkit SDK 缓冲区错误漏洞

Adobe XMP Toolkit SDK is a tagging technology from Adobe that allows you to embed data about a file called metadata into the file itself.Adobe XMP Toolkit SDK 2020.1 and earlier versions are vulnerable to a heap buffer overflow. An attacker could exploit this vulnerability to execute arbitrary co...

APSB21-65 Security updates available for Adobe XMP Toolkit SDK

Adobe has released updates for XMP-Toolkit-SDK. These updates resolve multiple critical and important vulnerabilities. Successful exploitation could lead to arbitrary code execution in the context of the current user...

Updated python-pikepdf packages fix security vulnerability

models/metadata.py in the pikepdf package 1.3.0 through 2.9.2 for Python allows XXE when parsing XMP metadata entries CVE-2021-29421...

MGASA-2021-0268 Updated python-pikepdf packages fix security vulnerability

models/metadata.py in the pikepdf package 1.3.0 through 2.9.2 for Python allows XXE when parsing XMP metadata entries CVE-2021-29421...

xmlgraphics-commons: SSRF due to improper input validation by the XMPParser

Apache XmlGraphics Commons 2.4 and earlier is vulnerable to server-side request forgery, caused by improper input validation by the XMPParser. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GET requests. Users...

openSUSE Security Update : perl-Image-ExifTool (openSUSE-2021-707)

This update for perl-Image-ExifTool fixes the following issues : Update to version 12.25 fixes boo1185547 CVE-2021-22204 - JPEG XL support is now official - Added read support for Medical Research Council MRC image files - Added ability to write a number of 3gp tags in video files - Added a new...