CWE-125 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-125/ Sun, 26 Feb 2023 09:06:55 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png CWE-125 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-125/ 32 32 CVE-2007-3847 https://cvevulnerability.com/cve_vulnerabilities/cve-2007-3847/ Sun, 26 Feb 2023 09:06:55 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2007-3847/ The date handling code in modules/proxy/proxy_util.c (mod_proxy) in Apache 2.3.0, when using a threaded MPM, allows remote origin servers to cause a denial of service (caching forward proxy process crash) via crafted date headers that trigger a buffer over-read.

The post CVE-2007-3847 appeared first on CVE Vulnerability.

]]> The date handling code in modules/proxy/proxy_util.c (mod_proxy) in Apache 2.3.0, when using a threaded MPM, allows remote origin servers to cause a denial of service (caching forward proxy process crash) via crafted date headers that trigger a buffer over-read.

The post CVE-2007-3847 appeared first on CVE Vulnerability.

]]> CVE-2018-9978 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-9978/ Sun, 26 Feb 2023 06:51:54 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-9978/ This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of U3D files. The issue results from the lack of […]

The post CVE-2018-9978 appeared first on CVE Vulnerability.

]]> This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of U3D files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated object. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the context process. Was ZDI-CAN-5428.

The post CVE-2018-9978 appeared first on CVE Vulnerability.

]]> CVE-2018-9979 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-9979/ Sun, 26 Feb 2023 06:51:54 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-9979/ This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of Texture Continuation objects in U3D files. The issue results […]

The post CVE-2018-9979 appeared first on CVE Vulnerability.

]]> This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of Texture Continuation objects in U3D files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated object. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process. Was ZDI-CAN-5429.

The post CVE-2018-9979 appeared first on CVE Vulnerability.

]]> CVE-2018-9980 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-9980/ Sun, 26 Feb 2023 06:51:54 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-9980/ This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of U3D files. The issue results from the lack of […]

The post CVE-2018-9980 appeared first on CVE Vulnerability.

]]> This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of U3D files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated object. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process. Was ZDI-CAN-5430.

The post CVE-2018-9980 appeared first on CVE Vulnerability.

]]> CVE-2018-9983 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-9983/ Sun, 26 Feb 2023 06:51:54 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-9983/ This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of U3D files. The issue results from the lack of […]

The post CVE-2018-9983 appeared first on CVE Vulnerability.

]]> This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of U3D files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated data structure. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the context process. Was ZDI-CAN-5494.

The post CVE-2018-9983 appeared first on CVE Vulnerability.

]]> CVE-2018-9984 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-9984/ Sun, 26 Feb 2023 06:51:54 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-9984/ This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of Texture Image Channels objects in U3D files. The issue […]

The post CVE-2018-9984 appeared first on CVE Vulnerability.

]]> This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of Texture Image Channels objects in U3D files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated object. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process. Was ZDI-CAN-5495.

The post CVE-2018-9984 appeared first on CVE Vulnerability.

]]> CVE-2018-9988 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-9988/ Sun, 26 Feb 2023 06:51:54 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-9988/ ARM mbed TLS before 2.1.11, before 2.7.2, and before 2.8.0 has a buffer over-read in ssl_parse_server_key_exchange() that could cause a crash on invalid input.

The post CVE-2018-9988 appeared first on CVE Vulnerability.

]]> ARM mbed TLS before 2.1.11, before 2.7.2, and before 2.8.0 has a buffer over-read in ssl_parse_server_key_exchange() that could cause a crash on invalid input.

The post CVE-2018-9988 appeared first on CVE Vulnerability.

]]> CVE-2018-9989 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-9989/ Sun, 26 Feb 2023 06:51:54 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-9989/ ARM mbed TLS before 2.1.11, before 2.7.2, and before 2.8.0 has a buffer over-read in ssl_parse_server_psk_hint() that could cause a crash on invalid input.

The post CVE-2018-9989 appeared first on CVE Vulnerability.

]]> ARM mbed TLS before 2.1.11, before 2.7.2, and before 2.8.0 has a buffer over-read in ssl_parse_server_psk_hint() that could cause a crash on invalid input.

The post CVE-2018-9989 appeared first on CVE Vulnerability.

]]> CVE-2018-9950 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-9950/ Sun, 26 Feb 2023 06:51:53 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-9950/ This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PDF documents. The issue results from the lack of […]

The post CVE-2018-9950 appeared first on CVE Vulnerability.

]]> This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PDF documents. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated object. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process. Was ZDI-CAN-5413.

The post CVE-2018-9950 appeared first on CVE Vulnerability.

]]> CVE-2018-9963 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-9963/ Sun, 26 Feb 2023 06:51:53 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-9963/ This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JPEG2000 images. The issue results from the lack of […]

The post CVE-2018-9963 appeared first on CVE Vulnerability.

]]> This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JPEG2000 images. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated object. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process. Was ZDI-CAN-5549.

The post CVE-2018-9963 appeared first on CVE Vulnerability.

]]>