CWE-457 Archives - CVE Vulnerability

CVE-2007-3468

Sun, 26 Feb 2023 09:06:45 +0000

input.c in VideoLAN VLC Media Player before 0.8.6c allows remote attackers to cause a denial of service (crash) via a crafted WAV file that causes an uninitialized i_nb_resamplers variable to be used.

The post CVE-2007-3468 appeared first on CVE Vulnerability.

CVE-2007-2728

Sun, 26 Feb 2023 09:06:26 +0000

The soap extension in PHP calls php_rand_r with an uninitialized seed variable, which has unknown impact and attack vectors, a related issue to the mcrypt_create_iv issue covered by CVE-2007-2727.

The post CVE-2007-2728 appeared first on CVE Vulnerability.

CVE-2021-46617

Thu, 23 Feb 2023 14:13:10 +0000

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of TIF images. The issue results from the lack of proper initialization of memory prior to accessing it. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15411.

The post CVE-2021-46617 appeared first on CVE Vulnerability.

CVE-2021-46631

Thu, 23 Feb 2023 14:13:10 +0000

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of TIF images. The issue results from the lack of proper initialization of memory prior to accessing it. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15461.

The post CVE-2021-46631 appeared first on CVE Vulnerability.

CVE-2021-46566

Thu, 23 Feb 2023 14:13:09 +0000

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JT files. The issue results from the lack of proper initialization of memory prior to accessing it. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15027.

The post CVE-2021-46566 appeared first on CVE Vulnerability.

CVE-2021-46570

Thu, 23 Feb 2023 14:13:09 +0000

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JT files. The issue results from the lack of proper initialization of memory prior to accessing it. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-15364.

The post CVE-2021-46570 appeared first on CVE Vulnerability.

CVE-2021-3928

Thu, 23 Feb 2023 14:11:27 +0000

vim is vulnerable to Use of Uninitialized Variable

The post CVE-2021-3928 appeared first on CVE Vulnerability.

CVE-2021-31435

Thu, 23 Feb 2023 14:09:34 +0000

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.931. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of CMP files. The issue results from the lack of proper initialization of memory prior to accessing it. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-12331.

The post CVE-2021-31435 appeared first on CVE Vulnerability.