CVE Vulnerability

CWE-787

CVE-2019-13252

by

ACDSee Free 1.1.21 has a User Mode Write AV starting at IDE_ACDStd!IEP_SetColorProfile+0x00000000001172b0.

CVE-2019-13253

by

XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x0000000000385474.

CVE-2019-13254

by

XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x000000000032e808.

CVE-2019-13255

by

XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x0000000000327464.

CVE-2019-13273

by

In Xymon through 4.3.28, a buffer overflow vulnerability exists in the csvinfo CGI script. The overflow may be exploited by sending a crafted GET request that triggers an sprintf of the srcdb parameter.

CVE-2019-13276

by

TRENDnet TEW-827DRU with firmware up to and including 2.04B03 contains a stack-based buffer overflow in the ssi binary. The overflow allows an unauthenticated user to execute arbitrary code by providing a sufficiently long query string when POSTing to any valid cgi, txt, asp, or js file. The vulnerability can be exercised on the local intranet or remotely if remote administration is enabled.