CWE-788 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-788/ Sun, 26 Feb 2023 09:10:23 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png CWE-788 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-788/ 32 32 CVE-2008-4113 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-4113/ Sun, 26 Feb 2023 09:10:23 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-4113/ The sctp_getsockopt_hmac_ident function in net/sctp/socket.c in the Stream Control Transmission Protocol (sctp) implementation in the Linux kernel before 2.6.26.4, when the SCTP-AUTH extension is enabled, relies on an untrusted length value to limit copying of data from kernel memory, which allows local users to obtain sensitive information via a crafted SCTP_HMAC_IDENT IOCTL request involving the […]

The post CVE-2008-4113 appeared first on CVE Vulnerability.

]]> The sctp_getsockopt_hmac_ident function in net/sctp/socket.c in the Stream Control Transmission Protocol (sctp) implementation in the Linux kernel before 2.6.26.4, when the SCTP-AUTH extension is enabled, relies on an untrusted length value to limit copying of data from kernel memory, which allows local users to obtain sensitive information via a crafted SCTP_HMAC_IDENT IOCTL request involving the sctp_getsockopt function.

The post CVE-2008-4113 appeared first on CVE Vulnerability.

]]> CVE-2007-4268 https://cvevulnerability.com/cve_vulnerabilities/cve-2007-4268/ Sun, 26 Feb 2023 09:07:08 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2007-4268/ Integer signedness error in the Networking component in Apple Mac OS X 10.4 through 10.4.10 allows local users to execute arbitrary code via a crafted AppleTalk message with a negative value, which satisfies a signed comparison during mbuf allocation but is later interpreted as an unsigned value, which triggers a heap-based buffer overflow.

The post CVE-2007-4268 appeared first on CVE Vulnerability.

]]> Integer signedness error in the Networking component in Apple Mac OS X 10.4 through 10.4.10 allows local users to execute arbitrary code via a crafted AppleTalk message with a negative value, which satisfies a signed comparison during mbuf allocation but is later interpreted as an unsigned value, which triggers a heap-based buffer overflow.

The post CVE-2007-4268 appeared first on CVE Vulnerability.

]]> CVE-2020-27738 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-27738/ Sun, 26 Feb 2023 06:40:26 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-27738/ A vulnerability has been identified in Nucleus NET (All versions), Nucleus ReadyStart V3 (All versions < V2017.02.3), Nucleus ReadyStart V4 (All versions < V4.1.0), Nucleus Source Code (Versions including affected DNS modules), SIMOTICS CONNECT 400 (All versions < V0.5.0.0). The DNS domain name record decompression functionality does not properly validate the pointer offset values. The […]

The post CVE-2020-27738 appeared first on CVE Vulnerability.

]]> A vulnerability has been identified in Nucleus NET (All versions), Nucleus ReadyStart V3 (All versions < V2017.02.3), Nucleus ReadyStart V4 (All versions < V4.1.0), Nucleus Source Code (Versions including affected DNS modules), SIMOTICS CONNECT 400 (All versions < V0.5.0.0). The DNS domain name record decompression functionality does not properly validate the pointer offset values. The parsing of malformed responses could result in a read access past the end of an allocated structure. An attacker with a privileged position in the network could leverage this vulnerability to cause a denial-of-service condition.

The post CVE-2020-27738 appeared first on CVE Vulnerability.

]]> CVE-2021-43756 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-43756/ Thu, 23 Feb 2023 14:12:32 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-43756/ Adobe Media Encoder versions 22.0, 15.4.2 (and earlier) are affected by a memory corruption vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

The post CVE-2021-43756 appeared first on CVE Vulnerability.

]]> Adobe Media Encoder versions 22.0, 15.4.2 (and earlier) are affected by a memory corruption vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

The post CVE-2021-43756 appeared first on CVE Vulnerability.

]]> CVE-2021-43755 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-43755/ Thu, 23 Feb 2023 14:12:32 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-43755/ Adobe After Effects versions 22.0 (and earlier) and 18.4.2 (and earlier) are affected by a memory corruption vulnerability due to insecure handling of a malicious file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.

The post CVE-2021-43755 appeared first on CVE Vulnerability.

]]> Adobe After Effects versions 22.0 (and earlier) and 18.4.2 (and earlier) are affected by a memory corruption vulnerability due to insecure handling of a malicious file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.

The post CVE-2021-43755 appeared first on CVE Vulnerability.

]]> CVE-2021-42725 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-42725/ Thu, 23 Feb 2023 14:12:19 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-42725/ Adobe Bridge version 11.1.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious M4A file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.

The post CVE-2021-42725 appeared first on CVE Vulnerability.

]]> Adobe Bridge version 11.1.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious M4A file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.

The post CVE-2021-42725 appeared first on CVE Vulnerability.

]]> CVE-2021-42729 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-42729/ Thu, 23 Feb 2023 14:12:19 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-42729/ Adobe Bridge version 11.1.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious WAV file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.

The post CVE-2021-42729 appeared first on CVE Vulnerability.

]]> Adobe Bridge version 11.1.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious WAV file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.

The post CVE-2021-42729 appeared first on CVE Vulnerability.

]]> CVE-2021-42730 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-42730/ Thu, 23 Feb 2023 14:12:19 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-42730/ Adobe Bridge version 11.1.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious PSD file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.

The post CVE-2021-42730 appeared first on CVE Vulnerability.

]]> Adobe Bridge version 11.1.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious PSD file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.

The post CVE-2021-42730 appeared first on CVE Vulnerability.

]]> CVE-2021-42732 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-42732/ Thu, 23 Feb 2023 14:12:19 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-42732/ Access of Memory Location After End of Buffer (CWE-788)

The post CVE-2021-42732 appeared first on CVE Vulnerability.

]]> Access of Memory Location After End of Buffer (CWE-788)

The post CVE-2021-42732 appeared first on CVE Vulnerability.

]]> CVE-2021-42735 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-42735/ Thu, 23 Feb 2023 14:12:19 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-42735/ Adobe Photoshop version 22.5.1 (and earlier versions ) is affected by an Access of Memory Location After End of Buffer vulnerability, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.

The post CVE-2021-42735 appeared first on CVE Vulnerability.

]]> Adobe Photoshop version 22.5.1 (and earlier versions ) is affected by an Access of Memory Location After End of Buffer vulnerability, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.

The post CVE-2021-42735 appeared first on CVE Vulnerability.

]]>