Security
Headlines
HeadlinesLatestCVEs

Headline

CVE-2023-38076

A vulnerability has been identified in JT2Go (All versions < V14.3.0.1), Teamcenter Visualization V13.3 (All versions < V13.3.0.12), Teamcenter Visualization V14.0 (All versions), Teamcenter Visualization V14.1 (All versions < V14.1.0.11), Teamcenter Visualization V14.2 (All versions < V14.2.0.6), Teamcenter Visualization V14.3 (All versions < V14.3.0.1). The affected application is vulnerable to heap-based buffer overflow while parsing specially crafted WRL files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-21041)

CVE
#vulnerability#pdf#buffer_overflow

%PDF-1.5 %���� 57 0 obj << /Length 2405 /Filter /FlateDecode >> stream x��ZKs�8��W�HU�a< “�O^�L^kə��́�h�3�cD*���n�I����\5��H4�����h�w ޞ�49�x#M`��xLnMIE�6�(���,���t�.��9�q8N���蜩0+������X �����uc���r���/__��������ד�?��{��,��Ͼ�F��{P"L<�’�T�()�:�g�9�^��oC&��UDh̻dƒ-�"�}� Fj]7�2�E�7���Ҽ�W�)E��rE�y|w]�[�^"a��Q��P��&/�U�����>�w���)bD? �pa��s��q�/WZ�KM"��W�p�K�-�8�R7���ZM��a��uL4�u�0B��]�A��M���d=�4Pd��}%7��l�ؠM/ �6���B*XS������|����,��,-��\n�E���A{I�`�ugH�;��-����-#�Y/ ZC�w����{�H��4]��u-�y[��:�6�����s �ȊM�g�K�l�h��q���_�����>"8D}��YD ���C��� �uLEr�8���z�`&Չ�E� ���O�ۥž�r��$�i3�����>ml��gS�>[^�J��"��!�\�Ss�8���r�?$E��\�fn�Ҍ=1��f����_G1�w]��a�d1 �Bt���:�I�a�vW?%E�+��r��)!hz0” n5���XU���@ ��GyW��?~��)�_�c\"�fy�’���dެ����Dj��8��6��MX�����tZ�37r3b��<��R��’W��.@��w��G ��mB�7���tW��&�D��S��ĎvL���ڕ�ڽ�K� ���>]�����ժFE��N�Y�.`�#[� X���*��\��$@_i�w��n��l k7��y9�)F��_��\�’�� �2{O���k��#�[����E(��Z$Y�o��Kĩ�7 ��. W��/pֿ���ps�(��b�� �;V�;K?͹���(���ղ�e ��?�XM����o�� ��Z��qbg3�5s�OQ����F*��Y��R-wcĨ�>�8� k’��D�oݎ�qj�H���40a��q�5ܨl #[[[�.틦�9���0�^�sƇ�є-�E�3T�A�e���0��e�J>*-o@��h��>�� �u��lU�� �<�xck-O�(�(��V��[?l����1aBxz�sV�$��Ȥ�]r01C��jwb�*���Y1Ix$\b�|������W-K<ذ9��f�%Ė l�z��� ź��0�v��B�}~u�r2n��"�a*� �Gl�8ӝ*��H�|j�=田A�9N�h¨��¤�M����’�>j�,3$�b��a1&jtXx��?� �Cj��q:D��1Ȉ�>(T��`}�\5z?��aS{ �s�MV ^��m��Tٸ����!F���.!���B��-��Wn�W@X**,�~��>��&�����`���DP �C6-r�~��M)`��z�x�i��T<��e u9$�’QL=v��V�+H�Pt��E��H ��g�����C����4"��<����lG���iB�`��W;�k�%J]���8�(�ò?]E�"d�����X�.�-R�S�/�����\/…Fʄd��I�)�sKZR��{�V.��V��DS���˗7I~�…�B�d��f�B�3_-P����n9�4$�� ��#�Mq�GD�63S�n*��ff1��A�Ѯ��pw��Q�PM��M޽�b�y�rv�L�������i�{��b�N3,�.׏�D�T�6L�Y��=ވ�i�pO��8w��������P1�tZvD�7�Q��1���;���2��Ĺ��H�A�P����n���|�������۴:��~�yU�y���lOD�y��GcG|�y�R���o&�����r�Z��2�ɸ�` -��6�����+wU�?:\�� endstream endobj 78 0 obj << /Length 2870 /Filter /FlateDecode >> stream x��ZKs�H��W�6TUD�$��yd’���x-�ٝǁ�h��Ԉ���_�@-��lk�r�9�H�����`p7�N~�����d��I$���v���A�$~(��|1�͛�2���H�ƛ��f=��+��4t�x(�U���סܾw�_���&k’�CX=�1r1?��DC�@��X�A�<��`������W�<ڕˁ�j��`v򏓀���B��0��(��B�%d�ʁ�$4ɾZ���!����xq}v�T!�/����?���’�2<���7�E��ط���b��z:��ƍ�#P��θ�#�@"H^dh%Zwy���|������P��0�~�8CQz�,�@�� T� V1BK t��D���˫|=���4а�krsZ�i�Y�Cp�70"�<��h�uuW��u��K�\�l[�s���

CVE: Latest News

CVE-2023-50976: Transactions API Authorization by oleiman · Pull Request #14969 · redpanda-data/redpanda
CVE-2023-6905
CVE-2023-6903
CVE-2023-6904
CVE-2023-3907