Xina1I

تسمح عملية القراءة خارج النطاق في Windows GDI لمهاجم غير مصرح له بالكشف عن معلومات حساسة محليًّا والتأثير على النظام. تحدث عملية القراءة خارج النطاق عندما يقرأ برنامج ما بيانات تتجاوز نهاية المخزن المؤقت المقصود أو تقع قبله.

تسمح عملية القراءة خارج النطاق في Windows GDI لمهاجم غير مصرح له بالكشف عن معلومات حساسة محليًّا والتأثير على النظام. تحدث عملية القراءة خارج النطاق عندما يقرأ برنامج ما بيانات تتجاوز نهاية المخزن المؤقت المقصود، مما قد يؤدي إلى الوصول إلى ذاكرة لا ينبغي له الوصول إليها.

يوجد عيب في Windows GDI+ قد يسمح لمهاجم غير مصرح له بالتسبب في حالة رفض الخدمة عبر الشبكة. تتيح هذه المشكلة للمهاجمين التأثير على النظام.

The affected application contains an out of bounds write past the end of an allocated structure while parsing specially crafted X T files. This could allow an attacker to execute code in the context of the current process. The vulnerability is related to a buffer overflow in memory, which can be exploited by an attacker using specially crafted files.

The issue is related to an Out-of-Bounds Write, which may allow an attacker to execute arbitrary code. This vulnerability is associated with the possibility of writing beyond the buffer boundaries in memory, potentially enabling an attacker to execute arbitrary code.

The issue is related to an Out-of-Bounds Write, which may allow an attacker to execute arbitrary code. This is due to a buffer overflow vulnerability in the CX-P.exe executable file, allowing an attacker to potentially execute arbitrary code.

The issue is related to an Out-of-Bounds Write, which may allow an attacker to execute arbitrary code. This is due to a buffer overflow vulnerability in the CX-P.exe executable file of the OMRON CX-Programmer software, allowing an attacker to potentially execute arbitrary code.

An issue was discovered in the parsing of FBX files, which can force an out-of-bounds read when an affected version of MicroStation or MicroStation-based application is used to open a crafted FBX file. This could enable an attacker to read information in the context of the current process.

An issue was discovered in the parsing of OBJ files, which can force an out-of-bounds read when an affected version of MicroStation or MicroStation-based application is used to open a crafted OBJ file. This could enable an attacker to read information in the context of the current process.

An issue was discovered in the parsing of 3DS files, which can force an out-of-bounds read when using an affected version of MicroStation or MicroStation-based application to open a 3DS file containing crafted data. This could enable an attacker to read information in the context of the current process.

An issue was discovered in the parsing of JP2 files, which can force an out-of-bounds read when opening a JP2 file containing crafted data using an affected version of MicroStation or a MicroStation-based application. This could enable an attacker to read information in the context of the current process.

An issue was discovered in the affected software. Using an affected version to open an IFC file containing crafted data can force an out-of-bounds read. Exploitation of this issue within the parsing of IFC files could enable an attacker to read information in the context of the current process.

An issue was discovered in the parsing of J2K files, which can force an out-of-bounds read when using an affected version of MicroStation or MicroStation-based application to open a J2K file containing crafted data. This could enable an attacker to read information in the context of the current process.

An issue was discovered that allows an out-of-bounds read when opening a DGN file containing crafted data with an affected version of MicroStation or a MicroStation-based application. This could enable an attacker to read information in the context of the current process during the parsing of DGN files.

The issue is related to an out-of-bounds write in memory, which can be exploited to execute arbitrary code. This occurs while processing a specific project file.

The issue is related to memory corruption that occurs when processing a specific project file, potentially allowing an attacker to execute arbitrary code. This is due to a buffer overflow in memory when handling NCI files. The estimated number of potentially affected devices worldwide is not specified. There is no information provided about real-world incidents where this issue was exploited.

The issue is related to multiple stack-based buffer overflow conditions that occur while parsing a specific project file. This may allow an attacker to locally execute arbitrary code. The vulnerability is associated with the Omron CX-One software package, specifically the CX-Position component.

The issue is related to a use after free memory condition that occurs while processing a specific project file. This can potentially allow an attacker to execute arbitrary code using a specially crafted file.

The issue allows an attacker to craft a project file that enables arbitrary code execution due to an out-of-bounds read while processing project files.

The issue is related to a stack-based buffer overflow that occurs while processing project files. This may allow an attacker to execute arbitrary code. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited.