Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-19443 State: PUBLISHED Published: 2018-11-22T19:00:00 Last Updated: 2024-08-05T11:37:11.446Z Vendors: n/a Products: n/a Problem Types: n/a Description: The client in Tryton 5.x before 5.0.1 tries to make a connection to the bus in cleartext instead of encrypted under certain circumstances in bus.py and jsonrpc.py. This connection attempt fails, but it contains in the header the current session of the user. This session could then be stolen by a man-in-the-middle. Additional Analyst Notes: - CVE Program Container: References: - https://discuss.tryton.org/t/security-release-for-issue7792/830 - https://bugs.tryton.org/issue7792
CVE ID: CVE-2018-19444 State: PUBLISHED Published: 2019-06-17T19:46:46 Last Updated: 2024-08-05T11:37:11.414Z Vendors: n/a Products: n/a Problem Types: n/a Description: A use after free in the TextBox field Validate action in IReader_ContentProvider can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) Professional 5.4.0.1031. An attacker can leverage this to gain remote code execution. Relative to CVE-2018-19452, this has a different free location and requires different JavaScript code for exploitation. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2018-19445 State: PUBLISHED Published: 2019-06-17T19:42:35 Last Updated: 2024-08-05T11:37:11.165Z Vendors: n/a Products: n/a Problem Types: n/a Description: A command injection can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) Professional 5.4.0.1031 when the JavaScript API app.launchURL is used. An attacker can leverage this to gain remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2018-19446 State: PUBLISHED Published: 2019-06-17T19:39:07 Last Updated: 2024-08-05T11:37:11.317Z Vendors: n/a Products: n/a Problem Types: n/a Description: A File Write can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) Professional 5.4.0.1031 when the JavaScript API Doc.createDataObject is used. An attacker can leverage this to gain remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2018-19447 State: PUBLISHED Published: 2019-06-17T19:37:09 Last Updated: 2024-08-05T11:37:11.411Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stack-based buffer overflow can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) 5.4.0.1031 when parsing the URI string. An attacker can leverage this to gain remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2018-19448 State: PUBLISHED Published: 2019-06-17T19:33:25 Last Updated: 2024-08-05T11:37:11.396Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Foxit Reader SDK (ActiveX) Professional 5.4.0.1031, an uninitialized object in IReader_ContentProvider::GetDocEventHandler occurs when embedding the control into Office documents. By opening a specially crafted document, an attacker can trigger an out of bounds write condition, possibly leveraging this to gain remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2018-19449 State: PUBLISHED Published: 2019-06-17T19:30:36 Last Updated: 2024-08-05T11:37:11.160Z Vendors: n/a Products: n/a Problem Types: n/a Description: A File Write can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) Professional 5.4.0.1031 when the JavaScript API Doc.exportAsFDF is used. An attacker can leverage this to gain remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2018-19450 State: PUBLISHED Published: 2019-06-17T19:18:26 Last Updated: 2024-08-05T11:37:11.190Z Vendors: n/a Products: n/a Problem Types: n/a Description: A command injection can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) 5.4.0.1031 when parsing a launch action. An attacker can leverage this to gain remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2018-19451 State: PUBLISHED Published: 2019-06-07T16:51:51 Last Updated: 2024-08-05T11:37:11.460Z Vendors: n/a Products: n/a Problem Types: n/a Description: A command injection can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) Professional 5.4.0.1031 when using the Open File action on a Field. An attacker can leverage this to gain remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php - http://www.securityfocus.com/bid/108692
CVE ID: CVE-2018-19452 State: PUBLISHED Published: 2019-06-07T16:49:44 Last Updated: 2024-08-05T11:37:11.186Z Vendors: n/a Products: n/a Problem Types: n/a Description: A use after free in the TextBox field Mouse Enter action in IReader_ContentProvider can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) Professional 5.4.0.1031. An attacker can leverage this to gain remote code execution. Relative to CVE-2018-19444, this has a different free location and requires different JavaScript code for exploitation. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php - http://www.securityfocus.com/bid/108692
CVE ID: CVE-2018-19453 State: PUBLISHED Published: 2019-04-10T20:49:51 Last Updated: 2024-08-05T11:37:11.415Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kentico CMS before 11.0.45 allows unrestricted upload of a file with a dangerous type. Additional Analyst Notes: - CVE Program Container: References: - https://blog.hivint.com/advisory-upload-malicious-file-in-kentico-cms-cve-2018-19453-36debbf85216
CVE ID: CVE-2018-19456 State: PUBLISHED Published: 2019-05-07T18:23:49 Last Updated: 2024-08-05T11:37:11.202Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WP Backup+ (aka WPbackupplus) plugin through 2018-11-22 for WordPress allows remote attackers to obtain sensitive information from server folders and files, as demonstrated by download.sql. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2019-01/msg00006.html - https://www.easyhack.in/2018/11/21/wordpress-plugin-database-backup-information-disclosure-vulnerability/
CVE ID: CVE-2018-19457 State: PUBLISHED Published: 2018-11-22T20:00:00Z Last Updated: 2024-09-17T02:31:35.236Z Vendors: n/a Products: n/a Problem Types: n/a Description: Logicspice FAQ Script 2.9.7 allows uploading arbitrary files, which leads to remote command execution via admin/faqs/faqimages with a .php file. Additional Analyst Notes: - CVE Program Container: References: - https://pentest.com.tr/exploits/Logicspice-FAQ-Script-2-9-7-Remote-Code-Execution.html - https://www.exploit-db.com/exploits/45326/
CVE ID: CVE-2018-19458 State: PUBLISHED Published: 2018-11-22T20:00:00Z Last Updated: 2024-09-16T18:03:53.438Z Vendors: n/a Products: n/a Problem Types: n/a Description: In PHP Proxy 3.0.3, any user can read files from the server without authentication due to an index.php?q=file:/// LFI URI, a different vulnerability than CVE-2018-19246. Additional Analyst Notes: - CVE Program Container: References: - https://pentest.com.tr/exploits/PHP-Proxy-3-0-3-Local-File-Inclusion.html - https://www.exploit-db.com/exploits/45780/
CVE ID: CVE-2018-19459 State: PUBLISHED Published: 2018-11-22T20:00:00Z Last Updated: 2024-09-16T23:50:52.526Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adult Filter 1.0 has a Buffer Overflow via a crafted Black Domain List file. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/45687/ - https://pentest.com.tr/exploits/Adult-Filter-1-0-Buffer-Overflow-SEH.html
CVE ID: CVE-2018-19461 State: PUBLISHED Published: 2019-06-07T16:46:45 Last Updated: 2024-08-05T11:37:11.177Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin\db\DoSql.php in EmpireCMS through 7.5 allows XSS via crafted SQL syntax to admin/admin.php. Additional Analyst Notes: - CVE Program Container: References: - http://i.3001.net/uploads/Up_imgs/20181117-95a316d46f9a46dda7c48e541777d1fc.png%21small - http://i.3001.net/uploads/Up_imgs/20181117-ce3d7d20372096011393bfda0d6f9d07.png%21small - https://github.com/novysodope/empireCMS7.5
CVE ID: CVE-2018-19462 State: PUBLISHED Published: 2019-06-07T16:44:09 Last Updated: 2024-08-05T11:37:11.209Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin\db\DoSql.php in EmpireCMS through 7.5 allows remote attackers to execute arbitrary PHP code via SQL injection that uses a .php filename in a SELECT INTO OUTFILE statement to admin/admin.php. Additional Analyst Notes: - CVE Program Container: References: - http://i.3001.net/uploads/Up_imgs/20181118-ca3d385ac6cf2d231da185b4bb844bad.png%21small - http://i.3001.net/uploads/Up_imgs/20181118-2c996e3b89d19c9c9e6761ef67fd6d5c.png%21small - http://i.3001.net/uploads/Up_imgs/20181118-87192261fa34cad723bc7d8b8ca2cd17.png - https:/
9e6761ef67fd6d5c.png%21small - http://i.3001.net/uploads/Up_imgs/20181118-87192261fa34cad723bc7d8b8ca2cd17.png - https://github.com/novysodope/empireCMS7.5
CVE ID: CVE-2018-19463 State: PUBLISHED Published: 2018-11-22T21:00:00 Last Updated: 2024-08-05T11:37:11.390Z Vendors: n/a Products: n/a Problem Types: n/a Description: zb_system/function/lib/upload.php in Z-BlogPHP through 1.5.1 allows remote attackers to execute arbitrary PHP code by using the image/jpeg content type in an upload to the zb_system/admin/index.php?act=UploadMng URI. NOTE: The vendor's position is "We have no dynamic including. No one can run PHP by uploading an image in current version." It also requires authentication Additional Analyst Notes: - CVE Program Container: References: - https://github.com/zblogcn/zblogphp/issues/205 - https://github.com/novysodope/Z-BlogPHP1.5Ze
m Container: References: - https://github.com/zblogcn/zblogphp/issues/205 - https://github.com/novysodope/Z-BlogPHP1.5Zero/blob/master/Getshell
CVE ID: CVE-2018-19464 State: PUBLISHED Published: 2018-11-22T21:00:00 Last Updated: 2024-08-05T11:37:11.133Z Vendors: n/a Products: n/a Problem Types: n/a Description: Discuz! X3.4 allows XSS via admin.php because admincp/admincp_setting.php and template\default\common\footer.htm mishandles statcode field from third-party stats code. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/novysodope/Discuz-X3.4/blob/master/XSS
CVE ID: CVE-2018-19465 State: PUBLISHED Published: 2019-06-07T16:40:51 Last Updated: 2024-08-05T11:37:11.357Z Vendors: n/a Products: n/a Problem Types: n/a Description: Maccms through 8.0 allows XSS via the site_keywords field to index.php?m=system-config because of tpl/module/system.php and tpl/html/system_config.html, related to template/paody/html/vod_index.html. Additional Analyst Notes: - CVE Program Container: References: - https://www.maccms.com/down.html - https://github.com/holychang/maccms8/blob/master/README.md
CVE ID: CVE-2018-19466 State: PUBLISHED Published: 2019-03-27T16:57:42 Last Updated: 2024-08-05T11:37:11.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability was found in Portainer before 1.20.0. Portainer stores LDAP credentials, corresponding to a master password, in cleartext and allows their retrieval via API calls. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/portainer/portainer/pull/2488 - https://github.com/portainer/portainer/releases - https://github.com/MauroEldritch/lempo
CVE ID: CVE-2018-19468 State: PUBLISHED Published: 2018-11-23T05:00:00 Last Updated: 2024-08-05T11:37:11.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: HuCart 5.7.4 has SQL injection in get_ip() in system/class/helper_class.php via the X-Forwarded-For HTTP header to the user/index.php?load=login&act=act_login URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.iwantacve.cn/index.php/archives/83/
CVE ID: CVE-2018-19469 State: PUBLISHED Published: 2018-11-23T05:00:00 Last Updated: 2024-08-05T11:37:11.370Z Vendors: n/a Products: n/a Problem Types: n/a Description: ArticleCMS through 2017-02-19 has XSS via the /update_personal_infomation realname or email parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/woider/ArticleCMS/issues/5
CVE ID: CVE-2018-19475 State: PUBLISHED Published: 2018-11-23T05:00:00 Last Updated: 2024-08-05T11:37:11.442Z Vendors: n/a Products: n/a Problem Types: n/a Description: psi/zdevice2.c in Artifex Ghostscript before 9.26 allows remote attackers to bypass intended access restrictions because available stack space is not checked when the device remains the same. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2018/dsa-4346 - https://access.redhat.com/errata/RHSA-2019:0229 - https://usn.ubuntu.com/3831-1/ - http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=3005fcb9bb160af199e761e03bc70a9f249a987e - https://bugs.ghostscript.com/show_bug.cgi?
com/?p=ghostpdl.git%3Ba=commit%3Bh=3005fcb9bb160af199e761e03bc70a9f249a987e - https://bugs.ghostscript.com/show_bug.cgi?id=700153 - https://semmle.com/news/semmle-discovers-severe-vulnerability-ghostscript-postscript-pdf - http://www.securityfocus.com/bid/106154 - https://lists.debian.org/debian-lts-announce/2018/11/msg00036.html - https://www.ghostscript.com/doc/9.26/History9.htm#Version9.26 - http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=aeea342904978c9fe17d85f4906a0f6fcce2d315 - https://access.redhat.com/errata/RHBA-2019:0327
CVE ID: CVE-2018-19476 State: PUBLISHED Published: 2018-11-23T05:00:00 Last Updated: 2024-08-05T11:37:11.425Z Vendors: n/a Products: n/a Problem Types: n/a Description: psi/zicc.c in Artifex Ghostscript before 9.26 allows remote attackers to bypass intended access restrictions because of a setcolorspace type confusion. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2018/dsa-4346 - https://access.redhat.com/errata/RHSA-2019:0229 - https://bugs.ghostscript.com/show_bug.cgi?id=700169 - https://usn.ubuntu.com/3831-1/ - http://git.ghostscript.com/?p=ghostpdl.git%3Bh=434753adbe8be5534bfb9b7d91746023e8073d16 - https://semmle.com/news/semmle-discover
t.ghostscript.com/?p=ghostpdl.git%3Bh=434753adbe8be5534bfb9b7d91746023e8073d16 - https://semmle.com/news/semmle-discovers-severe-vulnerability-ghostscript-postscript-pdf - http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=67d760ab775dae4efe803b5944b0439aa3c0b04a - http://www.securityfocus.com/bid/106154 - https://lists.debian.org/debian-lts-announce/2018/11/msg00036.html - https://www.ghostscript.com/doc/9.26/History9.htm#Version9.26 - https://access.redhat.com/errata/RHBA-2019:0327
CVE ID: CVE-2018-19477 State: PUBLISHED Published: 2018-11-23T05:00:00 Last Updated: 2024-08-05T11:37:11.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: psi/zfjbig2.c in Artifex Ghostscript before 9.26 allows remote attackers to bypass intended access restrictions because of a JBIG2Decode type confusion. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2018/dsa-4346 - https://access.redhat.com/errata/RHSA-2019:0229 - https://usn.ubuntu.com/3831-1/ - https://bugs.ghostscript.com/show_bug.cgi?id=700168 - https://semmle.com/news/semmle-discovers-severe-vulnerability-ghostscript-postscript-pdf - http://www.securityfocus.com/bid/1061
semmle.com/news/semmle-discovers-severe-vulnerability-ghostscript-postscript-pdf - http://www.securityfocus.com/bid/106154 - https://lists.debian.org/debian-lts-announce/2018/11/msg00036.html - https://www.ghostscript.com/doc/9.26/History9.htm#Version9.26 - http://git.ghostscript.com/?p=ghostpdl.git%3Bh=606a22e77e7f081781e99e44644cd0119f559e03 - http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=ef252e7dc214bcbd9a2539216aab9202848602bb - https://access.redhat.com/errata/RHBA-2019:0327
CVE ID: CVE-2018-19478 State: PUBLISHED Published: 2019-01-02T18:00:00 Last Updated: 2024-08-05T11:37:11.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Artifex Ghostscript before 9.26, a carefully crafted PDF file can trigger an extremely long running computation when parsing the file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106445 - https://www.ghostscript.com/doc/9.26/History9.htm - https://bugs.ghostscript.com/show_bug.cgi?id=699856 - http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=0a7e5a1c309fa0911b892fa40996a7d55d90bace - https://bugzilla.redhat.com/show_bug.cgi?id=1655607 - https://lists.debian.
h=0a7e5a1c309fa0911b892fa40996a7d55d90bace - https://bugzilla.redhat.com/show_bug.cgi?id=1655607 - https://lists.debian.org/debian-lts-announce/2018/12/msg00019.html
CVE ID: CVE-2018-19486 State: PUBLISHED Published: 2018-11-23T08:00:00 Last Updated: 2024-08-05T11:37:11.452Z Vendors: n/a Products: n/a Problem Types: n/a Description: Git before 2.19.2 on Linux and UNIX executes commands from the current working directory (as if '.' were at the end of $PATH) in certain cases involving the run_command() API and run-command.c, because there was a dangerous change from execvp to execv during 2017. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/scm/git/git.git/commit/?id=321fd82389742398d2924640ce3a61791fd27d60 - http://www.securityfocus.com/bid/106020 - https://git.kernel.org/pub/scm/git/git.git/tree/Documentation/
a61791fd27d60 - http://www.securityfocus.com/bid/106020 - https://git.kernel.org/pub/scm/git/git.git/tree/Documentation/RelNotes/2.19.2.txt - http://www.securitytracker.com/id/1042166 - https://access.redhat.com/errata/RHSA-2018:3800 - https://usn.ubuntu.com/3829-1/ - https://security.gentoo.org/glsa/201904-13
CVE ID: CVE-2018-19487 State: PUBLISHED Published: 2019-03-17T21:36:47 Last Updated: 2024-08-05T11:37:11.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WP-jobhunt plugin before version 2.4 for WordPress does not control AJAX requests sent to the cs_employer_ajax_profile() function through the admin-ajax.php file, which allows remote unauthenticated attackers to enumerate information about users. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/9206 - https://github.com/Antho59/wp-jobhunt-exploit
CVE ID: CVE-2018-19488 State: PUBLISHED Published: 2019-03-17T21:37:51 Last Updated: 2024-08-05T11:37:11.413Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WP-jobhunt plugin before version 2.4 for WordPress does not control AJAX requests sent to the cs_reset_pass() function through the admin-ajax.php file, which allows remote unauthenticated attackers to reset the password of a user's account. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/9206 - https://github.com/Antho59/wp-jobhunt-exploit
CVE ID: CVE-2018-19489 State: PUBLISHED Published: 2018-12-13T19:00:00 Last Updated: 2024-08-05T11:37:11.447Z Vendors: n/a Products: n/a Problem Types: n/a Description: v9fs_wstat in hw/9pfs/9p.c in QEMU allows guest OS users to cause a denial of service (crash) because of a race condition during file renaming. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2018/11/26/1 - https://lists.debian.org/debian-lts-announce/2019/01/msg00023.html - https://lists.gnu.org/archive/html/qemu-devel/2018-11/msg04489.html - https://security-tracker.debian.org/tracker/CVE-2018-19489 - https://exchange.xforce.ibmcloud.com/vulnerabilities/153326 - ht
://security-tracker.debian.org/tracker/CVE-2018-19489 - https://exchange.xforce.ibmcloud.com/vulnerabilities/153326 - https://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=1d20398694a3b67a388d955b7a945ba4aa90a8a8 - http://www.securityfocus.com/bid/106007 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CGCFIFSIWUREEQQOZDZFBYKWZHXCWBZN/ - https://usn.ubuntu.com/3923-1/ - http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00042.html - https://www.debian.org/security/2019/dsa-4454 - https://seclists.org/bugtraq/2019/May/76
CVE ID: CVE-2018-19490 State: PUBLISHED Published: 2018-11-23T17:00:00 Last Updated: 2024-08-05T11:37:11.482Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in datafile.c in Gnuplot 5.2.5. This issue allows an attacker to conduct a heap-based buffer overflow with an arbitrary amount of data in df_generate_ascii_array_entry. To exploit this vulnerability, an attacker must pass an overlong string as the right bound of the range argument that is passed to the plot function. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/gnuplot/bugs/2093/ - https://sourceforge.net/p/gnuplot/gnuplot-main/ci/d5020716834582b20a5e12cdd4
ps://sourceforge.net/p/gnuplot/bugs/2093/ - https://sourceforge.net/p/gnuplot/gnuplot-main/ci/d5020716834582b20a5e12cdd49f39ee4f9dd949/ - https://lists.debian.org/debian-lts-announce/2018/11/msg00035.html - https://lists.debian.org/debian-lts-announce/2018/11/msg00031.html - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00066.html - https://usn.ubuntu.com/4541-1/
CVE ID: CVE-2018-19491 State: PUBLISHED Published: 2018-11-23T17:00:00 Last Updated: 2024-08-05T11:37:11.479Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in post.trm in Gnuplot 5.2.5. This issue allows an attacker to conduct a buffer overflow with an arbitrary amount of data in the PS_options function. This flaw is caused by a missing size check of an argument passed to the "set font" function. This issue occurs when the Gnuplot postscript terminal is used as a backend. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/gnuplot/gnuplot-main/ci/d5020716834582b20a5e12cdd49f39ee4f9dd949/ - https://lists.debian.org/de
ttps://sourceforge.net/p/gnuplot/gnuplot-main/ci/d5020716834582b20a5e12cdd49f39ee4f9dd949/ - https://lists.debian.org/debian-lts-announce/2018/11/msg00035.html - https://lists.debian.org/debian-lts-announce/2018/11/msg00031.html - https://sourceforge.net/p/gnuplot/bugs/2094/ - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00066.html - https://usn.ubuntu.com/4541-1/
CVE ID: CVE-2018-19492 State: PUBLISHED Published: 2018-11-23T17:00:00 Last Updated: 2024-08-05T11:37:11.491Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in cairo.trm in Gnuplot 5.2.5. This issue allows an attacker to conduct a buffer overflow with an arbitrary amount of data in the cairotrm_options function. This flaw is caused by a missing size check of an argument passed to the "set font" function. This issue occurs when the Gnuplot pngcairo terminal is used as a backend. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/gnuplot/gnuplot-main/ci/d5020716834582b20a5e12cdd49f39ee4f9dd949/ - https://lists.debian.o
: - https://sourceforge.net/p/gnuplot/gnuplot-main/ci/d5020716834582b20a5e12cdd49f39ee4f9dd949/ - https://lists.debian.org/debian-lts-announce/2018/11/msg00035.html - https://sourceforge.net/p/gnuplot/bugs/2089/ - https://lists.debian.org/debian-lts-announce/2018/11/msg00031.html - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00066.html - https://usn.ubuntu.com/4541-1/