CVE Database

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, ST_Area reads beyond the allocated buffer when processing invalid WKB for a MultiPolygon because the multi-polygon parser advances past a nested geometry header without first verifying enough input remains. A low-privileged remote attacker can supply malformed spatial data to disclose memory useful for bypassing ASLR as part of a multi-vulnerability chain. This issue is fixed in versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.

Buffer over-read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.

Buffer over-read in DNS Server allows an authorized attacker to disclose information over a network.

Buffer over-read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.

Buffer over-read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally.

Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

Buffer over-read in Windows USB Driver allows an authorized attacker to disclose information locally.

Buffer over-read in Windows StateRepository API allows an authorized attacker to disclose information locally.

Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally.

Buffer over-read in Windows CD-ROM Driver allows an unauthorized attacker to elevate privileges over a network.

Buffer over-read in Windows Common Log File System Driver allows an authorized attacker to disclose information locally.

Buffer over-read in Windows RNDIS allows an unauthorized attacker to disclose information with a physical attack.

Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally.

Buffer over-read in Windows IKE Extension allows an authorized attacker to deny service over a network.

Buffer over-read in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information locally.

Buffer over-read in Desktop Window Manager allows an authorized attacker to disclose information locally.

Buffer over-read in Windows CD-ROM Driver allows an authorized attacker to disclose information locally.

Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally.