A memory corruption vulnerability exists in Samsung SmartViewer, specifically, the DVRSetupSave method in the STWAxConfig ActiveX control.

A remote code execution vulnerability exists in Samsung SmartViewer.

A policy bypass vulnerability has been reported in Suricata. The vulnerability is due to improper handling of data injected during improper TCP handshakes.

The vulnerability is caused due to a boundary error in the FTP server when processing DELE commands. This can be exploited to cause a stack-based buffer overflow by issuing a specially crafted DELE command.

Threat Encyclopedia

1139408

WEB-ACTIVEX Samsung SmartViewer STWAxConfig Memory Corruption -4 (CVE-2015-8039)

High

2022/11/11

1132268

WEB-ACTIVEX Samsung SmartViewer CNC_Ctrl ActiveX Control Out of Bounds Indexing -1 (CVE-2015-8040)

High

2022/11/11

1139747

WEB-CLIENT Suricata TCP Handshake Content Detection Bypass -2 (CVE-2018-6794)

Medium

2022/11/11

1139309

FTP FTP DELE Command Buffer Overflow

Medium

2022/11/11