Advisories

A chronological list of vulnerabilities published by STAR Labs researchers, with technical details, affected versions, and disclosure timelines.

Advisory Oct 20, 2019

(CVE-2019-3005) Oracle VirtualBox NULL Pointer Dereference in hdaR3WalClkSet

CVE: CVE-2019-3005 Tested Versions: Oracle VirtualBox 6.0.4 revision r128413 Product URL(s): https://virtualbox.org VirtualBox is a x86 and AMD64/Intel64 …

ByPhạm Hồng Phi

Advisory Oct 20, 2019

(CVE-2019-3026) Oracle VirtualBox VBoxSVGA Invalid Check in vmsvgaFIFOLoop

CVE: CVE-2019-3026 Tested Versions: Oracle VirtualBox 6.0.4 revision r128413 Product URL(s): https://virtualbox.org VirtualBox is a x86 and AMD64/Intel64 …

ByPhạm Hồng Phi

Advisory Oct 20, 2019

(CVE-2019-3031) Oracle VirtualBox VMSVGA Out-of-Bounds Read in vmsvga3dSetLightEnabled

CVE: CVE-2019-3031 Tested Versions: Oracle VirtualBox 6.0.4 revision r128413 Product URL(s): https://virtualbox.org VirtualBox is a x86 and AMD64/Intel64 …

ByPhạm Hồng Phi

Advisory Oct 15, 2019

(CVE-2019-8220) Adobe Reader CLstBxField Use-after-Free

CVE: CVE-2019-8220 Tested Versions: Adobe Acrobat and Reader DC versions 2019.012.20040 and earlier Product URL(s): https://acrobat.adobe.com/us/en/acrobat.html …

ByTa Dinh Sung

Advisory Oct 15, 2019

(CVE-2019-8221) Adobe Reader Type Confusion in getColorConvertAction

CVE: CVE-2019-8221 Tested Versions: Acrobat DC version 2019.008.20064 (Windows 10 64-bit) Product URL(s): https://acrobat.adobe.com/us/en/acrobat.html …

ByTa Dinh Sung

Advisory Sep 10, 2019

(CVE-2019-1250) Microsoft Jet database Record::IsNull Memory Corruption

CVE: CVE-2019-1250 Tested Versions: Windows 10 version 1903 and below Windows 7 Product URL(s): https://www.microsoft.com The Microsoft Jet Database Engine …

ByShi Ji & Meysam Firouzi

Advisory Aug 13, 2019

(CVE-2019-8011) Acrobat Reader DC 2d.x3d!_LoadTIFF() Out-of-Bounds Read

CVE: CVE-2019-8011 Tested Versions: Adobe Reader DC 2019.010.20099 Product URL(s): https://acrobat.adobe.com/us/en/acrobat.html https://get.adobe.com/reader/ …

ByWei Lei

Advisory Aug 13, 2019

(CVE-2019-8018) Acrobat Reader DC 2d.x3d!_LoadRGB() OOB Read in TRGB::expandrow()

CVE: CVE-2019-8018 Tested Versions: Adobe Reader DC 2019.010.20099 Product URL(s): https://acrobat.adobe.com/us/en/acrobat.html https://get.adobe.com/reader/ …

ByWei Lei

Advisory Jun 20, 2019

(CVE-2019-8038) Adobe Acrobat/Reader CTextWidget Use-after-Free

CVE: CVE-2019-8038 Tested Versions: Adobe Acrobat and Reader versions 2019.012.20035 and earlier Product URL(s): https://acrobat.adobe.com/us/en/acrobat.html …

ByPhan Thanh Duy

Advisory Jun 20, 2019

(CVE-2019-8039) Adobe Acrobat/Reader CTextField Use-after-Free

CVE: CVE-2019-8039 Tested Versions: Adobe Acrobat and Reader versions 2019.012.20035 and earlier Product URL(s): https://acrobat.adobe.com/us/en/acrobat.html …

ByPhan Thanh Duy