Aleksandar Nikolic

اسم البرنامج المعرض للخطر والإصدارات المتأثرة: ippusbxd الإصدار 1.34 الوصف: توجد ثغرة أمنية تتعلق بتجاوز سعة المخزن المؤقت (buffer overflow) في برنامج ippusbxd. يمكن لطابعة مُهيأة بشكل خاص تدعم بروتوكول IPP عبر USB أن تتسبب في تجاوز سعة المخزن المؤقت، مما قد يؤدي إلى تنفيذ تعليمات برمجية عشوائية ضمن خدمة ذات امتيازات. يتطلب استغلال هذه الثغرة وجود جهاز ضار متصل بالنظام المعرض للخطر عبر منفذ USB. التوصيات: في الوقت الحالي، لا توجد معلومات عن إصدار أحدث يحتوي على إصلاح لهذه الثغرة الأمنية.

A use-after-free issue exists in the way Foxit Reader handles a signature field, allowing a specially crafted Javascript code inside a malicious PDF document to trigger reuse of a previously freed object. This can lead to memory corruption and result in arbitrary code execution. An attacker needs to trick the user into opening the malicious file to trigger this issue. Exploitation is also possible if a user visits a specially crafted, malicious site if the browser plugin extension is enabled.

A type confusion vulnerability exists in the Javascript `checkThisBox` method. Specially crafted Javascript code inside a malicious PDF document can cause memory corruption and lead to remote code execution. The user would need to open a malicious file to trigger the issue. The vulnerability can be exploited by a remote attacker using a specially created PDF file.

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader. By prematurely deleting objects associated with pages, a specially crafted PDF document can trigger the reuse of previously freed memory, which can lead to arbitrary code execution. An attacker needs to trick the user into opening the malicious file to trigger this vulnerability. Exploitation is also possible if a user visits a specially crafted, malicious site if the browser plugin extension is enabled.

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader. By prematurely deleting objects associated with pages, a specially crafted PDF document can trigger the reuse of previously freed memory, which can lead to arbitrary code execution. An attacker needs to trick the user into opening the malicious file to trigger this vulnerability. Exploitation is also possible if a user visits a specially crafted, malicious site if the browser plugin extension is enabled.

A use-after-free vulnerability exists in the way Foxit Reader handles destroying annotations. Specially crafted Javascript code inside a malicious PDF document can trigger reuse of a previously freed object, which can lead to memory corruption and result in arbitrary code execution. An attacker needs to trick the user into opening the malicious file to trigger this vulnerability. Exploitation is also possible if a user visits a specially crafted, malicious site if the browser plugin extension is enabled.

A use-after-free issue exists in the JavaScript engine, allowing an attacker to execute arbitrary code by manipulating form fields of a specific type in a specially crafted PDF document. This can lead to memory corruption. Exploitation is possible if a user opens a malicious file or visits a specially crafted site with the browser plugin extension enabled.

The issue is related to a buffer overflow in memory, which can be exploited to execute arbitrary code.

The issue is related to a heap overflow vulnerability in the implementation of the DCERPC protocol in VMware vCenter Server. This vulnerability can be exploited by a malicious actor with network access to execute arbitrary code on the underlying operating system that hosts vCenter Server.

The issue is related to an out-of-bounds read vulnerability in the implementation of the DCERPC protocol in VMware vCenter Server. A malicious actor with network access to vCenter Server may trigger an out-of-bounds read by sending a specially crafted packet, leading to a denial-of-service of certain services, including vcad, vmdird, and vmafdd.

A denial-of-service issue was addressed with improved memory handling. A user in a privileged network position may be able to cause a denial-of-service.

The issue was addressed with improved memory handling. A remote user may be able to cause unexpected system termination or corrupt kernel memory.

The issue was addressed with improved bounds checks. A remote user may be able to cause unexpected app termination or arbitrary code execution.

A memory initialization issue was addressed, which may allow a remote attacker to cause unexpected app termination or arbitrary code execution.

The issue was addressed with improved memory handling. A remote user may be able to cause unexpected system termination or corrupt kernel memory.

A buffer overflow issue was addressed with improved memory handling. Mounting a maliciously crafted Samba network share may lead to arbitrary code execution.

A buffer overflow issue was addressed with improved memory handling. Mounting a maliciously crafted Samba network share may lead to arbitrary code execution.

A buffer overflow vulnerability exists in the QML QtScript Reflect API of Qt Project Qt. A specially-crafted JavaScript code can trigger an out-of-bounds memory access, which can lead to arbitrary code execution. The target application would need to access a malicious web page to trigger this vulnerability.

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader. A specially-crafted PDF document can trigger the reuse of previously freed memory via misusing Optional Content Group API, which can lead to arbitrary code execution. An attacker needs to trick the user into opening the malicious file to trigger this vulnerability. Exploitation is also possible if a user visits a specially-crafted, malicious site if the browser plugin extension is enabled.

A use-after-free issue exists in the JavaScript engine of Foxit Software's PDF Reader. This occurs when annotation objects are prematurely destroyed, allowing a specially-crafted PDF document to trigger the reuse of previously freed memory. This can lead to arbitrary code execution. An attacker must trick the user into opening the malicious file to trigger this issue. Additionally, exploitation is possible if a user visits a specially-crafted, malicious site when the browser plugin extension is enabled.