Alex Wheeler

A DNS client stack-based buffer overflow in the `ipdnsc decode name()` function affects the software. This issue only affects products that are no longer supported by the maintainer.

The issue is caused by a buffer overflow in the IKEv1 and IKEv2 implementations, which can be exploited by sending specially crafted UDP packets. This may allow a remote attacker to execute arbitrary code or cause a denial of service, resulting in a device reload.

A stack-based buffer overflow exists in the `CComVariant::ReadFromStream()` function within the Active Template Library (ATL), specifically affecting the MPEG2TuneRequest ActiveX control located in `msvidctl.dll` in DirectShow. A remote attacker can execute arbitrary code with the privileges of the logged-on user by inducing a user to view a specially crafted web page. This issue was exploited in the wild in July 2009.

Name of the Vulnerable Software and Affected Versions: Microsoft Malware Protection Engine (mpengine.dll) (affected versions not specified) Description: The issue is related to an integer overflow in the Microsoft Malware Protection Engine, which can be exploited by remote attackers to execute arbitrary code. This can be achieved through a crafted PDF file, requiring user assistance. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

The issue is related to a heap-based buffer overflow in the Dec2Rar.dll component. This can be exploited by remote attackers through RAR archives with sub-block headers containing incorrect values in the length field, potentially allowing the execution of arbitrary code.

A heap-based buffer overflow issue exists in the pskcmp.dll component of the Panda Software Antivirus library. This issue can be exploited by remote attackers to execute arbitrary code on a vulnerable system by providing a crafted ZOO archive.

The issue is related to a heap-based buffer overflow that can be triggered by a specially crafted CAB file with large records after the header. This allows remote attackers to execute arbitrary code, resulting in a loss of integrity. The `cab.ppl` engine is specifically mentioned as failing to perform proper bounds checking, leading to the buffer overflow.

A heap-based buffer overflow issue exists in the Sophos Antivirus Library, which is used by various Sophos products. This issue can be exploited by remote attackers to execute arbitrary code. The exploitation occurs through a Visio file that contains a crafted sub record length.

The issue is related to multiple integer overflows in file format processors for TNEF, CHM, or FSG files in libclamav. This allows remote attackers to gain privileges via a crafted e-mail message.

The issue concerns multiple stack-based and heap-based buffer overflows in the Remote Management authentication component, specifically in zenrem32.exe. This allows remote attackers to execute arbitrary code through various vectors, including type 1 and type 2 authentication requests.

The issue is related to an integer overflow in the Computer Associates Vet Antivirus library. This allows remote attackers to gain privileges via a compressed VBA directory with a project name length of -1, leading to a heap-based buffer overflow.

A buffer overflow issue allows remote attackers to execute arbitrary code via a malformed LHA file with a type 2 header file name field.

A heap-based buffer overflow issue exists in the DEC2EXE module, allowing remote attackers to execute arbitrary code. This can be achieved by using a UPX compressed file that contains a negative virtual offset to a crafted PE header.