Ashraf Alharbi

يتم تشغيل ملف PSEvents.exe في العديد من منتجات Panda Security كل ساعة بامتيازات SYSTEM ويقوم بتحميل ملفات DLL من دليل يمكن للمستخدم الكتابة فيه دون إجراء التحقق اللازم. يمكن للمهاجم الذي يتمتع بامتيازات منخفضة ويتمكن من كتابة ملفات DLL في الدليل الخاضع للمراقبة أن يحقق تنفيذًا تعسفيًا للكود بامتيازات SYSTEM.

Name of the Vulnerable Software and Affected Versions: LAquis SCADA versions 4.1.0.3870 and prior Description: The issue is related to out-of-bounds read vulnerabilities in the LQS file parsing functionality of LAquis SCADA, which may allow remote code execution. This is due to a buffer overflow in memory. The vulnerability can be exploited by a remote attacker to execute arbitrary code. Recommendations: For LAquis SCADA versions 4.1.0.3870 and prior, consider disabling the LQS file parsing functionality until a patch is available to prevent potential remote code execution. Restrict access to the vulnerable component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

This issue allows remote attackers to disclose sensitive information on vulnerable installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The flaw exists within the parsing of `LZWDecode` filters due to the lack of proper validation of user-supplied data. This can result in a read past the end of an allocated object, potentially allowing an attacker to execute code in the context of the current process when combined with other vulnerabilities.

This issue allows remote attackers to disclose sensitive information on vulnerable installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The flaw exists within the parsing of Image filters due to the lack of proper validation of user-supplied data, resulting in a read past the end of an allocated object. An attacker can leverage this, in conjunction with other issues, to execute code in the context of the current process.