Bahaa Naamneh

The issue is related to pointer dereference errors in the Microsoft .NET platform. Exploitation of this issue can allow a remote attacker to cause a denial of service.

A symbolic link manipulation issue allows an authenticated local user to potentially gain an escalation of privileges. This is achieved by adding an entry to the registry under the Trellix ENS registry folder with a symbolic link to files that the user wouldn't normally have permission to. After a scan, the Engine would follow the links and remove the files.

The issue arises from the improper handling of NULL fields in PKCS12 files, leading to a potential Denial of Service attack. Applications loading files in the PKCS12 format from untrusted sources might terminate abruptly due to a NULL pointer dereference. The affected OpenSSL APIs are: `PKCS12 parse()`, `PKCS12 unpack p7data()`, `PKCS12 unpack p7encdata()`, `PKCS12 unpack authsafes()`, and `PKCS12 newpass()`.

The issue is related to an inappropriate implementation in the Installer component of Google Chrome, which allowed a local attacker to bypass discretionary access control via a crafted command. This could potentially enable an attacker to circumvent existing security restrictions. The vulnerability is related to incorrectly implemented security checks for standard elements, and exploitation may allow a remote attacker to bypass security restrictions using a specially crafted HTML page.

A privilege escalation issue could allow a local attacker to unintentionally delete privileged Trend Micro registry keys, including its own protected registry keys, on affected installations.

A buffer overflow issue exists, allowing remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted mcw file.

The issue is related to multiple buffer overflows that can be triggered by remote attackers using crafted values in a profile file. This can lead to a denial of service and potentially allow the execution of arbitrary code. An example of such exploitation is through the use of a long `SysName` field.

Name of the Vulnerable Software and Affected Versions: Escapade Scripting Engine (ESP) (affected versions not specified) Description: A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary script via the `method` parameter. This can be demonstrated using the `PAGE` parameter. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: FTP Desktop client versions 3.5 and earlier Description: The issue is related to multiple heap-based buffer overflows that can be triggered by remote malicious servers. This can occur through a long FTP banner, a long response to a `USER` command, or a long response to a `PASS` command. This allows the malicious server to execute arbitrary code. Recommendations: For FTP Desktop client versions 3.5 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Escapade Scripting Engine (ESP) (affected versions not specified) Description: The issue allows remote attackers to obtain sensitive path information via a malformed request. This is achieved by exploiting the `PAGE` parameter, which leaks the information in an error message. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.