Clint Ruoho

An issue was discovered in Asterisk. When using STIR/SHAKEN, it's possible to send arbitrary requests, such as GET, to interfaces like localhost by using the `Identity` header.

The issue concerns the Apple mod hfs apple module for the Apache HTTP Server, which does not properly handle ignorable Unicode characters. This allows remote attackers to bypass intended directory authentication requirements by crafting a pathname in a URI.

A buffer overflow issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted itpc: URL.

A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML via a crafted help: URL. This is related to URL parameters in HTML content.

The issue allows user-assisted remote attackers to execute arbitrary JavaScript via a web page, making it easier to exploit. This is due to an incomplete blacklist vulnerability in CoreTypes, which does not properly handle certain Content-Type values for Safari. Specifically, the values for the `.ibplugin` and `.url` extensions are not on the list of possibly unsafe content types.

Name of the Vulnerable Software and Affected Versions: Apple Mac OS X versions 10.5 through 10.5.7 Description: The issue allows user-assisted remote attackers to execute arbitrary JavaScript via a web page, making it easier to exploit. This occurs because of an incomplete blacklist vulnerability in CoreTypes in Apple Mac OS X. The vulnerability is exploited when a web page offers a download with a Content-Type value that is not on the list of possibly unsafe content types for Safari. Recommendations: For Apple Mac OS X versions 10.5 through 10.5.7, update to version 10.5.8 to resolve the issue.

Name of the Vulnerable Software and Affected Versions: Apple Safari version 3.x and earlier on Windows Description: The issue is related to the CoreGraphics component in Apple Safari, which does not properly handle arithmetic during automatic hinting of TrueType fonts. This can be exploited by remote attackers using crafted font data, potentially leading to the execution of arbitrary code or causing a denial of service due to memory corruption and application crash. Recommendations: For Apple Safari version 3.x and earlier on Windows, update to version 4.0 or later to resolve the issue.

The issue is related to input validation problems, allowing remote attackers to execute arbitrary JavaScript in the local security zone via a crafted feed URL.

A stack-based buffer overflow issue in Image Raw allows remote attackers to execute arbitrary code via a crafted Adobe Digital Negative (DNG) image.