Daniel Teuchert

A problematic issue has been found in Server Status, affecting the component HTTP Status/SMTP Status. This issue leads to cross-site scripting and can be initiated remotely. The exploit has been disclosed to the public.

A vulnerability was found in the Database Information Macro component, which can be exploited to lead to cross-site scripting. The attack can be launched remotely.

A problematic issue was found in Refined Toolkit, affecting some unknown functionality of the component UI-Image/UI-Button. This issue leads to cross site scripting and can be exploited remotely.

A problematic vulnerability has been found in Linking, affecting an unknown part of the New Windows Macro component. This issue leads to cross-site scripting and can be initiated remotely. The exploit has been disclosed to the public and may be used.

A problematic issue was found in the Macro Handler component, leading to cross-site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

The issue concerns a signed integer overflow in the CHECK macro within the mrbgems/mruby-sprintf/src/sprintf.c file of mruby. This overflow could potentially lead to out-of-bounds memory access due to the mrb str resize function in string.c not checking for negative lengths.

A heap-based buffer over-read issue was found, associated with OP ENTER, due to the failure of mrbgems/mruby-fiber/src/fiber.c to extend the stack when handling many arguments to fiber.

An issue was discovered in mruby. There is a NULL pointer dereference in `mrb class real` because `class BasicObject` is not properly supported in class.c.

The issue is related to the init copy function in kernel.c, which makes initialize copy calls for TT ICLASS objects. This allows attackers to cause a denial of service, resulting in an uninitialized pointer and application crash, or possibly have other unspecified impacts.

Name of the Vulnerable Software and Affected Versions: mruby versions prior to 1.4.1 Description: The issue is related to an integer overflow in the `mrb vm exec()` function when handling `OP GETUPVAR` in the presence of deep scope nesting, resulting in a use-after-free. This could allow an attacker who can cause Ruby code to be run to possibly execute arbitrary code. Recommendations: For versions prior to 1.4.1, update to version 1.4.1 or later to resolve the issue.