Fatih Kilic

توجد مشكلات تتعلق بأمان الذاكرة في Firefox 148 وThunderbird 148. تُظهر هذه الأخطاء دلائل على تلف الذاكرة، ويُفترض أنه، مع بذل جهد كافٍ، يمكن استغلالها لتنفيذ تعليمات برمجية عشوائية.

A cross-site request forgery (CSRF) issue exists in the administrator interface, specifically in ESAdmin/security.do. This allows remote attackers to hijack the authentication of administrators for requests, such as adding an new administrative user via a saveNewUser action.

The issue is related to a stack-based buffer overflow in the Java com ibm es oss CryptionNative ESEncrypt function. This function is located in the /opt/IBM/es/lib/libffq.cryptionjni.so library, which is part of the login form in the administration interface. The overflow can be triggered by a remote attacker using a long password, potentially allowing the execution of arbitrary code.

The issue allows local users to gain privileges by specifying an arbitrary command name. This is related to the esRunCommand in IBM OmniFind Enterprise Edition.

The issue allows remote web servers to cause a denial of service, specifically an infinite loop, by providing a crafted series of documents. This is due to the software performing web crawls with an unlimited recursion depth.

The issue allows local users to gain privileges through an untrusted search path vulnerability in the estaskwrapper component. This is achieved by manipulating the `ES LIBRARY PATH` environment variable and the `PATH` environment variable, which is utilized during the execution of the estasklight program.