Fritz Sands

The issue is related to a lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. This allows an attacker to manipulate an insider to visit a malicious page or file, potentially leading to the execution of code in the context of the current process. The vulnerability poses a serious cybersecurity threat due to the possibility of remote code execution.

The issue is related to the lack of proper initialization of memory prior to accessing it in Delta Electronics CNCSoft-G2. An attacker can manipulate users into visiting a malicious page or file, which can leverage this issue to execute code in the context of the current process.

The issue is related to a lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. This can be exploited by an attacker to execute code in the context of the current process by manipulating users into visiting a malicious page or file.

The issue is related to a lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. This allows an attacker to manipulate users into visiting a malicious page or file, which can lead to the execution of code in the context of the current process. The vulnerability enables remote attackers to execute arbitrary code on affected installations.

The issue is related to a lack of proper validation of user-supplied data, which can result in a write past the end of an allocated object. This allows an attacker to manipulate users into visiting a malicious page or file, potentially executing code in the context of the current process.

The issue is related to a lack of proper validation of user-supplied data, which can result in a memory corruption condition. This can be exploited if a target visits a malicious page or opens a malicious file, allowing an attacker to execute code in the context of the current process.

The issue is related to a lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. This can be exploited if a target visits a malicious page or opens a malicious file, allowing an attacker to execute code in the context of the current process. The vulnerability is related to the DPAX file parsing and can lead to remote code execution.

The issue is related to a lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. This can be leveraged by an attacker to execute code in the context of the current process if a target visits a malicious page or opens a malicious file. The vulnerability is related to DPAX file parsing and can lead to remote code execution.

The issue is related to a lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. This can be exploited if a target visits a malicious page or opens a malicious file, allowing an attacker to execute code in the context of the current process.

The issue is related to a stack-based buffer overflow that may occur when the Fuji Electric Tellus Lite V-Simulator parses a specially-crafted input file. This could potentially allow an attacker to execute arbitrary code.

The issue is related to the parsing of a specially-crafted input file by Fuji Electric Tellus Lite V-Simulator, which may lead to an out of bounds write. This could potentially allow an attacker to execute arbitrary code.

The issue is related to inadequate access control in the Fuji Electric Tellus Lite V-Simulator, allowing an attacker to potentially execute arbitrary code. A user with a standard account in Fuji Electric Tellus Lite may overwrite files in the system, which could lead to further exploitation.

The issue is related to an information disclosure vulnerability in the Windows GDI component, which improperly discloses the contents of its memory. This can be exploited by attackers to obtain sensitive information using a specially crafted document. The vulnerability is associated with errors in the mechanisms for handling objects in memory.

The issue is related to an information disclosure vulnerability in the Windows GDI component, which improperly discloses the contents of its memory. This can be exploited by attackers to obtain sensitive information using a specially crafted document. The vulnerability is associated with errors in the mechanisms for handling objects in memory.

This issue allows local attackers to escalate privileges on vulnerable installations. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this issue. The specific flaw exists within the configuration of the access controls for the installed product files. The installation procedure leaves critical files open to manipulation by any authenticated user. An attacker can leverage this issue to escalate privileges to SYSTEM.

The issue allows remote attackers to have an unspecified impact via a crafted web site due to improper restriction of access to ActiveX controls. Multiple ActiveX controls are affected, including TeeChart.ChartGridNavigator.5, TChart.ITChart, TeeChart.ChartGrid.5, TeeCommander.ITeeCommander, and TeePreviewer.ITeePreviewer, which can lead to remote code execution vulnerabilities.

The issue is caused by a heap buffer overflow in the AGM.dll library, which can be exploited by an attacker to execute arbitrary code remotely. This can be achieved through a multi-level PDF document.

The issue is related to a buffer overflow condition that may cause the system to crash or allow remote code execution. The `ip` argument in the `AudioRecord` method of `RTSPVIDEO.rtspvideoCtrl.1` is vulnerable to remote code execution.

The issue is related to a buffer overflow condition that may cause the system to crash or allow remote code execution. Technical details include the exploitation of various components and methods, such as `IVLCControl` `setStreamRecordData`, `RTSPVIDEO.rtspvideoCtrl.1` `Open3`, `IVLCControl` `setRecordPrefix`, `VLCControl` `setUserInfoData` `strIP`, `RTSPVIDEO.rtspvideoCtrl.1` `AudioRecord` method `fullfilename` parameter, `RTSPVIDEO.rtspvideoCtrl.1` `Open` and `Open2`, `VLCPlugin` ActiveX Control `setUserInfoData` `strUserName`, and `IVLCControl` `setConfigPath`.