Jean-Jamil Khalife

Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally.

تسمح ثغرة كتابة خارج الحدود (out-of-bounds write) في مكون بحث Microsoft Windows لمهاجم غير مصرح له بتنفيذ رمز عبر الشبكة. تحدث الكتابة خارج الحدود عندما يقوم برنامج بكتابة بيانات تتجاوز نهاية المخزن المؤقت المخصص، مما قد يؤدي إلى تلف الذاكرة وتنفيذ رمز عشوائي.

Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally.

يحدث تجاوز لسعة المخزن المؤقت المستند إلى كومة (heap-based buffer overflow) في Windows System Information Console. تسمح هذه المشكلة لمهاجم عن بعد غير مصرح له بتنفيذ رمز عشوائي عبر الشبكة، مما قد يؤدي إلى اختراق النظام المتأثر.

The Netskope client service, running with NTSYSTEM privileges, accepts network connections from localhost to start various services and execute commands. A connection handling function in the service uses a relative path to download and unzip configuration files, allowing local users to write arbitrary files in a location accessible only to higher privileged users. This can be exploited by local users to execute code with NTSYSTEM privileges on the end machine.

Name of the Vulnerable Software and Affected Versions: Microsoft Skype versions through 8.59.0.77 on macOS Description: The issue allows a local process with the user's privileges to obtain unprompted microphone and camera access. This is achieved by loading a crafted library, which enables the process to inherit Skype Client's microphone and camera access due to the disable-library-validation entitlement. Recommendations: For Microsoft Skype versions through 8.59.0.77 on macOS, consider restricting access to the microphone and camera until a fix is available. As a temporary workaround, review and restrict any library loading capabilities to minimize the risk of exploitation.

An issue exists in the Windows kernel-mode driver (win32k.sys) due to improper handling of objects in memory. This could allow an attacker to gain elevated privileges and read arbitrary amounts of kernel memory. The attacker could then install programs, view, change, or delete data, or create new accounts with full administrative rights. To exploit this issue, an attacker would first have to log on to the system and then run a specially crafted application designed to elevate privileges.