Jun Mao

A remote code execution issue exists in the way Microsoft Excel handles specially crafted Excel files. This allows an attacker to execute arbitrary code via a crafted spreadsheet. An attacker who successfully exploits this issue could take complete control of an affected system, then install programs, view, change, or delete data, or create new accounts with full user rights.

A remote code execution issue exists in the way Microsoft Excel handles specially crafted Excel files, allowing attackers to execute arbitrary code via a crafted spreadsheet that triggers incorrect handling of memory during opening. This could enable an attacker to take complete control of an affected system, install programs, view, change, or delete data, or create new accounts with full user rights.

The issue allows remote attackers to execute arbitrary code via a specially crafted Word file, which triggers a heap-based buffer overflow due to an integer overflow in the text converters. This occurs when a user opens a malicious file, such as a DOC file with an invalid number of property names in the DocumentSummaryInformation stream.

Name of the Vulnerable Software and Affected Versions: Microsoft Office Word versions 2002 SP3 and 2003 SP3 Office 2004 and 2008 for Mac Open XML File Format Converter for Mac Office Word Viewer 2003 SP3 Office Word Viewer Description: A remote code execution issue exists in the way Microsoft Office Word handles specially crafted Word files with a malformed record or File Information Block (FIB) structure. This could allow an attacker to execute arbitrary code and take complete control of an affected system, enabling them to install programs, view, change, or delete data, or create new accounts with full user rights. The impact may be less severe for users with fewer user rights on the system compared to those operating with administrative user rights. Recommendations: For Microsoft Office Word 2002 SP3, update to a newer version to mitigate the risk. For Microsoft Office Word 2003 SP3, update to a newer version to mitigate the risk. For Office 2004 and 2008 for Mac, update to a newer version to mitigate the risk. For Open XML File Format Converter for Mac, update to a newer version to mitigate the risk. For Office Word Viewer 2003 SP3, update to a newer version to mitigate the risk. For Office Word Viewer, update to a newer version to mitigate the risk.

Name of the Vulnerable Software and Affected Versions: Adobe Flash Player versions prior to 9.0.246.0 Adobe Flash Player versions 10.x prior to 10.0.32.18 Adobe AIR versions prior to 1.5.2 Description: A heap-based buffer overflow issue allows attackers to cause a denial of service or possibly execute arbitrary code via unspecified vectors involving URL parsing. Recommendations: For Adobe Flash Player versions prior to 9.0.246.0, update to version 9.0.246.0 or later. For Adobe Flash Player versions 10.x prior to 10.0.32.18, update to version 10.0.32.18 or later. For Adobe AIR versions prior to 1.5.2, update to version 1.5.2 or later.

Name of the Vulnerable Software and Affected Versions: Adobe Reader versions 7.0.0 through 7.1.2 Adobe Reader versions 8.0.0 through 8.1.5 Adobe Reader versions 9.0.0 through 9.1.1 Adobe Acrobat versions 7.0.0 through 7.1.2 Adobe Acrobat versions 8.0.0 through 8.1.5 Adobe Acrobat versions 9.0.0 through 9.1.1 Description: The issue is caused by an integer overflow in the FlateDecode filter, which can be triggered by a PDF file containing unspecified parameters. This can lead to a denial of service or possibly allow attackers to execute arbitrary code via a heap-based buffer overflow. Recommendations: For Adobe Reader versions 7.0.0 through 7.1.2, update to version 7.1.3 or later. For Adobe Reader versions 8.0.0 through 8.1.5, update to version 8.1.6 or later. For Adobe Reader versions 9.0.0 through 9.1.1, update to version 9.1.2 or later. For Adobe Acrobat versions 7.0.0 through 7.1.2, update to version 7.1.3 or later. For Adobe Acrobat versions 8.0.0 through 8.1.5, update to version 8.1.6 or later. For Adobe Acrobat versions 9.0.0 through 9.1.1, update to version 9.1.2 or later.

A remote code execution issue exists in the Windows Print Spooler Service, allowing a remote, unauthenticated attacker to execute arbitrary code on an affected system. This could enable the attacker to take complete control of the system, install programs, view, change, or delete data, or create new accounts. The issue is related to a stack-based buffer overflow in the EnumeratePrintShares function in win32spl.dll, which can be triggered by a crafted ShareName in a response to an RPC request.

The issue is related to a stack-based buffer overflow in the Word 97 text converter in WordPad, allowing remote attackers to execute arbitrary code via a crafted Word 97 file. This occurs due to the use of inconsistent integer data sizes for an unspecified length field, leading to memory corruption. A remote code execution vulnerability exists in WordPad when a user opens a specially crafted Word file, resulting in memory corruption.

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer versions 5.01 SP4, 6 SP1 Microsoft Internet Explorer version 6 on Windows XP and Server 2003 Description: The issue arises from a stack-based buffer overflow that occurs when Microsoft Internet Explorer does not properly handle extraneous data associated with an object embedded in a web page. This allows remote attackers to execute arbitrary code via crafted HTML tags that trigger memory corruption. A remote code execution vulnerability exists in the way Internet Explorer embeds objects into a Web page, which could be exploited by constructing a specially crafted Web page. When a user views the Web page, the vulnerability could allow remote code execution, potentially giving an attacker the same user rights as the logged on user. Recommendations: For Microsoft Internet Explorer version 5.01 SP4, update to a version that properly handles object embedding to prevent memory corruption. For Microsoft Internet Explorer version 6 SP1, ensure that all web pages are thoroughly validated to prevent exploitation of the buffer overflow. For Microsoft Internet Explorer version 6 on Windows XP and Server 2003, restrict access to potentially malicious web pages until a proper fix is applied.

The issue allows remote attackers to execute arbitrary code via a movie file containing a Macintosh Resource record with a modified length value in the resource header, which triggers heap corruption.

Name of the Vulnerable Software and Affected Versions: Microsoft DirectX versions 7.0 through 10.0 Description: The issue is related to a stack-based buffer overflow in the DirectShow Synchronized Accessible Media Interchange (SAMI) parser in quartz.dll. This allows remote attackers to execute arbitrary code via a crafted SAMI file. Recommendations: For Microsoft DirectX versions 7.0 through 10.0, update to a version that contains a fix for this issue.

The issue concerns multiple buffer overflows in the ServerProtect service, allowing remote attackers to execute arbitrary code via certain RPC requests to specific TCP ports. These requests are processed by various functions, including `RPCFN ENG NewManualScan`, `RPCFN ENG TimedNewManualScan`, `RPCFN SetComputerName`, `RPCFN CMON SetSvcImpersonateUser`, `RPCFN OldCMON SetSvcImpersonateUser`, `RPCFN ENG TakeActionOnAFile`, `RPCFN ENG AddTaskExportLogItem`, `NTF SetPagerNotifyConfig`, and `RPCFN CopyAUSrc`, which are located in different DLL files such as `StRpcSrv.dll`, `Stcommon.dll`, `Eng50.dll`, `Notification.dll`.