Kolja Grassmann

يحدث تصعيد للامتيازات المحلية بسبب عدم صحة التحقق من صحة المدخلات، وهو ما يمثل فشلًا في قيام التطبيق بالتحقق بشكل صحيح من البيانات التي يتلقاها، مما قد يسمح للمهاجم بالحصول على أذونات أعلى على النظام.

يوجد عيب في عملية TrackerUpdate في برنامج PDF-XChange Editor يتيح للمهاجمين المحليين رفع مستوى الامتيازات في الأنظمة المتأثرة. يجب أن يكون المهاجم قادرًا أولاً على تنفيذ تعليمات برمجية بامتيازات منخفضة على النظام المستهدف. يقوم المنتج بتحميل مكتبة من موقع غير آمن، يمكن للمهاجم استغلالها لتنفيذ تعليمات برمجية في سياق مستخدم مستهدف.

ترتبط المشكلة بضعف في ضوابط الوصول في Windows SDK، مما يسمح لمهاجم مخول برفع مستوى امتيازاته محليًّا. لا توجد معلومات متوفرة حول العدد التقديري للأجهزة التي قد تكون متأثرة في جميع أنحاء العالم أو حول الحوادث الفعلية التي تم فيها استغلال هذه المشكلة.

تتعلق المشكلة بعنصر مسار بحث غير خاضع للرقابة، مما قد يؤدي إلى رفع مستوى الامتيازات المحلية.

The issue allows malicious software to abuse WRSA.EXE to delete arbitrary and protected files due to a privilege escalation vulnerability. This vulnerability affects Webroot Antivirus on both Windows 64-bit and 32-bit systems.

A local privilege escalation issue has been identified. To exploit this issue, an attacker must first obtain the ability to execute local privileged code on the target system.

The issue is related to incorrect permission assignment, allowing local attackers to escalate privileges on affected installations. The specific flaw exists within the handling of autostart tasks, resulting from incorrect permissions set on folders. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM.

The issue is related to insufficient data authentication in the Trend Micro Apex One security agent, allowing a local attacker to escalate privileges on affected installations. To exploit this, an attacker must first obtain the ability to execute low-privileged code on the target system. This vulnerability enables the attacker to potentially execute arbitrary code and gain elevated privileges.

The issue arises from a stack-based buffer overflow in the `giftrans` function. This occurs because a value within the input file dictates the amount of data to be written, allowing an attacker to overwrite up to 250 bytes outside the allocated buffer with arbitrary data.

Name of the Vulnerable Software and Affected Versions: gif2apng version 1.9 Description: A stack-based buffer overflow issue was discovered, involving a while loop. The attacker has limited influence over the data written to the stack, making it difficult to subvert the flow of control. Recommendations: For gif2apng version 1.9, at the moment, there is no information about a newer version that contains a fix for this issue.

Name of the Vulnerable Software and Affected Versions: gif2apng version 1.9 Description: An issue was discovered that allows a heap-based buffer overflow in the main function, enabling an attacker to write 2 bytes outside the boundaries of the buffer. Recommendations: For gif2apng version 1.9, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: gif2apng version 1.9 Description: An issue was discovered that allows an attacker to write data outside of the allocated buffer due to a heap-based buffer overflow within the main function. The attacker has control over a part of the address that data is written to, control over the written data, and some control over the amount of data that is written. Recommendations: For gif2apng version 1.9, at the moment, there is no information about a newer version that contains a fix for this issue.

Name of the Vulnerable Software and Affected Versions: gif2apng version 1.9 Description: A heap-based buffer overflow issue was found in the DecodeLZW function, allowing an attacker to write a large amount of arbitrary data outside the boundaries of a buffer. Recommendations: For gif2apng version 1.9, at the moment, there is no information about a newer version that contains a fix for this issue.

Name of the Vulnerable Software and Affected Versions: gif2apng version 1.9 Description: A stack-based buffer overflow issue was discovered, involving a for loop. This issue makes it unlikely for an attacker to subvert the flow of control due to limited influence over the data written to the stack. Recommendations: For gif2apng version 1.9, at the moment, there is no information about a newer version that contains a fix for this issue.