Linhlhq

توجد مشكلة في التباس الحالة في الدالة `g dbus node info new for xml()` الموجودة في الملف gio/gdbusintrospection.c. تحدث هذه المشكلة عندما يعالج البرنامج ملف XML للتفحص الداخلي لـ D-Bus غير صحيح التكوين، وتحديدًا عندما يكون عنصر `<node>` متداخلًا داخل عناصر أخرى مثل `<method>` أو `<signal>` أو `<property>` أو `<arg>`. يمكن أن تؤدي هذه الثغرة إلى تجاوز سعة عدد صحيح غير موقّع، مما يؤدي إلى قراءة خارج النطاق وينتج عنه رفض الخدمة.

يحدث تجاوز في قراءة المخزن المؤقت في الدالة `g io channel read line backend()` داخل ملف giochannel.c. يحدث هذا عند تكوين علامة نهاية سطر مخصصة يزيد طولها عن 1، مما يؤدي إلى قيام الدالة `memcmp` بالقراءة خارج حدود مخزن GString المؤقت. قد تؤدي هذه المشكلة إلى كشف معلومات بسيط بحجم 7 بايت أو إلى رفض الخدمة إذا تجاوزت القراءة الزائدة حدود الصفحة.

قد تحدث عملية قراءة خارج نطاق الذاكرة بمقدار 2 بايت في الدالة `g date time get ymd()` الموجودة في ملف glib/gdatetime.c. يحدث هذا عندما يعالج النظام كائن GDateTime غير صالح تم إنشاؤه بواسطة الدالة `g date time add full()`. قد تؤدي هذه المشكلة إلى إتلاف إخراج التاريخ وتسبب أخطاء منطقية، مما قد يؤدي إلى رفض الخدمة.

يوجد خطأ «off-by-one» في الدالة `gvs tuple is normal()` الموجودة في الملف glib/gvariant-serialiser.c. تحدث المشكلة أثناء فحص تعبئة المحاذاة حيث يستخدم فحص الحدود بشكل غير صحيح عامل `>` بدلاً من `>=`، مما يؤدي إلى قراءة بايت واحد خارج الحدود. قد يؤدي ذلك إلى كشف معلومات بسيط لبايت واحد أو إلى رفض الخدمة إذا تجاوزت عملية القراءة حدود الصفحة.

The issue is related to an elevation-of-privilege vulnerability in the Windows Hyper-V system, which is caused by flaws in the authorization procedure. This vulnerability can be exploited to allow an attacker to elevate their privileges.

The issue is related to an elevation-of-privilege vulnerability in the Storage Spaces Controller, which is associated with insufficient access restrictions. This vulnerability can be exploited to allow an attacker to elevate their privileges.

The issue is related to insufficient input validation in Microsoft Office, Microsoft Word, and Microsoft 365 Apps for Enterprise, allowing an attacker to execute arbitrary code. This can be exploited by remote attackers, potentially affecting the system.

The issue is related to incorrect code generation management in the HEVC Video Extensions codec. Exploitation of this issue may allow an attacker to execute arbitrary code.

The issue is related to incorrect code generation management in the application. It may allow a remote attacker to execute arbitrary code.

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.10 Description: A heap-based buffer overflow issue exists in GNU LibreDWG. The problem is related to the bit search sentinel function in the bits.c file. Recommendations: For GNU LibreDWG version 0.10, consider updating to a newer version that contains a fix for this issue, if available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.10 Description: A heap-based buffer overflow issue exists, which can be triggered via the `read 2004 compressed section` function in the `decode.c` file. Recommendations: For GNU LibreDWG version 0.10, consider applying a patch or fix that addresses the heap-based buffer overflow in the `read 2004 compressed section` function. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.10 Description: A heap-based buffer overflow issue exists in the software. The problem is located in the bit calc CRC function in the bits.c file. Recommendations: For GNU LibreDWG version 0.10, at the moment, there is no information about a newer version that contains a fix for this issue.

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.10 Description: A heap-based buffer overflow issue exists due to a problem in the `read 2004 section handles` function located in `decode.c` at line 2637. This could potentially lead to exploitation. Recommendations: For GNU LibreDWG version 0.10, consider restricting access to the `read 2004 section handles` function in `decode.c` until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.10 Description: An issue in GNU LibreDWG leads to a memory leak when crafted input is processed by the dwg decode eed function in the decode.c file. Recommendations: For GNU LibreDWG version 0.10, at the moment, there is no information about a newer version that contains a fix for this issue.

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.10 Description: A heap-based buffer overflow issue exists in the read 2004 section appinfo function, located in the decode.c file. This issue can be exploited via the read 2004 section appinfo function. Recommendations: For GNU LibreDWG version 0.10, consider applying a patch or fix to address the heap-based buffer overflow issue in the read 2004 section appinfo function. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.10 Description: A heap-based buffer overflow issue exists via the `bit read B` function in the `bits.c` file. This could potentially allow for exploitation. Recommendations: For GNU LibreDWG version 0.10, consider restricting access to the `bit read B` function in the `bits.c` file until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.10 Description: A null pointer dereference issue exists in GNU LibreDWG. This issue is related to the get bmp function in the dwgbmp.c file. Recommendations: For GNU LibreDWG version 0.10, consider avoiding the use of the get bmp function until a patch is available. As a temporary workaround, review the code in dwgbmp.c to identify and mitigate potential null pointer dereferences. At the moment, there is no information about a newer version that contains a fix for this issue.

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.10.2641 Description: A null pointer dereference issue exists, which causes a denial of service, resulting in an application crash. The issue is related to the `htmlescape` function in the `escape.c` file. Recommendations: For GNU LibreDWG version 0.10.2641, consider applying a patch to fix the null pointer dereference issue in the `htmlescape` function to prevent application crashes. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.10.2641 Description: A heap-based buffer overflow issue exists. The problem is located in the `escape.c` file at line 51, specifically via `htmlescape`. Recommendations: For GNU LibreDWG version 0.10.2641, consider restricting access to the `htmlescape` function in `escape.c` until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.10 Description: A null pointer dereference issue exists in the software. The issue is related to the `read 2004 compressed section` function in the `decode.c` file. Recommendations: For GNU LibreDWG version 0.10, consider avoiding the use of the `read 2004 compressed section` function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.