Luis Merino

The issue is related to an integer overflow and several buffer overflow reads in the libyara/modules/macho/macho.c module of YARA. This could allow an attacker to cause denial of service or information disclosure via a malicious Mach-O file. The exploitation of this issue may enable a remote attacker to access confidential data and cause service disruption.

A memory corruption issue is present due to insufficient checks when handling external inputs, allowing an attacker to bypass sanity checks and write out of a dynamically allocated buffer's boundaries.

A flaw in Thunderbird's implementation of iCal causes a stack buffer overflow in `icalrecur add bydayrules` when processing certain email messages, resulting in a potentially exploitable crash. The vulnerability can be exploited by a remote attacker to cause a denial of service.

A flaw in Thunderbird's implementation of iCal causes a type confusion in `icaltimezone get vtimezone properties` when processing certain email messages, resulting in a crash. The vulnerability is related to a lack of type checking of the passed object, which can be exploited by a remote attacker to cause a denial of service.

A flaw in the implementation of iCal in Thunderbird causes a heap buffer overflow in `parser get next char` when processing certain email messages, resulting in a potentially exploitable crash. This issue may allow a remote attacker to access confidential data, compromise its integrity, and cause a denial of service.

The issue is related to a heap buffer overflow in the `icalmemory strdup and dequote` function when processing certain email messages, potentially leading to a crash. This could allow a remote attacker to access confidential data, compromise its integrity, and cause a denial of service.

The issue allows remote attackers to execute arbitrary code via a dial-in session that provides a FAX page with the JPEG bit enabled. This is mishandled in the `FaxModem::writeECMData()` function in the faxd/CopyQuality.c++ file.