Nafiez

تسمح مشكلة «الاستخدام بعد التحرير» (use after free) في مكونات مخزن الطباعة في Windows لمهاجم مخول برفع مستوى الامتيازات محليًّا. تحدث مشكلة «الاستخدام بعد التحرير» عندما يستمر أحد التطبيقات في استخدام مؤشر بعد تحريره، مما قد يؤدي إلى تلف الذاكرة أو تنفيذ تعليمات برمجية عشوائية.

The issue is related to an integer underflow vulnerability when processing PAR files. This could allow an attacker to execute code in the context of the current process. The vulnerability can be triggered by parsing specially crafted PAR files.

Name of the Vulnerable Software and Affected Versions: Solid Edge SE2024 versions prior to V224.0 Update 5 Description: The issue is related to a heap-based buffer overflow in the dynamic memory when processing specially crafted ASM files. This could allow an attacker to execute code in the context of the current process. Recommendations: For Solid Edge SE2024 versions prior to V224.0 Update 5, update to V224.0 Update 5 or later to resolve the issue. As a temporary workaround, consider avoiding the use of specially crafted ASM files until a patch is applied. Restrict access to the vulnerable application to minimize the risk of exploitation.

A DLL hijacking issue has been identified, which could allow an attacker to execute arbitrary code by placing a crafted DLL file on the system. The vulnerability is related to an uncontrolled search path element.

Name of the Vulnerable Software and Affected Versions: APDFL library versions (affected versions not specified) Description: The issue is related to an out of bounds read past the end of an allocated structure while parsing specially crafted PDF files. This could allow an attacker to execute code in the context of the current process. The vulnerability is also associated with a buffer overflow in memory, which can be exploited by an attacker using a specially crafted PDF file. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

The issue is related to an out of bounds write vulnerability when parsing a specially crafted CGM file. This could allow an attacker to execute code in the context of the current process. The vulnerability is associated with a buffer overflow in memory, which can be exploited using specially crafted CGM files, potentially allowing an attacker to execute arbitrary code.

A null pointer dereference vulnerability has been identified in the affected applications while parsing specially crafted SPP files. An attacker could leverage this vulnerability to crash the application, causing a denial of service condition. The vulnerability is related to the parsing of SPP files and can be exploited by an attacker to cause a denial of service.

The issue is related to an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. The vulnerability can be exploited by using specially created SPP files.

The issue is related to a null pointer dereference vulnerability. This vulnerability can be exploited by an attacker using specially crafted SPP files, potentially causing a denial of service condition by crashing the application.

A vulnerability has been identified in the affected applications, which contain an out of bounds read past the end of an allocated structure while parsing specially crafted SPP files. This could allow an attacker to execute code in the context of the current process. The issue is related to a buffer read beyond the allocated memory, which can be exploited using specially crafted SPP files, potentially allowing an attacker to execute arbitrary code.

The issue is related to a null pointer dereference vulnerability. This vulnerability can be exploited by an attacker using specially crafted SPP files, potentially causing a denial of service condition by crashing the application.

The issue is related to a memory corruption vulnerability in the APDFL.dll library, which occurs when parsing specially crafted PDF files. This could allow an attacker to execute code in the context of the current process.

The issue is related to an out-of-bounds write past a fixed-length heap-based buffer in the APDFL.dll while parsing specially crafted PDF files. This could allow an attacker to execute code in the context of the current process. The vulnerability is associated with the JT2Go 3D viewer tool and the Teamcenter Visualization product lifecycle management system.

The issue is related to a stack-based buffer overflow in the APDFL.dll, which can be triggered by parsing specially crafted PDF files. This could allow an attacker to execute code in the context of the current process. The vulnerability is associated with the JT2Go 3D viewer tool and the Teamcenter Visualization product lifecycle management system.

Name of the Vulnerable Software and Affected Versions: Microsoft Office Access Connectivity Engine (affected versions not specified) Description: A remote code execution issue exists due to the improper handling of objects in memory by the Microsoft Office Access Connectivity Engine. This could allow an attacker to execute arbitrary code on a victim system by enticing them to open a specially crafted file. The issue is resolved by correcting how the engine handles objects in memory. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

The issue is caused by Internet Explorer improperly accessing objects in memory, which can lead to memory corruption. This allows a remote attacker to execute arbitrary code in the context of the current user. If the current user has administrative rights, the attacker could take control of the affected system, install programs, view, change or delete data, or create new accounts with full user rights.

The issue is related to a buffer over-read in the x86/regflags.c file of the Netwide Assembler (NASM).

Name of the Vulnerable Software and Affected Versions: sharutils version 4.15.2 Description: The issue is related to a Buffer Overflow in the `unshar` command, specifically in the `unshar.c` file at line 75, within the `looks like c code` function. This occurs due to a failure in checking the buffer containing the input line, which could lead to code execution. The attack appears to be exploitable if a victim runs the `unshar` command on a specially crafted file. Recommendations: For sharutils version 4.15.2, consider avoiding the use of the `unshar` command until a patch is available, or apply any available patches to resolve the Buffer Overflow issue in the `looks like c code` function. As a temporary workaround, restrict the execution of specially crafted files with the `unshar` command to minimize the risk of exploitation.

The issue is related to a heap-based buffer overflow in the ExponentialFunction::ExponentialFunction function. This can be triggered by remote attackers via an invalid blend mode in the ExtGState dictionary in a crafted PDF document, potentially leading to a denial of service (memory corruption and crash) or possibly the execution of arbitrary code.