Neel Mehta

The issue is related to insufficient validation of untrusted input in Intents, allowing a remote attacker to redirect the browser to a malicious URL via a crafted HTML page. This can be exploited by a remote attacker to gain access to the system.

The issue allows remote attackers to execute arbitrary code via a crafted media file, related to Quartz.dll, Qdvd.dll, closed captioning, and the Line21 DirectShow filter.

The issue affects the polkit package in Gentoo Linux and policykit-1 in Debian GNU/Linux, allowing local exploitation that may lead to breaches in confidentiality, integrity, and availability of protected information. A race condition in the pkexec utility and polkitd daemon in PolicyKit allows local users to gain privileges by executing a setuid program from pkexec, related to the use of the effective user ID instead of the real user ID.

The issue arises from the DNS client's improper processing of DNS queries, allowing remote attackers to execute arbitrary code via a crafted LLMNR broadcast query or a crafted application. This could enable an attacker to run arbitrary code in the context of the NetworkService account, potentially leading to the installation of programs, viewing, changing, or deleting data, or creating new accounts with full user rights.

The issue allows remote attackers to cause a denial of service (crash) and possibly obtain sensitive information in applications that use OpenSSL, via a malformed ClientHello handshake message that triggers an out-of-bounds memory access. Exploitation of the vulnerabilities may lead to a violation of confidentiality, integrity, and availability of protected information and can be carried out remotely.

The issue concerns multiple vulnerabilities in the OpenSSL package, which can lead to a breach of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited remotely. The vulnerabilities are related to the `bn wexpand` function calls in various files, including `crypto/bn/bn div.c`, `crypto/bn/bn gf2m.c`, `crypto/ec/ec2 smpl.c`, and `engines/e ubsec.c`. The impact and attack vectors of these vulnerabilities are context-dependent.

A remote code execution issue exists due to insufficient bounds checking when processing specially crafted ICMPv6 Router Advertisement packets. This allows an anonymous attacker to execute arbitrary code via crafted packets. An attacker who successfully exploits this issue could take complete control of an affected system, enabling them to install programs, view, change, or delete data, or create new accounts with full user rights.

A remote code execution issue exists due to improper handling of local fragmentation of Encapsulating Security Payload (ESP) over UDP packets when a custom network driver is used. This allows remote attackers to execute arbitrary code via crafted packets. An attacker who successfully exploits this issue could take complete control of an affected system, enabling them to install programs, view, change, or delete data, or create new accounts with full user rights.

The issue arises from insufficient bounds checking in the TCP/IP implementation when processing specially crafted ICMPv6 Route Information packets, allowing remote attackers to execute arbitrary code. This could enable an attacker to take complete control of an affected system, potentially leading to the installation of programs, viewing, changing, or deleting data, or creating new accounts with full user rights.

A remote code execution issue exists due to improper processing of WSD message headers by the Web Services on Devices API (WSDAPI). This allows remote attackers to execute arbitrary code via a crafted message or response. The vulnerability is caused by the service not properly handling a WSDAPI message with a specially crafted header, which could allow an attacker to take complete control of an affected system.

The issue is caused by an integer underflow in the kernel, allowing local users to gain privileges via a crafted application. This occurs due to the incorrect truncation of a 64-bit integer to a 32-bit integer. An attacker who successfully exploits this issue could run arbitrary code in kernel mode, enabling them to install programs, view, change, or delete data, or create new accounts with full user rights.

A denial of service issue exists due to the improper handling of exceptions by the Windows kernel when an error condition occurs. This allows local users to cause a system reboot by running a specially crafted application.

Name of the Vulnerable Software and Affected Versions: Microsoft Malware Protection Engine (mpengine.dll) (affected versions not specified) Description: The issue is related to an integer overflow in the Microsoft Malware Protection Engine, which can be exploited by remote attackers to execute arbitrary code. This can be achieved through a crafted PDF file, requiring user assistance. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

A stack-based buffer overflow issue in the Plug and Play service allows remote attackers to execute arbitrary code via a crafted packet. Local users can also gain privileges by using a malicious application. This issue has been exploited by the Zotob worm.

The issue is related to multiple integer overflows in file format processors for TNEF, CHM, or FSG files in libclamav. This allows remote attackers to gain privileges via a crafted e-mail message.

The issue allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted IP packets with malformed options.