Peleg Hadar

The issue is related to incorrect code generation management in the Hyper-V component of the Windows operating system. It allows a remote attacker to execute arbitrary code. The problem can be exploited for remote code execution or to cause a denial-of-service state. The vulnerability affects the Hyper-V virtual network switch driver (vmswitch.sys).

Name of the Vulnerable Software and Affected Versions: ASUS BMC firmware (affected versions not specified) Description: The issue arises from the Radius configuration function in the firmware's Web management page, which fails to verify the string length entered by users. This oversight results in a buffer overflow, allowing remote attackers to exploit the leakage and abnormally terminate the Web service after obtaining privileged permission. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

A spoofing vulnerability exists when Windows incorrectly validates file signatures, allowing an attacker to bypass security features and load improperly signed files. In an attack scenario, an attacker could bypass security features intended to prevent improperly signed files from being loaded. The update addresses the vulnerability by correcting how Windows validates file signatures. This issue has been exploited in real-world attacks, with attackers using polyglot files that combine multiple formats to evade detection. These files can be executed as MSI in Windows and as JAR files by the Java runtime environment, allowing them to hide malicious code and bypass antivirus checks.

The issue allows local attackers with permission to write a dll file to a directory in the global path environmental variable to inject code into Jira via a DLL hijacking vulnerability.

The issue allows local system attackers with permission to write a DLL file in a directory in the global path environmental variable to inject code and escalate their privileges via a DLL hijacking vulnerability. This occurs when using Tomcat in Confluence on the Microsoft Windows operating system.

The issue is related to insufficient access control in the ksde.exe executable file of Kaspersky security products. Exploitation of this issue may allow an attacker to execute arbitrary code using a specially crafted DLL file. This can be achieved by a local user with administrator rights, and it does not involve privilege escalation. There is also a possibility of bypassing whitelisting in some security products.

A DLL side loading issue in the Windows Service of TeamViewer could allow an attacker to execute code on a target system via a service restart, provided the DLL was previously installed with administrative privileges. The attacker must be able to create a new file in the TeamViewer application directory, which is restricted by default due to directory permissions.

A potential security issue has been identified that may allow a local attacker with administrative privileges to execute arbitrary code via an HP Touchpoint Analytics system service. The issue is related to insufficient input validation, which can be exploited by an attacker to execute malicious code using DLL files. This can lead to a privilege escalation.

The issue allows for local privilege escalation to the SYSTEM user due to an unquoted search path vulnerability. By default, only local administrators can write executables to the vulnerable directories.