Riley Hassell

The issue concerns the ActionScript 2 virtual machine, which fails to verify a member element's size when performing certain actions, such as DefineConstantPool, ActionJump, ActionPush, and ActionTry. This allows remote attackers to read sensitive data from process memory via a crafted file.

The issue allows remote attackers to read sensitive data from process memory via a crafted PDF file, due to the DefineConstantPool action in the ActionScript 2 virtual machine accepting an untrusted input value for a `constant count`.

The issue concerns the ActionScript 2 virtual machine, which fails to validate character elements during retrieval from the dictionary data structure. This allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and application crash, via a crafted PDF file.

The issue is a stack-based buffer overflow in the SMTP service support in vsmon.exe. This allows remote attackers to execute arbitrary code via a long RCPT TO argument.

The issue is related to multiple stack-based buffer overflows in the ICQ parsing routines. This can be exploited by remote attackers to execute arbitrary code via a SRV MULTI response containing specific packets with long fields, such as `nickname`, `firstname`, `lastname`, or `email address`. The Witty worm is known to have exploited this issue.

The issue is related to multiple vulnerabilities in various packages of the Red Hat Linux operating system, including glibc and krb5. These vulnerabilities can be exploited remotely, potentially leading to a breach of confidentiality, integrity, and availability of protected information. The vulnerabilities are related to integer overflows in certain functions, which can allow remote attackers to execute arbitrary code.