Riusksk

A memory corruption issue was addressed with improved validation. Processing a maliciously crafted movie may result in the disclosure of process memory.

A remote code execution issue exists due to the improper handling of specially crafted embedded fonts by the Windows font library. This allows remote attackers to execute arbitrary code and affect the system.

A memory corruption issue was addressed with improved memory handling, allowing an application to potentially execute arbitrary code with system privileges.

A buffer overflow issue was addressed with improved bounds checking. Processing a maliciously crafted text file may lead to arbitrary code execution. This issue allows attackers to execute arbitrary code via a specially crafted text file.

The issue is related to errors in handling objects in memory by the Windows Graphics Component. This can allow an attacker to disclose protected information using a specially crafted application. To exploit this, an attacker must log on to an affected system and run the malicious application. The estimated number of potentially affected devices worldwide is not provided. There is no information about real-world incidents where this issue was exploited.

The issue is related to an out-of-bounds read that can be triggered by processing a maliciously crafted font, potentially resulting in the disclosure of process memory. This can be exploited by attackers using a specially crafted font to disclose process memory.

A memory corruption issue was addressed with improved memory handling, allowing an application to potentially execute arbitrary code with system privileges.

The issue is related to an out-of-bounds read that can be triggered by parsing a maliciously crafted office document, potentially leading to an unexpected application termination or arbitrary code execution.

A memory corruption issue was addressed with improved input validation. Playing a malicious audio file may lead to arbitrary code execution.

The issue is related to an out-of-bounds read that has been addressed with improved input validation. Processing a maliciously crafted movie file may lead to arbitrary code execution.

The issue is related to an information disclosure vulnerability in the Windows GDI component, which improperly discloses the contents of its memory. This can be exploited by attackers to obtain sensitive information, potentially affecting the confidentiality of protected information. The exploitation may occur through a specially crafted document or web page.

An out-of-bounds read issue was addressed with improved bounds checking. Processing a maliciously crafted font may result in the disclosure of process memory.

The issue is related to the Windows GDI component, which improperly discloses the contents of its memory. This can be exploited by an attacker using a specially crafted document or web page to reveal protected information. The vulnerability allows attackers to obtain sensitive information and potentially affect the system.

The issue is related to errors in memory object handling mechanisms in the Windows GDI component, which can allow an attacker to disclose protected information using a specially crafted document file. This can enable attackers to obtain sensitive information and affect the system.

The issue is related to errors in memory object handling mechanisms in the Windows GDI component, allowing an attacker to disclose protected information using a specially crafted document file. It involves out-of-bounds read information disclosure, potentially affecting system security.

The issue is caused by a computation that writes data past the end of the intended buffer, which is part of the image conversion module handling TIFF data. This can potentially allow an attacker to corrupt sensitive data or execute arbitrary code. The vulnerability is related to a heap-based buffer overflow during TIFF parsing, which can be leveraged for remote code execution.

The issue involves the "ld64" component and allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via a crafted Mach-O file.

The issue involves the "ld64" component and allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via a crafted Mach-O file.

The issue involves the "ld64" component and allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via a crafted Mach-O file.

The issue involves the "ld64" component and allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via a crafted Mach-O file.