Rodrigo Rubira Branco

The issue is related to insufficient memory protection, which may allow a privileged user to potentially enable escalation of privilege via local access. It is also described as a buffer overflow issue in the microcode of Intel Core and Intel Xeon processors, where exploitation could allow an attacker to elevate their privileges.

The issue is related to insufficient access control in the protected memory subsystem, which may allow a privileged user to potentially enable information disclosure via local access. This could lead to the exposure of protected information.

The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via a crafted .pict file.

A remote code execution issue exists in the way Microsoft Excel handles specially crafted Excel files, potentially allowing an attacker to execute arbitrary code or cause a denial of service due to memory corruption via a crafted HLink record. This could enable an attacker to take complete control of an affected system, install programs, view, change, or delete data, or create new accounts with full user rights.

The issue affects confidentiality, integrity, and availability, and is related to the CDE Calendar Manager Service Daemon and RPC. It is claimed by a reliable third party to be a buffer overflow in `rpc.cmsd` via long XDR-encoded ASCII strings in RPC call 10.

A cross-site scripting (XSS) issue exists in the lz tracking set sessid function, allowing remote attackers to inject arbitrary web script or HTML via the `livezilla` parameter in a track action to "server.php".

The issue allows remote authenticated administrators to inject arbitrary web script or HTML. This can be achieved via the `name` or `descr` parameter in an "update usergroup" or "store nas" action to "admin.php".

A remote code execution issue exists due to improper handling of objects in memory when using Microsoft Word to read Word documents. This allows attackers to execute arbitrary code by accessing an object that was not properly initialized or has been deleted, leading to memory corruption. An attacker could exploit this by convincing a user to view a specially crafted Word document, potentially gaining the same user rights as the logged-on user. If the user has administrative rights, the attacker could take complete control of the system, allowing them to install programs, view, change, or delete data, or create new accounts with full user rights.

The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted PDF file. This is due to a heap-based buffer overflow in CoreGraphics.

The issue allows remote attackers to execute arbitrary code via an RPC request containing format string specifiers in an invalid directory name. This is due to a format string vulnerability in the msgout function in rpc.pcnfsd.

A stack-based buffer overflow in the parser function allows context-dependent attackers to execute arbitrary code via a crafted PostScript file.

A stack-based buffer overflow issue exists in the libcsa.a library, which is part of the calendar daemon. This issue can be exploited by remote attackers who send a long XDR string in the first argument to procedure 21 of rpc.cmsd, allowing them to execute arbitrary code.

The issue is caused by an integer signedness error in the `fw ioctl` function, specifically when handling certain negative values of `crom buf->len` in an `FW GCROM` command. This allows local users to read arbitrary memory contents.