Ronald Crane

اسم البرنامج المعرض للخطر والإصدارات المتأثرة: libssh (لم يتم تحديد الإصدارات المتأثرة) الوصف: يمكن لثغرة في مكتبة libssh أن تؤدي إلى قراءة خارج نطاق الذاكرة في الدالة `sftp handle` بسبب فحص مقارنة غير صحيح. وهذا يسمح للدالة بالوصول إلى الذاكرة خارج قائمة المقابض الصالحة وإرجاع مؤشر غير صالح، والذي يتم استخدامه في المعالجة اللاحقة. يمكن لمهاجم بعيد تمت مصادقته قراءة مناطق ذاكرة غير مقصودة، مما يؤدي إلى كشف معلومات حساسة أو التأثير على سلوك الخدمة. التوصيات: في الوقت الحالي، لا توجد معلومات حول إصدار أحدث يحتوي على إصلاح لهذه الثغرة الأمنية.

اسم البرنامج المعرض للخطر والإصدارات المتأثرة: libssh (الإصدارات المتأثرة غير محددة) الوصف: تتعلق المشكلة بحدوث تجاوز سعة عدد صحيح في الدالة `sftp decode channel data to packet()` في مكتبة libssh. وقد يتيح ذلك لمهاجم عن بُعد التسبب في حدوث رفض الخدمة. التوصيات: في الوقت الحالي، لا توجد معلومات عن إصدار أحدث يحتوي على تصحيح لهذه الثغرة الأمنية.

اسم البرنامج المعرض للثغرة والإصدارات المتأثرة: Debian Linux (الإصدارات المتأثرة غير محددة) الوصف: تتعلق المشكلة بثغرات أمنية في حزمة libssh في نظام Debian Linux. التوصيات: لا توجد حاليًا أي معلومات عن إصدار أحدث يتضمن تصحيحًا لهذه الثغرة الأمنية.

Name of the Vulnerable Software and Affected Versions: Firefox versions prior to 133 Thunderbird versions prior to 133 Firefox ESR versions prior to 128.7 Thunderbird versions prior to 128.7 Description: A double-free issue could occur in the `sec pkcs7 decoder start decrypt()` function when handling an error path, potentially leading to memory corruption. This issue affects the confidentiality, integrity, and availability of protected information. Recommendations: For Firefox versions prior to 133, update to version 133 or later. For Thunderbird versions prior to 133, update to version 133 or later. For Firefox ESR versions prior to 128.7, update to version 128.7 or later. For Thunderbird versions prior to 128.7, update to version 128.7 or later. As a temporary workaround, consider disabling the `sec pkcs7 decoder start decrypt()` function until a patch is available.

A mismatch between allocator and deallocator could have led to memory corruption. This issue is related to improper restriction of operations within the bounds of a memory buffer, which could allow a remote attacker to impact system performance.

The issue is related to the `ShmemCharMapHashEntry()` code, which was susceptible to potentially undefined behavior by bypassing the move semantics for one of its data members.

Name of the Vulnerable Software and Affected Versions: Firefox versions prior to 125 Firefox ESR versions prior to 115.10 Thunderbird versions prior to 115.10 Description: The issue is related to an integer overflow that leads to an out-of-bounds read, potentially triggered by a malformed OpenType font. This could allow a remote attacker to gain unauthorized access to protected information when processing OpenType fonts. Recommendations: For Firefox versions prior to 125, update to version 125 or later. For Firefox ESR versions prior to 115.10, update to version 115.10 or later. For Thunderbird versions prior to 115.10, update to version 115.10 or later.

The issue is related to an out of bounds read in the Fonts component of Google Chrome, which can be exploited by a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. This can allow the attacker to access potentially confidential information.

The issue is related to the MarkStack assignment operator, part of the JavaScript engine, which could access uninitialized memory if used in a self-assignment. This could allow a remote attacker to cause a denial of service.

The issue is related to the use of memory after it has been freed due to incorrect data movement in the AlignedBuffer structure. This could result in an incorrect reference count and later use-after-free. The vulnerability may allow a remote attacker to cause a denial of service.

The issue is related to integer overflows in the `AppendEncodedAttributeValue()`, `ExtraSpaceNeededForAttrEncoding()`, and `AppendEncodedCharacters()` functions. This can cause underallocation of an output buffer, leading to an out of bounds write. A remote attacker could exploit this issue by using a specially crafted web page to execute arbitrary code.

The issue is related to the use of memory after it has been freed, which could be exploited by a remote attacker to execute arbitrary code using a specially crafted web page. If an attacker could trigger a particular code path in `SafeRefPtr`, it could have triggered a crash or potentially be leveraged to achieve code execution.

The issue is related to the built-in profiler, where an incorrect object was checked for NULL, potentially leading to invalid memory access and undefined behavior. This problem only affects the application when the profiler is running. The vulnerability may allow a remote attacker to execute arbitrary code.

The `ShutdownObserver()` function was susceptible to potentially undefined behavior due to its reliance on a dynamic type that lacked a virtual destructor. This issue may allow a remote attacker to impact the confidentiality, integrity, and availability of protected information.

The issue is related to the use of memory after it has been freed, which can lead to a potentially exploitable crash. This occurs when Windows fails to duplicate a handle during process creation, and the sandbox code inadvertently frees a pointer twice. The bug only affects Firefox on Windows when run in non-standard configurations, such as using `runas`. Other operating systems are unaffected.

The issue is related to a vulnerability in the Oracle VM VirtualBox product, specifically in the Core component. This vulnerability can be easily exploited by a low-privileged attacker with logon access to the infrastructure where Oracle VM VirtualBox executes, allowing them to compromise Oracle VM VirtualBox. Successful attacks can result in the unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox. The vulnerability applies to Windows VMs only.

The issue is related to memory safety bugs present in Firefox, which showed evidence of memory corruption. It is presumed that with enough effort, some of these bugs could have been exploited to run arbitrary code. The vulnerability can be exploited by a remote attacker using a specially crafted website, potentially allowing them to execute arbitrary code.

The issue is related to a buffer overflow in the FileReader::DoReadData() function, which can be exploited by a remote attacker to execute arbitrary code in the target system. This occurs when an uninitialized value is used as a read limit while reading a file. The vulnerability may allow an attacker to cause memory corruption and execute arbitrary code.

The issue is related to an integer overflow in the Alternate Services component of the Firefox web browser. This could lead to an out-of-bounds write to privileged process memory, potentially allowing a remote attacker to compromise data integrity. The vulnerability is specifically related to non-standard configurations where a preference allowing non-HTTPS Alternate Services (`network.http.altsvc.oe`) is enabled.

The issue is related to accessing throttled streams, where the count of available bytes needed to be checked in the calling function to be within bounds. This may have led to future code being incorrect and vulnerable. The vulnerability is associated with a buffer overflow in memory when checking the number of available bytes in throttled streams, which could allow a remote attacker to disclose protected information.