Sebastian Apelt

This issue allows remote attackers to execute arbitrary code on vulnerable installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The flaw exists within the XFA remerge method due to the lack of validating the existence of an object prior to performing operations on it. An attacker can leverage this to execute code in the context of the current process.

The issue is related to a use-after-free vulnerability in the XFA engine, specifically tied to validation functionality. This could allow for arbitrary code execution if successfully exploited. The vulnerability is also related to memory use after it has been freed, which can be exploited by a remote attacker to execute arbitrary code, potentially related to checking functionality.

The issue is caused by a buffer overflow, allowing a remote attacker to execute arbitrary code or cause a denial of service (memory corruption). A memory corruption vulnerability in Adobe Acrobat and Reader enables attackers to execute code.

The issue is caused by a buffer overflow, allowing a remote attacker to execute arbitrary code or cause a denial of service (memory corruption). A memory corruption vulnerability in Adobe Acrobat and Reader enables attackers to execute code.

The issue is related to multiple buffer overflows that can be triggered by sending crafted messages over TCP, potentially allowing remote attackers to cause a denial of service or execute arbitrary code.

The issue allows remote attackers to cause a denial of service and execute arbitrary code via a crafted request to port 1882. This involves an incorrect integer calculation and a heap-based buffer overflow in the eCS component.

The issue is related to a heap-based buffer overflow that allows remote attackers to execute arbitrary code via crafted ImageMap data in a RealMedia file. This is due to certain improper integer calculations.

The issue is related to a heap-based buffer overflow that allows remote attackers to execute arbitrary code. This is achieved by providing a crafted value in an unspecified header field in an RMX file.

The issue is caused by an integer overflow in librpc.dll in portmap.exe, allowing remote attackers to execute arbitrary code or cause a denial of service via a crafted parameter size. This can result in heap memory corruption.

The issue arises from the improper validation of file contents by the rjrmrpln.dll in RealPlayer, allowing remote attackers to execute arbitrary code. This can be achieved through crafted Name Value Property (NVP) elements in logical streams in a media file.

The issue arises from improper memory allocation during font parsing in the OpenType Font (OTF) format driver. This allows local users to gain privileges via a crafted application. An elevation of privilege vulnerability exists due to the improper parsing of specially crafted OpenType fonts, which could enable an attacker to run arbitrary code in kernel mode. This could lead to the installation of programs, viewing, changing, or deleting data, or creating new accounts with full user rights.

The issue is related to the ` CalcHashValueWithLength` function in FastBackServer.exe, which does not properly validate an unspecified length value. This allows remote attackers to cause a denial of service by sending data over TCP, resulting in a daemon crash.

The issue allows remote attackers to execute arbitrary code via multiple requests, by writing a certain value to a memory location specified by a UDP packet field in the FastBackMount.exe of the Mount service.

The issue involves multiple stack-based buffer overflows in FastBackServer.exe, allowing remote attackers to execute arbitrary code. This can be achieved through various vectors, including the `AGI SendToLog` function, the `group`, `workgroup`, or `domain` name field to the `USER S AddADGroup` function, the `user path` variable to the `FXCLI checkIndexDBLocation` function, or the ` AGI S ActivateLTScriptReply` function.

The issue allows remote attackers to execute arbitrary code via a crafted packet. This is due to the FXCLI OraBR Exec Command function in FastBackServer.exe using values of packet fields to determine the content and length of data copied to memory.

The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and daemon crash, via data in a TCP packet. This is related to the DAS ReadBlockReply function in FastBackServer.exe.

The issue allows remote attackers to execute arbitrary code via format string specifiers located after a | (pipe) character in a string, specifically in the Eventlog function in FastBackServer.exe.

The issue is related to multiple integer overflows in the ParseKnownType function, allowing remote attackers to execute arbitrary code via crafted data in an FLV file, specifically through `HX FLV META AMF TYPE MIXEDARRAY` or `HX FLV META AMF TYPE ARRAY` data.

The issue concerns multiple buffer overflows in the authentication functionality of the Informix Storage Manager (ISM) Portmapper service, specifically within the librpc.dll component. This allows remote attackers to execute arbitrary code by providing a crafted parameter size.

The issue is related to an integer signedness error in the authentication functionality of the librpc.dll component, used in the Informix Storage Manager (ISM) Portmapper service. This error can be exploited by remote attackers to execute arbitrary code via a crafted parameter size, triggering a stack-based buffer overflow.