Shi Ji

A remote code execution issue exists due to the improper handling of objects in memory by the Microsoft Office Access Connectivity Engine. This could allow a remote attacker to execute arbitrary code on a victim system by enticing the victim to open a specially crafted file.

The issue allows remote attackers to cause a denial of service, specifically an out-of-bounds read, via crafted input. This is due to a problem in the `read line table program` function in `dwarf line table reader common.c`.

The issue allows attackers to cause a denial of service, specifically an out-of-bounds read, by providing a specific input that ends with an asterisk (*). This is related to the chartorune function in MuJS.

The issue is related to a heap-based buffer overflow in the Fp toString function in jsfunction.c, which can be triggered by crafted input. This can cause a denial of service, resulting in a crash.

The issue allows context-dependent attackers to conduct denial of service attacks by using the malformed labeled break/continue in JavaScript approach, related to a NULL pointer dereference issue affecting the jscompile.c component.

The issue allows context-dependent attackers to obtain sensitive information by using the crafted JavaScript approach, related to a Buffer Over-read issue.

The issue allows context-dependent attackers to obtain sensitive information by using the "opname in crafted JavaScript file" approach, related to an "Out-of-Bounds read" issue affecting the `jsC dumpfunction` function in the jsdump.c component.