Sowhat

A remote code execution issue exists in the Bluetooth stack due to incorrect handling of a large number of service description requests. This could allow an attacker to run code with elevated privileges, potentially taking complete control of an affected system. The attacker could then install programs, view, change, or delete data, or create new accounts with full user rights.

The issue allows context-dependent attackers to cause a denial of service, specifically disk space exhaustion, by utilizing a file with crafted data structures. This triggers the creation of large temporary files.

The issue allows context-dependent attackers to cause a denial of service, resulting in the engine hanging and restarting, via a crafted file.

The issue is related to an integer overflow that can be triggered by a crafted QuickTime movie containing a User Data Atom (UDTA) with a large value in the Atom size field. This can cause a denial of service (crash) and potentially allow the execution of arbitrary code.

A remote code execution issue exists due to the way Office handles files with malformed records. An attacker could exploit this when Office parses such a file, potentially leading to remote code execution.

The issue is related to an integer overflow in Apple QuickTime, which allows remote attackers to execute arbitrary code via a crafted H.264 movie file. A local overflow exists due to the program's failure to validate H.264 movie files, resulting in an integer or buffer overflow. This can be exploited with a specially crafted file, leading to arbitrary code execution and a loss of integrity.

The issue is related to an integer overflow that occurs when handling crafted H.264 movie files. This allows remote attackers to execute arbitrary code, potentially leading to a loss of integrity. The problem arises from the program's failure to properly validate H.264 movie files, resulting in a buffer or integer overflow.

A remote code execution issue exists in PowerPoint, potentially due to a buffer overflow, which could be exploited when a file containing a malformed record is parsed by PowerPoint. This could occur through a specially crafted PowerPoint file, possibly included in an e-mail attachment or hosted on a malicious web site, allowing an attacker to execute arbitrary commands.

A remote code execution issue exists due to the processing of a malformed OBJECT record in Excel. This allows an attacker to execute arbitrary code via a specially crafted .xls file. An attacker could exploit this by constructing a malicious Excel file, potentially leading to remote code execution.

A directory traversal issue allows remote attackers to write arbitrary files by including a .. (dot dot) in a filename within an ISO image.

The issue allows remote attackers to write arbitrary files via a .. (dot dot) in a filename in an ISO image, potentially leading to unauthorized file system modifications.

A directory traversal issue allows remote attackers to write arbitrary files by including a .. (dot dot) in a filename within an ISO image.

A remote code execution issue exists due to the way Internet Explorer handles double-byte characters in specially crafted URLs. This could allow an attacker to execute arbitrary code via a crafted URL with an International Domain Name (IDN) using double-byte character sets (DBCS). An attacker could exploit this by constructing a malicious Web page, potentially allowing remote code execution if a user visits the site. A successful exploitation could give the attacker complete control of the affected system.

A buffer overflow issue exists, allowing remote attackers to have an unknown impact via a malicious Mimio boardCast (mbc) file.

The issue is related to a buffer overflow in the swfformat.dll component. This can be exploited by remote attackers through a crafted SWF (Flash) file, allowing them to execute arbitrary code. The exploitation can occur via a size value in the SWF file that is less than the actual size, or through other unspecified manipulations of the file.

A remote overflow issue exists due to the application's failure to perform proper bounds checking, resulting in a buffer overflow. This can be triggered by a specially crafted *.m3u and/or *.pls file with an ending filename having the *.wma extension. A remote attacker can cause arbitrary code execution or crash the application, leading to a loss of integrity and/or availability.

The issue allows remote attackers to execute arbitrary code due to multiple buffer overflows. This can be achieved via a long GET request to the "HTTP server" endpoint, or a long `USER` or `PASS` command to the "FTP server" endpoint.

The issue allows remote attackers to cause a denial of service, resulting in an application hang. This can be achieved by sending an HTTP header that contains only a colon (:), which may lead to an integer signedness error due to the absence of a field name or value.

The issue is related to a buffer overflow that allows remote attackers to execute arbitrary code. This is achieved by using a long Host string in a Site Queue (.lsq) file.

The issue allows local users to gain privileges by accessing the Help functionality due to the software not properly dropping SYSTEM privileges when launched from the system tray.