Alex Wheeler

Uma sobrecarga de buffer na pilha do cliente DNS, na função `ipdnsc decode name()`, afeta o software. Este problema afeta apenas produtos que não são mais suportados pelo mantenedor.

The issue is caused by a buffer overflow in the IKEv1 and IKEv2 implementations, which can be exploited by sending specially crafted UDP packets. This may allow a remote attacker to execute arbitrary code or cause a denial of service, resulting in a device reload.

Um estouro de buffer baseado em pilha ocorre na função `CComVariant::ReadFromStream()` na Active Template Library (ATL), especificamente afetando o controle ActiveX MPEG2TuneRequest no arquivo `msvidctl.dll` no DirectShow. Um invasor remoto pode executar código arbitrário com os privilégios do usuário logado ao induzir um usuário a visualizar uma página web especialmente manipulada. Este problema foi explorado ativamente em julho de 2009.

Name of the Vulnerable Software and Affected Versions: Microsoft Malware Protection Engine (mpengine.dll) (affected versions not specified) Description: The issue is related to an integer overflow in the Microsoft Malware Protection Engine, which can be exploited by remote attackers to execute arbitrary code. This can be achieved through a crafted PDF file, requiring user assistance. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

The issue is related to a heap-based buffer overflow in the Dec2Rar.dll component. This can be exploited by remote attackers through RAR archives with sub-block headers containing incorrect values in the length field, potentially allowing the execution of arbitrary code.

A heap-based buffer overflow issue exists in the pskcmp.dll component of the Panda Software Antivirus library. This issue can be exploited by remote attackers to execute arbitrary code on a vulnerable system by providing a crafted ZOO archive.

The issue is related to a heap-based buffer overflow that can be triggered by a specially crafted CAB file with large records after the header. This allows remote attackers to execute arbitrary code, resulting in a loss of integrity. The `cab.ppl` engine is specifically mentioned as failing to perform proper bounds checking, leading to the buffer overflow.

A heap-based buffer overflow issue exists in the Sophos Antivirus Library, which is used by various Sophos products. This issue can be exploited by remote attackers to execute arbitrary code. The exploitation occurs through a Visio file that contains a crafted sub record length.

The issue is related to multiple integer overflows in file format processors for TNEF, CHM, or FSG files in libclamav. This allows remote attackers to gain privileges via a crafted e-mail message.

The issue concerns multiple stack-based and heap-based buffer overflows in the Remote Management authentication component, specifically in zenrem32.exe. This allows remote attackers to execute arbitrary code through various vectors, including type 1 and type 2 authentication requests.

The issue is related to an integer overflow in the Computer Associates Vet Antivirus library. This allows remote attackers to gain privileges via a compressed VBA directory with a project name length of -1, leading to a heap-based buffer overflow.

A buffer overflow issue allows remote attackers to execute arbitrary code via a malformed LHA file with a type 2 header file name field.

A heap-based buffer overflow issue exists in the DEC2EXE module, allowing remote attackers to execute arbitrary code. This can be achieved by using a UPX compressed file that contains a negative virtual offset to a crafted PE header.