Bo Qu

**Nome do software vulnerável e versões afetadas** Versões do iOS anteriores à 15.3 Versões do iPadOS anteriores à 15.3 Versões do watchOS anteriores à 8.4 Versões do tvOS anteriores à 15.3 Versões do Safari anteriores à 15.3 Versões do macOS Monterey anteriores à 12.2 **Descrição** Um problema de validação foi corrigido com a melhoria da sanitização de entradas. O processamento de uma mensagem de e-mail criada de forma maliciosa pode levar à execução de código JavaScript arbitrário. O problema está relacionado à validação insuficiente de entradas, o que pode ser explorado por um invasor remoto para comprometer a integridade dos dados. **Recomendações** Para versões do iOS anteriores à 15.3, atualize para o iOS 15.3 ou posterior. Para versões do iPadOS anteriores à 15.3, atualize para o iPadOS 15.3 ou posterior. Para versões do watchOS anteriores à 8.4, atualize para o watchOS 8.4 ou posterior. Para versões do tvOS anteriores à 15.3, atualize para o tvOS 15.3 ou posterior. Para versões do Safari anteriores à 15.3, atualize para o Safari 15.3 ou posterior. Para versões do macOS Monterey anteriores à 12.2, atualize para o macOS Monterey 12.2 ou posterior.

**Nome do software vulnerável e versões afetadas** Microsoft Jet Red Database Engine e Access Connectivity Engine (versões afetadas não especificadas) **Descrição** O problema está relacionado ao gerenciamento incorreto da geração de código no Microsoft Jet Red Database Engine e no Access Connectivity Engine dos sistemas operacionais Microsoft Windows. Isso permite que um invasor remoto execute código arbitrário. **Recomendações** No momento, não há informações sobre uma versão mais recente que contenha uma correção para essa vulnerabilidade.

**Nome do software vulnerável e versões afetadas** Microsoft Office (versões afetadas não especificadas) **Descrição** Existe uma vulnerabilidade no Microsoft Office devido a uma validação insuficiente de entradas. A exploração dessa vulnerabilidade pode permitir que um invasor execute código arbitrário. **Recomendações** No momento, não há informações sobre uma versão mais recente que contenha uma correção para essa vulnerabilidade.

**Nome do software vulnerável e versões afetadas** Versões do macOS anteriores à 11.0.1 **Descrição** Um problema de acesso foi corrigido com restrições de acesso aprimoradas. O processamento de um documento criado com intenção maliciosa pode levar a um ataque de script entre sites. **Recomendações** Para versões anteriores à 11.0.1, atualize para o macOS Big Sur 11.0.1 para resolver o problema. Como solução temporária, considere evitar o processamento de documentos criados com intenção maliciosa até que a atualização seja aplicada.

**Nome do software vulnerável e versões afetadas: Windows Jet Database Engine (versões afetadas não especificadas) Descrição: Existe uma vulnerabilidade de execução remota de código devido ao tratamento inadequado de objetos na memória pelo Windows Jet Database Engine. Isso poderia permitir que um invasor executasse código arbitrário no sistema da vítima, induzindo-a a abrir um arquivo especialmente criado para esse fim. A vulnerabilidade também é descrita como uma vulnerabilidade de estouro de buffer no Microsoft JET Database Engine. A vulnerabilidade permite que invasores remotos executem código arbitrário e afetem o sistema. Recomendações: No momento, não há informações sobre uma versão mais recente que contenha uma correção para essa vulnerabilidade.

**Name of the Vulnerable Software and Affected Versions** WebKitGTK+ versions prior to 2.12.5-0ubuntu0.16.04.1 **Description** A large number of security issues were discovered in the WebKitGTK+ Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting attacks, denial of service attacks, and arbitrary code execution. **Recommendations** Update the system to the following package versions: gir1.2-javascriptcoregtk-4.0 - 2.12.5-0ubuntu0.16.04.1 libwebkit2gtk-4.0-37-gtk2 - 2.12.5-0ubuntu0.16.04.1 libjavascriptcoregtk-4.0-dev - 2.12.5-0ubuntu0.16.04.1 libwebkit2gtk-4.0-37 - 2.12.5-0ubuntu0.16.04.1 libjavascriptcoregtk-4.0-18 - 2.12.5-0ubuntu0.16.04.1 libwebkit2gtk-4.0-doc - 2.12.5-0ubuntu0.16.04.1 libjavascriptcoregtk-4.0-bin - 2.12.5-0ubuntu0.16.04.1 gir1.2-webkit2-4.0 - 2.12.5-0ubuntu0.16.04.1 libwebkit2gtk-4.0-dev - 2.12.5-0ubuntu0.16.04.1 Run `sudo pro fix USN-3079-1` to fix the vulnerability.

**Name of the Vulnerable Software and Affected Versions** Apple iOS versions prior to 9.3.2 Apple OS X versions prior to 10.11.5 Apple tvOS versions prior to 9.2.1 Apple watchOS versions prior to 2.2.1 **Description** The issue is caused by a buffer overflow in the OpenGL component. This can be exploited by a remote attacker using a specially crafted website, potentially allowing them to execute arbitrary code or cause a denial of service due to memory corruption. **Recommendations** For Apple iOS versions prior to 9.3.2, update to version 9.3.2 or later. For Apple OS X versions prior to 10.11.5, update to version 10.11.5 or later. For Apple tvOS versions prior to 9.2.1, update to version 9.2.1 or later. For Apple watchOS versions prior to 2.2.1, update to version 2.2.1 or later.

**Name of the Vulnerable Software and Affected Versions** iOS and Safari (affected versions not specified) **Description** The issue is caused by a buffer overflow in the WebKit component. It can be exploited by a remote attacker using a specially crafted website, potentially allowing them to execute arbitrary code or cause a denial of service (memory corruption). **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Apple iOS versions prior to 9.2 Apple OS X versions prior to 10.11.2 Apple tvOS versions prior to 9.1 Apple watchOS versions prior to 2.1 **Description** The issue is caused by a buffer overflow in the OpenGL component, allowing remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. **Recommendations** For Apple iOS versions prior to 9.2, update to version 9.2 or later. For Apple OS X versions prior to 10.11.2, update to version 10.11.2 or later. For Apple tvOS versions prior to 9.1, update to version 9.1 or later. For Apple watchOS versions prior to 2.1, update to version 2.1 or later.

**Name of the Vulnerable Software and Affected Versions** Apple iOS versions prior to 9.2 Apple OS X versions prior to 10.11.2 Apple tvOS versions prior to 9.1 Apple watchOS versions prior to 2.1 **Description** The issue is caused by a buffer overflow in the OpenGL component, allowing remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. **Recommendations** For Apple iOS versions prior to 9.2, update to version 9.2 or later. For Apple OS X versions prior to 10.11.2, update to version 10.11.2 or later. For Apple tvOS versions prior to 9.1, update to version 9.1 or later. For Apple watchOS versions prior to 2.1, update to version 2.1 or later.

**Name of the Vulnerable Software and Affected Versions** Microsoft Internet Explorer versions 6 through 8 **Description** The issue allows remote attackers to execute arbitrary code or cause a denial of service due to memory corruption via a crafted web site. This is caused by improper access to objects in memory, which could corrupt memory and allow an attacker to execute arbitrary code in the context of the current user. **Recommendations** For Microsoft Internet Explorer versions 6 through 8, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Internet Explorer version 10 **Description** The issue allows remote attackers to execute arbitrary code or cause a denial of service due to memory corruption via a crafted web site. This is caused by incorrect access to objects in memory, which can lead to a memory error and allow an attacker to execute arbitrary code in the context of the current user. **Recommendations** For Microsoft Internet Explorer version 10, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Internet Explorer (affected versions not specified) **Description** The issue is related to remote code execution due to improper access to objects in memory. This could lead to memory corruption, allowing an attacker to execute arbitrary code in the context of the current user. No information is provided about the estimated number of potentially affected devices or real-world incidents where this issue was exploited. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Internet Explorer (affected versions not specified) **Description** The issue is related to incorrect access to objects in memory, which can cause a memory error and allow an attacker to execute arbitrary code in the context of the current user. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Internet Explorer (affected versions not specified) **Description** The issue is related to incorrect access to objects in memory, which can cause a memory error and allow an attacker to execute arbitrary code in the context of the current user. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Internet Explorer (affected versions not specified) **Description** The issue is related to incorrect access to objects in memory, which can cause memory errors and allow an attacker to execute arbitrary code in the context of the current user. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Internet Explorer (affected versions not specified) **Description** The issue is related to remote code execution due to improper access to objects in memory. This could lead to memory corruption, allowing an attacker to execute arbitrary code in the context of the current user. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Internet Explorer (affected versions not specified) **Description** The issue is related to remote code execution due to improper access to objects in memory. This could lead to memory corruption, allowing an attacker to execute arbitrary code in the context of the current user. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Internet Explorer (affected versions not specified) **Description** The issue is caused by a buffer overflow in memory, allowing a remote attacker to execute arbitrary code or cause a denial of service by using a specially crafted website. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Internet Explorer version 7 **Description** The issue is related to improper access to objects in memory, which could lead to memory corruption. This allows remote attackers to execute arbitrary code or cause a denial of service in the context of the current user. **Recommendations** For Microsoft Internet Explorer version 7, at the moment, there is no information about a newer version that contains a fix for this vulnerability.