Chris Evans

The issue allows an attacker to leak sensitive information from process memory space due to the use of uninitialized memory in the RLE decoder. This can be exploited through remote attacks against code in a long-running server process that converts image data on behalf of multiple users. The problem is caused by a missing initialization step in the `ReadRLEImage` function in `coders/rle.c`.

The issue allows local users to cause a denial of service, resulting in a process crash due to a divide by zero error.

A stack-based buffer overflow issue exists.

The issue allows remote attackers to write to arbitrary memory locations, potentially leading to exploitation.

The issue is related to the mishandling of unspecified integer values.

The issue allows remote attackers to generate out of bounds 8-bit values.

The issue allows remote attackers to cause a denial of service, resulting in an out-of-bounds write and crash, via a crafted series of skip and count pairs in the FLIC decoder.

The issue is related to a heap-based buffer overflow in the FLIC decoder. This can be exploited by providing a `skip count` that exceeds the initialized buffer, potentially allowing remote attackers to execute arbitrary code or cause the application to crash.

The issue is related to a heap-based buffer overflow in the FLIC decoder, specifically in the flx decode delta fli function. This can be exploited by remote attackers to execute arbitrary code or cause the application to crash via the `start line` parameter.

The issue is related to a heap-based buffer overflow in the FLIC decoder. This can be exploited by providing a `write count` that exceeds the initialized buffer, potentially allowing remote attackers to execute arbitrary code or cause the application to crash.

The issue concerns the vmnc decoder in the gstreamer, which fails to initialize the render canvas. This allows remote attackers to obtain sensitive information. An example of exploitation is through thumbnailing a simple 1-frame vmnc movie that does not draw to the allocated render canvas.

The issue is related to an integer overflow in the vmnc decoder, which can be exploited by remote attackers to cause a denial of service (crash) by providing large width and height values, triggering a buffer overflow.

The issue is related to the WebKit component in Apple iOS, which has inadequate access control. This allows remote attackers to bypass the Same Origin Policy by creating a crafted web site. The problem stems from WebKit not properly selecting the cases in which a Cascading Style Sheets (CSS) document is required to have the text/css content type.

The issue is related to a heap-based buffer overflow in the dynamic memory of Adobe Flash Player, Adobe AIR, Adobe AIR SDK, and Adobe AIR SDK & Compiler, allowing attackers to execute arbitrary code via unspecified vectors. This can be exploited by attackers to gain control over the affected system.

The issue is related to a stack consumption problem in the parse rock ridge inode internal function, allowing local users to cause a denial of service through crafted iso9660 images. This can lead to uncontrolled recursion and potentially cause a system crash or reboot.

The issue allows local users to cause a denial of service, resulting in an unkillable mount process. This can be achieved by using a crafted iso9660 image with a self-referential CL entry, which affects the `parse rock ridge inode internal` function in `fs/isofs/rock.c`.

The issue arises from improper management of the interaction between the browser process and renderer processes during authorization of the loading of a plug-in. This makes it easier for remote attackers to bypass intended access restrictions via vectors involving a blocked plug-in.

The issue is related to improper memory management in libxslt, which could allow remote attackers to cause a denial of service, potentially leading to an application crash. This can be achieved through a crafted XSLT expression that is not properly identified during XPath navigation. The problem is associated with the `xsltCompileLocationPathPattern` function in libxslt/pattern.c and the `xsltGenerateIdFunction` function in libxslt/functions.c. Exploitation of the vulnerabilities may lead to breaches of confidentiality, integrity, and availability of protected information and can be performed remotely.

The issue is related to the handling of XSL transforms and the xmlNs data structure in include/libxml/tree.h. It allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted document. Multiple vulnerabilities in the libxml2 package can lead to violations of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited remotely.

The issue is related to a heap-based buffer overflow in the get sos function in jdmarker.c, which can be triggered by a large component count in the header of a JPEG image. This can cause a denial of service, resulting in an application crash, and potentially allow the execution of arbitrary code. The exploitation of this issue can be done remotely.