Chris Rohlf

Um problema de confusão de tipo existe devido ao manuseio inadequado da memória. O processamento de conteúdo web maliciosamente manipulado pode levar à execução de código arbitrário. A confusão de tipo ocorre quando um programa acessa um recurso usando um tipo diferente do pretendido, podendo causar corrupção de memória.

Um problema de use-after-free, que ocorre quando um programa continua a usar um ponteiro após ele ter sido liberado, foi corrigido com a melhoria do gerenciamento de memória. O processamento de conteúdo web maliciosamente manipulado pode levar à execução de código arbitrário.

Um problema de use-after-free, que ocorre quando um programa continua a usar um ponteiro após ele ter sido liberado, foi corrigido com a melhoria do gerenciamento de memória. O processamento de conteúdo web maliciosamente manipulado pode levar ao encerramento inesperado do processo.

The issue allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This is due to inline metadata in GarbageCollection.

The issue allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via vectors related to iTunes Store browsing.

A remote code execution issue exists due to improper initialization or deletion of an object in the IE8 Developer Toolbar, leading to memory corruption. This could be exploited by an attacker constructing a specially crafted Web page. When a user views this page, it could allow remote code execution, potentially giving the attacker the same user rights as the logged-on user. If the user has administrative rights, the attacker could take complete control of the system, enabling them to install programs, view, change, or delete data, or create new accounts with full user rights.

A remote code execution issue exists due to improper initialization or deletion of an object in the IE8 Developer Toolbar, leading to memory corruption. This could be exploited by an attacker constructing a specially crafted Web page. When a user views this Web page, it could allow remote code execution, potentially giving the attacker the same user rights as the logged-on user. If the user has administrative rights, the attacker could take complete control of the system, enabling them to install programs, view, change, or delete data, or create new accounts with full user rights.

The issue is related to multiple buffer overflows in the httplib parse sc header function. This allows remote attackers to execute arbitrary code via long Location and Server HTTP headers.

The issue is related to an integer underflow in the DecodeGRE function, which can be triggered by remote attackers sending crafted GRE packets. This may lead to the corruption of log files or the writing of sensitive information into log files.

The issue involves multiple vulnerabilities in various packages of the Debian GNU/Linux operating system, including libkscan-dev, kdegraphics-dev, xpdf-common, kviewshell, kdegraphics-dbg, kdegraphics-doc-html, kdvi, xpdf-reader, libkscan1, xpdf-utils, kdegraphics, and kdegraphics-kfile-plugins. These vulnerabilities can be exploited remotely, potentially leading to a breach of confidentiality, integrity, and availability of protected information. Specifically, an integer overflow in the ObjectStream::ObjectStream function in XRef.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1 might allow remote attackers to execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow.