Dave Weinstein

**Name of the Vulnerable Software and Affected Versions** Corel WordPerfect (affected versions not specified) **Description** A heap-based buffer overflow issue exists in the Microsoft Word document conversion feature of Corel WordPerfect. This allows remote attackers to execute arbitrary code via a crafted document. There have been reports of this issue being exploited as a 0-day vulnerability, indicating it has been used in real-world attacks before a patch was available. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Adobe Acrobat Reader (affected versions not specified) **Description** The issue arises from the interaction with the JavaScript API, potentially allowing a remote attacker to bypass current access restriction rules. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** WebGate eDVR Manager (affected versions not specified) **Description** The issue is related to a heap-based buffer overflow in the SetConnectInfo function within the WESPPTZ.WESPPTZCtrl.1 ActiveX control. This allows remote attackers to execute arbitrary code via crafted arguments. There is no information provided about the estimated number of potentially affected devices or real-world incidents where this issue was exploited. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** WebGate eDVR Manager (affected versions not specified) **Description** The issue is related to a use-after-free vulnerability in the Connect function of the WESPMonitor.WESPMonitorCtrl.1 ActiveX control. This vulnerability allows remote attackers to execute arbitrary code via an invalid IP address and a page reload. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.