Drew Hintz

A remote code execution issue exists due to the way Microsoft Word handles specially crafted files, allowing an attacker to execute arbitrary code or cause a denial of service (memory corruption) via crafted RTF data. This issue has been exploited in the wild. An attacker who successfully exploits this issue could run arbitrary code as the current user, potentially taking complete control of the affected system if the current user has administrative rights.

The issue is related to an elevation of privilege vulnerability that allows remote attackers to inject arbitrary web script or HTML via a crafted string. This vulnerability enables cross-site scripting (XSS) attacks, which can be exploited by an attacker to run a script in the security context of the current user.

The issue allows remote attackers to inject arbitrary web script or HTML via a crafted string. This is due to an elevation of privilege vulnerability in the way that HTML strings are sanitized. An attacker who successfully exploited this vulnerability could perform cross-site scripting attacks and run script in the security context of the logged-on user.

A remote code execution issue exists due to insufficient bounds checking when processing specially crafted ICMPv6 Router Advertisement packets. This allows an anonymous attacker to execute arbitrary code via crafted packets. An attacker who successfully exploits this issue could take complete control of an affected system, enabling them to install programs, view, change, or delete data, or create new accounts with full user rights.

A remote code execution issue exists due to improper handling of local fragmentation of Encapsulating Security Payload (ESP) over UDP packets when a custom network driver is used. This allows remote attackers to execute arbitrary code via crafted packets. An attacker who successfully exploits this issue could take complete control of an affected system, enabling them to install programs, view, change, or delete data, or create new accounts with full user rights.

The issue arises from insufficient bounds checking in the TCP/IP implementation when processing specially crafted ICMPv6 Route Information packets, allowing remote attackers to execute arbitrary code. This could enable an attacker to take complete control of an affected system, potentially leading to the installation of programs, viewing, changing, or deleting data, or creating new accounts with full user rights.