Gal De Leon

**Nome do software vulnerável e versões afetadas** Relatório de Erros do Windows (versões afetadas não especificadas) **Descrição** O problema está relacionado a restrições de acesso insuficientes no serviço Relatório de Erros do Windows do sistema operacional Windows. Isso pode permitir que um invasor eleve seus privilégios. Existe uma vulnerabilidade de elevação de privilégios que permite que invasores causem danos ao sistema. **Recomendações** No momento, não há informações sobre uma versão mais recente que contenha uma correção para essa vulnerabilidade.

**Nome do software vulnerável e versões afetadas** Microsoft Windows (versões afetadas não especificadas) **Descrição** O problema está relacionado ao serviço de Relatórios de Erros do Windows e é causado pelo tratamento inadequado de privilégios. Ele permite que um invasor eleve seus privilégios. A vulnerabilidade também está relacionada ao tratamento inadequado de links de arquivos e pastas pelo gerenciador do serviço de Relatórios de Erros do Windows. **Recomendações** No momento, não há informações sobre uma versão mais recente que contenha uma correção para esta vulnerabilidade.

**Name of the Vulnerable Software and Affected Versions** Windows Error Reporting (WER) (affected versions not specified) **Description** The issue is related to an information disclosure problem in the Windows Error Reporting (WER) service, which lacks protection for certain data. This could allow an attacker to gain unauthorized access to protected information using a specially crafted application. The vulnerability is also described as an elevation-of-privilege issue that affects the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows Jet Database Engine (affected versions not specified) **Description** A remote code execution issue exists due to the improper handling of objects in memory by the Windows Jet Database Engine. This can be exploited by remote attackers to execute arbitrary code on the system, potentially using a specially crafted file. The vulnerability is related to a buffer overflow in memory. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows Error Reporting (affected versions not specified) **Description** The issue is related to insufficient input validation in the Windows Error Reporting service of Windows operating systems. This can be exploited by an attacker to elevate their privileges by deleting a target file. The vulnerability allows attackers to affect the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows Jet Database Engine (affected versions not specified) **Description** The issue is related to a buffer overflow in memory, which can be exploited by using a specially crafted file, allowing an attacker to execute arbitrary code. This can affect the system and potentially lead to remote code execution. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Office Access Connectivity Engine (affected versions not specified) **Description** The issue is related to errors in handling objects in memory within the Microsoft Office Access Connectivity Engine. This can be exploited by a remote attacker to execute arbitrary code on a victim's system. The exploitation can occur when a victim opens a specially crafted file. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Windows Error Reporting (WER) (affected versions not specified) **Description** An elevation of privilege issue exists in the way Windows Error Reporting (WER) handles files. This vulnerability is related to insufficient access restrictions in the Windows Error Reporting service. Exploitation of this issue may allow an attacker to execute arbitrary code in kernel mode. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Jet Database Engine versions (affected versions not specified) **Description** The issue is related to a buffer overflow in memory, which can be exploited to execute arbitrary code. This can allow remote attackers to affect the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Jet Database Engine versions (affected versions not specified) **Description** The issue is related to a buffer overflow in memory, which can be exploited to execute arbitrary code. This can allow remote attackers to affect the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Jet Database Engine versions (affected versions not specified) **Description** The issue is related to a buffer underflow in memory, which can be exploited to execute arbitrary code. This can allow a remote attacker to affect the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft JET Database Engine (affected versions not specified) **Description** The issue is related to errors in processing objects in memory. It may allow an attacker to execute arbitrary code using a specially crafted file. Remote attackers can exploit this to execute arbitrary code and affect the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Office Access Connectivity Engine (affected versions not specified) **Description** A remote code execution issue exists due to improper handling of objects in memory by the Microsoft Office Access Connectivity Engine. This could allow a remote attacker to execute arbitrary code on a victim system by enticing the victim to open a specially crafted file. The vulnerability is related to a buffer overflow in memory operations. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows JET Database Engine (affected versions not specified) **Description** The issue is caused by a buffer overflow in memory, allowing an attacker to execute arbitrary code using a specially crafted file. Remote attackers can exploit this to execute arbitrary code and affect the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Microsoft JET Database Engine (affected versions not specified) Description: The issue exists due to errors in handling objects in memory within the Microsoft JET Database Engine of the Windows operating system. This can allow an attacker to execute arbitrary code using a specially crafted file. Remote attackers may exploit this to execute arbitrary code and affect the system. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Windows (affected versions not specified) Description: The issue is caused by a buffer overflow in the Windows Jet Database Engine component of the Windows operating system. This can be exploited by an attacker using a specially crafted file, potentially allowing them to execute arbitrary code. Remote attackers may also be able to execute arbitrary code and affect the system. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Microsoft JET Database Engine (affected versions not specified) Description: The issue exists due to errors in handling objects in memory within the Microsoft JET Database Engine of the Windows operating system. This can allow an attacker to execute arbitrary code using a specially crafted file. The vulnerability enables remote attackers to execute arbitrary code and affect the system. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Microsoft JET Database Engine (affected versions not specified) Description: The issue exists due to errors in handling objects in memory within the Microsoft JET Database Engine of the Windows operating system. This can allow an attacker to execute arbitrary code using a specially crafted file. Remote attackers may exploit this to execute arbitrary code and affect the system. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Office (affected versions not specified) Microsoft Office Compatibility Pack (affected versions not specified) Microsoft Word (affected versions not specified) **Description** The issue is caused by a buffer overflow in memory, allowing a remote attacker to execute arbitrary code. Exploitation requires a user to open a specially crafted file with an affected version of Microsoft Office or Microsoft WordPad software. If successfully exploited, an attacker could run arbitrary code in the context of the current user, potentially taking control of the affected system, installing programs, viewing, changing, or deleting data, or creating new accounts with full user rights. Users with fewer user rights on the system could be less impacted than those operating with administrative user rights. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Nome do Software Vulnerável e Versões Afetadas** Microsoft Office 2007 Microsoft Office 2010 Microsoft Office 2013 Microsoft Office 2016 Microsoft Office Compatibility Pack (versões afetadas não especificadas) Microsoft WordPad (versões afetadas não especificadas) **Descrição** Um problema de execução remota de código existe no Equation Editor do Microsoft Office e WordPad devido ao manuseio inadequado de objetos na memória, resultando em um estouro de buffer. Um invasor pode explorar isso induzindo um usuário a abrir um arquivo especialmente criado, permitindo a execução de código arbitrário no contexto do usuário atual. Se o usuário possuir privilégios administrativos, o invasor poderá assumir o controle total do sistema, podendo instalar software, modificar ou excluir dados e criar novas contas com direitos totais de usuário. Este problema foi explorado por múltiplos grupos de ameaças chineses desde o final de 2018. **Recomendações** No momento, não há informações sobre uma versão mais recente que contenha a correção para esta vulnerabilidade.