Holger Fuhrmannek

O problema está relacionado ao processamento de arquivos criados com intenção maliciosa, o que pode levar à corrupção da pilha (heap).

A buffer overflow issue was addressed with improved bounds checking. This issue may lead to an unexpected app termination or arbitrary code execution when parsing an office document. The exploitation of this issue may allow an attacker to cause a denial of service or execute arbitrary code.

A local attacker can trick the Mozilla Maintenance Service into applying an unsigned update file by pointing the service at an update file on a malicious SMB server. The update file can be replaced after the signature check, before the use, because the write-lock requested by the service does not work on a SMB server. This issue requires local system access and only affects Windows, with other operating systems not being affected.

The issue is related to a use-after-free in `ScriptLoadContext` due to uncancelled module load requests. This can potentially allow a remote attacker to execute arbitrary code.

A falha permite que um aplicativo contorne as preferências de privacidade. Ela foi corrigida com verificações aprimoradas.

**Nome do software vulnerável e versões afetadas: Versões do ILIAS anteriores à 5.3.19 Versões do ILIAS anteriores à 5.4.12 Versões do ILIAS anteriores à 6.0 Descrição: Uma falha de divulgação de informações permite que invasores remotos autenticados obtenham o caminho dos dados de upload por meio de um upload no espaço de trabalho. Recomendações: Para versões anteriores à 5.3.19, atualize para a versão 5.3.19 ou posterior. Para versões anteriores à 5.4.12, atualize para a versão 5.4.12 ou posterior. Para versões anteriores à 6.0, atualize para a versão 6.0 ou posterior.

Um problema de estouro de buffer foi corrigido com o aprimoramento do gerenciamento de memória. O processamento de um arquivo USD criado de forma maliciosa pode levar ao encerramento inesperado do aplicativo ou à execução de código arbitrário.

Um problema de estouro de buffer foi corrigido com o aprimoramento do gerenciamento de memória. O processamento de um arquivo USD criado de forma maliciosa pode levar ao encerramento inesperado do aplicativo ou à execução de código arbitrário.

Um problema de estouro de buffer foi corrigido com o aprimoramento do gerenciamento de memória. O processamento de um arquivo USD criado de forma maliciosa pode levar ao encerramento inesperado do aplicativo ou à execução de código arbitrário.

Um problema de estouro de buffer foi corrigido com o aprimoramento do gerenciamento de memória. O processamento de um arquivo USD criado de forma maliciosa pode levar ao encerramento inesperado do aplicativo ou à execução de código arbitrário.

Um problema de estouro de buffer foi corrigido com o aprimoramento do gerenciamento de memória. O processamento de um arquivo USD criado de forma maliciosa pode levar ao encerramento inesperado do aplicativo ou à execução de código arbitrário.

The issue is related to the lack of integrity checks in the Mozilla Maintenance Service for Windows, which can be exploited to escalate privileges. This can occur when the Firefox installer allows the browser to be installed in a custom, user-writable location, making it vulnerable to manipulation by unprivileged users or malware. If the Maintenance Service is altered to update this unprotected location and the updated service has been modified, it can run with elevated privileges during the update process. This attack requires local system access and only affects Windows.

The issue is related to an out-of-bounds write that can be triggered when the Mozilla Updater opens a MAR format file containing a very long item filename, potentially leading to a crash. This can be exploited by running the Mozilla Updater manually on the local system with a malicious MAR file. The vulnerability may allow an attacker to execute arbitrary code using a specially crafted .MAR file.

Name of the Vulnerable Software and Affected Versions: Bugzilla versions prior to 4.4 Description: A security issue allows a third-party website to access restricted information available to a user through the image generation feature in the report.cgi module. Recommendations: For versions prior to 4.4, update to version 4.4 or later to resolve the issue.

The issue arises from the Mozilla Maintenance Service's "helper.exe" application creating a temporary directory that can be written to by non-privileged users. This can be exploited by creating a junction, a form of symbolic link, allowing protected files in the target directory to be deleted by the Mozilla Maintenance Service, which has privileged access. This attack requires local system access and is specific to Windows, with other operating systems not being affected.

The issue allows a malicious user to manipulate files in the installation directory and escalate privileges by altering the location of the original file through a special path passed to the `callback` parameter via the Mozilla Maintenance Service. This requires local system access and only affects Windows, with other operating systems not being affected.

The issue is related to an out-of-bounds read in the Graphite2 Library. It occurs in the `graphite2::Silf::readGraphite` function.

The issue is related to an out-of-bounds read in the Graphite2 Library. It occurs in the `graphite2::Pass::readPass` function, which suggests a problem with how data is accessed and processed.

The issue is related to the use of uninitialized memory in the Graphite2 library. Specifically, it affects the graphite2::GlyphCache::Loader::read glyph function.

Name of the Vulnerable Software and Affected Versions: Graphite 2 versions prior to 54 Mozilla Firefox versions prior to 54 Mozilla Firefox ESR versions prior to 54 Description: The issue is caused by a heap-based buffer overflow in the lz4::decompress function of the Graphite 2 library. This can be exploited by a remote attacker to cause a denial of service or execute arbitrary code. Recommendations: For Graphite 2 versions prior to 54, update to version 54 or later to resolve the issue. For Mozilla Firefox versions prior to 54, update to version 54 or later to resolve the issue. For Mozilla Firefox ESR versions prior to 54, update to version 54 or later to resolve the issue.