J00Ru

Foi encontrada uma vulnerabilidade problemática no FFmpeg, afetando a função `decode pulses`. Esse problema leva à corrupção de memória e pode ser iniciado remotamente.

Uma falha crítica afeta a função `decode slice header` do arquivo `libavcodec/h64.c`, levando à corrupção de memória. O ataque pode ser executado remotamente.

Foi detectada uma falha na função `decode frame` do arquivo `libavcodec/ansi.c`. Essa falha leva a um erro de conversão de inteiros e pode ser explorada remotamente.

Foi identificada uma falha no FFmpeg que afeta a função `add yblock` do arquivo `libavcodec/snow.h`. Essa falha leva à corrupção de memória e pode ser explorada remotamente.

Foi detectado um problema no FFmpeg. Ele está relacionado a uma função desconhecida no arquivo libavcodec/dxtroy.c, o que leva a um erro de conversão de inteiros. Essa vulnerabilidade pode ser explorada remotamente.

Foi detectado um problema que afeta a função `msrle decode frame` do arquivo libavcodec/msrle.c. Essa falha leva à corrupção de memória e pode ser explorada remotamente.

The issue is related to a heap-based buffer over-read in the `tt cmap14 validate` function located in `sfnt/ttcmap.c`.

The issue is related to the zlib component in the Compression module, which fails to initialize memory for a specific data structure. This allows remote attackers to execute arbitrary code via a crafted web site.

The issue concerns the `t42 parse encoding` function in `type42/t42parse.c`, which does not properly update the current position for immediates-only mode. This allows remote attackers to cause a denial of service, specifically an infinite loop, by providing a Type42 font.

The issue is related to several functions in FreeType, including `t1 parse font matrix`, `cid parse font matrix`, `t42 parse font matrix`, and `ps parser load field`, which do not check return values. This allows remote attackers to cause a denial of service, resulting in uninitialized memory access and application crash, or possibly have other unspecified impacts through a crafted font.

win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT allows local users to gain privileges via a crafted application, aka "Win32k Multiple Fetch Vulnerability," a different vulnerability than CVE-2013-1342, CVE-2013-1343, CVE-2013-1344, and CVE-2013-3864.

win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT allows local users to gain privileges via a crafted application, aka "Win32k Multiple Fetch Vulnerability," a different vulnerability than CVE-2013-1342, CVE-2013-1343, CVE-2013-1344, and CVE-2013-3865.

Elevation of privilege issues exist due to the Windows kernel-mode driver's improper handling of objects in memory. An attacker who successfully exploits these issues could gain elevated privileges and read arbitrary amounts of kernel memory.

win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT allows local users to gain privileges via a crafted application, aka "Win32k Multiple Fetch Vulnerability," a different vulnerability than CVE-2013-1342, CVE-2013-1343, CVE-2013-3864, and CVE-2013-3865.

win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT allows local users to gain privileges via a crafted application, aka "Win32k Multiple Fetch Vulnerability," a different vulnerability than CVE-2013-1342, CVE-2013-1344, CVE-2013-3864, and CVE-2013-3865.

The NT Virtual DOS Machine (NTVDM) subsystem in the kernel in Microsoft Windows XP SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, Windows 7 SP1, and Windows 8 on 32-bit platforms does not properly validate kernel-memory addresses, which allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted application, aka "Windows Kernel Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3196 and CVE-2013-3198.

The NT Virtual DOS Machine (NTVDM) subsystem in the kernel in Microsoft Windows XP SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, Windows 7 SP1, and Windows 8 on 32-bit platforms does not properly validate kernel-memory addresses, which allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted application, aka "Windows Kernel Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3196 and CVE-2013-3197.

An issue exists where the Windows kernel does not properly handle objects in memory, allowing local users to obtain sensitive information from kernel memory. This could be achieved via a crafted application.

The issue is related to a race condition in the win32k.sys kernel-mode driver, which allows local users to gain privileges via a crafted application. This is due to improper handling of objects in memory. An attacker who successfully exploits this could gain elevated privileges and read arbitrary amounts of kernel memory.

A race condition in the win32k.sys kernel-mode driver allows local users to gain privileges and read the contents of arbitrary kernel memory locations via a crafted application.