J00Ru

**Nome do software vulnerável e versões afetadas** FFmpeg versão 2.0 **Descrição** Foi encontrada uma vulnerabilidade problemática no FFmpeg, afetando a função `decode pulses`. Esse problema leva à corrupção de memória e pode ser iniciado remotamente. **Recomendações** Para o FFmpeg versão 2.0, recomenda-se aplicar um patch para corrigir esse problema. Como solução alternativa temporária, considere desativar a função `decode pulses` até que um patch esteja disponível.

**Nome do software vulnerável e versões afetadas** FFmpeg versão 2.0 **Descrição** Uma falha crítica afeta a função `decode slice header` do arquivo `libavcodec/h64.c`, levando à corrupção de memória. O ataque pode ser executado remotamente. **Recomendações** Para o FFmpeg versão 2.0, aplique um patch para corrigir este problema. Como solução temporária, considere restringir o acesso à função `decode slice header` até que um patch esteja disponível.

**Nome do software vulnerável e versões afetadas** FFmpeg versão 2.0 **Descrição** Foi detectada uma falha na função `decode frame` do arquivo `libavcodec/ansi.c`. Essa falha leva a um erro de conversão de inteiros e pode ser explorada remotamente. **Recomendações** Para corrigir essa falha, recomenda-se aplicar um patch.

**Nome do software vulnerável e versões afetadas** FFmpeg versão 2.0 **Descrição** Foi identificada uma falha no FFmpeg que afeta a função `add yblock` do arquivo `libavcodec/snow.h`. Essa falha leva à corrupção de memória e pode ser explorada remotamente. **Recomendações** Para o FFmpeg versão 2.0, recomenda-se aplicar um patch para corrigir este problema. Como solução temporária, considere desativar a função `add yblock` até que um patch esteja disponível.

**Nome do software vulnerável e versões afetadas** FFmpeg versão 2.0 **Descrição** Foi detectado um problema no FFmpeg. Ele está relacionado a uma função desconhecida no arquivo libavcodec/dxtroy.c, o que leva a um erro de conversão de inteiros. Essa vulnerabilidade pode ser explorada remotamente. **Recomendações** Para o FFmpeg versão 2.0, recomenda-se aplicar um patch para corrigir este problema. Como solução temporária, considere restringir o acesso à função afetada no arquivo libavcodec/dxtroy.c até que um patch esteja disponível.

**Nome do software vulnerável e versões afetadas** FFmpeg versão 2.0 **Descrição** Foi detectado um problema que afeta a função `msrle decode frame` do arquivo libavcodec/msrle.c. Essa falha leva à corrupção de memória e pode ser explorada remotamente. **Recomendações** Para o FFmpeg versão 2.0, recomenda-se aplicar um patch para corrigir este problema. Como solução temporária, considere desativar a função `msrle decode frame` até que um patch esteja disponível.

**Name of the Vulnerable Software and Affected Versions** FreeType versions prior to 2.6.2 **Description** The issue is related to a heap-based buffer over-read in the `tt cmap14 validate` function located in `sfnt/ttcmap.c`. **Recommendations** For versions prior to 2.6.2, update to version 2.6.2 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Apple iOS versions prior to 9.2 Apple OS X versions prior to 10.11.2 Apple tvOS versions prior to 9.1 Apple watchOS versions prior to 2.1 **Description** The issue is related to the zlib component in the Compression module, which fails to initialize memory for a specific data structure. This allows remote attackers to execute arbitrary code via a crafted web site. **Recommendations** For Apple iOS versions prior to 9.2, update to version 9.2 or later. For Apple OS X versions prior to 10.11.2, update to version 10.11.2 or later. For Apple tvOS versions prior to 9.1, update to version 9.1 or later. For Apple watchOS versions prior to 2.1, update to version 2.1 or later.

**Name of the Vulnerable Software and Affected Versions** FreeType versions prior to 2.5.4 **Description** The issue concerns the `t42 parse encoding` function in `type42/t42parse.c`, which does not properly update the current position for immediates-only mode. This allows remote attackers to cause a denial of service, specifically an infinite loop, by providing a Type42 font. **Recommendations** For versions prior to 2.5.4, update to version 2.5.4 or later to resolve the issue. As a temporary workaround, consider restricting the use of Type42 fonts until the update is applied.

**Name of the Vulnerable Software and Affected Versions** FreeType versions prior to 2.5.4 **Description** The issue is related to several functions in FreeType, including `t1 parse font matrix`, `cid parse font matrix`, `t42 parse font matrix`, and `ps parser load field`, which do not check return values. This allows remote attackers to cause a denial of service, resulting in uninitialized memory access and application crash, or possibly have other unspecified impacts through a crafted font. **Recommendations** For versions prior to 2.5.4, update to version 2.5.4 or later to resolve the issue. As a temporary workaround, consider restricting the use of the vulnerable functions until a patch is available. Avoid using crafted fonts that could exploit this issue until the update is applied.

win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT allows local users to gain privileges via a crafted application, aka "Win32k Multiple Fetch Vulnerability," a different vulnerability than CVE-2013-1342, CVE-2013-1343, CVE-2013-1344, and CVE-2013-3864.

win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT allows local users to gain privileges via a crafted application, aka "Win32k Multiple Fetch Vulnerability," a different vulnerability than CVE-2013-1342, CVE-2013-1343, CVE-2013-1344, and CVE-2013-3865.

**Name of the Vulnerable Software and Affected Versions** Windows (affected versions not specified) **Description** Elevation of privilege issues exist due to the Windows kernel-mode driver's improper handling of objects in memory. An attacker who successfully exploits these issues could gain elevated privileges and read arbitrary amounts of kernel memory. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this issue.

win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT allows local users to gain privileges via a crafted application, aka "Win32k Multiple Fetch Vulnerability," a different vulnerability than CVE-2013-1342, CVE-2013-1343, CVE-2013-3864, and CVE-2013-3865.

win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT allows local users to gain privileges via a crafted application, aka "Win32k Multiple Fetch Vulnerability," a different vulnerability than CVE-2013-1342, CVE-2013-1344, CVE-2013-3864, and CVE-2013-3865.

The NT Virtual DOS Machine (NTVDM) subsystem in the kernel in Microsoft Windows XP SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, Windows 7 SP1, and Windows 8 on 32-bit platforms does not properly validate kernel-memory addresses, which allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted application, aka "Windows Kernel Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3196 and CVE-2013-3198.

The NT Virtual DOS Machine (NTVDM) subsystem in the kernel in Microsoft Windows XP SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, Windows 7 SP1, and Windows 8 on 32-bit platforms does not properly validate kernel-memory addresses, which allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted application, aka "Windows Kernel Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3196 and CVE-2013-3197.

**Name of the Vulnerable Software and Affected Versions** Windows XP version SP3 Windows Server 2003 version SP2 Windows Vista version SP2 Windows Server 2008 version SP2 Windows 7 version SP1 Windows 8 on 32-bit platforms **Description** An issue exists where the Windows kernel does not properly handle objects in memory, allowing local users to obtain sensitive information from kernel memory. This could be achieved via a crafted application. **Recommendations** For Windows XP SP3, update to a newer version to mitigate the risk. For Windows Server 2003 SP2, update to a newer version to mitigate the risk. For Windows Vista SP2, update to a newer version to mitigate the risk. For Windows Server 2008 SP2, update to a newer version to mitigate the risk. For Windows 7 SP1, update to a newer version to mitigate the risk. For Windows 8 on 32-bit platforms, update to a newer version to mitigate the risk.

**Name of the Vulnerable Software and Affected Versions** Microsoft Windows Vista SP2 Microsoft Windows Server 2008 SP2 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2008 R2 SP1 Microsoft Windows 7 Gold Microsoft Windows 7 SP1 Microsoft Windows 8 Microsoft Windows Server 2012 Microsoft Windows RT **Description** The issue is related to a race condition in the win32k.sys kernel-mode driver, which allows local users to gain privileges via a crafted application. This is due to improper handling of objects in memory. An attacker who successfully exploits this could gain elevated privileges and read arbitrary amounts of kernel memory. **Recommendations** For Microsoft Windows Vista SP2, update to a newer version to mitigate the risk. For Microsoft Windows Server 2008 SP2, update to a newer version to mitigate the risk. For Microsoft Windows Server 2008 R2, update to a newer version to mitigate the risk. For Microsoft Windows Server 2008 R2 SP1, update to a newer version to mitigate the risk. For Microsoft Windows 7 Gold, update to a newer version to mitigate the risk. For Microsoft Windows 7 SP1, update to a newer version to mitigate the risk. For Microsoft Windows 8, update to a newer version to mitigate the risk. For Microsoft Windows Server 2012, update to a newer version to mitigate the risk. For Microsoft Windows RT, update to a newer version to mitigate the risk.

**Name of the Vulnerable Software and Affected Versions** Microsoft Windows XP versions SP2 through SP3 Microsoft Windows Server 2003 version SP2 Microsoft Windows Vista version SP2 Microsoft Windows Server 2008 versions SP2 through R2 SP1 Microsoft Windows 7 versions Gold through SP1 **Description** A race condition in the win32k.sys kernel-mode driver allows local users to gain privileges and read the contents of arbitrary kernel memory locations via a crafted application. **Recommendations** For Microsoft Windows XP versions SP2 through SP3, apply the patch provided by Microsoft to resolve the issue. For Microsoft Windows Server 2003 version SP2, apply the patch provided by Microsoft to resolve the issue. For Microsoft Windows Vista version SP2, apply the patch provided by Microsoft to resolve the issue. For Microsoft Windows Server 2008 versions SP2 through R2 SP1, apply the patch provided by Microsoft to resolve the issue. For Microsoft Windows 7 versions Gold through SP1, apply the patch provided by Microsoft to resolve the issue.