Joaquín Rodríguez Varela

The issue allows remote attackers to read arbitrary files via a crafted .mcl file. It is related to insufficient processing of video files in the Windows operating system.

The issue is related to a stack-based buffer overflow in the collectoragent.exe component. This can be exploited by remote attackers who send a large PROCESS HELLO message to the Message Dispatcher on TCP port 8000, potentially allowing them to execute arbitrary code.

A spoofing issue exists in the NETLOGON service, allowing remote attackers to spoof the computer name of a secure channel's endpoint and obtain sensitive session information by running a crafted application and leveraging the ability to sniff network traffic. This issue arises when the Netlogon service improperly establishes a secure communications channel belonging to a different machine with a spoofed computer name. To exploit this, an attacker must first be logged on to a domain-joined system and be able to observe network traffic, then run a specially crafted application to establish a secure channel connection belonging to a different computer, potentially using the established secure channel to obtain session-related information for the actual secure channel of the spoofed computer.