Luis Merino

A vulnerabilidade está relacionada a um estouro de inteiro e a várias leituras de estouro de buffer no módulo libyara/modules/macho/macho.c do YARA. Isso poderia permitir que um invasor causasse negação de serviço ou divulgação de informações por meio de um arquivo Mach-O malicioso. A exploração dessa vulnerabilidade pode permitir que um invasor remoto acesse dados confidenciais e cause interrupção do serviço.

Existe um problema de corrupção de memória devido a verificações insuficientes no tratamento de entradas externas, permitindo que um invasor contorne as verificações de validade e escreva além dos limites de um buffer alocado dinamicamente.

A flaw in Thunderbird's implementation of iCal causes a stack buffer overflow in `icalrecur add bydayrules` when processing certain email messages, resulting in a potentially exploitable crash. The vulnerability can be exploited by a remote attacker to cause a denial of service.

A flaw in Thunderbird's implementation of iCal causes a type confusion in `icaltimezone get vtimezone properties` when processing certain email messages, resulting in a crash. The vulnerability is related to a lack of type checking of the passed object, which can be exploited by a remote attacker to cause a denial of service.

A flaw in the implementation of iCal in Thunderbird causes a heap buffer overflow in `parser get next char` when processing certain email messages, resulting in a potentially exploitable crash. This issue may allow a remote attacker to access confidential data, compromise its integrity, and cause a denial of service.

The issue is related to a heap buffer overflow in the `icalmemory strdup and dequote` function when processing certain email messages, potentially leading to a crash. This could allow a remote attacker to access confidential data, compromise its integrity, and cause a denial of service.

The issue allows remote attackers to execute arbitrary code via a dial-in session that provides a FAX page with the JPEG bit enabled. This is mishandled in the `FaxModem::writeECMData()` function in the faxd/CopyQuality.c++ file.