Pengsu Cheng

Esta vulnerabilidade permite que invasores remotos executem código arbitrário nas instalações afetadas. É necessária a interação do usuário, que deve visitar uma página maliciosa ou abrir um arquivo malicioso. A falha existe no tratamento de arquivos PSD devido à falta de validação adequada dos dados fornecidos pelo usuário, resultando em uma gravação além do fim de uma estrutura alocada. Um invasor pode aproveitar isso para executar código no contexto do processo atual.

The issue is related to an out-of-bounds read operation in memory, which can be exploited by a remote attacker to gain unauthorized access to protected information. This can lead to information disclosure.

The issue is related to an information disclosure vulnerability in the Windows GDI component, which improperly discloses the contents of its memory. This can be exploited by attackers to obtain sensitive information using a specially crafted document. The vulnerability is associated with errors in the mechanisms for handling objects in memory.

The issue is an out-of-bounds read that could lead to information disclosure. Successful exploitation allows attackers to obtain sensitive information.

A buffer overflow vulnerability exists in the Microsoft JET Database Engine that could allow remote code execution on an affected system. This issue can be exploited by using a specially crafted Excel file, potentially allowing an attacker to execute arbitrary code. The estimated number of potentially affected devices worldwide is not specified.

Name of the Vulnerable Software and Affected Versions: Apple Safari versions prior to 4.0 Description: A cross-site scripting (XSS) issue exists due to the improper escaping of HTML attributes, allowing user-assisted remote attackers to inject arbitrary web script or HTML and read local files. Recommendations: For versions prior to 4.0, update to version 4.0 or later to resolve the issue.