Ricardo Narvaja

Um sequestro de DLL causado pelo remapeamento de unidades combinado com o envenenamento do cache de ativação no Microsoft Windows permite que um invasor mal-intencionado autenticado eleve um processo de integridade média para um processo de alta integridade sem a intervenção de um prompt do UAC. Esse problema pode ser explorado para contornar o controle de acesso do usuário e obter privilégios totais do sistema. A vulnerabilidade está sendo explorada ativamente.

A Denial of Service in the CLFS.sys driver allows a malicious authenticated low-privilege user to cause a Blue Screen of Death via a forced call to the `KeBugCheckEx` function. The vulnerability is caused by improper validation of specified quantities in input data, leading to an unrecoverable inconsistency. This flaw can be exploited to crash systems repeatedly, disrupting operations. The estimated number of potentially affected devices worldwide is not specified.

A stack-based buffer overflow issue allows remote attackers to execute arbitrary code via the `UserName` parameter.

A stack-based buffer overflow issue allows remote attackers to execute arbitrary code via the `password` parameter.

A buffer overflow issue allows remote attackers to execute arbitrary code via a crafted PCT file.

The issue allows user-assisted remote attackers to cause a denial of service and execute arbitrary code via a long string in a version attribute of an `ispXCF` element in an `.xcf` file.

The issue allows remote attackers to execute arbitrary code via a crafted width in an NSV file. This is related to the libdirectx plugin.dll component.

A remote code execution issue exists in the way Word handles specially crafted Word files, potentially allowing arbitrary code execution if a user opens a malformed file. This could be triggered by a crafted lcbPlcfBkfSdt field in the File Information Block (FIB), bypassing an initialization step and causing an "arbitrary free." Users with fewer user rights on the system may be less impacted than those operating with administrative rights.