Ryan Smith

The issue is related to the command-line cron implementation, which does not properly interact with IP blocking. This might allow remote attackers to bypass intended IP address restrictions by leveraging a configuration in which IP blocking was disabled to restore cron functionality.

The issue allows remote attackers to execute arbitrary code via vectors related to erroneous free operations after reading a variant from a stream and deleting this variant. This is related to the Active Template Library (ATL) in Microsoft Windows.

A remote code execution issue exists due to the improper restriction of `OleLoadFromStream` in instantiating objects from data streams. This allows remote attackers to execute arbitrary code via a crafted HTML document with an ATL component or control. The vulnerability is related to ATL headers and bypassing security policies. An attacker could exploit this by constructing a specially crafted Web page, potentially gaining the same user rights as the logged on user.

The issue is related to the Active Template Library (ATL) in Microsoft Visual Studio, which does not properly enforce string termination. This allows remote attackers to obtain sensitive information via a crafted HTML document with an ATL component or control that triggers a buffer over-read. The vulnerability could be exploited to disclose information in memory by manipulating a string to read extra data beyond its end. An attacker could run a malicious component or control to disclose information, forward user data to a third party, or access data on affected systems that is accessible to the logged-on user.

Um estouro de buffer baseado em pilha ocorre na função `CComVariant::ReadFromStream()` na Active Template Library (ATL), especificamente afetando o controle ActiveX MPEG2TuneRequest no arquivo `msvidctl.dll` no DirectShow. Um invasor remoto pode executar código arbitrário com os privilégios do usuário logado ao induzir um usuário a visualizar uma página web especialmente manipulada. Este problema foi explorado ativamente em julho de 2009.

Name of the Vulnerable Software and Affected Versions: Adobe Reader versions 7.0.0 through 7.1.2 Adobe Reader versions 8.0.0 through 8.1.5 Adobe Reader versions 9.0.0 through 9.1.1 Adobe Acrobat versions 7.0.0 through 7.1.2 Adobe Acrobat versions 8.0.0 through 8.1.5 Adobe Acrobat versions 9.0.0 through 9.1.1 Description: The issue is caused by an integer overflow in the FlateDecode filter, which can be triggered by a PDF file containing unspecified parameters. This can lead to a denial of service or possibly allow attackers to execute arbitrary code via a heap-based buffer overflow. Recommendations: For Adobe Reader versions 7.0.0 through 7.1.2, update to version 7.1.3 or later. For Adobe Reader versions 8.0.0 through 8.1.5, update to version 8.1.6 or later. For Adobe Reader versions 9.0.0 through 9.1.1, update to version 9.1.2 or later. For Adobe Acrobat versions 7.0.0 through 7.1.2, update to version 7.1.3 or later. For Adobe Acrobat versions 8.0.0 through 8.1.5, update to version 8.1.6 or later. For Adobe Acrobat versions 9.0.0 through 9.1.1, update to version 9.1.2 or later.

The issue allows remote attackers to execute arbitrary code via an email attachment with an LHA archive. This can occur in several scenarios, including when the LHA archive contains a file or directory with a long LHA extended header, when the "temporary pathname" field for decompressed output is greater than 2 bytes, or when the LHA archive has a long filename.

The issue is caused by multiple integer overflows that allow remote attackers to execute arbitrary code. This can occur via a large packet length field, which causes an overflow in the `ReadBuffer` function in files `BTPacket.cpp` and `EDPacket.cpp`, or a large packet, which causes a heap-based overflow in the `Write` function in `Packet.h`.