Shi Ji

Existe uma vulnerabilidade que permite a execução remota de código devido ao tratamento inadequado de objetos na memória pelo Microsoft Office Access Connectivity Engine. Isso poderia permitir que um invasor remoto executasse código arbitrário no sistema da vítima, induzindo-a a abrir um arquivo especialmente criado para esse fim.

The issue allows remote attackers to cause a denial of service, specifically an out-of-bounds read, via crafted input. This is due to a problem in the `read line table program` function in `dwarf line table reader common.c`.

The issue allows attackers to cause a denial of service, specifically an out-of-bounds read, by providing a specific input that ends with an asterisk (*). This is related to the chartorune function in MuJS.

The issue is related to a heap-based buffer overflow in the Fp toString function in jsfunction.c, which can be triggered by crafted input. This can cause a denial of service, resulting in a crash.

The issue allows context-dependent attackers to conduct denial of service attacks by using the malformed labeled break/continue in JavaScript approach, related to a NULL pointer dereference issue affecting the jscompile.c component.

The issue allows context-dependent attackers to obtain sensitive information by using the crafted JavaScript approach, related to a Buffer Over-read issue.

The issue allows context-dependent attackers to obtain sensitive information by using the "opname in crafted JavaScript file" approach, related to an "Out-of-Bounds read" issue affecting the `jsC dumpfunction` function in the jsdump.c component.