Vladimir Meier

**Nome do Software Vulnerável e Versões Afetadas** Firefox versões anteriores a 154 Firefox ESR versões anteriores a 153.1 Thunderbird versões anteriores a 154 Thunderbird versões anteriores a 153.1 **Description** Ocorre um overflow de inteiro no componente Graphics. Um overflow de inteiro é uma condição em que uma operação aritmética tenta criar um valor numérico que está fora do intervalo que pode ser representado com um determinado número de bits. **Recommendations** Atualize o Firefox para a versão 154. Atualize o Firefox ESR para a versão 153.1. Atualize o Thunderbird para a versão 154. Atualize o Thunderbird para a versão 153.1.

**Name of the Vulnerable Software and Affected Versions** Video Station versions prior to 5.7.2 **Description** An OS command injection issue has been reported, potentially allowing users to execute commands via a network. The vulnerability is related to the failure to neutralize special elements used in an OS command. If exploited, it could enable a remote attacker to execute arbitrary commands. **Recommendations** For versions prior to 5.7.2, update to version 5.7.2 or later to resolve the issue. As a temporary workaround, consider restricting network access to Video Station until the update is applied.

**Name of the Vulnerable Software and Affected Versions** Video Station versions prior to 5.7.2 **Description** A SQL injection issue affects Video Station, related to a lack of protection against SQL query structure attacks. This could allow a remote attacker to execute arbitrary code by injecting malicious code via a network. **Recommendations** For versions prior to 5.7.2, update to version 5.7.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the SQL query functionality until a patch is applied.