Alin Rad Pop

The issue is related to an integer signedness error that allows remote attackers to execute arbitrary code or cause a denial of service via a crafted QTVR movie file. This error occurs during the parsing of QTVRStringAtom in Apple QuickTime.

A remote code execution issue exists in the way affected components handle a specially crafted TrueType font file. This could allow remote code execution if a user opens a specially crafted TrueType font file. An attacker who successfully exploits this issue could take complete control of an affected system, then install programs, view, change, or delete data, or create new accounts with full user rights.

A remote code execution issue exists in the way Microsoft Excel handles specially crafted Excel files, potentially allowing attackers to execute arbitrary code via a crafted 400h substream in an Excel file, triggering a stack-based buffer overflow. This could enable an attacker to take complete control of an affected system, install programs, view, change, or delete data, or create new accounts with full user rights.

The issue is related to an integer overflow in the PICT image converter, allowing remote attackers to execute arbitrary code via a crafted PICT image in an Office document. A remote code execution vulnerability exists in the way that Microsoft Office allocates buffer size when handling PICT image files. If a user opens an Office document containing a specially crafted PICT image, an attacker could take complete control of an affected system, enabling them to install programs, view, change, or delete data, or create new accounts with full user rights.

The issue is a buffer overflow in Microsoft PowerPoint, allowing remote attackers to execute arbitrary code via a crafted PowerPoint 95 document. This can give an attacker full control over the system, enabling them to install programs, view, modify, and delete data, as well as create new accounts with full user rights.

A remote code execution issue exists due to improper validation of record information in Microsoft Excel, allowing attackers to execute arbitrary code via a crafted Excel document. This could enable an attacker to take complete control of an affected system, potentially leading to the installation of programs, viewing, changing, or deleting data, or creating new accounts with full user rights.

A double free vulnerability in Microsoft Word allows remote attackers to execute arbitrary code via a Word document with crafted List Format Override (LFO) records. This issue exists in the way that Microsoft Word handles pointers when parsing a specially crafted Word file, which could allow an attacker to take complete control of an affected system. The attacker could then install programs, view, change, or delete data, or create new accounts with full user rights. Users with fewer user rights on the system could be less impacted than users who operate with administrative user rights.

A use-after-free issue in the HTML parser allows remote attackers to execute arbitrary code via method calls that attempt to access freed objects in low-memory situations.

A stack-based buffer overflow issue exists, allowing remote attackers to execute arbitrary code. This is achieved by providing a long `fileName` parameter in the `goform/formExportDataLogs` endpoint.

A directory traversal issue exists in the goform/formExportDataLogs component, allowing remote attackers to overwrite arbitrary files and execute arbitrary code by using directory traversal sequences in the `fileName` parameter.

The issue is related to a heap-based buffer overflow in the JBIG2 filter, which can be triggered by a crafted PDF file containing JBIG2 text region segments with Huffman encoding. This can lead to memory corruption, causing a denial of service, or potentially allow remote attackers to execute arbitrary code.

The issue allows remote attackers to execute arbitrary code or cause a denial of service via crafted MS ADPCM encoded audio data in an AVI movie file.

The issue concerns multiple vulnerabilities in the libsndfile package, which can be exploited remotely to compromise the confidentiality, integrity, and availability of protected information. Specifically, a heap-based buffer overflow in the `aiff read header` function can be triggered by an AIFF file with an invalid header value, potentially allowing remote attackers to cause a denial of service or execute arbitrary code.

The issue is related to a heap-based buffer overflow in the `voc read header` function of libsndfile, which can be exploited by remote attackers via a VOC file with an invalid header value. This can cause a denial of service (application crash) and possibly allow the execution of arbitrary code. Additionally, there are multiple vulnerabilities in libsndfile prior to version 1.0.20 that can lead to breaches of confidentiality, integrity, and availability of protected information, and these can be exploited remotely.

A heap-based buffer overflow issue exists in the JBIG2 decoding library, specifically in the big2 decode symbol dict function, allowing remote attackers to execute arbitrary code via a crafted PDF file containing a JBIG2 symbol dictionary segment with a large run length value.

Heap-based buffer overflow in Adobe Acrobat Reader 9 before 9.1, 8 before 8.1.4, and 7 before 7.1.1 allows remote attackers to execute arbitrary code via a PDF file with a malformed JBIG2 symbol dictionary segment, a different vulnerability than CVE-2009-1061 and CVE-2009-1062.

Name of the Vulnerable Software and Affected Versions: Trend Micro HouseCall versions 6.51.0.1028 through 6.6.0.1278 Description: The issue allows remote attackers to download an arbitrary library file onto a client system via a "custom update server" argument. This can be leveraged for code execution by writing to a Startup folder. Recommendations: For versions 6.51.0.1028 through 6.6.0.1278, consider disabling the HouseCall ActiveX control until a patch is available. Restrict access to the custom update server argument to minimize the risk of exploitation.

The issue is related to an integer overflow in the Open function in modules/demux/wav.c, which can be exploited by remote attackers to execute arbitrary code via a large fmt chunk in a WAV file. This is due to errors in number processing.

Name of the Vulnerable Software and Affected Versions: Samba versions 3.0.0 through 3.0.26a Samba version 3.0.25b Description: The issue concerns multiple vulnerabilities in the Samba package, which can lead to a breach of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited remotely. A specific vulnerability is a stack-based buffer overflow in nmbd, related to handling GETDC logon server requests, allowing remote attackers to have an unknown impact via crafted GETDC mailslot requests. Recommendations: For Samba versions 3.0.0 through 3.0.26a, update to a version newer than 3.0.26a to resolve the issue. For Samba version 3.0.25b, update to a version newer than 3.0.25b to resolve the issue. As a temporary workaround, consider restricting access to the nmbd service until a patch is available.

The issue involves multiple vulnerabilities in various packages of the SUSE Linux Enterprise operating system, including cups, cups-libs, cups-libs-32bit, cups-libs-x86, cups-client, cups-debuginfo, cups-debugsource, and cups-devel. These vulnerabilities can be exploited remotely and may lead to a breach of confidentiality, integrity, and availability of protected information. Additionally, an integer overflow vulnerability was found in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, which may have unspecified impact related to memory allocation.