Andre Protas

**Name of the Vulnerable Software and Affected Versions** GNU Mailman versions prior to 2.1.35 **Description** The issue allows remote Privilege Escalation. A certain `csrf token` value is derived from the `admin password`, and may be useful in conducting a brute-force attack against that password. **Recommendations** For GNU Mailman versions prior to 2.1.35, update to version 2.1.35 or later to resolve the issue. As a temporary workaround, consider restricting access to the admin interface to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** GNU Mailman versions prior to 2.1.35 **Description** The issue allows remote Privilege Escalation. A `csrf token` value is not specific to a single user account. An attacker can obtain a value within the context of an unprivileged user account, and then use that value in a CSRF attack against an admin, potentially leading to account takeover. **Recommendations** For versions prior to 2.1.35, update to version 2.1.35 or later to resolve the issue. As a temporary workaround, consider restricting access to admin accounts or implementing additional CSRF protection measures until a patch is applied.

**Name of the Vulnerable Software and Affected Versions** Apache Spark versions 1.3.x through master **Description** The issue concerns a convenience script in Apache Spark's Apache Maven-based build that downloads and runs a zinc server to speed up compilation. This server accepts connections from external hosts by default. A specially-crafted request to the zinc server could cause it to reveal information in files readable to the developer account running the build. Note that this issue does not affect end users of Spark, only developers building Spark from source code. **Recommendations** For versions 1.3.x through master, consider disabling the zinc server or restricting its access to prevent external connections until a patch is available. As a temporary workaround, restrict access to the `build/mvn` script to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** BlackBerry Application Web Loader version 1.0 **Description** The issue is related to multiple stack-based buffer overflows in the Research in Motion RIM AxLoader ActiveX control. This can be exploited by remote attackers to execute arbitrary code, potentially through the use of the `load` or `loadJad` method. **Recommendations** For BlackBerry Application Web Loader version 1.0, as a temporary workaround, consider disabling the `load` and `loadJad` methods until a patch is available. Restrict access to the AxLoader ActiveX control to minimize the risk of exploitation.

Name of the Vulnerable Software and Affected Versions: NetCamPlayerWeb11gv2.ocx version prior to firmware 1.25 Description: The issue is related to a stack-based buffer overflow in the SetSource method of the NetCamPlayerWeb11gv2 ActiveX control. This allows remote attackers to execute arbitrary code via long invalid arguments. Recommendations: For versions prior to firmware 1.25, update to firmware 1.25 or later to resolve the issue. As a temporary workaround, consider restricting access to the SetSource method in the NetCamPlayerWeb11gv2 ActiveX control until the update is applied.

**Name of the Vulnerable Software and Affected Versions** Free Lossless Audio Codec (FLAC) versions prior to 1.2.1 **Description** The issue allows user-assisted remote attackers to force a client to download arbitrary files via the MIME-Type URL flag for the FLAC image file in a crafted .FLAC file. **Recommendations** For versions prior to 1.2.1, update to version 1.2.1 or later to resolve the issue.