Cedric Halbronn

This issue allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this issue. The specific flaw exists within the `parse entries` function. The issue results from the lack of proper error handling when parsing AppleDouble entries. An attacker can leverage this issue to execute code in the context of root.

The issue concerns a PJL directory traversal vulnerability that can be leveraged to overwrite internal configuration files. This vulnerability affects Lexmark devices and can potentially be used for remote code execution.

A security feature bypass issue exists due to the Windows kernel's failure to properly initialize a memory address. This allows an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (KASLR) bypass. An attacker who successfully exploits this issue could retrieve the base address of the kernel driver from a compromised process. To exploit this issue, an attacker would have to log on to an affected system and run a specially crafted application.

The issue is caused by a buffer underflow in the atmfd.dll library, allowing remote attackers to execute arbitrary code via a crafted OpenType font. This could enable an attacker to take complete control of the affected system, install programs, view, change, or delete data, or create new accounts with full user rights.