Chris Rohlf

A type confusion issue exists due to improper memory handling. Processing maliciously crafted web content may lead to arbitrary code execution. Type confusion occurs when a program accesses a resource using a different type than intended, potentially causing memory corruption.

A use-after-free issue, which occurs when a program continues to use a pointer after it has been freed, was addressed with improved memory management. Processing maliciously crafted web content may lead to arbitrary code execution.

A use-after-free issue, which occurs when a program continues to use a pointer after it has been freed, was addressed with improved memory management. Processing maliciously crafted web content may lead to an unexpected process termination.

The issue allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This is due to inline metadata in GarbageCollection.

The issue allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via vectors related to iTunes Store browsing.

A remote code execution issue exists due to improper initialization or deletion of an object in the IE8 Developer Toolbar, leading to memory corruption. This could be exploited by an attacker constructing a specially crafted Web page. When a user views this page, it could allow remote code execution, potentially giving the attacker the same user rights as the logged-on user. If the user has administrative rights, the attacker could take complete control of the system, enabling them to install programs, view, change, or delete data, or create new accounts with full user rights.

A remote code execution issue exists due to improper initialization or deletion of an object in the IE8 Developer Toolbar, leading to memory corruption. This could be exploited by an attacker constructing a specially crafted Web page. When a user views this Web page, it could allow remote code execution, potentially giving the attacker the same user rights as the logged-on user. If the user has administrative rights, the attacker could take complete control of the system, enabling them to install programs, view, change, or delete data, or create new accounts with full user rights.

The issue is related to multiple buffer overflows in the httplib parse sc header function. This allows remote attackers to execute arbitrary code via long Location and Server HTTP headers.

The issue is related to an integer underflow in the DecodeGRE function, which can be triggered by remote attackers sending crafted GRE packets. This may lead to the corruption of log files or the writing of sensitive information into log files.

The issue involves multiple vulnerabilities in various packages of the Debian GNU/Linux operating system, including libkscan-dev, kdegraphics-dev, xpdf-common, kviewshell, kdegraphics-dbg, kdegraphics-doc-html, kdvi, xpdf-reader, libkscan1, xpdf-utils, kdegraphics, and kdegraphics-kfile-plugins. These vulnerabilities can be exploited remotely, potentially leading to a breach of confidentiality, integrity, and availability of protected information. Specifically, an integer overflow in the ObjectStream::ObjectStream function in XRef.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1 might allow remote attackers to execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow.