Eyal Itkin

The issue arises from the improper handling of long unreliable segments in the function `SNP ReceiveUnreliableSegment()` when configured to support plain-text messages. This leads to a Heap-Based Buffer Overflow, resulting in memory corruption and possibly even remote code execution.

The issue arises from the improper handling of long encrypted messages in the `AES GCM DecryptContext::Decrypt()` function when compiled using libsodium. This leads to a Stack-Based Buffer Overflow, resulting in memory corruption and potentially allowing for remote code execution.

The issue arises from the improper handling of unreliable segments with negative offsets in the `SNP ReceiveUnreliableSegment()` function, leading to a Heap-Based Buffer Underflow. This results in the `free()` of memory not allocated from the heap, causing memory corruption and potentially allowing for remote code execution.

The issue arises from improper handling of inlined statistics messages in the `CConnectionTransportUDPBase::Received Data()` function, leading to an exception thrown from `libprotobuf` and resulting in a crash.

A remote code execution issue exists in Windows Domain Name System servers when they fail to properly handle requests. This can be exploited by a remote attacker using a specially crafted DNS request, allowing them to execute arbitrary code. The vulnerability is also known as 'Windows DNS Server Remote Code Execution Vulnerability' and has been present for 17 years, affecting Windows DNS Servers from 2013 to 2019 editions. It is a 'wormable' bug, enabling attackers to launch malware attacks that can spread from one vulnerable computer to another without human interaction.

Name of the Vulnerable Software and Affected Versions: Apache Guacamole versions 1.1.0 and older Description: The issue is related to the mishandling of pointers involved in processing data received via RDP static virtual channels. If a user connects to a malicious or compromised RDP server, a series of specially-crafted PDUs could result in memory corruption, possibly allowing arbitrary code to be executed with the privileges of the running guacd process. This can be described as a buffer overflow operation in memory, which may allow an attacker to elevate their privileges and execute arbitrary code. Recommendations: For Apache Guacamole versions 1.1.0 and older, consider updating to a newer version to mitigate the risk of exploitation. As a temporary workaround, restrict access to RDP static virtual channels to minimize the risk of memory corruption. Avoid connecting to untrusted or potentially compromised RDP servers until the issue is resolved.

The issue arises from improper validation of data received from RDP servers via static virtual channels. If a user connects to a malicious or compromised RDP server, specially-crafted PDUs could result in disclosure of information within the memory of the guacd process handling the connection.

The issue is related to a Heap-based Buffer Overflow that occurs when handling a long ZCL string during the commissioning phase, resulting in remote code execution. This can be exploited using a malicious ZigBee lightbulb to infiltrate a home IoT network. The flaw could allow remote attackers to gain access to the entire WiFi network over-the-air without cracking the password and launch further attacks against other devices connected to the same network.

A buffer overflow issue exists in the Picture Transfer Protocol (PTP) of Canon EOS series digital cameras. This issue allows an attacker on the same network segment to trigger the affected product being unresponsive or to execute arbitrary code on the affected product via the `notifybtstatus` command.

A remote code execution issue exists in Remote Desktop Services due to insufficient input validation, allowing an attacker to execute arbitrary code. The vulnerability can be exploited by abusing clipboard redirection. It potentially allows control over the connected RDP client.

The issue is related to a Heap-Based Buffer Overflow in the `ui clip handle data()` function, which can result in memory corruption and potentially allow for remote code execution. The vulnerability is associated with the implementation of the `ui clip handle data` function in the rdesktop RDP client. Exploitation of the vulnerability may allow a remote attacker to execute arbitrary code.

The issue is related to an Out-Of-Bounds Read in the `process secondary order()` function, which can result in a Denial of Service (segfault). This can be exploited by a remote attacker to cause a disruption in service. The vulnerability is associated with the implementation of the `process secondary order` function in the RDP client.

The issue is related to a Heap-Based Buffer Overflow in the `process plane()` function, which can result in memory corruption and potentially allow for remote code execution. The vulnerability in the `process plane` function implementation of the RDP client rdesktop is associated with a buffer overflow, and its exploitation may allow a remote attacker to execute arbitrary code.

The issue is related to the implementation of the `cssp read tsrequest` function in the RDP client, which is associated with an out-of-bounds memory read. This can be exploited by a remote attacker to cause a denial of service, resulting in a crash.

The issue is related to an Out-Of-Bounds Read in the `process bitmap updates()` function, which can result in a Denial of Service (segfault). This can be exploited by a remote attacker to cause a disruption in service. The vulnerability is associated with a memory boundary read error in the implementation of the `process bitmap updates()` function in the rdesktop RDP client.

The issue is related to an Out-Of-Bounds Read in the `rdpsnd process ping()` function, which results in an information leak. Exploitation of this issue may allow a remote attacker to cause a denial of service.

The issue is related to an Integer Overflow in the `process bitmap updates()` function, leading to a Heap-Based Buffer Overflow, which results in memory corruption and potentially allows for remote code execution. The vulnerability can be exploited by a remote attacker to execute arbitrary code.

The issue is related to an Integer Overflow in the `process bitmap updates()` function, leading to an Out-Of-Bounds Write and resulting in memory corruption. This could potentially allow for remote code execution. The vulnerability is associated with the implementation of the `process bitmap updates` function in the RDP client.

The issue is related to a heap-based buffer overflow in the `cssp read tsrequest()` function of the RDP client. This can lead to memory corruption and potentially allow a remote attacker to execute arbitrary code.

The issue is related to an Out-Of-Bounds Read in the `rdpdr process()` function, which results in an information leak. Exploitation of this issue may allow a remote attacker to cause a denial of service.