Fatih Kilic

Memory safety issues exist in Firefox 148 and Thunderbird 148. These bugs demonstrate evidence of memory corruption, and it is presumed that, with sufficient effort, they could potentially be exploited to execute arbitrary code.

A cross-site request forgery (CSRF) issue exists in the administrator interface, specifically in ESAdmin/security.do. This allows remote attackers to hijack the authentication of administrators for requests, such as adding an new administrative user via a saveNewUser action.

The issue is related to a stack-based buffer overflow in the Java com ibm es oss CryptionNative ESEncrypt function. This function is located in the /opt/IBM/es/lib/libffq.cryptionjni.so library, which is part of the login form in the administration interface. The overflow can be triggered by a remote attacker using a long password, potentially allowing the execution of arbitrary code.

The issue allows local users to gain privileges by specifying an arbitrary command name. This is related to the esRunCommand in IBM OmniFind Enterprise Edition.

The issue allows remote web servers to cause a denial of service, specifically an infinite loop, by providing a crafted series of documents. This is due to the software performing web crawls with an unlimited recursion depth.

The issue allows local users to gain privileges through an untrusted search path vulnerability in the estaskwrapper component. This is achieved by manipulating the `ES LIBRARY PATH` environment variable and the `PATH` environment variable, which is utilized during the execution of the estasklight program.