Greg Macmanus

The issue is related to a buffer overflow in the `tpsocket base64 decode()` function of the TP-Link EC-70 camera's firmware. This buffer overflow can be exploited by a remote attacker to execute arbitrary code.

The issue allows local users to gain privileges via a Trojan horse DLL in the current working directory. A remote code execution vulnerability exists in the way that Microsoft PowerPoint handles the loading of DLL files. An attacker who successfully exploited this vulnerability could take complete control of an affected system, then install programs, view, change, or delete data, or create new accounts with full user rights. Users with fewer user rights on the system could be less impacted than users who operate with administrative user rights.

The issue is related to an integer underflow in Windows HTTP Services, allowing remote HTTP servers to execute arbitrary code via crafted parameter values in a response. This is due to improper error handling. A remote code execution vulnerability exists in the way that Windows HTTP Services handle specific values returned by a remote Web server. An attacker who successfully exploits this could take complete control of an affected system, enabling them to install programs, view, change, or delete data, or create new accounts with the same user rights as the service or application that calls the WinHTTP API to connect to the attacker's Web server.

The issue allows remote code execution if a specially crafted mailto URI is passed to Outlook. This could enable an attacker to install programs, view, change, or delete data, or create new accounts with full user rights. Users with fewer user rights on the system may be less impacted than those operating with administrative user rights.

The issue allows user-assisted remote attackers to execute arbitrary code via crafted data validation records. A remote code execution vulnerability exists in the way Excel processes data validation records when loading Excel files into memory. An attacker could exploit the vulnerability by sending a malformed file which could be hosted on a specially crafted or compromised Web site, or included as an e-mail attachment.

A remote code execution issue exists in the way Excel handles specially crafted filter records in Excel files. This could allow an attacker to execute arbitrary code via a crafted AutoFilter filter record in an Excel BIFF8 format XLS file, which triggers memory corruption. Such a file might be included in an e-mail attachment or hosted on a malicious Web site, and an attacker could exploit the vulnerability by constructing a specially crafted Excel file.

Name of the Vulnerable Software and Affected Versions: Microsoft Windows Media Player versions 9 through 10 Description: A stack-based buffer overflow issue allows remote attackers to execute arbitrary code via a PNG image with a large chunk size. Recommendations: For Microsoft Windows Media Player versions 9 through 10, update to a newer version that contains a fix for this issue.

A buffer overflow issue exists, allowing remote attackers to have an unknown impact via a malicious Mimio boardCast (mbc) file.

The issue is related to a buffer overflow in the swfformat.dll component. This can be exploited by remote attackers through a crafted SWF (Flash) file, allowing them to execute arbitrary code. The exploitation can occur via a size value in the SWF file that is less than the actual size, or through other unspecified manipulations of the file.

Name of the Vulnerable Software and Affected Versions: Adobe Acrobat Reader version 5.09 for Unix Description: A buffer overflow issue exists in the mailListIsPdf function, allowing remote attackers to execute arbitrary code via an e-mail message with a crafted PDF attachment. Recommendations: For Adobe Acrobat Reader version 5.09 for Unix, update to a newer version that contains a fix for this issue.

The issue is caused by an integer overflow in the Samba daemon (smbd) that allows remote authenticated users to cause a denial of service (application crash) and possibly execute arbitrary code via a Samba request with a large number of security descriptors that triggers a heap-based buffer overflow. This can lead to controllable heap corruption, allowing an attacker to gain root privileges on a vulnerable system. The exploitation requires credentials that allow access to a share on the Samba server. Unsuccessful exploitation attempts may cause the process serving the request to crash and leave evidence of an attack in logs.

The issue involves multiple vulnerabilities in various packages of openSUSE and SUSE Linux Enterprise operating systems, which can lead to disruption of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited remotely. Specifically, an integer overflow in the `FontFileInitTable` function in X.Org libXfont allows remote authenticated users to execute arbitrary code via a long first line in the `fonts.dir` file, resulting in a heap overflow.

The issue involves multiple vulnerabilities in various XFree86 packages and related software, which can lead to breaches of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited remotely.

The issue involves multiple vulnerabilities in various XFree86 packages and related software, which can lead to breaches of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited remotely.

The issue involves multiple vulnerabilities in various packages of openSUSE and SUSE Linux Enterprise operating systems, which can lead to disruption of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited remotely. Specifically, an integer overflow in the `bdfReadCharacters` function in `bdfread.c` in X.Org libXfont before 20070403 and freetype 2.3.2 and earlier allows remote authenticated users to execute arbitrary code via crafted BDF fonts, resulting in a heap overflow.