Ke Liu

The issue is caused by a memory corruption vulnerability in Windows Media Foundation, allowing an attacker to install programs, view, change, or delete data, or create new accounts with full user rights. This can be achieved by convincing a user to open a specially crafted document or visit a malicious webpage. The vulnerability exists due to improper handling of objects in memory.

Name of the Vulnerable Software and Affected Versions: Media Foundation (affected versions not specified) Description: An information disclosure issue exists due to improper handling of objects in memory by Media Foundation. This could allow an attacker to obtain information that could further compromise a user's system. To exploit this, an attacker would need to log onto an affected system and open a specially crafted file, or host a website with such a file and convince a user to visit the site and open the file. The issue is related to a buffer overflow in memory. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

The issue is related to the improper handling of objects in memory by the Microsoft Windows Graphics Component, which can lead to information disclosure. This could allow an attacker to obtain sensitive information. There is no information provided about the estimated number of potentially affected devices or real-world incidents where this issue was exploited.

The issue is related to errors in handling objects in memory within the Media Foundation (MF) component of Windows operating systems. This can allow a remote attacker to impact the confidentiality, integrity, and availability of protected information. The vulnerability also enables remote attackers to execute arbitrary code and affect the system.

The issue is related to a lack of protection for sensitive data in the Media Foundation component of Windows operating systems. It may allow an attacker to disclose protected information using a specially crafted file or website. The vulnerability can be exploited to obtain sensitive information and affect the system.

The issue is related to the incorrect handling of objects in memory by the Graphics Device Interface (GDI) component in Windows operating systems. This can be exploited by an attacker using a specially crafted application to gain unauthorized access to protected information. The vulnerability allows attackers to obtain sensitive information and affect the system.

The issue is caused by incorrect handling of objects in memory. It may allow an attacker to install programs, view, modify, or delete data, or create new accounts with full user rights by using a specially crafted document or web page. Remote attackers can execute arbitrary code and affect the system.

The issue is related to errors in processing objects in memory within the Windows Media Foundation component of Windows operating systems. This can be exploited by an attacker to install programs, view, modify, or delete data, or create new accounts with full user rights using a specially crafted document or web page. The vulnerability also allows remote attackers to execute arbitrary code and affect the system.

The issue is related to an information disclosure problem due to the Windows Print Spooler's failure to properly handle objects in memory. This could allow an attacker to disclose protected information. There is no information about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited.

The issue is related to an out-of-bounds read, which could lead to information disclosure if successfully exploited. This allows attackers to obtain sensitive information.

A heap overflow issue allows attackers to execute arbitrary code in the context of the current user. This can be achieved through successful exploitation of the vulnerability in the EMF BMP parsing component, leading to remote code execution.

The issue occurs due to computation that reads data past the end of the target buffer, specifically within TIFF processing in the XPS module. This can lead to sensitive data exposure. A successful attack may also allow remote code execution.

The issue arises from a computation that reads data past the end of the target buffer, specifically within the image conversion engine when processing Enhanced Metafile Format (EMF) data that embeds an image in the bitmap (BMP) file format. This can lead to sensitive data exposure. Additionally, it is described as an out-of-bounds read vulnerability that allows attackers to execute code remotely.

The issue occurs due to computation that reads data past the end of the target buffer, which is part of the Enhanced Metafile Format processing engine within the image conversion module. This can lead to sensitive data exposure. A successful attack can also allow attackers to execute code remotely.

Name of the Vulnerable Software and Affected Versions: Microsoft Edge versions in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 Description: The issue arises from how the Microsoft Edge PDF Reader handles objects in memory, allowing an attacker to obtain information that could be used to further compromise the user's system. An information disclosure vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory, potentially enabling an attacker to obtain sensitive information. Recommendations: For Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016, consider disabling the Microsoft Edge PDF Reader until a patch is available to prevent potential exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

A heap buffer overflow issue in the Omnibox component of Google Chrome and Opera, related to the handling of PDF files by PDFium, allows a remote attacker to potentially exploit heap corruption via a crafted PDF file.

A heap-based buffer overflow issue exists in the opj mqc byteout function, located in mqc.c, which can be triggered by a crafted bmp file. This allows remote attackers to cause a denial of service, resulting in an application crash.

The issue is related to an integer overflow vulnerability in the `bmp24toimage` function, which can be triggered by a crafted bmp file. This can cause a denial of service due to a heap-based buffer over-read and application crash.

The issue is related to a memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) data related to bitmap transformations. This vulnerability can be exploited to achieve arbitrary code execution. The vulnerability is caused by an out-of-bounds operation in the memory buffer when handling EMF files associated with raster transformations. Successful exploitation could allow a remote attacker to execute arbitrary code.

The issue allows attackers to obtain sensitive information and affect the system. It is an information disclosure vulnerability that exists when Windows Uniscribe improperly discloses the contents of its memory. An attacker who successfully exploited the issue could obtain information to further compromise the user’s system.