Lord Yup

**Name of the Vulnerable Software and Affected Versions** Microsoft Word versions 2000 through 2002 Microsoft Works Suites versions 2000 through 2004 **Description** A stack-based buffer overflow issue might allow remote attackers to execute arbitrary code via a .doc file with long font information. **Recommendations** For Microsoft Word versions 2000 through 2002, update to a newer version to mitigate the risk. For Microsoft Works Suites versions 2000 through 2004, update to a newer version to mitigate the risk. As a temporary workaround, consider avoiding the use of .doc files with long font information until a patch is available.

**Name of the Vulnerable Software and Affected Versions** Gadu-Gadu version 6.0 build 149 **Description** The issue is related to a heap-based buffer overflow in the image sending feature, which allows remote attackers to execute arbitrary code via a crafted GG MSG IMAGE REPLY message. **Recommendations** For Gadu-Gadu version 6.0 build 149, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: NeoModus Direct Connect version 1.0 build 9 Description: The issue allows remote attackers to cause a denial of service, potentially leading to connection and memory exhaustion, by flooding the system with ConnectToMe requests that contain arbitrary IP addresses and ports. Recommendations: For version 1.0 build 9, consider implementing rate limiting on ConnectToMe requests to prevent excessive connection attempts, and restrict the acceptance of arbitrary IP addresses and ports to minimize the risk of exploitation.