Michal Bucko

Name of the Vulnerable Software and Affected Versions: Microsoft Visual Basic 6.0 Microsoft Visual Studio .NET 2002 SP1 Microsoft Visual Studio .NET 2003 SP1 Microsoft Visual FoxPro 8.0 SP1 Microsoft Visual FoxPro 9.0 SP1 Microsoft Visual FoxPro 9.0 SP2 Description: The issue is related to the Charts ActiveX control, which does not properly handle errors during access to incorrectly initialized objects. This allows remote attackers to execute arbitrary code via a crafted HTML document, related to corruption of the `system state`. Recommendations: For Microsoft Visual Basic 6.0, update to a version that includes the fix for the Charts Control Memory Corruption issue. For Microsoft Visual Studio .NET 2002 SP1, update to a version that includes the fix for the Charts Control Memory Corruption issue. For Microsoft Visual Studio .NET 2003 SP1, update to a version that includes the fix for the Charts Control Memory Corruption issue. For Microsoft Visual FoxPro 8.0 SP1, update to a version that includes the fix for the Charts Control Memory Corruption issue. For Microsoft Visual FoxPro 9.0 SP1, update to a version that includes the fix for the Charts Control Memory Corruption issue. For Microsoft Visual FoxPro 9.0 SP2, update to a version that includes the fix for the Charts Control Memory Corruption issue.

**Name of the Vulnerable Software and Affected Versions** Asterisk Zaptel version 1.4.5.1 **Description** The issue is related to a buffer overflow in the sethdlc.c file, potentially allowing local users to gain privileges via a long device name in the `ifr name` field. However, the vendor disputes this, stating that the application requires root access and thus does not cross privilege boundaries. **Recommendations** For Asterisk Zaptel version 1.4.5.1, consider restricting access to the sethdlc.c file or limiting the length of device names to prevent potential exploitation. As a temporary workaround, ensure that the application is run with the least privileges necessary to minimize the risk of privilege escalation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: CA ERwin Process Modeler version 7.2 Description: The issue allows user-assisted remote attackers to cause a denial of service via a crafted Data Standards File, also known as a Datatype Standards File. Recommendations: For CA ERwin Process Modeler version 7.2, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** OpenOffice.org version 2.2 **Description** The issue is related to the improper handling of files with multiple extensions, which can be exploited by user-assisted remote attackers to cause a denial of service. **Recommendations** For OpenOffice.org version 2.2, consider avoiding the use of files with multiple extensions until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** RaidenFTPD version 2.4 **Description** The issue affects the IXceedCompression component in XceddZipLib, specifically the RaidenFTPD.dll file. It involves unspecified vectors related to the `CalculateCrc`, `Compress`, and `Uncompress` functions, leading to a NULL pointer dereference and resulting in a denial of service (crash). **Recommendations** For RaidenFTPD version 2.4, consider disabling the `CalculateCrc`, `Compress`, and `Uncompress` functions as a temporary workaround until a patch is available. Restrict access to the IXceedCompression component in XceddZipLib to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: MythControl versions 1.0 and earlier Description: The issue is related to a buffer overflow in the sendToMythTV function in MythControlServer.c. This allows remote attackers to execute arbitrary code via a crafted sendStr string to the Bluetooth interface. Recommendations: For versions 1.0 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Adobe Reader versions 7.0 through 7.0.8 **Description** The issue allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long argument string to the `LoadFile` method in an AcroPDF ActiveX control. **Recommendations** For Adobe Reader versions 7.0 through 7.0.8, update to a version outside of the affected range to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Microsoft Visual Studio 2005 **Description** A cross-zone scripting issue exists in the WMI Object Broker ActiveX control, allowing remote attackers to bypass Internet zone restrictions and execute arbitrary code by instantiating dangerous objects. **Recommendations** For Microsoft Visual Studio 2005, consider disabling the WMI Object Broker ActiveX control until a patch is available. Restrict access to the WmiScriptUtils.dll to minimize the risk of exploitation.