Pengsu Cheng

This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The flaw exists within the handling of PSD files due to the lack of proper validation of user-supplied data, resulting in a write past the end of an allocated structure. An attacker can leverage this to execute code in the context of the current process.

The issue is related to an out-of-bounds read operation in memory, which can be exploited by a remote attacker to gain unauthorized access to protected information. This can lead to information disclosure.

The issue is related to an information disclosure vulnerability in the Windows GDI component, which improperly discloses the contents of its memory. This can be exploited by attackers to obtain sensitive information using a specially crafted document. The vulnerability is associated with errors in the mechanisms for handling objects in memory.

The issue is an out-of-bounds read that could lead to information disclosure. Successful exploitation allows attackers to obtain sensitive information.

A buffer overflow vulnerability exists in the Microsoft JET Database Engine that could allow remote code execution on an affected system. This issue can be exploited by using a specially crafted Excel file, potentially allowing an attacker to execute arbitrary code. The estimated number of potentially affected devices worldwide is not specified.

Name of the Vulnerable Software and Affected Versions: Apple Safari versions prior to 4.0 Description: A cross-site scripting (XSS) issue exists due to the improper escaping of HTML attributes, allowing user-assisted remote attackers to inject arbitrary web script or HTML and read local files. Recommendations: For versions prior to 4.0, update to version 4.0 or later to resolve the issue.