Rob King

Name of the Vulnerable Software and Affected Versions Brother MFC-L2710DW printers (affected versions not specified) Description A flaw exists in the firmware of Brother MFC-L2710DW printers that can lead to information disclosure regarding files and directories. Successful exploitation may allow a remote attacker to gain unauthorized access to protected information. The vulnerability involves the 'uscan' protocol from the eSCL specification, potentially revealing the serial number of the printer. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via a crafted web site. This is a different issue than other WebKit vulnerabilities.

Name of the Vulnerable Software and Affected Versions: Apple Mac OS X versions prior to 10.5.7 Description: The issue is related to an integer overflow in Terminal, allowing remote attackers to execute arbitrary code or cause a denial of service due to memory corruption and application crash. This is achieved by sending a crafted size value in a CSI[4 xterm resize escape sequence, which triggers a heap-based buffer overflow. Recommendations: For Apple Mac OS X versions prior to 10.5.7, update to version 10.5.7 or later to resolve the issue.