Sean De Regge

**Name of the Vulnerable Software and Affected Versions** Luxion KeyShot (affected versions not specified) **Description** This issue allows remote attackers to execute arbitrary code on affected installations of Luxion KeyShot. User interaction is required to exploit this, where the target must visit a malicious page or open a malicious file. The flaw exists within the parsing of BIP files, resulting from loading a library from an unsecured location, allowing an attacker to execute code in the context of the current process. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Delta Electronics CNCSoft-B DOPSoft versions prior to 4.0.0.82 **Description** The issue is related to the insecure loading of libraries, which may allow an attacker to use DLL hijacking and take over the system where the software is installed. This is due to an uncontrolled search path element. Exploitation of the issue may allow an attacker to execute arbitrary code. **Recommendations** For versions prior to 4.0.0.82, update to version 4.0.0.82 or later to resolve the issue. As a temporary workaround, consider restricting access to the system where the software is installed to minimize the risk of exploitation. Avoid using the software until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** Ashlar-Vellum Xenon (affected versions not specified) **Description** This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The flaw exists within the parsing of various file types, where a library is loaded from an unsecured location, allowing an attacker to execute code in the context of the current process. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Ashlar-Vellum Argon (affected versions not specified) **Description** This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The flaw exists within the parsing of various file types, where a library is loaded from an unsecured location, allowing an attacker to execute code in the context of the current process. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Ashlar-Vellum Lithium (affected versions not specified) **Description** The issue is related to an uncontrolled search path element in the software, which can be exploited to execute arbitrary code. This can be achieved by loading a library from an unsecured location, allowing an attacker to execute code in the context of the current process. The exploitation requires user interaction, such as visiting a malicious page or opening a malicious file. The specific flaw exists within the parsing of various file types. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Ashlar-Vellum Cobalt (affected versions not specified) **Description** This issue allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this issue, where the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of various file types, where the process loads a library from an unsecured location. An attacker can leverage this issue to execute code in the context of the current process. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** RealPlayer versions 11.0 through 11.1 RealPlayer versions 14.0.0 through 14.0.5 RealPlayer SP versions 1.0 through 1.1.5 RealPlayer Enterprise versions 2.0 through 2.1.5 **Description** The issue allows remote attackers to execute arbitrary code via crafted ID3v2 tags in an MP3 file. This is a result of a heap-based buffer overflow. **Recommendations** For RealPlayer versions 11.0 through 11.1, update to a version outside of this range to resolve the issue. For RealPlayer versions 14.0.0 through 14.0.5, update to a version outside of this range to resolve the issue. For RealPlayer SP versions 1.0 through 1.1.5, update to a version outside of this range to resolve the issue. For RealPlayer Enterprise versions 2.0 through 2.1.5, update to a version outside of this range to resolve the issue. As a temporary workaround, consider avoiding the use of crafted ID3v2 tags in MP3 files until a patch is available.

**Name of the Vulnerable Software and Affected Versions** RealPlayer versions 11.0 through 11.1 RealPlayer versions 14.0.0 through 14.0.5 RealPlayer SP versions 1.0 through 1.1.5 **Description** The issue is related to a heap-based buffer overflow in the qcpfformat.dll component. This allows remote attackers to execute arbitrary code via a crafted QCP file. **Recommendations** For RealPlayer versions 11.0 through 11.1, update to a version outside of this range to resolve the issue. For RealPlayer versions 14.0.0 through 14.0.5, update to a version outside of this range to resolve the issue. For RealPlayer SP versions 1.0 through 1.1.5, update to a version outside of this range to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** RealPlayer versions 11.0 through 11.1 RealPlayer SP versions 1.0 through 1.1 **Description** The issue allows remote attackers to download and execute an arbitrary program onto a client machine by injecting parameters to the `RecordClip` method, specifically by using a double quote in an argument. **Recommendations** For RealPlayer versions 11.0 through 11.1, consider disabling the `RecordClip` method until a patch is available. For RealPlayer SP versions 1.0 through 1.1, restrict access to the `RecordClip` method to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Apple iTunes version 4.7 **Description** A buffer overflow issue allows remote attackers to execute arbitrary code via a long URL in `.m3u` or `.pls` playlist files. **Recommendations** For Apple iTunes version 4.7, update to a newer version to mitigate the risk of arbitrary code execution.