Tyler Reguly

**Name of the Vulnerable Software and Affected Versions** Microsoft Windows versions prior to the fixed version Windows 7 SP1 Windows 8 Windows 8.1 Windows Server 2012 Gold and R2 **Description** The issue is related to a tampering vulnerability in the Remote Desktop Protocol (RDP) implementation, which does not properly encrypt sessions. This makes it easier for man-in-the-middle attackers to obtain sensitive information by sniffing the network or modify session content by sending crafted RDP packets. **Recommendations** For Microsoft Windows 7 SP1, update to a version that includes the fix for the RDP MAC issue. For Windows 8, apply the necessary configuration changes to properly encrypt RDP sessions. For Windows 8.1, ensure that the RDP implementation is updated to prevent tampering. For Windows Server 2012 Gold and R2, modify the RDP settings to secure the sessions and prevent man-in-the-middle attacks. As a temporary workaround, consider restricting access to RDP sessions until a patch is available.

**Name of the Vulnerable Software and Affected Versions** Aigo P8860 (affected versions not specified) **Description** The issue allows remote attackers to cause a denial of service, resulting in memory consumption and browser hang, by providing a large integer value for the `length` property of a `Select` object. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Opera versions 9.64 and earlier **Description** The issue allows remote attackers to cause a denial of service, specifically memory consumption, by setting a large integer value for the `length` property of a `Select` object. **Recommendations** For Opera versions 9.64 and earlier, consider updating to a newer version to mitigate the risk of denial of service attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Sony PLAYSTATION 3 (PS3) (affected versions not specified) **Description** The issue allows remote attackers to cause a denial of service, resulting in memory consumption and console hang, by providing a large integer value for the `length` property of a `Select` object. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Netscape versions 6 and 8 **Description** The issue allows remote attackers to cause a denial of service due to memory consumption. This is achieved by setting a large integer value for the `length` property of a `Select` object. **Recommendations** For Netscape versions 6 and 8, consider restricting the use of the `Select` object or limiting the value range for its `length` property to prevent excessive memory consumption. At the moment, there is no information about a newer version that contains a fix for this vulnerability.