Ucha Gobejishvili

**Name of the Vulnerable Software and Affected Versions** Mozilla Firefox versions prior to 45.0 on Linux **Description** The issue is related to errors in resource management in the Intel video driver used by Firefox. It allows remote attackers to cause a denial of service, which can result in memory consumption or stack memory corruption, by triggering the use of a WebGL shader. **Recommendations** For Mozilla Firefox versions prior to 45.0 on Linux, update to version 45.0 or later to resolve the issue. As a temporary workaround, consider disabling WebGL to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Microsoft XML Core Services versions 3.0 through 6.0 **Description** An information disclosure issue exists when Microsoft XML Core Services exposes memory addresses not intended for public disclosure. This could allow an attacker to bypass Address Space Layout Randomization (ASLR) and potentially read private data. The issue does not allow an attacker to execute code or elevate user rights directly but could be used to obtain information to further compromise the affected system. **Recommendations** For Microsoft XML Core Services versions 3.0 through 6.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Mozilla Firefox versions prior to 40.0.3 Firefox ESR versions prior to 38.2.1 **Description** The issue is related to a use-after-free vulnerability in the CanvasRenderingContext2D implementation, allowing remote attackers to execute arbitrary code. This is achieved by leveraging improper interaction between resize events and changes to Cascading Style Sheets (CSS) token sequences for a CANVAS element. The vulnerability can be exploited by a remote attacker to execute arbitrary code. **Recommendations** For Mozilla Firefox versions prior to 40.0.3, update to version 40.0.3 or later to resolve the issue. For Firefox ESR versions prior to 38.2.1, update to version 38.2.1 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Parallels H-Sphere version 3.3 Patch 1 **Description** The issue concerns multiple cross-site request forgery (CSRF) vulnerabilities. These vulnerabilities allow remote attackers to hijack the authentication of admins for specific requests, including adding group plans via "admin/group plans.html" and adding extra packages via "admin/extra packs/create extra pack.html". **Recommendations** For Parallels H-Sphere version 3.3 Patch 1, as a temporary workaround, consider restricting access to the "admin/group plans.html" and "admin/extra packs/create extra pack.html" endpoints until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Endian Firewall version 2.4 **Description** The issue allows remote attackers to inject arbitrary web script or HTML, potentially leading to security breaches. This can be achieved via the `createrule` parameter to "dnat.cgi", the `addrule` parameter to "dansguardian.cgi", or the `PATH INFO` to "openvpn users.cgi". **Recommendations** For Endian Firewall version 2.4, consider disabling access to the "dnat.cgi", "dansguardian.cgi", and "openvpn users.cgi" scripts until a patch is available. Avoid using the `createrule` and `addrule` parameters in the affected API endpoints until the issue is resolved. Restrict access to the `PATH INFO` in "openvpn users.cgi" to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** OSQA version 3b **Description** The issue concerns multiple cross-site scripting (XSS) vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the (1) url bar or (2) picture bar. **Recommendations** For OSQA version 3b, update to a version that includes a fix for the XSS vulnerabilities in the questions/ask functionality. As a temporary workaround, consider restricting user input in the url bar and picture bar to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Dolibarr CMS version 3.2.0 Alpha **Description** The issue allows remote attackers to read arbitrary files and possibly execute arbitrary code via a .. (dot dot) in the `file` parameter to "document.php" or `backtopage` parameter in a create action to "comm/action/fiche.php". **Recommendations** For Dolibarr CMS version 3.2.0 Alpha, consider restricting access to the "document.php" and "comm/action/fiche.php" files until a patch is available. As a temporary workaround, avoid using the `file` and `backtopage` parameters in the affected API endpoints until the issue is resolved.