Vitaliy Toropov

The issue is related to a buffer overflow in the IOHIDFamily component of Apple OS X, allowing local users to gain privileges. Additionally, there are reports of a heap buffer overflow in the IOHIDSecurePromptClient and an untrusted pointer dereference, which can lead to arbitrary code execution.

The issue is related to the IOHIDSecurePromptClient function, which does not properly validate pointer values. This allows remote attackers to execute arbitrary code or cause a denial of service, resulting in a system crash, via a crafted web site.

The issue is related to improper array initialization, which can be exploited by remote attackers to execute arbitrary code or cause a denial of service through a NULL pointer dereference. This can be achieved via a crafted Silverlight application.

The issue allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash. This is related to vectors involving iTunes Store browsing.

A buffer overflow issue exists in the System.DirectoryServices.Protocols namespace method, allowing remote attackers to execute arbitrary code via a crafted XAML browser application or a crafted .NET Framework application. This occurs due to a missing array-size check during a memory copy operation. The vulnerability can be exploited to gain elevation of privilege, enabling an attacker to take complete control of an affected system, install programs, view, change, or delete data, or create new accounts with full user rights.

The issue allows remote attackers to execute arbitrary code via a crafted XAML browser application or a crafted .NET Framework application. This is due to the improper handling of function pointers. An attacker who successfully exploits this issue could take complete control of an affected system, allowing them to install programs, view, change, or delete data, or create new accounts with full user rights. Users with fewer user rights on the system could be less impacted than users operating with administrative user rights.

A remote code execution issue exists due to improper buffer allocation. This allows attackers to execute arbitrary code via a crafted XAML browser application or a specially crafted .NET Framework application. An attacker who successfully exploits this issue could run arbitrary code in the security context of the logged-on user, potentially installing programs, viewing, changing, or deleting data, or creating new accounts with full user rights. The impact may be less severe for users with limited user rights compared to those operating with administrative rights.

A remote code execution issue exists due to improper validation of function parameters. This allows attackers to execute arbitrary code via crafted applications, potentially giving them complete control of an affected system. They could then install programs, view, change, or delete data, or create new accounts with full user rights. The impact may be less severe for users with limited user rights compared to those with administrative rights.