Willem Pinckaers

**Name of the Vulnerable Software and Affected Versions** Intel(R) SGX for 6th, 7th, 8th, 9th Generation Intel(R) Core(TM) Processor Families Intel(R) Xeon(R) Processor E3-1500 v5, v6 Families Intel(R) Xeon(R) E-2100 & E-2200 Processor Families with Intel(R) Processor Graphics **Description** The issue is related to insufficient access control in the protected memory subsystem, which may allow a privileged user to potentially enable information disclosure via local access. This could lead to the exposure of protected information. **Recommendations** For Intel(R) SGX on 6th, 7th, 8th, 9th Generation Intel(R) Core(TM) Processor Families: update the microcode to ensure proper access control. For Intel(R) Xeon(R) Processor E3-1500 v5, v6 Families: apply the recommended configuration changes to restrict local access. For Intel(R) Xeon(R) E-2100 & E-2200 Processor Families with Intel(R) Processor Graphics: restrict access to sensitive information until a proper fix is applied.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 18.0.1025.168 **Description** A race condition exists in the Inter-process Communication (IPC) implementation, allowing attackers to bypass intended sandbox restrictions. **Recommendations** For versions prior to 18.0.1025.168, update to version 18.0.1025.168 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** WebKit versions prior to the version used in Apple Safari 5.0.5 Google Chrome versions prior to 10.0.648.133 Apple Safari versions prior to 5.0.5 Research In Motion (RIM) BlackBerry Torch 9800 firmware version 6.0.0.246 **Description** The issue allows remote attackers to execute arbitrary code via unknown vectors related to CSS "style handling" and a length value. This was demonstrated by Vincenzo Iozzo, Willem Pinckaers, and Ralf-Philipp Weinmann during a Pwn2Own competition at CanSecWest 2011. The vulnerability is related to integer overflow in WebKit. **Recommendations** For WebKit versions prior to the version used in Apple Safari 5.0.5, update to a version used in Apple Safari 5.0.5 or later. For Google Chrome versions prior to 10.0.648.133, update to version 10.0.648.133 or later. For Apple Safari versions prior to 5.0.5, update to version 5.0.5 or later. For Research In Motion (RIM) BlackBerry Torch 9800 firmware version 6.0.0.246, consider disabling CSS style handling as a temporary workaround until a patch is available.

**Name of the Vulnerable Software and Affected Versions** Tor versions 0.2.1.x through 0.2.1.27 Tor versions 0.2.2.x through 0.2.2.19-alpha **Description** The issue allows remote attackers to cause a denial of service, resulting in a daemon crash, or possibly execute arbitrary code of their choice. This is due to a heap-based buffer overflow. **Recommendations** For Tor versions 0.2.1.x through 0.2.1.27, update to version 0.2.1.28 or later. For Tor versions 0.2.2.x through 0.2.2.19-alpha, update to version 0.2.2.20-alpha or later.