Yuji Ukai

The issue allows remote attackers to cause a denial of service, resulting in a reboot of the device, via unspecified vectors.

A buffer overflow issue allows remote attackers to execute arbitrary code via a crafted RTF document.

The issue is related to the improper handling of IP header options, which can be exploited by remote attackers to cause a denial of service. This is achieved by sending a crafted option that triggers access to an invalid memory location, resulting in a device reboot.

The issue is related to a buffer overflow in the web-based management interface. This can be exploited by remote attackers who send a long string in a POST request, resulting in a denial of service where the device crashes.

The issue is related to the improper processing of BBS information, which can be exploited remotely. This might allow attackers to use the product's host for DDoS attacks.

The issue allows context-dependent attackers to execute arbitrary code via a crafted Rich Text File (RTF), related to "pvpara ffooter."

Name of the Vulnerable Software and Affected Versions: Microsoft Office versions 2000 SP3 through 2007 SP1 Works versions 8.5 through 9 Description: A buffer overflow issue exists in the Works for Windows document converters, allowing remote attackers to execute arbitrary code via a crafted Works .wps file. This could trigger memory corruption. The vulnerability could allow remote code execution if a user opens a specially crafted .wps file. Users with fewer user rights on the system could be less impacted than users who operate with administrative user rights. Recommendations: For Microsoft Office 2000 SP3, update to a version that includes the fix for this issue. For Microsoft Office XP SP3, update to a version that includes the fix for this issue. For Microsoft Office 2003 SP3, update to a version that includes the fix for this issue. For Microsoft Office 2007 SP1, update to a version that includes the fix for this issue. For Works 8.5 and 9, update to a version that includes the fix for this issue. As a temporary workaround, consider avoiding the use of the Works for Windows document converters to minimize the risk of exploitation.

A buffer overflow issue allows remote attackers to execute arbitrary code via a mail message with a crafted return receipt request.

Name of the Vulnerable Software and Affected Versions: SOURCENEXT Virus Security ZERO versions 9.5.0173 and earlier SOURCENEXT Virus Security versions 9.5.0173 and earlier Description: The issue allows remote attackers to cause a denial of service, potentially leading to memory consumption or application crash, via malformed compressed files. Recommendations: For SOURCENEXT Virus Security ZERO versions 9.5.0173 and earlier, update to a version later than 9.5.0173 to resolve the issue. For SOURCENEXT Virus Security versions 9.5.0173 and earlier, update to a version later than 9.5.0173 to resolve the issue.

A buffer overflow issue exists in the JuniperSetupDLL.dll, which is loaded by the Juniper SSL-VPN Client when accessing a Juniper NetScreen IVE device. This issue allows remote attackers to execute arbitrary code via a long argument in the `ProductName` parameter.

The issue allows remote attackers to execute arbitrary code via the AnimationHeaderBlock length field, leading to a stack-based buffer overflow in the Windows Animated Cursor (ANI) capability.

The issue arises from the improper validation of certain SMB packets in the Server Message Block implementation. This allows remote attackers to execute arbitrary code via Transaction responses containing Trans or Trans2 commands. Specifically, it can be exploited using Trans2 FIND FIRST2 responses with large file name length fields.

The issue is related to an integer overflow in DUNZIP32.DLL, which allows remote attackers to execute arbitrary code. This is made possible by compressed (zipped) folders that involve an "unchecked buffer" and improper length validation.

The issue is related to multiple integer overflows in the Microsoft ASN.1 library, which can be exploited by remote attackers to execute arbitrary code. This is achieved through ASN.1 BER encodings with very large length fields, causing arbitrary heap data to be overwritten, or through modified bit strings.

Name of the Vulnerable Software and Affected Versions: Windows Workstation Service (WKSSVC.DLL) (affected versions not specified) Description: The issue is related to a stack-based buffer overflow in a logging function. This allows remote attackers to execute arbitrary code via RPC calls that cause long entries to be written to a debug log file, specifically "NetSetup.LOG". The NetAddAlternateComputerName API is used to demonstrate this. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Microsoft Visual Basic for Applications (VBA) SDK versions 5.0 through 6.3 Description: A heap-based buffer overflow issue exists, allowing remote attackers to execute arbitrary code via a document with a long `ID` parameter. Recommendations: For Microsoft Visual Basic for Applications (VBA) SDK versions 5.0 through 6.3, at the moment, there is no information about a newer version that contains a fix for this issue.