Ashfaq Ansari

**Nome do software vulnerável e versões afetadas** Foxit PDF Reader versão 11.2.1.53537 **Descrição** Esta vulnerabilidade permite que invasores remotos executem código arbitrário em instalações afetadas. É necessária a interação do usuário, sendo que o alvo deve visitar uma página maliciosa ou abrir um arquivo malicioso. A falha existe no tratamento de objetos `Doc`, devido à falta de validação da existência de um objeto antes de realizar operações nele. Um invasor pode aproveitar isso para executar código no contexto do processo atual. Isso também pode levar à divulgação de informações ou à execução remota de código por meio de possíveis vulnerabilidades do tipo Use-After-Free ou Out-of-Bounds Read ao lidar com determinados JavaScripts, objetos `Doc` ou AcroForms. **Recomendações** Para o Foxit PDF Reader versão 11.2.1.53537, considere desativar o tratamento de objetos `Doc` até que um patch esteja disponível. Restrinja o acesso a JavaScripts, objetos `Doc` ou AcroForms potencialmente vulneráveis para minimizar o risco de exploração. Evite abrir arquivos maliciosos ou visitar páginas da web suspeitas para reduzir o risco de execução remota de código. No momento, não há informações sobre uma versão mais recente que contenha uma correção para esta vulnerabilidade.

**Nome do software vulnerável e versões afetadas** Foxit PDF Reader versão 11.1.0.52543 **Descrição** Esta vulnerabilidade permite que invasores remotos divulguem informações confidenciais em instalações afetadas. É necessária a interação do usuário, na qual o alvo deve visitar uma página maliciosa ou abrir um arquivo malicioso. A falha existe no tratamento de objetos `Doc`, devido à falta de validação da existência de um objeto antes de realizar operações nele. Um invasor pode explorar isso, em conjunto com outras vulnerabilidades, para executar código arbitrário no contexto do processo atual. **Recomendações** Para o Foxit PDF Reader versão 11.1.0.52543, considere desativar o tratamento de objetos `Doc` como uma solução temporária até que um patch esteja disponível. Restrinja o acesso a páginas ou arquivos potencialmente maliciosos para minimizar o risco de exploração. No momento, não há informações sobre uma versão mais recente que contenha uma correção para esta vulnerabilidade.

**Nome do software vulnerável e versões afetadas** Versões do WebKitGTK anteriores à 2.28.0 Versões do WPE WebKit anteriores à 2.28.0 **Descrição** A vulnerabilidade está relacionada a um problema de corrupção de memória, especificamente um erro de uso após liberação (use-after-free), que pode levar à execução de código arbitrário. Isso pode ser explorado por um invasor remoto para executar código arbitrário. **Recomendações** Para versões do WebKitGTK anteriores à 2.28.0, atualize para a versão 2.28.0 ou posterior, que inclui um gerenciamento de memória aprimorado para corrigir o problema. Para versões do WPE WebKit anteriores à 2.28.0, atualize para a versão 2.28.0 ou posterior, que inclui um gerenciamento de memória aprimorado para corrigir o problema.

**Name of the Vulnerable Software and Affected Versions** Internet Explorer (affected versions not specified) **Description** A remote code execution issue exists due to the scripting engine's handling of objects in memory. This could lead to memory corruption, allowing an attacker to execute arbitrary code in the context of the current user. If the user has administrative rights, the attacker could gain control of the system, enabling them to install programs, view, change, or delete data, or create new accounts with full user rights. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Foxit Reader version 9.0.0.29935 **Description** This issue allows remote attackers to execute arbitrary code on vulnerable installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The flaw exists within the handling of `CPDF Object` objects due to the lack of validating the existence of an object prior to performing operations on it. An attacker can leverage this to execute code under the context of the current process. **Recommendations** For Foxit Reader version 9.0.0.29935, consider disabling the handling of `CPDF Object` objects as a temporary workaround until a patch is available. Restrict access to malicious pages or files to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Foxit Reader version 9.0.0.29935 **Description** This issue allows remote attackers to disclose sensitive information on vulnerable installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The flaw exists within the parsing of PDF documents due to the lack of proper validation of user-supplied data. This can result in a read past the end of an allocated object, potentially allowing an attacker to execute code in the context of the current process when combined with other vulnerabilities. **Recommendations** For Foxit Reader version 9.0.0.29935, consider updating to a newer version that addresses this issue, as the current version allows for the disclosure of sensitive information due to improper validation of user-supplied data in PDF parsing. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Foxit Reader version 8.3.0.14878 **Description** This issue allows remote attackers to disclose sensitive information on vulnerable installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The flaw exists within the parsing of `ObjStm` objects due to the lack of proper validation of user-supplied data, resulting in a read past the end of an allocated object. An attacker can leverage this, in conjunction with other issues, to execute arbitrary code in the context of the current process. **Recommendations** For Foxit Reader version 8.3.0.14878, consider disabling the parsing of `ObjStm` objects as a temporary workaround until a patch is available. Restrict access to potentially malicious files and web pages to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Foxit Reader version 8.3.0.14878 **Description** This issue allows remote attackers to disclose sensitive information on vulnerable installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The flaw exists within the parsing of PDF files due to the lack of proper validation of user-supplied data, resulting in a read past the end of an allocated object. An attacker can leverage this, in conjunction with other issues, to execute code in the context of the current process. **Recommendations** For Foxit Reader version 8.3.0.14878, consider updating to a newer version that addresses this issue, as the current version allows for the disclosure of sensitive information due to improper validation of user-supplied data in PDF parsing. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Foxit Reader version 8.3.0.14878 **Description** This issue allows remote attackers to disclose sensitive information on vulnerable installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The flaw exists within the parsing of PDF files due to the lack of proper validation of user-supplied data, resulting in a read past the end of an allocated object. An attacker can leverage this, in conjunction with other issues, to execute code in the context of the current process. **Recommendations** For Foxit Reader version 8.3.0.14878, consider disabling the PDF parsing functionality until a patch is available to prevent exploitation. Restrict access to malicious pages or files to minimize the risk of sensitive information disclosure. At the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** Quick Heal Internet Security version 10.1.0.316 Quick Heal Total Security version 10.1.0.316 Quick Heal AntiVirus Pro version 10.1.0.316 **Description** The issue is caused by a buffer overflow in memory, which can be exploited by a remote attacker using a specially crafted Mach-O file. This can lead to memory corruption. **Recommendations** For Quick Heal Internet Security version 10.1.0.316, update to a version that fixes the buffer overflow issue. For Quick Heal Total Security version 10.1.0.316, update to a version that fixes the buffer overflow issue. For Quick Heal AntiVirus Pro version 10.1.0.316, update to a version that fixes the buffer overflow issue. As a temporary workaround, consider restricting the use of Mach-O files until a patch is available.

**Name of the Vulnerable Software and Affected Versions** Quick Heal Internet Security version 10.1.0.316 Quick Heal Total Security version 10.1.0.316 Quick Heal AntiVirus Pro version 10.1.0.316 AVG Internet Security (affected versions not specified) **Description** The issue is related to memory corruption that occurs when parsing a malformed Mach-O file. This can be exploited by a remote attacker to cause memory damage. The vulnerability is caused by a buffer overflow operation in memory. **Recommendations** For Quick Heal Internet Security version 10.1.0.316, update to a version that fixes the memory corruption issue when parsing Mach-O files. For Quick Heal Total Security version 10.1.0.316, update to a version that fixes the memory corruption issue when parsing Mach-O files. For Quick Heal AntiVirus Pro version 10.1.0.316, update to a version that fixes the memory corruption issue when parsing Mach-O files. For AVG Internet Security, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Quick Heal Internet Security version 10.1.0.316 Quick Heal Total Security version 10.1.0.316 Quick Heal AntiVirus Pro version 10.1.0.316 **Description** The issue is caused by a buffer overflow in the dynamic memory due to insufficient validation of the `dwCompressionSize` parameter in the Microsoft WIM (WIMHEADER V1 PACKED) file header. This can allow a remote attacker to elevate privileges and execute arbitrary code, potentially leading to Remote Code Execution as well as Privilege Escalation. **Recommendations** For Quick Heal Internet Security version 10.1.0.316, consider disabling the handling of Microsoft WIM files until a patch is available. For Quick Heal Total Security version 10.1.0.316, restrict access to the module responsible for processing WIM files to minimize the risk of exploitation. For Quick Heal AntiVirus Pro version 10.1.0.316, avoid using the `dwCompressionSize` parameter in the WIM file header until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** Foxit Reader versions prior to 8.2.1 PhantomPDF versions prior to 8.2.1 **Description** The issue allows remote attackers to obtain sensitive information or possibly execute arbitrary code via a crafted font in a PDF document. **Recommendations** For Foxit Reader versions prior to 8.2.1, update to version 8.2.1 or later. For PhantomPDF versions prior to 8.2.1, update to version 8.2.1 or later.

**Name of the Vulnerable Software and Affected Versions** Quick Heal Internet Security versions 10.1.0.316 and earlier Quick Heal Total Security versions 10.1.0.316 and earlier Quick Heal AntiVirus Pro versions 10.1.0.316 and earlier **Description** The issue is related to a stack-based buffer overflow that can be triggered by a crafted LC UNIXTHREAD.cmdsize field in a Mach-O file. This occurs when the file is mishandled during a Security Scan operation, also known as a Custom Scan. This can allow remote attackers to execute arbitrary code. **Recommendations** For Quick Heal Internet Security versions 10.1.0.316 and earlier, update to a version later than 10.1.0.316. For Quick Heal Total Security versions 10.1.0.316 and earlier, update to a version later than 10.1.0.316. For Quick Heal AntiVirus Pro versions 10.1.0.316 and earlier, update to a version later than 10.1.0.316.

**Name of the Vulnerable Software and Affected Versions** Microsoft Internet Explorer versions 9 through 11 **Description** The issue is related to the improper disclosure of the contents of Internet Explorer's memory, allowing remote attackers to obtain sensitive information from process memory via a crafted web site. This can provide an attacker with information to further compromise the user's system. The vulnerability is associated with the lack of protection for service data. **Recommendations** For Microsoft Internet Explorer versions 9 through 11, at the moment, there is no information about a newer version that contains a fix for this vulnerability.