Cris Neckar

**Name of the Vulnerable Software and Affected Versions** ViaBTC Exchange Server versions prior to 2018-08-21 **Description** The issue is related to an integer overflow in the utils/ut ws svr.c file, which can lead to memory corruption. **Recommendations** For versions prior to 2018-08-21, update to a version released after 2018-08-21 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** ViaBTC Exchange Server versions prior to 2018-08-21 **Description** The issue is related to an integer overflow in the network/nw buf.c file, which can lead to memory corruption. **Recommendations** For versions prior to 2018-08-21, update to a version released after 2018-08-21 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** ViaBTC Exchange Server versions prior to 2018-08-21 **Description** The issue is related to an integer overflow in the utils/ut rpc.c file, which can lead to memory corruption. **Recommendations** For versions prior to 2018-08-21, update to a version released after 2018-08-21 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 11.0.696.65 **Description** The issue is related to an integer underflow in the HTMLFormElement::removeFormElement function, which can be triggered by a crafted HTML document containing a FORM element. This can cause a denial of service, resulting in an application crash, and may have other unspecified impacts. **Recommendations** For versions prior to 11.0.696.65, update to version 11.0.696.65 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Microsoft Internet Explorer versions 8 through 9 **Description** The issue is related to an integer overflow that occurs during object copying due to an incorrect size calculation, allowing remote attackers to execute arbitrary code. This can lead to memory corruption, enabling an attacker to execute arbitrary code in the context of the current user. **Recommendations** For Microsoft Internet Explorer versions 8 through 9, update to a version that includes the fix for the integer overflow issue to prevent remote code execution.

**Name of the Vulnerable Software and Affected Versions** WebKit, as used in Apple iOS versions prior to 5.1 WebKit, as used in Apple iTunes versions prior to 10.6 **Description** The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via a crafted web site. **Recommendations** For Apple iOS versions prior to 5.1, update to version 5.1 or later. For Apple iTunes versions prior to 10.6, update to version 10.6 or later.

**Name of the Vulnerable Software and Affected Versions** WebKit, as used in Apple iOS versions prior to 5.1 WebKit, as used in Apple iTunes versions prior to 10.6 **Description** The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via a crafted web site. **Recommendations** For Apple iOS versions prior to 5.1, update to version 5.1 or later. For Apple iTunes versions prior to 10.6, update to version 10.6 or later.

**Name of the Vulnerable Software and Affected Versions** WebKit, as used in Apple iOS versions prior to 5.1 WebKit, as used in Apple iTunes versions prior to 10.6 **Description** The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via a crafted web site. **Recommendations** For Apple iOS versions prior to 5.1, update to version 5.1 or later. For Apple iTunes versions prior to 10.6, update to version 10.6 or later.

**Name of the Vulnerable Software and Affected Versions** WebKit, as used in Apple iTunes versions prior to 10.5 **Description** The issue allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via vectors related to iTunes Store browsing. **Recommendations** For Apple iTunes versions prior to 10.5, update to version 10.5 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Apple iTunes versions prior to 10.5 **Description** The issue allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, through vectors related to iTunes Store browsing. **Recommendations** For Apple iTunes versions prior to 10.5, update to version 10.5 or later to resolve the issue. As a temporary workaround, consider restricting access to the iTunes Store to minimize the risk of exploitation. Avoid using the affected WebKit component in iTunes until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** WebKit, as used in Apple iTunes versions prior to 10.5 **Description** The issue allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via vectors related to iTunes Store browsing. **Recommendations** For Apple iTunes versions prior to 10.5, update to version 10.5 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Apple Safari versions prior to 5.0.3 on Mac OS X 10.5 through 10.6 and Windows Apple Safari versions prior to 4.1.3 on Mac OS X 10.4 **Description** The issue allows remote attackers to execute arbitrary code or cause a denial of service via vectors involving WebSockets, which can lead to an application crash. **Recommendations** For Apple Safari versions prior to 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, update to version 5.0.3 or later. For Apple Safari versions prior to 4.1.3 on Mac OS X 10.4, update to version 4.1.3 or later.

**Name of the Vulnerable Software and Affected Versions** Safari versions prior to 5.0.3 on Mac OS X 10.5 through 10.6 and Windows Safari versions prior to 4.1.3 on Mac OS X 10.4 **Description** The issue allows remote attackers to execute arbitrary code or cause a denial of service due to memory corruption and application crash via a crafted web site. This is caused by improper handling of the :first-letter pseudo-element in a Cascading Style Sheets (CSS) token sequence. **Recommendations** For Safari versions prior to 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, update to version 5.0.3 or later. For Safari versions prior to 4.1.3 on Mac OS X 10.4, update to version 4.1.3 or later.