Void

**Nome do software vulnerável e versões afetadas** voidtools Everything: versões anteriores à 1.4.1 Beta Nightly 2020-08-18 **Descrição** A vulnerabilidade permite a escalada de privilégios por meio de um arquivo de cavalo de Tróia `urlmon.dll` no diretório de instalação. Isso só é relevante se usuários com privilégios baixos puderem gravar no diretório de instalação, o que pode ser considerado um erro de configuração específico do local. **Recomendações** Para versões anteriores à 1.4.1 Beta Nightly 2020-08-18, atualize para a versão 1.4.1 Beta Nightly 2020-08-18 ou posterior para resolver o problema. Como solução temporária, considere restringir o acesso de gravação ao diretório de instalação para impedir que usuários com privilégios limitados explorem essa vulnerabilidade.

**Name of the Vulnerable Software and Affected Versions** Beijing KingSoft Antivirus Online Update Module version 2007.12.29.29 **Description** The issue is related to a heap-based buffer overflow in the KUpdateObj2 Class ActiveX control. This occurs when a long argument is passed to the `SetUninstallName` method, allowing remote attackers to execute arbitrary code. **Recommendations** For version 2007.12.29.29, consider disabling the `SetUninstallName` method in the KUpdateObj2 Class ActiveX control until a patch is available. Restrict access to the UpdateOcx2.dll module to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Mercury/32 version 4.52 **Description** A stack-based buffer overflow issue in the IMAPD component allows remote authenticated users to execute arbitrary code by providing a long argument in a SEARCH ON command. **Recommendations** For Mercury/32 version 4.52, consider restricting access to the IMAPD component until a fix is available, and avoid using long arguments in SEARCH ON commands to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

Name of the Vulnerable Software and Affected Versions: GlobalLink version 2.7.0.8 Description: The issue is related to multiple heap-based buffer overflows that allow remote attackers to execute arbitrary code. This can be achieved through a long eighth argument to the `SetInfo` method in a certain ActiveX control in `glItemCom.dll` or a long second argument to the `SetClientInfo` method in a certain ActiveX control in `glitemflat.dll`. Recommendations: For GlobalLink version 2.7.0.8, consider disabling the `SetInfo` and `SetClientInfo` methods in the affected ActiveX controls until a patch is available. Restrict access to the `glItemCom.dll` and `glitemflat.dll` modules to minimize the risk of exploitation. Avoid using long arguments in the `SetInfo` and `SetClientInfo` methods until the issue is resolved.