Aleksandar Nikolic

Name of the Vulnerable Software and Affected Versions: ippusbxd version 1.34 Description: A stack based buffer overflow vulnerability exists in ippusbxd. A specially configured printer supporting IPP-over-USB can cause a buffer overflow, potentially leading to arbitrary code execution within a privileged service. Exploitation requires a malicious device connected to the vulnerable system via USB. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Foxit Reader version 12.1.2.15356 **Description** A use-after-free issue exists in the way Foxit Reader handles a signature field, allowing a specially crafted Javascript code inside a malicious PDF document to trigger reuse of a previously freed object. This can lead to memory corruption and result in arbitrary code execution. An attacker needs to trick the user into opening the malicious file to trigger this issue. Exploitation is also possible if a user visits a specially crafted, malicious site if the browser plugin extension is enabled. **Recommendations** For Foxit Reader version 12.1.2.15356, consider disabling the browser plugin extension to minimize the risk of exploitation until a patch is available. As a temporary workaround, avoid opening malicious PDF files and restrict access to untrusted sites. At the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** Foxit Reader version 12.1.2.15332 Foxit PDF Editor (affected versions not specified) **Description** A type confusion vulnerability exists in the Javascript `checkThisBox` method. Specially crafted Javascript code inside a malicious PDF document can cause memory corruption and lead to remote code execution. The user would need to open a malicious file to trigger the issue. The vulnerability can be exploited by a remote attacker using a specially created PDF file. **Recommendations** For Foxit Reader version 12.1.2.15332, consider disabling the `checkThisBox` method until a patch is available. For Foxit PDF Editor, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Foxit PDF Reader version 12.1.2.15332 **Description** A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader. By prematurely deleting objects associated with pages, a specially crafted PDF document can trigger the reuse of previously freed memory, which can lead to arbitrary code execution. An attacker needs to trick the user into opening the malicious file to trigger this vulnerability. Exploitation is also possible if a user visits a specially crafted, malicious site if the browser plugin extension is enabled. **Recommendations** For Foxit PDF Reader version 12.1.2.15332, consider disabling the JavaScript engine in the PDF Reader as a temporary workaround until a patch is available. Restrict access to malicious PDF files and avoid visiting untrusted websites with the browser plugin extension enabled. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Foxit PDF Reader version 12.1.2.15332 **Description** A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader. By prematurely deleting objects associated with pages, a specially crafted PDF document can trigger the reuse of previously freed memory, which can lead to arbitrary code execution. An attacker needs to trick the user into opening the malicious file to trigger this vulnerability. Exploitation is also possible if a user visits a specially crafted, malicious site if the browser plugin extension is enabled. **Recommendations** For Foxit PDF Reader version 12.1.2.15332, consider disabling the JavaScript engine in the PDF Reader as a temporary workaround until a patch is available. Restrict access to malicious sites and avoid opening suspicious PDF files to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Foxit Reader version 12.1.2.15332 **Description** A use-after-free vulnerability exists in the way Foxit Reader handles destroying annotations. Specially crafted Javascript code inside a malicious PDF document can trigger reuse of a previously freed object, which can lead to memory corruption and result in arbitrary code execution. An attacker needs to trick the user into opening the malicious file to trigger this vulnerability. Exploitation is also possible if a user visits a specially crafted, malicious site if the browser plugin extension is enabled. **Recommendations** For Foxit Reader version 12.1.2.15332, consider disabling the browser plugin extension to minimize the risk of exploitation until a patch is available. As a temporary workaround, avoid opening malicious PDF documents or visiting specially crafted, malicious sites. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Foxit PDF Reader version 12.1.1.15289 Foxit PDF Editor (affected versions not specified) **Description** A use-after-free issue exists in the JavaScript engine, allowing an attacker to execute arbitrary code by manipulating form fields of a specific type in a specially crafted PDF document. This can lead to memory corruption. Exploitation is possible if a user opens a malicious file or visits a specially crafted site with the browser plugin extension enabled. **Recommendations** For Foxit PDF Reader version 12.1.1.15289, consider disabling the JavaScript engine until a patch is available. Restrict access to malicious PDF files to minimize the risk of exploitation. Avoid using the browser plugin extension until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Edge (Chromium-based) (affected versions not specified) **Description** The issue is related to a buffer overflow in memory, which can be exploited to execute arbitrary code. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** VMware vCenter Server (affected versions not specified) **Description** The issue is related to a heap overflow vulnerability in the implementation of the DCERPC protocol in VMware vCenter Server. This vulnerability can be exploited by a malicious actor with network access to execute arbitrary code on the underlying operating system that hosts vCenter Server. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** VMware vCenter Server (affected versions not specified) **Description** The issue is related to an out-of-bounds read vulnerability in the implementation of the DCERPC protocol in VMware vCenter Server. A malicious actor with network access to vCenter Server may trigger an out-of-bounds read by sending a specially crafted packet, leading to a denial-of-service of certain services, including vcad, vmdird, and vmafdd. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 13.3 **Description** A denial-of-service issue was addressed with improved memory handling. A user in a privileged network position may be able to cause a denial-of-service. **Recommendations** For versions prior to 13.3, update to macOS Ventura 13.3 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 11.7.5 macOS versions prior to 12.6.4 macOS versions prior to 13.3 **Description** The issue was addressed with improved memory handling. A remote user may be able to cause unexpected system termination or corrupt kernel memory. **Recommendations** For macOS versions prior to 11.7.5, update to macOS Big Sur 11.7.5. For macOS versions prior to 12.6.4, update to macOS Monterey 12.6.4. For macOS versions prior to 13.3, update to macOS Ventura 13.3.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 13.3 macOS versions prior to 12.6.4 macOS versions prior to 11.7.5 **Description** The issue was addressed with improved bounds checks. A remote user may be able to cause unexpected app termination or arbitrary code execution. **Recommendations** For versions prior to 13.3, update to macOS Ventura 13.3. For versions prior to 12.6.4, update to macOS Monterey 12.6.4. For versions prior to 11.7.5, update to macOS Big Sur 11.7.5.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 13.3 macOS Monterey versions prior to 12.6.4 **Description** A memory initialization issue was addressed, which may allow a remote attacker to cause unexpected app termination or arbitrary code execution. **Recommendations** For macOS versions prior to 13.3, update to macOS Ventura 13.3 to resolve the issue. For macOS Monterey versions prior to 12.6.4, update to macOS Monterey 12.6.4 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 13.3 macOS Monterey versions prior to 12.6.4 macOS Big Sur versions prior to 11.7.5 **Description** The issue was addressed with improved memory handling. A remote user may be able to cause unexpected system termination or corrupt kernel memory. **Recommendations** For macOS versions prior to 13.3, update to macOS Ventura 13.3. For macOS Monterey versions prior to 12.6.4, update to macOS Monterey 12.6.4. For macOS Big Sur versions prior to 11.7.5, update to macOS Big Sur 11.7.5.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 13.2 **Description** A buffer overflow issue was addressed with improved memory handling. Mounting a maliciously crafted Samba network share may lead to arbitrary code execution. **Recommendations** For versions prior to 13.2, update to macOS Ventura 13.2 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 11.7.3 macOS versions prior to 12.6.3 macOS versions prior to 13.2 **Description** A buffer overflow issue was addressed with improved memory handling. Mounting a maliciously crafted Samba network share may lead to arbitrary code execution. **Recommendations** For macOS versions prior to 11.7.3, update to macOS Big Sur 11.7.3. For macOS versions prior to 12.6.3, update to macOS Monterey 12.6.3. For macOS versions prior to 13.2, update to macOS Ventura 13.2.

**Name of the Vulnerable Software and Affected Versions** Qt Project Qt version 6.3.2 **Description** A buffer overflow vulnerability exists in the QML QtScript Reflect API of Qt Project Qt. A specially-crafted JavaScript code can trigger an out-of-bounds memory access, which can lead to arbitrary code execution. The target application would need to access a malicious web page to trigger this vulnerability. **Recommendations** For Qt Project Qt version 6.3.2, consider disabling access to the QML QtScript Reflect API until a patch is available. Restrict access to malicious web pages to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Foxit Software's PDF Reader version 12.0.1.12430 **Description** A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader. A specially-crafted PDF document can trigger the reuse of previously freed memory via misusing Optional Content Group API, which can lead to arbitrary code execution. An attacker needs to trick the user into opening the malicious file to trigger this vulnerability. Exploitation is also possible if a user visits a specially-crafted, malicious site if the browser plugin extension is enabled. **Recommendations** For Foxit Software's PDF Reader version 12.0.1.12430, consider disabling the JavaScript engine or the browser plugin extension as a temporary workaround until a patch is available. Avoid opening suspicious PDF documents or visiting untrusted websites with the browser plugin extension enabled. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Foxit Software's PDF Reader version 12.0.1.12430 **Description** A use-after-free issue exists in the JavaScript engine of Foxit Software's PDF Reader. This occurs when annotation objects are prematurely destroyed, allowing a specially-crafted PDF document to trigger the reuse of previously freed memory. This can lead to arbitrary code execution. An attacker must trick the user into opening the malicious file to trigger this issue. Additionally, exploitation is possible if a user visits a specially-crafted, malicious site when the browser plugin extension is enabled. **Recommendations** For version 12.0.1.12430, consider disabling the JavaScript engine in the PDF Reader as a temporary workaround until a patch is available. Restrict access to malicious sites and avoid opening untrusted PDF documents to minimize the risk of exploitation.