Ashraf Alharbi

**Name of the Vulnerable Software and Affected Versions** Panda Global Protection 2016 versions prior to 16.1.2 Panda Antivirus Pro 2016 versions prior to 16.1.2 Panda Small Business Protection versions prior to 16.1.2 Panda Internet Security 2016 versions prior to 16.1.2 **Description** PSEvents.exe in multiple Panda Security products operates hourly with SYSTEM privileges and loads DLL files from a user-writable directory without proper validation. An attacker with low-privileged access who can write DLL files to the monitored directory can achieve arbitrary code execution with SYSTEM privileges. **Recommendations** Update Panda Global Protection 2016 to version 16.1.2 or later. Update Panda Antivirus Pro 2016 to version 16.1.2 or later. Update Panda Small Business Protection to version 16.1.2 or later. Update Panda Internet Security 2016 to version 16.1.2 or later.

Name of the Vulnerable Software and Affected Versions: LAquis SCADA versions 4.1.0.3870 and prior Description: The issue is related to out-of-bounds read vulnerabilities in the LQS file parsing functionality of LAquis SCADA, which may allow remote code execution. This is due to a buffer overflow in memory. The vulnerability can be exploited by a remote attacker to execute arbitrary code. Recommendations: For LAquis SCADA versions 4.1.0.3870 and prior, consider disabling the LQS file parsing functionality until a patch is available to prevent potential remote code execution. Restrict access to the vulnerable component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Foxit Reader version 8.3.1.21155 **Description** This issue allows remote attackers to disclose sensitive information on vulnerable installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The flaw exists within the parsing of `LZWDecode` filters due to the lack of proper validation of user-supplied data. This can result in a read past the end of an allocated object, potentially allowing an attacker to execute code in the context of the current process when combined with other vulnerabilities. **Recommendations** For Foxit Reader version 8.3.1.21155, consider disabling the `LZWDecode` filter as a temporary workaround until a patch is available. Restrict access to potentially malicious files and web pages to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Foxit Reader version 8.3.1.21155 **Description** This issue allows remote attackers to disclose sensitive information on vulnerable installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The flaw exists within the parsing of Image filters due to the lack of proper validation of user-supplied data, resulting in a read past the end of an allocated object. An attacker can leverage this, in conjunction with other issues, to execute code in the context of the current process. **Recommendations** For Foxit Reader version 8.3.1.21155, consider disabling the Image filter parsing functionality as a temporary workaround until a patch is available. Restrict access to potentially malicious files or web pages to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.