Edward Torkington

Name of the Vulnerable Software and Affected Versions: pfSense versions 2.4.4-p2 and earlier Description: An authenticated Cross-Site Scripting issue was found in the pfSense software WebGUI. The `descr` (description) parameter of wake-on-LAN entries in the widgets/widgets/wake on lan widget.php component was not properly encoded, leading to a possible stored XSS. Recommendations: For versions 2.4.4-p2 and earlier, update to a version that contains a fix for this issue to prevent potential exploitation.

**Name of the Vulnerable Software and Affected Versions** Windows ActiveX Installer Service (affected versions not specified) **Description** The issue is related to an elevation of privilege vulnerability that exists due to the improper handling of memory by the Windows ActiveX Installer Service. To exploit this, an attacker would first need to gain execution on the victim system. This could potentially allow an attacker to elevate their privileges using a specially crafted application. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows Backup Service (affected versions not specified) **Description** The issue is related to the improper handling of file operations by the Windows Backup Service, which can lead to an elevation of privilege. To exploit this, an attacker must first gain execution on the victim system. This can potentially allow an attacker to elevate their privileges using a specially crafted application. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows (affected versions not specified) **Description** The issue is related to errors in file operation handling in the Microsoft Store Install Service of Windows operating systems. It allows an attacker to potentially elevate their privileges using a specially crafted application. The vulnerability can be exploited to impact the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows (affected versions not specified) **Description** The issue is related to the incorrect handling of objects in memory by the ActiveX Installer Service in Windows operating systems. This can be exploited by an attacker using a specially crafted application to elevate their privileges. The vulnerability allows attackers to affect the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows Backup Service (affected versions not specified) **Description** The issue is related to the improper handling of file operations by the Windows Backup Service, which can lead to an elevation of privilege. To exploit this, an attacker must first gain execution on the victim system. This can potentially allow an attacker to increase their privileges using a specially crafted application. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Windows Universal Plug and Play (UPnP) Service (affected versions not specified) **Description** An elevation of privilege issue exists due to the improper allowance of COM object creation by the Windows Universal Plug and Play (UPnP) service. This could allow an attacker to elevate their privileges or execute arbitrary code. The vulnerability is related to unsafe privilege management in the Windows UPnP service. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows (affected versions not specified) **Description** The issue is related to an elevation of privilege vulnerability in the ActiveX Installer service, which may allow access to files without proper authentication. This could enable an attacker to gain unauthorized access to protected information using a specially crafted application. The vulnerability is associated with insecure privilege management. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Internet Explorer (affected versions not specified) **Description** The issue is related to incorrect access to objects in memory, which can cause memory errors and allow an attacker to execute arbitrary code in the context of the current user. This is due to use-after-free vulnerabilities. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Internet Explorer (affected versions not specified) **Description** The issue is related to memory handling errors, allowing an attacker to execute arbitrary code in the context of the current user due to improper access to objects in memory. This could lead to memory corruption, enabling the attacker to execute code. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Windows XP SP3 **Description** A remote code execution issue exists due to improper processing of packets in memory by the Remote Desktop Protocol (RDP) implementation. This allows remote attackers to execute arbitrary code by sending crafted RDP packets, triggering access to a deleted object. An attacker who successfully exploits this issue could run arbitrary code on the target system, potentially installing programs, viewing, changing, or deleting data, or creating new accounts with full user rights. **Recommendations** For Microsoft Windows XP SP3, at the moment, there is no information about a newer version that contains a fix for this vulnerability.