F3Ci

**Name of the Vulnerable Software and Affected Versions** Zahir Accounting Enterprise Plus versions 6 through 10b **Description** The issue allows remote attackers to execute arbitrary code via a crafted CSV file that is accessed through the Import CSV File menu. This is due to stack-based buffer overflows. **Recommendations** For versions 6 through 10b, consider avoiding the use of the Import CSV File menu until a fix is available, and restrict access to this feature to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** CyberLink LabelPrint version 2.5 **Description** The issue allows remote attackers to execute arbitrary code via specific parameters in an lpp project file, including the `author` and `name` parameters inside the INFORMATION tag, the `artist` parameter inside the TRACK tag, or the `default` parameter inside the TEXT tag. **Recommendations** For CyberLink LabelPrint version 2.5, consider avoiding the use of the `author`, `name`, `artist`, and `default` parameters in lpp project files until a fix is available. Restrict access to the lpp project file handling functionality to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.