J00Ru

**Name of the Vulnerable Software and Affected Versions** FFmpeg version 2.0 **Description** A problematic vulnerability has been found in FFmpeg, affecting the `decode pulses` function. This issue leads to memory corruption and can be initiated remotely. **Recommendations** For FFmpeg version 2.0, it is recommended to apply a patch to fix this issue. As a temporary workaround, consider disabling the `decode pulses` function until a patch is available.

**Name of the Vulnerable Software and Affected Versions** FFmpeg version 2.0 **Description** A critical issue affects the function `decode slice header` of the file `libavcodec/h64.c`, leading to memory corruption. The attack can be launched remotely. **Recommendations** For FFmpeg version 2.0, apply a patch to fix this issue. As a temporary workaround, consider restricting access to the `decode slice header` function until a patch is available.

**Name of the Vulnerable Software and Affected Versions** FFmpeg version 2.0 **Description** A problem has been found in the decode frame function of the libavcodec/ansi.c file. This issue leads to an integer coercion error and can be exploited remotely. **Recommendations** To fix this issue, it is recommended to apply a patch.

**Name of the Vulnerable Software and Affected Versions** FFmpeg version 2.0 **Description** A problematic issue has been found in FFmpeg, affecting the `add yblock` function of the `libavcodec/snow.h` file. This manipulation leads to memory corruption and can be initiated remotely. **Recommendations** For FFmpeg version 2.0, it is recommended to apply a patch to fix this issue. As a temporary workaround, consider disabling the `add yblock` function until a patch is available.

**Name of the Vulnerable Software and Affected Versions** FFmpeg version 2.0 **Description** A problem has been found in FFmpeg. It is related to an unknown function in the libavcodec/dxtroy.c file, which leads to an integer coercion error. This issue can be exploited remotely. **Recommendations** For FFmpeg version 2.0, it is recommended to apply a patch to fix this problem. As a temporary workaround, consider restricting access to the affected function in the libavcodec/dxtroy.c file until a patch is available.

**Name of the Vulnerable Software and Affected Versions** FFmpeg version 2.0 **Description** A problem has been found that affects the `msrle decode frame` function of the file libavcodec/msrle.c. This issue leads to memory corruption and can be initiated remotely. **Recommendations** For FFmpeg version 2.0, it is recommended to apply a patch to fix this issue. As a temporary workaround, consider disabling the `msrle decode frame` function until a patch is available.

**Name of the Vulnerable Software and Affected Versions** FreeType versions prior to 2.6.2 **Description** The issue is related to a heap-based buffer over-read in the `tt cmap14 validate` function located in `sfnt/ttcmap.c`. **Recommendations** For versions prior to 2.6.2, update to version 2.6.2 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Apple iOS versions prior to 9.2 Apple OS X versions prior to 10.11.2 Apple tvOS versions prior to 9.1 Apple watchOS versions prior to 2.1 **Description** The issue is related to the zlib component in the Compression module, which fails to initialize memory for a specific data structure. This allows remote attackers to execute arbitrary code via a crafted web site. **Recommendations** For Apple iOS versions prior to 9.2, update to version 9.2 or later. For Apple OS X versions prior to 10.11.2, update to version 10.11.2 or later. For Apple tvOS versions prior to 9.1, update to version 9.1 or later. For Apple watchOS versions prior to 2.1, update to version 2.1 or later.

**Name of the Vulnerable Software and Affected Versions** FreeType versions prior to 2.5.4 **Description** The issue concerns the `t42 parse encoding` function in `type42/t42parse.c`, which does not properly update the current position for immediates-only mode. This allows remote attackers to cause a denial of service, specifically an infinite loop, by providing a Type42 font. **Recommendations** For versions prior to 2.5.4, update to version 2.5.4 or later to resolve the issue. As a temporary workaround, consider restricting the use of Type42 fonts until the update is applied.

**Name of the Vulnerable Software and Affected Versions** FreeType versions prior to 2.5.4 **Description** The issue is related to several functions in FreeType, including `t1 parse font matrix`, `cid parse font matrix`, `t42 parse font matrix`, and `ps parser load field`, which do not check return values. This allows remote attackers to cause a denial of service, resulting in uninitialized memory access and application crash, or possibly have other unspecified impacts through a crafted font. **Recommendations** For versions prior to 2.5.4, update to version 2.5.4 or later to resolve the issue. As a temporary workaround, consider restricting the use of the vulnerable functions until a patch is available. Avoid using crafted fonts that could exploit this issue until the update is applied.

win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT allows local users to gain privileges via a crafted application, aka "Win32k Multiple Fetch Vulnerability," a different vulnerability than CVE-2013-1342, CVE-2013-1343, CVE-2013-1344, and CVE-2013-3864.

win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT allows local users to gain privileges via a crafted application, aka "Win32k Multiple Fetch Vulnerability," a different vulnerability than CVE-2013-1342, CVE-2013-1343, CVE-2013-1344, and CVE-2013-3865.

**Name of the Vulnerable Software and Affected Versions** Windows (affected versions not specified) **Description** Elevation of privilege issues exist due to the Windows kernel-mode driver's improper handling of objects in memory. An attacker who successfully exploits these issues could gain elevated privileges and read arbitrary amounts of kernel memory. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this issue.

win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT allows local users to gain privileges via a crafted application, aka "Win32k Multiple Fetch Vulnerability," a different vulnerability than CVE-2013-1342, CVE-2013-1343, CVE-2013-3864, and CVE-2013-3865.

win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT allows local users to gain privileges via a crafted application, aka "Win32k Multiple Fetch Vulnerability," a different vulnerability than CVE-2013-1342, CVE-2013-1344, CVE-2013-3864, and CVE-2013-3865.

The NT Virtual DOS Machine (NTVDM) subsystem in the kernel in Microsoft Windows XP SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, Windows 7 SP1, and Windows 8 on 32-bit platforms does not properly validate kernel-memory addresses, which allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted application, aka "Windows Kernel Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3196 and CVE-2013-3198.

The NT Virtual DOS Machine (NTVDM) subsystem in the kernel in Microsoft Windows XP SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, Windows 7 SP1, and Windows 8 on 32-bit platforms does not properly validate kernel-memory addresses, which allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted application, aka "Windows Kernel Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3196 and CVE-2013-3197.

**Name of the Vulnerable Software and Affected Versions** Windows XP version SP3 Windows Server 2003 version SP2 Windows Vista version SP2 Windows Server 2008 version SP2 Windows 7 version SP1 Windows 8 on 32-bit platforms **Description** An issue exists where the Windows kernel does not properly handle objects in memory, allowing local users to obtain sensitive information from kernel memory. This could be achieved via a crafted application. **Recommendations** For Windows XP SP3, update to a newer version to mitigate the risk. For Windows Server 2003 SP2, update to a newer version to mitigate the risk. For Windows Vista SP2, update to a newer version to mitigate the risk. For Windows Server 2008 SP2, update to a newer version to mitigate the risk. For Windows 7 SP1, update to a newer version to mitigate the risk. For Windows 8 on 32-bit platforms, update to a newer version to mitigate the risk.

**Name of the Vulnerable Software and Affected Versions** Microsoft Windows Vista SP2 Microsoft Windows Server 2008 SP2 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2008 R2 SP1 Microsoft Windows 7 Gold Microsoft Windows 7 SP1 Microsoft Windows 8 Microsoft Windows Server 2012 Microsoft Windows RT **Description** The issue is related to a race condition in the win32k.sys kernel-mode driver, which allows local users to gain privileges via a crafted application. This is due to improper handling of objects in memory. An attacker who successfully exploits this could gain elevated privileges and read arbitrary amounts of kernel memory. **Recommendations** For Microsoft Windows Vista SP2, update to a newer version to mitigate the risk. For Microsoft Windows Server 2008 SP2, update to a newer version to mitigate the risk. For Microsoft Windows Server 2008 R2, update to a newer version to mitigate the risk. For Microsoft Windows Server 2008 R2 SP1, update to a newer version to mitigate the risk. For Microsoft Windows 7 Gold, update to a newer version to mitigate the risk. For Microsoft Windows 7 SP1, update to a newer version to mitigate the risk. For Microsoft Windows 8, update to a newer version to mitigate the risk. For Microsoft Windows Server 2012, update to a newer version to mitigate the risk. For Microsoft Windows RT, update to a newer version to mitigate the risk.

**Name of the Vulnerable Software and Affected Versions** Microsoft Windows XP versions SP2 through SP3 Microsoft Windows Server 2003 version SP2 Microsoft Windows Vista version SP2 Microsoft Windows Server 2008 versions SP2 through R2 SP1 Microsoft Windows 7 versions Gold through SP1 **Description** A race condition in the win32k.sys kernel-mode driver allows local users to gain privileges and read the contents of arbitrary kernel memory locations via a crafted application. **Recommendations** For Microsoft Windows XP versions SP2 through SP3, apply the patch provided by Microsoft to resolve the issue. For Microsoft Windows Server 2003 version SP2, apply the patch provided by Microsoft to resolve the issue. For Microsoft Windows Vista version SP2, apply the patch provided by Microsoft to resolve the issue. For Microsoft Windows Server 2008 versions SP2 through R2 SP1, apply the patch provided by Microsoft to resolve the issue. For Microsoft Windows 7 versions Gold through SP1, apply the patch provided by Microsoft to resolve the issue.