Ling

Name of the Vulnerable Software and Affected Versions: JScript scripting engine versions 5.1, 5.6, 5.7, and 5.8 Description: The issue is related to the improper loading of decoded scripts into memory before execution, which can lead to memory corruption. This can be exploited by remote attackers via a crafted web site, allowing them to execute arbitrary code. Recommendations: For JScript scripting engine version 5.1, update to a version that properly handles script loading into memory. For JScript scripting engine version 5.6, update to a version that properly handles script loading into memory. For JScript scripting engine version 5.7, update to a version that properly handles script loading into memory. For JScript scripting engine version 5.8, update to a version that properly handles script loading into memory.

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer versions 5.01 SP4 through 8 Description: A remote code execution issue exists due to improper handling of table operations, allowing attackers to execute arbitrary code via a crafted HTML document that triggers memory corruption by adding malformed elements to an empty DIV element, related to the `getElementsByTagName` method. This could be exploited by constructing a specially crafted Web page. When a user views the Web page, the issue could allow remote code execution, potentially giving an attacker the same user rights as the logged-on user. If the user has administrative rights, the attacker could take complete control of the affected system, enabling them to install programs, view, change, or delete data, or create new accounts with full user rights. Recommendations: For Microsoft Internet Explorer versions 5.01 SP4 through 8, update to a newer version to mitigate the risk. As a temporary workaround, consider restricting access to Web pages that could potentially exploit this issue until a patch is available. Avoid using the `getElementsByTagName` method in affected HTML documents until the issue is resolved.

Name of the Vulnerable Software and Affected Versions: Apple Safari versions prior to 4.0 iPhone OS versions 1.0 through 2.2.1 iPhone OS for iPod touch versions 1.1 through 2.2.1 Description: The issue allows remote attackers to execute arbitrary code or cause a denial of service by destroying a `document.body` element that has an unspecified XML container with elements that support the `dir` attribute. This is a use-after-free vulnerability in the JavaScript DOM implementation in WebKit. Recommendations: For Apple Safari versions prior to 4.0, update to version 4.0 or later. For iPhone OS versions 1.0 through 2.2.1, update to a version later than 2.2.1. For iPhone OS for iPod touch versions 1.1 through 2.2.1, update to a version later than 2.2.1.

**Name of the Vulnerable Software and Affected Versions** Microsoft Office PowerPoint versions 2002 SP3 through 2003 SP3 Microsoft Office 2004 for Mac **Description** A heap-based buffer overflow issue allows remote attackers to execute arbitrary code via a crafted structure in a Notes container in a PowerPoint file. This occurs when PowerPoint reads more data than was allocated when creating a C++ object, leading to an overwrite of a function pointer. The vulnerability can be exploited by creating a specially crafted PowerPoint file that could be included as an e-mail attachment or hosted on a specially crafted or compromised Web site. **Recommendations** For Microsoft Office PowerPoint versions 2002 SP3 and 2003 SP3, update to a version that is not affected by this issue. For Microsoft Office 2004 for Mac, update to a version that is not affected by this issue. As a temporary workaround, consider avoiding the use of Notes containers in PowerPoint files until a patch is available.