Nikita Tarakanov

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 16.2 iPadOS versions prior to 16.2 iOS versions prior to 15.7.2 iPadOS versions prior to 15.7.2 tvOS versions prior to 16.2 watchOS versions prior to 9.2 **Description** An out-of-bounds write issue was addressed with improved input validation. Parsing a maliciously crafted video file may lead to kernel code execution. **Recommendations** For iOS versions prior to 16.2, update to iOS 16.2 or later. For iPadOS versions prior to 16.2, update to iPadOS 16.2 or later. For iOS versions prior to 15.7.2, update to iOS 15.7.2 or later. For iPadOS versions prior to 15.7.2, update to iPadOS 15.7.2 or later. For tvOS versions prior to 16.2, update to tvOS 16.2 or later. For watchOS versions prior to 9.2, update to watchOS 9.2 or later.

**Name of the Vulnerable Software and Affected Versions** Microsoft Office versions 2007 SP2 through 2007 SP3 Microsoft Office 2010 Gold and 2010 SP1 Microsoft Office for Mac 2011 **Description** A remote code execution issue exists in the way Microsoft Word handles specially crafted Word files, allowing attackers to execute arbitrary code. This could enable an attacker to take complete control of an affected system, install programs, view, change, or delete data, or create new accounts with full user rights. **Recommendations** For Microsoft Office 2007 SP2 and SP3, update to a version that is not affected by this issue. For Microsoft Office 2010 Gold and SP1, update to a version that is not affected by this issue. For Microsoft Office for Mac 2011, update to a version that is not affected by this issue. As a temporary workaround, consider avoiding the use of Microsoft Word to open specially crafted Word files until a patch is available.

**Name of the Vulnerable Software and Affected Versions** Apple Safari versions prior to 5.0.6 **Description** The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via a crafted web site. **Recommendations** For Apple Safari versions prior to 5.0.6, update to version 5.0.6 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** CA Internet Security Suite r3 CA Internet Security Suite r4 versions prior to 9.0.0.184 CA Internet Security Suite r5 versions prior to 10.0.0.217 **Description** The issue is related to the `vetmonnt.sys` driver, which does not properly verify IOCTL calls. This allows local users to cause a denial of service, resulting in a system crash, by making a crafted call. **Recommendations** For CA Internet Security Suite r3, update to a newer version that includes the fix for the `vetmonnt.sys` driver issue. For CA Internet Security Suite r4 versions prior to 9.0.0.184, update to version 9.0.0.184 or later to resolve the issue. For CA Internet Security Suite r5 versions prior to 10.0.0.217, update to version 10.0.0.217 or later to resolve the issue.

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions prior to Windows 2000 SP4, XP SP2, Server 2003 SP2, and Vista Gold Description: The issue concerns the Message Queuing (MSMQ) service, which does not properly validate unspecified IOCTL request data from user mode before passing it to kernel mode. This allows local users to gain privileges via a crafted request. Recommendations: For Windows 2000 SP4, XP SP2, Server 2003 SP2, and Vista Gold, update to a newer version to mitigate the risk. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: VMware Workstation versions 6.5.1 and earlier VMware Player versions 2.5.1 and earlier VMware ACE versions 2.5.1 and earlier VMware Server versions prior to 1.0.9 build 156507 and versions prior to 2.0.1 build 156745 VMware Fusion versions prior to 2.0.2 build 147997 VMware ESXi version 3.5 VMware ESX versions 3.0.2, 3.0.3, and 3.5 Description: The issue allows guest OS users on Windows to cause a denial of service via unknown vectors when the Descheduled Time Accounting Service is not running. Recommendations: For VMware Workstation versions 6.5.1 and earlier, update to a version later than 6.5.1. For VMware Player versions 2.5.1 and earlier, update to a version later than 2.5.1. For VMware ACE versions 2.5.1 and earlier, update to a version later than 2.5.1. For VMware Server versions prior to 1.0.9 build 156507, update to version 1.0.9 build 156507 or later. For VMware Server versions prior to 2.0.1 build 156745, update to version 2.0.1 build 156745 or later. For VMware Fusion versions prior to 2.0.2 build 147997, update to version 2.0.2 build 147997 or later. For VMware ESXi version 3.5, update to a version later than 3.5. For VMware ESX versions 3.0.2, 3.0.3, and 3.5, update to a version later than 3.5.

**Name of the Vulnerable Software and Affected Versions** PGP Desktop versions prior to 9.10 **Description** The issue allows local users to cause a denial of service by crashing the system via a crafted IOCTL request to `pgpdisk.sys`. Additionally, it enables local users to cause a denial of service and execute arbitrary code via a crafted IRP in an IOCTL request to `pgpwded.sys`. **Recommendations** For versions prior to 9.10, update to version 9.10 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** VMware Workstation versions 6.5.1 and earlier VMware Player versions 2.5.1 and earlier VMware ACE versions 2.5.1 and earlier VMware Server versions prior to 2.0.1 build 156745 **Description** The issue allows local users to gain privileges via unknown vectors due to an unspecified vulnerability in the vmci.sys component of the Virtual Machine Communication Interface (VMCI). **Recommendations** For VMware Workstation versions 6.5.1 and earlier, update to a version later than 6.5.1. For VMware Player versions 2.5.1 and earlier, update to a version later than 2.5.1. For VMware ACE versions 2.5.1 and earlier, update to a version later than 2.5.1. For VMware Server versions prior to 2.0.1 build 156745, update to version 2.0.1 build 156745 or later.

**Name of the Vulnerable Software and Affected Versions** VMware Workstation versions 6.5.1 and earlier VMware Player versions 2.5.1 and earlier VMware ACE versions 2.5.1 and earlier VMware Server versions prior to 1.0.9 build 156507 VMware Server versions 2.0.x prior to 2.0.1 build 156745 **Description** The issue allows local users to cause a denial of service via unknown vectors. **Recommendations** For VMware Workstation versions 6.5.1 and earlier, update to a version later than 6.5.1. For VMware Player versions 2.5.1 and earlier, update to a version later than 2.5.1. For VMware ACE versions 2.5.1 and earlier, update to a version later than 2.5.1. For VMware Server versions prior to 1.0.9 build 156507, update to version 1.0.9 build 156507 or later. For VMware Server versions 2.0.x prior to 2.0.1 build 156745, update to version 2.0.1 build 156745 or later.

**Name of the Vulnerable Software and Affected Versions** Trend Micro Internet Pro versions 2008 and 2009 Trend Micro Security Pro versions 2008 and 2009 **Description** The issue allows local users to gain privileges through a crafted IRP in a METHOD NEITHER IOCTL request to the Devicetmactmon device, which overwrites memory. **Recommendations** For Trend Micro Internet Pro versions 2008 and 2009, update the TrendMicro Activity Monitor Module to a version that is not affected by this issue. For Trend Micro Security Pro versions 2008 and 2009, update the TrendMicro Activity Monitor Module to a version that is not affected by this issue.

**Name of the Vulnerable Software and Affected Versions** ElbyCDIO.sys versions 6.0.2.0 and earlier AnyDVD versions prior to 6.5.2.6 Virtual CloneDrive versions 5.4.2.3 and earlier CloneDVD versions 2.9.2.0 and earlier CloneCD versions 5.3.1.3 and earlier **Description** The issue exists due to an error in input validation in the METHOD NEITHER method in the ElbyCDIO.sys driver, which allows local users to cause a denial of service (system crash) via a crafted IOCTL call. This can lead to memory corruption and system termination. The estimated number of potentially affected devices and details about real-world incidents are not provided. **Recommendations** For ElbyCDIO.sys version 6.0.2.0 and earlier, consider disabling the METHOD NEITHER communication method for IOCTLs until a patch is available. For AnyDVD versions prior to 6.5.2.6, update to version 6.5.2.6 or later. For Virtual CloneDrive versions 5.4.2.3 and earlier, update to a version later than 5.4.2.3. For CloneDVD versions 2.9.2.0 and earlier, update to a version later than 2.9.2.0. For CloneCD versions 5.3.1.3 and earlier, update to a version later than 5.3.1.3.