Ricardo Narvaja

**Name of the Vulnerable Software and Affected Versions** Microsoft Windows versions prior to the fixed version Microsoft Windows 10 Microsoft Windows 11 Microsoft Windows Server 2016 Microsoft Windows Server 2019 Microsoft Windows Server 2022 **Description** A DLL Hijacking caused by drive remapping combined with a poisoning of the activation cache in Microsoft Windows allows a malicious authenticated attacker to elevate from a medium integrity process to a high integrity process without the intervention of a UAC prompt. This issue can be exploited to bypass user access control and gain full system privileges. The vulnerability is actively being exploited. **Recommendations** For Microsoft Windows 10, update to a version that includes the fix for this vulnerability. For Microsoft Windows 11, update to a version that includes the fix for this vulnerability. For Microsoft Windows Server 2016, update to a version that includes the fix for this vulnerability. For Microsoft Windows Server 2019, update to a version that includes the fix for this vulnerability. For Microsoft Windows Server 2022, update to a version that includes the fix for this vulnerability. As a temporary workaround, consider restricting access to the drive remapping feature to minimize the risk of exploitation. Avoid using the vulnerable drive remapping feature until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** Microsoft Windows 10, Windows 11, Windows Server 2016, Windows Server 2019, and Windows Server 2022 (affected versions not specified) **Description** A Denial of Service in the CLFS.sys driver allows a malicious authenticated low-privilege user to cause a Blue Screen of Death via a forced call to the `KeBugCheckEx` function. The vulnerability is caused by improper validation of specified quantities in input data, leading to an unrecoverable inconsistency. This flaw can be exploited to crash systems repeatedly, disrupting operations. The estimated number of potentially affected devices worldwide is not specified. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Advantech WebAccess versions 7.2 **Description** A stack-based buffer overflow issue allows remote attackers to execute arbitrary code via the `UserName` parameter. **Recommendations** For Advantech WebAccess version 7.2, update to a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** Advantech WebAccess version 7.2 **Description** A stack-based buffer overflow issue allows remote attackers to execute arbitrary code via the `password` parameter. **Recommendations** For Advantech WebAccess version 7.2, consider restricting access to the login functionality until a patch is available. Avoid using the `password` parameter in a way that could trigger the buffer overflow until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** XnView versions prior to 2.04 **Description** A buffer overflow issue allows remote attackers to execute arbitrary code via a crafted PCT file. **Recommendations** For versions prior to 2.04, update to version 2.04 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Lattice Diamond Programmer version 1.4.2 **Description** The issue allows user-assisted remote attackers to cause a denial of service and execute arbitrary code via a long string in a version attribute of an `ispXCF` element in an `.xcf` file. **Recommendations** For Lattice Diamond Programmer version 1.4.2, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** VLC Media Player versions prior to 1.1.8 **Description** The issue allows remote attackers to execute arbitrary code via a crafted width in an NSV file. This is related to the libdirectx plugin.dll component. **Recommendations** For versions prior to 1.1.8, update to version 1.1.8 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Microsoft Office Word versions 2000 SP3 and 2002 SP3 Microsoft Office 2004 for Mac **Description** A remote code execution issue exists in the way Word handles specially crafted Word files, potentially allowing arbitrary code execution if a user opens a malformed file. This could be triggered by a crafted lcbPlcfBkfSdt field in the File Information Block (FIB), bypassing an initialization step and causing an "arbitrary free." Users with fewer user rights on the system may be less impacted than those operating with administrative rights. **Recommendations** For Microsoft Office Word 2000 SP3, update to a version that is not affected by this issue. For Microsoft Office Word 2002 SP3, apply the necessary patch or update to a secure version. For Microsoft Office 2004 for Mac, consider disabling the handling of specially crafted Word files until a patch is available.