Alertas de Seguridad de la Información

COVESA Open1722 through 0.9.2 contains an integer truncation vulnerability in acf-can-listener.c that allows unauthenticated remote attackers to cause the CAN listener to transmit process stack memory onto the CAN bus by sending a rejected UDP datagram with a matching AVTP stream ID. The num_can_msgs variable declared as uint8_t truncates the -1 error return value from avtp_to_can() to 255, causin…

Numeric truncation error in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.

Numeric truncation error in Microsoft Digest Authentication allows an authorized attacker to elevate privileges locally.