Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-17325 State: PUBLISHED Published: 2018-03-09T17:00:00 Last Updated: 2024-08-05T20:51:31.028Z Vendors: Huawei Technologies Co., Ltd. Products: HiCinema Problem Types: permission control Description: Huawei video applications HiCinema with software of 8.0.3.308; 8.0.4.300 have a permission control vulnerability. Due to improper verification of specific interface, an attacker who is on the same network with the user can obtain some information through a man-in-the-middle attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180307-01-hicinema-en
CVE ID: CVE-2017-17326 State: PUBLISHED Published: 2018-03-09T17:00:00 Last Updated: 2024-08-05T20:51:31.098Z Vendors: Huawei Technologies Co., Ltd. Products: Mate 9 Pro Problem Types: activation lock bypass Description: Huawei Mate 9 Pro Smartphones with software of LON-AL00BC00B139D; LON-AL00BC00B229 have an activation lock bypass vulnerability. The smartphone is supposed to be activated by the former account after reset if find my phone function is on. The software does not have a sufficient protection of activation lock. Successful exploit could allow an attacker to bypass the activation lock and activate the smartphone by a new account after a series of operation. Additional Analyst Not
ass the activation lock and activate the smartphone by a new account after a series of operation. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171227-01-smartphone-en
CVE ID: CVE-2017-17327 State: PUBLISHED Published: 2018-03-09T17:00:00 Last Updated: 2024-08-05T20:51:31.055Z Vendors: Huawei Technologies Co., Ltd. Products: MHA-AL00A Problem Types: improper resource management Description: Huawei smartphones with software of MHA-AL00AC00B125 have an improper resource management vulnerability. The software does not properly manage the resource when do device register operation. An attacker tricks the user who has root privilege to install a crafted application, successful exploit could cause certain service unavailable. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171220-03-
Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171220-03-smartphone-en
CVE ID: CVE-2017-17328 State: PUBLISHED Published: 2018-03-09T17:00:00 Last Updated: 2024-08-05T20:51:30.753Z Vendors: Huawei Technologies Co., Ltd. Products: MHA-AL00A Problem Types: integer overflow Description: Huawei smartphones with software of MHA-AL00AC00B125 have an integer overflow vulnerability. The software does not process certain variable properly when handle certain process. An attacker tricks the user who has root privilege to install a crafted application, successful exploit could cause information disclosure. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20171220-01-smartphone-en
CVE ID: CVE-2017-17329 State: PUBLISHED Published: 2018-03-09T17:00:00 Last Updated: 2024-08-05T20:51:30.821Z Vendors: Huawei Technologies Co., Ltd. Products: ViewPoint 8660 Problem Types: memory leak Description: Huawei ViewPoint 8660 V100R008C03 have a memory leak vulnerability. The software does not release allocated memory properly when parse XML Schema data. An authenticated attacker could upload a crafted XML file, successful exploit could cause the system service abnormal since run out of memory. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-03-xml-en
CVE ID: CVE-2017-17330 State: PUBLISHED Published: 2018-03-09T17:00:00 Last Updated: 2024-08-05T20:51:31.072Z Vendors: Huawei Technologies Co., Ltd. Products: AR3200; NGFW Module Problem Types: memory leak Description: Huawei AR3200 V200R005C32; V200R006C10; V200R006C11; V200R007C00; V200R007C01; V200R007C02; V200R008C00; V200R008C10; V200R008C20; V200R008C30; NGFW Module V500R001C00; V500R001C20; V500R002C00 have a memory leak vulnerability. The software does not release allocated memory properly when parse XML element data. An authenticated attacker could upload a crafted XML file, successful exploit could cause the system service abnormal since run out of memory. Additional Analyst Notes:
XML file, successful exploit could cause the system service abnormal since run out of memory. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-04-xml-en
CVE ID: CVE-2017-17331 State: REJECTED Published: 2020-11-05T22:43:28 Last Updated: 2020-11-05T22:43:28 Description: No description available.
CVE ID: CVE-2017-17332 State: REJECTED Published: 2020-11-05T22:43:54 Last Updated: 2020-11-05T22:43:54 Description: No description available.
CVE ID: CVE-2017-17333 State: REJECTED Published: 2020-11-05T22:44:18 Last Updated: 2020-11-05T22:44:18 Description: No description available.
CVE ID: CVE-2017-17334 State: REJECTED Published: 2020-11-05T22:44:59 Last Updated: 2020-11-05T22:44:59 Description: No description available.
CVE ID: CVE-2017-17335 State: REJECTED Published: 2020-11-05T22:45:30 Last Updated: 2020-11-05T22:45:30 Description: No description available.
CVE ID: CVE-2017-17336 State: REJECTED Published: 2020-11-05T22:45:52 Last Updated: 2020-11-05T22:45:52 Description: No description available.
CVE ID: CVE-2017-17337 State: REJECTED Published: 2020-11-05T22:46:17 Last Updated: 2020-11-05T22:46:17 Description: No description available.
CVE ID: CVE-2017-17338 State: REJECTED Published: 2020-11-05T22:46:42 Last Updated: 2020-11-05T22:46:42 Description: No description available.
CVE ID: CVE-2017-17339 State: REJECTED Published: 2020-11-05T22:47:05 Last Updated: 2020-11-05T22:47:05 Description: No description available.
CVE ID: CVE-2017-17340 State: REJECTED Published: 2020-11-05T22:47:29 Last Updated: 2020-11-05T22:47:29 Description: No description available.
CVE ID: CVE-2017-17341 State: REJECTED Published: 2020-11-05T22:47:54 Last Updated: 2020-11-05T22:47:54 Description: No description available.
CVE ID: CVE-2017-17342 State: REJECTED Published: 2020-11-05T22:48:27 Last Updated: 2020-11-05T22:48:27 Description: No description available.
CVE ID: CVE-2017-17343 State: REJECTED Published: 2020-11-05T22:49:22 Last Updated: 2020-11-05T22:49:22 Description: No description available.
CVE ID: CVE-2017-17344 State: REJECTED Published: 2020-11-05T22:50:03 Last Updated: 2020-11-05T22:50:03 Description: No description available.
CVE ID: CVE-2017-17345 State: REJECTED Published: 2020-11-05T22:50:44 Last Updated: 2020-11-05T22:50:44 Description: No description available.
CVE ID: CVE-2017-17346 State: REJECTED Published: 2020-11-05T22:51:10 Last Updated: 2020-11-05T22:51:10 Description: No description available.
CVE ID: CVE-2017-17347 State: REJECTED Published: 2020-11-05T22:51:35 Last Updated: 2020-11-05T22:51:35 Description: No description available.
CVE ID: CVE-2017-17348 State: REJECTED Published: 2020-11-05T22:52:02 Last Updated: 2020-11-05T22:52:02 Description: No description available.
CVE ID: CVE-2017-17349 State: REJECTED Published: 2020-11-05T22:52:27 Last Updated: 2020-11-05T22:52:27 Description: No description available.
CVE ID: CVE-2017-17350 State: REJECTED Published: 2020-11-05T22:52:50 Last Updated: 2020-11-05T22:52:50 Description: No description available.
CVE ID: CVE-2017-17351 State: REJECTED Published: 2020-11-05T22:53:20 Last Updated: 2020-11-05T22:53:20 Description: No description available.
CVE ID: CVE-2017-17352 State: REJECTED Published: 2020-11-05T22:53:44 Last Updated: 2020-11-05T22:53:44 Description: No description available.
CVE ID: CVE-2017-17353 State: REJECTED Published: 2020-11-05T22:54:04 Last Updated: 2020-11-05T22:54:04 Description: No description available.
CVE ID: CVE-2017-17354 State: REJECTED Published: 2020-11-05T22:57:25 Last Updated: 2020-11-05T22:57:25 Description: No description available.
CVE ID: CVE-2017-17355 State: REJECTED Published: 2020-11-05T22:57:52 Last Updated: 2020-11-05T22:57:52 Description: No description available.
CVE ID: CVE-2017-17356 State: REJECTED Published: 2020-11-05T22:58:20 Last Updated: 2020-11-05T22:58:20 Description: No description available.
CVE ID: CVE-2017-17357 State: REJECTED Published: 2020-11-05T22:59:22 Last Updated: 2020-11-05T22:59:22 Description: No description available.
CVE ID: CVE-2017-17358 State: REJECTED Published: 2020-11-05T22:59:52 Last Updated: 2020-11-05T22:59:52 Description: No description available.
CVE ID: CVE-2017-17359 State: REJECTED Published: 2020-11-05T23:00:24 Last Updated: 2020-11-05T23:00:24 Description: No description available.
CVE ID: CVE-2017-17360 State: REJECTED Published: 2020-11-05T23:01:01 Last Updated: 2020-11-05T23:01:01 Description: No description available.
CVE ID: CVE-2017-17361 State: REJECTED Published: 2020-11-05T23:01:59 Last Updated: 2020-11-05T23:01:59 Description: No description available.
CVE ID: CVE-2017-17362 State: REJECTED Published: 2020-11-05T23:02:32 Last Updated: 2020-11-05T23:02:32 Description: No description available.
CVE ID: CVE-2017-17363 State: REJECTED Published: 2020-11-05T23:03:03 Last Updated: 2020-11-05T23:03:03 Description: No description available.
CVE ID: CVE-2017-17364 State: REJECTED Published: 2020-11-05T23:03:30 Last Updated: 2020-11-05T23:03:30 Description: No description available.
CVE ID: CVE-2017-17365 State: REJECTED Published: 2020-11-05T23:04:22 Last Updated: 2020-11-05T23:04:22 Description: No description available.
CVE ID: CVE-2017-17366 State: REJECTED Published: 2020-11-05T23:04:49 Last Updated: 2020-11-05T23:04:49 Description: No description available.
CVE ID: CVE-2017-17367 State: REJECTED Published: 2020-11-05T23:05:14 Last Updated: 2020-11-05T23:05:14 Description: No description available.
CVE ID: CVE-2017-17368 State: REJECTED Published: 2020-11-05T23:05:37 Last Updated: 2020-11-05T23:05:37 Description: No description available.
CVE ID: CVE-2017-17369 State: REJECTED Published: 2020-11-05T23:06:00 Last Updated: 2020-11-05T23:06:00 Description: No description available.
CVE ID: CVE-2017-17370 State: REJECTED Published: 2020-11-05T23:06:31 Last Updated: 2020-11-05T23:06:31 Description: No description available.
CVE ID: CVE-2017-17371 State: REJECTED Published: 2020-11-05T23:06:52 Last Updated: 2020-11-05T23:06:52 Description: No description available.
CVE ID: CVE-2017-17372 State: REJECTED Published: 2020-11-05T23:07:18 Last Updated: 2020-11-05T23:07:18 Description: No description available.
CVE ID: CVE-2017-17373 State: REJECTED Published: 2020-11-05T23:07:39 Last Updated: 2020-11-05T23:07:39 Description: No description available.
CVE ID: CVE-2017-17374 State: REJECTED Published: 2020-11-05T23:08:11 Last Updated: 2020-11-05T23:08:11 Description: No description available.
CVE ID: CVE-2017-17375 State: REJECTED Published: 2020-11-05T23:08:32 Last Updated: 2020-11-05T23:08:32 Description: No description available.
CVE ID: CVE-2017-17376 State: REJECTED Published: 2020-11-05T23:09:14 Last Updated: 2020-11-05T23:09:14 Description: No description available.
CVE ID: CVE-2017-17377 State: REJECTED Published: 2020-11-05T23:09:50 Last Updated: 2020-11-05T23:09:50 Description: No description available.
CVE ID: CVE-2017-17378 State: REJECTED Published: 2020-11-05T23:10:12 Last Updated: 2020-11-05T23:10:12 Description: No description available.
CVE ID: CVE-2017-17379 State: REJECTED Published: 2020-11-05T23:10:48 Last Updated: 2020-11-05T23:10:48 Description: No description available.
CVE ID: CVE-2017-17380 State: REJECTED Published: 2020-11-05T23:11:09 Last Updated: 2020-11-05T23:11:09 Description: No description available.
CVE ID: CVE-2017-17381 State: PUBLISHED Published: 2017-12-06T16:00:00 Last Updated: 2024-08-05T20:51:30.728Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Virtio Vring implementation in QEMU allows local OS guest users to cause a denial of service (divide-by-zero error and QEMU process crash) by unsetting vring alignment while updating Virtio rings. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2017/12/05/2 - https://www.debian.org/security/2018/dsa-4213 - http://www.securityfocus.com/bid/102059 - https://usn.ubuntu.com/3575-1/ - https://lists.gnu.org/archive/html/qemu-devel/2017-12/msg00166.html
CVE ID: CVE-2017-17382 State: PUBLISHED Published: 2017-12-13T16:00:00 Last Updated: 2024-08-05T20:51:30.757Z Vendors: n/a Products: n/a Problem Types: n/a Description: Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.5 before build 67.13, 11.0 before build 71.22, 11.1 before build 56.19, and 12.0 before build 53.22 might allow remote attackers to decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, aka a ROBOT attack. Additional Analyst Notes: - CVE Program Container: References: - https://support.citrix.com/article/ctx230238 - https://robotattack.org/ - http://www.securityfocus.com/bid/102173 - https://www.kb.cert.org/vuls/id/144389
ctx230238 - https://robotattack.org/ - http://www.securityfocus.com/bid/102173 - https://www.kb.cert.org/vuls/id/144389 - http://www.securitytracker.com/id/1039985
CVE ID: CVE-2017-17383 State: PUBLISHED Published: 2017-12-06T05:00:00 Last Updated: 2024-08-05T20:51:31.139Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jenkins through 2.93 allows remote authenticated administrators to conduct XSS attacks via a crafted tool name in a job configuration form, as demonstrated by the JDK tool in Jenkins core and the Ant tool in the Ant plugin, aka SECURITY-624. Additional Analyst Notes: - CVE Program Container: References: - http://vsintelli.com/portal/blog/23-security-advisory-2017-12-04 - http://www.securityfocus.com/bid/102130 - https://jenkins.io/security/advisory/2017-12-05/
CVE ID: CVE-2017-17384 State: PUBLISHED Published: 2017-12-07T08:00:00 Last Updated: 2024-08-05T20:51:31.028Z Vendors: n/a Products: n/a Problem Types: n/a Description: ISPConfig 3.x before 3.1.9 allows remote authenticated users to obtain root access by creating a crafted cron job. Additional Analyst Notes: - CVE Program Container: References: - https://www.ispconfig.org/blog/ispconfig-3-1-9-released-important-security-update/
CVE ID: CVE-2017-17405 State: PUBLISHED Published: 2017-12-15T09:00:00 Last Updated: 2024-08-05T20:51:31.364Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ruby before 2.4.3 allows Net::FTP command injection. Net::FTP#get, getbinaryfile, gettextfile, put, putbinaryfile, and puttextfile use Kernel#open to open a local file. If the localfile argument starts with the "|" pipe character, the command following the pipe character is executed. The default value of localfile is File.basename(remotefile), so malicious FTP servers could cause arbitrary command execution. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:0585 - http
Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:0585 - https://lists.debian.org/debian-lts-announce/2017/12/msg00024.html - https://access.redhat.com/errata/RHSA-2018:0378 - http://www.securityfocus.com/bid/102204 - http://www.securitytracker.com/id/1042004 - https://www.ruby-lang.org/en/news/2017/12/14/net-ftp-command-injection-cve-2017-17405/ - https://www.exploit-db.com/exploits/43381/ - https://access.redhat.com/errata/RHSA-2018:0584 - https://www.ruby-lang.org/en/news/2017/12/14/ruby-2-4-3-released/ - https://lists.debian.org/debian-lts-announce/2018/07/msg00012.html - https://access.redhat.com/errata/RHSA-2018:0583 - https://
/lists.debian.org/debian-lts-announce/2018/07/msg00012.html - https://access.redhat.com/errata/RHSA-2018:0583 - https://lists.debian.org/debian-lts-announce/2017/12/msg00025.html - https://www.debian.org/security/2018/dsa-4259 - https://access.redhat.com/errata/RHSA-2019:2806
CVE ID: CVE-2017-17406 State: PUBLISHED Published: 2018-01-23T01:00:00 Last Updated: 2024-08-05T20:51:30.746Z Vendors: NetGain Systems Products: NetGain Systems Enterprise Manager Problem Types: CWE-502 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Netgain Enterprise Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within an exposed RMI registry, which listens on TCP ports 1800 and 1850 by default. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execut
plied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute arbitrary code under the context of the current process. Was ZDI-CAN-4753. Additional Analyst Notes: - CVE Program Container: References: - https://zerodayinitiative.com/advisories/ZDI-17-953 - https://www.tenable.com/security/research/tra-2018-02
CVE ID: CVE-2017-17407 State: PUBLISHED Published: 2018-01-23T01:00:00 Last Updated: 2024-08-05T20:51:30.858Z Vendors: NetGain Systems Products: NetGain Systems Enterprise Manager Problem Types: CWE-78 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of NetGain Systems Enterprise Manager v7.2.699 build 1001. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the content parameter provided to the script_test.jsp endpoint. A crafted content request parameter can trigger execution of a system call composed from a user-supplied string. An attacker can leverage this vulnerabilit
can trigger execution of a system call composed from a user-supplied string. An attacker can leverage this vulnerability to execute code under the context of the web service. Was ZDI-CAN-5080. Additional Analyst Notes: - CVE Program Container: References: - https://zerodayinitiative.com/advisories/ZDI-17-954
CVE ID: CVE-2017-17408 State: PUBLISHED Published: 2017-12-21T14:00:00 Last Updated: 2024-08-05T20:51:31.131Z Vendors: Bitdefender Products: Bitdefender Internet Security Problem Types: CWE-190 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender Internet Security 2018. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within cevakrnl.xmd. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulne
r-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to execute code under the context of SYSTEM. Was ZDI-CAN-5101. Additional Analyst Notes: - CVE Program Container: References: - https://zerodayinitiative.com/advisories/ZDI-17-942
CVE ID: CVE-2017-17409 State: PUBLISHED Published: 2017-12-21T14:00:00 Last Updated: 2024-08-05T20:51:31.137Z Vendors: Bitdefender Products: Bitdefender Internet Security Problem Types: CWE-190 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender Internet Security 2018. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within emulator 0x10A in cevakrnl.xmd. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before writing to memory. An attacker can lev
validation of user-supplied data, which can result in an integer overflow before writing to memory. An attacker can leverage this vulnerability to execute code under the context of SYSTEM. Was ZDI-CAN-5102. Additional Analyst Notes: - CVE Program Container: References: - https://zerodayinitiative.com/advisories/ZDI-17-943
CVE ID: CVE-2017-17410 State: PUBLISHED Published: 2017-12-21T14:00:00 Last Updated: 2024-08-05T20:51:31.584Z Vendors: Bitdefender Products: Bitdefender Internet Security Problem Types: CWE-787 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender Internet Security 2018. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within emulator 0x102 in cevakrnl.xmd. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated object. An attacker can leve
validation of user-supplied data, which can result in a write past the end of an allocated object. An attacker can leverage this vulnerability to execute code under the context of SYSTEM. Was ZDI-CAN-5116. Additional Analyst Notes: - CVE Program Container: References: - https://zerodayinitiative.com/advisories/ZDI-17-944
CVE ID: CVE-2017-17411 State: PUBLISHED Published: 2017-12-21T14:00:00 Last Updated: 2024-08-05T20:51:31.306Z Vendors: Linksys Products: Linksys WVBR0 Problem Types: CWE-78 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Linksys WVBR0. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web management portal. The issue lies in the lack of proper validation of user data before executing a system call. An attacker could leverage this vulnerability to execute code with root privileges. Was ZDI-CAN-4892. Additional Analyst Notes: - CVE Program Container: References: - http://www.securit
h root privileges. Was ZDI-CAN-4892. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102212 - https://github.com/rapid7/metasploit-framework/pull/9336 - https://www.exploit-db.com/exploits/43363/ - https://zerodayinitiative.com/advisories/ZDI-17-973 - https://www.exploit-db.com/exploits/43429/
CVE ID: CVE-2017-17412 State: PUBLISHED Published: 2018-02-08T18:00:00 Last Updated: 2024-08-05T20:51:31.335Z Vendors: Quest Products: Quest NetVault Backup Problem Types: CWE-89 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of GET method requests. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to execute arbitrary code in the context of the underlying database. Was ZDI-CA
attacker can leverage this vulnerability to execute arbitrary code in the context of the underlying database. Was ZDI-CAN-4223. Additional Analyst Notes: - CVE Program Container: References: - https://zerodayinitiative.com/advisories/ZDI-17-974
CVE ID: CVE-2017-17413 State: PUBLISHED Published: 2018-02-08T18:00:00 Last Updated: 2024-08-05T20:51:30.811Z Vendors: n/a Products: n/a Problem Types: n/a Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUBackupTargetSet Get method requests. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to execute code in the context of the underlying database. Was ZDI-CAN-4224. Addit
acker can leverage this vulnerability to execute code in the context of the underlying database. Was ZDI-CAN-4224. Additional Analyst Notes: - CVE Program Container: References: - https://zerodayinitiative.com/advisories/ZDI-17-978