Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-3839 State: PUBLISHED Published: 2018-04-10T21:00:00Z Last Updated: 2024-09-16T22:57:08.509Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Cisco Systems, Inc. Products: Simple DirectMedia Problem Types: Heap Based Overflow Description: An exploitable code execution vulnerability exists in the XCF image rendering functionality of Simple DirectMedia Layer SDL2_image-2.0.2. A specially crafted XCF image can cause an out-of-bounds write on the heap, resulting in code execution. An attacker can display a specially crafted image to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/s
to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2018/dsa-4177 - https://www.debian.org/security/2018/dsa-4184 - https://security.gentoo.org/glsa/201903-17 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0521 - https://www.starwindsoftware.com/security/sw-20191008-0002/
CVE ID: CVE-2018-3840 State: PUBLISHED Published: 2018-06-26T21:00:00Z Last Updated: 2024-09-16T16:18:39.378Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Talos Products: Pixar Renderman Problem Types: denial of service Description: A denial-of-service vulnerability exists in the Pixar Renderman IT Display Service 21.6 (0x67). The vulnerability is present in the parsing of a network packet without proper validation of the packet. The data read by the application is not validated, and its use can lead to a null pointer dereference. The IT application is opened by a user and then listens for a connection on port 4001. An attacker can deliver an attack once
application is opened by a user and then listens for a connection on port 4001. An attacker can deliver an attack once the application has been opened. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0523
CVE ID: CVE-2018-3841 State: PUBLISHED Published: 2018-06-26T21:00:00Z Last Updated: 2024-09-16T17:13:56.374Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Talos Products: Pixar Renderman Problem Types: denial of service Description: A denial-of-service vulnerability exists in the Pixar Renderman IT Display Service 21.6 (0x69). The vulnerability is present in the parsing of a network packet without proper validation of the packet. The data read-in is not validated, and its use can lead to a null pointer dereference. The IT application is opened by a user and then listens for a connection on port 4001. An attacker can deliver an attack once the application
opened by a user and then listens for a connection on port 4001. An attacker can deliver an attack once the application has been opened. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0524
CVE ID: CVE-2018-3842 State: PUBLISHED Published: 2018-04-19T19:00:00Z Last Updated: 2024-09-17T00:06:32.085Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Talos Products: Foxit Problem Types: Use of Uninitialized Variable Description: An exploitable use of an uninitialized pointer vulnerability exists in the JavaScript engine in Foxit PDF Reader version 9.0.1.1049. A specially crafted PDF document can lead to a dereference of an uninitialized pointer which, if under attacker control, can result in arbitrary code execution. An attacker needs to trick the user to open a malicious file to trigger this vulnerability. If the browser plugin extension is enabled,
s to trick the user to open a malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious site can also trigger the vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1040733 - http://www.securityfocus.com/bid/103942 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0525
CVE ID: CVE-2018-3843 State: PUBLISHED Published: 2018-04-19T19:00:00Z Last Updated: 2024-09-17T00:20:46.489Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Talos Products: Foxit Problem Types: Access of Resource Using Incompatible Type Description: An exploitable type confusion vulnerability exists in the way Foxit PDF Reader version 9.0.1.1049 parses files with associated file annotations. A specially crafted PDF document can lead to an object of invalid type to be dereferenced, which can potentially lead to sensitive memory disclosure, and possibly to arbitrary code execution. An attacker needs to trick the user into opening the malicious file to trigger
and possibly to arbitrary code execution. An attacker needs to trick the user into opening the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious site can also trigger the vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1040733 - http://www.securityfocus.com/bid/103942 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0526
CVE ID: CVE-2018-3844 State: PUBLISHED Published: 2018-04-26T20:00:00Z Last Updated: 2024-09-17T01:11:05.810Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Hyland Software, Inc. Products: Perceptive Document Filters Problem Types: Use After Free Description: In Hyland Perceptive Document Filters 11.4.0.2647 - x86/x64 Windows/Linux, a crafted DOCX document can lead to a use-after-free resulting in direct code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104023 - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0527
CVE ID: CVE-2018-3845 State: PUBLISHED Published: 2018-04-26T20:00:00Z Last Updated: 2024-09-17T01:31:54.803Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Hyland Software, Inc. Products: Perceptive Document Filters Problem Types: remote code execution Description: In Hyland Perceptive Document Filters 11.4.0.2647 - x86/x64 Windows/Linux, a crafted OpenDocument document can lead to a SkCanvas object double free resulting in direct code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104023 - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0528
CVE ID: CVE-2018-3846 State: PUBLISHED Published: 2018-04-16T15:00:00Z Last Updated: 2024-09-17T02:21:57.506Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Talos Products: NASA CFITSIO Problem Types: stack-based buffer overflow Description: In the ffgphd and ffgtkn functions in NASA CFITSIO 3.42, specially crafted images parsed via the library can cause a stack-based buffer overflow overwriting arbitrary data. An attacker can deliver an FIT image to trigger this vulnerability and potentially gain code execution. Additional Analyst Notes: - CVE Program Container: References: - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraprojec
CVE Program Container: References: - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K46I2MFPCEOGC5LLDXZSWPB3EBPON3KA/ - https://security.gentoo.org/glsa/202101-24 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0529
CVE ID: CVE-2018-3847 State: PUBLISHED Published: 2018-08-01T19:00:00Z Last Updated: 2024-09-17T01:01:00.787Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: NASA Products: CFITSIO Problem Types: stack-based buffer overflow Description: Multiple exploitable buffer overflow vulnerabilities exist in image parsing functionality of the CFITSIO library version 3.42. Specially crafted images parsed via the library, can cause a stack-based buffer overflow overwriting arbitrary data. An attacker can deliver an FIT image to trigger this vulnerability and potentially gain code execution. Additional Analyst Notes: - CVE Program Container: References: - https://security.g
and potentially gain code execution. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/202101-24 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0530
CVE ID: CVE-2018-3848 State: PUBLISHED Published: 2018-04-16T15:00:00Z Last Updated: 2024-09-17T01:17:05.927Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Talos Products: NASA CFITSIO Problem Types: Stack-based buffer overflow Description: In the ffghbn function in NASA CFITSIO 3.42, specially crafted images parsed via the library can cause a stack-based buffer overflow overwriting arbitrary data. An attacker can deliver an FIT image to trigger this vulnerability and potentially gain code execution. Additional Analyst Notes: - CVE Program Container: References: - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/messag
Container: References: - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K46I2MFPCEOGC5LLDXZSWPB3EBPON3KA/ - https://security.gentoo.org/glsa/202101-24 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0531
CVE ID: CVE-2018-3849 State: PUBLISHED Published: 2018-04-16T15:00:00Z Last Updated: 2024-09-17T01:32:06.589Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Talos Products: NASA CFITSIO Problem Types: Stack-based buffer overflow Description: In the ffghtb function in NASA CFITSIO 3.42, specially crafted images parsed via the library can cause a stack-based buffer overflow overwriting arbitrary data. An attacker can deliver an FIT image to trigger this vulnerability and potentially gain code execution. Additional Analyst Notes: - CVE Program Container: References: - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/messag
CVE ID: CVE-2018-3850 State: PUBLISHED Published: 2018-04-23T15:00:00Z Last Updated: 2024-09-16T22:51:28.628Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Talos Products: Foxit Problem Types: remote code execution Description: An exploitable use-after-free vulnerability exists in the JavaScript engine Foxit Software Foxit PDF Reader version 9.0.1.1049. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If a browser plugin extension is enabled, visiting a malicious site can also trigg
s file to trigger this vulnerability. If a browser plugin extension is enabled, visiting a malicious site can also trigger the vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1040733 - http://www.securityfocus.com/bid/103942 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0532
CVE ID: CVE-2018-3851 State: PUBLISHED Published: 2018-04-26T20:00:00Z Last Updated: 2024-09-17T02:16:49.561Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Hyland Software, Inc. Products: Perceptive Document Filters Problem Types: Out of bounds Write Description: In Hyland Perceptive Document Filters 11.4.0.2647 - x86/x64 Windows/Linux, an exploitable stack-based buffer overflow exists in the DOC-to-HTML conversion functionality of the Hyland Perceptive Document Filters version 11.4.0.2647. A crafted .doc document can lead to a stack-based buffer, resulting in direct code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.
buffer, resulting in direct code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104023 - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0534
CVE ID: CVE-2018-3852 State: PUBLISHED Published: 2018-06-06T21:00:00Z Last Updated: 2024-09-16T18:04:21.639Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Talos Products: Ocularis Problem Types: denial of service Description: An exploitable denial of service vulnerability exists in the Ocularis Recorder functionality of Ocularis 5.5.0.242. A specially crafted TCP packet can cause a process to terminate resulting in denial of service. An attacker can send a crafted TCP packet to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104387 - https://talosintelligence.com/vulnerability_rep
ogram Container: References: - http://www.securityfocus.com/bid/104387 - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0535
CVE ID: CVE-2018-3853 State: PUBLISHED Published: 2018-06-04T20:00:00Z Last Updated: 2024-09-17T02:57:04.382Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Talos Products: Foxit Problem Types: remote code execution Description: An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software Foxit PDF Reader version 9.0.1.1049. A specially crafted PDF document can trigger a previously freed object in memory to be reused resulting in arbitrary code execution. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious site can also t
ous file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious site can also trigger the vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1040733 - http://www.securityfocus.com/bid/103942 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0536
CVE ID: CVE-2018-3854 State: PUBLISHED Published: 2018-12-03T22:00:00 Last Updated: 2024-08-05T04:57:24.260Z Severity: HIGH (CVSS 7.1 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An exploitable information disclosure vulnerability exists in the password protection functionality of Quicken Deluxe 2018 for Mac version 5.2.2. A specially crafted sqlite3 request can cause the removal of the password protection, allowing an attacker to access and modify the data without knowing the password. An attacker needs to have access to the password-protected files to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: R
cess to the password-protected files to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0537
CVE ID: CVE-2018-3855 State: PUBLISHED Published: 2018-04-26T20:00:00Z Last Updated: 2024-09-17T04:00:10.983Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Hyland Software, Inc. Products: Perceptive Document Filters Problem Types: direct code execution Description: In Hyland Perceptive Document Filters 11.4.0.2647 - x86/x64 Windows/Linux, a crafted OpenDocument document can lead to a SkCanvas object double free resulting in direct code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104023 - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0538
CVE ID: CVE-2018-3856 State: PUBLISHED Published: 2018-08-23T22:00:00Z Last Updated: 2024-09-16T17:52:57.516Z Severity: CRITICAL (CVSS 9.9 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Samsung Products: Samsung Problem Types: Argument Injection or Modification Description: An exploitable vulnerability exists in the smart cameras RTSP configuration of the Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The device incorrectly handles spaces in the URL field, leading to an arbitrary operating system command injection. An attacker can send a series of HTTP requests to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://tal
TTP requests to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0539
CVE ID: CVE-2018-3857 State: PUBLISHED Published: 2018-07-19T19:00:00Z Last Updated: 2024-09-17T03:28:33.561Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: ACD Systems Products: Canvas Draw Problem Types: CWE-122 Description: An exploitable heap overflow exists in the TIFF parsing functionality of Canvas Draw version 4.0.0. A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a TIFF image to trigger this vulnerability and gain code execution. A different vulnerability than CVE-2018-3858. Additional Analyst Notes: - CVE Program Container: References: - https://talo
ifferent vulnerability than CVE-2018-3858. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0541
CVE ID: CVE-2018-3858 State: PUBLISHED Published: 2018-07-19T19:00:00Z Last Updated: 2024-09-16T18:02:55.556Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: ACD Systems Products: Canvas Draw Problem Types: CWE-122 Description: An exploitable heap overflow exists in the TIFF parsing functionality of Canvas Draw version 4.0.0. A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a TIFF image to trigger this vulnerability and gain the ability to execute code. A different vulnerability than CVE-2018-3857. Additional Analyst Notes: - CVE Program Container: References: -
ute code. A different vulnerability than CVE-2018-3857. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0542
CVE ID: CVE-2018-3859 State: PUBLISHED Published: 2018-07-19T19:00:00Z Last Updated: 2024-09-17T00:26:11.672Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: ACD Systems Products: Canvas Draw Problem Types: CWE-787 Description: An exploitable out-of-bounds write exists in the TIFF parsing functionality of Canvas Draw version 4.0.0. A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a TIFF image to trigger this vulnerability and gain code execution. A different vulnerability than CVE-2018-3860. Additional Analyst Notes: - CVE Program Container: References: - https:
n. A different vulnerability than CVE-2018-3860. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0543
CVE ID: CVE-2018-3860 State: PUBLISHED Published: 2018-07-19T19:00:00Z Last Updated: 2024-09-16T17:58:31.319Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: ACD Systems Products: Canvas Draw Problem Types: CWE-787 Description: An exploitable out-of-bounds write exists in the TIFF parsing functionality of Canvas Draw version 4.0.0. A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a TIFF image to trigger this vulnerability and gain the ability to execute code. A different vulnerability than CVE-2018-3859. Additional Analyst Notes: - CVE Program Container: Referen
o execute code. A different vulnerability than CVE-2018-3859. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0544
CVE ID: CVE-2018-3861 State: PUBLISHED Published: 2018-04-12T19:00:00Z Last Updated: 2024-09-16T18:38:42.623Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Talos Products: Computerinsel Photoline Problem Types: Out of bounds write Description: A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a TIFF image to trigger this vulnerability and gain code execution. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0546
CVE ID: CVE-2018-3862 State: PUBLISHED Published: 2018-04-12T19:00:00Z Last Updated: 2024-09-16T21:07:49.129Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Talos Products: Computerinsel Photoline Problem Types: Out of bounds write Description: A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0547
CVE ID: CVE-2018-3863 State: PUBLISHED Published: 2018-08-23T15:00:00Z Last Updated: 2024-09-16T18:24:08.182Z Severity: CRITICAL (CVSS 9.9 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Samsung Products: SmartThings Hub STH-ETH-250 Problem Types: Buffer copy without checking size Description: On Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17, the video-core process incorrectly extracts fields from a user-controlled JSON payload, leading to a buffer overflow on the stack. An attacker can send an HTTP request to trigger this vulnerability. A strcpy overflows the destination buffer, which has a size of 40 bytes. An attacker can send an arbitrarily long "user"
strcpy overflows the destination buffer, which has a size of 40 bytes. An attacker can send an arbitrarily long "user" value in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0548
CVE ID: CVE-2018-3864 State: PUBLISHED Published: 2018-09-20T15:00:00Z Last Updated: 2024-09-17T02:42:31.662Z Severity: CRITICAL (CVSS 9.9 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Samsung Products: SmartThings Hub STH-ETH-250 Problem Types: Classic Buffer Overflow Description: An exploitable buffer overflow vulnerability exists in the Samsung WifiScan handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The strcpy overflows the destination buffer, which has a size of 40 bytes. An attacker can send an arbitrarily long "password" value in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: Refer
y long "password" value in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0548
CVE ID: CVE-2018-3865 State: PUBLISHED Published: 2018-09-20T15:00:00Z Last Updated: 2024-09-17T01:45:46.436Z Severity: CRITICAL (CVSS 9.9 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Samsung Products: SmartThings Hub STH-ETH-250 Problem Types: Classic Buffer Overflow Description: An exploitable buffer overflow vulnerability exists in the Samsung WifiScan handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The strcpy overflows the destination buffer, which has a size of 40 bytes. An attacker can send an arbitrarily long "cameraIp" value in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: Refer
y long "cameraIp" value in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0548