Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-6783 State: PUBLISHED Published: 2015-12-06T01:00:00 Last Updated: 2024-08-06T07:29:24.866Z Vendors: n/a Products: n/a Problem Types: n/a Description: The FindStartOffsetOfFileInZipFile function in crazy_linker_zip.cpp in crazy_linker (aka Crazy Linker) in Android 5.x and 6.x, as used in Google Chrome before 47.0.2526.73, improperly searches for an EOCD record, which allows attackers to bypass a signature-validation requirement via a crafted ZIP archive. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2015/12/stable-channel-update.html - https://code.google.com/p/chromium/issues/detail?id=537205 - http://lists.opensus
m/2015/12/stable-channel-update.html - https://code.google.com/p/chromium/issues/detail?id=537205 - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00016.html - https://security.gentoo.org/glsa/201603-09 - http://www.securityfocus.com/bid/78416 - https://chromium.googlesource.com/chromium/src.git/+/d9e316238aee59acf665d80b544cf4e1edfd3349 - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00017.html - http://www.securitytracker.com/id/1034298
CVE ID: CVE-2015-6784 State: PUBLISHED Published: 2015-12-06T01:00:00 Last Updated: 2024-08-06T07:29:24.833Z Vendors: n/a Products: n/a Problem Types: n/a Description: The page serializer in Google Chrome before 47.0.2526.73 mishandles Mark of the Web (MOTW) comments for URLs containing a "--" sequence, which might allow remote attackers to inject HTML via a crafted URL, as demonstrated by an initial http://example.com?-- substring. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2015/12/stable-channel-update.html - http://www.ubuntu.com/usn/USN-2825-1 - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00016.html - http
http://www.ubuntu.com/usn/USN-2825-1 - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00016.html - https://code.google.com/p/chromium/issues/detail?id=503217 - https://security.gentoo.org/glsa/201603-09 - https://codereview.chromium.org/1371323003 - http://www.securityfocus.com/bid/78416 - http://www.debian.org/security/2015/dsa-3415 - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00017.html - http://www.securitytracker.com/id/1034298
CVE ID: CVE-2015-6785 State: PUBLISHED Published: 2015-12-06T01:00:00 Last Updated: 2024-08-06T07:29:24.875Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CSPSource::hostMatches function in WebKit/Source/core/frame/csp/CSPSource.cpp in the Content Security Policy (CSP) implementation in Google Chrome before 47.0.2526.73 accepts an x.y hostname as a match for a *.x.y pattern, which might allow remote attackers to bypass intended access restrictions in opportunistic circumstances by leveraging a policy that was intended to be specific to subdomains. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2015/12/stable-channel-
l Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2015/12/stable-channel-update.html - http://www.ubuntu.com/usn/USN-2825-1 - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00016.html - https://security.gentoo.org/glsa/201603-09 - https://codereview.chromium.org/1367933003 - http://www.securityfocus.com/bid/78416 - http://www.debian.org/security/2015/dsa-3415 - https://code.google.com/p/chromium/issues/detail?id=534542 - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00017.html - http://www.securitytracker.com/id/1034298
CVE ID: CVE-2015-6786 State: PUBLISHED Published: 2015-12-06T01:00:00 Last Updated: 2024-08-06T07:29:24.908Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CSPSourceList::matches function in WebKit/Source/core/frame/csp/CSPSourceList.cpp in the Content Security Policy (CSP) implementation in Google Chrome before 47.0.2526.73 accepts a blob:, data:, or filesystem: URL as a match for a * pattern, which allows remote attackers to bypass intended scheme restrictions in opportunistic circumstances by leveraging a policy that relies on this pattern. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2015/12/stable-channel-updat
lyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2015/12/stable-channel-update.html - http://www.ubuntu.com/usn/USN-2825-1 - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00016.html - https://codereview.chromium.org/1361763005/ - https://security.gentoo.org/glsa/201603-09 - http://www.securityfocus.com/bid/78416 - https://code.google.com/p/chromium/issues/detail?id=534570 - http://www.debian.org/security/2015/dsa-3415 - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00017.html - http://www.securitytracker.com/id/1034298
CVE ID: CVE-2015-6787 State: PUBLISHED Published: 2015-12-06T01:00:00 Last Updated: 2024-08-06T07:29:24.834Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Google Chrome before 47.0.2526.73 allow attackers to cause a denial of service or possibly have other impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://code.google.com/p/chromium/issues/detail?id=526286 - https://code.google.com/p/chromium/issues/detail?id=554151 - http://googlechromereleases.blogspot.com/2015/12/stable-channel-update.html - https://code.google.com/p/chromium/issues/detail?id=551503 - https://www.exploit-db.com/exploits/
-channel-update.html - https://code.google.com/p/chromium/issues/detail?id=551503 - https://www.exploit-db.com/exploits/39163/ - https://www.exploit-db.com/exploits/39165/ - https://www.exploit-db.com/exploits/39162/ - https://code.google.com/p/chromium/issues/detail?id=552046 - http://www.ubuntu.com/usn/USN-2825-1 - https://code.google.com/p/chromium/issues/detail?id=526441 - https://code.google.com/p/chromium/issues/detail?id=525330 - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00016.html - https://code.google.com/p/chromium/issues/detail?id=551460 - https://code.google.com/p/chromium/issues/detail?id=534621 - https://code.google.com/p/chromium/issues/detail?id=545173 -
ttps://code.google.com/p/chromium/issues/detail?id=534621 - https://code.google.com/p/chromium/issues/detail?id=545173 - https://code.google.com/p/chromium/issues/detail?id=563930 - https://code.google.com/p/chromium/issues/detail?id=529554 - https://code.google.com/p/chromium/issues/detail?id=540949 - https://security.gentoo.org/glsa/201603-09 - https://code.google.com/p/chromium/issues/detail?id=554115 - https://code.google.com/p/chromium/issues/detail?id=537823 - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00017.html - http://www.securitytracker.com/id/1034298
CVE ID: CVE-2015-6788 State: PUBLISHED Published: 2015-12-14T11:00:00 Last Updated: 2024-08-06T07:29:24.505Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ObjectBackedNativeHandler class in extensions/renderer/object_backed_native_handler.cc in the extensions subsystem in Google Chrome before 47.0.2526.80 improperly implements handler functions, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that leverage "type confusion." Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2015/12/stable-channel-update_8.html - http://rhn.redhat.com/errata/RHSA-2015-2618.h
//googlechromereleases.blogspot.com/2015/12/stable-channel-update_8.html - http://rhn.redhat.com/errata/RHSA-2015-2618.html - https://code.google.com/p/chromium/issues/detail?id=548273 - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00016.html - http://www.debian.org/security/2015/dsa-3418 - https://security.gentoo.org/glsa/201603-09 - http://www.securityfocus.com/bid/78734 - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00017.html - https://codereview.chromium.org/1422383003/
CVE ID: CVE-2015-6789 State: PUBLISHED Published: 2015-12-14T11:00:00 Last Updated: 2024-08-06T07:29:24.864Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the MutationObserver implementation in Blink, as used in Google Chrome before 47.0.2526.80, allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact by leveraging unanticipated object deletion. Additional Analyst Notes: - CVE Program Container: References: - https://code.google.com/p/chromium/issues/detail?id=557981 - http://googlechromereleases.blogspot.com/2015/12/stable-channel-update_8.html - http://rhn.redhat.com/errata/RHSA-2015-2618.html - http://l
releases.blogspot.com/2015/12/stable-channel-update_8.html - http://rhn.redhat.com/errata/RHSA-2015-2618.html - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00016.html - http://www.debian.org/security/2015/dsa-3418 - https://security.gentoo.org/glsa/201603-09 - http://www.securityfocus.com/bid/78734 - http://www.ubuntu.com/usn/USN-2860-1 - https://codereview.chromium.org/1463433002/ - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00017.html
CVE ID: CVE-2015-6790 State: PUBLISHED Published: 2015-12-14T11:00:00 Last Updated: 2024-08-06T07:29:24.756Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WebPageSerializerImpl::openTagToString function in WebKit/Source/web/WebPageSerializerImpl.cpp in the page serializer in Google Chrome before 47.0.2526.80 does not properly use HTML entities, which might allow remote attackers to inject arbitrary web script or HTML via a crafted document, as demonstrated by a double-quote character inside a single-quoted string. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2015/12/stable-channel-update_8.html - http://rhn.redhat.
tainer: References: - http://googlechromereleases.blogspot.com/2015/12/stable-channel-update_8.html - http://rhn.redhat.com/errata/RHSA-2015-2618.html - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00016.html - http://www.debian.org/security/2015/dsa-3418 - https://security.gentoo.org/glsa/201603-09 - http://www.securityfocus.com/bid/78734 - https://code.google.com/p/chromium/issues/detail?id=542054 - http://www.ubuntu.com/usn/USN-2860-1 - https://codereview.chromium.org/1398453005 - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00017.html
CVE ID: CVE-2015-6791 State: PUBLISHED Published: 2015-12-14T11:00:00 Last Updated: 2024-08-06T07:29:24.799Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Google Chrome before 47.0.2526.80 allow attackers to cause a denial of service or possibly have other impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://code.google.com/p/chromium/issues/detail?id=558840 - http://googlechromereleases.blogspot.com/2015/12/stable-channel-update_8.html - https://code.google.com/p/chromium/issues/detail?id=534994 - http://rhn.redhat.com/errata/RHSA-2015-2618.html - http://lists.opensuse.org/opensuse-security-
ssues/detail?id=534994 - http://rhn.redhat.com/errata/RHSA-2015-2618.html - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00016.html - http://www.debian.org/security/2015/dsa-3418 - https://security.gentoo.org/glsa/201603-09 - http://www.securityfocus.com/bid/78734 - http://www.ubuntu.com/usn/USN-2860-1 - https://code.google.com/p/chromium/issues/detail?id=559310 - https://code.google.com/p/chromium/issues/detail?id=567513 - https://code.google.com/p/chromium/issues/detail?id=555784 - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00017.html
CVE ID: CVE-2015-6792 State: PUBLISHED Published: 2015-12-24T02:00:00 Last Updated: 2024-08-06T07:29:24.911Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MIDI subsystem in Google Chrome before 47.0.2526.106 does not properly handle the sending of data, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors, related to midi_manager.cc, midi_manager_alsa.cc, and midi_manager_mac.cc, a different vulnerability than CVE-2015-8664. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00030.html - https://codereview.chromium.org/1508
ces: - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00030.html - https://codereview.chromium.org/1508563003 - http://rhn.redhat.com/errata/RHSA-2015-2665.html - http://googlechromereleases.blogspot.com/2015/12/stable-channel-update_15.html - http://www.securitytracker.com/id/1034491 - https://codereview.chromium.org/1500153002 - https://code.google.com/p/chromium/issues/detail?id=569486 - https://code.google.com/p/chromium/issues/detail?id=564501 - https://security.gentoo.org/glsa/201603-09 - http://www.securityfocus.com/bid/79348 - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00029.html - http://www.debian.org/security/2016/dsa-3456
CVE ID: CVE-2015-6805 State: PUBLISHED Published: 2015-09-02T14:00:00 Last Updated: 2024-08-06T07:29:24.852Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the MDC Private Message plugin 1.0.0 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via the message field in a private message. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/37907/ - https://wpvulndb.com/vulnerabilities/8154
CVE ID: CVE-2015-6806 State: PUBLISHED Published: 2015-09-28T20:00:00 Last Updated: 2024-08-06T07:29:24.823Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MScrollV function in ansi.c in GNU screen 4.3.1 and earlier does not properly limit recursion, which allows remote attackers to cause a denial of service (stack consumption) via an escape sequence with a large repeat count value. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/09/03/11 - http://www.openwall.com/lists/oss-security/2015/09/01/1 - http://git.savannah.gnu.org/cgit/screen.git/commit/?id=b7484c224738247b510ed0d268cd577076958f1b - http://www.openwal
1 - http://git.savannah.gnu.org/cgit/screen.git/commit/?id=b7484c224738247b510ed0d268cd577076958f1b - http://www.openwall.com/lists/oss-security/2015/09/03/4 - https://savannah.gnu.org/bugs/?45713 - http://www.debian.org/security/2015/dsa-3352 - https://usn.ubuntu.com/3996-1/ - http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00001.html
CVE ID: CVE-2015-6807 State: PUBLISHED Published: 2015-09-04T15:00:00Z Last Updated: 2024-09-16T23:20:46.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Mass Contact module 6.x-1.x before 6.x-1.6 and 7.x-1.x before 7.x-1.1 for Drupal allows remote authenticated users with the "administer mass contact" permission to inject arbitrary web script or HTML via a category label. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2561695 - https://www.drupal.org/node/2561951 - https://www.drupal.org/node/2561699
CVE ID: CVE-2015-6808 State: PUBLISHED Published: 2015-09-04T15:00:00Z Last Updated: 2024-09-16T23:31:04.067Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Spotlight module 7.x-1.x before 7.x-1.5 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via a node title. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2561375 - https://www.drupal.org/node/2561313
CVE ID: CVE-2015-6809 State: PUBLISHED Published: 2015-09-04T15:00:00Z Last Updated: 2024-09-16T23:45:43.628Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in BEdita before 3.6.0 allow remote attackers to inject arbitrary web script or HTML via the (1) cfg[projectName] parameter to index.php/admin/saveConfig, the (2) data[stats_provider_url] parameter to index.php/areas/saveArea, or the (3) data[description] parameter to index.php/areas/saveSection. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bedita/bedita/issues/623 - http://www.bedita.com/news/bedita-3-6-0-corylus-release-announcement-a
: - https://github.com/bedita/bedita/issues/623 - http://www.bedita.com/news/bedita-3-6-0-corylus-release-announcement-and-new-website - https://www.exploit-db.com/exploits/38051/
CVE ID: CVE-2015-6810 State: PUBLISHED Published: 2015-09-04T15:00:00Z Last Updated: 2024-09-17T04:18:50.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Invision Power Services IPS Community Suite (aka Invision Power Board, IPB, or Power Board) 4.x before 4.0.12.1 allows remote authenticated users to inject arbitrary web script or HTML via the event_location[address] array parameter to calendar/submit/. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/37989/ - https://community.invisionpower.com/release-notes/40121-r22/
CVE ID: CVE-2015-6811 State: PUBLISHED Published: 2015-09-04T15:00:00Z Last Updated: 2024-09-16T16:48:44.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Sophos Cyberoam CR500iNG-XP firewall appliance with CyberoamOS 10.6.2 MR-1 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter to login.xml. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/133378/Cyberoam-CR500iNG-XP-10.6.2-MR-1-Blind-SQL-Injection.html - https://www.exploit-db.com/exploits/38034/
CVE ID: CVE-2015-6812 State: PUBLISHED Published: 2015-09-04T17:00:00Z Last Updated: 2024-09-16T17:08:58.831Z Vendors: n/a Products: n/a Problem Types: n/a Description: Invision Power Services IPS Community Suite (aka Invision Power Board, IPB, or Power Board) before 4.0.12.1 allows remote attackers to cause a denial of service (loop and memory consumption) via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - https://community.invisionpower.com/release-notes/40121-r22/
CVE ID: CVE-2015-6815 State: PUBLISHED Published: 2020-01-31T21:38:47 Last Updated: 2024-08-06T07:29:24.837Z Vendors: QEMU Products: QEMU Problem Types: Other Description: The process_tx_desc function in hw/net/e1000.c in QEMU before 2.4.0.1 does not properly process transmit descriptor data when sending a network packet, which allows attackers to cause a denial of service (infinite loop and guest crash) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00026.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168671.html - http://lists.fedoraproject.org/pipermail
//lists.fedoraproject.org/pipermail/package-announce/2015-October/168671.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168077.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168646.html - http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00005.html - http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00011.html - http://www.ubuntu.com/usn/USN-2745-1 - http://www.openwall.com/lists/oss-security/2015/09/04/4 - http://www.openwall.com/lists/oss-security/2015/09/05/5 - https://bugzilla.redhat.com/show_bug.cgi?id=1260076 - https://lists.gnu.org/archive/html/qemu-devel/2015-09/msg01199.html - https://lists.gnu
at.com/show_bug.cgi?id=1260076 - https://lists.gnu.org/archive/html/qemu-devel/2015-09/msg01199.html - https://lists.gnu.org/archive/html/qemu-devel/2015-09/msg05832.html - https://www.arista.com/en/support/advisories-notices/security-advisories/1188-security-advisory-14
CVE ID: CVE-2015-6816 State: PUBLISHED Published: 2017-08-09T18:00:00 Last Updated: 2024-08-06T07:29:25.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: ganglia-web before 3.7.1 allows remote attackers to bypass authentication. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1260562 - https://github.com/ganglia/ganglia-web/issues/267 - http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169641.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-November/170362.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169788.html - https://www.freshports.org/sys
ml - http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169788.html - https://www.freshports.org/sysutils/ganglia-webfrontend/ - http://www.openwall.com/lists/oss-security/2015/09/05/6 - http://www.securityfocus.com/bid/92146
CVE ID: CVE-2015-6817 State: PUBLISHED Published: 2017-05-23T03:56:00 Last Updated: 2024-08-06T07:29:24.869Z Vendors: n/a Products: n/a Problem Types: n/a Description: PgBouncer 1.6.x before 1.6.1, when configured with auth_user, allows remote attackers to gain login access as auth_user via an unknown username. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pgbouncer/pgbouncer/commit/7ca3e5279d05fceb1e8a043c6f5b6f58dea3ed38 - https://security.gentoo.org/glsa/201701-24 - http://comments.gmane.org/gmane.comp.db.postgresql.pgbouncer.general/1251 - https://pgbouncer.github.io/2015/09/pgbouncer-1-6-1 - http://www.openwall.com/lists/oss-security/2015/09/05/7 -
/1251 - https://pgbouncer.github.io/2015/09/pgbouncer-1-6-1 - http://www.openwall.com/lists/oss-security/2015/09/05/7 - https://github.com/pgbouncer/pgbouncer/issues/69
CVE ID: CVE-2015-6818 State: PUBLISHED Published: 2015-09-06T01:00:00 Last Updated: 2024-08-06T07:29:24.840Z Vendors: n/a Products: n/a Problem Types: n/a Description: The decode_ihdr_chunk function in libavcodec/pngdec.c in FFmpeg before 2.7.2 does not enforce uniqueness of the IHDR (aka image header) chunk in a PNG image, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via a crafted image with two or more of these chunks. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2944-1 - https://lists.debian.org/debian-lts-announce/2018/12/msg00009.html - http://www.securi
//www.ubuntu.com/usn/USN-2944-1 - https://lists.debian.org/debian-lts-announce/2018/12/msg00009.html - http://www.securitytracker.com/id/1033483 - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=47f4e2d8960ca756ca153ab8e3e93d80449b8c91 - http://ffmpeg.org/security.html
CVE ID: CVE-2015-6819 State: PUBLISHED Published: 2015-09-06T01:00:00 Last Updated: 2024-08-06T07:29:24.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer underflows in the ff_mjpeg_decode_frame function in libavcodec/mjpegdec.c in FFmpeg before 2.7.2 allow remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted MJPEG data. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033483 - http://ffmpeg.org/security.html - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=84afc6b70d24fc0bf686e43138c96cf60a9445fe