Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-4768 State: PUBLISHED Published: 2016-09-25T10:00:00 Last Updated: 2024-08-06T00:39:26.102Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit in Apple iOS before 10, tvOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-4759, CVE-2016-4765, CVE-2016-4766, and CVE-2016-4767. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2016/Sep/msg00008.html - https://support.apple.com/HT207157 - https://support.apple.com/HT207158 -
CVE ID: CVE-2016-4769 State: PUBLISHED Published: 2016-09-25T10:00:00 Last Updated: 2024-08-06T00:39:26.279Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit in Apple iTunes before 12.5.1 on Windows and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT207157 - https://support.apple.com/HT207158 - http://www.securitytracker.com/id/1036854 - http://www.securityfocus.com/bid/93062 - http://lists.apple.com/archives/security-announce/2016/Sep/msg00012.html - http://lists.apple.
rityfocus.com/bid/93062 - http://lists.apple.com/archives/security-announce/2016/Sep/msg00012.html - http://lists.apple.com/archives/security-announce/2016/Sep/msg00007.html
CVE ID: CVE-2016-4770 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-4771 State: PUBLISHED Published: 2016-09-25T10:00:00 Last Updated: 2024-08-06T00:39:26.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel in Apple iOS before 10 and OS X before 10.12 allows local users to bypass intended file-access restrictions via a crafted directory pathname. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036858 - http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html - http://lists.apple.com/archives/security-announce/2016/Sep/msg00008.html - http://www.securityfocus.com/bid/93056 - https://support.apple.com/HT207170 - https://support.apple.com/HT207143
CVE ID: CVE-2016-4772 State: PUBLISHED Published: 2016-09-25T10:00:00 Last Updated: 2024-08-06T00:39:26.115Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows remote attackers to cause a denial of service (unintended lock) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT207141 - http://www.securitytracker.com/id/1036858 - http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html - http://lists.apple.com/archives/security-announce/2016/Sep/msg00008.html - http://lists.apple.com/archives/security-announce
://lists.apple.com/archives/security-announce/2016/Sep/msg00008.html - http://lists.apple.com/archives/security-announce/2016/Sep/msg00010.html - http://lists.apple.com/archives/security-announce/2016/Sep/msg00011.html - http://www.securityfocus.com/bid/93054 - https://support.apple.com/HT207170 - https://support.apple.com/HT207142 - https://support.apple.com/HT207143
CVE ID: CVE-2016-4773 State: PUBLISHED Published: 2016-09-25T10:00:00 Last Updated: 2024-08-06T00:39:26.288Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows attackers to obtain sensitive memory-layout information or cause a denial of service (out-of-bounds read) via a crafted app, a different vulnerability than CVE-2016-4774 and CVE-2016-4776. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT207141 - http://www.securitytracker.com/id/1036858 - http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html - http://lists.apple.com/a
ker.com/id/1036858 - http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html - http://lists.apple.com/archives/security-announce/2016/Sep/msg00008.html - http://lists.apple.com/archives/security-announce/2016/Sep/msg00010.html - http://lists.apple.com/archives/security-announce/2016/Sep/msg00011.html - http://www.securityfocus.com/bid/93054 - https://support.apple.com/HT207170 - https://support.apple.com/HT207142 - https://support.apple.com/HT207143
CVE ID: CVE-2016-4774 State: PUBLISHED Published: 2016-09-25T10:00:00 Last Updated: 2024-08-06T00:39:26.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows attackers to obtain sensitive memory-layout information or cause a denial of service (out-of-bounds read) via a crafted app, a different vulnerability than CVE-2016-4773 and CVE-2016-4776. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT207141 - http://www.securitytracker.com/id/1036858 - http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html - http://lists.apple.com/a
CVE ID: CVE-2016-4775 State: PUBLISHED Published: 2016-09-25T10:00:00 Last Updated: 2024-08-06T00:39:26.080Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel in Apple OS X before 10.12, tvOS before 10, and watchOS before 3 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT207141 - http://www.securitytracker.com/id/1036858 - http://www.securityfocus.com/bid/93063 - http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html - http://lists.apple.com/archives/security-announce/2016/Sep/msg00010.html - http://
ity-announce/2016/Sep/msg00006.html - http://lists.apple.com/archives/security-announce/2016/Sep/msg00010.html - http://lists.apple.com/archives/security-announce/2016/Sep/msg00011.html - https://support.apple.com/HT207170 - https://support.apple.com/HT207142
CVE ID: CVE-2016-4776 State: PUBLISHED Published: 2016-09-25T10:00:00 Last Updated: 2024-08-06T00:39:26.235Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows attackers to obtain sensitive memory-layout information or cause a denial of service (out-of-bounds read) via a crafted app, a different vulnerability than CVE-2016-4773 and CVE-2016-4774. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT207141 - http://www.securitytracker.com/id/1036858 - http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html - http://lists.apple.com/a
CVE ID: CVE-2016-4777 State: PUBLISHED Published: 2016-09-25T10:00:00 Last Updated: 2024-08-06T00:39:26.101Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (invalid pointer dereference) via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT207141 - http://www.securitytracker.com/id/1036858 - http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html - http://lists.apple.com/archives/security-announce/2016/Sep/msg00008.html -
s/security-announce/2016/Sep/msg00006.html - http://lists.apple.com/archives/security-announce/2016/Sep/msg00008.html - http://lists.apple.com/archives/security-announce/2016/Sep/msg00010.html - http://lists.apple.com/archives/security-announce/2016/Sep/msg00011.html - http://www.securityfocus.com/bid/93054 - https://support.apple.com/HT207170 - https://support.apple.com/HT207142 - https://support.apple.com/HT207143
CVE ID: CVE-2016-4778 State: PUBLISHED Published: 2016-09-25T10:00:00 Last Updated: 2024-08-06T00:39:26.168Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT207141 - http://www.securitytracker.com/id/1036858 - http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html - http://lists.apple.com/archives/security-announce/2016/Sep/msg00008.html - http://lis
-announce/2016/Sep/msg00006.html - http://lists.apple.com/archives/security-announce/2016/Sep/msg00008.html - http://lists.apple.com/archives/security-announce/2016/Sep/msg00010.html - http://lists.apple.com/archives/security-announce/2016/Sep/msg00011.html - http://www.securityfocus.com/bid/93054 - https://support.apple.com/HT207170 - https://support.apple.com/HT207142 - https://support.apple.com/HT207143
CVE ID: CVE-2016-4779 State: PUBLISHED Published: 2016-09-25T10:00:00 Last Updated: 2024-08-06T00:39:26.157Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple Type Services (ATS) in Apple OS X before 10.12 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036858 - http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html - http://www.securityfocus.com/bid/93055 - https://support.apple.com/HT207170
CVE ID: CVE-2016-4780 State: PUBLISHED Published: 2017-02-20T08:35:00 Last Updated: 2024-08-06T00:39:26.175Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. macOS before 10.12.1 is affected. The issue involves the "Thunderbolt" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (NULL pointer dereference) via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT207275
CVE ID: CVE-2016-4781 State: PUBLISHED Published: 2017-02-20T08:35:00 Last Updated: 2024-08-06T00:39:26.194Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 10.2 is affected. The issue involves the "SpringBoard" component, which allows physically proximate attackers to bypass the passcode attempt counter and unlock a device via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT207422 - http://www.securitytracker.com/id/1037429 - http://www.securityfocus.com/bid/94850
CVE ID: CVE-2016-4782 State: PUBLISHED Published: 2016-05-23T19:00:00 Last Updated: 2024-08-06T00:39:26.240Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lenovo SHAREit before 3.5.98_ww on Android before 4.2 allows remote attackers to have unspecified impact via a crafted intent: URL, aka an "intent scheme URL attack." Additional Analyst Notes: - CVE Program Container: References: - https://support.lenovo.com/us/en/product_security/len_6421
CVE ID: CVE-2016-4783 State: PUBLISHED Published: 2016-05-23T19:00:00 Last Updated: 2024-08-06T00:39:26.176Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Lenovo SHAREit before 3.5.98_ww on Android before 4.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Universal XSS (UXSS)." Additional Analyst Notes: - CVE Program Container: References: - https://support.lenovo.com/us/en/product_security/len_6421
CVE ID: CVE-2016-4784 State: PUBLISHED Published: 2016-05-31T01:00:00Z Last Updated: 2024-09-17T03:59:26.394Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability has been identified in firmware variant PROFINET IO for EN100 Ethernet module : All versions < V1.04.01; Firmware variant Modbus TCP for EN100 Ethernet module : All versions < V1.11.00; Firmware variant DNP3 TCP for EN100 Ethernet module : All versions < V1.03; Firmware variant IEC 104 for EN100 Ethernet module : All versions < V1.21; EN100 Ethernet module included in SIPROTEC Merging Unit 6MU80 : All versions < 1.02.02; SIPROTEC 7SJ686 : All versions < V 4.83; SIPROTEC 7UT686 : All versions < V 4.01; SIPROTEC
U80 : All versions < 1.02.02; SIPROTEC 7SJ686 : All versions < V 4.83; SIPROTEC 7UT686 : All versions < V 4.01; SIPROTEC 7SD686 : All versions < V 4.03; SIPROTEC 7SJ66 : All versions < V 4.20. The integrated web server (port 80/tcp) of the affected devices could allow remote attackers to obtain sensitive device information if network access was obtained. Additional Analyst Notes: - CVE Program Container: References: - http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-547990.pdf - https://ics-cert.us-cert.gov/advisories/ICSA-16-140-02 - https://www.siemens.com/cert/pool/cert/siemens_security_advisory_SSA-323211.pdf - http://www.securityfocus.com/bid/90773 - https://ics-cert.
com/cert/pool/cert/siemens_security_advisory_SSA-323211.pdf - http://www.securityfocus.com/bid/90773 - https://ics-cert.us-cert.gov/advisories/ICSA-17-187-03 - http://www.securityfocus.com/bid/99471
CVE ID: CVE-2016-4785 State: PUBLISHED Published: 2016-05-31T01:00:00Z Last Updated: 2024-09-16T19:45:44.153Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions < V1.04.01; Firmware variant Modbus TCP for EN100 Ethernet module : All versions < V1.11.00; Firmware variant DNP3 TCP for EN100 Ethernet module : All versions < V1.03; Firmware variant IEC 104 for EN100 Ethernet module : All versions < V1.21; EN100 Ethernet module included in SIPROTEC Merging Unit 6MU80 : All versions < 1.02.02. The integrated web server (port 80/tcp) of the affected devices could allow remote attacke
U80 : All versions < 1.02.02. The integrated web server (port 80/tcp) of the affected devices could allow remote attackers to obtain a limited amount of device memory content if network access was obtained. This vulnerability only affects EN100 Ethernet module included in SIPROTEC4 and SIPROTEC Compact devices. Additional Analyst Notes: - CVE Program Container: References: - http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-547990.pdf - https://ics-cert.us-cert.gov/advisories/ICSA-16-140-02 - https://www.siemens.com/cert/pool/cert/siemens_security_advisory_SSA-323211.pdf - http://www.securityfocus.com/bid/90773 - https://ics-cert.us-cert.gov/advisories/ICSA-17-187-03 - http
_SSA-323211.pdf - http://www.securityfocus.com/bid/90773 - https://ics-cert.us-cert.gov/advisories/ICSA-17-187-03 - http://www.securityfocus.com/bid/99471
CVE ID: CVE-2016-4786 State: PUBLISHED Published: 2016-05-26T14:00:00 Last Updated: 2024-08-06T00:39:26.180Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pulse Connect Secure (PCS) 8.2 before 8.2r1, 8.1 before 8.1r3, 8.0 before 8.0r11, and 7.4 before 7.4r13.4 allow remote attackers to cause a denial of service (CPU consumption) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035932 - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40206
CVE ID: CVE-2016-4787 State: PUBLISHED Published: 2016-05-26T14:00:00 Last Updated: 2024-08-06T00:39:26.244Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pulse Connect Secure (PCS) 8.2 before 8.2r1, 8.1 before 8.1r2, 8.0 before 8.0r10, and 7.4 before 7.4r13.4 allow remote attackers to read sensitive system authentication files in an unspecified directory via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40207 - http://www.securitytracker.com/id/1035932
CVE ID: CVE-2016-4788 State: PUBLISHED Published: 2016-05-26T14:00:00 Last Updated: 2024-08-06T00:39:26.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pulse Connect Secure (PCS) 8.2 before 8.2r1, 8.1 before 8.1r2, 8.0 before 8.0r10, and 7.4 before 7.4r13.4 allow remote attackers to read an unspecified system file via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035932 - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40208
CVE ID: CVE-2016-4789 State: PUBLISHED Published: 2016-05-26T14:00:00 Last Updated: 2024-11-14T19:49:26.270Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the system configuration section in the administrative user interface in Pulse Connect Secure (PCS) 8.2 before 8.2r1, 8.1 before 8.1r2, 8.0 before 8.0r9, and 7.4 before 7.4r13.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securitytracker.com/id/1035932 - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40209
CVE ID: CVE-2016-4790 State: PUBLISHED Published: 2016-05-26T14:00:00 Last Updated: 2024-08-06T00:39:26.268Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the administrative user interface in Pulse Connect Secure (PCS) 8.2 before 8.2r1, 8.1 before 8.1r2, 8.0 before 8.0r9, and 7.4 before 7.4r13.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035932 - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40211
CVE ID: CVE-2016-4791 State: PUBLISHED Published: 2016-05-26T14:00:00 Last Updated: 2024-08-06T00:39:26.251Z Vendors: n/a Products: n/a Problem Types: n/a Description: The administrative user interface in Pulse Connect Secure (PCS) 8.2 before 8.2r1, 8.1 before 8.1r2, 8.0 before 8.0r9, and 7.4 before 7.4r13.4 allows remote administrators to enumerate files, read arbitrary files, and conduct server side request forgery (SSRF) attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035932 - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40210
CVE ID: CVE-2016-4792 State: PUBLISHED Published: 2016-05-26T14:00:00 Last Updated: 2024-08-06T00:39:26.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pulse Connect Secure (PCS) 8.2 before 8.2r1 allows remote attackers to disclose sign in pages via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40212 - http://www.securitytracker.com/id/1035932
CVE ID: CVE-2016-4793 State: PUBLISHED Published: 2017-01-23T21:00:00 Last Updated: 2024-08-06T00:39:26.212Z Vendors: n/a Products: n/a Problem Types: n/a Description: The clientIp function in CakePHP 3.2.4 and earlier allows remote attackers to spoof their IP via the CLIENT-IP HTTP header. Additional Analyst Notes: - CVE Program Container: References: - https://support.citrix.com/article/CTX236992 - https://www.exploit-db.com/exploits/39813/ - http://legalhackers.com/advisories/CakePHP-IP-Spoofing-Vulnerability.txt - http://www.securityfocus.com/bid/95846 - https://bakery.cakephp.org/2016/03/13/cakephp_2613_2711_282_3017_3112_325_released.html
CVE ID: CVE-2016-4794 State: PUBLISHED Published: 2016-05-23T10:00:00 Last Updated: 2024-08-06T00:39:26.265Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in mm/percpu.c in the Linux kernel through 4.6 allows local users to cause a denial of service (BUG) or possibly have unspecified other impact via crafted use of the mmap and bpf system calls. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-3054-1 - https://source.android.com/security/bulletin/2016-12-01.html - http://www.ubuntu.com/usn/USN-3053-1 - http://www.ubuntu.com/usn/USN-3055-1 - http://www.ubuntu.com/usn/USN-3056-1 - http://www.openwall.com/li
sn/USN-3053-1 - http://www.ubuntu.com/usn/USN-3055-1 - http://www.ubuntu.com/usn/USN-3056-1 - http://www.openwall.com/lists/oss-security/2016/05/12/6 - http://rhn.redhat.com/errata/RHSA-2016-2584.html - http://rhn.redhat.com/errata/RHSA-2016-2574.html - https://lkml.org/lkml/2016/4/17/125 - https://bugzilla.redhat.com/show_bug.cgi?id=1335889 - http://www.ubuntu.com/usn/USN-3057-1 - http://www.securityfocus.com/bid/90625
CVE ID: CVE-2016-4796 State: PUBLISHED Published: 2017-02-03T16:00:00 Last Updated: 2024-08-06T00:39:26.310Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the color_cmyk_to_rgb in common/color.c in OpenJPEG before 2.1.1 allows remote attackers to cause a denial of service (crash) via a crafted .j2k file. Additional Analyst Notes: - CVE Program Container: References: - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5FFMOZOF2EI6N2CR23EQ5EATWLQKBMHW/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HPMDEUIMHTLKMHELDL4F4HZ7X4Y34JEB/ - https://lists.fedora
rchives/list/package-announce%40lists.fedoraproject.org/message/HPMDEUIMHTLKMHELDL4F4HZ7X4Y34JEB/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BJM23YERMEC6LCTWBUH7LZURGSLZDFDH/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DFRD35RIPRCGZA5DKAKHZ62LMP2A5UT7/ - http://www.openwall.com/lists/oss-security/2016/05/13/2 - https://www.oracle.com/security-alerts/cpujul2020.html - https://bugzilla.redhat.com/show_bug.cgi?id=1335482 - https://github.com/uclouvain/openjpeg/commit/162f6199c0cd3ec1c6c6dc65e41b2faab92b2d91 - https://github.com/uclouvain/openjpeg/issues/774
CVE ID: CVE-2016-4797 State: PUBLISHED Published: 2017-02-03T16:00:00 Last Updated: 2024-08-06T00:39:26.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: Divide-by-zero vulnerability in the opj_tcd_init_tile function in tcd.c in OpenJPEG before 2.1.1 allows remote attackers to cause a denial of service (application crash) via a crafted jp2 file. NOTE: this issue exists because of an incorrect fix for CVE-2014-7947. Additional Analyst Notes: - CVE Program Container: References: - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5FFMOZOF2EI6N2CR23EQ5EATWLQKBMHW/ - https://lists.fedoraproject.org/archives/list/package-announce%40list
ct.org/message/5FFMOZOF2EI6N2CR23EQ5EATWLQKBMHW/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HPMDEUIMHTLKMHELDL4F4HZ7X4Y34JEB/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BJM23YERMEC6LCTWBUH7LZURGSLZDFDH/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DFRD35RIPRCGZA5DKAKHZ62LMP2A5UT7/ - http://www.openwall.com/lists/oss-security/2016/05/13/2 - https://www.oracle.com/security-alerts/cpujul2020.html - https://github.com/uclouvain/openjpeg/commit/8f9cc62b3f9a1da9712329ddcedb9750d585505c - https://github.com/uclouvain/openjpeg/issues/73
com/uclouvain/openjpeg/commit/8f9cc62b3f9a1da9712329ddcedb9750d585505c - https://github.com/uclouvain/openjpeg/issues/733 - https://bugzilla.redhat.com/show_bug.cgi?id=1335483