Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-8869 State: PUBLISHED Published: 2016-06-13T19:00:00 Last Updated: 2024-08-06T08:29:22.141Z Vendors: n/a Products: n/a Problem Types: n/a Description: OCaml before 4.03.0 does not properly handle sign extensions, which allows remote attackers to conduct buffer overflow attacks or obtain sensitive information as demonstrated by a long string to the String.copy function. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2016:1296 - http://rhn.redhat.com/errata/RHSA-2016-2576.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html - https://security.gentoo.org/glsa/201702-15 - http://lists.o
hnetwork/topics/security/linuxbulletinjul2016-3090544.html - https://security.gentoo.org/glsa/201702-15 - http://lists.opensuse.org/opensuse-updates/2016-09/msg00037.html - http://www.openwall.com/lists/oss-security/2016/04/29/6 - http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184507.html - http://rhn.redhat.com/errata/RHSA-2017-0564.html - http://www.securityfocus.com/bid/89318 - https://github.com/ocaml/ocaml/commit/659615c7b100a89eafe6253e7a5b9d84d0e8df74#diff-a97df53e3ebc59bb457191b496c90762 - http://rhn.redhat.com/errata/RHSA-2017-0565.html - http://lists.opensuse.org/opensuse-updates/2016-05/msg00081.html - http://www.openwall.com/lists/oss-security/2016/04/29/1
CVE ID: CVE-2015-8870 State: PUBLISHED Published: 2016-12-06T18:00:00 Last Updated: 2024-08-06T08:29:22.080Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in tools/bmp2tiff.c in LibTIFF before 4.0.4 allows remote attackers to cause a denial of service (heap-based buffer over-read), or possibly obtain sensitive information from process memory, via crafted width and length values in RLE4 or RLE8 data in a BMP file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94717 - http://download.osgeo.org/libtiff/tiff-4.0.4.tar.gz - http://www.floyd.ch/?p=874BMP - http://rhn.redhat.com/errata/RHSA-2017-0225.html
CVE ID: CVE-2015-8871 State: PUBLISHED Published: 2016-09-21T14:00:00 Last Updated: 2024-08-06T08:29:22.193Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the opj_j2k_write_mco function in j2k.c in OpenJPEG before 2.1.1 allows remote attackers to have unspecified impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201612-26 - https://github.com/uclouvain/openjpeg/issues/563 - http://www.openwall.com/lists/oss-security/2016/05/13/1 - https://github.com/uclouvain/openjpeg/blob/master/CHANGELOG.md - https://bugzilla.redhat.com/show_bug.cgi?id=1263359 - http://www.debian.org/sec
vain/openjpeg/blob/master/CHANGELOG.md - https://bugzilla.redhat.com/show_bug.cgi?id=1263359 - http://www.debian.org/security/2016/dsa-3665 - https://github.com/uclouvain/openjpeg/commit/940100c28ae28931722290794889cf84a92c5f6f - http://www.securitytracker.com/id/1038623 - http://www.openwall.com/lists/oss-security/2015/09/15/4
CVE ID: CVE-2015-8872 State: PUBLISHED Published: 2016-06-03T14:00:00 Last Updated: 2024-08-06T08:29:22.096Z Vendors: n/a Products: n/a Problem Types: n/a Description: The set_fat function in fat.c in dosfstools before 4.0 might allow attackers to corrupt a FAT12 filesystem or cause a denial of service (invalid memory read and crash) by writing an odd number of clusters to the third to last entry on a FAT12 filesystem, which triggers an "off-by-two error." Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2016-06/msg00001.html - https://github.com/dosfstools/dosfstools/releases/tag/v4.0 - https://github.com/dosfstools/dosfstools/issue
00001.html - https://github.com/dosfstools/dosfstools/releases/tag/v4.0 - https://github.com/dosfstools/dosfstools/issues/12 - https://blog.fuzzing-project.org/44-dosfstools-fsck.vfat-Several-invalid-memory-accesses.html - http://www.ubuntu.com/usn/USN-2986-1 - https://github.com/dosfstools/dosfstools/commit/07908124838afcc99c577d1d3e84cef2dbd39cb7 - http://lists.opensuse.org/opensuse-updates/2016-09/msg00014.html - http://www.securityfocus.com/bid/90311 - https://lists.debian.org/debian-lts-announce/2020/05/msg00028.html
CVE ID: CVE-2015-8873 State: PUBLISHED Published: 2016-05-16T10:00:00 Last Updated: 2024-08-06T08:29:22.030Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack consumption vulnerability in Zend/zend_exceptions.c in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 allows remote attackers to cause a denial of service (segmentation fault) via recursive method calls. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2016-06/msg00027.html - https://bugs.php.net/bug.php?id=69793 - http://rhn.redhat.com/errata/RHSA-2016-2750.html - http://php.net/ChangeLog-5.php - http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=
dhat.com/errata/RHSA-2016-2750.html - http://php.net/ChangeLog-5.php - http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=4d2278143a08b7522de9471d0f014d7357c28fea
CVE ID: CVE-2015-8874 State: PUBLISHED Published: 2016-05-16T10:00:00 Last Updated: 2024-08-06T08:29:22.113Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack consumption vulnerability in GD in PHP before 5.6.12 allows remote attackers to cause a denial of service via a crafted imagefilltoborder call. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2016-06/msg00027.html - http://rhn.redhat.com/errata/RHSA-2016-2750.html - https://bugs.php.net/bug.php?id=66387 - http://php.net/ChangeLog-5.php - http://www.ubuntu.com/usn/USN-2987-1 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c0524073
/www.ubuntu.com/usn/USN-2987-1 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731 - http://www.debian.org/security/2016/dsa-3587
CVE ID: CVE-2015-8875 State: PUBLISHED Published: 2016-06-01T22:00:00 Last Updated: 2024-08-06T08:29:22.089Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in the (1) pixops_composite_nearest, (2) pixops_composite_color_nearest, and (3) pixops_process functions in pixops/pixops.c in gdk-pixbuf before 2.33.1 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted image, which triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2016/dsa-3589 - http://www.openwall.com/lists/oss-security/2016/05/16/1 - http://ww
es: - http://www.debian.org/security/2016/dsa-3589 - http://www.openwall.com/lists/oss-security/2016/05/16/1 - http://www.ubuntu.com/usn/USN-3085-1 - http://www.openwall.com/lists/oss-security/2016/05/12/3 - https://git.gnome.org/browse/gdk-pixbuf/commit/?id=dbfe8f70471864818bf458a39c8a99640895bd22 - http://www.openwall.com/lists/oss-security/2016/05/17/7
CVE ID: CVE-2015-8876 State: PUBLISHED Published: 2016-05-22T01:00:00 Last Updated: 2024-08-06T08:29:22.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zend/zend_exceptions.c in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 does not validate certain Exception objects, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) or trigger unintended method execution via crafted serialized data. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-2750.html - http://www.php.net/ChangeLog-5.php - https://bugs.php.net/bug.php?id=70121
CVE ID: CVE-2015-8877 State: PUBLISHED Published: 2016-05-22T01:00:00 Last Updated: 2024-08-06T08:29:22.081Z Vendors: n/a Products: n/a Problem Types: n/a Description: The gdImageScaleTwoPass function in gd_interpolation.c in the GD Graphics Library (aka libgd) before 2.2.0, as used in PHP before 5.6.12, uses inconsistent allocate and free approaches, which allows remote attackers to cause a denial of service (memory consumption) via a crafted call, as demonstrated by a call to the PHP imagescale function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/libgd/libgd/issues/173 - http://rhn.redhat.com/errata/RHSA-2016-2750.html - https://github.com/libgd/lib
ps://github.com/libgd/libgd/issues/173 - http://rhn.redhat.com/errata/RHSA-2016-2750.html - https://github.com/libgd/libgd/commit/4751b606fa38edc456d627140898a7ec679fcc24 - http://www.php.net/ChangeLog-5.php - https://bugs.php.net/bug.php?id=70064 - http://www.ubuntu.com/usn/USN-2987-1 - http://www.debian.org/security/2016/dsa-3587
CVE ID: CVE-2015-8878 State: PUBLISHED Published: 2016-05-22T01:00:00Z Last Updated: 2024-09-17T01:01:58.847Z Vendors: n/a Products: n/a Problem Types: n/a Description: main/php_open_temporary_file.c in PHP before 5.5.28 and 5.6.x before 5.6.12 does not ensure thread safety, which allows remote attackers to cause a denial of service (race condition and heap memory corruption) by leveraging an application that performs many temporary-file accesses. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.php.net/bug.php?id=70002 - http://www.php.net/ChangeLog-5.php
CVE ID: CVE-2015-8879 State: PUBLISHED Published: 2016-05-22T01:00:00 Last Updated: 2024-08-06T08:29:22.157Z Vendors: n/a Products: n/a Problem Types: n/a Description: The odbc_bindcols function in ext/odbc/php_odbc.c in PHP before 5.6.12 mishandles driver behavior for SQL_WVARCHAR columns, which allows remote attackers to cause a denial of service (application crash) in opportunistic circumstances by leveraging use of the odbc_fetch_array function to access a certain type of Microsoft SQL Server table. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.php.net/bug.php?id=69975 - http://rhn.redhat.com/errata/RHSA-2016-2750.html - http://www.php.net/ChangeLog-5.php
CVE ID: CVE-2015-8880 State: PUBLISHED Published: 2016-05-22T01:00:00Z Last Updated: 2024-09-16T21:02:26.814Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in the format printer in PHP 7.x before 7.0.1 allows remote attackers to have an unspecified impact by triggering an error. Additional Analyst Notes: - CVE Program Container: References: - http://php.net/ChangeLog-7.php
CVE ID: CVE-2015-8888 State: PUBLISHED Published: 2016-07-11T01:00:00 Last Updated: 2024-08-06T08:29:22.103Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in app/aboot/aboot.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices allows attackers to bypass intended access restrictions via a crafted block count and block size of a sparse header, aka Android internal bug 28822465 and Qualcomm internal bug CR813933. Additional Analyst Notes: - CVE Program Container: References: - https://source.codeaurora.org/quic/la/kernel/lk/commit/?id=1321f34f1ebcff61ad7e65e507cfd3e9028af19b - http://www.securityfocus.com/bid/91628 - http://source.android.co
/commit/?id=1321f34f1ebcff61ad7e65e507cfd3e9028af19b - http://www.securityfocus.com/bid/91628 - http://source.android.com/security/bulletin/2016-07-01.html
CVE ID: CVE-2015-8889 State: PUBLISHED Published: 2016-07-11T01:00:00 Last Updated: 2024-08-06T08:29:22.080Z Vendors: n/a Products: n/a Problem Types: n/a Description: The aboot implementation in the Qualcomm components in Android before 2016-07-05 on Nexus 6P devices omits the recovery PIN feature, which has unspecified impact and attack vectors, aka Android internal bug 28822677 and Qualcomm internal bug CR804067. Additional Analyst Notes: - CVE Program Container: References: - https://source.codeaurora.org/quic/la/kernel/lk/commit/?id=fa774e023554427ee14d7a49181e9d4afbec035e - http://www.securityfocus.com/bid/91628 - http://source.android.com/security/bulletin/2016-07-01.html
CVE ID: CVE-2015-8890 State: PUBLISHED Published: 2016-07-11T01:00:00 Last Updated: 2024-08-06T08:29:22.117Z Vendors: n/a Products: n/a Problem Types: n/a Description: platform/msm_shared/partition_parser.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices does not validate certain GUID Partition Table (GPT) data, which allows attackers to bypass intended access restrictions via a crafted MultiMediaCard (MMC), aka Android internal bug 28822878 and Qualcomm internal bug CR823461. Additional Analyst Notes: - CVE Program Container: References: - https://source.codeaurora.org/quic/la/kernel/lk/commit/?id=e22aca36da2bb6f5016f3c885eb8c8ff85c115e4 - http://www.
ces: - https://source.codeaurora.org/quic/la/kernel/lk/commit/?id=e22aca36da2bb6f5016f3c885eb8c8ff85c115e4 - http://www.securityfocus.com/bid/91628 - http://source.android.com/security/bulletin/2016-07-01.html
CVE ID: CVE-2015-8891 State: PUBLISHED Published: 2016-07-11T01:00:00 Last Updated: 2024-08-06T08:29:22.116Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in app/aboot/aboot.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices allow attackers to bypass intended access restrictions via a crafted image, aka Android internal bug 28842418 and Qualcomm internal bug CR813930. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/91628 - http://source.android.com/security/bulletin/2016-07-01.html - https://source.codeaurora.org/quic/la/kernel/lk/commit/?id=4f829bb52d0338c87bc6fbd
m/security/bulletin/2016-07-01.html - https://source.codeaurora.org/quic/la/kernel/lk/commit/?id=4f829bb52d0338c87bc6fbd0414b258f55cc7c62
CVE ID: CVE-2015-8892 State: PUBLISHED Published: 2016-07-11T01:00:00 Last Updated: 2024-08-06T08:29:22.039Z Vendors: n/a Products: n/a Problem Types: n/a Description: platform/msm_shared/boot_verifier.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5X and 6P devices allows attackers to bypass intended access restrictions via a digest with trailing data, aka Android internal bug 28822807 and Qualcomm internal bug CR902998. Additional Analyst Notes: - CVE Program Container: References: - https://source.codeaurora.org/quic/la/kernel/lk/commit/?id=fae606b9dd92c021e2419369975264f24f60db23 - http://www.securityfocus.com/bid/91628 - http://source.android.com/security/bulletin/20
92c021e2419369975264f24f60db23 - http://www.securityfocus.com/bid/91628 - http://source.android.com/security/bulletin/2016-07-01.html
CVE ID: CVE-2015-8893 State: PUBLISHED Published: 2016-07-11T01:00:00 Last Updated: 2024-08-06T08:29:22.190Z Vendors: n/a Products: n/a Problem Types: n/a Description: app/aboot/aboot.c in the Qualcomm bootloader in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices allows attackers to cause a denial of service (OS outage or buffer over-read) via a crafted application, aka Android internal bug 28822690 and Qualcomm internal bug CR822275. Additional Analyst Notes: - CVE Program Container: References: - https://source.codeaurora.org/quic/la/kernel/lk/commit/?id=800255e8bfcc31a02e89460460e3811f225e7a69 - http://source.android.com/security/bulletin/2016-07-01.html
CVE ID: CVE-2015-8894 State: PUBLISHED Published: 2017-03-15T19:00:00 Last Updated: 2024-08-06T08:29:22.083Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in coders/tga.c in ImageMagick 7.0.0 and later allows remote attackers to cause a denial of service (application crash) via a crafted tga file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/commit/4f68e9661518463fca523c9726bb5d940a2aa6d8 - https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1490362 - http://www.openwall.com/lists/oss-security/2016/06/02/13
CVE ID: CVE-2015-8895 State: PUBLISHED Published: 2017-03-15T19:00:00 Last Updated: 2024-08-06T08:29:22.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in coders/icon.c in ImageMagick 6.9.1-3 and later allows remote attackers to cause a denial of service (application crash) via a crafted length value, which triggers a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2016:1237 - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1459747 - http://www.securityfocus.com/bid/91025 - http://www.openwall
ugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1459747 - http://www.securityfocus.com/bid/91025 - http://www.openwall.com/lists/oss-security/2016/06/02/13 - https://github.com/ImageMagick/ImageMagick/commit/0f6fc2d5bf8f500820c3dbcf0d23ee14f2d9f734
CVE ID: CVE-2015-8896 State: PUBLISHED Published: 2017-03-15T19:00:00 Last Updated: 2024-08-06T08:29:22.150Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer truncation issue in coders/pict.c in ImageMagick before 7.0.5-0 allows remote attackers to cause a denial of service (application crash) via a crafted .pict file. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2016:1237 - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - http://www.securityfocus.com/bid/91027 - http://www.openwall.com/lists/oss-security/2016/06/02/13 - http://www.openwall.com/lists/oss-security/2015/10/08/3 - ht
http://www.openwall.com/lists/oss-security/2016/06/02/13 - http://www.openwall.com/lists/oss-security/2015/10/08/3 - http://www.openwall.com/lists/oss-security/2015/10/07/2 - https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1448803 - https://github.com/ImageMagick/ImageMagick/commit/0f6fc2d5bf8f500820c3dbcf0d23ee14f2d9f734
CVE ID: CVE-2015-8897 State: PUBLISHED Published: 2017-03-15T19:00:00 Last Updated: 2024-08-06T08:29:22.038Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SpliceImage function in MagickCore/transform.c in ImageMagick before 6.9.2-4 allows remote attackers to cause a denial of service (application crash) via a crafted png file. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2016:1237 - https://github.com/ImageMagick/ImageMagick/commit/7b1cf5784b5bcd85aa9293ecf56769f68c037231 - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - http://www.imagemagick.org/discourse-server/viewtopic.php?f=
network/topics/security/linuxbulletinapr2016-2952096.html - http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=28466 - http://www.openwall.com/lists/oss-security/2016/06/02/13 - http://www.securityfocus.com/bid/91030
CVE ID: CVE-2015-8898 State: PUBLISHED Published: 2017-03-15T19:00:00 Last Updated: 2024-08-06T08:29:22.112Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WriteImages function in magick/constitute.c in ImageMagick before 6.9.2-4 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted image file. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2016:1237 - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - https://github.com/ImageMagick/ImageMagick/pull/34 - http://www.securityfocus.com/bid/91039 - https://github.com/ImageMagick/ImageMagick/commit/5b4
ick/ImageMagick/pull/34 - http://www.securityfocus.com/bid/91039 - https://github.com/ImageMagick/ImageMagick/commit/5b4bebaa91849c592a8448bc353ab25a54ff8c44 - http://www.openwall.com/lists/oss-security/2016/06/02/13
CVE ID: CVE-2015-8899 State: PUBLISHED Published: 2016-06-30T17:00:00 Last Updated: 2024-08-06T08:29:22.024Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dnsmasq before 2.76 allows remote servers to cause a denial of service (crash) via a reply with an empty DNS address that has an (1) A or (2) AAAA record defined locally. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/91031 - http://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2016q2/010479.html - http://www.ubuntu.com/usn/USN-3009-1 - http://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2016q2/010505.html - http://www.openwall.com/lists/oss-security/2016/06/04/2 - ht
lleys.org.uk/pipermail/dnsmasq-discuss/2016q2/010505.html - http://www.openwall.com/lists/oss-security/2016/06/04/2 - http://www.securitytracker.com/id/1036045 - http://thekelleys.org.uk/gitweb/?p=dnsmasq.git%3Ba=commit%3Bh=41a8d9e99be9f2cc8b02051dd322cb45e0faac87 - http://www.openwall.com/lists/oss-security/2016/06/03/7
CVE ID: CVE-2015-8900 State: PUBLISHED Published: 2017-02-27T22:00:00 Last Updated: 2024-08-06T08:29:22.144Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ReadHDRImage function in coders/hdr.c in ImageMagick 6.x and 7.x allows remote attackers to cause a denial of service (infinite loop) via a crafted HDR file. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/02/26/13 - http://www.openwall.com/lists/oss-security/2016/06/06/2 - https://bugzilla.redhat.com/show_bug.cgi?id=1195260 - https://github.com/ImageMagick/ImageMagick/commit/97aa7d7cfd2027f6ba7ce42caf8b798541b9cdc6 - http://trac.imagemagick.org/changeset/178
.com/ImageMagick/ImageMagick/commit/97aa7d7cfd2027f6ba7ce42caf8b798541b9cdc6 - http://trac.imagemagick.org/changeset/17846 - http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=26929 - http://trac.imagemagick.org/changeset/17845
CVE ID: CVE-2015-8901 State: PUBLISHED Published: 2017-02-27T22:00:00 Last Updated: 2024-08-06T08:29:22.113Z Vendors: n/a Products: n/a Problem Types: n/a Description: ImageMagick 6.x before 6.9.0-5 Beta allows remote attackers to cause a denial of service (infinite loop) via a crafted MIFF file. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/02/26/13 - http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=26931 - http://www.openwall.com/lists/oss-security/2016/06/06/2 - https://bugzilla.redhat.com/show_bug.cgi?id=1195265 - http://trac.imagemagick.org/changeset/17854
CVE ID: CVE-2015-8902 State: PUBLISHED Published: 2017-02-27T22:00:00 Last Updated: 2024-08-06T08:29:22.165Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ReadBlobByte function in coders/pdb.c in ImageMagick 6.x before 6.9.0-5 Beta allows remote attackers to cause a denial of service (infinite loop) via a crafted PDB file. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/02/26/13 - http://www.openwall.com/lists/oss-security/2016/06/06/2 - http://trac.imagemagick.org/changeset/17855 - https://bugzilla.redhat.com/show_bug.cgi?id=1195269 - http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=26932
CVE ID: CVE-2015-8903 State: PUBLISHED Published: 2017-02-27T22:00:00 Last Updated: 2024-08-06T08:29:22.099Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ReadVICARImage function in coders/vicar.c in ImageMagick 6.x before 6.9.0-5 Beta allows remote attackers to cause a denial of service (infinite loop) via a crafted VICAR file. Additional Analyst Notes: - CVE Program Container: References: - http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=26933 - http://www.openwall.com/lists/oss-security/2015/02/26/13 - https://bugzilla.redhat.com/show_bug.cgi?id=1195271 - http://www.openwall.com/lists/oss-security/2016/06/06/2 - http://trac.imagemagick.org/changeset/17856
CVE ID: CVE-2015-8904 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-8905 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-8906 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-8907 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.