Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-17764 State: PUBLISHED Published: 2018-02-23T23:00:00Z Last Updated: 2024-09-16T16:37:36.091Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Integer Overflow to Buffer Overflow in WLAN Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, the num_failure_info value from firmware is not properly validated in wma_rx_aggr_failure_event_handler() so that an integer overflow vulnerability in a buffer size calculation may potentially lead to a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-02-01 - http://www.
lyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-02-01 - http://www.securityfocus.com/bid/102974
CVE ID: CVE-2017-17765 State: PUBLISHED Published: 2018-02-23T23:00:00Z Last Updated: 2024-09-17T04:20:19.670Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Integer Overflow to Buffer Overflow in WLAN Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, multiple values received from firmware are not properly validated in wma_get_ll_stats_ext_buf() and are used to allocate the sizes of buffers and may be vulnerable to integer overflow leading to buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-02-01 - http://www.security
es: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-02-01 - http://www.securityfocus.com/bid/102974
CVE ID: CVE-2017-17766 State: PUBLISHED Published: 2018-03-30T21:00:00Z Last Updated: 2024-09-16T18:34:34.480Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Integer Overflow to Buffer Overflow in WLAN Description: In wma_peer_info_event_handler() in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-10-03, the value of num_peers received from firmware is not properly validated so that an integer overflow vulnerability in the size of a buffer allocation may potentially lead to a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource
lyst Notes: - CVE Program Container: References: - https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=a37d8a78f5bd0e9a2c91de46721a6d80bd229a43 - https://source.android.com/security/bulletin/pixel/2018-02-01
CVE ID: CVE-2017-17767 State: PUBLISHED Published: 2018-02-23T23:00:00Z Last Updated: 2024-09-17T03:28:25.551Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Use After Free in Video Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, the IL client may free a buffer OMX Video Encoder Component and then subsequently access the already freed buffer. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-02-01 - http://www.securityfocus.com/bid/102974
CVE ID: CVE-2017-17769 State: PUBLISHED Published: 2018-03-30T21:00:00Z Last Updated: 2024-09-16T22:20:52.132Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Information Exposure in Audio Description: Information leakage in Android for MSM, Firefox OS for MSM, and QRD Android can occur in the audio driver. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2018-02-01
CVE ID: CVE-2017-17770 State: PUBLISHED Published: 2018-04-03T17:00:00Z Last Updated: 2024-09-16T19:47:10.326Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Untrusted Pointer Dereference in Power Description: In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, in a power driver ioctl handler, an Untrusted Pointer Dereference may potentially occur. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01
CVE ID: CVE-2017-17771 State: PUBLISHED Published: 2018-03-30T21:00:00Z Last Updated: 2024-09-16T16:59:00.716Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Improper Validation of Array Index in Camera Description: In msm_isp_prepare_v4l2_buf in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-02-12, an array out of bounds can occur. Additional Analyst Notes: - CVE Program Container: References: - https://source.codeaurora.org/quic/la//kernel/msm-4.4/commit/?id=a452045792bc09548b4e1b940aa8adfed822b51c - https://source.android.com/security/bulletin/pixel/2018-02-01
CVE ID: CVE-2017-17772 State: PUBLISHED Published: 2024-11-26T08:55:18.024Z Last Updated: 2024-11-26T14:09:23.431Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-126 Description: In multiple functions that process 802.11 frames, out-of-bounds reads can occur due to insufficient validation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2018-bulletin.html
CVE ID: CVE-2017-17773 State: PUBLISHED Published: 2018-03-15T21:00:00 Last Updated: 2024-08-05T20:59:17.746Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Snapdragon Automobile, Snapdragon Wearable and Snapdragon Mobile MDM9206,MDM9607,MDM9650,SD 210/SD 212/SD 205,SD 400,SD 410/12,SD 425,SD 430,SD 450,SD 600,SD 602A,SD 615/16/SD 415,SD 617,SD 625,SD 650/52,SD 800,SD 808,SD 810,SD 820,SD 820Am,SD 835,SD 845,MSM8909W, improper input validation in video_fmt_mp4r_process_atom_avc1() causes a potential buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-03-01 - http://www.securityfocus.com/bid/103292
CVE ID: CVE-2017-17774 State: PUBLISHED Published: 2017-12-20T03:00:00 Last Updated: 2024-08-05T20:59:17.686Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin/configuration.php in Piwigo 2.9.2 has CSRF. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/d4wner/Vulnerabilities-Report/blob/master/piwigo.md - https://github.com/Piwigo/Piwigo/issues/822
CVE ID: CVE-2017-17775 State: PUBLISHED Published: 2017-12-20T03:00:00 Last Updated: 2024-08-05T20:59:17.890Z Vendors: n/a Products: n/a Problem Types: n/a Description: Piwigo 2.9.2 has XSS via the name parameter in an admin.php?page=album-3-properties request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/d4wner/Vulnerabilities-Report/blob/master/piwigo.md
CVE ID: CVE-2017-17776 State: PUBLISHED Published: 2017-12-20T03:00:00 Last Updated: 2024-08-05T20:59:17.880Z Vendors: n/a Products: n/a Problem Types: n/a Description: Paid To Read Script 2.0.5 has full path disclosure via an invalid admin/userview.php uid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/d4wner/Vulnerabilities-Report/blob/master/paid-to-read-script.md
CVE ID: CVE-2017-17777 State: PUBLISHED Published: 2017-12-20T03:00:00 Last Updated: 2024-08-05T20:59:17.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: Paid To Read Script 2.0.5 has authentication bypass in the admin panel via a direct request, as demonstrated by the admin/viewvisitcamp.php fn parameter and the admin/userview.php uid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/d4wner/Vulnerabilities-Report/blob/master/paid-to-read-script.md
CVE ID: CVE-2017-17778 State: PUBLISHED Published: 2017-12-20T03:00:00 Last Updated: 2024-08-05T20:59:17.917Z Vendors: n/a Products: n/a Problem Types: n/a Description: Paid To Read Script 2.0.5 has XSS via the referrals.php tier parameter or the admin/userview.php uid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/d4wner/Vulnerabilities-Report/blob/master/paid-to-read-script.md
CVE ID: CVE-2017-17779 State: PUBLISHED Published: 2017-12-20T03:00:00 Last Updated: 2024-08-05T20:59:17.967Z Vendors: n/a Products: n/a Problem Types: n/a Description: Paid To Read Script 2.0.5 has SQL injection via the referrals.php id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/d4wner/Vulnerabilities-Report/blob/master/paid-to-read-script.md
CVE ID: CVE-2017-17780 State: PUBLISHED Published: 2017-12-20T03:00:00 Last Updated: 2024-08-05T20:59:17.852Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Clockwork SMS clockwork-test-message.php component has XSS via a crafted "to" parameter in a clockwork-test-message request to wp-admin/admin.php. This component code is found in the following WordPress plugins: Clockwork Free and Paid SMS Notifications 2.0.3, Two-Factor Authentication - Clockwork SMS 1.0.2, Booking Calendar - Clockwork SMS 1.0.5, Contact Form 7 - Clockwork SMS 2.3.0, Fast Secure Contact Form - Clockwork SMS 2.1.2, Formidable - Clockwork SMS 1.0.2, Gravity Forms - Clockwork SMS 2.2, and WP e-Commerce - Cl
Form - Clockwork SMS 2.1.2, Formidable - Clockwork SMS 1.0.2, Gravity Forms - Clockwork SMS 2.2, and WP e-Commerce - Clockwork SMS 2.0.5. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/145469/Clockwork-SMS-Cross-Site-Scripting.html - https://plugins.trac.wordpress.org/changeset/1781424/clockwork-two-factor-authentication/trunk/templates/clockwork-test-message.php?old=706348&old_path=clockwork-two-factor-authentication%2Ftrunk%2Ftemplates%2Fclockwork-test-message.php
CVE ID: CVE-2017-17781 State: REJECTED Published: 2017-12-20T09:00:00 Last Updated: 2018-10-02T17:57:01 Description: No description available.
CVE ID: CVE-2017-17782 State: PUBLISHED Published: 2017-12-20T09:00:00 Last Updated: 2024-08-05T20:59:17.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: In GraphicsMagick 1.3.27a, there is a heap-based buffer over-read in ReadOneJNGImage in coders/png.c, related to oFFs chunk allocation. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2018/dsa-4321 - https://lists.debian.org/debian-lts-announce/2018/06/msg00009.html - https://lists.debian.org/debian-lts-announce/2018/01/msg00005.html - http://hg.graphicsmagick.org/hg/GraphicsMagick?cmd=changeset%3Bnode=8e3d2264109c - https://sourceforge.net/p/graphicsmagick/bugs/530/ - https://
.org/hg/GraphicsMagick?cmd=changeset%3Bnode=8e3d2264109c - https://sourceforge.net/p/graphicsmagick/bugs/530/ - https://usn.ubuntu.com/4248-1/
CVE ID: CVE-2017-17783 State: PUBLISHED Published: 2017-12-20T09:00:00 Last Updated: 2024-08-05T20:59:17.808Z Vendors: n/a Products: n/a Problem Types: n/a Description: In GraphicsMagick 1.3.27a, there is a buffer over-read in ReadPALMImage in coders/palm.c when QuantumDepth is 8. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/graphicsmagick/bugs/529/ - https://www.debian.org/security/2018/dsa-4321 - http://hg.graphicsmagick.org/hg/GraphicsMagick?cmd=changeset%3Bnode=60932931559a - https://usn.ubuntu.com/4248-1/
CVE ID: CVE-2017-17784 State: PUBLISHED Published: 2017-12-20T09:00:00 Last Updated: 2024-08-05T20:59:17.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: In GIMP 2.8.22, there is a heap-based buffer over-read in load_image in plug-ins/common/file-gbr.c in the gbr import parser, related to mishandling of UTF-8 data. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2017/dsa-4077 - http://www.securityfocus.com/bid/102899 - https://usn.ubuntu.com/3539-1/ - http://www.openwall.com/lists/oss-security/2017/12/19/5 - https://lists.debian.org/debian-lts-announce/2017/12/msg00023.html - https://bugzilla.gnome.org/show_bug.cgi?id=790784
CVE ID: CVE-2017-17785 State: PUBLISHED Published: 2017-12-20T09:00:00 Last Updated: 2024-08-05T20:59:17.922Z Vendors: n/a Products: n/a Problem Types: n/a Description: In GIMP 2.8.22, there is a heap-based buffer overflow in the fli_read_brun function in plug-ins/file-fli/fli.c. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.gnome.org/show_bug.cgi?id=739133 - https://www.debian.org/security/2017/dsa-4077 - https://usn.ubuntu.com/3539-1/ - http://www.openwall.com/lists/oss-security/2017/12/19/5 - https://lists.debian.org/debian-lts-announce/2017/12/msg00023.html
CVE ID: CVE-2017-17786 State: PUBLISHED Published: 2017-12-20T09:00:00 Last Updated: 2024-08-05T20:59:17.920Z Vendors: n/a Products: n/a Problem Types: n/a Description: In GIMP 2.8.22, there is a heap-based buffer over-read in ReadImage in plug-ins/common/file-tga.c (related to bgr2rgb.part.1) via an unexpected bits-per-pixel value for an RGBA image. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2017/dsa-4077 - https://bugzilla.gnome.org/show_bug.cgi?id=739134 - https://usn.ubuntu.com/3539-1/ - http://www.openwall.com/lists/oss-security/2017/12/19/5 - https://lists.debian.org/debian-lts-announce/2017/12/msg00023.html - http://www.securityfoc
/oss-security/2017/12/19/5 - https://lists.debian.org/debian-lts-announce/2017/12/msg00023.html - http://www.securityfocus.com/bid/102765
CVE ID: CVE-2017-17787 State: PUBLISHED Published: 2017-12-20T09:00:00 Last Updated: 2024-08-05T20:59:17.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: In GIMP 2.8.22, there is a heap-based buffer over-read in read_creator_block in plug-ins/common/file-psp.c. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2017/dsa-4077 - https://usn.ubuntu.com/3539-1/ - http://www.openwall.com/lists/oss-security/2017/12/19/5 - https://lists.debian.org/debian-lts-announce/2017/12/msg00023.html - https://bugzilla.gnome.org/show_bug.cgi?id=790853
CVE ID: CVE-2017-17788 State: PUBLISHED Published: 2017-12-20T09:00:00 Last Updated: 2024-08-05T20:59:17.923Z Vendors: n/a Products: n/a Problem Types: n/a Description: In GIMP 2.8.22, there is a stack-based buffer over-read in xcf_load_stream in app/xcf/xcf.c when there is no '\0' character after the version string. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2017/dsa-4077 - https://usn.ubuntu.com/3539-1/ - https://bugzilla.gnome.org/show_bug.cgi?id=790783 - http://www.openwall.com/lists/oss-security/2017/12/19/5 - https://lists.debian.org/debian-lts-announce/2017/12/msg00023.html
CVE ID: CVE-2017-17789 State: PUBLISHED Published: 2017-12-20T09:00:00 Last Updated: 2024-08-05T20:59:17.968Z Vendors: n/a Products: n/a Problem Types: n/a Description: In GIMP 2.8.22, there is a heap-based buffer overflow in read_channel_data in plug-ins/common/file-psp.c. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102898 - https://www.debian.org/security/2017/dsa-4077 - https://usn.ubuntu.com/3539-1/ - http://www.openwall.com/lists/oss-security/2017/12/19/5 - https://lists.debian.org/debian-lts-announce/2017/12/msg00023.html - https://bugzilla.gnome.org/show_bug.cgi?id=790849
CVE ID: CVE-2017-17790 State: PUBLISHED Published: 2017-12-20T09:00:00 Last Updated: 2024-08-05T20:59:17.807Z Vendors: n/a Products: n/a Problem Types: n/a Description: The lazy_initialize function in lib/resolv.rb in Ruby through 2.4.3 uses Kernel#open, which might allow Command Injection attacks, as demonstrated by a Resolv::Hosts::new argument beginning with a '|' character, a different vulnerability than CVE-2017-17405. NOTE: situations with untrusted input may be highly unlikely. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:0585 - https://lists.debian.org/debian-lts-announce/2017/12/msg00024.html - https://access.redhat.com/
/errata/RHSA-2018:0585 - https://lists.debian.org/debian-lts-announce/2017/12/msg00024.html - https://access.redhat.com/errata/RHSA-2018:0378 - https://github.com/ruby/ruby/pull/1777 - https://access.redhat.com/errata/RHSA-2018:0584 - https://lists.debian.org/debian-lts-announce/2018/07/msg00012.html - https://access.redhat.com/errata/RHSA-2018:0583 - https://lists.debian.org/debian-lts-announce/2017/12/msg00025.html - https://www.debian.org/security/2018/dsa-4259
CVE ID: CVE-2017-17792 State: PUBLISHED Published: 2017-12-20T09:00:00 Last Updated: 2024-08-05T20:59:17.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross site scripting (XSS) vulnerability in the markup_clean_href function in inc/conv.php in BlogoText through 3.7.6 allows remote attackers to inject arbitrary JavaScript via a comment. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/BlogoText/blogotext/issues/345 - https://github.com/BlogoText/blogotext/commit/7c6f74e43008b2397160775696c67acbab87911d
CVE ID: CVE-2017-17793 State: PUBLISHED Published: 2017-12-20T09:00:00 Last Updated: 2024-08-05T20:59:17.903Z Vendors: n/a Products: n/a Problem Types: n/a Description: Information Disclosure vulnerability in creer_fichier_zip in admin/maintenance.php in BlogoText through 3.7.6 allows remote attackers to defeat a filename-randomization protection mechanism, and read backup archives on Windows servers, by providing the archiv~1.zip name (aka an 8.3 filename). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/BlogoText/blogotext/commit/101dc1d37010a1d877d6961ed2f32d089c708e91 - https://github.com/BlogoText/blogotext/issues/345
CVE ID: CVE-2017-17794 State: PUBLISHED Published: 2017-12-20T09:00:00 Last Updated: 2024-08-05T20:59:17.931Z Vendors: n/a Products: n/a Problem Types: n/a Description: validate_form_preferences in admin/preferences.php in BlogoText through 3.7.6 allows attackers to bypass intended access restrictions via vectors related to an e-mail address field. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/BlogoText/blogotext/commit/256041d8cab2fdc50678f4d49d916fea25cdb4fd - https://github.com/BlogoText/blogotext/issues/345
CVE ID: CVE-2017-17795 State: PUBLISHED Published: 2017-12-20T09:00:00 Last Updated: 2024-08-05T20:59:17.887Z Vendors: n/a Products: n/a Problem Types: n/a Description: In IKARUS anti.virus 2.16.20, the driver file (ntguard.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x83000088. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rubyfly/IKARUS_POC/tree/master/0x83000088
CVE ID: CVE-2017-17796 State: PUBLISHED Published: 2017-12-20T09:00:00 Last Updated: 2024-08-05T20:59:17.928Z Vendors: n/a Products: n/a Problem Types: n/a Description: In TG Soft Vir.IT eXplorer Lite 8.5.65, the driver file (VIRAGTLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x827300A4. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rubyfly/Vir.IT-explorer_POC/tree/master/8.5.65/0x827300A4
CVE ID: CVE-2017-17797 State: PUBLISHED Published: 2017-12-20T09:00:00 Last Updated: 2024-08-05T20:59:17.962Z Vendors: n/a Products: n/a Problem Types: n/a Description: In IKARUS anti.virus 2.16.20, the driver file (ntguard.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x83000058. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rubyfly/IKARUS_POC/tree/master/0x83000058
CVE ID: CVE-2017-17798 State: PUBLISHED Published: 2017-12-20T09:00:00 Last Updated: 2024-08-05T20:59:17.957Z Vendors: n/a Products: n/a Problem Types: n/a Description: In TG Soft Vir.IT eXplorer Lite 8.5.42, the driver file (VIRAGTLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x8273A0A0, a different vulnerability than CVE-2017-17800. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rubyfly/Vir.IT-explorer_POC/tree/master/0x8273A0A0
CVE ID: CVE-2017-17799 State: PUBLISHED Published: 2017-12-20T09:00:00 Last Updated: 2024-08-05T20:59:17.752Z Vendors: n/a Products: n/a Problem Types: n/a Description: In TG Soft Vir.IT eXplorer Lite 8.5.65, the driver file (VIRAGTLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x82730068. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rubyfly/Vir.IT-explorer_POC/tree/master/8.5.65/0x82730068
CVE ID: CVE-2017-17800 State: PUBLISHED Published: 2017-12-20T09:00:00 Last Updated: 2024-08-05T20:59:17.911Z Vendors: n/a Products: n/a Problem Types: n/a Description: In TG Soft Vir.IT eXplorer Lite 8.5.65, the driver file (VIRAGTLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x8273A0A0, a different vulnerability than CVE-2017-17798. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rubyfly/Vir.IT-explorer_POC/tree/master/8.5.65/0x8273A0A0
CVE ID: CVE-2017-17801 State: PUBLISHED Published: 2017-12-20T09:00:00 Last Updated: 2024-08-05T20:59:17.762Z Vendors: n/a Products: n/a Problem Types: n/a Description: In TG Soft Vir.IT eXplorer Lite 8.5.65, the driver file (VIRAGTLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x8273E060. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rubyfly/Vir.IT-explorer_POC/tree/master/8.5.65/0x8273E060
CVE ID: CVE-2017-17802 State: PUBLISHED Published: 2017-12-20T09:00:00 Last Updated: 2024-08-05T20:59:17.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: In TG Soft Vir.IT eXplorer Lite 8.5.65, the driver file (VIRAGTLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x8273E080. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rubyfly/Vir.IT-explorer_POC/tree/master/8.5.65/0x8273E080
CVE ID: CVE-2017-17803 State: PUBLISHED Published: 2017-12-20T09:00:00 Last Updated: 2024-08-05T20:59:17.883Z Vendors: n/a Products: n/a Problem Types: n/a Description: In TG Soft Vir.IT eXplorer Lite 8.5.65, the driver file (VIRAGTLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x82736068, a different vulnerability than CVE-2017-17475. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rubyfly/Vir.IT-explorer_POC/tree/master/8.5.65/0x82736068
CVE ID: CVE-2017-17804 State: PUBLISHED Published: 2017-12-20T09:00:00 Last Updated: 2024-08-05T20:59:18.005Z Vendors: n/a Products: n/a Problem Types: n/a Description: In IKARUS anti.virus 2.16.20, the driver file (ntguard.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x83000084. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rubyfly/IKARUS_POC/tree/master/0x83000084