Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-10759 State: PUBLISHED Published: 2017-07-05T19:00:00 Last Updated: 2024-08-05T17:50:11.173Z Vendors: n/a Products: n/a Problem Types: n/a Description: XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!LdrpInsertDependencyRecord+0x0000000000000039." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10759
CVE ID: CVE-2017-10760 State: PUBLISHED Published: 2017-07-05T19:00:00 Last Updated: 2024-08-05T17:50:11.213Z Vendors: n/a Products: n/a Problem Types: n/a Description: XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at COMCTL32!SetStatusText+0x0000000000000029." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10760
CVE ID: CVE-2017-10761 State: PUBLISHED Published: 2017-07-05T19:00:00 Last Updated: 2024-08-05T17:50:11.276Z Vendors: n/a Products: n/a Problem Types: n/a Description: XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlpAllocateHeap+0x0000000000000429." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10761
CVE ID: CVE-2017-10762 State: PUBLISHED Published: 2017-07-05T19:00:00 Last Updated: 2024-08-05T17:50:11.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlpAllocateHeap+0x000000000000042f." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10762
CVE ID: CVE-2017-10763 State: PUBLISHED Published: 2017-07-05T19:00:00 Last Updated: 2024-08-05T17:50:11.260Z Vendors: n/a Products: n/a Problem Types: n/a Description: XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!LdrpFindLoadedDllByHandle+0x0000000000000031." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10763
CVE ID: CVE-2017-10764 State: PUBLISHED Published: 2017-07-05T19:00:00 Last Updated: 2024-08-05T17:50:11.656Z Vendors: n/a Products: n/a Problem Types: n/a Description: XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at COMCTL32!Tab_OnGetItem+0x000000000000002f." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10764
CVE ID: CVE-2017-10765 State: PUBLISHED Published: 2017-07-05T19:00:00 Last Updated: 2024-08-05T17:50:11.657Z Vendors: n/a Products: n/a Problem Types: n/a Description: XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at IMM32!ImmLockImeDpi+0x0000000000000050." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10765
CVE ID: CVE-2017-10766 State: PUBLISHED Published: 2017-07-05T19:00:00 Last Updated: 2024-08-05T17:50:11.226Z Vendors: n/a Products: n/a Problem Types: n/a Description: XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at GDI32!ScriptStringAnalyse+0x00000000000001c8." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10766
CVE ID: CVE-2017-10767 State: PUBLISHED Published: 2017-07-05T19:00:00 Last Updated: 2024-08-05T17:50:11.577Z Vendors: n/a Products: n/a Problem Types: n/a Description: XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at KERNELBASE!StateObjectListFind+0x0000000000000005." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10767
CVE ID: CVE-2017-10768 State: PUBLISHED Published: 2017-07-05T19:00:00 Last Updated: 2024-08-05T17:50:11.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlpInsertFreeBlock+0x00000000000001ca." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10768
CVE ID: CVE-2017-10769 State: PUBLISHED Published: 2017-07-05T19:00:00 Last Updated: 2024-08-05T17:50:11.628Z Vendors: n/a Products: n/a Problem Types: n/a Description: XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!memcmp+0x0000000000000018" (without RPC initialization). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10769
CVE ID: CVE-2017-10770 State: PUBLISHED Published: 2017-07-05T19:00:00 Last Updated: 2024-08-05T17:50:11.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlpCreateSplitBlock+0x000000000000053a." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10770
CVE ID: CVE-2017-10771 State: PUBLISHED Published: 2017-07-05T19:00:00 Last Updated: 2024-08-05T17:50:11.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlpCreateSplitBlock+0x0000000000000510." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10771
CVE ID: CVE-2017-10772 State: PUBLISHED Published: 2017-07-05T19:00:00 Last Updated: 2024-08-05T17:50:11.689Z Vendors: n/a Products: n/a Problem Types: n/a Description: XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!memcmp+0x0000000000000018" (with RPC initialization). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10772
CVE ID: CVE-2017-10773 State: PUBLISHED Published: 2017-07-05T19:00:00 Last Updated: 2024-08-05T17:50:11.827Z Vendors: n/a Products: n/a Problem Types: n/a Description: XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at MSCTF!_CtfImeCreateThreadMgr+0x00000000000000a8." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10773
CVE ID: CVE-2017-10774 State: PUBLISHED Published: 2017-07-05T19:00:00 Last Updated: 2024-08-05T17:50:11.841Z Vendors: n/a Products: n/a Problem Types: n/a Description: XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at KERNELBASE!FindSortHashNode+0x0000000000000040." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10774
CVE ID: CVE-2017-10775 State: PUBLISHED Published: 2017-07-05T19:00:00 Last Updated: 2024-08-05T17:50:11.675Z Vendors: n/a Products: n/a Problem Types: n/a Description: XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to a "Read Access Violation starting at GDI32!ScriptGetCMapWithSurrogate+0x00000000000001cb." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10775
CVE ID: CVE-2017-10776 State: PUBLISHED Published: 2017-07-05T19:00:00 Last Updated: 2024-08-05T17:50:11.916Z Vendors: n/a Products: n/a Problem Types: n/a Description: XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to a "Read Access Violation starting at ntdll_77df0000!LdrShutdownProcess+0x0000000000000130." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10776
CVE ID: CVE-2017-10777 State: PUBLISHED Published: 2017-07-05T19:00:00 Last Updated: 2024-08-05T17:50:11.752Z Vendors: n/a Products: n/a Problem Types: n/a Description: XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at xnview+0x0000000000372b24." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10777
CVE ID: CVE-2017-10778 State: PUBLISHED Published: 2017-07-05T19:00:00 Last Updated: 2024-08-05T17:50:11.679Z Vendors: n/a Products: n/a Problem Types: n/a Description: XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at xnview+0x0000000000233125." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10778
CVE ID: CVE-2017-10779 State: PUBLISHED Published: 2017-07-05T19:00:00 Last Updated: 2024-08-05T17:50:11.680Z Vendors: n/a Products: n/a Problem Types: n/a Description: XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at xnview+0x0000000000013a20." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10779
CVE ID: CVE-2017-10780 State: PUBLISHED Published: 2017-07-05T19:00:00 Last Updated: 2024-08-05T17:50:11.717Z Vendors: n/a Products: n/a Problem Types: n/a Description: XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at xnview+0x0000000000372b4a." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10780
CVE ID: CVE-2017-10781 State: PUBLISHED Published: 2017-07-05T19:00:00 Last Updated: 2024-08-05T17:50:11.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!LdrpFindLoadedDllByName+0x00000000000000a5." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10781
CVE ID: CVE-2017-10782 State: PUBLISHED Published: 2017-07-05T19:00:00 Last Updated: 2024-08-05T17:50:11.657Z Vendors: n/a Products: n/a Problem Types: n/a Description: XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlpFreeHeap+0x00000000000003ca." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10782
CVE ID: CVE-2017-10783 State: PUBLISHED Published: 2017-07-05T19:00:00 Last Updated: 2024-08-05T17:50:11.708Z Vendors: n/a Products: n/a Problem Types: n/a Description: XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlpFreeHeap+0x0000000000000393." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10783
CVE ID: CVE-2017-10784 State: PUBLISHED Published: 2017-09-19T17:00:00 Last Updated: 2024-08-05T17:50:11.932Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Basic authentication code in WEBrick library in Ruby before 2.2.8, 2.3.x before 2.3.5, and 2.4.x through 2.4.1 allows remote attackers to inject terminal emulator escape sequences into its log and possibly execute arbitrary commands via a crafted user name. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3685-1/ - https://access.redhat.com/errata/RHSA-2018:0585 - https://usn.ubuntu.com/3528-1/ - http://www.securityfocus.com/bid/100853 - https://www.ruby-lang.org/en/news/2017/09/14/r
ttps://usn.ubuntu.com/3528-1/ - http://www.securityfocus.com/bid/100853 - https://www.ruby-lang.org/en/news/2017/09/14/ruby-2-3-5-released/ - https://access.redhat.com/errata/RHSA-2018:0378 - http://www.securitytracker.com/id/1042004 - https://www.debian.org/security/2017/dsa-4031 - https://www.ruby-lang.org/en/news/2017/09/14/ruby-2-2-8-released/ - http://www.securitytracker.com/id/1039363 - https://access.redhat.com/errata/RHSA-2017:3485 - https://lists.debian.org/debian-lts-announce/2018/07/msg00012.html - https://access.redhat.com/errata/RHSA-2018:0583 - https://www.ruby-lang.org/en/news/2017/09/14/webrick-basic-auth-escape-sequence-injection-cve-2017-10784/ - https://security.gentoo.org
y-lang.org/en/news/2017/09/14/webrick-basic-auth-escape-sequence-injection-cve-2017-10784/ - https://security.gentoo.org/glsa/201710-18
CVE ID: CVE-2017-10788 State: PUBLISHED Published: 2017-07-01T18:00:00 Last Updated: 2024-08-05T17:50:11.845Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DBD::mysql module through 4.043 for Perl allows remote attackers to cause a denial of service (use-after-free and application crash) or possibly have unspecified other impact by triggering (1) certain error responses from a MySQL server or (2) a loss of a network connection to a MySQL server. The use-after-free defect was introduced by relying on incorrect Oracle mysql_stmt_close documentation and code examples. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2017/q2/443 - http
xamples. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2017/q2/443 - https://github.com/perl5-dbi/DBD-mysql/issues/120 - http://www.securityfocus.com/bid/99374
CVE ID: CVE-2017-10789 State: PUBLISHED Published: 2017-07-01T18:00:00 Last Updated: 2024-08-05T17:50:12.094Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DBD::mysql module through 4.043 for Perl uses the mysql_ssl=1 setting to mean that SSL is optional (even though this setting's documentation has a "your communication with the server will be encrypted" statement), which allows man-in-the-middle attackers to spoof servers via a cleartext-downgrade attack, a related issue to CVE-2015-3152. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99364 - https://github.com/perl5-dbi/DBD-mysql/issues/140 - https://github.com/perl5-dbi/
tp://www.securityfocus.com/bid/99364 - https://github.com/perl5-dbi/DBD-mysql/issues/140 - https://github.com/perl5-dbi/DBD-mysql/pull/114 - https://github.com/perl5-dbi/DBD-mysql/issues/110
CVE ID: CVE-2017-10790 State: PUBLISHED Published: 2017-07-02T03:00:00 Last Updated: 2024-08-05T17:50:11.680Z Vendors: n/a Products: n/a Problem Types: n/a Description: The _asn1_check_identifier function in GNU Libtasn1 through 4.12 causes a NULL pointer dereference and crash when reading crafted input that triggers assignment of a NULL value within an asn1_node structure. It may lead to a remote denial of service attack. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201710-11 - https://usn.ubuntu.com/3547-1/ - https://bugzilla.redhat.com/show_bug.cgi?id=1464141 - https://www.debian.org/security/2018/dsa-4106 - https://lists.debian.org/deb
gzilla.redhat.com/show_bug.cgi?id=1464141 - https://www.debian.org/security/2018/dsa-4106 - https://lists.debian.org/debian-lts-announce/2020/06/msg00026.html - https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E - https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
CVE ID: CVE-2017-10791 State: PUBLISHED Published: 2017-07-02T03:00:00 Last Updated: 2024-08-05T17:50:12.061Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is an Integer overflow in the hash_int function of the libpspp library in GNU PSPP before 0.11.0. For example, a crash was observed within the library code when attempting to convert invalid SPSS data into CSV format. A crafted input will lead to a remote denial of service attack. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1467004 - http://lists.gnu.org/archive/html/pspp-announce/2017-08/msg00000.html
CVE ID: CVE-2017-10792 State: PUBLISHED Published: 2017-07-02T03:00:00 Last Updated: 2024-08-05T17:50:11.678Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a NULL Pointer Dereference in the function ll_insert() of the libpspp library in GNU PSPP before 0.11.0. For example, a crash was observed within the library code when attempting to convert invalid SPSS data into CSV format. A crafted input will lead to a remote denial of service attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99385 - https://bugzilla.redhat.com/show_bug.cgi?id=1467005 - http://lists.gnu.org/archive/html/pspp-announce/2017-08/msg00000.html
CVE ID: CVE-2017-10793 State: PUBLISHED Published: 2017-09-03T19:00:00 Last Updated: 2024-08-05T17:50:11.767Z Vendors: n/a Products: n/a Problem Types: n/a Description: The AT&T U-verse 9.2.2h0d83 firmware for the Arris NVG589, NVG599, and unspecified other devices, when IP Passthrough mode is not used, configures an sbdc.ha WAN TCP service on port 61001 with the bdctest account and the bdctest password, which allows remote attackers to obtain sensitive information (such as the Wi-Fi password) by leveraging knowledge of a hardware identifier, related to the Bulk Data Collection (BDC) mechanism defined in Broadband Forum technical reports. Additional Analyst Notes: - CVE Program Container: Re
tion (BDC) mechanism defined in Broadband Forum technical reports. Additional Analyst Notes: - CVE Program Container: References: - https://threatpost.com/bugs-in-arris-modems-distributed-by-att-vulnerable-to-trivial-attacks/127753/ - http://www.securityfocus.com/bid/100585 - https://www.nomotion.net/blog/sharknatto/
CVE ID: CVE-2017-10794 State: PUBLISHED Published: 2017-07-02T22:00:00 Last Updated: 2024-08-05T17:50:11.637Z Vendors: n/a Products: n/a Problem Types: n/a Description: When GraphicsMagick 1.3.25 processes an RGB TIFF picture (with metadata indicating a single sample per pixel) in coders/tiff.c, a buffer overflow occurs, related to QuantumTransferMode. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/graphicsmagick/code/ci/a20bee0a0ad216aa11a2be3de63b60ca6bef4106/ - https://www.debian.org/security/2018/dsa-4321 - http://www.securityfocus.com/bid/99355 - https://usn.ubuntu.com/4206-1/
CVE ID: CVE-2017-10795 State: PUBLISHED Published: 2017-07-02T13:00:00 Last Updated: 2024-08-05T17:50:12.082Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Subrion CMS 4.1.4 allows remote attackers to inject arbitrary web script or HTML via the body to blog/add/, a different vulnerability than CVE-2017-6069. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99378 - https://github.com/intelliants/subrion/issues/467
CVE ID: CVE-2017-10796 State: PUBLISHED Published: 2017-07-02T22:00:00 Last Updated: 2024-08-05T17:50:11.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: On TP-Link NC250 devices with firmware through 1.2.1 build 170515, anyone can view video and audio without authentication via an rtsp://admin@yourip:554/h264_hd.sdp URL. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/elbauldelgeek/8f0f24c582f43f51a34b34420a385d75
CVE ID: CVE-2017-10798 State: PUBLISHED Published: 2017-07-03T03:00:00 Last Updated: 2024-08-05T17:50:11.625Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ObjectPlanet Opinio before 7.6.4, there is XSS. Additional Analyst Notes: - CVE Program Container: References: - http://www.objectplanet.com/opinio/changelog.html
CVE ID: CVE-2017-10799 State: PUBLISHED Published: 2017-07-03T01:00:00 Last Updated: 2024-08-05T17:50:11.876Z Vendors: n/a Products: n/a Problem Types: n/a Description: When GraphicsMagick 1.3.25 processes a DPX image (with metadata indicating a large width) in coders/dpx.c, a denial of service (OOM) can occur in ReadDPXImage(). Additional Analyst Notes: - CVE Program Container: References: - http://hg.code.sf.net/p/graphicsmagick/code/rev/f10b9bb3ca62 - https://www.debian.org/security/2018/dsa-4321 - http://www.securityfocus.com/bid/99358 - https://lists.debian.org/debian-lts-announce/2019/04/msg00015.html - https://usn.ubuntu.com/4206-1/