Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-10891 State: PUBLISHED Published: 2017-12-01T14:00:00 Last Updated: 2024-08-05T17:50:12.566Z Vendors: Sony Video & Sound Products Inc. Products: Media Go Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in Media Go version 3.2.0.191 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN08517069/index.html
CVE ID: CVE-2017-10892 State: PUBLISHED Published: 2017-12-01T14:00:00 Last Updated: 2024-08-05T17:50:12.585Z Vendors: Sony Video & Sound Products Inc. Products: Music Center for PC Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in Music Center for PC version 1.0.00 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN08517069/index.html
CVE ID: CVE-2017-10893 State: PUBLISHED Published: 2017-12-08T15:00:00 Last Updated: 2024-08-05T17:50:12.557Z Vendors: Japan Agency for Local Authority Information Systems Products: The Public Certification Service for Individuals "The JPKI user's software" Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in The Public Certification Service for Individuals "The JPKI user's software" Ver3.1 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN30352845/index.html
CVE ID: CVE-2017-10894 State: PUBLISHED Published: 2017-12-01T14:00:00 Last Updated: 2024-08-05T17:50:12.405Z Vendors: Tomoki Sanaki Products: StreamRelay.NET.exe Problem Types: Denial-of-service (DoS) Description: StreamRelay.NET.exe ver2.14.0.7 and earlier allows remote attackers to cause a denial of service via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN71291160/index.html
CVE ID: CVE-2017-10895 State: PUBLISHED Published: 2017-12-01T14:00:00 Last Updated: 2024-08-05T17:50:12.491Z Vendors: Tomoki Sanaki Products: sDNSProxy.exe Problem Types: Denial-of-service (DoS) Description: sDNSProxy.exe ver1.1.0.0 and earlier allows remote attackers to cause a denial of service via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN71291160/index.html
CVE ID: CVE-2017-10896 State: PUBLISHED Published: 2017-12-08T15:00:00 Last Updated: 2024-08-05T17:50:12.602Z Vendors: BUFFALO INC. Products: BBR-4HG, BBR-4MG Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in Buffalo BBR-4HG and and BBR-4MG broadband routers with firmware 1.00 to 1.48 and 2.00 to 2.07 allows an attacker to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN65994435/index.html - http://buffalo.jp/support_s/s20171201.html
CVE ID: CVE-2017-10897 State: PUBLISHED Published: 2017-12-08T15:00:00 Last Updated: 2024-08-05T17:50:12.489Z Vendors: BUFFALO INC. Products: BBR-4HG, BBR-4MG Problem Types: Improper Input Validation Description: Input validation issue in Buffalo BBR-4HG and and BBR-4MG broadband routers with firmware 1.00 to 1.48 and 2.00 to 2.07 allows an attacker to cause the device to become unresponsive via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN65994435/index.html - http://buffalo.jp/support_s/s20171201.html
CVE ID: CVE-2017-10898 State: PUBLISHED Published: 2017-12-01T14:00:00 Last Updated: 2024-08-05T17:50:12.567Z Vendors: Princeton Ltd. Products: A-Member, A-Member for MT cloud Problem Types: SQL Injection Description: SQL injection vulnerability in the A-Member and A-Member for MT cloud versions 3.8.6 and earlier allows an attacker to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN78501037/index.html
CVE ID: CVE-2017-10899 State: PUBLISHED Published: 2017-12-01T14:00:00 Last Updated: 2024-08-05T17:50:12.423Z Vendors: Princeton Ltd. Products: A-Reserve, A-Reserve for MT cloud Problem Types: SQL Injection Description: SQL injection vulnerability in the A-Reserve and A-Reserve for MT cloud versions 3.8.6 and earlier allows an attacker to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN78501037/index.html
CVE ID: CVE-2017-10900 State: PUBLISHED Published: 2017-12-01T14:00:00 Last Updated: 2024-08-05T17:50:12.423Z Vendors: Princeton Ltd. Products: PTW-WMS1 Problem Types: Fails to restrict access Description: PTW-WMS1 firmware version 2.000.012 allows remote attackers to bypass access restrictions to obtain or delete data on the disk via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN98295787/index.html
CVE ID: CVE-2017-10901 State: PUBLISHED Published: 2017-12-01T14:00:00 Last Updated: 2024-08-05T17:50:12.644Z Vendors: Princeton Ltd. Products: PTW-WMS1 Problem Types: Buffer Overflow Description: Buffer overflow in PTW-WMS1 firmware version 2.000.012 allows remote attackers to conduct denial-of-service attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN98295787/index.html
CVE ID: CVE-2017-10902 State: PUBLISHED Published: 2017-12-01T14:00:00 Last Updated: 2024-08-05T17:50:12.515Z Vendors: Princeton Ltd. Products: PTW-WMS1 Problem Types: OS Command Injection Description: PTW-WMS1 firmware version 2.000.012 allows remote attackers to execute arbitrary OS commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN98295787/index.html
CVE ID: CVE-2017-10903 State: PUBLISHED Published: 2017-12-01T14:00:00 Last Updated: 2024-08-05T17:50:12.552Z Vendors: Princeton Ltd. Products: PTW-WMS1 Problem Types: Improper authentication Description: Improper authentication issue in PTW-WMS1 firmware version 2.000.012 allows remote attackers to log in to the device with root privileges and conduct arbitrary operations via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN98295787/index.html
CVE ID: CVE-2017-10904 State: PUBLISHED Published: 2017-12-15T14:00:00 Last Updated: 2024-08-05T17:50:12.619Z Vendors: The Qt Company Products: Qt for Android Problem Types: OS Command Injection Description: Qt for Android prior to 5.9.0 allows remote attackers to execute arbitrary OS commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN67389262/index.html - https://blog.qt.io/blog/2017/11/22/security-advisory-qt-android/
CVE ID: CVE-2017-10905 State: PUBLISHED Published: 2017-12-15T14:00:00 Last Updated: 2024-08-05T17:50:12.508Z Vendors: The Qt Company Products: Qt for Android Problem Types: External Control of Critical State Data Description: A vulnerability in applications created using Qt for Android prior to 5.9.3 allows attackers to alter environment variables via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN27342829/index.html - https://blog.qt.io/blog/2017/11/22/security-advisory-qt-android/
CVE ID: CVE-2017-10906 State: PUBLISHED Published: 2017-12-08T15:00:00 Last Updated: 2024-08-05T17:50:12.579Z Vendors: Cloud Native Computing Foundation (CNCF) Products: Fluentd Problem Types: Escape Sequence Injection Description: Escape sequence injection vulnerability in Fluentd versions 0.12.29 through 0.12.40 may allow an attacker to change the terminal UI or execute arbitrary commands on the device via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:2225 - https://jvn.jp/en/vu/JVNVU95124098/index.html - https://github.com/fluent/fluentd/blob/v0.12/CHANGELOG.md#bug-fixes - https://github.com/fluent/fluentd/
98/index.html - https://github.com/fluent/fluentd/blob/v0.12/CHANGELOG.md#bug-fixes - https://github.com/fluent/fluentd/pull/1733
CVE ID: CVE-2017-10907 State: PUBLISHED Published: 2017-12-22T14:00:00 Last Updated: 2024-08-05T17:50:12.493Z Vendors: SpiQe Software Products: OneThird CMS Problem Types: Directory traversal Description: Directory traversal vulnerability in OneThird CMS Show Off v1.85 and earlier. Show Off v1.85 en and earlier allows an attacker to read arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN93333702/index.html - https://onethird.net/en/p1307.html
CVE ID: CVE-2017-10908 State: PUBLISHED Published: 2017-12-22T14:00:00 Last Updated: 2024-08-05T17:50:12.443Z Vendors: Kazuho Oku Products: H2O Problem Types: Denial-of-service (DoS) Description: H2O version 2.2.3 and earlier allows remote attackers to cause a denial of service in the server via specially crafted HTTP/2 header. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/h2o/h2o/issues/1544 - https://jvn.jp/en/jp/JVN84182676/index.html
CVE ID: CVE-2017-10909 State: PUBLISHED Published: 2017-12-22T14:00:00 Last Updated: 2024-08-05T17:50:12.639Z Vendors: Sony Video & Sound Products Inc. Products: Music Center for PC Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in Music Center for PC version 1.0.01 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN60695371/index.html
CVE ID: CVE-2017-10910 State: PUBLISHED Published: 2017-12-27T18:00:00 Last Updated: 2024-08-05T17:50:12.585Z Vendors: MQTT.js. Products: MQTT.js Problem Types: Buffer error Description: MQTT.js 2.x.x prior to 2.15.0 issue in handling PUBLISH tickets may lead to an attacker causing a denial-of-service condition. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN45494523/index.html - https://github.com/mqttjs/MQTT.js/releases/tag/v2.15.0 - https://github.com/mqttjs/MQTT.js/commit/403ba53b838f2d319a0c0505a045fe00239e9923
CVE ID: CVE-2017-10911 State: PUBLISHED Published: 2017-07-05T01:00:00 Last Updated: 2024-08-05T17:50:12.586Z Vendors: n/a Products: n/a Problem Types: n/a Description: The make_response function in drivers/block/xen-blkback/blkback.c in the Linux kernel before 4.11.8 allows guest OS users to obtain sensitive information from host OS (or other guest OS) kernel memory by leveraging the copying of uninitialized padding fields in Xen block-interface response structures, aka XSA-216. Additional Analyst Notes: - CVE Program Container: References: - https://xenbits.xen.org/xsa/advisory-216.html - http://www.debian.org/security/2017/dsa-3927 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/li
visory-216.html - http://www.debian.org/security/2017/dsa-3927 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=089bc0143f489bd3a4578bdff5f4ca68fb26f341 - http://www.debian.org/security/2017/dsa-3920 - https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html - https://security.gentoo.org/glsa/201708-03 - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.11.8 - http://www.securityfocus.com/bid/99162 - http://www.securitytracker.com/id/1038720 - https://github.com/torvalds/linux/commit/089bc0143f489bd3a4578bdff5f4ca68fb26f341 - http://www.debian.org/security/2017/dsa-3945
CVE ID: CVE-2017-10912 State: PUBLISHED Published: 2017-07-05T01:00:00 Last Updated: 2024-08-05T17:50:12.720Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xen through 4.8.x mishandles page transfer, which allows guest OS users to obtain privileged host OS access, aka XSA-217. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201708-03 - http://www.debian.org/security/2017/dsa-3969 - http://www.securityfocus.com/bid/99158 - http://www.securitytracker.com/id/1038721 - https://xenbits.xen.org/xsa/advisory-217.html - https://security.gentoo.org/glsa/201710-17
CVE ID: CVE-2017-10913 State: PUBLISHED Published: 2017-07-05T01:00:00 Last Updated: 2024-08-05T17:50:12.743Z Vendors: n/a Products: n/a Problem Types: n/a Description: The grant-table feature in Xen through 4.8.x provides false mapping information in certain cases of concurrent unmap calls, which allows backend attackers to obtain sensitive information or gain privileges, aka XSA-218 bug 1. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038722 - https://security.gentoo.org/glsa/201708-03 - http://www.debian.org/security/2017/dsa-3969 - http://www.securityfocus.com/bid/99411 - https://xenbits.xen.org/xsa/advisory-218.html - https://securit
2017/dsa-3969 - http://www.securityfocus.com/bid/99411 - https://xenbits.xen.org/xsa/advisory-218.html - https://security.gentoo.org/glsa/201710-17
CVE ID: CVE-2017-10914 State: PUBLISHED Published: 2017-07-05T01:00:00 Last Updated: 2024-08-05T17:50:12.763Z Vendors: n/a Products: n/a Problem Types: n/a Description: The grant-table feature in Xen through 4.8.x has a race condition leading to a double free, which allows guest OS users to cause a denial of service (memory consumption), or possibly obtain sensitive information or gain privileges, aka XSA-218 bug 2. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038722 - https://security.gentoo.org/glsa/201708-03 - http://www.debian.org/security/2017/dsa-3969 - http://www.securityfocus.com/bid/99411 - https://xenbits.xen.org/xsa/advisory-2
/www.debian.org/security/2017/dsa-3969 - http://www.securityfocus.com/bid/99411 - https://xenbits.xen.org/xsa/advisory-218.html - https://security.gentoo.org/glsa/201710-17
CVE ID: CVE-2017-10915 State: PUBLISHED Published: 2017-07-05T01:00:00 Last Updated: 2024-08-05T17:50:12.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: The shadow-paging feature in Xen through 4.8.x mismanages page references and consequently introduces a race condition, which allows guest OS users to obtain Xen privileges, aka XSA-219. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201708-03 - http://www.debian.org/security/2017/dsa-3969 - http://www.securityfocus.com/bid/99174 - https://xenbits.xen.org/xsa/advisory-219.html - https://security.gentoo.org/glsa/201710-17
CVE ID: CVE-2017-10916 State: PUBLISHED Published: 2017-07-05T01:00:00 Last Updated: 2024-08-05T17:50:12.652Z Vendors: n/a Products: n/a Problem Types: n/a Description: The vCPU context-switch implementation in Xen through 4.8.x improperly interacts with the Memory Protection Extensions (MPX) and Protection Key (PKU) features, which makes it easier for guest OS users to defeat ASLR and other protection mechanisms, aka XSA-220. Additional Analyst Notes: - CVE Program Container: References: - https://xenbits.xen.org/xsa/advisory-220.html - https://security.gentoo.org/glsa/201708-03 - http://www.debian.org/security/2017/dsa-3969 - http://www.securitytracker.com/id/1038730 - http://www.securityf
708-03 - http://www.debian.org/security/2017/dsa-3969 - http://www.securitytracker.com/id/1038730 - http://www.securityfocus.com/bid/99167
CVE ID: CVE-2017-10917 State: PUBLISHED Published: 2017-07-05T01:00:00 Last Updated: 2024-08-05T17:50:12.730Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xen through 4.8.x does not validate the port numbers of polled event channel ports, which allows guest OS users to cause a denial of service (NULL pointer dereference and host OS crash) or possibly obtain sensitive information, aka XSA-221. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201708-03 - http://www.debian.org/security/2017/dsa-3969 - https://xenbits.xen.org/xsa/advisory-221.html - http://www.securityfocus.com/bid/99157 - http://www.securitytracker.com/id/1038731
CVE ID: CVE-2017-10918 State: PUBLISHED Published: 2017-07-05T01:00:00 Last Updated: 2024-08-05T17:50:12.775Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xen through 4.8.x does not validate memory allocations during certain P2M operations, which allows guest OS users to obtain privileged host OS access, aka XSA-222. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038732 - https://security.gentoo.org/glsa/201708-03 - http://www.debian.org/security/2017/dsa-3969 - https://security.gentoo.org/glsa/201710-17 - http://www.securityfocus.com/bid/99161 - https://xenbits.xen.org/xsa/advisory-222.html
CVE ID: CVE-2017-10919 State: PUBLISHED Published: 2017-07-05T01:00:00 Last Updated: 2024-08-05T17:50:12.714Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xen through 4.8.x mishandles virtual interrupt injection, which allows guest OS users to cause a denial of service (hypervisor crash), aka XSA-223. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201708-03 - http://www.debian.org/security/2017/dsa-3969 - http://www.securityfocus.com/bid/99159 - http://www.securitytracker.com/id/1038733 - https://xenbits.xen.org/xsa/advisory-223.html
CVE ID: CVE-2017-10920 State: PUBLISHED Published: 2017-07-05T01:00:00 Last Updated: 2024-08-05T17:50:12.735Z Vendors: n/a Products: n/a Problem Types: n/a Description: The grant-table feature in Xen through 4.8.x mishandles a GNTMAP_device_map and GNTMAP_host_map mapping, when followed by only a GNTMAP_host_map unmapping, which allows guest OS users to cause a denial of service (count mismanagement and memory corruption) or obtain privileged host OS access, aka XSA-224 bug 1. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201708-03 - http://www.debian.org/security/2017/dsa-3969 - http://www.securitytracker.com/id/1038734 - https://xenbits.x
201708-03 - http://www.debian.org/security/2017/dsa-3969 - http://www.securitytracker.com/id/1038734 - https://xenbits.xen.org/xsa/advisory-224.html - https://security.gentoo.org/glsa/201710-17
CVE ID: CVE-2017-10921 State: PUBLISHED Published: 2017-07-05T01:00:00 Last Updated: 2024-08-05T17:50:12.831Z Vendors: n/a Products: n/a Problem Types: n/a Description: The grant-table feature in Xen through 4.8.x does not ensure sufficient type counts for a GNTMAP_device_map and GNTMAP_host_map mapping, which allows guest OS users to cause a denial of service (count mismanagement and memory corruption) or obtain privileged host OS access, aka XSA-224 bug 2. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201708-03 - http://www.debian.org/security/2017/dsa-3969 - http://www.securitytracker.com/id/1038734 - https://xenbits.xen.org/xsa/advisory
www.debian.org/security/2017/dsa-3969 - http://www.securitytracker.com/id/1038734 - https://xenbits.xen.org/xsa/advisory-224.html - https://security.gentoo.org/glsa/201710-17
CVE ID: CVE-2017-10922 State: PUBLISHED Published: 2017-07-05T01:00:00 Last Updated: 2024-08-05T17:50:12.787Z Vendors: n/a Products: n/a Problem Types: n/a Description: The grant-table feature in Xen through 4.8.x mishandles MMIO region grant references, which allows guest OS users to cause a denial of service (loss of grant trackability), aka XSA-224 bug 3. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201708-03 - http://www.debian.org/security/2017/dsa-3969 - http://www.securitytracker.com/id/1038734 - https://xenbits.xen.org/xsa/advisory-224.html - https://security.gentoo.org/glsa/201710-17
CVE ID: CVE-2017-10923 State: PUBLISHED Published: 2017-07-05T01:00:00 Last Updated: 2024-08-05T17:50:12.816Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xen through 4.8.x does not validate a vCPU array index upon the sending of an SGI, which allows guest OS users to cause a denial of service (hypervisor crash), aka XSA-225. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038735 - http://www.securityfocus.com/bid/99160 - https://security.gentoo.org/glsa/201708-03 - https://xenbits.xen.org/xsa/advisory-225.html
CVE ID: CVE-2017-10924 State: PUBLISHED Published: 2017-07-05T19:00:00 Last Updated: 2024-08-05T17:50:12.836Z Vendors: n/a Products: n/a Problem Types: n/a Description: IrfanView 4.44 (32bit) with FPX Plugin 4.47 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to a "User Mode Write AV starting at FPX!FPX_GetScanDevicePropertyGroup+0x000000000000a529." Additional Analyst Notes: - CVE Program Container: References: - http://www.irfanview.net/main_history.htm - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10924
CVE ID: CVE-2017-10925 State: PUBLISHED Published: 2017-07-05T19:00:00 Last Updated: 2024-08-05T17:50:12.814Z Vendors: n/a Products: n/a Problem Types: n/a Description: IrfanView 4.44 (32bit) with FPX Plugin 4.47 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at FPX!FPX_GetScanDevicePropertyGroup+0x000000000000b3ae." Additional Analyst Notes: - CVE Program Container: References: - http://www.irfanview.net/main_history.htm - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10925
CVE ID: CVE-2017-10926 State: PUBLISHED Published: 2017-07-05T19:00:00 Last Updated: 2024-08-05T17:50:12.721Z Vendors: n/a Products: n/a Problem Types: n/a Description: IrfanView 4.44 (32bit) with FPX Plugin 4.47 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to a "Read Access Violation starting at wow64!Wow64NotifyDebugger+0x000000000000001d." Additional Analyst Notes: - CVE Program Container: References: - http://www.irfanview.net/main_history.htm - https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10926
CVE ID: CVE-2017-10928 State: PUBLISHED Published: 2017-07-05T11:00:00 Last Updated: 2024-08-05T17:50:12.720Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ImageMagick 7.0.6-0, a heap-based buffer over-read in the GetNextToken function in token.c allows remote attackers to obtain sensitive information from process memory or possibly have unspecified other impact via a crafted SVG document that is mishandled in the GetUserSpaceCoordinateValue function in coders/svg.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/539 - http://www.securityfocus.com/bid/99480
CVE ID: CVE-2017-10929 State: PUBLISHED Published: 2017-07-05T12:00:00 Last Updated: 2024-08-05T17:50:12.795Z Vendors: n/a Products: n/a Problem Types: n/a Description: The grub_memmove function in shlr/grub/kern/misc.c in radare2 1.5.0 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, possibly related to a read overflow in the grub_disk_read_small_real function in kern/disk.c in GNU GRUB 2.02. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99608 - https://github.com/radare/radare2/commit/c57997e76ec70862174a1b3b3aeb62a6
es: - http://www.securityfocus.com/bid/99608 - https://github.com/radare/radare2/commit/c57997e76ec70862174a1b3b3aeb62a6f8570e85 - https://github.com/radare/radare2/issues/7855