Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
-announce%40lists.fedoraproject.org/message/PTR2ZW67TMT7KC24RBENIF25KWUJ7VPD/ - https://security.gentoo.org/glsa/201701-61 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SH6X3MWD5AHZC5JT4625PGFHAYLR7YW7/ - https://bugzilla.redhat.com/show_bug.cgi?id=1389338 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LG5Q42J7EJDKQKWTTHCO4YZMOMP74YPQ/ - https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E
CVE ID: CVE-2016-9086 State: PUBLISHED Published: 2016-11-03T10:00:00 Last Updated: 2024-08-06T02:42:10.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: GitLab versions 8.9.x and above contain a critical security flaw in the "import/export project" feature of GitLab. Added in GitLab 8.9, this feature allows a user to export and then re-import their projects as tape archive files (tar). All GitLab versions prior to 8.13.0 restricted this feature to administrators only. Starting with version 8.13.0 this feature was made available to all users. This feature did not properly check for symbolic links in user-provided archives and therefore it was possible for an authenticated user
not properly check for symbolic links in user-provided archives and therefore it was possible for an authenticated user to retrieve the contents of any file accessible to the GitLab service account. This included sensitive files such as those that contain secret tokens used by the GitLab service to authenticate users. GitLab CE and EE versions 8.13.0 through 8.13.2, 8.12.0 through 8.12.7, 8.11.0 through 8.11.10, 8.10.0 through 8.10.12, and 8.9.0 through 8.9.11 are affected. Additional Analyst Notes: - CVE Program Container: References: - https://about.gitlab.com/2016/11/02/cve-2016-9086-patches/ - http://www.securityfocus.com/bid/94136
CVE ID: CVE-2016-9087 State: PUBLISHED Published: 2017-03-07T16:00:00 Last Updated: 2024-08-06T02:42:10.228Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in framework/modules/filedownloads/controllers/filedownloadController.php in Exponent CMS 2.3.9 and earlier allows remote attackers to execute arbitrary SQL commands via the fileid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/139484/Exponent-CMS-2.3.9-SQL-Injection.html - https://github.com/exponentcms/exponent-cms/commit/fdafb5ec97838e4edbd685f587f28d3174ebb3db - http://seclists.org/fulldisclosure/2016/Nov/12 - http://www.securityf
/commit/fdafb5ec97838e4edbd685f587f28d3174ebb3db - http://seclists.org/fulldisclosure/2016/Nov/12 - http://www.securityfocus.com/bid/97271
CVE ID: CVE-2016-9091 State: PUBLISHED Published: 2017-04-05T15:00:00 Last Updated: 2024-08-06T02:42:10.359Z Vendors: Symantec Corporation Products: Blue Coat ASG, Blue Coat CAS Problem Types: OS command injection Description: Blue Coat Advanced Secure Gateway (ASG) 6.6 before 6.6.5.4 and Content Analysis System (CAS) 1.3 before 1.3.7.4 are susceptible to an OS command injection vulnerability. An authenticated malicious administrator can execute arbitrary OS commands with elevated system privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97372 - https://www.exploit-db.com/exploits/41785/ - https://www.exploit-db.com/exploits/41786/ -
.securityfocus.com/bid/97372 - https://www.exploit-db.com/exploits/41785/ - https://www.exploit-db.com/exploits/41786/ - https://bto.bluecoat.com/security-advisory/sa138
CVE ID: CVE-2016-9092 State: PUBLISHED Published: 2017-05-11T14:01:00Z Last Updated: 2024-09-17T03:02:49.547Z Vendors: Symantec Corporation Products: Content Analysis (CA), Mail Threat Defense (MTD) Problem Types: Cross-site request forgery Description: The Symantec Content Analysis (CA) 1.3, 2.x prior to 2.2.1.1, and Mail Threat Defense (MTD) 1.1 management consoles are susceptible to a cross-site request forging (CSRF) vulnerability. A remote attacker can use phishing or other social engineering techniques to access the management console with the privileges of an authenticated administrator user. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com
icated administrator user. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104182 - https://www.symantec.com/security-center/network-protection-security-advisories/SA149
CVE ID: CVE-2016-9093 State: PUBLISHED Published: 2018-04-16T18:00:00Z Last Updated: 2024-09-16T21:58:24.461Z Vendors: Symantec Corporation Products: Endpoint Protection Problem Types: Privilege Escalation Description: A version of the SymEvent Driver that shipped with Symantec Endpoint Protection 12.1 RU6 MP6 and earlier fails to properly sanitize logged-in user input. SEP 14.0 and later are not impacted by this issue. A non-admin user would need to be able to save an executable file to disk and then be able to successfully run that file. If properly constructed, the file could access the driver interface and potentially manipulate certain system calls. On all 32-bit systems and in most cas
could access the driver interface and potentially manipulate certain system calls. On all 32-bit systems and in most cases on 64-bit systems, this will result in a denial of service that will crash the system. In very narrow circumstances, and on 64-bit systems only, this could allow the user to run arbitrary code on the local machine with kernel-level privileges. This could result in a non-privileged user gaining privileged access on the local machine. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037961 - http://www.securityfocus.com/bid/96294 - https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&
curityfocus.com/bid/96294 - https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20170306_00
CVE ID: CVE-2016-9094 State: PUBLISHED Published: 2018-04-16T18:00:00Z Last Updated: 2024-09-16T17:18:11.443Z Vendors: Symantec Corporation Products: Endpoint Protection Problem Types: Formula Injection Description: Symantec Endpoint Protection clients place detected malware in quarantine as part of the intended product functionality. The quarantine logs can be exported for review by the user in a variety of formats including .CSV files. Prior to 14.0 MP1 and 12.1 RU6 MP7, the potential exists for file metadata to be interpreted and evaluated as a formula. Successful exploitation of an attack of this type requires considerable direct user-interaction from the user exporting and then opening
tation of an attack of this type requires considerable direct user-interaction from the user exporting and then opening the log files on the intended target client. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96298 - http://www.securitytracker.com/id/1037961 - https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20170306_00
CVE ID: CVE-2016-9095 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9096 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9097 State: PUBLISHED Published: 2017-05-11T14:01:00Z Last Updated: 2024-09-16T17:33:11.446Z Vendors: Symantec Corporation Products: Symantec Advanced Secure Gateway (ASG) and ProxySG Problem Types: Improper user authorization Description: The Symantec Advanced Secure Gateway (ASG) 6.6 prior to 6.6.5.8, ProxySG 6.5 prior 6.5.10.6, ProxySG 6.6 prior to 6.6.5.8, and ProxySG 6.7 prior to 6.7.1.2 management consoles do not, under certain circumstances, correctly authorize administrator users. A malicious administrator with read-only access can exploit this vulnerability to access management console functionality that requires read-write access privileges. Additional Analyst Note
erability to access management console functionality that requires read-write access privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101530 - http://www.securitytracker.com/id/1039701 - https://www.symantec.com/security-center/network-protection-security-advisories/SA146
CVE ID: CVE-2016-9098 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9099 State: PUBLISHED Published: 2017-05-11T14:01:00Z Last Updated: 2024-09-16T22:40:30.815Z Vendors: Symantec Corporation Products: ASG, ProxySG Problem Types: Open redirection Description: Symantec Advanced Secure Gateway (ASG) 6.6, ASG 6.7 prior to 6.7.2.1, ProxySG 6.5 prior to 6.5.10.6, ProxySG 6.6, and ProxySG 6.7 prior to 6.7.2.1 are susceptible to an open redirection vulnerability. A remote attacker can use a crafted management console URL in a phishing attack to redirect the target user to a malicious web site. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102455 - http://www.securitytracker.com/id/1040138 - https:/
m Container: References: - http://www.securityfocus.com/bid/102455 - http://www.securitytracker.com/id/1040138 - https://www.symantec.com/security-center/network-protection-security-advisories/SA155
CVE ID: CVE-2016-9100 State: PUBLISHED Published: 2017-05-11T14:01:00Z Last Updated: 2024-09-16T20:42:42.195Z Vendors: Symantec Corporation Products: ASG, ProxySG Problem Types: Information disclosure Description: Symantec Advanced Secure Gateway (ASG) 6.6 prior to 6.6.5.13, ASG 6.7 prior to 6.7.3.1, ProxySG 6.5 prior to 6.5.10.6, ProxySG 6.6 prior to 6.6.5.13, and ProxySG 6.7 prior to 6.7.3.1 are susceptible to an information disclosure vulnerability. An attacker with local access to the client host of an authenticated administrator user can, under certain circumstances, obtain sensitive authentication credential information. Additional Analyst Notes: - CVE Program Container: References: -
btain sensitive authentication credential information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1040138 - https://www.symantec.com/security-center/network-protection-security-advisories/SA155 - http://www.securityfocus.com/bid/102454
CVE ID: CVE-2016-9101 State: PUBLISHED Published: 2016-12-09T22:00:00 Last Updated: 2024-08-06T02:42:10.139Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in hw/net/eepro100.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (memory consumption and QEMU process crash) by repeatedly unplugging an i8255x (PRO100) NIC device. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2016-12/msg00140.html - https://security.gentoo.org/glsa/201701-49 - http://www.openwall.com/lists/oss-security/2016/10/30/5 - http://www.openwall.com/lists/oss-security/2016/10/27/14 - https://li
www.openwall.com/lists/oss-security/2016/10/30/5 - http://www.openwall.com/lists/oss-security/2016/10/27/14 - https://lists.gnu.org/archive/html/qemu-devel/2016-10/msg03024.html - https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html - http://www.securityfocus.com/bid/93957
CVE ID: CVE-2016-9102 State: PUBLISHED Published: 2016-12-09T22:00:00 Last Updated: 2024-08-06T02:42:10.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the v9fs_xattrcreate function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (memory consumption and QEMU process crash) via a large number of Txattrcreate messages with the same fid number. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201611-11 - http://www.securityfocus.com/bid/93962 - https://lists.gnu.org/archive/html/qemu-devel/2016-10/msg01861.html - http://www.openwall.com/lists/oss-securit
/93962 - https://lists.gnu.org/archive/html/qemu-devel/2016-10/msg01861.html - http://www.openwall.com/lists/oss-security/2016/10/27/15 - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=ff55e94d23ae94c8628b0115320157c763eb3e06 - http://www.openwall.com/lists/oss-security/2016/10/30/6 - https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html
CVE ID: CVE-2016-9103 State: PUBLISHED Published: 2016-12-09T22:00:00 Last Updated: 2024-08-06T02:42:10.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: The v9fs_xattrcreate function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS administrators to obtain sensitive host heap memory information by reading xattribute values before writing to them. Additional Analyst Notes: - CVE Program Container: References: - https://lists.gnu.org/archive/html/qemu-devel/2016-10/msg01790.html - https://security.gentoo.org/glsa/201611-11 - http://www.openwall.com/lists/oss-security/2016/10/30/7 - http://www.openwall.com/lists/oss-security/2016/10/28/1 - http://git.qemu.org/?p
l.com/lists/oss-security/2016/10/30/7 - http://www.openwall.com/lists/oss-security/2016/10/28/1 - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=eb687602853b4ae656e9236ee4222609f3a6887d - https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html - http://www.securityfocus.com/bid/93955
CVE ID: CVE-2016-9104 State: PUBLISHED Published: 2016-12-09T22:00:00 Last Updated: 2024-08-06T02:42:10.894Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in the (1) v9fs_xattr_read and (2) v9fs_xattr_write functions in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allow local guest OS administrators to cause a denial of service (QEMU process crash) via a crafted offset, which triggers an out-of-bounds access. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93956 - https://security.gentoo.org/glsa/201611-11 - http://lists.opensuse.org/opensuse-updates/2016-12/msg00140.html - http://www.openwall.com/lists/os
org/glsa/201611-11 - http://lists.opensuse.org/opensuse-updates/2016-12/msg00140.html - http://www.openwall.com/lists/oss-security/2016/10/30/8 - http://www.openwall.com/lists/oss-security/2016/10/28/2 - https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html - https://lists.gnu.org/archive/html/qemu-devel/2016-10/msg02942.html
CVE ID: CVE-2016-9105 State: PUBLISHED Published: 2016-12-09T22:00:00 Last Updated: 2024-08-06T02:42:10.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the v9fs_link function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (memory consumption) via vectors involving a reference to the source fid object. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93965 - https://lists.gnu.org/archive/html/qemu-devel/2016-10/msg02608.html - https://security.gentoo.org/glsa/201611-11 - http://lists.opensuse.org/opensuse-updates/2016-12/msg00140.html - http://git.qem
//security.gentoo.org/glsa/201611-11 - http://lists.opensuse.org/opensuse-updates/2016-12/msg00140.html - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=4c1586787ff43c9acd18a56c12d720e3e6be9f7c - https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html - http://www.openwall.com/lists/oss-security/2016/10/28/3 - http://www.openwall.com/lists/oss-security/2016/10/30/9
CVE ID: CVE-2016-9106 State: PUBLISHED Published: 2016-12-09T22:00:00 Last Updated: 2024-08-06T02:42:10.568Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the v9fs_write function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (memory consumption) by leveraging failure to free an IO vector. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/10/30/10 - http://www.securityfocus.com/bid/93964 - http://www.openwall.com/lists/oss-security/2016/10/28/4 - http://lists.opensuse.org/opensuse-updates/2016-12/msg00140.html - http://git.qemu.org/?p=qemu
s-security/2016/10/28/4 - http://lists.opensuse.org/opensuse-updates/2016-12/msg00140.html - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=fdfcc9aeea1492f4b819a24c94dfb678145b1bf9 - https://lists.gnu.org/archive/html/qemu-devel/2016-10/msg02623.html - https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html
CVE ID: CVE-2016-9107 State: PUBLISHED Published: 2017-01-13T16:00:00 Last Updated: 2024-08-06T02:42:10.566Z Vendors: n/a Products: n/a Problem Types: n/a Description: The OTR plugin for Gajim sends information in cleartext when using XHTML, which allows remote attackers to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://trac-plugins.gajim.org/changeset/c7c2e519ed63377bc943dd01c4661b0fe49321ae - http://www.openwall.com/lists/oss-security/2016/10/30/2 - http://www.securityfocus.com/bid/94099 - https://dev.gajim.org/gajim/gajim-plugins/issues/145 - http://www.openwall.com/lists/oss-security/2016/10/30/11
CVE ID: CVE-2016-9108 State: PUBLISHED Published: 2017-02-03T15:00:00 Last Updated: 2024-08-06T02:42:10.510Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the js_regcomp function in regexp.c in Artifex Software, Inc. MuJS before commit b6de34ac6d8bb7dd5461c57940acfbd3ee7fd93e allows attackers to cause a denial of service (application crash) via a crafted regular expression. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1390266 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y4FE2LXVJM5PXHUGSFOT2KTA75O5ACV4/ - http://www.openwall.com/lists/oss-secu
ge-announce%40lists.fedoraproject.org/message/Y4FE2LXVJM5PXHUGSFOT2KTA75O5ACV4/ - http://www.openwall.com/lists/oss-security/2016/10/30/12 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IMPCTUBV2UUTSKAGVAW3EL6HJJWHRZQZ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WMI77FMFDWOTUUKKPTQLIB7JEXFTING4/ - http://www.securityfocus.com/bid/96006
CVE ID: CVE-2016-9109 State: PUBLISHED Published: 2017-01-18T17:00:00 Last Updated: 2024-08-06T02:42:10.608Z Vendors: n/a Products: n/a Problem Types: n/a Description: Artifex Software MuJS allows attackers to cause a denial of service (crash) via vectors related to incomplete escape sequences. NOTE: this vulnerability exists due to an incomplete fix for CVE-2016-7563. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/10/30/4 - http://www.securityfocus.com/bid/94150 - https://bugs.ghostscript.com/show_bug.cgi?id=697136#c4 - http://www.openwall.com/lists/oss-security/2016/11/07/5 - http://www.openwall.com/lists/oss-security/2016/1
=697136#c4 - http://www.openwall.com/lists/oss-security/2016/11/07/5 - http://www.openwall.com/lists/oss-security/2016/10/30/13
CVE ID: CVE-2016-9111 State: PUBLISHED Published: 2016-11-07T11:00:00 Last Updated: 2024-08-06T02:42:10.458Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect access control mechanisms in Citrix Receiver Desktop Lock 4.5 allow an attacker to bypass the authentication requirement by leveraging physical access to a VDI for temporary disconnection of a LAN cable. NOTE: as of 20161208, the vendor could not reproduce the issue, stating "the researcher was unable to provide us with information that would allow us to confirm the behaviour and, despite extensive investigation on test deployments of supported products, we were unable to reproduce the behaviour as he described. The
investigation on test deployments of supported products, we were unable to reproduce the behaviour as he described. The researcher has also, despite additional requests for information, ceased to respond to us." Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.93250 - http://www.securitytracker.com/id/1037176 - https://www.exploit-db.com/exploits/40686/ - https://packetstormsecurity.com/files/139493/Citrix-Receiver-Receiver-Desktop-Lock-4.5-Authentication-Bypass.html - http://www.securityfocus.com/bid/94229
CVE ID: CVE-2016-9112 State: PUBLISHED Published: 2016-10-29T10:00:00 Last Updated: 2024-08-06T02:42:10.535Z Vendors: n/a Products: n/a Problem Types: n/a Description: Floating Point Exception (aka FPE or divide by zero) in opj_pi_next_cprl function in openjp2/pi.c:523 in OpenJPEG 2.1.2. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201710-26 - http://www.securityfocus.com/bid/93978 - https://lists.debian.org/debian-lts-announce/2019/07/msg00010.html - https://www.oracle.com/security-alerts/cpujul2020.html - https://github.com/uclouvain/openjpeg/issues/855
CVE ID: CVE-2016-9113 State: PUBLISHED Published: 2016-10-30T22:00:00 Last Updated: 2024-08-06T02:42:10.443Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a NULL pointer dereference in function imagetobmp of convertbmp.c:980 of OpenJPEG 2.1.2. image->comps[0].data is not assigned a value after initialization(NULL). Impact is Denial of Service. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201710-26 - https://github.com/uclouvain/openjpeg/issues/856 - http://www.securityfocus.com/bid/93980
CVE ID: CVE-2016-9114 State: PUBLISHED Published: 2016-10-30T22:00:00 Last Updated: 2024-08-06T02:42:10.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a NULL Pointer Access in function imagetopnm of convert.c:1943(jp2) of OpenJPEG 2.1.2. image->comps[compno].data is not assigned a value after initialization(NULL). Impact is Denial of Service. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201710-26 - http://www.securityfocus.com/bid/93979 - https://github.com/uclouvain/openjpeg/issues/857
CVE ID: CVE-2016-9115 State: PUBLISHED Published: 2016-10-30T22:00:00 Last Updated: 2024-08-06T02:42:10.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap Buffer Over-read in function imagetotga of convert.c(jp2):942 in OpenJPEG 2.1.2. Impact is Denial of Service. Someone must open a crafted j2k file. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201710-26 - http://www.securityfocus.com/bid/93977 - https://github.com/uclouvain/openjpeg/issues/858
CVE ID: CVE-2016-9116 State: PUBLISHED Published: 2016-10-30T22:00:00 Last Updated: 2024-08-06T02:42:10.494Z Vendors: n/a Products: n/a Problem Types: n/a Description: NULL Pointer Access in function imagetopnm of convert.c:2226(jp2) in OpenJPEG 2.1.2. Impact is Denial of Service. Someone must open a crafted j2k file. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201710-26 - https://github.com/uclouvain/openjpeg/issues/859 - http://www.securityfocus.com/bid/93975
CVE ID: CVE-2016-9117 State: PUBLISHED Published: 2016-10-30T22:00:00 Last Updated: 2024-08-06T02:42:10.505Z Vendors: n/a Products: n/a Problem Types: n/a Description: NULL Pointer Access in function imagetopnm of convert.c(jp2):1289 in OpenJPEG 2.1.2. Impact is Denial of Service. Someone must open a crafted j2k file. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201710-26 - http://www.securityfocus.com/bid/93783 - https://github.com/uclouvain/openjpeg/issues/860