Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-6964 State: PUBLISHED Published: 2017-03-28T01:00:00 Last Updated: 2024-08-05T15:49:02.819Z Vendors: n/a Products: n/a Problem Types: n/a Description: dmcrypt-get-device, as shipped in the eject package of Debian and Ubuntu, does not check the return value of the (1) setuid or (2) setgid function, which might cause dmcrypt-get-device to execute code, which was intended to run as an unprivileged user, as root. This affects eject through 2.1.5+deb1+cvs20081104-13.1 on Debian, eject before 2.1.5+deb1+cvs20081104-13.1ubuntu0.16.10.1 on Ubuntu 16.10, eject before 2.1.5+deb1+cvs20081104-13.1ubuntu0.16.04.1 on Ubuntu 16.04 LTS, eject before 2.1.5+deb1+cvs20081104-13.1ubuntu0.14.04.
e 2.1.5+deb1+cvs20081104-13.1ubuntu0.16.04.1 on Ubuntu 16.04 LTS, eject before 2.1.5+deb1+cvs20081104-13.1ubuntu0.14.04.1 on Ubuntu 14.04 LTS, and eject before 2.1.5+deb1+cvs20081104-9ubuntu0.1 on Ubuntu 12.04 LTS. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2017/dsa-3823 - https://www.ubuntu.com/usn/usn-3246-1/ - http://www.securityfocus.com/bid/97154 - https://launchpad.net/bugs/1673627
CVE ID: CVE-2017-6965 State: PUBLISHED Published: 2017-03-17T08:55:00 Last Updated: 2024-08-05T15:49:02.392Z Vendors: n/a Products: n/a Problem Types: n/a Description: readelf in GNU Binutils 2.28 writes to illegal addresses while processing corrupt input files containing symbol-difference relocations, leading to a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201709-02 - https://sourceware.org/bugzilla/show_bug.cgi?id=21137
CVE ID: CVE-2017-6966 State: PUBLISHED Published: 2017-03-17T08:55:00 Last Updated: 2024-08-05T15:49:02.712Z Vendors: n/a Products: n/a Problem Types: n/a Description: readelf in GNU Binutils 2.28 has a use-after-free (specifically read-after-free) error while processing multiple, relocated sections in an MSP430 binary. This is caused by mishandling of an invalid symbol index, and mishandling of state across invocations. Additional Analyst Notes: - CVE Program Container: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=21139 - https://security.gentoo.org/glsa/201709-02
CVE ID: CVE-2017-6967 State: PUBLISHED Published: 2017-03-17T08:55:00 Last Updated: 2024-08-05T15:49:02.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: xrdp 0.9.1 calls the PAM function auth_start_session() in an incorrect location, leading to PAM session modules not being properly initialized, with a potential consequence of incorrect configurations or elevation of privileges, aka a pam_limits.so bypass. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/neutrinolabs/xrdp/issues/350 - https://bugs.launchpad.net/ubuntu/+source/xrdp/+bug/1672742 - https://github.com/neutrinolabs/xrdp/pull/694
CVE ID: CVE-2017-6968 State: PUBLISHED Published: 2017-04-06T14:00:00 Last Updated: 2024-08-05T15:49:02.328Z Vendors: n/a Products: n/a Problem Types: n/a Description: GMV Checker ATM Security prior to 5.0.18 allows remote authenticated users to execute arbitrary code via unspecified vectors, aka PT-2017-03. Additional Analyst Notes: - CVE Program Container: References: - https://www.ptsecurity.com/ww-en/analytics/threatscape/
CVE ID: CVE-2017-6969 State: PUBLISHED Published: 2017-03-17T08:55:00 Last Updated: 2024-08-05T15:49:02.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: readelf in GNU Binutils 2.28 is vulnerable to a heap-based buffer over-read while processing corrupt RL78 binaries. The vulnerability can trigger program crashes. It may lead to an information leak as well. Additional Analyst Notes: - CVE Program Container: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=21156 - https://security.gentoo.org/glsa/201709-02 - http://www.securityfocus.com/bid/97065
CVE ID: CVE-2017-6970 State: PUBLISHED Published: 2017-03-22T14:00:00 Last Updated: 2024-08-05T15:49:02.827Z Vendors: n/a Products: n/a Problem Types: n/a Description: AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 allow local users to execute arbitrary commands in a privileged context via an NfSen socket, aka AlienVault ID ENG-104863. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/nfsen/news/2017/01/nfsen-138-released---security-fix/ - https://www.alienvault.com/forums/discussion/8325/ - https://www.exploit-db.com/exploits/42305/ - https://www.alienvault.com/forums/discussion/8698
CVE ID: CVE-2017-6971 State: PUBLISHED Published: 2017-03-22T14:00:00 Last Updated: 2024-08-05T15:49:02.140Z Vendors: n/a Products: n/a Problem Types: n/a Description: AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 allow remote authenticated users to execute arbitrary commands in a privileged context, or launch a reverse shell, via vectors involving the PHP session ID and the NfSen PHP code, aka AlienVault ID ENG-104862. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/nfsen/news/2017/01/nfsen-138-released---security-fix/ - https://www.alienvault.com/forums/discussion/8325/ - https://www.exploit-db.com/exploits/42306/ - https://www.alie
ix/ - https://www.alienvault.com/forums/discussion/8325/ - https://www.exploit-db.com/exploits/42306/ - https://www.alienvault.com/forums/discussion/8698
CVE ID: CVE-2017-6972 State: PUBLISHED Published: 2017-03-22T20:00:00 Last Updated: 2024-08-05T15:49:02.101Z Vendors: n/a Products: n/a Problem Types: n/a Description: AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 have an error in privilege dropping and unnecessarily execute the NfSen Perl code as root, aka AlienVault ID ENG-104945, a different vulnerability than CVE-2017-6970 and CVE-2017-6971. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/nfsen/news/2017/01/nfsen-138-released---security-fix/ - http://www.securityfocus.com/bid/97016 - https://www.exploit-db.com/exploits/42314/ - https://www.alienvault.com/forums/discussion/8698
CVE ID: CVE-2017-6973 State: PUBLISHED Published: 2017-03-31T04:26:00 Last Updated: 2024-08-05T15:49:02.931Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in the MantisBT Configuration Report page (adm_config_report.php) allows remote attackers to inject arbitrary code through a crafted 'action' parameter. This is fixed in 1.3.8, 2.1.2, and 2.2.2. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2017/03/30/4 - http://www.securitytracker.com/id/1038169 - http://www.mantisbt.org/bugs/view.php?id=22537 - http://www.securityfocus.com/bid/97252
CVE ID: CVE-2017-6974 State: PUBLISHED Published: 2017-04-02T01:36:00 Last Updated: 2024-08-05T15:49:01.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the system-installation subsystem of the "System Integrity Protection" component. It allows attackers to modify the contents of a protected disk location via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97140 - https://support.apple.com/HT207615 - http://www.securitytracker.com/id/1038138
CVE ID: CVE-2017-6975 State: PUBLISHED Published: 2017-04-05T14:00:00 Last Updated: 2024-08-05T15:49:02.320Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wi-Fi in Apple iOS before 10.3.1 does not prevent CVE-2017-6956 stack buffer overflow exploitation via a crafted access point. NOTE: because an operating system could potentially isolate itself from CVE-2017-6956 exploitation without patching Broadcom firmware functions, there is a separate CVE ID for the operating-system behavior. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038172 - http://www.securityfocus.com/bid/97328 - https://googleprojectzero.blogspot.com/2017/04/o
curitytracker.com/id/1038172 - http://www.securityfocus.com/bid/97328 - https://googleprojectzero.blogspot.com/2017/04/over-air-exploiting-broadcoms-wi-fi_4.html - https://support.apple.com/HT207688 - https://twitter.com/4Dgifts/status/849268365457850370 - http://seclists.org/fulldisclosure/2019/May/24 - https://support.apple.com/kb/HT210121 - https://seclists.org/bugtraq/2019/May/30
CVE ID: CVE-2017-6976 State: PUBLISHED Published: 2018-04-03T06:00:00 Last Updated: 2024-08-05T15:49:02.151Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the "Sandbox Profiles" component. It allows attackers to bypass intended access restrictions (for iCloud user records) via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT207617
CVE ID: CVE-2017-6977 State: PUBLISHED Published: 2017-05-22T04:54:00 Last Updated: 2024-08-05T15:49:02.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "Speech Framework" component. It allows attackers to conduct sandbox-escape attacks or cause a denial of service (memory corruption) via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038484 - https://support.apple.com/HT207797
CVE ID: CVE-2017-6978 State: PUBLISHED Published: 2017-05-22T04:54:00 Last Updated: 2024-08-05T15:49:02.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "Accessibility Framework" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038484 - https://support.apple.com/HT207797 - https://www.exploit-db.com/exploits/42056/
CVE ID: CVE-2017-6979 State: PUBLISHED Published: 2017-05-22T04:54:00 Last Updated: 2024-08-05T15:49:02.090Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "IOSurface" component. A race condition allows attackers to execute arbitrary code in a privileged context via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038484 - https://support.apple.com/HT207797 - https://support.apple.com/HT207800 - http://www.securit
itytracker.com/id/1038484 - https://support.apple.com/HT207797 - https://support.apple.com/HT207800 - http://www.securityfocus.com/bid/98468 - https://www.exploit-db.com/exploits/42555/ - https://support.apple.com/HT207798 - https://support.apple.com/HT207801
CVE ID: CVE-2017-6980 State: PUBLISHED Published: 2017-05-22T04:54:00 Last Updated: 2024-08-05T15:49:02.314Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038487 - https://support.apple.com/HT207804 - https://security.gentoo.org/glsa/201706-15 - ht
ww.securitytracker.com/id/1038487 - https://support.apple.com/HT207804 - https://security.gentoo.org/glsa/201706-15 - https://www.exploit-db.com/exploits/42189/ - https://support.apple.com/HT207798 - https://support.apple.com/HT207801 - http://www.securityfocus.com/bid/98473
CVE ID: CVE-2017-6981 State: PUBLISHED Published: 2017-05-22T04:54:00 Last Updated: 2024-08-05T15:49:02.419Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. The issue involves the "iBooks" component. It allows attackers to execute arbitrary code in a privileged context via a crafted app that uses symlinks. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038484 - https://support.apple.com/HT207797 - https://support.apple.com/HT207798
CVE ID: CVE-2017-6982 State: PUBLISHED Published: 2017-05-22T04:54:00 Last Updated: 2024-08-05T15:49:02.884Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. The issue involves the "Notifications" component. It allows attackers to cause a denial of service via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98479 - http://www.securitytracker.com/id/1038485 - https://www.exploit-db.com/exploits/42014/ - https://support.apple.com/HT207798
CVE ID: CVE-2017-6983 State: PUBLISHED Published: 2017-05-22T04:54:00 Last Updated: 2024-08-05T15:49:02.502Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. The issue involves the "SQLite" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038484 - https://support.apple.com/HT207797 - https://source.android.com/security/bulletin/2017-09-01 - https://support.apple
4 - https://support.apple.com/HT207797 - https://source.android.com/security/bulletin/2017-09-01 - https://support.apple.com/HT207798
CVE ID: CVE-2017-6984 State: PUBLISHED Published: 2017-05-22T04:54:00 Last Updated: 2024-08-05T15:49:02.192Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. iTunes before 12.6.1 on Windows is affected. tvOS before 10.2.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/42191/ - http://www.securitytracker.com/id/1038
CVE Program Container: References: - https://www.exploit-db.com/exploits/42191/ - http://www.securitytracker.com/id/1038487 - http://www.securityfocus.com/bid/98454 - https://support.apple.com/HT207804 - https://support.apple.com/HT207805 - https://security.gentoo.org/glsa/201706-15 - https://support.apple.com/HT207798 - https://support.apple.com/HT207801
CVE ID: CVE-2017-6985 State: PUBLISHED Published: 2017-05-22T04:54:00 Last Updated: 2024-08-05T15:49:02.328Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "NVIDIA Graphics Drivers" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038484 - https://support.apple.com/HT207797
CVE ID: CVE-2017-6986 State: PUBLISHED Published: 2017-05-22T04:54:00 Last Updated: 2024-08-05T15:49:02.777Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "iBooks" component. It allows attackers to conduct sandbox-escape attacks or cause a denial of service (memory corruption) via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038484 - https://support.apple.com/HT207797
CVE ID: CVE-2017-6987 State: PUBLISHED Published: 2017-05-22T04:54:00 Last Updated: 2024-08-05T15:49:02.782Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038484 - https://support.apple.com/HT207797 - https://support.apple.com/HT207800 - http://www.securityfocus.com/bid/98468 -
CVE ID: CVE-2017-6988 State: PUBLISHED Published: 2017-05-22T04:54:00 Last Updated: 2024-08-05T15:49:02.660Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "802.1X" component. It allows remote attackers to discover the network credentials of arbitrary users by operating a crafted network that requires 802.1X authentication, because EAP-TLS certificate validation mishandles certificate changes. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038484 - https://support.apple.com/HT207797
CVE ID: CVE-2017-6989 State: PUBLISHED Published: 2017-05-22T04:54:00 Last Updated: 2024-08-05T15:49:02.737Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "AVEVideoEncoder" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT207800 - https://www.exploit-db.com/exploits/42555/ - http://www.securitytracker.com/id/1038485 - htt
upport.apple.com/HT207800 - https://www.exploit-db.com/exploits/42555/ - http://www.securitytracker.com/id/1038485 - https://support.apple.com/HT207798 - https://support.apple.com/HT207801
CVE ID: CVE-2017-6990 State: PUBLISHED Published: 2017-05-22T04:54:00 Last Updated: 2024-08-05T15:49:02.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "HFS" component. It allows attackers to bypass intended memory-read restrictions via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038484 - https://support.apple.com/HT207797
CVE ID: CVE-2017-6991 State: PUBLISHED Published: 2017-05-22T04:54:00 Last Updated: 2024-08-05T15:49:02.152Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. The issue involves the "SQLite" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038484 - https://support.apple.com/HT207797 - https://support.apple.com/HT207798
CVE ID: CVE-2017-6994 State: PUBLISHED Published: 2017-05-22T04:54:00 Last Updated: 2024-08-05T15:49:02.429Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "AVEVideoEncoder" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT207800 - https://www.exploit-db.com/exploits/42555/ - http://www.securityfocus.com/bid/98571 - https:
upport.apple.com/HT207800 - https://www.exploit-db.com/exploits/42555/ - http://www.securityfocus.com/bid/98571 - https://support.apple.com/HT207798 - https://support.apple.com/HT207801
CVE ID: CVE-2017-6995 State: PUBLISHED Published: 2017-05-22T04:54:00 Last Updated: 2024-08-05T15:49:02.394Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "AVEVideoEncoder" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT207800 - https://www.exploit-db.com/exploits/42555/ - http://www.securityfocus.com/bid/98571 - https:
CVE ID: CVE-2017-6996 State: PUBLISHED Published: 2017-05-22T04:54:00 Last Updated: 2024-08-05T15:49:02.439Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "AVEVideoEncoder" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT207800 - https://www.exploit-db.com/exploits/42555/ - http://www.securityfocus.com/bid/98571 - https:
CVE ID: CVE-2017-6997 State: PUBLISHED Published: 2017-05-22T04:54:00 Last Updated: 2024-08-05T15:49:02.681Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "AVEVideoEncoder" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT207800 - https://www.exploit-db.com/exploits/42555/ - http://www.securityfocus.com/bid/98571 - https:
CVE ID: CVE-2017-6998 State: PUBLISHED Published: 2017-05-22T04:54:00 Last Updated: 2024-08-05T15:49:02.431Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "AVEVideoEncoder" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT207800 - https://www.exploit-db.com/exploits/42555/ - http://www.securityfocus.com/bid/98571 - https:
CVE ID: CVE-2017-6999 State: PUBLISHED Published: 2017-05-22T04:54:00 Last Updated: 2024-08-05T15:49:02.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "AVEVideoEncoder" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT207800 - https://www.exploit-db.com/exploits/42555/ - http://www.securityfocus.com/bid/98571 - https: