Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-9465 State: PUBLISHED Published: 2017-06-06T21:00:00Z Last Updated: 2024-09-17T01:26:40.288Z Vendors: n/a Products: n/a Problem Types: n/a Description: The yr_arena_write_data function in YARA 3.6.1 allows remote attackers to cause a denial of service (buffer over-read and application crash) or obtain sensitive information from process memory via a crafted file that is mishandled in the yr_re_fast_exec function in libyara/re.c and the _yr_scan_match_callback function in libyara/scan.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/VirusTotal/yara/issues/678 - https://github.com/VirusTotal/yara/commit/992480c30f75943e9cd6245bb2015c7737f9b
/github.com/VirusTotal/yara/issues/678 - https://github.com/VirusTotal/yara/commit/992480c30f75943e9cd6245bb2015c7737f9b661
CVE ID: CVE-2017-9466 State: PUBLISHED Published: 2017-06-26T07:00:00 Last Updated: 2024-08-05T17:11:01.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: The executable httpd on the TP-Link WR841N V8 router before TL-WR841N(UN)_V8_170210 contained a design flaw in the use of DES for block encryption. This resulted in incorrect access control, which allowed attackers to gain read-write access to system settings through the protected router configuration service tddp via the LAN and Ath0 (Wi-Fi) interfaces. Additional Analyst Notes: - CVE Program Container: References: - http://blog.senr.io/blog/cve-2017-9466-why-is-my-router-blinking-morse-code
CVE ID: CVE-2017-9467 State: PUBLISHED Published: 2017-08-02T19:00:00 Last Updated: 2024-08-05T17:11:01.562Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the GlobalProtect external interface in Palo Alto Networks PAN-OS before 6.1.18, 7.x before 7.0.16, 7.1.x before 7.1.11, and 8.x before 8.0.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99907 - http://www.securitytracker.com/id/1038975 - https://security.paloaltonetworks.com/CVE-2017-9467
CVE ID: CVE-2017-9468 State: PUBLISHED Published: 2017-06-07T01:00:00 Last Updated: 2024-08-05T17:11:02.140Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Irssi before 1.0.3, when receiving a DCC message without source nick/host, it attempts to dereference a NULL pointer. Thus, remote IRC servers can cause a crash. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2017/dsa-3885 - http://openwall.com/lists/oss-security/2017/06/06/4 - https://irssi.org/security/irssi_sa_2017_06.txt - http://www.securityfocus.com/bid/99015 - http://www.securitytracker.com/id/1038621
CVE ID: CVE-2017-9469 State: PUBLISHED Published: 2017-06-07T01:00:00 Last Updated: 2024-08-05T17:11:01.070Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Irssi before 1.0.3, when receiving certain incorrectly quoted DCC files, it tries to find the terminating quote one byte before the allocated memory. Thus, remote attackers might be able to cause a crash. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2017/dsa-3885 - http://openwall.com/lists/oss-security/2017/06/06/4 - https://irssi.org/security/irssi_sa_2017_06.txt - http://www.securityfocus.com/bid/99043 - http://www.securitytracker.com/id/1038621
CVE ID: CVE-2017-9470 State: PUBLISHED Published: 2017-06-07T04:50:00 Last Updated: 2024-08-05T17:11:02.344Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ytnef 1.9.2, the MAPIPrint function in lib/ytnef.c allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/05/24/ytnef-null-pointer-dereference-in-mapiprint-ytnef-c/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/
CVE ID: CVE-2017-9471 State: PUBLISHED Published: 2017-06-07T04:50:00 Last Updated: 2024-08-05T17:11:01.576Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ytnef 1.9.2, the SwapWord function in lib/ytnef.c allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3667-1/ - https://blogs.gentoo.org/ago/2017/05/24/ytnef-heap-based-buffer-overflow-in-swapword-ytnef-c/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/
CVE ID: CVE-2017-9472 State: PUBLISHED Published: 2017-06-07T04:50:00 Last Updated: 2024-08-05T17:11:01.689Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ytnef 1.9.2, the SwapDWord function in lib/ytnef.c allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/05/24/ytnef-heap-based-buffer-overflow-in-swapdword-ytnef-c/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/
CVE ID: CVE-2017-9473 State: PUBLISHED Published: 2017-06-07T04:50:00 Last Updated: 2024-08-05T17:11:01.247Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ytnef 1.9.2, the TNEFFillMapi function in lib/ytnef.c allows remote attackers to cause a denial of service (memory consumption) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3667-1/ - https://blogs.gentoo.org/ago/2017/05/24/ytnef-memory-allocation-failure-in-tneffillmapi-ytnef-c/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/
CVE ID: CVE-2017-9474 State: PUBLISHED Published: 2017-06-07T04:50:00 Last Updated: 2024-08-05T17:11:01.815Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ytnef 1.9.2, the DecompressRTF function in lib/ytnef.c allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/05/24/ytnef-heap-based-buffer-overflow-in-decompressrtf-ytnef-c/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/
CVE ID: CVE-2017-9475 State: PUBLISHED Published: 2017-07-31T03:00:00 Last Updated: 2024-08-05T17:11:01.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: Comcast XFINITY WiFi Home Hotspot devices allow remote attackers to spoof the identities of Comcast customers via a forged MAC address. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-17.public-wifi-theft-impersonation.txt
CVE ID: CVE-2017-9476 State: PUBLISHED Published: 2017-07-31T03:00:00 Last Updated: 2024-08-05T17:11:01.630Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST); Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST); and Arris TG1682G (eMTA&DOCSIS version 10.0.132.SIP.PC20.CT, software version TG1682_2.2p7s2_PROD_sey) devices makes it easy for remote attackers to determine the hidden SSID and passphrase for a Home Security Wi-Fi network. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/BastilleResearch/CableTap/blob/master/doc/adv
l Analyst Notes: - CVE Program Container: References: - https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-18.home-security-wifi-network.txt
CVE ID: CVE-2017-9477 State: PUBLISHED Published: 2017-07-31T03:00:00 Last Updated: 2024-08-05T17:11:01.624Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST) and DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST) devices allows remote attackers to discover the CM MAC address by connecting to the device's xfinitywifi hotspot. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-19.wifi-dhcp-cm-mac-leak.txt
CVE ID: CVE-2017-9478 State: PUBLISHED Published: 2017-07-31T03:00:00 Last Updated: 2024-08-05T17:11:01.672Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST) and DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST) devices sets the CM MAC address to a value with a two-byte offset from the MTA/VoIP MAC address, which indirectly allows remote attackers to discover hidden Home Security Wi-Fi networks by leveraging the embedding of the MTA/VoIP MAC address into the DNS hostname. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/BastilleR
ess into the DNS hostname. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-20.emta-reverse-dns.txt
CVE ID: CVE-2017-9479 State: PUBLISHED Published: 2017-07-31T03:00:00 Last Updated: 2024-08-05T17:11:02.198Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST) devices allows remote attackers to execute arbitrary commands as root by leveraging local network access and connecting to the syseventd server, as demonstrated by copying configuration data into a readable filesystem. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-22.syseventd.txt
CVE ID: CVE-2017-9480 State: PUBLISHED Published: 2017-07-31T03:00:00 Last Updated: 2024-08-05T17:11:01.274Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST) devices allows local users (e.g., users who have command access as a consequence of CVE-2017-9479 exploitation) to read arbitrary files via UPnP access to /var/IGD/. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-23.upnp-directory-write.txt
CVE ID: CVE-2017-9481 State: PUBLISHED Published: 2017-07-31T03:00:00 Last Updated: 2024-08-05T17:11:01.993Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST) devices allows remote attackers to obtain unintended access to the Network Processor (NP) 169.254/16 IP network by adding a routing-table entry that specifies the LAN IP address as the router for that network. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-24.atom-ip-routing.txt
CVE ID: CVE-2017-9482 State: PUBLISHED Published: 2017-07-31T03:00:00 Last Updated: 2024-08-05T17:11:01.752Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST) devices allows remote attackers to obtain root access to the Network Processor (NP) Linux system by enabling a TELNET daemon (through CVE-2017-9479 exploitation) and then establishing a TELNET session. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-25.atom-telnet.txt
CVE ID: CVE-2017-9483 State: PUBLISHED Published: 2017-07-31T03:00:00 Last Updated: 2024-08-05T17:11:01.578Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST) devices allows Network Processor (NP) Linux users to obtain root access to the Application Processor (AP) Linux system via shell metacharacters in commands. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-26.arbitrary-command-execution.txt
CVE ID: CVE-2017-9484 State: PUBLISHED Published: 2017-07-31T03:00:00 Last Updated: 2024-08-05T17:11:01.830Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST) and DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST) devices allows remote attackers to discover a CM MAC address by sniffing Wi-Fi traffic and performing simple arithmetic calculations. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-27.ipv6-cm-mac-leak.txt
CVE ID: CVE-2017-9485 State: PUBLISHED Published: 2017-07-31T03:00:00 Last Updated: 2024-08-05T17:11:01.645Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST) devices allows remote attackers to write arbitrary data to a known /var/tmp/sess_* pathname by leveraging the device's operation in UI dev mode. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-28.session-cookie-write.txt
CVE ID: CVE-2017-9486 State: PUBLISHED Published: 2017-07-31T03:00:00 Last Updated: 2024-08-05T17:11:01.968Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST) devices allows remote attackers to compute password-of-the-day values via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-29.password-of-the-day.txt
CVE ID: CVE-2017-9487 State: PUBLISHED Published: 2017-07-31T03:00:00 Last Updated: 2024-08-05T17:11:01.766Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST) and DPC3941T (firmware version DPC3941_2.5s3_PROD_sey) devices allows remote attackers to discover a WAN IPv6 IP address by leveraging knowledge of the CM MAC address. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-30.wan0-ipv6-cm-mac.txt
CVE ID: CVE-2017-9488 State: PUBLISHED Published: 2017-07-31T03:00:00 Last Updated: 2024-08-05T17:11:01.498Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST) and DPC3941T (firmware version DPC3941_2.5s3_PROD_sey) devices allows remote attackers to access the web UI by establishing a session to the wan0 WAN IPv6 address and then entering unspecified hardcoded credentials. This wan0 interface cannot be accessed from the public Internet. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-31.st
Program Container: References: - https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-31.stb-remote-webui.txt
CVE ID: CVE-2017-9489 State: PUBLISHED Published: 2017-07-31T03:00:00 Last Updated: 2024-08-05T17:11:02.084Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Comcast firmware on Cisco DPC3939B (firmware version dpc3939b-v303r204217-150321a-CMCST) devices allows configuration changes via CSRF. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-33.cross-site-request-forgery.txt
CVE ID: CVE-2017-9490 State: PUBLISHED Published: 2017-07-31T03:00:00 Last Updated: 2024-08-05T17:11:02.127Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Comcast firmware on Arris TG1682G (eMTA&DOCSIS version 10.0.132.SIP.PC20.CT, software version TG1682_2.2p7s2_PROD_sey) devices allows configuration changes via CSRF. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-33.cross-site-request-forgery.txt
CVE ID: CVE-2017-9491 State: PUBLISHED Published: 2017-07-31T03:00:00 Last Updated: 2024-08-05T17:11:01.905Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST); Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST); Cisco DPC3939B (firmware version dpc3939b-v303r204217-150321a-CMCST); Cisco DPC3941T (firmware version DPC3941_2.5s3_PROD_sey); and Arris TG1682G (eMTA&DOCSIS version 10.0.132.SIP.PC20.CT, software version TG1682_2.2p7s2_PROD_sey) devices does not set the secure flag for cookies in an https session to an administration application, which makes it easie
ices does not set the secure flag for cookies in an https session to an administration application, which makes it easier for remote attackers to capture these cookies by intercepting their transmission within an http session. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-35.improper-cookie-flags.txt
CVE ID: CVE-2017-9492 State: PUBLISHED Published: 2017-07-31T03:00:00 Last Updated: 2024-08-05T17:11:01.664Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST); Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST); Cisco DPC3939B (firmware version dpc3939b-v303r204217-150321a-CMCST); Cisco DPC3941T (firmware version DPC3941_2.5s3_PROD_sey); and Arris TG1682G (eMTA&DOCSIS version 10.0.132.SIP.PC20.CT, software version TG1682_2.2p7s2_PROD_sey) devices does not include the HTTPOnly flag in a Set-Cookie header for administration applications, which makes it easier fo
ices does not include the HTTPOnly flag in a Set-Cookie header for administration applications, which makes it easier for remote attackers to obtain potentially sensitive information via script access to cookies. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-35.improper-cookie-flags.txt
CVE ID: CVE-2017-9493 State: PUBLISHED Published: 2017-07-31T03:00:00 Last Updated: 2024-08-05T17:11:01.773Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Comcast firmware on Motorola MX011ANM (firmware version MX011AN_2.9p6s1_PROD_sey) devices allows remote attackers to conduct successful forced-pairing attacks (between an RF4CE remote and a set-top box) by repeatedly transmitting the same pairing code. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-37.rf4ce-forced-pairing.vendor.txt
CVE ID: CVE-2017-9494 State: PUBLISHED Published: 2017-07-31T03:00:00 Last Updated: 2024-08-05T17:11:01.618Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Comcast firmware on Motorola MX011ANM (firmware version MX011AN_2.9p6s1_PROD_sey) devices allows remote attackers to enable a Remote Web Inspector that is accessible from the public Internet. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-38.remote-web-inspector.txt
CVE ID: CVE-2017-9495 State: PUBLISHED Published: 2017-07-31T03:00:00 Last Updated: 2024-08-05T17:11:01.898Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Comcast firmware on Motorola MX011ANM (firmware version MX011AN_2.9p6s1_PROD_sey) devices allows physically proximate attackers to read arbitrary files by pressing "EXIT, Down, Down, 2" on an RF4CE remote to reach the diagnostic display, and then launching a Remote Web Inspector script. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-39.arbitrary-file-read.txt
CVE ID: CVE-2017-9496 State: PUBLISHED Published: 2017-07-31T03:00:00 Last Updated: 2024-08-05T17:11:01.616Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Comcast firmware on Motorola MX011ANM (firmware version MX011AN_2.9p6s1_PROD_sey) devices allows physically proximate attackers to access an SNMP server by connecting a cable to the Ethernet port, and then establishing communication with the device's link-local IPv6 address. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-40.ethernet-snmp.txt
CVE ID: CVE-2017-9497 State: PUBLISHED Published: 2017-07-31T03:00:00 Last Updated: 2024-08-05T17:11:01.593Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Comcast firmware on Motorola MX011ANM (firmware version MX011AN_2.9p6s1_PROD_sey) devices allows physically proximate attackers to execute arbitrary commands as root by pulling up the diagnostics menu on the set-top box, and then posting to a Web Inspector route. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-41.root-command-execution.txt
CVE ID: CVE-2017-9498 State: PUBLISHED Published: 2017-07-31T03:00:00 Last Updated: 2024-08-05T17:11:01.597Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Comcast firmware on Motorola MX011ANM (firmware version MX011AN_2.9p6s1_PROD_sey) and Xfinity XR11-20 Voice Remote devices allows local users to upload arbitrary firmware images to an XR11 by leveraging root access. In other words, there is no protection mechanism involving digital signatures for the firmware. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-42.remote-OTA.txt
CVE ID: CVE-2017-9499 State: PUBLISHED Published: 2017-06-07T14:00:00 Last Updated: 2024-08-05T17:11:01.593Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ImageMagick 7.0.5-7 Q16, an assertion failure was found in the function SetPixelChannelAttributes, which allows attackers to cause a denial of service via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/492 - http://www.securityfocus.com/bid/98944 - https://github.com/ImageMagick/ImageMagick/commit/7fd419441bc7103398e313558171d342c6315f44
CVE ID: CVE-2017-9500 State: PUBLISHED Published: 2017-06-07T14:00:00 Last Updated: 2024-08-05T17:11:01.762Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ImageMagick 7.0.5-8 Q16, an assertion failure was found in the function ResetImageProfileIterator, which allows attackers to cause a denial of service via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98941 - https://github.com/ImageMagick/ImageMagick/issues/500 - https://www.debian.org/security/2017/dsa-4019 - https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html