Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-3911 State: PUBLISHED Published: 2016-10-10T10:00:00 Last Updated: 2024-08-06T00:10:31.900Z Vendors: n/a Products: n/a Problem Types: n/a Description: core/java/android/os/Process.java in Zygote in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 allows attackers to gain privileges via a crafted application, aka internal bug 30143607. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-10-01.html - http://www.securityfocus.com/bid/93303 - https://android.googlesource.com/platform/frameworks/base/+/2c7008421cb67f5d89f16911bdbe36f6c35311ad
CVE ID: CVE-2016-3912 State: PUBLISHED Published: 2016-10-10T10:00:00 Last Updated: 2024-08-06T00:10:31.779Z Vendors: n/a Products: n/a Problem Types: n/a Description: The framework APIs in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 allow attackers to gain privileges via a crafted application, aka internal bug 30202481. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/frameworks/base/+/6c049120c2d749f0c0289d822ec7d0aa692f55c5 - http://source.android.com/security/bulletin/2016-10-01.html - http://www.securityfocus.com/bid/93302
CVE ID: CVE-2016-3913 State: PUBLISHED Published: 2016-10-10T10:00:00 Last Updated: 2024-08-06T00:10:31.882Z Vendors: n/a Products: n/a Problem Types: n/a Description: media/libmediaplayerservice/MediaPlayerService.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 does not validate a certain static_cast operation, which allows attackers to gain privileges via a crafted application, aka internal bug 30204103. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/frameworks/av/+/0c3b93c8c2027e74af642967eee5c142c8fd185d - http://www.securityfocus.com/bid/93
googlesource.com/platform/frameworks/av/+/0c3b93c8c2027e74af642967eee5c142c8fd185d - http://www.securityfocus.com/bid/93296 - http://source.android.com/security/bulletin/2016-10-01.html
CVE ID: CVE-2016-3914 State: PUBLISHED Published: 2016-10-10T10:00:00 Last Updated: 2024-08-06T00:10:31.872Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in providers/telephony/MmsProvider.java in Telephony in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 allows attackers to gain privileges via a crafted application that modifies a database between two open operations, aka internal bug 30481342. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-10-01.html - https://android.googlesource.com/platform/packages/providers/TelephonyProvid
oid.com/security/bulletin/2016-10-01.html - https://android.googlesource.com/platform/packages/providers/TelephonyProvider/+/3a3a5d145d380deef2d5b7c3150864cd04be397f - http://www.securityfocus.com/bid/93300
CVE ID: CVE-2016-3915 State: PUBLISHED Published: 2016-10-10T10:00:00 Last Updated: 2024-08-06T00:10:31.857Z Vendors: n/a Products: n/a Problem Types: n/a Description: camera/src/camera_metadata.c in the Camera service in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 allows attackers to gain privileges via a crafted application, aka internal bug 30591838. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/system/media/+/e9e44f797742f52996ebf307740dad58c28fd9b5 - http://www.securityfocus.com/bid/93294 - http://source.android.com/security/bulletin/2016-10-01.html
CVE ID: CVE-2016-3916 State: PUBLISHED Published: 2016-10-10T10:00:00 Last Updated: 2024-08-06T00:10:31.854Z Vendors: n/a Products: n/a Problem Types: n/a Description: camera/src/camera_metadata.c in the Camera service in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 allows attackers to gain privileges via a crafted application, aka internal bug 30741779. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93294 - https://android.googlesource.com/platform/system/media/+/8e7a2b4d13bff03973dbad2bfb88a04296140433 - http://source.android.com/security/bulletin/2016-10-01.html
CVE ID: CVE-2016-3917 State: PUBLISHED Published: 2016-10-10T10:00:00 Last Updated: 2024-08-06T00:10:31.932Z Vendors: n/a Products: n/a Problem Types: n/a Description: The fingerprint login feature in Android 6.0.1 before 2016-10-01 and 7.0 before 2016-10-01 does not track the user account during the authentication process, which allows physically proximate attackers to authenticate as an arbitrary user by leveraging lockscreen access, aka internal bug 30744668. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93298 - http://source.android.com/security/bulletin/2016-10-01.html - https://android.googlesource.com/platform/frameworks/base/+/f5334
source.android.com/security/bulletin/2016-10-01.html - https://android.googlesource.com/platform/frameworks/base/+/f5334952131afa835dd3f08601fb3bced7b781cd
CVE ID: CVE-2016-3918 State: PUBLISHED Published: 2016-10-10T10:00:00 Last Updated: 2024-08-06T00:10:31.877Z Vendors: n/a Products: n/a Problem Types: n/a Description: email/provider/AttachmentProvider.java in AOSP Mail in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 does not ensure that certain values are integers, which allows attackers to read arbitrary attachments via a crafted application that provides a pathname value, aka internal bug 30745403. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-10-01.html - https://android.googlesource.com/platform/packa
erences: - http://source.android.com/security/bulletin/2016-10-01.html - https://android.googlesource.com/platform/packages/apps/Email/+/6b2b0bd7c771c698f11d7be89c2c57c8722c7454 - http://www.securityfocus.com/bid/93299
CVE ID: CVE-2016-3919 State: REJECTED Published: 2016-11-25T18:00:00 Last Updated: 2016-11-25T17:57:01 Description: No description available.
CVE ID: CVE-2016-3920 State: PUBLISHED Published: 2016-10-10T10:00:00 Last Updated: 2024-08-06T00:10:31.875Z Vendors: n/a Products: n/a Problem Types: n/a Description: id3/ID3.cpp in libstagefright in mediaserver in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 allows remote attackers to cause a denial of service (device hang or reboot) via a crafted file, aka internal bug 30744884. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/frameworks/av/+/6d0249be2275fd4086783f259f4e2c54722a7c55 - http://source.android.com/security/bulletin/2016-10-01.html - http://www.securityfocus.com/bid/93
3f259f4e2c54722a7c55 - http://source.android.com/security/bulletin/2016-10-01.html - http://www.securityfocus.com/bid/93292
CVE ID: CVE-2016-3921 State: PUBLISHED Published: 2016-10-10T10:00:00 Last Updated: 2024-08-06T00:10:31.884Z Vendors: n/a Products: n/a Problem Types: n/a Description: libsysutils/src/FrameworkListener.cpp in Framework Listener in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 allows attackers to gain privileges via a crafted application, aka internal bug 29831647. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-10-01.html - https://android.googlesource.com/platform/system/core/+/771ab014c24a682b32990da08e87e2f0ab765bd2 - http://www.securityfocus.com/bid/93307
CVE ID: CVE-2016-3922 State: PUBLISHED Published: 2016-10-10T10:00:00 Last Updated: 2024-08-06T00:10:31.842Z Vendors: n/a Products: n/a Problem Types: n/a Description: libril/RilSapSocket.cpp in Telephony in Android 6.x before 2016-10-01 and 7.0 before 2016-10-01 relies on variable-length arrays, which allows attackers to gain privileges via a crafted application, aka internal bug 30202619. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/hardware/ril/+/95610818918f6f11fe7d23aca1380e6c0fac2af0 - http://source.android.com/security/bulletin/2016-10-01.html - http://www.securityfocus.com/bid/93315
CVE ID: CVE-2016-3923 State: PUBLISHED Published: 2016-10-10T10:00:00 Last Updated: 2024-08-06T00:10:31.884Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Accessibility services in Android 7.0 before 2016-10-01 mishandle motion events, which allows attackers to conduct touchjacking attacks and consequently gain privileges via a crafted application, aka internal bug 30647115. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/frameworks/base/+/5f256310187b4ff2f13a7abb9afed9126facd7bc - http://source.android.com/security/bulletin/2016-10-01.html - http://www.securityfocus.com/bid/93310
CVE ID: CVE-2016-3924 State: PUBLISHED Published: 2016-10-10T10:00:00 Last Updated: 2024-08-06T00:10:31.891Z Vendors: n/a Products: n/a Problem Types: n/a Description: services/audioflinger/Effects.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 does not validate EFFECT_CMD_SET_PARAM and EFFECT_CMD_SET_PARAM_DEFERRED commands, which allows attackers to obtain sensitive information via a crafted application, aka internal bug 30204301. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/frameworks/av/+/c894aa36be535886a8e5ff02cdbcd07dd24618f6 - http://
ferences: - https://android.googlesource.com/platform/frameworks/av/+/c894aa36be535886a8e5ff02cdbcd07dd24618f6 - http://www.securityfocus.com/bid/93297 - http://source.android.com/security/bulletin/2016-10-01.html
CVE ID: CVE-2016-3925 State: PUBLISHED Published: 2016-10-10T10:00:00 Last Updated: 2024-08-06T00:10:31.906Z Vendors: n/a Products: n/a Problem Types: n/a Description: server/wifi/anqp/ANQPFactory.java in Android 6.x before 2016-10-01 and 7.0 before 2016-10-01 allows attackers to cause a denial of service (blocked Wi-Fi usage) via a crafted application, aka internal bug 30230534. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/frameworks/opt/net/wifi/+/c2905409c20c8692d4396b8531b09e7ec81fa3fb - http://source.android.com/security/bulletin/2016-10-01.html - http://www.securityfocus.com/bid/93289
CVE ID: CVE-2016-3926 State: PUBLISHED Published: 2016-10-10T10:00:00 Last Updated: 2024-08-06T00:10:31.911Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in a Qualcomm component in Android before 2016-10-05 on Nexus 5, 5X, 6, and 6P devices has unknown impact and attack vectors, aka internal bug 28823953. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-10-01.html - http://www.securityfocus.com/bid/93333
CVE ID: CVE-2016-3927 State: PUBLISHED Published: 2016-10-10T10:00:00 Last Updated: 2024-08-06T00:10:31.881Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in a Qualcomm component in Android before 2016-10-05 on Nexus 5X and 6P devices has unknown impact and attack vectors, aka internal bug 28823244. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-10-01.html - http://www.securityfocus.com/bid/93333
CVE ID: CVE-2016-3928 State: PUBLISHED Published: 2016-10-10T10:00:00 Last Updated: 2024-08-06T00:10:31.847Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MediaTek video driver in Android before 2016-10-05 allows attackers to gain privileges via a crafted application, aka Android internal bug 30019362 and MediaTek internal bug ALPS02829384. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-10-01.html - http://www.securityfocus.com/bid/93308
CVE ID: CVE-2016-3929 State: PUBLISHED Published: 2016-10-10T10:00:00 Last Updated: 2024-08-06T00:10:31.878Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in a Qualcomm component in Android before 2016-10-05 on Nexus 5X and 6P devices has unknown impact and attack vectors, aka internal bug 28823675. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-10-01.html - http://www.securityfocus.com/bid/93333
CVE ID: CVE-2016-3930 State: PUBLISHED Published: 2016-10-10T10:00:00 Last Updated: 2024-08-06T00:10:32.022Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NVIDIA MMC test driver in Android before 2016-10-05 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug 28760138. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-10-01.html - http://www.securityfocus.com/bid/93306 - http://nvidia.custhelp.com/app/answers/detail/a_id/4561
CVE ID: CVE-2016-3931 State: PUBLISHED Published: 2016-10-10T10:00:00 Last Updated: 2024-08-06T00:10:31.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: drivers/misc/qseecom.c in the Qualcomm QSEE Communicator driver in Android before 2016-10-05 on Nexus 5X, Nexus 6, Nexus 6P, and Android One devices allows attackers to gain privileges via a crafted application, aka Android internal bug 29157595 and Qualcomm internal bug CR 1036418. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-10-01.html - http://www.securityfocus.com/bid/93313 - https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=e80b88323f9ff0b
ttp://www.securityfocus.com/bid/93313 - https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=e80b88323f9ff0bb0e545f209eec08ec56fca816
CVE ID: CVE-2016-3932 State: PUBLISHED Published: 2016-10-10T10:00:00 Last Updated: 2024-08-06T00:10:31.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: mediaserver in Android before 2016-10-05 allows attackers to gain privileges via a crafted application, aka Android internal bug 29161895 and MediaTek internal bug ALPS02770870. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-10-01.html - http://www.securityfocus.com/bid/93311
CVE ID: CVE-2016-3933 State: PUBLISHED Published: 2016-10-10T10:00:00 Last Updated: 2024-08-06T00:10:31.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: mediaserver in Android before 2016-10-05 on Nexus 9 and Pixel C devices allows attackers to gain privileges via a crafted application, aka internal bug 29421408. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-10-01.html - http://www.securityfocus.com/bid/93311
CVE ID: CVE-2016-3934 State: PUBLISHED Published: 2016-10-10T10:00:00 Last Updated: 2024-08-06T00:10:31.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: drivers/media/platform/msm/camera_v2/sensor/io/msm_camera_cci_i2c.c in the Qualcomm camera driver in Android before 2016-10-05 on Nexus 5, Nexus 5X, Nexus 6, Nexus 6P, and Android One devices relies on variable-length arrays, which allows attackers to gain privileges via a crafted application, aka Android internal bug 30102557 and Qualcomm internal bug CR 789704. Additional Analyst Notes: - CVE Program Container: References: - https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=27fbeb6b025d5d46ccb0497cbed4c6e78ed1
ner: References: - https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=27fbeb6b025d5d46ccb0497cbed4c6e78ed1c5cc - http://source.android.com/security/bulletin/2016-10-01.html - http://www.securityfocus.com/bid/93322
CVE ID: CVE-2016-3935 State: PUBLISHED Published: 2016-10-10T10:00:00 Last Updated: 2024-08-06T00:10:31.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in drivers/crypto/msm/qcedev.c in the Qualcomm cryptographic engine driver in Android before 2016-10-05 on Nexus 5X, Nexus 6, Nexus 6P, and Android One devices allow attackers to gain privileges via a crafted application, aka Android internal bug 29999665 and Qualcomm internal bug CR 1046507. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93327 - http://source.android.com/security/bulletin/2016-10-01.html - https://source.codeaurora.org/quic/la/kerne
CVE ID: CVE-2016-3936 State: PUBLISHED Published: 2016-10-10T10:00:00 Last Updated: 2024-08-06T00:10:31.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MediaTek video driver in Android before 2016-10-05 allows attackers to gain privileges via a crafted application, aka Android internal bug 30019037 and MediaTek internal bug ALPS02829568. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93334 - http://source.android.com/security/bulletin/2016-10-01.html
CVE ID: CVE-2016-3937 State: PUBLISHED Published: 2016-10-10T10:00:00 Last Updated: 2024-08-06T00:10:31.874Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MediaTek video driver in Android before 2016-10-05 allows attackers to gain privileges via a crafted application, aka Android internal bug 30030994 and MediaTek internal bug ALPS02834874. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93334 - http://source.android.com/security/bulletin/2016-10-01.html
CVE ID: CVE-2016-3938 State: PUBLISHED Published: 2016-10-10T10:00:00 Last Updated: 2024-08-06T00:10:32.022Z Vendors: n/a Products: n/a Problem Types: n/a Description: drivers/video/msm/mdss/mdss_mdp_overlay.c in the Qualcomm video driver in Android before 2016-10-05 on Nexus 5X, Nexus 6, Nexus 6P, and Android One devices allows attackers to gain privileges via a crafted application, aka Android internal bug 30019716 and Qualcomm internal bug CR 1049232. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93336 - https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=467c81f9736b1ebc8d4ba70f9221bba02425ca10 - http://source.android.com/s
codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=467c81f9736b1ebc8d4ba70f9221bba02425ca10 - http://source.android.com/security/bulletin/2016-10-01.html
CVE ID: CVE-2016-3939 State: PUBLISHED Published: 2016-10-10T10:00:00 Last Updated: 2024-08-06T00:10:31.843Z Vendors: n/a Products: n/a Problem Types: n/a Description: drivers/video/msm/mdss/mdss_debug.c in the Qualcomm video driver in Android before 2016-10-05 on Nexus 5X, Nexus 6, Nexus 6P, and Android One devices allows attackers to gain privileges via a crafted application, aka Android internal bug 30874196 and Qualcomm internal bug CR 1001224. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93336 - http://source.android.com/security/bulletin/2016-10-01.html
CVE ID: CVE-2016-3940 State: PUBLISHED Published: 2016-10-10T10:00:00 Last Updated: 2024-08-06T00:10:31.920Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Synaptics touchscreen driver in Android before 2016-10-05 on Nexus 6P and Android One devices allows attackers to gain privileges via a crafted application, aka internal bug 30141991. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93338 - http://source.android.com/security/bulletin/2016-10-01.html
CVE ID: CVE-2016-3941 State: PUBLISHED Published: 2016-04-18T15:00:00 Last Updated: 2024-08-06T00:10:31.862Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the AStreamPeekStream function in input/stream.c in VideoLAN VLC media player before 2.2.0 allows remote attackers to cause a denial of service (crash) via a crafted wav file, related to "seek across EOF." Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00045.html - https://mailman.videolan.org/pipermail/vlc-commits/2015-January/028938.html - https://bugs.launchpad.net/ubuntu/+source/vlc/+bug/1533633 - http://www.securitytracker
mmits/2015-January/028938.html - https://bugs.launchpad.net/ubuntu/+source/vlc/+bug/1533633 - http://www.securitytracker.com/id/1035456
CVE ID: CVE-2016-3943 State: PUBLISHED Published: 2016-04-18T15:00:00 Last Updated: 2024-08-06T00:10:31.888Z Vendors: n/a Products: n/a Problem Types: n/a Description: Panda Endpoint Administration Agent before 7.50.00, as used in Panda Security for Business products for Windows, uses a weak ACL for the Panda Security/WaAgent directory and sub-directories, which allows local users to gain SYSTEM privileges by modifying an executable module. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/39671/ - http://seclists.org/fulldisclosure/2016/Apr/24 - http://packetstormsecurity.com/files/136606/Panda-Endpoint-Administration-Agent-Privilege-Escala
isclosure/2016/Apr/24 - http://packetstormsecurity.com/files/136606/Panda-Endpoint-Administration-Agent-Privilege-Escalation.html
CVE ID: CVE-2016-3944 State: PUBLISHED Published: 2016-06-03T14:00:00 Last Updated: 2024-08-06T00:10:31.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: UpdateAgent in Lenovo Accelerator Application allows man-in-the-middle attackers to execute arbitrary code by spoofing an update response from susapi.lenovomm.com. Additional Analyst Notes: - CVE Program Container: References: - https://support.lenovo.com/us/en/product_security/len_6718 - https://duo.com/blog/out-of-box-exploitation-a-security-analysis-of-oem-updaters
CVE ID: CVE-2016-3945 State: PUBLISHED Published: 2016-09-21T18:00:00 Last Updated: 2024-08-06T00:10:31.904Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in the (1) cvt_by_strip and (2) cvt_by_tile functions in the tiff2rgba tool in LibTIFF 4.0.6 and earlier, when -b mode is enabled, allow remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted TIFF image, which triggers an out-of-bounds write. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html - http://www.openwall.com/lists/oss-security/2016/04/08/6 - http://rhn.redha
cs/security/ovmbulletinjul2016-3090546.html - http://www.openwall.com/lists/oss-security/2016/04/08/6 - http://rhn.redhat.com/errata/RHSA-2016-1547.html - https://bugzilla.redhat.com/show_bug.cgi?id=1325093 - http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html - https://security.gentoo.org/glsa/201701-16 - http://lists.opensuse.org/opensuse-updates/2016-09/msg00039.html - http://rhn.redhat.com/errata/RHSA-2016-1546.html - http://www.securityfocus.com/bid/85960 - http://www.debian.org/security/2017/dsa-3762 - http://bugzilla.maptools.org/show_bug.cgi?id=2545
CVE ID: CVE-2016-3946 State: PUBLISHED Published: 2016-10-13T14:00:00 Last Updated: 2024-08-06T00:10:31.929Z Vendors: n/a Products: n/a Problem Types: n/a Description: SAP Console (aka SAPConsole) 7.30 allows local users to discover SAP Server login credentials by reading the Windows registry, aka SAP Security Note 2121461. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2016/Oct/31 - http://www.securityfocus.com/bid/93509 - https://www.onapsis.com/research/security-advisories/sap-console-insecure-password-storage