Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-11491 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-11492 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-11493 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-11494 State: PUBLISHED Published: 2017-08-02T14:00:00 Last Updated: 2024-08-05T18:12:40.211Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in SOL.Connect ISET-mpp meter 1.2.4.2 and earlier allows remote attackers to execute arbitrary SQL commands via the user parameter in a login action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/540946/100/0/threaded - http://www.securityfocus.com/bid/100067 - https://www.exploit-db.com/exploits/42408/
CVE ID: CVE-2017-11495 State: PUBLISHED Published: 2017-07-20T22:00:00Z Last Updated: 2024-09-17T03:34:12.414Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHICOMM K2(PSG1218) devices V22.5.11.5 and earlier allow unauthenticated remote code execution via a request to an unspecified ASP script; alternatively, the attacker can leverage unauthenticated access to this script to trigger a reboot via an ifType=reboot action. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ZIllR0/Routers/blob/master/PHICOMM
CVE ID: CVE-2017-11496 State: PUBLISHED Published: 2017-10-02T21:00:00 Last Updated: 2024-08-05T18:12:39.968Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack buffer overflow in hasplms in Gemalto ACC (Admin Control Center), all versions ranging from HASP SRM 2.10 to Sentinel LDK 7.50, allows remote attackers to execute arbitrary code via malformed ASN.1 streams in V2C and similar input files. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-093-01 - https://cert-portal.siemens.com/productcert/pdf/ssa-727467.pdf - http://www.securityfocus.com/bid/102906 - https://www.iotvillage.org/slides_dc25/Sergey_Vlad_DEFCON_
df/ssa-727467.pdf - http://www.securityfocus.com/bid/102906 - https://www.iotvillage.org/slides_dc25/Sergey_Vlad_DEFCON_IOT_Village_Public2017.pptx - https://ics-cert.kaspersky.com/alerts/2017/07/28/multiple-vulnerabilities-found-in-popular-license-manager/ - http://www.securityfocus.com/bid/102739 - https://ics-cert.us-cert.gov/advisories/ICSA-18-018-01
CVE ID: CVE-2017-11497 State: PUBLISHED Published: 2017-10-02T21:00:00 Last Updated: 2024-08-05T18:12:40.053Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack buffer overflow in hasplms in Gemalto ACC (Admin Control Center), all versions ranging from HASP SRM 2.10 to Sentinel LDK 7.50, allows remote attackers to execute arbitrary code via language packs containing filenames longer than 1024 characters. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-093-01 - https://ics-cert.kaspersky.com/advisories/2017/07/28/klcert-17-002-sentinel-ldk-rte-language-packs-containing-malformed-filenames-lead-to-remote-code-execut
ories/2017/07/28/klcert-17-002-sentinel-ldk-rte-language-packs-containing-malformed-filenames-lead-to-remote-code-execution/ - https://cert-portal.siemens.com/productcert/pdf/ssa-727467.pdf - http://www.securityfocus.com/bid/102906 - https://www.iotvillage.org/slides_dc25/Sergey_Vlad_DEFCON_IOT_Village_Public2017.pptx - http://www.securityfocus.com/bid/102739 - https://ics-cert.us-cert.gov/advisories/ICSA-18-018-01
CVE ID: CVE-2017-11498 State: PUBLISHED Published: 2017-10-02T21:00:00 Last Updated: 2024-08-05T18:12:40.161Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in hasplms in Gemalto ACC (Admin Control Center), all versions ranging from HASP SRM 2.10 to Sentinel LDK 7.50, allows remote attackers to shut down the remote process (a denial of service) via a language pack (ZIP file) with invalid HTML files. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-093-01 - https://cert-portal.siemens.com/productcert/pdf/ssa-727467.pdf - http://www.securityfocus.com/bid/102906 - https://www.iotvillage.org/slides_dc25/S
.com/productcert/pdf/ssa-727467.pdf - http://www.securityfocus.com/bid/102906 - https://www.iotvillage.org/slides_dc25/Sergey_Vlad_DEFCON_IOT_Village_Public2017.pptx - https://ics-cert.kaspersky.com/advisories/2017/07/28/klcert-17-001-sentinel-ldk-rte-language-pack-with-invalid-html-files-leads-to-denial-of-service/ - http://www.securityfocus.com/bid/102739 - https://ics-cert.us-cert.gov/advisories/ICSA-18-018-01
CVE ID: CVE-2017-11499 State: PUBLISHED Published: 2017-07-25T13:00:00 Last Updated: 2024-08-05T18:12:40.348Z Vendors: n/a Products: n/a Problem Types: n/a Description: Node.js v4.0 through v4.8.3, all versions of v5.x, v6.0 through v6.11.0, v7.0 through v7.10.0, and v8.0 through v8.1.3 was susceptible to hash flooding remote DoS attacks as the HashTable seed was constant across a given released version of Node.js. This was a result of building with V8 snapshots enabled by default which caused the initially randomized seed to be overwritten on startup. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99959 - https://nodejs.org/en/blog/vulnerab
tes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99959 - https://nodejs.org/en/blog/vulnerability/july-2017-security-releases/ - https://access.redhat.com/errata/RHSA-2017:3002 - https://access.redhat.com/errata/RHSA-2017:2908
CVE ID: CVE-2017-11500 State: PUBLISHED Published: 2017-07-20T22:00:00Z Last Updated: 2024-09-16T20:31:52.424Z Vendors: n/a Products: n/a Problem Types: n/a Description: A directory traversal vulnerability exists in MetInfo 5.3.17. A remote attacker can use ..\ to delete any .zip file via the filenames parameter to /admin/system/database/filedown.php. Additional Analyst Notes: - CVE Program Container: References: - http://blackwolfsec.cc/2017/07/20/Metinfo-directory-traversal-bypass/
CVE ID: CVE-2017-11501 State: PUBLISHED Published: 2017-07-20T23:00:00 Last Updated: 2024-08-05T18:12:40.130Z Vendors: n/a Products: n/a Problem Types: n/a Description: NixOS 17.03 and earlier has an unintended default absence of SSL Certificate Validation for LDAP. The users.ldap NixOS module implements user authentication against LDAP servers via a PAM module. It was found that if TLS is enabled to connect to the LDAP server with users.ldap.useTLS, peer verification will be unconditionally disabled in /etc/ldap.conf. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2017/07/20/1 - https://groups.google.com/forum/#%21topic/nix-security-a
rences: - http://openwall.com/lists/oss-security/2017/07/20/1 - https://groups.google.com/forum/#%21topic/nix-security-announce/qrDU0KH_ZRk - https://github.com/NixOS/nixpkgs/issues/27506
CVE ID: CVE-2017-11502 State: PUBLISHED Published: 2017-07-20T23:00:00 Last Updated: 2024-08-05T18:12:40.317Z Vendors: n/a Products: n/a Problem Types: n/a Description: Technicolor DPC3928AD DOCSIS devices allow remote attackers to read arbitrary files via a request starting with "GET /../" on TCP port 4321. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.securiteam.com/index.php/archives/2911#more-2911
CVE ID: CVE-2017-11503 State: PUBLISHED Published: 2017-07-20T23:00:00 Last Updated: 2024-08-05T18:12:40.168Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPMailer 5.2.23 has XSS in the "From Email Address" and "To Email Address" fields of code_generator.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99293/ - https://packetstormsecurity.com/files/143138/phpmailer-xss.txt - https://cxsecurity.com/issue/WLB-2017060181 - http://www.securitytracker.com/id/1039026
CVE ID: CVE-2017-11505 State: PUBLISHED Published: 2017-07-21T16:00:00 Last Updated: 2024-08-05T18:12:40.272Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ReadOneJNGImage function in coders/png.c in ImageMagick through 6.9.9-0 and 7.x through 7.0.6-1 allows remote attackers to cause a denial of service (large loop and CPU consumption) via a malformed JNG file. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=867824 - https://github.com/ImageMagick/ImageMagick/issues/526
CVE ID: CVE-2017-11506 State: PUBLISHED Published: 2017-08-09T12:00:00Z Last Updated: 2024-09-17T03:34:29.415Z Vendors: Tenable Products: Nessus Problem Types: Man-in-the-Middle Description: When linking a Nessus scanner or agent to Tenable.io or other manager, Nessus 6.x before 6.11 does not verify the manager's TLS certificate when making the initial outgoing connection. This could allow man-in-the-middle attacks. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/tns-2017-11 - http://www.securitytracker.com/id/1039141
CVE ID: CVE-2017-11507 State: PUBLISHED Published: 2017-12-11T16:00:00Z Last Updated: 2024-09-16T22:20:50.230Z Vendors: Tenable Products: Check_MK Problem Types: Stored and Reflected Cross Site Scripting (XSS) Description: A cross site scripting (XSS) vulnerability exists in Check_MK versions 1.2.8x prior to 1.2.8p25 and 1.4.0x prior to 1.4.0p9, allowing an unauthenticated attacker to inject arbitrary HTML or JavaScript via the output_format parameter, and the username parameter of failed HTTP basic authentication attempts, which is returned unencoded in an internal server error page. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/t
error page. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2017-20 - http://mathias-kettner.com/check_mk_werks.php?werk_id=7661
CVE ID: CVE-2017-11508 State: PUBLISHED Published: 2017-11-02T17:00:00Z Last Updated: 2024-09-16T20:06:45.238Z Vendors: Tenable Products: SecurityCenter Problem Types: SQL Injection Description: SecurityCenter versions 5.5.0, 5.5.1 and 5.5.2 contain a SQL Injection vulnerability that could be exploited by an authenticated user with sufficient privileges to run diagnostic scans. An attacker could exploit this vulnerability by entering a crafted SQL query into the password field of a diagnostic scan within SecurityCenter. Successful exploitation of this vulnerability could allow an attacker to gain unauthorized access. Additional Analyst Notes: - CVE Program Container: References: - http://www
low an attacker to gain unauthorized access. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039804 - https://www.tenable.com/security/tns-2017-13
CVE ID: CVE-2017-11509 State: PUBLISHED Published: 2018-03-28T17:00:00Z Last Updated: 2024-09-16T22:24:43.514Z Vendors: Firebird Foundation Products: Firebird SQL Server Problem Types: Authenticated Remote Code Execution Description: An authenticated remote attacker can execute arbitrary code in Firebird SQL Server versions 2.5.7 and 3.0.2 by executing a malformed SQL statement. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/05/msg00005.html - https://www.tenable.com/security/research/tra-2017-36 - https://lists.debian.org/debian-lts-announce/2020/02/msg00036.html - https://lists.debian.org/debian-lts-announce/2021/11/msg000
lists.debian.org/debian-lts-announce/2020/02/msg00036.html - https://lists.debian.org/debian-lts-announce/2021/11/msg00018.html
CVE ID: CVE-2017-11510 State: PUBLISHED Published: 2018-03-28T17:00:00Z Last Updated: 2024-09-17T02:06:57.782Z Vendors: Wanscam Products: Wanscam HW0021 Problem Types: CWE-200 Description: An information leak exists in Wanscam's HW0021 network camera that allows an unauthenticated remote attacker to recover the administrator username and password via an ONVIF GetSnapshotUri request. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2017-33
CVE ID: CVE-2017-11511 State: PUBLISHED Published: 2017-11-08T22:00:00Z Last Updated: 2024-09-17T03:17:32.319Z Vendors: Zoho Products: ManageEngine ServiceDesk Problem Types: CWE-22 Description: The ManageEngine ServiceDesk 9.3.9328 is vulnerable to arbitrary file downloads due to improper restrictions of the pathname used in the filepath parameter for the download-file URL. An unauthenticated remote attacker can use this vulnerability to download arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2017-31 - http://www.securityfocus.com/bid/101788
CVE ID: CVE-2017-11512 State: PUBLISHED Published: 2017-11-08T22:00:00Z Last Updated: 2024-09-16T17:02:50.915Z Vendors: Zoho Products: ManageEngine ServiceDesk Problem Types: CWE-22 Description: The ManageEngine ServiceDesk 9.3.9328 is vulnerable to arbitrary file downloads due to improper restrictions of the pathname used in the name parameter for the download-snapshot URL. An unauthenticated remote attacker can use this vulnerability to download arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2017-31 - http://www.securityfocus.com/bid/101789
CVE ID: CVE-2017-11516 State: PUBLISHED Published: 2017-07-21T19:00:00 Last Updated: 2024-08-05T18:12:40.236Z Vendors: n/a Products: n/a Problem Types: n/a Description: An XSS vulnerability exists in framework/views/errorHandler/exception.php in Yii Framework 2.0.12 affecting the exception screen when debug mode is enabled, because $exception->errorInfo is mishandled. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/yiisoft/yii2/pull/14492 - https://github.com/yiisoft/yii2/pull/14492/files/feb4067de8a58f391a66e395192b0d83a8109b95
CVE ID: CVE-2017-11517 State: PUBLISHED Published: 2017-07-21T20:00:00Z Last Updated: 2024-09-17T01:25:55.226Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in GCoreServer.exe in the server in Geutebrueck Gcore 1.3.8.42 and 1.4.2.37 allows remote attackers to execute arbitrary code via a long URI in a GET request. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/41153/
CVE ID: CVE-2017-11519 State: PUBLISHED Published: 2017-07-21T21:00:00Z Last Updated: 2024-09-16T18:39:08.245Z Vendors: n/a Products: n/a Problem Types: n/a Description: passwd_recovery.lua on the TP-Link Archer C9(UN)_V2_160517 allows an attacker to reset the admin password by leveraging a predictable random number generator seed. This is fixed in C9(UN)_V2_170511. Additional Analyst Notes: - CVE Program Container: References: - http://www.tp-link.com/en/download/Archer-C9_V2.html#Firmware - https://devcraft.io/posts/2017/07/21/tp-link-archer-c9-admin-password-reset.html
CVE ID: CVE-2017-11521 State: PUBLISHED Published: 2017-07-22T18:00:00 Last Updated: 2024-08-05T18:12:40.129Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SdpContents::Session::Medium::parse function in resip/stack/SdpContents.cxx in reSIProcate 1.10.2 allows remote attackers to cause a denial of service (memory consumption) by triggering many media connections. Additional Analyst Notes: - CVE Program Container: References: - https://list.resiprocate.org/archive/resiprocate-users/msg02701.html - https://lists.debian.org/debian-lts-announce/2018/07/msg00031.html - https://github.com/resiprocate/resiprocate/pull/88 - https://lists.debian.org/debian-lts-announce/2021/12/msg000
.html - https://github.com/resiprocate/resiprocate/pull/88 - https://lists.debian.org/debian-lts-announce/2021/12/msg00029.html
CVE ID: CVE-2017-11522 State: PUBLISHED Published: 2017-07-22T21:00:00Z Last Updated: 2024-09-16T19:40:08.143Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WriteOnePNGImage function in coders/png.c in ImageMagick through 6.9.9-0 and 7.x through 7.0.6-1 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/commit/816ecab6c532ae086ff4186b3eaf4aa7092d536f - https://bugs.debian.org/869209 - https://github.com/ImageMagick/ImageMagick/issues/586
CVE ID: CVE-2017-11523 State: PUBLISHED Published: 2017-07-22T21:00:00 Last Updated: 2024-08-05T18:12:40.227Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ReadTXTImage function in coders/txt.c in ImageMagick through 6.9.9-0 and 7.x through 7.0.6-1 allows remote attackers to cause a denial of service (infinite loop) via a crafted file, because the end-of-file condition is not considered. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/commit/83e0f8ffd7eeb7661b0ff83257da23d24ca7f078 - https://bugs.debian.org/869210 - https://github.com/ImageMagick/ImageMagick/issues/591 - https://github.com/ImageMagick/ImageMagick/co
ebian.org/869210 - https://github.com/ImageMagick/ImageMagick/issues/591 - https://github.com/ImageMagick/ImageMagick/commit/a8f9c2aabed37cd6a728532d1aed13ae0f3dfd78 - https://www.debian.org/security/2017/dsa-4019 - https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html
CVE ID: CVE-2017-11524 State: PUBLISHED Published: 2017-07-23T03:00:00 Last Updated: 2024-08-05T18:12:40.273Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WriteBlob function in MagickCore/blob.c in ImageMagick before 6.9.8-10 and 7.x before 7.6.0-0 allows remote attackers to cause a denial of service (assertion failure and application exit) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99934 - https://github.com/ImageMagick/ImageMagick/issues/506 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=867798
CVE ID: CVE-2017-11525 State: PUBLISHED Published: 2017-07-23T03:00:00 Last Updated: 2024-08-05T18:12:40.293Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ReadCINImage function in coders/cin.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of service (memory consumption) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99931 - https://github.com/ImageMagick/ImageMagick/issues/519 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=867810
CVE ID: CVE-2017-11526 State: PUBLISHED Published: 2017-07-23T03:00:00 Last Updated: 2024-08-05T18:12:40.231Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ReadOneMNGImage function in coders/png.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of service (large loop and CPU consumption) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=867825 - http://www.securityfocus.com/bid/99932 - https://github.com/ImageMagick/ImageMagick/issues/527
CVE ID: CVE-2017-11527 State: PUBLISHED Published: 2017-07-23T03:00:00 Last Updated: 2024-08-05T18:12:40.277Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ReadDPXImage function in coders/dpx.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of service (memory consumption) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/523 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=867812
CVE ID: CVE-2017-11528 State: PUBLISHED Published: 2017-07-23T03:00:00 Last Updated: 2024-08-05T18:12:40.144Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ReadDIBImage function in coders/dib.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of service (memory leak) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=867811 - https://github.com/ImageMagick/ImageMagick/issues/522
CVE ID: CVE-2017-11529 State: PUBLISHED Published: 2017-07-23T03:00:00 Last Updated: 2024-08-05T18:12:40.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ReadMATImage function in coders/mat.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of service (memory leak) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/525 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=867823
CVE ID: CVE-2017-11530 State: PUBLISHED Published: 2017-07-23T03:00:00 Last Updated: 2024-08-05T18:12:40.346Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ReadEPTImage function in coders/ept.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of service (memory consumption) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=867821 - https://github.com/ImageMagick/ImageMagick/issues/524
CVE ID: CVE-2017-11531 State: PUBLISHED Published: 2017-07-23T03:00:00 Last Updated: 2024-08-05T18:12:40.245Z Vendors: n/a Products: n/a Problem Types: n/a Description: When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the WriteHISTOGRAMImage() function in coders/histogram.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/566 - http://www.securityfocus.com/bid/99998
CVE ID: CVE-2017-11532 State: PUBLISHED Published: 2017-07-23T03:00:00 Last Updated: 2024-08-05T18:12:40.196Z Vendors: n/a Products: n/a Problem Types: n/a Description: When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the WriteMPCImage() function in coders/mpc.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/563
CVE ID: CVE-2017-11533 State: PUBLISHED Published: 2017-07-23T03:00:00 Last Updated: 2024-08-05T18:12:40.322Z Vendors: n/a Products: n/a Problem Types: n/a Description: When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a heap-based buffer over-read in the WriteUILImage() function in coders/uil.c. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3681-1/ - https://github.com/ImageMagick/ImageMagick/issues/562 - https://www.debian.org/security/2017/dsa-4019 - https://www.debian.org/security/2018/dsa-4204
CVE ID: CVE-2017-11534 State: PUBLISHED Published: 2017-07-23T03:00:00 Last Updated: 2024-08-05T18:12:40.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the lite_font_map() function in coders/wmf.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/564
CVE ID: CVE-2017-11535 State: PUBLISHED Published: 2017-07-23T03:00:00 Last Updated: 2024-08-05T18:12:40.222Z Vendors: n/a Products: n/a Problem Types: n/a Description: When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a heap-based buffer over-read in the WritePSImage() function in coders/ps.c. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3681-1/ - https://www.debian.org/security/2017/dsa-4019 - https://github.com/ImageMagick/ImageMagick/issues/561 - https://www.debian.org/security/2018/dsa-4204