Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-14198 State: PUBLISHED Published: 2017-11-30T02:00:00 Last Updated: 2024-08-05T19:20:41.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Squiz Matrix before 5.3.6.1 and 5.4.x before 5.4.1.3. Authenticated users with permissions to edit design assets can cause Remote Code Execution (RCE) via a maliciously crafted time_format tag. Additional Analyst Notes: - CVE Program Container: References: - http://devalias.net/devalias/2017/09/07/squiz-matrix-multiple-vulnerabilities/
CVE ID: CVE-2017-14199 State: PUBLISHED Published: 2019-04-12T16:20:02 Last Updated: 2024-08-05T19:20:41.285Z Vendors: Zephyr Products: getaddrinfo Problem Types: Buffer Overflow Description: A buffer overflow has been found in the Zephyr Project's getaddrinfo() implementation in 1.9.0 and 1.10.0. Additional Analyst Notes: - CVE Program Container: References: - https://zephyrprojectsec.atlassian.net/browse/ZEPSEC-12 - https://github.com/zephyrproject-rtos/zephyr/pull/6158
CVE ID: CVE-2017-14200 State: REJECTED Published: 2020-05-11T22:26:11 Last Updated: 2020-05-11T22:26:11 Description: No description available.
CVE ID: CVE-2017-14201 State: PUBLISHED Published: 2019-08-29T00:44:16.325159Z Last Updated: 2024-09-17T00:46:36.051Z Vendors: Zephyr Products: shell Problem Types: CWE-416 Description: Use After Free vulnerability in the Zephyr shell allows a serial or telnet connected user to cause denial of service, and possibly remote code execution. This issue affects: Zephyr shell versions prior to 1.14.0 on all. Additional Analyst Notes: - CVE Program Container: References: - https://zephyrprojectsec.atlassian.net/browse/ZEPSEC-17 - https://docs.zephyrproject.org/1.14.0/releases/release-notes-1.14.html - https://github.com/zephyrproject-rtos/zephyr/pull/13260
CVE ID: CVE-2017-14202 State: PUBLISHED Published: 2019-08-29T00:44:13.046867Z Last Updated: 2024-09-17T01:16:38.814Z Vendors: Zephyr Products: shell Problem Types: CWE-119 Description: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in the shell component of Zephyr allows a serial or telnet connected user to cause a crash, possibly with arbitrary code execution. This issue affects: Zephyr shell versions prior to 1.14.0 on all. Additional Analyst Notes: - CVE Program Container: References: - https://docs.zephyrproject.org/1.14.0/releases/release-notes-1.14.html - https://zephyrprojectsec.atlassian.net/browse/ZEPSEC-18 - https://github.com/zephyrproject-r
s/release-notes-1.14.html - https://zephyrprojectsec.atlassian.net/browse/ZEPSEC-18 - https://github.com/zephyrproject-rtos/zephyr/pull/13048
CVE ID: CVE-2017-14203 State: REJECTED Published: 2020-03-06T23:50:23 Last Updated: 2020-03-06T23:50:23 Description: No description available.
CVE ID: CVE-2017-14204 State: REJECTED Published: 2020-03-06T23:50:23 Last Updated: 2020-03-06T23:50:23 Description: No description available.
CVE ID: CVE-2017-14205 State: REJECTED Published: 2020-03-06T23:50:24 Last Updated: 2020-03-06T23:50:24 Description: No description available.
CVE ID: CVE-2017-14206 State: REJECTED Published: 2020-03-06T23:50:24 Last Updated: 2020-03-06T23:50:24 Description: No description available.
CVE ID: CVE-2017-14207 State: REJECTED Published: 2020-03-06T23:50:24 Last Updated: 2020-03-06T23:50:24 Description: No description available.
CVE ID: CVE-2017-14208 State: REJECTED Published: 2020-03-06T23:50:25 Last Updated: 2020-03-06T23:50:25 Description: No description available.
CVE ID: CVE-2017-14219 State: PUBLISHED Published: 2017-09-07T22:00:00 Last Updated: 2024-08-05T19:20:41.291Z Vendors: n/a Products: n/a Problem Types: n/a Description: XSS (persistent) on the Intelbras Wireless N 150Mbps router with firmware WRN 240 allows attackers to steal wireless credentials without being connected to the network, related to userRpm/popupSiteSurveyRpm.htm and userRpm/WlanSecurityRpm.htm. The attack vector is a crafted ESSID, as demonstrated by an "airbase-ng -e" command. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/42633/ - http://whiteboyz.xyz/xss-roteador-intelbras-wrn-240.html
CVE ID: CVE-2017-14222 State: PUBLISHED Published: 2017-09-09T01:00:00 Last Updated: 2024-08-05T19:20:41.272Z Vendors: n/a Products: n/a Problem Types: n/a Description: In libavformat/mov.c in FFmpeg 3.3.3, a DoS in read_tfra() due to lack of an EOF (End of File) check might cause huge CPU and memory consumption. When a crafted MOV file, which claims a large "item_count" field in the header but does not contain sufficient backing data, is provided, the loop would consume huge CPU and memory resources, since there is no EOF check inside the loop. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100701 - https://github.com/FFmpeg/FFmpeg/commit/9
CVE Program Container: References: - http://www.securityfocus.com/bid/100701 - https://github.com/FFmpeg/FFmpeg/commit/9cb4eb772839c5e1de2855d126bf74ff16d13382 - http://www.debian.org/security/2017/dsa-3996
CVE ID: CVE-2017-14223 State: PUBLISHED Published: 2017-09-09T01:00:00 Last Updated: 2024-08-05T19:20:41.244Z Vendors: n/a Products: n/a Problem Types: n/a Description: In libavformat/asfdec_f.c in FFmpeg 3.3.3, a DoS in asf_build_simple_index() due to lack of an EOF (End of File) check might cause huge CPU consumption. When a crafted ASF file, which claims a large "ict" field in the header but does not contain sufficient backing data, is provided, the for loop would consume huge CPU and memory resources, since there is no EOF check inside the loop. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100703 - https://lists.debian.org/debian-lts-a
: - CVE Program Container: References: - http://www.securityfocus.com/bid/100703 - https://lists.debian.org/debian-lts-announce/2019/02/msg00005.html - https://github.com/FFmpeg/FFmpeg/commit/afc9c683ed9db01edb357bc8c19edad4282b3a97 - http://www.debian.org/security/2017/dsa-3996
CVE ID: CVE-2017-14224 State: PUBLISHED Published: 2017-09-09T01:00:00 Last Updated: 2024-08-05T19:20:41.268Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap-based buffer overflow in WritePCXImage in coders/pcx.c in ImageMagick 7.0.6-8 Q16 allows remote attackers to cause a denial of service or code execution via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2017/dsa-4040 - https://usn.ubuntu.com/3681-1/ - https://security.gentoo.org/glsa/201711-07 - https://www.debian.org/security/2017/dsa-4032 - http://www.securityfocus.com/bid/100702 - https://github.com/ImageMagick/ImageMagick/issues/733
CVE ID: CVE-2017-14225 State: PUBLISHED Published: 2017-09-09T08:00:00 Last Updated: 2024-08-05T19:20:41.280Z Vendors: n/a Products: n/a Problem Types: n/a Description: The av_color_primaries_name function in libavutil/pixdesc.c in FFmpeg 3.3.3 may return a NULL pointer depending on a value contained in a file, but callers do not anticipate this, as demonstrated by the avcodec_string function in libavcodec/utils.c, leading to a NULL pointer dereference. (It is also conceivable that there is security relevance for a NULL pointer dereference in av_color_primaries_name calls within the ffprobe command-line program.) Additional Analyst Notes: - CVE Program Container: References: - https://github
ithin the ffprobe command-line program.) Additional Analyst Notes: - CVE Program Container: References: - https://github.com/FFmpeg/FFmpeg/commit/837cb4325b712ff1aab531bf41668933f61d75d2 - http://www.securityfocus.com/bid/100704 - https://lists.ffmpeg.org/pipermail/ffmpeg-devel/2017-August/215198.html - http://www.debian.org/security/2017/dsa-3996
CVE ID: CVE-2017-14226 State: PUBLISHED Published: 2017-09-09T08:00:00Z Last Updated: 2024-09-16T19:10:14.180Z Vendors: n/a Products: n/a Problem Types: n/a Description: WP1StylesListener.cpp, WP5StylesListener.cpp, and WP42StylesListener.cpp in libwpd 0.10.1 mishandle iterators, which allows remote attackers to cause a denial of service (heap-based buffer over-read in the WPXTableList class in WPXTable.cpp). This vulnerability can be triggered in LibreOffice before 5.3.7. It may lead to suffering a remote attack against a LibreOffice application. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1489337 - https://sourceforge.net/p/l
- CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1489337 - https://sourceforge.net/p/libwpd/code/ci/f40827b3eae260ce657c67d9fecc855b09dea3c3/ - https://sourceforge.net/p/libwpd/code/ci/0329a9c57f9b3b0efa0f09a5235dfd90236803a5/ - https://bugs.documentfoundation.org/show_bug.cgi?id=112269 - https://cgit.freedesktop.org/libreoffice/core/commit/?id=dd89afa6ee8166b69e7a1e86f22616ca8fc122c9 - https://sourceforge.net/p/libwpd/tickets/14/
CVE ID: CVE-2017-14227 State: PUBLISHED Published: 2017-09-09T08:00:00.000Z Last Updated: 2025-11-03T19:25:19.804Z Vendors: n/a Products: n/a Problem Types: n/a Description: In MongoDB libbson 1.7.0, the bson_iter_codewscope function in bson-iter.c miscalculates a bson_utf8_validate length argument, which allows remote attackers to cause a denial of service (heap-based buffer over-read in the bson_utf8_validate function in bson-utf8.c), as demonstrated by bson-to-json.c. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1489362 - http://www.securityfocus.com/bid/100825 - https://bugzilla.redhat.com/show_bug.cgi?id=1489355 - https://b
i?id=1489362 - http://www.securityfocus.com/bid/100825 - https://bugzilla.redhat.com/show_bug.cgi?id=1489355 - https://bugzilla.redhat.com/show_bug.cgi?id=1489356
CVE ID: CVE-2017-14228 State: PUBLISHED Published: 2017-09-09T08:00:00 Last Updated: 2024-08-05T19:20:41.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Netwide Assembler (NASM) 2.14rc0, there is an illegal address access in the function paste_tokens() in preproc.c, aka a NULL pointer dereference. It will lead to remote denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.nasm.us/show_bug.cgi?id=3392423 - https://usn.ubuntu.com/3694-1/ - https://security.gentoo.org/glsa/201903-19
CVE ID: CVE-2017-14229 State: PUBLISHED Published: 2017-09-09T08:00:00 Last Updated: 2024-08-05T19:20:41.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is an infinite loop in the jpc_dec_tileinit function in jpc/jpc_dec.c of Jasper 2.0.13. It will lead to a remote denial of service attack. Additional Analyst Notes: - CVE Program Container: References: - https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html - http://www.securityfocus.com/bid/100861 - https://github.com/mdadams/jasper/issues/146 - https://security.gentoo.org/glsa/201908-03
CVE ID: CVE-2017-14230 State: PUBLISHED Published: 2017-09-10T07:00:00Z Last Updated: 2024-09-16T16:28:43.074Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the mboxlist_do_find function in imap/mboxlist.c in Cyrus IMAP before 3.0.4, an off-by-one error in prefix calculation for the LIST command caused use of uninitialized memory, which might allow remote attackers to obtain sensitive information or cause a denial of service (daemon crash) via a 'LIST "" "Other Users"' command. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cyrusimap/cyrus-imapd/commit/6bd33275368edfa71ae117de895488584678ac79 - https://lists.andrew.cmu.edu/pipermail/cyrus-
om/cyrusimap/cyrus-imapd/commit/6bd33275368edfa71ae117de895488584678ac79 - https://lists.andrew.cmu.edu/pipermail/cyrus-announce/2017-September/000145.html - https://www.cyrusimap.org/imap/download/release-notes/3.0/x/3.0.4.html - https://github.com/cyrusimap/cyrus-imapd/issues/2132
CVE ID: CVE-2017-14231 State: PUBLISHED Published: 2017-09-10T07:00:00Z Last Updated: 2024-09-16T19:51:19.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: GeniXCMS before 1.1.0 allows remote attackers to cause a denial of service (account blockage) by leveraging the mishandling of certain username substring relationships, such as the admin<script> username versus the admin username, related to register.php, User.class.php, and Type.class.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/semplon/GeniXCMS/releases/tag/v1.1.0 - https://github.com/semplon/GeniXCMS/issues/78
CVE ID: CVE-2017-14232 State: PUBLISHED Published: 2019-08-15T16:24:28 Last Updated: 2024-08-05T19:20:41.240Z Vendors: n/a Products: n/a Problem Types: n/a Description: The read_chunk function in flif-dec.cpp in Free Lossless Image Format (FLIF) 0.3 allows remote attackers to cause a denial of service (invalid memory read and application crash) via a crafted flif file. Additional Analyst Notes: - CVE Program Container: References: - https://cxsecurity.com/cveshow/CVE-2017-14232 - https://www.oracle.com/security-alerts/cpuapr2020.html
CVE ID: CVE-2017-14238 State: PUBLISHED Published: 2017-09-11T09:00:00 Last Updated: 2024-08-05T19:20:41.316Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin/menus/edit.php in Dolibarr ERP/CRM version 6.0.0 allows remote attackers to execute arbitrary SQL commands via the menuId parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Dolibarr/dolibarr/commit/d26b2a694de30f95e46ea54ea72cc54f0d38e548
CVE ID: CVE-2017-14239 State: PUBLISHED Published: 2017-09-11T09:00:00 Last Updated: 2024-08-05T19:20:41.281Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Dolibarr ERP/CRM 6.0.0 allow remote authenticated users to inject arbitrary web script or HTML via the (1) CompanyName, (2) CompanyAddress, (3) CompanyZip, (4) CompanyTown, (5) Fax, (6) EMail, (7) Web, (8) ManagingDirectors, (9) Note, (10) Capital, (11) ProfId1, (12) ProfId2, (13) ProfId3, (14) ProfId4, (15) ProfId5, or (16) ProfId6 parameter to htdocs/admin/company.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Dolibarr/dolibarr/
dmin/company.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Dolibarr/dolibarr/commit/d26b2a694de30f95e46ea54ea72cc54f0d38e548
CVE ID: CVE-2017-14240 State: PUBLISHED Published: 2017-09-11T09:00:00 Last Updated: 2024-08-05T19:20:41.229Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a sensitive information disclosure vulnerability in document.php in Dolibarr ERP/CRM version 6.0.0 via the file parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Dolibarr/dolibarr/commit/d26b2a694de30f95e46ea54ea72cc54f0d38e548
CVE ID: CVE-2017-14241 State: PUBLISHED Published: 2017-09-11T09:00:00 Last Updated: 2024-08-05T19:20:41.254Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Dolibarr ERP/CRM 6.0.0 allows remote authenticated users to inject arbitrary web script or HTML via the Title parameter to htdocs/admin/menus/edit.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Dolibarr/dolibarr/commit/d26b2a694de30f95e46ea54ea72cc54f0d38e548
CVE ID: CVE-2017-14242 State: PUBLISHED Published: 2017-09-11T09:00:00 Last Updated: 2024-08-05T19:20:41.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in don/list.php in Dolibarr version 6.0.0 allows remote attackers to execute arbitrary SQL commands via the statut parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Dolibarr/dolibarr/commit/33e2179b65331d9d9179b59d746817c5be1fecdb
CVE ID: CVE-2017-14243 State: PUBLISHED Published: 2017-09-17T19:00:00 Last Updated: 2024-08-05T19:20:41.241Z Vendors: n/a Products: n/a Problem Types: n/a Description: An authentication bypass vulnerability on UTStar WA3002G4 ADSL Broadband Modem WA3002G4-0021.01 devices allows attackers to directly access administrative settings and obtain cleartext credentials from HTML source, as demonstrated by info.cgi, upload.cgi, backupsettings.cgi, pppoe.cgi, resetrouter.cgi, and password.cgi. Additional Analyst Notes: - CVE Program Container: References: - https://www.techipick.com/iball-baton-adsl2-home-router-utstar-wa3002g4-adsl-broadband-modem-authentication-bypass - https://www.exploit-db.com/
m/iball-baton-adsl2-home-router-utstar-wa3002g4-adsl-broadband-modem-authentication-bypass - https://www.exploit-db.com/exploits/42739/
CVE ID: CVE-2017-14244 State: PUBLISHED Published: 2017-09-17T19:00:00 Last Updated: 2024-08-05T19:20:41.336Z Vendors: n/a Products: n/a Problem Types: n/a Description: An authentication bypass vulnerability on iBall Baton ADSL2+ Home Router FW_iB-LR7011A_1.0.2 devices potentially allows attackers to directly access administrative router settings by crafting URLs with a .cgi extension, as demonstrated by /info.cgi and /password.cgi. Additional Analyst Notes: - CVE Program Container: References: - https://www.techipick.com/iball-baton-adsl2-home-router-utstar-wa3002g4-adsl-broadband-modem-authentication-bypass - https://www.exploit-db.com/exploits/42740/
CVE ID: CVE-2017-14245 State: PUBLISHED Published: 2017-09-21T13:00:00 Last Updated: 2024-08-05T19:20:41.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: An out of bounds read in the function d2alaw_array() in alaw.c of libsndfile 1.0.28 may lead to a remote DoS attack or information disclosure, related to mishandling of the NAN and INFINITY floating-point values. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/erikd/libsndfile/issues/317 - https://lists.debian.org/debian-lts-announce/2018/12/msg00016.html - https://usn.ubuntu.com/4013-1/ - https://security.gentoo.org/glsa/202007-65 - https://lists.debian.org/debian-lts-announce/2020/10/msg0
ntu.com/4013-1/ - https://security.gentoo.org/glsa/202007-65 - https://lists.debian.org/debian-lts-announce/2020/10/msg00030.html
CVE ID: CVE-2017-14246 State: PUBLISHED Published: 2017-09-21T13:00:00 Last Updated: 2024-08-05T19:20:41.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: An out of bounds read in the function d2ulaw_array() in ulaw.c of libsndfile 1.0.28 may lead to a remote DoS attack or information disclosure, related to mishandling of the NAN and INFINITY floating-point values. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/erikd/libsndfile/issues/317 - https://lists.debian.org/debian-lts-announce/2018/12/msg00016.html - https://usn.ubuntu.com/4013-1/ - https://security.gentoo.org/glsa/202007-65 - https://lists.debian.org/debian-lts-announce/2020/10/msg0
CVE ID: CVE-2017-14247 State: PUBLISHED Published: 2017-09-11T09:00:00 Last Updated: 2024-08-05T19:20:41.196Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection exists in the EyesOfNetwork web interface (aka eonweb) 5.1-0 via the user_id cookie to header.php, a related issue to CVE-2017-1000060. Additional Analyst Notes: - CVE Program Container: References: - http://www.sstrunk.com/cve/eonweb_Translator.class.html
CVE ID: CVE-2017-14248 State: PUBLISHED Published: 2017-09-11T09:00:00 Last Updated: 2024-08-05T19:20:41.295Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap-based buffer over-read in SampleImage() in MagickCore/resize.c in ImageMagick 7.0.6-8 Q16 allows remote attackers to cause a denial of service via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/717 - https://security.gentoo.org/glsa/201711-07
CVE ID: CVE-2017-14249 State: PUBLISHED Published: 2017-09-11T09:00:00 Last Updated: 2024-08-05T19:20:41.263Z Vendors: n/a Products: n/a Problem Types: n/a Description: ImageMagick 7.0.6-8 Q16 mishandles EOF checks in ReadMPCImage in coders/mpc.c, leading to division by zero in GetPixelCacheTileSize in MagickCore/cache.c, allowing remote attackers to cause a denial of service via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3681-1/ - https://security.gentoo.org/glsa/201711-07 - https://github.com/ImageMagick/ImageMagick/issues/708 - https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html - https://lists.debian.org/debian-l
gick/issues/708 - https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html - https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html
CVE ID: CVE-2017-14250 State: REJECTED Published: N/A Last Updated: 2023-08-14T00:00:00 Description: No description available.
CVE ID: CVE-2017-14251 State: PUBLISHED Published: 2017-09-11T09:00:00 Last Updated: 2024-08-05T19:20:41.287Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted File Upload vulnerability in the fileDenyPattern in sysext/core/Classes/Core/SystemEnvironmentBuilder.php in TYPO3 7.6.0 to 7.6.21 and 8.0.0 to 8.7.4 allows remote authenticated users to upload files with a .pht extension and consequently execute arbitrary PHP code. Additional Analyst Notes: - CVE Program Container: References: - https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2017-007/ - http://www.securityfocus.com/bid/100620 - http://www.securitytracker.com/id/1039295 - http://blog
o3-core-sa-2017-007/ - http://www.securityfocus.com/bid/100620 - http://www.securitytracker.com/id/1039295 - http://blog.emaze.net/2017/12/typo3-unrestricted-file-upload-remote.html
CVE ID: CVE-2017-14252 State: PUBLISHED Published: 2017-09-11T09:00:00 Last Updated: 2024-08-05T19:20:41.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection exists in the EyesOfNetwork web interface (aka eonweb) 5.1-0 via the group_id cookie to side.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.sstrunk.com/cve/eonweb_side.md
CVE ID: CVE-2017-14257 State: PUBLISHED Published: 2017-09-11T09:00:00 Last Updated: 2024-08-05T19:20:41.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the SDK in Bento4 1.5.0-616, AP4_AtomSampleTable::GetSample in Core/Ap4AtomSampleTable.cpp contains a Read Memory Access Violation vulnerability. It is possible to exploit this vulnerability by opening a crafted .MP4 file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/axiomatic-systems/Bento4/issues/181
CVE ID: CVE-2017-14258 State: PUBLISHED Published: 2017-09-11T09:00:00 Last Updated: 2024-08-05T19:20:41.247Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the SDK in Bento4 1.5.0-616, SetItemCount in Core/Ap4StscAtom.h file contains a Write Memory Access Violation vulnerability. It is possible to exploit this vulnerability and possibly execute arbitrary code by opening a crafted .MP4 file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/axiomatic-systems/Bento4/issues/181
CVE ID: CVE-2017-14259 State: PUBLISHED Published: 2017-09-11T09:00:00 Last Updated: 2024-08-05T19:20:41.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the SDK in Bento4 1.5.0-616, the AP4_StscAtom class in Ap4StscAtom.cpp contains a Write Memory Access Violation vulnerability. It is possible to exploit this vulnerability and possibly execute arbitrary code by opening a crafted .MP4 file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/axiomatic-systems/Bento4/issues/181
CVE ID: CVE-2017-14260 State: PUBLISHED Published: 2017-09-11T09:00:00 Last Updated: 2024-08-05T19:20:41.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the SDK in Bento4 1.5.0-616, the AP4_StssAtom class in Ap4StssAtom.cpp contains a Write Memory Access Violation vulnerability. It is possible to exploit this vulnerability and possibly execute arbitrary code by opening a crafted .MP4 file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/axiomatic-systems/Bento4/issues/181