Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-2804 State: PUBLISHED Published: 2018-04-24T19:00:00Z Last Updated: 2024-09-16T17:48:25.893Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Corel Products: PHOTO-PAINT Problem Types: Out of bounds Write Description: A remote out of bound write vulnerability exists in the TIFF parsing functionality of Core PHOTO-PAINT X8 18.1.0.661. A specially crafted TIFF file can cause a vulnerability resulting in potential memory corruption. An attacker can send the victim a specific TIFF file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99900 - https://www.talosintelligenc
lyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99900 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0298
CVE ID: CVE-2017-2805 State: PUBLISHED Published: 2017-06-21T13:00:00 Last Updated: 2024-08-05T14:02:07.703Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Foscam Products: Indoor IP Camera C1 Series Problem Types: remote code execution Description: An exploitable stack-based buffer overflow vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera. A specially crafted http request can cause a stack-based buffer overflow resulting in overwriting arbitrary data on the stack frame. An attacker can simply send an http request to the device to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: Refe
end an http request to the device to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99190 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0299
CVE ID: CVE-2017-2806 State: PUBLISHED Published: 2017-04-20T18:00:00 Last Updated: 2024-08-05T14:02:07.911Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Lexmark Products: Perceptive Document Filters Problem Types: Out of bounds read Description: An exploitable arbitrary read exists in the XLS parsing of the Lexmark Perspective Document Filters conversion functionality. A crafted XLS document can lead to a arbitrary read resulting in memory disclosure. The vulnerability was confirmed on versions 11.3.0.2228 and 11.3.0.2400 Additional Analyst Notes: - CVE Program Container: References: - http://www.talosintelligence.com/reports/TALOS-2017-0302/
CVE ID: CVE-2017-2807 State: PUBLISHED Published: 2017-09-05T18:00:00Z Last Updated: 2024-09-16T16:42:54.685Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Ledger Products: Ledger CLI Problem Types: remote code execution Description: An exploitable buffer overflow vulnerability exists in the tag parsing functionality of Ledger-CLI 3.1.1. A specially crafted journal file can cause an integer underflow resulting in code execution. An attacker can construct a malicious journal file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100543 - http://lists.opensuse.org/opensuse-security-
Program Container: References: - http://www.securityfocus.com/bid/100543 - http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00031.html - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00029.html - https://security.gentoo.org/glsa/202004-05 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0303
CVE ID: CVE-2017-2808 State: PUBLISHED Published: 2017-09-05T18:00:00Z Last Updated: 2024-09-16T20:32:31.398Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Ledger Products: Ledger CLI Problem Types: arbitrary code execution Description: An exploitable use-after-free vulnerability exists in the account parsing component of the Ledger-CLI 3.1.1. A specially crafted ledger file can cause a use-after-free vulnerability resulting in arbitrary code execution. An attacker can convince a user to load a journal file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100546 - http://lists.op
ditional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100546 - http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00031.html - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00029.html - https://security.gentoo.org/glsa/202004-05 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0304
CVE ID: CVE-2017-2809 State: PUBLISHED Published: 2017-09-14T19:00:00Z Last Updated: 2024-09-16T20:53:03.863Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Tomohiro Nakamura Products: ansible-vault Problem Types: code execution Description: An exploitable vulnerability exists in the yaml loading functionality of ansible-vault before 1.0.5. A specially crafted vault can execute arbitrary python commands resulting in command execution. An attacker can insert python into the vault to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100824 - https://github.com/tomoh1r/ansible-vault/blob
Program Container: References: - http://www.securityfocus.com/bid/100824 - https://github.com/tomoh1r/ansible-vault/blob/v1.0.5/CHANGES.txt - https://github.com/tomoh1r/ansible-vault/issues/4 - https://github.com/tomoh1r/ansible-vault/commit/3f8f659ef443ab870bb19f95d43543470168ae04 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0305
CVE ID: CVE-2017-2810 State: PUBLISHED Published: 2017-06-14T13:00:00 Last Updated: 2024-08-05T14:02:07.828Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Kenneth Reitz Products: Tablib Problem Types: remote code execution Description: An exploitable vulnerability exists in the Databook loading functionality of Tablib 0.11.4. A yaml loaded Databook can execute arbitrary python commands resulting in command execution. An attacker can insert python into loaded yaml to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99076 - https://security.gentoo.org/glsa/201811-18 - https://talosint
er: References: - http://www.securityfocus.com/bid/99076 - https://security.gentoo.org/glsa/201811-18 - https://talosintelligence.com/vulnerability_reports/TALOS-2017-0307
CVE ID: CVE-2017-2811 State: PUBLISHED Published: 2018-04-24T19:00:00Z Last Updated: 2024-09-16T20:06:25.533Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Kakadu Software Products: Kakadu SDK Problem Types: remote code execution Description: A code execution vulnerability exists in the Kakadu SDK 7.9's parsing of compressed JPEG 2000 images. A specially crafted JPEG 2000 file can be read by the program, and can lead to an out of bounds write causing an exploitable condition to arise. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100141 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-03
ences: - http://www.securityfocus.com/bid/100141 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0308
CVE ID: CVE-2017-2812 State: PUBLISHED Published: 2018-04-24T19:00:00Z Last Updated: 2024-09-16T18:59:16.398Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Kakadu Software Products: Kakadu SDK Problem Types: remote code execution Description: A code execution vulnerability exists in the kdu_buffered_expand function of the Kakadu SDK 7.9. A specially crafted JPEG 2000 file can be read by the program and can lead to an out of bounds write causing an exploitable condition to arise. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100140 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0309
CVE ID: CVE-2017-2813 State: PUBLISHED Published: 2017-06-21T19:00:00 Last Updated: 2024-08-05T14:02:07.858Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Irfanview Products: Irfanview Problem Types: arbitrary code execution Description: An exploitable integer overflow vulnerability exists in the JPEG 2000 parser functionality of IrfanView 4.44. A specially crafted jpeg2000 image can cause an integer overflow leading to wrong memory allocation resulting in arbitrary code execution. Vulnerability can be triggered by viewing the image in via the application or by using thumbnailing feature of IrfanView. Additional Analyst Notes: - CVE Program Container: Refere
the application or by using thumbnailing feature of IrfanView. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98046 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0310
CVE ID: CVE-2017-2814 State: PUBLISHED Published: 2017-07-12T17:00:00Z Last Updated: 2024-09-16T19:15:46.393Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Poppler Products: Poppler Problem Types: heap overflow Description: An exploitable heap overflow vulnerability exists in the image rendering functionality of Poppler 0.53.0. A specifically crafted pdf can cause an image resizing after allocation has already occurred, resulting in heap corruption which can lead to code execution. An attacker controlled PDF file can be used to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99497
vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99497 - https://talosintelligence.com/vulnerability_reports/TALOS-2017-0311
CVE ID: CVE-2017-2815 State: PUBLISHED Published: 2018-05-15T17:00:00 Last Updated: 2024-08-05T14:02:07.787Z Severity: HIGH (CVSS 8.1 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H) Vendors: Talos Products: Open Fire User Import Export Plugin Problem Types: XML External Entity Injection Description: An exploitable XML entity injection vulnerability exists in OpenFire User Import Export Plugin 2.6.0. A specially crafted web request can cause the retrieval of arbitrary files or denial of service. An authenticated attacker can send a crafted web request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_r
lity. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0316
CVE ID: CVE-2017-2816 State: PUBLISHED Published: 2017-09-13T18:00:00Z Last Updated: 2024-09-17T00:11:42.495Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: LibOFX Products: LibOfx Problem Types: buffer overflow Description: An exploitable buffer overflow vulnerability exists in the tag parsing functionality of LibOFX 0.9.11. A specially crafted OFX file can cause a write out of bounds resulting in a buffer overflow on the stack. An attacker can construct a malicious OFX file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2017/11/msg00038.html - http://www.securityfo
gram Container: References: - https://lists.debian.org/debian-lts-announce/2017/11/msg00038.html - http://www.securityfocus.com/bid/100828 - https://security.gentoo.org/glsa/201908-26 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0317
CVE ID: CVE-2017-2817 State: PUBLISHED Published: 2017-05-24T14:00:00 Last Updated: 2024-08-05T14:02:07.826Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Power Software Products: PowerISO Problem Types: remote code execution Description: A stack buffer overflow vulnerability exists in the ISO parsing functionality of Power Software Ltd PowerISO 6.8. A specially crafted ISO file can cause a vulnerability resulting in potential code execution. An attacker can send a specific ISO file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2017-0318
CVE ID: CVE-2017-2818 State: PUBLISHED Published: 2017-07-12T17:00:00Z Last Updated: 2024-09-17T04:29:31.861Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Poppler Products: Poppler Problem Types: heap overflow Description: An exploitable heap overflow vulnerability exists in the image rendering functionality of Poppler 0.53.0. A specifically crafted PDF can cause an overly large number of color components during image rendering, resulting in heap corruption. An attacker controlled PDF file can be used to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99497 - https://talosintellig
nal Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99497 - https://talosintelligence.com/vulnerability_reports/TALOS-2017-0319
CVE ID: CVE-2017-2819 State: PUBLISHED Published: 2017-05-24T14:00:00 Last Updated: 2024-08-05T14:02:07.711Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Hancom Products: Hangul Word Processor in Thinkfree Office NEO Trial Word Problem Types: heap-based buffer overflow Description: An exploitable heap-based buffer overflow exists in the Hangul Word Processor component (version 9.6.1.4350) of Hancom Thinkfree Office NEO 9.6.1.4902. A specially crafted document stream can cause an integer underflow resulting in a buffer overflow which can lead to code execution under the context of the application. An attacker can entice a user to open up a document in order
ad to code execution under the context of the application. An attacker can entice a user to open up a document in order to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2017-0320
CVE ID: CVE-2017-2820 State: PUBLISHED Published: 2017-07-12T17:00:00Z Last Updated: 2024-09-16T17:57:59.150Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Poppler Products: Poppler Problem Types: heap overflow Description: An exploitable integer overflow vulnerability exists in the JPEG 2000 image parsing functionality of freedesktop.org Poppler 0.53.0. A specially crafted PDF file can lead to an integer overflow causing out of bounds memory overwrite on the heap resulting in potential arbitrary code execution. To trigger this vulnerability, a victim must open the malicious PDF in an application using this library. Additional Analyst Notes: - CVE Program Co
y, a victim must open the malicious PDF in an application using this library. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99497 - https://talosintelligence.com/vulnerability_reports/TALOS-2017-0321
CVE ID: CVE-2017-2821 State: PUBLISHED Published: 2017-09-05T18:00:00Z Last Updated: 2024-09-16T18:56:16.872Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Lexmark Products: Perceptive Document Filters Problem Types: direct code execution Description: An exploitable use-after-free exists in the PDF parsing functionality of Lexmark Perspective Document Filters 11.3.0.2400 and 11.4.0.2452. A crafted PDF document can lead to a use-after-free resulting in direct code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100510 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0322
CVE ID: CVE-2017-2822 State: PUBLISHED Published: 2017-09-05T18:00:00Z Last Updated: 2024-09-16T23:00:22.901Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Lexmark Products: Perceptive Document Filters Problem Types: remote code execution Description: An exploitable code execution vulnerability exists in the image rendering functionality of Lexmark Perceptive Document Filters 11.3.0.2400. A specifically crafted PDF can cause a function call on a corrupted DCTStream to occur, resulting in user controlled data being written to the stack. A maliciously crafted PDF file can be used to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container:
liciously crafted PDF file can be used to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100512 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0323
CVE ID: CVE-2017-2823 State: PUBLISHED Published: 2017-05-24T14:00:00 Last Updated: 2024-08-05T14:09:16.357Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Power Software Products: PowerIso Problem Types: remote code execution Description: A use-after-free vulnerability exists in the .ISO parsing functionality of PowerISO 6.8. A specially crafted .ISO file can cause a vulnerability resulting in potential code execution. An attacker can send a specific .ISO file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2017-0324
CVE ID: CVE-2017-2824 State: PUBLISHED Published: 2017-05-24T14:00:00 Last Updated: 2024-08-05T14:09:16.849Z Vendors: Zabbix Products: Zabbix Server Problem Types: remote code execution Description: An exploitable code execution vulnerability exists in the trapper command functionality of Zabbix Server 2.4.X. A specially crafted set of packets can cause a command injection resulting in remote code execution. An attacker can make requests from an active Zabbix Proxy to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2017-0325 - http://www.securityfocus.com/bid/98083 - http://www.debian.org/s
ntelligence.com/vulnerability_reports/TALOS-2017-0325 - http://www.securityfocus.com/bid/98083 - http://www.debian.org/security/2017/dsa-3937
CVE ID: CVE-2017-2825 State: PUBLISHED Published: 2018-04-20T21:00:00Z Last Updated: 2024-09-16T23:05:42.353Z Vendors: Talos Products: Zabbix Problem Types: remote code execution Description: In the trapper functionality of Zabbix Server 2.4.x, specifically crafted trapper packets can pass database logic checks, resulting in database writes. An attacker can set up a Man-in-the-Middle server to alter trapper requests made between an active Zabbix proxy and Server to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2017-0326 - http://www.securityfocus.com/bid/98094 - https://www.debian.org/sec
lligence.com/vulnerability_reports/TALOS-2017-0326 - http://www.securityfocus.com/bid/98094 - https://www.debian.org/security/2017/dsa-3937
CVE ID: CVE-2017-2826 State: PUBLISHED Published: 2018-04-09T20:00:00Z Last Updated: 2024-09-17T00:15:28.741Z Vendors: Talos Products: Zabbix Problem Types: server config proxy vulnerability Description: An information disclosure vulnerability exists in the iConfig proxy request of Zabbix server 2.4.X. A specially crafted iConfig proxy request can cause the Zabbix server to send the configuration information of any Zabbix proxy, resulting in information disclosure. An attacker can make requests from an active Zabbix proxy to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2017-0327 - https:
tes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2017-0327 - https://lists.debian.org/debian-lts-announce/2019/03/msg00010.html
CVE ID: CVE-2017-2827 State: PUBLISHED Published: 2017-06-21T13:00:00 Last Updated: 2024-08-05T14:09:16.355Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Foscam Products: Indoor IP Camera C1 Series Problem Types: command injection vulnerability Description: An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.37. A specially crafted HTTP request can allow for a user to inject arbitrary shell characters during account creation resulting in command injection. An attacker can simply send an HTTP request to the device to trigger this vulnerability. Additi
ng in command injection. An attacker can simply send an HTTP request to the device to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99184 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0328
CVE ID: CVE-2017-2828 State: PUBLISHED Published: 2017-06-21T13:00:00 Last Updated: 2024-08-05T14:09:16.676Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Foscam Products: Indoor IP Camera C1 Series Problem Types: command injection vulnerability Description: An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.37. A specially crafted HTTP request can allow for a user to inject arbitrary shell characters during account creation resulting in command injection. An attacker can simply send an HTTP request to the device to trigger this vulnerability. Additi
ng in command injection. An attacker can simply send an HTTP request to the device to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99184 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0329
CVE ID: CVE-2017-2829 State: PUBLISHED Published: 2017-06-21T13:00:00 Last Updated: 2024-08-05T14:09:16.799Z Severity: HIGH (CVSS 7.7 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N) Vendors: Foscam Products: Indoor IP Camera C1 Series Problem Types: directory traversal vulnerability Description: An exploitable directory traversal vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.37. A specially crafted HTTP request can cause the application to read a file from disk but a failure to adequately filter characters results in allowing an attacker to specify a file outside of a directory. An attacker can simply send an HTT
characters results in allowing an attacker to specify a file outside of a directory. An attacker can simply send an HTTP request to the device to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99250 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0330
CVE ID: CVE-2017-2830 State: PUBLISHED Published: 2017-06-21T13:00:00 Last Updated: 2024-08-05T14:09:17.394Z Severity: HIGH (CVSS 8.1 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H) Vendors: Foscam Products: Indoor IP Camera C1 Series Problem Types: buffer overflow Description: An exploitable buffer overflow vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.37. A specially crafted HTTP request can cause a buffer overflow resulting in overwriting arbitrary data. An attacker can simply send an HTTP request to the device to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http
quest to the device to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99190 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0331