Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
securitytracker.com/id/1037298 - https://security.gentoo.org/glsa/201701-15 - https://bugzilla.mozilla.org/show_bug.cgi?id=1303678 - http://www.securityfocus.com/bid/94336 - https://www.mozilla.org/security/advisories/mfsa2016-93/ - http://rhn.redhat.com/errata/RHSA-2016-2780.html - https://www.mozilla.org/security/advisories/mfsa2016-89/ - https://www.mozilla.org/security/advisories/mfsa2016-90/
CVE ID: CVE-2016-5298 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-06T00:53:49.001Z Vendors: Mozilla Products: Firefox Problem Types: SSL indicator can mislead the user about the real URL visited Description: A mechanism where disruption of the loading of a new web page can cause the previous page's favicon and SSL indicator to not be reset when the new page is loaded. Note: this issue only affects Firefox for Android. Desktop Firefox is unaffected. This vulnerability affects Firefox < 50. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94337 - https://bugzilla.mozilla.org/show_bug.cgi?id=1227538 - http://www.security
s: - http://www.securityfocus.com/bid/94337 - https://bugzilla.mozilla.org/show_bug.cgi?id=1227538 - http://www.securitytracker.com/id/1037298 - https://www.mozilla.org/security/advisories/mfsa2016-89/
CVE ID: CVE-2016-5299 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-06T01:00:57.564Z Vendors: Mozilla Products: Firefox Problem Types: Firefox AuthToken in broadcast protected with signature-level permission can be accessed by an application installed beforehand that defines the same permissions Description: A previously installed malicious Android application with same signature-level permissions as Firefox can intercept AuthTokens meant for Firefox only. Note: This issue only affects Firefox for Android. Other versions and operating systems are unaffected. This vulnerability affects Firefox < 50. Additional Analyst Notes: - CVE Program Container: References: - http:
ffected. This vulnerability affects Firefox < 50. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94337 - http://www.securitytracker.com/id/1037298 - https://bugzilla.mozilla.org/show_bug.cgi?id=1245791 - https://www.mozilla.org/security/advisories/mfsa2016-89/
CVE ID: CVE-2016-5300 State: PUBLISHED Published: 2016-06-16T18:00:00 Last Updated: 2024-08-06T01:00:57.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XML parser in Expat does not use sufficient entropy for hash initialization, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted identifiers in an XML document. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-0876. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/tns-2016-20 - http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html - http://www.openwall.com/lists/oss-security/2016/0
www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html - http://www.openwall.com/lists/oss-security/2016/06/04/4 - http://www.debian.org/security/2016/dsa-3597 - http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html - http://www.securityfocus.com/bid/91159 - https://security.gentoo.org/glsa/201701-21 - https://source.android.com/security/bulletin/2016-11-01.html - http://www.ubuntu.com/usn/USN-3010-1 - http://www.openwall.com/lists/oss-security/2016/06/04/5 - https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E - https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ff
cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E - https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E - https://kc.mcafee.com/corporate/index?page=content&id=SB10365
CVE ID: CVE-2016-5301 State: PUBLISHED Published: 2016-06-30T17:00:00 Last Updated: 2024-08-06T01:00:57.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: The parse_chunk_header function in libtorrent before 1.1.1 allows remote attackers to cause a denial of service (crash) via a crafted (1) HTTP response or possibly a (2) UPnP broadcast. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/06/05/1 - http://lists.opensuse.org/opensuse-updates/2016-06/msg00103.html - http://www.securityfocus.com/bid/91498 - http://www.openwall.com/lists/oss-security/2016/06/04/9 - https://github.com/arvidn/libtorrent/pull/782/files - htt
98 - http://www.openwall.com/lists/oss-security/2016/06/04/9 - https://github.com/arvidn/libtorrent/pull/782/files - https://github.com/arvidn/libtorrent/issues/780 - http://lists.opensuse.org/opensuse-updates/2016-09/msg00043.html - http://lists.opensuse.org/opensuse-updates/2016-06/msg00079.html
CVE ID: CVE-2016-5302 State: PUBLISHED Published: 2016-06-13T14:00:00 Last Updated: 2024-08-06T01:00:57.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: Citrix XenServer 7.0 before Hotfix XS70E003, when a deployment has been upgraded from an earlier release, might allow remote attackers on the management network to "compromise" a host by leveraging credentials for an Active Directory account. Additional Analyst Notes: - CVE Program Container: References: - https://support.citrix.com/article/CTX213769 - http://www.securitytracker.com/id/1036082 - http://support.citrix.com/article/CTX213549
CVE ID: CVE-2016-5303 State: PUBLISHED Published: 2016-12-20T22:00:00 Last Updated: 2024-08-06T01:00:57.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Horde Text Filter API in Horde Groupware and Horde Groupware Webmail Edition before 5.2.16 allows remote attackers to inject arbitrary web script or HTML via crafted data:text/html content in a form (1) action or (2) xlink attribute. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/horde/horde/commit/30d5506c20d26efbb9942fbdc6f981a0bd333b97 - http://marc.info/?l=horde-announce&m=147319066126665&w=2 - http://marc.info/?l=horde-announce&m=14731908
981a0bd333b97 - http://marc.info/?l=horde-announce&m=147319066126665&w=2 - http://marc.info/?l=horde-announce&m=147319089526753&w=2 - https://github.com/horde/horde/commit/4d8176d1e9ef5cbd2b3fcacd9b9a4c8e482fb424 - http://www.securityfocus.com/bid/94997
CVE ID: CVE-2016-5304 State: PUBLISHED Published: 2016-06-30T23:00:00 Last Updated: 2024-08-06T01:00:58.681Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in a report-routing component in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160628_01 - http://www.securitytracker.com/id/1036196 - http://www.securityfocus.com/
vid=security_advisory&year=&suid=20160628_01 - http://www.securitytracker.com/id/1036196 - http://www.securityfocus.com/bid/91447 - https://www.exploit-db.com/exploits/40041/
CVE ID: CVE-2016-5305 State: PUBLISHED Published: 2016-06-30T23:00:00 Last Updated: 2024-08-06T01:00:58.042Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in management scripts in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allow remote authenticated users to inject arbitrary web script or HTML via a "DOM link manipulation" attack. Additional Analyst Notes: - CVE Program Container: References: - https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160628_01 - http://www.securitytracker.com/id/1036196 - http://www.securityfocus.com/bid
=security_advisory&year=&suid=20160628_01 - http://www.securitytracker.com/id/1036196 - http://www.securityfocus.com/bid/91448
CVE ID: CVE-2016-5306 State: PUBLISHED Published: 2016-06-30T23:00:00 Last Updated: 2024-08-06T01:00:57.785Z Vendors: n/a Products: n/a Problem Types: n/a Description: Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 does not properly implement the HSTS protection mechanism, which makes it easier for remote attackers to obtain sensitive information by sniffing the network for unintended HTTP traffic on port 8445. Additional Analyst Notes: - CVE Program Container: References: - https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160628_01 - http://www.securitytracker.com/id/1036196 - http://www.security
advisory&pvid=security_advisory&year=&suid=20160628_01 - http://www.securitytracker.com/id/1036196 - http://www.securityfocus.com/bid/91449
CVE ID: CVE-2016-5307 State: PUBLISHED Published: 2016-06-30T23:00:00 Last Updated: 2024-08-06T01:00:58.510Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allows remote authenticated users to read arbitrary files in the web-root directory tree via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160628_01 - http://www.securitytracker.com/id/1036196 - http://www.securityfocus.com/bid/91443
CVE ID: CVE-2016-5308 State: PUBLISHED Published: 2016-07-12T01:00:00 Last Updated: 2024-08-06T01:00:58.908Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Client Intrusion Detection System (CIDS) driver before 15.0.6 in Symantec Endpoint Protection (SEP) and before 15.1.2 in Norton Security allows remote attackers to cause a denial of service (memory corruption and system crash) via a malformed Portable Executable (PE) file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036265 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160707_01 - http:/
ecurity_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160707_01 - http://www.securitytracker.com/id/1036264 - http://www.securityfocus.com/bid/91608
CVE ID: CVE-2016-5309 State: PUBLISHED Published: 2017-04-14T18:00:00 Last Updated: 2024-08-06T01:00:59.897Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RAR file parser component in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection: Network (ATP); Symantec Email Security.Cloud; Symantec Data Center Security: Server; Symantec Endpoint Protection (SEP) for Windows before 12.1.6 MP5; Symantec Endpoint Protection (SEP) for Mac; Symantec Endpoint Protection (SEP) for Linux before 12.1.6 MP6; Symantec Endpoint Protection for Small Business Enterprise (SEP SBE/SEP.Cloud); Symantec Endpoint Protection Cloud (SEPC) for Windows/Mac; Symantec Endpoint Protection
Enterprise (SEP SBE/SEP.Cloud); Symantec Endpoint Protection Cloud (SEPC) for Windows/Mac; Symantec Endpoint Protection Small Business Edition 12.1; CSAPI before 10.0.4 HF02; Symantec Protection Engine (SPE) before 7.0.5 HF02, 7.5.x before 7.5.4 HF02, 7.5.5 before 7.5.5 HF01, and 7.8.x before 7.8.0 HF03; Symantec Mail Security for Domino (SMSDOM) before 8.0.9 HF2.1, 8.1.x before 8.1.2 HF2.3, and 8.1.3 before 8.1.3 HF2.2; Symantec Mail Security for Microsoft Exchange (SMSMSE) before 6.5.8_3968140 HF2.3, 7.x before 7.0_3966002 HF2.1, and 7.5.x before 7.5_3966008 VHF2.2; Symantec Protection for SharePoint Servers (SPSS) before SPSS_6.0.3_To_6.0.5_HF_2.5 update, 6.0.6 before 6.0.6 HF_2.6, and 6.
tec Protection for SharePoint Servers (SPSS) before SPSS_6.0.3_To_6.0.5_HF_2.5 update, 6.0.6 before 6.0.6 HF_2.6, and 6.0.7 before 6.0.7_HF_2.7; Symantec Messaging Gateway (SMG) before 10.6.2; Symantec Messaging Gateway for Service Providers (SMG-SP) before 10.5 patch 260 and 10.6 before patch 259; Symantec Web Gateway; and Symantec Web Security.Cloud allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted RAR file that is mishandled during decompression. Additional Analyst Notes: - CVE Program Container: References: - https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160919_00 - htt
m/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160919_00 - http://www.securitytracker.com/id/1036848 - http://www.securityfocus.com/bid/92868 - https://www.exploit-db.com/exploits/40405/ - https://bugs.chromium.org/p/project-zero/issues/detail?id=867 - http://www.securitytracker.com/id/1036849 - http://www.securitytracker.com/id/1036847 - http://www.securitytracker.com/id/1036850
CVE ID: CVE-2016-5310 State: PUBLISHED Published: 2017-04-14T18:00:00 Last Updated: 2024-08-06T01:00:59.212Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RAR file parser component in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection: Network (ATP); Symantec Email Security.Cloud; Symantec Data Center Security: Server; Symantec Endpoint Protection (SEP) for Windows before 12.1.6 MP5; Symantec Endpoint Protection (SEP) for Mac; Symantec Endpoint Protection (SEP) for Linux before 12.1.6 MP6; Symantec Endpoint Protection for Small Business Enterprise (SEP SBE/SEP.Cloud); Symantec Endpoint Protection Cloud (SEPC) for Windows/Mac; Symantec Endpoint Protection
tec Protection for SharePoint Servers (SPSS) before SPSS_6.0.3_To_6.0.5_HF_2.5 update, 6.0.6 before 6.0.6 HF_2.6, and 6.0.7 before 6.0.7_HF_2.7; Symantec Messaging Gateway (SMG) before 10.6.2; Symantec Messaging Gateway for Service Providers (SMG-SP) before 10.5 patch 260 and 10.6 before patch 259; Symantec Web Gateway; and Symantec Web Security.Cloud allows remote attackers to cause a denial of service (memory corruption) via a crafted RAR file that is mishandled during decompression. Additional Analyst Notes: - CVE Program Container: References: - https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160919_00 - http
/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160919_00 - http://www.securitytracker.com/id/1036848 - https://www.exploit-db.com/exploits/40405/ - http://www.securityfocus.com/bid/92866 - https://bugs.chromium.org/p/project-zero/issues/detail?id=867 - http://www.securitytracker.com/id/1036849 - http://www.securitytracker.com/id/1036847 - http://www.securitytracker.com/id/1036850
CVE ID: CVE-2016-5311 State: PUBLISHED Published: 2020-01-09T19:30:52 Last Updated: 2024-08-06T01:00:58.618Z Vendors: Symantec Products: Norton Antivirus, Norton AntiVirus with Backup, Norton Security, Norton Security with Backup, Norton Internet Security, Norton 360, Endpoint Protection Small Business Edition Cloud, and Endpoint Protection Cloud Client Problem Types: untrusted search path Description: A Privilege Escalation vulnerability exists in Symantec Norton Antivirus, Norton AntiVirus with Backup, Norton Security, Norton Security with Backup, Norton Internet Security, Norton 360, Endpoint Protection Small Business Edition Cloud, and Endpoint Protection Cloud Client due to a DLL-preloa
, Norton 360, Endpoint Protection Small Business Edition Cloud, and Endpoint Protection Cloud Client due to a DLL-preloading without path restrictions, which could let a local malicious user obtain system privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94295 - http://www.securitytracker.com/id/1037323 - http://www.securitytracker.com/id/1037324 - http://www.securitytracker.com/id/1037325 - https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20161117_00
CVE ID: CVE-2016-5312 State: PUBLISHED Published: 2017-04-14T18:00:00 Last Updated: 2024-08-06T01:00:58.482Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the charting component in Symantec Messaging Gateway before 10.6.2 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the sn parameter to brightmail/servlet/com.ve.kavachart.servlet.ChartStream. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93148 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160927_00 - http://packetstormsecurity
urityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160927_00 - http://packetstormsecurity.com/files/138891/Symantec-Messaging-Gateway-10.6.1-Directory-Traversal.html - http://www.securitytracker.com/id/1036908 - https://www.exploit-db.com/exploits/40437/ - http://seclists.org/fulldisclosure/2016/Sep/71
CVE ID: CVE-2016-5313 State: PUBLISHED Published: 2017-04-12T22:00:00 Last Updated: 2024-08-06T01:01:00.108Z Vendors: n/a Products: n/a Problem Types: n/a Description: Symantec Web Gateway (SWG) before 5.2.5 allows remote authenticated users to execute arbitrary OS commands. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2016/Oct/24 - http://packetstormsecurity.com/files/139006/Symantec-Web-Gateway-5.2.2-OS-Command-Injection.html - http://www.securitytracker.com/id/1036973 - https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20161005_00 - http://www.securityfocus.co
rityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20161005_00 - http://www.securityfocus.com/bid/93284
CVE ID: CVE-2016-5314 State: PUBLISHED Published: 2018-03-12T02:00:00 Last Updated: 2024-08-06T01:00:58.231Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the PixarLogDecode function in tif_pixarlog.c in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted TIFF image, as demonstrated by overwriting the vgetparent function pointer with rgb2ycbcr. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2017/dsa-3762 - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html - http://lists.opensuse
017/dsa-3762 - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html - http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00017.html - http://www.securityfocus.com/bid/91195 - http://lists.opensuse.org/opensuse-updates/2016-09/msg00060.html - http://www.openwall.com/lists/oss-security/2016/06/15/1 - http://www.securityfocus.com/bid/91245 - https://bugzilla.redhat.com/show_bug.cgi?id=1346687 - https://github.com/vadz/libtiff/commit/391e77fcd217e78b2c51342ac3ddb7100ecacdd2 - https://security.gentoo.org/glsa/201701-16 - http://lists.opensuse.org/opensuse-updates/2016-07/msg00087.html - http://lists.opensuse.org/opensuse-updates/2016-09/msg00090.html - ht
nsuse.org/opensuse-updates/2016-07/msg00087.html - http://lists.opensuse.org/opensuse-updates/2016-09/msg00090.html - http://www.openwall.com/lists/oss-security/2016/06/15/9 - http://www.openwall.com/lists/oss-security/2016/06/30/3 - http://bugzilla.maptools.org/show_bug.cgi?id=2554
CVE ID: CVE-2016-5315 State: PUBLISHED Published: 2017-03-07T15:00:00 Last Updated: 2024-08-06T01:01:00.074Z Vendors: n/a Products: n/a Problem Types: n/a Description: The setByteArray function in tif_dir.c in libtiff 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted tiff image. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/91204 - http://www.openwall.com/lists/oss-security/2016/06/15/2 - https://security.gentoo.org/glsa/201701-16 - https://bugzilla.redhat.com/show_bug.cgi?id=1346694 - http://www.debian.org/security/2017/dsa-3762
CVE ID: CVE-2016-5316 State: PUBLISHED Published: 2017-01-20T15:00:00 Last Updated: 2024-08-06T01:00:58.066Z Vendors: n/a Products: n/a Problem Types: n/a Description: Out-of-bounds read in the PixarLogCleanup function in tif_pixarlog.c in libtiff 4.0.6 and earlier allows remote attackers to crash the application by sending a crafted TIFF image to the rgb2ycbcr tool. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/91203 - http://lists.opensuse.org/opensuse-updates/2016-09/msg00060.html - https://security.gentoo.org/glsa/201701-16 - http://lists.opensuse.org/opensuse-updates/2016-07/msg00087.html - http://lists.opensuse.org/opensuse-updates/20
01-16 - http://lists.opensuse.org/opensuse-updates/2016-07/msg00087.html - http://lists.opensuse.org/opensuse-updates/2016-09/msg00090.html - http://www.openwall.com/lists/oss-security/2016/06/15/3 - http://www.debian.org/security/2017/dsa-3762
CVE ID: CVE-2016-5317 State: PUBLISHED Published: 2017-01-20T15:00:00 Last Updated: 2024-08-06T01:01:00.165Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the PixarLogDecode function in libtiff.so in the PixarLogDecode function in libtiff 4.0.6 and earlier, as used in GNOME nautilus, allows attackers to cause a denial of service attack (crash) via a crafted TIFF file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/91208 - http://lists.opensuse.org/opensuse-updates/2016-09/msg00060.html - http://www.openwall.com/lists/oss-security/2016/06/15/10 - https://security.gentoo.org/glsa/201701-16 - http://lists.opensus
://www.openwall.com/lists/oss-security/2016/06/15/10 - https://security.gentoo.org/glsa/201701-16 - http://lists.opensuse.org/opensuse-updates/2016-07/msg00087.html - http://www.openwall.com/lists/oss-security/2016/06/15/5 - http://lists.opensuse.org/opensuse-updates/2016-09/msg00090.html - http://www.debian.org/security/2017/dsa-3762
CVE ID: CVE-2016-5318 State: PUBLISHED Published: 2017-01-20T15:00:00 Last Updated: 2024-08-06T01:00:59.916Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the _TIFFVGetField function in libtiff 4.0.6 and earlier allows remote attackers to crash the application via a crafted tiff. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3606-1/ - https://security.gentoo.org/glsa/201701-16 - http://www.securityfocus.com/bid/88604 - http://www.openwall.com/lists/oss-security/2016/04/27/6 - http://www.openwall.com/lists/oss-security/2016/06/07/1
CVE ID: CVE-2016-5319 State: PUBLISHED Published: 2017-01-20T15:00:00 Last Updated: 2024-08-06T01:00:59.968Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in tif_packbits.c in libtiff 4.0.6 and earlier allows remote attackers to crash the application via a crafted bmp file. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201701-16 - http://www.securityfocus.com/bid/88604 - http://www.openwall.com/lists/oss-security/2016/04/27/6 - http://www.openwall.com/lists/oss-security/2016/06/07/1
CVE ID: CVE-2016-5320 State: REJECTED Published: 2018-03-12T02:00:00 Last Updated: 2018-03-12T01:57:01 Description: No description available.
CVE ID: CVE-2016-5321 State: PUBLISHED Published: 2017-01-20T15:00:00 Last Updated: 2024-08-06T01:01:00.404Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DumpModeDecode function in libtiff 4.0.6 and earlier allows attackers to cause a denial of service (invalid read and crash) via a crafted tiff image. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00017.html - https://security.gentoo.org/glsa/201701-16 - http://www.securityfocus.com/bid/91209 - http://www.debian.org/security/2017/dsa-3762