Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-17870 State: PUBLISHED Published: 2017-12-23T23:00:00 Last Updated: 2024-08-05T21:06:49.001Z Vendors: n/a Products: n/a Problem Types: n/a Description: The JBuildozer extension 1.4.1 for Joomla! has SQL Injection via the appid parameter in an entriessearch action. Additional Analyst Notes: - CVE Program Container: References: - https://vel.joomla.org/vel-blog/2046-jbuildozer-1-4-1-sql-injection - https://www.exploit-db.com/exploits/43323/
CVE ID: CVE-2017-17871 State: PUBLISHED Published: 2017-12-24T00:00:00 Last Updated: 2024-08-05T21:06:49.493Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "JEXTN Question And Answer" extension 3.1.0 for Joomla! has SQL Injection via the an parameter in a view=tags action, or the ques-srch parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/43329/
CVE ID: CVE-2017-17872 State: PUBLISHED Published: 2017-12-24T00:00:00 Last Updated: 2024-08-05T21:06:49.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: The JEXTN Video Gallery extension 3.0.5 for Joomla! has SQL Injection via the id parameter in a view=category action. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/43330/
CVE ID: CVE-2017-17873 State: PUBLISHED Published: 2017-12-24T00:00:00 Last Updated: 2024-08-05T21:06:49.273Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vanguard Marketplace Digital Products PHP 1.4 has SQL Injection via the PATH_INFO to the /p URI. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/43316/
CVE ID: CVE-2017-17874 State: PUBLISHED Published: 2017-12-24T00:00:00 Last Updated: 2024-08-05T21:06:49.041Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vanguard Marketplace Digital Products PHP 1.4 allows arbitrary file upload via an "Add a new product" or "Add a product preview" action, which can make a .php file accessible under a uploads/ URI. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/43315/
CVE ID: CVE-2017-17875 State: PUBLISHED Published: 2017-12-26T18:00:00 Last Updated: 2024-08-05T21:06:49.171Z Vendors: n/a Products: n/a Problem Types: n/a Description: The JEXTN FAQ Pro extension 4.0.0 for Joomla! has SQL Injection via the id parameter in a view=category action. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/43393/
CVE ID: CVE-2017-17876 State: PUBLISHED Published: 2017-12-26T18:00:00 Last Updated: 2024-08-05T21:06:49.074Z Vendors: n/a Products: n/a Problem Types: n/a Description: Biometric Shift Employee Management System 3.0 allows remote attackers to bypass intended file-read restrictions via a user=download request with a pathname in the path parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/43394/
CVE ID: CVE-2017-17877 State: PUBLISHED Published: 2017-12-24T02:00:00Z Last Updated: 2024-09-16T16:58:16.774Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Valve Steam Link build 643. When the SSH daemon is enabled for local development, the device is publicly available via IPv6 TCP port 22 over the internet (with stateless address autoconfiguration) by default, which makes it easier for remote attackers to obtain access by guessing 24 bits of the MAC address and attempting a root login. This can be exploited in conjunction with CVE-2017-17878. Additional Analyst Notes: - CVE Program Container: References: - https://blogger.davidmanouchehri.com/2017/1
2017-17878. Additional Analyst Notes: - CVE Program Container: References: - https://blogger.davidmanouchehri.com/2017/12/steam-link-security-remotely-insecure.html - https://github.com/ValveSoftware/steamlink-sdk/issues/119 - https://github.com/ValveSoftware/steamlink-sdk#ssh-access
CVE ID: CVE-2017-17878 State: PUBLISHED Published: 2017-12-24T02:00:00Z Last Updated: 2024-09-16T22:15:16.042Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Valve Steam Link build 643. Root passwords longer than 8 characters are truncated because of the default use of DES (aka the CONFIG_FEATURE_DEFAULT_PASSWD_ALGO="des" setting). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ValveSoftware/steamlink-sdk/issues/110 - https://blogger.davidmanouchehri.com/2017/12/steam-link-security-truncated-password.html - https://github.com/ValveSoftware/steamlink-sdk/issues/101
CVE ID: CVE-2017-17879 State: PUBLISHED Published: 2017-12-24T04:00:00 Last Updated: 2024-08-05T21:06:49.396Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-21, there is a heap-based buffer over-read in ReadOneMNGImage in coders/png.c, related to length calculation and caused by an off-by-one error. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102305 - https://usn.ubuntu.com/3681-1/ - https://www.debian.org/security/2017/dsa-4074 - https://lists.debian.org/debian-lts-announce/2018/01/msg00000.html - https://www.debian.org/security/2018/dsa-4204 - https://github.com/ImageMagick/ImageMag
announce/2018/01/msg00000.html - https://www.debian.org/security/2018/dsa-4204 - https://github.com/ImageMagick/ImageMagick/issues/906
CVE ID: CVE-2017-17880 State: PUBLISHED Published: 2017-12-24T04:00:00 Last Updated: 2024-08-05T21:06:49.546Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-21, there is a stack-based buffer over-read in WriteWEBPImage in coders/webp.c, related to a WEBP_DECODER_ABI_VERSION check. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/907 - http://www.securityfocus.com/bid/102317
CVE ID: CVE-2017-17881 State: PUBLISHED Published: 2017-12-24T04:00:00 Last Updated: 2024-08-05T21:06:49.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of service via a crafted MAT image file. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3681-1/ - https://github.com/ImageMagick/ImageMagick/issues/878
CVE ID: CVE-2017-17882 State: PUBLISHED Published: 2017-12-24T04:00:00 Last Updated: 2024-08-05T21:06:49.210Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadXPMImage in coders/xpm.c, which allows attackers to cause a denial of service via a crafted XPM image file. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3681-1/ - https://github.com/ImageMagick/ImageMagick/issues/880
CVE ID: CVE-2017-17883 State: PUBLISHED Published: 2017-12-24T04:00:00Z Last Updated: 2024-09-16T22:35:20.624Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadPGXImage in coders/pgx.c, which allows attackers to cause a denial of service via a crafted PGX image file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/877
CVE ID: CVE-2017-17884 State: PUBLISHED Published: 2017-12-24T04:00:00 Last Updated: 2024-08-05T21:06:49.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ImageMagick 7.0.7-16 Q16, a memory leak vulnerability was found in the function WriteOnePNGImage in coders/png.c, which allows attackers to cause a denial of service via a crafted PNG image file. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3681-1/ - https://github.com/ImageMagick/ImageMagick/issues/902
CVE ID: CVE-2017-17885 State: PUBLISHED Published: 2017-12-24T04:00:00 Last Updated: 2024-08-05T21:06:49.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadPICTImage in coders/pict.c, which allows attackers to cause a denial of service via a crafted PICT image file. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3681-1/ - https://github.com/ImageMagick/ImageMagick/issues/879
CVE ID: CVE-2017-17886 State: PUBLISHED Published: 2017-12-24T04:00:00 Last Updated: 2024-08-05T21:06:49.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadPSDChannelZip in coders/psd.c, which allows attackers to cause a denial of service via a crafted psd image file. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3681-1/ - https://github.com/ImageMagick/ImageMagick/issues/874
CVE ID: CVE-2017-17887 State: PUBLISHED Published: 2017-12-24T04:00:00 Last Updated: 2024-08-05T21:06:49.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ImageMagick 7.0.7-16 Q16, a memory leak vulnerability was found in the function GetImagePixelCache in magick/cache.c, which allows attackers to cause a denial of service via a crafted MNG image file that is processed by ReadOneMNGImage. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/903 - https://usn.ubuntu.com/3681-1/
CVE ID: CVE-2017-17888 State: PUBLISHED Published: 2017-12-24T16:00:00Z Last Updated: 2024-09-17T00:20:41.179Z Vendors: n/a Products: n/a Problem Types: n/a Description: cgi-bin/write.cgi in Anti-Web through 3.8.7, as used on NetBiter / HMS, Ouman EH-net, Alliance System WS100 --> AWU 500, Sauter ERW100F001, Carlo Gavazzi SIU-DLG, AEDILIS SMART-1, SYXTHSENSE WebBiter, ABB SREA, and ASCON DY WebServer devices, allows remote authenticated users to execute arbitrary OS commands via crafted multipart/form-data content, a different vulnerability than CVE-2017-9097. Additional Analyst Notes: - CVE Program Container: References: - https://www.youtube.com/watch?v=HdkZA1DO08Y - https://www.seebug.org
alyst Notes: - CVE Program Container: References: - https://www.youtube.com/watch?v=HdkZA1DO08Y - https://www.seebug.org/vuldb/ssvid-96555 - https://github.com/ezelf/AntiWeb_testing-Suite/tree/master/RCE
CVE ID: CVE-2017-17889 State: PUBLISHED Published: 2018-04-22T15:00:00 Last Updated: 2024-08-05T21:06:49.375Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kliqqi CMS 3.5.2 has XSS via a crafted group name in pligg/groups.php, a crafted Homepage string in a profile, or a crafted string in Tags or Description within pligg/submit.php. Additional Analyst Notes: - CVE Program Container: References: - https://edricteo.com/kliqqi-cms-xss-vulnerability-in-version-3.5.2/
CVE ID: CVE-2017-17891 State: PUBLISHED Published: 2017-12-24T18:00:00 Last Updated: 2024-08-05T21:06:49.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: Readymade Video Sharing Script has CSRF via user-profile-edit.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/d4wner/Vulnerabilities-Report/blob/master/Readymade-Video-Sharing-Script.md
CVE ID: CVE-2017-17892 State: PUBLISHED Published: 2017-12-24T18:00:00 Last Updated: 2024-08-05T21:06:49.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: Readymade Video Sharing Script has SQL Injection via the viewsubs.php chnlid parameter or the search_video.php search parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/d4wner/Vulnerabilities-Report/blob/master/Readymade-Video-Sharing-Script.md
CVE ID: CVE-2017-17893 State: PUBLISHED Published: 2017-12-24T18:00:00 Last Updated: 2024-08-05T21:06:49.396Z Vendors: n/a Products: n/a Problem Types: n/a Description: Readymade Video Sharing Script has XSS via the search_video.php search parameter, the viewsubs.php chnlid parameter, or the user-profile-edit.php fname parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/d4wner/Vulnerabilities-Report/blob/master/Readymade-Video-Sharing-Script.md
CVE ID: CVE-2017-17894 State: PUBLISHED Published: 2017-12-24T18:00:00 Last Updated: 2024-08-05T21:06:49.538Z Vendors: n/a Products: n/a Problem Types: n/a Description: Readymade Job Site Script has CSRF via the /job URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/d4wner/Vulnerabilities-Report/blob/master/ready-made-job-site-script.md
CVE ID: CVE-2017-17895 State: PUBLISHED Published: 2017-12-24T18:00:00 Last Updated: 2024-08-05T21:06:49.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: Readymade Job Site Script has SQL Injection via the location_name array parameter to the /job URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/d4wner/Vulnerabilities-Report/blob/master/ready-made-job-site-script.md
CVE ID: CVE-2017-17896 State: PUBLISHED Published: 2017-12-24T18:00:00 Last Updated: 2024-08-05T21:06:49.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: Readymade Job Site Script has XSS via the keyword parameter to the /job URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/d4wner/Vulnerabilities-Report/blob/master/ready-made-job-site-script.md
CVE ID: CVE-2017-17897 State: PUBLISHED Published: 2017-12-24T18:00:00 Last Updated: 2024-08-05T21:06:49.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in comm/multiprix.php in Dolibarr ERP/CRM version 6.0.4 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Dolibarr/dolibarr/commit/4a5988accbb770b74105baacd5a034689272128c
CVE ID: CVE-2017-17898 State: PUBLISHED Published: 2017-12-24T18:00:00 Last Updated: 2024-08-05T21:06:49.509Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dolibarr ERP/CRM version 6.0.4 does not block direct requests to *.tpl.php files, which allows remote attackers to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Dolibarr/dolibarr/commit/4a5988accbb770b74105baacd5a034689272128c - https://github.com/Dolibarr/dolibarr/commit/6a62e139604dbbd5729e57df2433b37a5950c35c
CVE ID: CVE-2017-17899 State: PUBLISHED Published: 2017-12-24T18:00:00 Last Updated: 2024-08-05T21:06:49.374Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in adherents/subscription/info.php in Dolibarr ERP/CRM version 6.0.4 allows remote attackers to execute arbitrary SQL commands via the rowid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Dolibarr/dolibarr/commit/4a5988accbb770b74105baacd5a034689272128c
CVE ID: CVE-2017-17900 State: PUBLISHED Published: 2017-12-24T18:00:00 Last Updated: 2024-08-05T21:06:49.529Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in fourn/index.php in Dolibarr ERP/CRM version 6.0.4 allows remote attackers to execute arbitrary SQL commands via the socid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Dolibarr/dolibarr/commit/4a5988accbb770b74105baacd5a034689272128c
CVE ID: CVE-2017-17901 State: PUBLISHED Published: 2017-12-29T22:00:00 Last Updated: 2024-08-05T21:06:49.363Z Vendors: n/a Products: n/a Problem Types: n/a Description: ZyXEL P-660HW v3 devices allow remote attackers to cause a denial of service (CPU consumption) via a flood of IP packets with a TTL of 1. Additional Analyst Notes: - CVE Program Container: References: - https://www.zyxel.com/support/announcement_denial_of_service.shtml - http://packetstormsecurity.com/files/145548/ZyXEL-P-660HW-TTL-Expiry-Denial-Of-Service.html
CVE ID: CVE-2017-17902 State: PUBLISHED Published: 2018-04-22T15:00:00 Last Updated: 2024-08-05T21:06:49.732Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection exists in Kliqqi CMS 3.5.2 via the randkey parameter of a new story at the pligg/story.php?title= URI. Additional Analyst Notes: - CVE Program Container: References: - https://edricteo.com/kliqqi-cms-sqli-vulnerability-in-version-3.5.2/
CVE ID: CVE-2017-17903 State: PUBLISHED Published: 2017-12-25T16:00:00 Last Updated: 2024-08-05T21:06:49.586Z Vendors: n/a Products: n/a Problem Types: n/a Description: FS Lynda Clone has CSRF via user/edit_profile, as demonstrated by adding content to the user panel. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/d4wner/Vulnerabilities-Report/blob/master/FS%20Lynda%20Clone.md
CVE ID: CVE-2017-17904 State: PUBLISHED Published: 2017-12-25T16:00:00 Last Updated: 2024-08-05T21:06:49.394Z Vendors: n/a Products: n/a Problem Types: n/a Description: FS Lynda Clone has XSS via the keywords parameter to tutorial/ or the edit_profile_first_name parameter to user/edit_profile. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/d4wner/Vulnerabilities-Report/blob/master/FS%20Lynda%20Clone.md
CVE ID: CVE-2017-17905 State: PUBLISHED Published: 2017-12-25T16:00:00 Last Updated: 2024-08-05T21:06:49.406Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP Scripts Mall Car Rental Script has CSRF via admin/sitesettings.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/d4wner/Vulnerabilities-Report/blob/master/Car-Rental-Script.md
CVE ID: CVE-2017-17906 State: PUBLISHED Published: 2017-12-25T16:00:00 Last Updated: 2024-08-05T21:06:49.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP Scripts Mall Car Rental Script has SQL Injection via the admin/carlistedit.php carid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/d4wner/Vulnerabilities-Report/blob/master/Car-Rental-Script.md
CVE ID: CVE-2017-17907 State: PUBLISHED Published: 2017-12-25T16:00:00 Last Updated: 2024-08-05T21:06:49.371Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP Scripts Mall Car Rental Script has XSS via the admin/areaedit.php carid parameter or the admin/sitesettings.php websitename parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/d4wner/Vulnerabilities-Report/blob/master/Car-Rental-Script.md
CVE ID: CVE-2017-17908 State: PUBLISHED Published: 2017-12-25T16:00:00 Last Updated: 2024-08-05T21:06:49.478Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP Scripts Mall Responsive Realestate Script has CSRF via admin/general. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/d4wner/Vulnerabilities-Report/blob/master/Responsive%20Realestate%20Script.md
CVE ID: CVE-2017-17909 State: PUBLISHED Published: 2017-12-25T16:00:00 Last Updated: 2024-08-05T21:06:49.763Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP Scripts Mall Responsive Realestate Script has XSS via the admin/general.php gplus parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/d4wner/Vulnerabilities-Report/blob/master/Responsive%20Realestate%20Script.md
CVE ID: CVE-2017-17910 State: PUBLISHED Published: 2017-12-29T19:00:00 Last Updated: 2024-08-05T21:06:49.415Z Vendors: n/a Products: n/a Problem Types: n/a Description: On Hoermann BiSecur devices before 2018, a vulnerability can be exploited by recording a single radio transmission. An attacker can intercept an arbitrary radio frame exchanged between a BiSecur transmitter and a receiver to obtain the encrypted packet and the 32-bit serial number. The interception of the one-time pairing process is specifically not required. Due to use of AES-128 with an initial static random value and static data vector (all of this static information is the same across different customers' installations),
om value and static data vector (all of this static information is the same across different customers' installations), the attacker can easily derive the utilized encryption key and decrypt the intercepted packet. The key can be verified by decrypting the intercepted packet and checking for known plaintext. Subsequently, an attacker can create arbitrary radio frames with the correct encryption key to control BiSecur garage and entrance gate operators and possibly other BiSecur systems as well ("wireless cloning"). To conduct the attack, a low cost Software Defined Radio (SDR) is sufficient. This affects Hoermann Hand Transmitter HS5-868-BS, HSE1-868-BS, and HSE2-868-BS devices. Additional A
DR) is sufficient. This affects Hoermann Hand Transmitter HS5-868-BS, HSE1-868-BS, and HSE2-868-BS devices. Additional Analyst Notes: - CVE Program Container: References: - https://www.trustworks.at/publications - https://docs.wixstatic.com/ugd/28ba71_6ecc3158975a484d827e935edda4fa17.pdf
CVE ID: CVE-2017-17911 State: PUBLISHED Published: 2017-12-26T19:00:00Z Last Updated: 2024-09-17T02:46:45.534Z Vendors: n/a Products: n/a Problem Types: n/a Description: packages/core/contact.php in Archon 3.21 rev-1 has XSS in the referer parameter in an index.php?p=core/contact request, aka Open Bug Bounty ID OBB-278503. Additional Analyst Notes: - CVE Program Container: References: - https://www.openbugbounty.org/reports/278503/
CVE ID: CVE-2017-17912 State: PUBLISHED Published: 2017-12-26T20:00:00 Last Updated: 2024-08-05T21:06:49.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: In GraphicsMagick 1.4 snapshot-20171217 Q8, there is a heap-based buffer over-read in ReadNewsProfile in coders/tiff.c, in which LocaleNCompare reads heap data beyond the allocated region. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2018/dsa-4321 - https://sourceforge.net/p/graphicsmagick/bugs/533/ - https://lists.debian.org/debian-lts-announce/2018/06/msg00009.html - https://lists.debian.org/debian-lts-announce/2018/01/msg00005.html - http://hg.graphicsmagick.org/hg/Graphi
00009.html - https://lists.debian.org/debian-lts-announce/2018/01/msg00005.html - http://hg.graphicsmagick.org/hg/GraphicsMagick/rev/0d871e813a4f - https://usn.ubuntu.com/4266-1/
CVE ID: CVE-2017-17913 State: PUBLISHED Published: 2017-12-26T20:00:00 Last Updated: 2024-08-05T21:06:49.729Z Vendors: n/a Products: n/a Problem Types: n/a Description: In GraphicsMagick 1.4 snapshot-20171217 Q8, there is a stack-based buffer over-read in WriteWEBPImage in coders/webp.c, related to an incompatibility with libwebp versions, 0.5.0 and later, that use a different structure type. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2018/dsa-4321 - https://sourceforge.net/p/graphicsmagick/bugs/536/ - http://hg.graphicsmagick.org/hg/GraphicsMagick/rev/6dda3c33f35f - https://usn.ubuntu.com/4266-1/
CVE ID: CVE-2017-17914 State: PUBLISHED Published: 2017-12-26T20:00:00 Last Updated: 2024-08-05T21:06:49.576Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ImageMagick 7.0.7-16 Q16, a vulnerability was found in the function ReadOnePNGImage in coders/png.c, which allows attackers to cause a denial of service (ReadOneMNGImage large loop) via a crafted mng image file. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3681-1/ - https://github.com/ImageMagick/ImageMagick/issues/908 - https://lists.debian.org/debian-lts-announce/2018/01/msg00000.html - https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html - https://lists.debian.org
ce/2018/01/msg00000.html - https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html - https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html