Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-10064 State: PUBLISHED Published: 2017-03-02T21:00:00 Last Updated: 2024-08-06T03:07:32.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in coders/tiff.c in ImageMagick before 6.9.5-1 allows remote attackers to cause a denial of service (application crash) or have other unspecified impact via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/commit/f8877abac8e568b2f339cca70c2c3c1b6eaec288 - http://lists.opensuse.org/opensuse-updates/2017-02/msg00028.html - http://www.securityfocus.com/bid/95211 - https://bugzilla.redhat.com/show_bug.cgi?id=1410478 - http://www.openwall.co
- http://www.securityfocus.com/bid/95211 - https://bugzilla.redhat.com/show_bug.cgi?id=1410478 - http://www.openwall.com/lists/oss-security/2016/12/26/9 - https://github.com/ImageMagick/ImageMagick/commit/63302366a63602acbaad5c8223a105811b2adddd
CVE ID: CVE-2016-10065 State: PUBLISHED Published: 2017-03-03T17:00:00 Last Updated: 2024-08-06T03:07:32.094Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ReadVIFFImage function in coders/viff.c in ImageMagick before 7.0.1-0 allows remote attackers to cause a denial of service (application crash) or have other unspecified impact via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2017-02/msg00028.html - https://github.com/ImageMagick/ImageMagick/issues/129 - https://bugzilla.redhat.com/show_bug.cgi?id=1410482 - http://www.openwall.com/lists/oss-security/2016/12/26/9 - http://www.securityfocus.com/bi
.com/show_bug.cgi?id=1410482 - http://www.openwall.com/lists/oss-security/2016/12/26/9 - http://www.securityfocus.com/bid/95213 - https://github.com/ImageMagick/ImageMagick/commit/134463b926fa965571aa4febd61b810be5e7da05
CVE ID: CVE-2016-10066 State: PUBLISHED Published: 2017-03-03T17:00:00 Last Updated: 2024-08-06T03:07:32.122Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the ReadVIFFImage function in coders/viff.c in ImageMagick before 6.9.4-5 allows remote attackers to cause a denial of service (application crash) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95217 - https://bugzilla.redhat.com/show_bug.cgi?id=1410491 - http://www.openwall.com/lists/oss-security/2016/12/26/9 - https://github.com/ImageMagick/ImageMagick/commit/f6e9d0d9955e85bdd7540b251cd50d598dacc5e6 - https://github.com/ImageMagick/Ima
/github.com/ImageMagick/ImageMagick/commit/f6e9d0d9955e85bdd7540b251cd50d598dacc5e6 - https://github.com/ImageMagick/ImageMagick/commit/e45e48b881038487d0bc94d92a16c1537616cc0a
CVE ID: CVE-2016-10067 State: PUBLISHED Published: 2017-03-02T21:00:00 Last Updated: 2024-08-06T03:07:32.093Z Vendors: n/a Products: n/a Problem Types: n/a Description: magick/memory.c in ImageMagick before 6.9.4-5 allows remote attackers to cause a denial of service (application crash) via vectors involving "too many exceptions," which trigger a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/commit/0474237508f39c4f783208123431815f1ededb76 - https://bugzilla.redhat.com/show_bug.cgi?id=1410494 - http://www.securityfocus.com/bid/95220 - http://www.openwall.com/lists/oss-security/2016/12/26/9
CVE ID: CVE-2016-10068 State: PUBLISHED Published: 2017-03-02T21:00:00 Last Updated: 2024-08-06T03:07:32.096Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MSL interpreter in ImageMagick before 6.9.6-4 allows remote attackers to cause a denial of service (segmentation fault and application crash) via a crafted XML file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95219 - http://lists.opensuse.org/opensuse-updates/2017-02/msg00028.html - https://bugzilla.redhat.com/show_bug.cgi?id=1410500 - https://github.com/ImageMagick/ImageMagick/commit/56d6e20de489113617cbbddaf41e92600a34db22 - http://lists.opensuse.org/opensuse-update
.com/ImageMagick/ImageMagick/commit/56d6e20de489113617cbbddaf41e92600a34db22 - http://lists.opensuse.org/opensuse-updates/2017-02/msg00031.html - http://www.openwall.com/lists/oss-security/2016/12/26/9 - https://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=30797
CVE ID: CVE-2016-10069 State: PUBLISHED Published: 2017-03-02T21:00:00 Last Updated: 2024-08-06T03:07:32.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: coders/mat.c in ImageMagick before 6.9.4-5 allows remote attackers to cause a denial of service (application crash) via a mat file with an invalid number of frames. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2017-02/msg00028.html - https://github.com/ImageMagick/ImageMagick/commit/8a370f9ab120faf182aa160900ba692ba8e2bcf0 - https://bugzilla.redhat.com/show_bug.cgi?id=1410507 - http://www.securityfocus.com/bid/95216 - http://www.openwall.com/lists/oss-security/201
at.com/show_bug.cgi?id=1410507 - http://www.securityfocus.com/bid/95216 - http://www.openwall.com/lists/oss-security/2016/12/26/9
CVE ID: CVE-2016-10070 State: PUBLISHED Published: 2017-03-03T18:00:00 Last Updated: 2024-08-06T03:07:32.118Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the CalcMinMax function in coders/mat.c in ImageMagick before 6.9.4-0 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted mat file. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1545366 - http://lists.opensuse.org/opensuse-updates/2017-02/msg00028.html - http://www.securityfocus.com/bid/95221 - http://lists.opensuse.org/opensuse-updates/2017-02/msg00031.html - ht
28.html - http://www.securityfocus.com/bid/95221 - http://lists.opensuse.org/opensuse-updates/2017-02/msg00031.html - https://github.com/ImageMagick/ImageMagick/commit/b173a352397877775c51c9a0e9d59eb6ce24c455 - https://bugzilla.redhat.com/show_bug.cgi?id=1410510 - http://www.openwall.com/lists/oss-security/2016/12/26/9 - https://github.com/ImageMagick/ImageMagick/commit/a6240a163cb787909703d9fc649cf861f60ddd7c
CVE ID: CVE-2016-10071 State: PUBLISHED Published: 2017-03-02T21:00:00 Last Updated: 2024-08-06T03:07:32.141Z Vendors: n/a Products: n/a Problem Types: n/a Description: coders/mat.c in ImageMagick before 6.9.4-0 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted mat file. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1410513 - https://github.com/ImageMagick/ImageMagick/commit/f3b483e8b054c50149912523b4773687e18afe25 - http://www.securityfocus.com/bid/95222 - http://www.openwall.com/lists/oss-security/2016/12/26/9 - https://github.com/ImageMagick/ImageMagick/commit/1bc1fd0
22 - http://www.openwall.com/lists/oss-security/2016/12/26/9 - https://github.com/ImageMagick/ImageMagick/commit/1bc1fd0ff8c555841c78829217ac81fa0598255d
CVE ID: CVE-2016-10072 State: PUBLISHED Published: 2016-12-27T07:25:00 Last Updated: 2024-08-06T03:07:32.097Z Vendors: n/a Products: n/a Problem Types: n/a Description: WampServer 3.0.6 has two files called 'wampmanager.exe' and 'unins000.exe' with a weak ACL for Modify. This could potentially allow an authorized but non-privileged local user to execute arbitrary code with elevated privileges on the system. To properly exploit this vulnerability, the local attacker must insert an executable file called wampmanager.exe or unins000.exe and replace the original files. The next time one of these programs is launched by a more privileged user, malicious code chosen by the local attacker will run.
time one of these programs is launched by a more privileged user, malicious code chosen by the local attacker will run. NOTE: the vendor disputes the relevance of this report, taking the position that a configuration in which "'someone' (an attacker) is able to replace files on a PC" is not "the fault of WampServer. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://packetstormsecurity.com/files/138948/wampserver306-insecure.txt - http://forum.wampserver.com/read.php?2%2C144473
CVE ID: CVE-2016-10073 State: PUBLISHED Published: 2017-05-23T03:56:00 Last Updated: 2024-08-06T03:07:32.057Z Vendors: n/a Products: n/a Problem Types: n/a Description: The from method in library/core/class.email.php in Vanilla Forums before 2.3.1 allows remote attackers to spoof the email domain in sent messages and potentially obtain sensitive information via a crafted HTTP Host header, as demonstrated by a password reset request. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/142486/Vanilla-Forums-2.3-Remote-Code-Execution.html - https://exploitbox.io/vuln/Vanilla-Forums-Exploit-Host-Header-Injection-CVE-2016-10073-0day.html - https:/
cution.html - https://exploitbox.io/vuln/Vanilla-Forums-Exploit-Host-Header-Injection-CVE-2016-10073-0day.html - https://open.vanillaforums.com/discussion/33498/critical-security-release-vanilla-2-3-1 - https://www.exploit-db.com/exploits/41996/
CVE ID: CVE-2016-10074 State: PUBLISHED Published: 2016-12-30T19:00:00 Last Updated: 2024-08-06T03:07:32.142Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mail transport (aka Swift_Transport_MailTransport) in Swift Mailer before 5.4.5 might allow remote attackers to pass extra parameters to the mail command and consequently execute arbitrary code via a \" (backslash double quote) in a crafted e-mail address in the (1) From, (2) ReturnPath, or (3) Sender header. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/42221/ - https://legalhackers.com/advisories/SwiftMailer-Exploit-Remote-Code-Exec-CVE-2016-10074-Vuln.html - http:/
oits/42221/ - https://legalhackers.com/advisories/SwiftMailer-Exploit-Remote-Code-Exec-CVE-2016-10074-Vuln.html - http://www.securityfocus.com/bid/95140 - http://packetstormsecurity.com/files/140290/SwiftMailer-Remote-Code-Execution.html - http://seclists.org/fulldisclosure/2016/Dec/86 - https://www.exploit-db.com/exploits/40972/ - https://www.exploit-db.com/exploits/40986/ - http://www.debian.org/security/2017/dsa-3769 - https://github.com/swiftmailer/swiftmailer/blob/5.x/CHANGES
CVE ID: CVE-2016-10075 State: PUBLISHED Published: 2017-01-19T20:00:00 Last Updated: 2024-08-06T03:07:32.121Z Vendors: n/a Products: n/a Problem Types: n/a Description: The tqdm._version module in tqdm versions 4.4.1 and 4.10 allows local users to execute arbitrary code via a crafted repo with a malicious git log in the current working directory. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201807-01 - https://github.com/tqdm/tqdm/issues/328 - http://www.securityfocus.com/bid/95143 - http://www.openwall.com/lists/oss-security/2016/12/28/8
CVE ID: CVE-2016-10079 State: PUBLISHED Published: 2017-02-01T19:00:00 Last Updated: 2024-08-06T03:07:32.138Z Vendors: n/a Products: n/a Problem Types: n/a Description: SAPlpd through 7400.3.11.33 in SAP GUI 7.40 on Windows has a Denial of Service vulnerability (service crash) with a long string to TCP port 515. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/41030/
CVE ID: CVE-2016-10081 State: PUBLISHED Published: 2016-12-29T18:00:00 Last Updated: 2024-08-06T03:07:32.039Z Vendors: n/a Products: n/a Problem Types: n/a Description: /usr/bin/shutter in Shutter through 0.93.1 allows user-assisted remote attackers to execute arbitrary commands via a crafted image name that is mishandled during a "Run a plugin" action. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/41435/ - http://www.securityfocus.com/bid/95351 - https://bugs.launchpad.net/shutter/+bug/1652600 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4QG54GTU45KBIQJLU4WREG4G4JJEUTEJ/
CVE ID: CVE-2016-10082 State: PUBLISHED Published: 2016-12-30T07:08:00 Last Updated: 2024-08-06T03:07:32.131Z Vendors: n/a Products: n/a Problem Types: n/a Description: include/functions_installer.inc.php in Serendipity through 2.0.5 is vulnerable to File Inclusion and a possible Code Execution attack during a first-time installation because it fails to sanitize the dbType POST parameter before adding it to an include() call in the bundled-libs/serendipity_generateFTPChecksums.php file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95165 - https://github.com/s9y/Serendipity/issues/433 - https://github.com/s9y/Serendipity/commit/bba6a840f4d5
s.com/bid/95165 - https://github.com/s9y/Serendipity/issues/433 - https://github.com/s9y/Serendipity/commit/bba6a840f4d53cbaf62971a3078a98c8ddf92b85
CVE ID: CVE-2016-10083 State: PUBLISHED Published: 2016-12-30T07:08:00 Last Updated: 2024-08-06T03:07:32.130Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in admin/plugin.php in Piwigo through 2.8.3 allows remote attackers to inject arbitrary web script or HTML via a crafted filename that is mishandled in a certain error case. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Piwigo/Piwigo/commit/7df3830c81716b959a2d0d3a0d8216b860ae0dc7 - https://github.com/Piwigo/Piwigo/issues/575 - http://www.securityfocus.com/bid/95166
CVE ID: CVE-2016-10084 State: PUBLISHED Published: 2016-12-30T07:08:00 Last Updated: 2024-08-06T03:07:32.137Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin/batch_manager.php in Piwigo through 2.8.3 allows remote authenticated administrators to conduct File Inclusion attacks via the $page['tab'] variable (aka the mode parameter). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Piwigo/Piwigo/issues/572#issuecomment-268252202 - https://github.com/Piwigo/Piwigo/commit/9dd92959f6975099e0c62163a846a4648a6a920f - http://www.securityfocus.com/bid/95164
CVE ID: CVE-2016-10085 State: PUBLISHED Published: 2016-12-30T07:08:00 Last Updated: 2024-08-06T03:07:32.142Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin/languages.php in Piwigo through 2.8.3 allows remote authenticated administrators to conduct File Inclusion attacks via the tab parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Piwigo/Piwigo/issues/573#issuecomment-267974558 - http://www.securityfocus.com/bid/95167 - https://github.com/Piwigo/Piwigo/commit/4b33a0fd199fd445b15a49927ea6a9a153e3877d
CVE ID: CVE-2016-10086 State: PUBLISHED Published: 2017-01-18T22:00:00 Last Updated: 2024-08-06T03:07:32.137Z Vendors: n/a Products: n/a Problem Types: n/a Description: RESTful web services in CA Service Desk Manager 12.9 and CA Service Desk Management 14.1 might allow remote authenticated users to read or modify task information by leveraging incorrect permissions applied to a RESTful request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95366 - https://www.ca.com/us/services-support/ca-support/ca-support-online/product-content/recommended-reading/security-notices/ca20170109-01-security-notice-for-ca-service-desk-manager.html - http://www
content/recommended-reading/security-notices/ca20170109-01-security-notice-for-ca-service-desk-manager.html - http://www.securitytracker.com/id/1037583
CVE ID: CVE-2016-10087 State: PUBLISHED Published: 2017-01-30T22:00:00 Last Updated: 2024-08-06T03:07:32.166Z Vendors: n/a Products: n/a Problem Types: n/a Description: The png_set_text_2 function in libpng 0.71 before 1.0.67, 1.2.x before 1.2.57, 1.4.x before 1.4.20, 1.5.x before 1.5.28, and 1.6.x before 1.6.27 allows context-dependent attackers to cause a NULL pointer dereference vectors involving loading a text chunk into a png structure, removing the text, and then adding another text chunk to the structure. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201701-74 - https://usn.ubuntu.com/3712-1/ - http://www.openwall.com/lists/oss-secur
- https://security.gentoo.org/glsa/201701-74 - https://usn.ubuntu.com/3712-1/ - http://www.openwall.com/lists/oss-security/2016/12/30/4 - http://www.securityfocus.com/bid/95157 - https://usn.ubuntu.com/3712-2/ - http://www.openwall.com/lists/oss-security/2016/12/29/2 - https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E - https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
CVE ID: CVE-2016-10088 State: PUBLISHED Published: 2016-12-30T18:00:00 Last Updated: 2024-08-06T03:07:32.095Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sg implementation in the Linux kernel through 4.9 does not properly restrict write operations in situations where the KERNEL_DS option is set, which allows local users to read or write to arbitrary kernel memory locations or cause a denial of service (use-after-free) by leveraging access to a /dev/sg device, related to block/bsg.c and drivers/scsi/sg.c. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-9576. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker
plete fix for CVE-2016-9576. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037538 - https://access.redhat.com/errata/RHSA-2017:2669 - http://www.securityfocus.com/bid/95169 - http://rhn.redhat.com/errata/RHSA-2017-0817.html - http://www.openwall.com/lists/oss-security/2016/12/30/1 - https://access.redhat.com/errata/RHSA-2017:2077 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=128394eff343fc6d2f32172f03e24829539c5835 - https://access.redhat.com/errata/RHSA-2017:1842 - https://github.com/torvalds/linux/commit/128394eff343fc6d2f32172f03e24829539c5835
CVE ID: CVE-2016-10089 State: PUBLISHED Published: 2017-02-15T15:00:00 Last Updated: 2024-08-06T03:07:32.240Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nagios 4.3.2 and earlier allows local users to gain root privileges via a hard link attack on the Nagios init script file, related to CVE-2016-8641. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95171 - http://www.openwall.com/lists/oss-security/2016/12/30/6
CVE ID: CVE-2016-10091 State: PUBLISHED Published: 2017-04-21T15:00:00 Last Updated: 2024-08-06T03:07:32.082Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in unrtf 0.21.9 allow remote attackers to cause a denial-of-service by writing a negative integer to the (1) cmd_expand function, (2) cmd_emboss function, or (3) cmd_engrave function. Additional Analyst Notes: - CVE Program Container: References: - http://hg.savannah.gnu.org/hgweb/unrtf/rev/3b16893a6406 - http://www.securityfocus.com/bid/95173 - http://www.openwall.com/lists/oss-security/2016/12/31/3 - http://www.openwall.com/lists/oss-security/2017/01/01/1 - https://bugzilla.redhat.com/s
ists/oss-security/2016/12/31/3 - http://www.openwall.com/lists/oss-security/2017/01/01/1 - https://bugzilla.redhat.com/show_bug.cgi?id=1409546
CVE ID: CVE-2016-10092 State: PUBLISHED Published: 2017-03-01T15:00:00 Last Updated: 2024-08-06T03:07:32.141Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the readContigStripsIntoBuffer function in tif_unix.c in LibTIFF 4.0.7, 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5 and 4.0.6 allows remote attackers to have unspecified impact via a crafted image. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/01/01/libtiff-multiple-heap-based-buffer-overflow/ - http://bugzilla.maptools.org/show_bug.cgi?id=2620 - http:
/ago/2017/01/01/libtiff-multiple-heap-based-buffer-overflow/ - http://bugzilla.maptools.org/show_bug.cgi?id=2620 - http://www.openwall.com/lists/oss-security/2017/01/01/12 - http://bugzilla.maptools.org/show_bug.cgi?id=2622 - http://www.securityfocus.com/bid/95218 - http://www.openwall.com/lists/oss-security/2017/01/01/10 - http://www.debian.org/security/2017/dsa-3762 - https://github.com/vadz/libtiff/commit/9657bbe3cdce4aaa90e07d50c1c70ae52da0ba6a - https://github.com/Hack-Me/Pocs_for_Multi_Versions/tree/main/CVE-2016-10092
CVE ID: CVE-2016-10093 State: PUBLISHED Published: 2017-03-01T15:00:00 Last Updated: 2024-08-06T03:07:32.141Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in tools/tiffcp.c in LibTIFF 4.0.7, 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5 and 4.0.6 allows remote attackers to have unspecified impact via a crafted image, which triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/01/01/libtiff-multiple-heap-based-buffer-overflow/ - http://bugzilla.maptools.org/show_bug.cgi?id=2610 - http://ww
/2017/01/01/libtiff-multiple-heap-based-buffer-overflow/ - http://bugzilla.maptools.org/show_bug.cgi?id=2610 - http://www.openwall.com/lists/oss-security/2017/01/01/12 - https://github.com/vadz/libtiff/commit/787c0ee906430b772f33ca50b97b8b5ca070faec - http://www.securityfocus.com/bid/95215 - http://www.openwall.com/lists/oss-security/2017/01/01/10 - http://www.debian.org/security/2017/dsa-3762 - https://github.com/Hack-Me/Pocs_for_Multi_Versions/tree/main/CVE-2016-10093
CVE ID: CVE-2016-10094 State: PUBLISHED Published: 2017-03-01T15:00:00 Last Updated: 2024-08-06T03:07:32.077Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one error in the t2p_readwrite_pdf_image_tile function in tools/tiff2pdf.c in LibTIFF 4.0.7 allows remote attackers to have unspecified impact via a crafted image. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/01/01/libtiff-multiple-heap-based-buffer-overflow/ - http://www.securityfocus.com/bid/95214 - http://www.openwall.com/lists/oss-security/2017/01/01/12 - https://github.com/vadz/libtiff/commit/c7153361a4041260719b340f73f2f76 - http://bugzilla.maptools.org/show_b
/01/01/12 - https://github.com/vadz/libtiff/commit/c7153361a4041260719b340f73f2f76 - http://bugzilla.maptools.org/show_bug.cgi?id=2640 - http://www.openwall.com/lists/oss-security/2017/01/01/10 - http://www.debian.org/security/2017/dsa-3762
CVE ID: CVE-2016-10095 State: PUBLISHED Published: 2017-03-01T15:00:00 Last Updated: 2024-08-06T03:07:32.130Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the _TIFFVGetField function in tif_dir.c in LibTIFF 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6, 4.0.7 and 4.0.8 allows remote attackers to cause a denial of service (crash) via a crafted TIFF file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95178 - http://bugzilla.maptools.org/show_bug.cgi?id=2625 - http://www.openwall.com/lists/oss-security/2017/01/01/7 - https://blogs.gento
gzilla.maptools.org/show_bug.cgi?id=2625 - http://www.openwall.com/lists/oss-security/2017/01/01/7 - https://blogs.gentoo.org/ago/2017/01/01/libtiff-stack-based-buffer-overflow-in-_tiffvgetfield-tif_dir-c/ - http://www.openwall.com/lists/oss-security/2017/01/01/11 - http://www.debian.org/security/2017/dsa-3903