Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-11355 State: PUBLISHED Published: 2017-08-02T19:00:00 Last Updated: 2024-08-05T18:05:30.530Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in PEGA Platform 7.2 ML0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) PATH_INFO to the main page; the (2) beanReference parameter to the JavaBean viewer page; or the (3) pyTableName to the System database schema modification page. Additional Analyst Notes: - CVE Program Container: References: - https://pdn.pega.com/pegasystems-security-bulletin-cve-2017-11355-and-cve-2017-11356/pegasystems-security-bulletin-cve - https://www.exploit-d
egasystems-security-bulletin-cve-2017-11355-and-cve-2017-11356/pegasystems-security-bulletin-cve - https://www.exploit-db.com/exploits/42335/ - http://seclists.org/fulldisclosure/2017/Jul/28
CVE ID: CVE-2017-11356 State: PUBLISHED Published: 2017-08-02T19:00:00 Last Updated: 2024-08-05T18:05:30.578Z Vendors: n/a Products: n/a Problem Types: n/a Description: The application distribution export functionality in PEGA Platform 7.2 ML0 and earlier allows remote authenticated users with certain privileges to obtain sensitive configuration information by leveraging a missing access control. Additional Analyst Notes: - CVE Program Container: References: - https://pdn.pega.com/pegasystems-security-bulletin-cve-2017-11355-and-cve-2017-11356/pegasystems-security-bulletin-cve - https://www.exploit-db.com/exploits/42335/ - http://seclists.org/fulldisclosure/2017/Jul/28
CVE ID: CVE-2017-11357 State: PUBLISHED Published: 2017-08-23T17:00:00.000Z Last Updated: 2025-10-21T23:55:35.158Z Vendors: n/a Products: n/a Problem Types: n/a Description: Progress Telerik UI for ASP.NET AJAX before R2 2017 SP2 does not properly restrict user input to RadAsyncUpload, which allows remote attackers to perform arbitrary file uploads or execute arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/43874/ - http://www.telerik.com/support/kb/aspnet-ajax/upload-%28async%29/details/insecure-direct-object-reference
CVE ID: CVE-2017-11358 State: PUBLISHED Published: 2017-07-31T00:00:00 Last Updated: 2024-08-05T18:05:30.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: The read_samples function in hcom.c in Sound eXchange (SoX) 14.4.2 allows remote attackers to cause a denial of service (invalid memory read and application crash) via a crafted hcom file. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/42398/ - https://lists.debian.org/debian-lts-announce/2017/11/msg00043.html - http://seclists.org/fulldisclosure/2017/Jul/81 - https://security.gentoo.org/glsa/201810-02 - https://lists.debian.org/debian-lts-announce/2019/03/msg00007.html -
/81 - https://security.gentoo.org/glsa/201810-02 - https://lists.debian.org/debian-lts-announce/2019/03/msg00007.html - http://www.openwall.com/lists/oss-security/2023/02/03/3 - http://www.openwall.com/lists/oss-security/2023/02/04/2 - http://www.openwall.com/lists/oss-security/2023/02/05/1 - http://www.openwall.com/lists/oss-security/2023/02/06/1
CVE ID: CVE-2017-11359 State: PUBLISHED Published: 2017-07-31T13:00:00 Last Updated: 2024-08-05T18:05:30.566Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wavwritehdr function in wav.c in Sound eXchange (SoX) 14.4.2 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted snd file, during conversion to a wav file. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/42398/ - https://lists.debian.org/debian-lts-announce/2017/11/msg00043.html - http://seclists.org/fulldisclosure/2017/Jul/81 - https://security.gentoo.org/glsa/201810-02 - https://lists.debian.org/debian-lts-an
sts.org/fulldisclosure/2017/Jul/81 - https://security.gentoo.org/glsa/201810-02 - https://lists.debian.org/debian-lts-announce/2019/03/msg00007.html
CVE ID: CVE-2017-11360 State: PUBLISHED Published: 2017-07-17T06:00:00 Last Updated: 2024-08-05T18:05:30.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ReadRLEImage function in coders\rle.c in ImageMagick 7.0.6-1 has a large loop vulnerability via a crafted rle file that triggers a huge number_pixels value. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/518
CVE ID: CVE-2017-11361 State: PUBLISHED Published: 2017-07-17T16:00:00 Last Updated: 2024-08-05T18:05:30.530Z Vendors: n/a Products: n/a Problem Types: n/a Description: Inteno routers have a JUCI ACL misconfiguration that allows the "user" account to read files, write to files, and add root SSH keys via JSON commands to ubus. (Exploitation is sometimes easy because the "user" password might be "user" or might match the Wi-Fi key.) Additional Analyst Notes: - CVE Program Container: References: - https://neonsea.uk/blog/2017/07/17/cve-2017-11361.html
CVE ID: CVE-2017-11362 State: PUBLISHED Published: 2017-07-17T06:00:00 Last Updated: 2024-08-05T18:05:30.589Z Vendors: n/a Products: n/a Problem Types: n/a Description: In PHP 7.x before 7.0.21 and 7.1.x before 7.1.7, ext/intl/msgformat/msgformat_parse.c does not restrict the locale length, which allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) or possibly have unspecified other impact within International Components for Unicode (ICU) for C/C++ via a long first argument to the msgfmt_parse_message function. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.php.net/bug.php?id=73473 - https://access.redhat.com/
Analyst Notes: - CVE Program Container: References: - https://bugs.php.net/bug.php?id=73473 - https://access.redhat.com/errata/RHSA-2018:1296 - https://security.netapp.com/advisory/ntap-20180112-0001/ - https://security.gentoo.org/glsa/201709-21 - https://usn.ubuntu.com/3566-2/
CVE ID: CVE-2017-11364 State: PUBLISHED Published: 2017-08-02T14:00:00 Last Updated: 2024-08-05T18:05:30.495Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CMS installer in Joomla! before 3.7.4 does not verify a user's ownership of a webspace, which allows remote authenticated users to gain control of the target application by leveraging Certificate Transparency logs. Additional Analyst Notes: - CVE Program Container: References: - https://twitter.com/hanno/status/890281330906247168 - https://media.defcon.org/DEF%20CON%2025/DEF%20CON%2025%20presentations/DEFCON-25-Hanno-Boeck-Abusing-Certificate-Transparency-Logs.pdf - http://www.securitytracker.com/id/1039015 - https://deve
FCON-25-Hanno-Boeck-Abusing-Certificate-Transparency-Logs.pdf - http://www.securitytracker.com/id/1039015 - https://developer.joomla.org/security-centre/700-20170704-core-installer-lack-of-ownership-verification.html
CVE ID: CVE-2017-11365 State: PUBLISHED Published: 2019-05-23T17:20:57 Last Updated: 2024-08-05T18:05:30.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain Symfony products are affected by: Incorrect Access Control. This affects Symfony 2.7.30 and Symfony 2.8.23 and Symfony 3.2.10 and Symfony 3.3.3. The type of exploitation is: remote. The component is: Password validator. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/symfony/symfony/pull/23507 - https://github.com/symfony/symfony/commit/878198cefae028386c6dc800ccbf18f2b9cbff3f
CVE ID: CVE-2017-11366 State: PUBLISHED Published: 2017-08-21T01:00:00 Last Updated: 2024-08-05T18:05:30.581Z Vendors: n/a Products: n/a Problem Types: n/a Description: components/filemanager/class.filemanager.php in Codiad before 2.8.4 is vulnerable to remote command execution because shell commands can be embedded in parameter values, as demonstrated by search_file_type. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Codiad/Codiad/pull/1013/commits/b3645b4c6718cef6de7003f41aafe7bfcc0395d1 - http://www.jianshu.com/p/41ac7ac2a7af - https://github.com/Codiad/Codiad/issues/1011 - https://github.com/Codiad/Codiad/pull/1013
CVE ID: CVE-2017-11367 State: PUBLISHED Published: 2017-07-17T13:00:00Z Last Updated: 2024-09-16T23:16:09.080Z Vendors: n/a Products: n/a Problem Types: n/a Description: The shoco_decompress function in the API in shoco through 2017-07-17 allows remote attackers to cause a denial of service (buffer over-read and application crash) via malformed compressed data. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Ed-von-Schleck/shoco/issues/28
CVE ID: CVE-2017-11368 State: PUBLISHED Published: 2017-08-09T18:00:00 Last Updated: 2024-08-05T18:05:30.590Z Vendors: n/a Products: n/a Problem Types: n/a Description: In MIT Kerberos 5 (aka krb5) 1.7 and later, an authenticated attacker can cause a KDC assertion failure by sending invalid S4U2Self or S4U2Proxy requests. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/krb5/krb5/commit/ffb35baac6981f9e8914f8f3bffd37f284b85970 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4HNWXM6OQU7G23MG7XWIOBRGP43ECLDT/ - https://access.redhat.com/errata/RHSA-2018:0666 - http://www.securityfocus.com/bid/100291 - https:/
G7XWIOBRGP43ECLDT/ - https://access.redhat.com/errata/RHSA-2018:0666 - http://www.securityfocus.com/bid/100291 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UBUTXMNZWMVJLQ4NDX5OQFPUVCJRLV3W/
CVE ID: CVE-2017-11379 State: PUBLISHED Published: 2017-08-01T15:00:00Z Last Updated: 2024-09-16T19:00:49.107Z Vendors: Trend Micro, Inc. Products: Trend Micro Deep Discovery Director Problem Types: Other Description: Configuration and database backup archives are not signed or validated in Trend Micro Deep Discovery Director 1.1. Additional Analyst Notes: - CVE Program Container: References: - https://www.coresecurity.com/advisories/trend-micro-deep-discovery-director-multiple-vulnerabilities - https://success.trendmicro.com/solution/1117663
CVE ID: CVE-2017-11380 State: PUBLISHED Published: 2017-08-01T15:00:00Z Last Updated: 2024-09-17T04:25:28.232Z Vendors: Trend Micro, Inc. Products: Trend Micro Deep Discovery Director Problem Types: Insecure Permissions Description: Backup archives were found to be encrypted with a static password across different installations, which suggest the same password may be used in all virtual appliance instances of Trend Micro Deep Discovery Director 1.1. Additional Analyst Notes: - CVE Program Container: References: - https://www.coresecurity.com/advisories/trend-micro-deep-discovery-director-multiple-vulnerabilities - https://success.trendmicro.com/solution/1117663
CVE ID: CVE-2017-11381 State: PUBLISHED Published: 2017-08-01T15:00:00Z Last Updated: 2024-09-17T00:31:17.599Z Vendors: Trend Micro, Inc. Products: Trend Micro Deep Discovery Director Problem Types: Command Injection Description: A command injection vulnerability exists in Trend Micro Deep Discovery Director 1.1 that allows an attacker to restore accounts that can access the pre-configuration console. Additional Analyst Notes: - CVE Program Container: References: - https://www.coresecurity.com/advisories/trend-micro-deep-discovery-director-multiple-vulnerabilities - https://success.trendmicro.com/solution/1117663
CVE ID: CVE-2017-11382 State: PUBLISHED Published: 2017-08-03T15:00:00Z Last Updated: 2024-09-17T03:22:53.567Z Vendors: Trend Micro Products: Trend Micro Deep Discovery Email Inspector Problem Types: Denial of Service Vulnerability Description: Denial of Service vulnerability in Trend Micro Deep Discovery Email Inspector 2.5.1 allows remote attackers to delete arbitrary files on vulnerable installations, thus disabling the service. Formerly ZDI-CAN-4350. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-17-503 - http://www.securityfocus.com/bid/100076 - https://success.trendmicro.com/solution/1116750
CVE ID: CVE-2017-11383 State: PUBLISHED Published: 2017-08-02T21:00:00 Last Updated: 2024-08-05T18:05:30.587Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection in Trend Micro Control Manager 6.0 causes Remote Code Execution when executing opcode 0x1b07 due to lack of proper user input validation in cmdHandlerTVCSCommander.dll. Formerly ZDI-CAN-4560. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100078 - http://www.zerodayinitiative.com/advisories/ZDI-17-493 - http://www.securitytracker.com/id/1039049 - https://success.trendmicro.com/solution/1117722
CVE ID: CVE-2017-11384 State: PUBLISHED Published: 2017-08-02T21:00:00 Last Updated: 2024-08-05T18:05:30.576Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection in Trend Micro Control Manager 6.0 causes Remote Code Execution when executing opcode 0x3b21 due to lack of proper user input validation in mdHandlerLicenseManager.dll. Formerly ZDI-CAN-4561. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100078 - http://www.zerodayinitiative.com/advisories/ZDI-17-494 - http://www.securitytracker.com/id/1039049 - https://success.trendmicro.com/solution/1117722
CVE ID: CVE-2017-11385 State: PUBLISHED Published: 2017-08-02T21:00:00 Last Updated: 2024-08-05T18:05:30.596Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection in Trend Micro Control Manager 6.0 causes Remote Code Execution when executing opcode 0x6b1b due to lack of proper user input validation in cmdHandlerStatusMonitor.dll. Formerly ZDI-CAN-4545. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100078 - http://www.securitytracker.com/id/1039049 - https://success.trendmicro.com/solution/1117722 - http://www.zerodayinitiative.com/advisories/ZDI-17-495
CVE ID: CVE-2017-11386 State: PUBLISHED Published: 2017-08-02T21:00:00 Last Updated: 2024-08-05T18:05:30.592Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection in Trend Micro Control Manager 6.0 causes Remote Code Execution when executing opcode 0x4707 due to lack of proper user input validation in cmdHandlerNewReportScheduler.dll. Formerly ZDI-CAN-4549. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100078 - http://www.zerodayinitiative.com/advisories/ZDI-17-496 - http://www.securitytracker.com/id/1039049 - https://success.trendmicro.com/solution/1117722
CVE ID: CVE-2017-11387 State: PUBLISHED Published: 2017-08-02T21:00:00 Last Updated: 2024-08-05T18:05:30.489Z Vendors: n/a Products: n/a Problem Types: n/a Description: Authentication Bypass in Trend Micro Control Manager 6.0 causes Information Disclosure when authentication validation is not done for functionality that can change debug logging level. Formerly ZDI-CAN-4512. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100078 - http://www.zerodayinitiative.com/advisories/ZDI-17-497 - http://www.securitytracker.com/id/1039049 - https://success.trendmicro.com/solution/1117722
CVE ID: CVE-2017-11388 State: PUBLISHED Published: 2017-08-02T21:00:00 Last Updated: 2024-08-05T18:05:30.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection in Trend Micro Control Manager 6.0 causes Remote Code Execution when RestfulServiceUtility.NET.dll doesn't properly validate user provided strings before constructing SQL queries. Formerly ZDI-CAN-4639 and ZDI-CAN-4638. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100078 - http://www.zerodayinitiative.com/advisories/ZDI-17-499 - http://www.securitytracker.com/id/1039049 - https://success.trendmicro.com/solution/1117722 - http://www.zerodayinitiative.com/adviso
curitytracker.com/id/1039049 - https://success.trendmicro.com/solution/1117722 - http://www.zerodayinitiative.com/advisories/ZDI-17-498
CVE ID: CVE-2017-11389 State: PUBLISHED Published: 2017-08-02T21:00:00 Last Updated: 2024-08-05T18:05:30.513Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Trend Micro Control Manager 6.0 allows remote code execution by attackers able to drop arbitrary files in a web-facing directory. Formerly ZDI-CAN-4684. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100078 - http://www.securitytracker.com/id/1039049 - https://success.trendmicro.com/solution/1117722 - http://www.zerodayinitiative.com/advisories/ZDI-17-500
CVE ID: CVE-2017-11390 State: PUBLISHED Published: 2017-08-02T21:00:00 Last Updated: 2024-08-05T18:05:30.589Z Vendors: n/a Products: n/a Problem Types: n/a Description: XML external entity (XXE) processing vulnerability in Trend Micro Control Manager 6.0, if exploited, could lead to information disclosure. Formerly ZDI-CAN-4706. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100078 - http://www.zerodayinitiative.com/advisories/ZDI-17-501 - https://success.trendmicro.com/solution/1117722
CVE ID: CVE-2017-11391 State: PUBLISHED Published: 2017-08-03T15:00:00Z Last Updated: 2024-09-17T03:33:52.729Z Vendors: Trend Micro Products: Trend Micro InterScan Messaging Security Virtual Appliance Problem Types: Proxy Command Injection Description: Proxy command injection vulnerability in Trend Micro InterScan Messaging Virtual Appliance 9.0 and 9.1 allows remote attackers to execute arbitrary code on vulnerable installations. The specific flaw can be exploited by parsing the "t" parameter within modTMCSS Proxy. Formerly ZDI-CAN-4744. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100075 - https://success.trendmicro.com/solution/1117723
gram Container: References: - http://www.securityfocus.com/bid/100075 - https://success.trendmicro.com/solution/1117723 - http://www.zerodayinitiative.com/advisories/ZDI-17-502
CVE ID: CVE-2017-11392 State: PUBLISHED Published: 2017-08-03T15:00:00Z Last Updated: 2024-09-17T04:08:45.789Z Vendors: Trend Micro Products: Trend Micro InterScan Messaging Security Virtual Appliance Problem Types: Proxy Command Injection Description: Proxy command injection vulnerability in Trend Micro InterScan Messaging Virtual Appliance 9.0 and 9.1 allows remote attackers to execute arbitrary code on vulnerable installations. The specific flaw can be exploited by parsing the "T" parameter within modTMCSS Proxy. Formerly ZDI-CAN-4745. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100075 - https://success.trendmicro.com/solution/1117723
gram Container: References: - http://www.securityfocus.com/bid/100075 - https://success.trendmicro.com/solution/1117723 - http://www.zerodayinitiative.com/advisories/ZDI-17-504
CVE ID: CVE-2017-11393 State: PUBLISHED Published: 2017-08-03T15:00:00Z Last Updated: 2024-09-16T23:45:51.827Z Vendors: Trend Micro Products: Trend Micro OfficeScan Problem Types: Proxy Command Injection Description: Proxy command injection vulnerability in Trend Micro OfficeScan 11 and XG (12) allows remote attackers to execute arbitrary code on vulnerable installations. The specific flaw can be exploited by parsing the tr parameter within Proxy.php. Formerly ZDI-CAN-4543. Additional Analyst Notes: - CVE Program Container: References: - https://success.trendmicro.com/solution/1117769 - http://www.zerodayinitiative.com/advisories/ZDI-17-522 - http://www.securityfocus.com/bid/100127
CVE ID: CVE-2017-11394 State: PUBLISHED Published: 2017-08-03T15:00:00Z Last Updated: 2024-09-16T16:53:36.897Z Vendors: Trend Micro Products: Trend Micro OfficeScan Problem Types: Proxy Command Injection Description: Proxy command injection vulnerability in Trend Micro OfficeScan 11 and XG (12) allows remote attackers to execute arbitrary code on vulnerable installations. The specific flaw can be exploited by parsing the T parameter within Proxy.php. Formerly ZDI-CAN-4544. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100130 - https://success.trendmicro.com/solution/1117769 - https://www.exploit-db.com/exploits/42971/ - http://www.zerodayin
30 - https://success.trendmicro.com/solution/1117769 - https://www.exploit-db.com/exploits/42971/ - http://www.zerodayinitiative.com/advisories/ZDI-17-521
CVE ID: CVE-2017-11395 State: PUBLISHED Published: 2017-09-22T16:00:00Z Last Updated: 2024-09-16T23:36:43.518Z Vendors: Trend Micro Products: Smart Protection Server (Standalone) Problem Types: OS Command Injection Description: Command injection vulnerability in Trend Micro Smart Protection Server (Standalone) 3.1 and 3.2 server administration UI allows attackers with authenticated access to execute arbitrary code on vulnerable installations. Additional Analyst Notes: - CVE Program Container: References: - http://www.coresecurity.com/advisories/trend-micro-smart-protection-os-command-injection - http://www.securityfocus.com/bid/100461 - https://success.trendmicro.com/solution/1117933
CVE ID: CVE-2017-11396 State: PUBLISHED Published: 2017-09-22T16:00:00Z Last Updated: 2024-09-16T17:04:05.359Z Vendors: Trend Micro Products: InterScan Web Security Virtual Appliance Problem Types: Other (Input Parameter Inspection) Description: Vulnerability issues with the web service inspection of input parameters in Trend Micro Web Security Virtual Appliance 6.5 may allow potential attackers who already have administration rights to the console to implement remote code injections. Additional Analyst Notes: - CVE Program Container: References: - https://success.trendmicro.com/solution/1117412
CVE ID: CVE-2017-11397 State: PUBLISHED Published: 2017-12-15T14:00:00 Last Updated: 2024-08-05T18:05:30.601Z Vendors: Trend Micro Products: Trend Micro Encryption for Email Problem Types: OTHER - DLL Preloacding vulnerability Description: A service DLL preloading vulnerability in Trend Micro Encryption for Email versions 5.6 and below could allow an unauthenticated remote attacker to execute arbitrary code on a vulnerable system. Additional Analyst Notes: - CVE Program Container: References: - https://success.trendmicro.com/solution/1118796 - https://fortiguard.com/zeroday/FG-VD-17-079
CVE ID: CVE-2017-11398 State: PUBLISHED Published: 2018-01-19T19:00:00 Last Updated: 2024-08-05T18:05:30.602Z Vendors: Trend Micro Products: Trend Micro Smart Protection Server (Standalone) Problem Types: CWE-285 Description: A session hijacking via log disclosure vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.2 and below could allow an unauthenticated attacker to hijack active user sessions to perform authenticated requests on a vulnerable system. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/43388/ - http://www.securityfocus.com/bid/102275 - https://success.trendmicro.com/solution/1118992 - https://www.cor
its/43388/ - http://www.securityfocus.com/bid/102275 - https://success.trendmicro.com/solution/1118992 - https://www.coresecurity.com/advisories/trend-micro-smart-protection-server-multiple-vulnerabilities
CVE ID: CVE-2017-11399 State: PUBLISHED Published: 2017-07-17T19:00:00 Last Updated: 2024-08-05T18:05:30.684Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the ape_decode_frame function in libavcodec/apedec.c in FFmpeg 2.4 through 3.3.2 allows remote attackers to cause a denial of service (out-of-array access and application crash) or possibly have unspecified other impact via a crafted APE file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100019 - http://www.debian.org/security/2017/dsa-3957 - https://github.com/FFmpeg/FFmpeg/commit/ba4beaf6149f7241c8bd85fe853318c2f6837ad0 - https://github.com/FFmpeg/FFmp
3957 - https://github.com/FFmpeg/FFmpeg/commit/ba4beaf6149f7241c8bd85fe853318c2f6837ad0 - https://github.com/FFmpeg/FFmpeg/commit/96349da5ec8eda9f0368446e557fe0c8ba0e66b7