Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-2858 State: PUBLISHED Published: 2018-06-01T15:00:00Z Last Updated: 2024-09-16T16:18:16.697Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Talos Products: Natus Problem Types: denial of service Description: An exploitable denial-of-service vulnerability exists in the traversal of lists functionality of Natus Xltek NeuroWorks 8. A specially crafted network packet can cause an out-of-bounds read, resulting in a denial of service. An attacker can send a malicious packet to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104490 - https://www.talosintelligence.com/vulne
- CVE Program Container: References: - http://www.securityfocus.com/bid/104490 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0362
CVE ID: CVE-2017-2859 State: REJECTED Published: 2019-10-30T15:36:43 Last Updated: 2019-10-30T15:36:43 Description: No description available.
CVE ID: CVE-2017-2860 State: PUBLISHED Published: 2018-06-01T15:00:00Z Last Updated: 2024-09-16T18:13:06.563Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Talos Products: Natus Problem Types: denial of service Description: An exploitable denial-of-service vulnerability exists in the lookup entry functionality of KeyTrees in Natus Xltek NeuroWorks 8. A specially crafted network packet can cause an out-of-bounds read, resulting in a denial of service. An attacker can send a malicious packet to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104490 - https://www.talosintelligence.com
otes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104490 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0364
CVE ID: CVE-2017-2861 State: PUBLISHED Published: 2018-04-05T19:00:00Z Last Updated: 2024-09-16T23:00:44.751Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Natus Medical Incorporated Products: Natus Problem Types: denial of service Description: An exploitable Denial of Service vulnerability exists in the use of a return value in the NewProducerStream command in Natus Xltek NeuroWorks 8. A specially crafted network packet can cause an out of bounds read resulting in a denial of service. An attacker can send a malicious packet to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104490
vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104490 - https://talosintelligence.com/vulnerability_reports/TALOS-2017-0365
CVE ID: CVE-2017-2862 State: PUBLISHED Published: 2017-09-05T18:00:00Z Last Updated: 2024-09-16T22:30:21.047Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: GNOME Products: Gdk-Pixbuf Problem Types: remote code execution Description: An exploitable heap overflow vulnerability exists in the gdk_pixbuf__jpeg_image_load_increment functionality of Gdk-Pixbuf 2.36.6. A specially crafted jpeg file can cause a heap overflow resulting in remote code execution. An attacker can send a file or url to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2017/dsa-3978 - http://www.securityfocus.com/bid
: - CVE Program Container: References: - http://www.debian.org/security/2017/dsa-3978 - http://www.securityfocus.com/bid/100541 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0366
CVE ID: CVE-2017-2863 State: PUBLISHED Published: 2017-07-12T17:00:00Z Last Updated: 2024-09-16T20:03:45.473Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Iceni Products: Infix Problem Types: remote code execution Description: An out-of-bounds write vulnerability exists in the PDF parsing functionality of Infix 7.1.5. A specially crafted PDF file can cause a vulnerability resulting in potential memory corruption. An attacker can send the victim a specific PDF file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2017-0367
CVE ID: CVE-2017-2864 State: PUBLISHED Published: 2017-11-07T16:00:00Z Last Updated: 2024-09-16T23:35:53.991Z Severity: HIGH (CVSS 8.1 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Circle Media Products: Circle Problem Types: authentication bypass Description: An exploitable vulnerability exists in the generation of authentication token functionality of Circle with Disney. Specially crafted network packets can cause a valid authentication token to be returned to the attacker resulting in authentication bypass. An attacker can send a series of packets to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vuln
s vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0370
CVE ID: CVE-2017-2865 State: PUBLISHED Published: 2017-11-07T16:00:00Z Last Updated: 2024-09-16T19:31:51.960Z Severity: CRITICAL (CVSS 9.6 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Circle Media Products: Circle Problem Types: command injection Description: An exploitable vulnerability exists in the firmware update functionality of Circle with Disney. Specially crafted network packets can cause the product to run an attacker-supplied shell script. An attacker can intercept and alter network traffic to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0371
CVE ID: CVE-2017-2866 State: PUBLISHED Published: 2017-11-07T16:00:00Z Last Updated: 2024-09-17T03:22:25.762Z Severity: CRITICAL (CVSS 9.9 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Circle Media Products: Circle Problem Types: command injection Description: An exploitable vulnerability exists in the /api/CONFIG/backup functionality of Circle with Disney. Specially crafted network packets can cause an OS command injection. An attacker can send an HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0372
CVE ID: CVE-2017-2867 State: PUBLISHED Published: 2018-04-05T19:00:00Z Last Updated: 2024-09-16T19:04:26.068Z Severity: CRITICAL (CVSS 9 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Natus Medical Incorporated Products: Natus Problem Types: remote code execution Description: An exploitable code execution vulnerability exists in the SavePatientMontage functionality of Natus Xltek NeuroWorks 8. A specially crafted network packet can cause a stack buffer overflow resulting in code execution. An attacker can a malicious packet to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104490 - https://talosintelligenc
Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104490 - https://talosintelligence.com/vulnerability_reports/TALOS-2017-0373
CVE ID: CVE-2017-2868 State: PUBLISHED Published: 2018-04-05T19:00:00Z Last Updated: 2024-09-16T19:01:11.369Z Severity: CRITICAL (CVSS 10 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Natus Medical Incorporated Products: Natus Problem Types: remote code execution Description: An exploitable code execution vulnerability exists in the NewProducerStream functionality of Natus Xltek NeuroWorks 8. A specially crafted network packet can cause a stack buffer overflow resulting in code execution. An attacker can send a malicious packet to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104490 - https://talosintell
onal Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104490 - https://talosintelligence.com/vulnerability_reports/TALOS-2017-0374
CVE ID: CVE-2017-2869 State: PUBLISHED Published: 2018-04-05T19:00:00Z Last Updated: 2024-09-17T00:36:03.371Z Severity: CRITICAL (CVSS 10 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Natus Medical Incorporated Products: Natus Problem Types: remote code execution Description: An exploitable code execution vulnerability exists in the OpenProducer functionality of Natus Xltek NeuroWorks 8. A specially crafted network packet can cause a stack buffer overflow resulting in code execution. An attacker can send a malicious packet to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104490 - https://talosintelligenc
Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104490 - https://talosintelligence.com/vulnerability_reports/TALOS-2017-0375
CVE ID: CVE-2017-2870 State: PUBLISHED Published: 2017-09-05T18:00:00Z Last Updated: 2024-09-16T17:48:57.369Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: GNOME Products: Gdk-Pixbuf Problem Types: remote code execution Description: An exploitable integer overflow vulnerability exists in the tiff_image_parse functionality of Gdk-Pixbuf 2.36.6 when compiled with Clang. A specially crafted tiff file can cause a heap-overflow resulting in remote code execution. An attacker can send a file or a URL to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100541 - https://lists.debian.org/deb
yst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100541 - https://lists.debian.org/debian-lts-announce/2019/12/msg00025.html - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0377
CVE ID: CVE-2017-2871 State: PUBLISHED Published: 2018-04-17T20:00:00Z Last Updated: 2024-09-16T20:47:04.590Z Severity: CRITICAL (CVSS 9.6 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Talos Products: Foscam Problem Types: Improper Authentication Description: Insufficient security checks exist in the recovery procedure used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. An attacker who is in the same subnetwork of the camera or has remote administrator access can fully compromise the device by performing a firmware recovery using a custom image. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_rep
image. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2017-0378
CVE ID: CVE-2017-2872 State: PUBLISHED Published: 2018-09-17T20:00:00Z Last Updated: 2024-09-16T18:43:19.605Z Severity: CRITICAL (CVSS 9.9 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Foscam Products: Foscam Indoor IP Camera C1 Series Problem Types: Improper Authentication Description: Insufficient security checks exist in the recovery procedure used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A HTTP request can allow for a user to perform a firmware upgrade using a crafted image. Before any firmware upgrades in this image are flashed to the device, binaries as well as arguments to shell commands contained in the image are executed with elevated privil
to the device, binaries as well as arguments to shell commands contained in the image are executed with elevated privileges. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0379
CVE ID: CVE-2017-2873 State: PUBLISHED Published: 2018-09-19T18:00:00Z Last Updated: 2024-09-16T20:07:36.326Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Foscam Products: Foscam C1 Indoor HD Camera Problem Types: OS Command Injection Description: An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A specially crafted HTTP request can allow for a user to inject arbitrary shell characters during the SoftAP configuration resulting in command injection. An attacker can simply send an HTTP request to the device to trigger this vulnerability. Addition
in command injection. An attacker can simply send an HTTP request to the device to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2017-0380
CVE ID: CVE-2017-2874 State: PUBLISHED Published: 2018-09-17T18:00:00Z Last Updated: 2024-09-17T03:43:57.607Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Foscam Products: Foscam Indoor IP Camera C1 Series Problem Types: Information Exposure Description: An information disclosure vulnerability exists in the Multi-Camera interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A specially crafted request on port 10001 can allow for a user to retrieve sensitive information without authentication. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0
alyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0381
CVE ID: CVE-2017-2875 State: PUBLISHED Published: 2018-09-19T16:00:00Z Last Updated: 2024-09-16T19:05:36.931Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Foscam Products: Foscam C1 Indoor HD Camera Problem Types: Buffer Overflow Description: An exploitable buffer overflow vulnerability exists in the Multi-Camera interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A specially crafted request on port 10000 can cause a buffer overflow resulting in overwriting arbitrary data. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2017-0382
CVE ID: CVE-2017-2876 State: PUBLISHED Published: 2018-09-19T18:00:00Z Last Updated: 2024-09-16T22:08:50.813Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Foscam Products: Foscam C1 Indoor HD Camera Problem Types: Stack-based Buffer Overflow Description: An exploitable buffer overflow vulnerability exists in the Multi-Camera interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A specially crafted request on port 10000 can cause a buffer overflow resulting in overwriting arbitrary data. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0383
CVE ID: CVE-2017-2877 State: PUBLISHED Published: 2018-09-19T18:00:00Z Last Updated: 2024-09-17T02:26:47.991Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Foscam Products: Foscam C1 Indoor HD Camera Problem Types: Missing Report of Error Condition Description: A missing error check exists in the Multi-Camera interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A specially crafted request on port 10001 could allow an attacker to reset the user accounts to factory defaults, without authentication. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2
tional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2017-0384
CVE ID: CVE-2017-2878 State: PUBLISHED Published: 2018-09-19T16:00:00Z Last Updated: 2024-09-17T03:18:34.203Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Foscam Products: Foscam C1 Indoor HD Camera Problem Types: Buffer Overflow Description: An exploitable buffer overflow vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A specially crafted HTTP request can cause a buffer overflow resulting in overwriting arbitrary data. An attacker can simply send an HTTP request to the device to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - htt
equest to the device to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2017-0385
CVE ID: CVE-2017-2879 State: PUBLISHED Published: 2018-09-19T16:00:00Z Last Updated: 2024-09-17T03:38:09.053Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Foscam Products: Foscam C1 Indoor HD Camera Problem Types: Buffer Overflow Description: An exploitable buffer overflow vulnerability exists in the UPnP implementation used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A specially crafted UPnP discovery response can cause a buffer overflow resulting in overwriting arbitrary data. An attacker needs to be in the same subnetwork and reply to a discovery message to trigger this vulnerability. Additional Analyst Notes: - CVE Program
same subnetwork and reply to a discovery message to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2017-0386
CVE ID: CVE-2017-2880 State: PUBLISHED Published: 2017-10-05T19:00:00Z Last Updated: 2024-09-17T02:57:13.420Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Talos Products: Computerinsel Photoline Problem Types: remote code execution Description: An memory corruption vulnerability exists in the .GIF parsing functionality of Computerinsel Photoline 20.02. A specially crafted .GIF file can cause a vulnerability resulting in potential code execution. An attacker can send specific .GIF file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101188 - https://www.talosintelligence.com/vul
: - CVE Program Container: References: - http://www.securityfocus.com/bid/101188 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0387
CVE ID: CVE-2017-2881 State: PUBLISHED Published: 2017-11-07T16:00:00Z Last Updated: 2024-09-17T03:03:02.942Z Severity: CRITICAL (CVSS 9.6 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Circle Media Products: Circle Problem Types: remote code execution Description: An exploitable vulnerability exists in the torlist update functionality of Circle with Disney running firmware 2.0.1. Specially crafted network packets can cause the product to run an attacker-supplied shell script. An attacker can intercept and alter network traffic to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-
nal Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0388
CVE ID: CVE-2017-2882 State: PUBLISHED Published: 2017-11-07T16:00:00Z Last Updated: 2024-09-16T22:52:09.106Z Severity: CRITICAL (CVSS 9 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Circle Media Products: Circle Problem Types: remote code execution Description: An exploitable vulnerability exists in the servers update functionality of Circle with Disney running firmware 2.0.1. Specially crafted network packets can cause the device to overwrite sensitive files, resulting in code execution. An attacker needs to impersonate a remote server in order to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerab
lnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0389
CVE ID: CVE-2017-2883 State: PUBLISHED Published: 2017-11-07T16:00:00Z Last Updated: 2024-09-16T17:22:43.552Z Severity: CRITICAL (CVSS 9 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Circle Media Products: Circle Problem Types: remote code execution Description: An exploitable vulnerability exists in the database update functionality of Circle with Disney running firmware 2.0.1. Specially crafted network packets can cause the device to execute arbitrary code. An attacker needs to impersonate a remote server in order to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0390
CVE ID: CVE-2017-2884 State: PUBLISHED Published: 2017-11-07T16:00:00Z Last Updated: 2024-09-17T01:51:31.093Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Circle Media Products: Circle Problem Types: authentication bypass Description: An exploitable vulnerability exists in the user photo update functionality of Circle with Disney running firmware 2.0.1. A repeated set of specially crafted API calls can cause the device to corrupt essential memory, resulting in a bricked device. An attacker needs network connectivity to the device to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com
r this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0391
CVE ID: CVE-2017-2885 State: PUBLISHED Published: 2018-04-24T19:00:00Z Last Updated: 2024-09-17T03:32:40.423Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: GNOME Products: libsoup Problem Types: buffer overflow Description: An exploitable stack based buffer overflow vulnerability exists in the GNOME libsoup 2.58. A specially crafted HTTP request can cause a stack overflow resulting in remote code execution. An attacker can send a special HTTP request to the vulnerable server to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2017:2459 - https://www.debian.org/security/2017
Program Container: References: - https://access.redhat.com/errata/RHSA-2017:2459 - https://www.debian.org/security/2017/dsa-3929 - http://www.securityfocus.com/bid/100258 - http://seclists.org/fulldisclosure/2020/Dec/3 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0392 - http://packetstormsecurity.com/files/160388/ProCaster-LE-32F430-GStreamer-souphttpsrc-libsoup-2.51.3-Stack-Overflow.html
CVE ID: CVE-2017-2886 State: PUBLISHED Published: 2017-12-11T22:00:00Z Last Updated: 2024-09-16T23:16:40.577Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: ACDSee Products: ACDSee Ultimate Problem Types: parsing code execution Description: A memory corruption vulnerability exists in the .PSD parsing functionality of ACDSee Ultimate 10.0.0.292. A specially crafted .PSD file can cause an out of bounds write vulnerability resulting in potential code execution. An attacker can send a specific .PSD file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102133 - https://www.talosintelli
Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102133 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0393
CVE ID: CVE-2017-2887 State: PUBLISHED Published: 2017-10-11T18:00:00Z Last Updated: 2024-09-17T02:57:14.504Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Talos Products: Simple Direct Media Problem Types: Remote code execution Description: An exploitable buffer overflow vulnerability exists in the XCF property handling functionality of SDL_image 2.0.1. A specially crafted xcf file can cause a stack-based buffer overflow resulting in potential code execution. An attacker can provide a specially crafted XCF file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2018/dsa-4177 - http