Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
xploit this vulnerability by modifying the platform usb modem command in the CLI of an affected device. A successful exploit could allow the attacker to overwrite arbitrary files on the underlying operating system of an affected device. Cisco Bug IDs: CSCvf10783. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100656 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-asr920-2 - http://www.securitytracker.com/id/1039282
CVE ID: CVE-2017-6796 State: PUBLISHED Published: 2017-09-07T21:00:00 Last Updated: 2024-08-05T15:41:17.554Z Vendors: n/a Products: Cisco IOS XE Problem Types: CWE-78 Description: A vulnerability in the USB-modem code of Cisco IOS XE Software running on Cisco ASR 920 Series Aggregation Services Routers could allow an authenticated, local attacker to inject and execute arbitrary commands on the underlying operating system of an affected device. The vulnerability is due to improper input validation of the platform usb modem command in the CLI of the affected software. An attacker could exploit this vulnerability by modifying the platform usb modem command in the CLI of an affected device. A su
cker could exploit this vulnerability by modifying the platform usb modem command in the CLI of an affected device. A successful exploit could allow the attacker to inject and execute arbitrary commands on the underlying operating system of an affected device. Cisco Bug IDs: CSCve48949. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039281 - http://www.securityfocus.com/bid/100647 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-asr920-1
CVE ID: CVE-2017-6797 State: PUBLISHED Published: 2017-03-10T00:00:00 Last Updated: 2024-08-05T15:41:17.573Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in bug_change_status_page.php in MantisBT before 1.3.7 and 2.x before 2.2.1 allows remote attackers to inject arbitrary JavaScript via the 'action_type' parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mantisbt/mantisbt/commit/a2d90ecabf3bcf3aa22ed9dbbecfd3d37902956f - http://www.securitytracker.com/id/1037978 - http://www.mantisbt.org/bugs/view.php?id=22486 - http://www.securityfocus.com/bid/96818 - https://github.com/mantisbt/mantisbt/co
w.mantisbt.org/bugs/view.php?id=22486 - http://www.securityfocus.com/bid/96818 - https://github.com/mantisbt/mantisbt/commit/c272c3f65da9677e505ff692b1f1e476b3afa56e - http://www.openwall.com/lists/oss-security/2017/03/10/1
CVE ID: CVE-2017-6798 State: PUBLISHED Published: 2017-03-10T10:29:00 Last Updated: 2024-08-05T15:41:17.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: Trend Micro Endpoint Sensor 1.6 before b1290 has a DLL hijacking vulnerability that allows remote attackers to execute arbitrary code, aka Trend Micro Vulnerability Identifier 2015-0208. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96857 - https://success.trendmicro.com/solution/1116827
CVE ID: CVE-2017-6799 State: PUBLISHED Published: 2017-03-10T10:29:00 Last Updated: 2024-08-05T15:41:17.544Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in view_filters_page.php in MantisBT before 2.2.1 allows remote attackers to inject arbitrary JavaScript via the 'view_type' parameter. Additional Analyst Notes: - CVE Program Container: References: - http://mantisbt.org/bugs/view.php?id=22497 - https://github.com/mantisbt/mantisbt/commit/1677251434b6e8b2be8f1d4376a3e78f7be14d95 - http://www.openwall.com/lists/oss-security/2017/03/10/1 - http://www.securityfocus.com/bid/96819
CVE ID: CVE-2017-6800 State: PUBLISHED Published: 2017-03-10T10:29:00 Last Updated: 2024-08-05T15:41:17.516Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ytnef before 1.9.2. An invalid memory access (heap-based buffer over-read) can occur during handling of LONG data types, related to MAPIPrint() in libytnef. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Yeraze/ytnef/issues/28 - http://www.debian.org/security/2017/dsa-3846 - https://github.com/Yeraze/ytnef/commit/f98f5d4adc1c4bd4033638f6167c1bb95d642f89 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH
d642f89 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/
CVE ID: CVE-2017-6801 State: PUBLISHED Published: 2017-03-10T10:29:00 Last Updated: 2024-08-05T15:41:17.541Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ytnef before 1.9.2. There is a potential out-of-bounds access with fields of Size 0 in TNEFParse() in libytnef. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Yeraze/ytnef/commit/3cb0f914d6427073f262e1b2b5fd973e3043cdf7 - http://www.debian.org/security/2017/dsa-3846 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/
CVE ID: CVE-2017-6802 State: PUBLISHED Published: 2017-03-10T10:29:00 Last Updated: 2024-08-05T15:41:17.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ytnef before 1.9.2. There is a potential heap-based buffer over-read on incoming Compressed RTF Streams, related to DecompressRTF() in libytnef. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2017/dsa-3846 - https://github.com/Yeraze/ytnef/issues/34 - https://github.com/Yeraze/ytnef/commit/22f8346c8d4f0020a40d9f258fdb3bfc097359cc - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT6
tps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/
CVE ID: CVE-2017-6803 State: PUBLISHED Published: 2017-03-20T16:00:00 Last Updated: 2024-08-05T15:41:17.515Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the web interface in the Scheduler in SolarWinds (formerly Serv-U) FTP Voyager 16.2.0 allow remote attackers to hijack the authentication of users for requests that (1) change the admin password, (2) terminate the scheduler, or (3) possibly execute arbitrary commands via crafted requests to Admin/XML/Result.xml. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/141567/FTP-Voyager-Scheduler-16.2.0-CSRF-Denial-Of-Ser
ram Container: References: - http://packetstormsecurity.com/files/141567/FTP-Voyager-Scheduler-16.2.0-CSRF-Denial-Of-Service.html - http://www.securityfocus.com/bid/96814 - http://hyp3rlinx.altervista.org/advisories/FTP-VOYAGER-SCHEDULER-CSRF-REMOTE-CMD-EXECUTION.txt - https://www.exploit-db.com/exploits/41574/
CVE ID: CVE-2017-6804 State: REJECTED Published: 2017-03-10T10:29:00 Last Updated: 2017-03-17T08:57:01 Description: No description available.
CVE ID: CVE-2017-6805 State: PUBLISHED Published: 2017-03-20T16:00:00 Last Updated: 2024-08-05T15:41:17.554Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the TFTP server in MobaXterm Personal Edition 9.4 allows remote attackers to read arbitrary files via a .. (dot dot) in a GET command. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/141582/MobaXterm-Personal-Edition-9.4-Path-Traversal.html - http://www.securityfocus.com/bid/96886 - https://www.exploit-db.com/exploits/41592/ - http://seclists.org/fulldisclosure/2017/Mar/34 - http://hyp3rlinx.altervista.org/advisories/MOBAXTERM-TFTP-PATH-
1592/ - http://seclists.org/fulldisclosure/2017/Mar/34 - http://hyp3rlinx.altervista.org/advisories/MOBAXTERM-TFTP-PATH-TRAVERSAL-REMOTE-FILE-ACCESS.txt
CVE ID: CVE-2017-6807 State: PUBLISHED Published: 2017-03-13T14:00:00 Last Updated: 2024-08-05T15:41:17.546Z Vendors: n/a Products: n/a Problem Types: n/a Description: mod_auth_mellon before 0.13.1 is vulnerable to a Cross-Site Session Transfer attack, where a user with access to one web site running on a server can copy their session cookie to a different web site on the same server to get access to that site. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/UNINETT/mod_auth_mellon/releases/tag/v0.13.1 - http://www.securityfocus.com/bid/96843 - https://sympa.uninett.no/lists/uninett.no/arc/modmellon/2017-03/msg00008.html
CVE ID: CVE-2017-6808 State: PUBLISHED Published: 2017-03-11T06:46:00 Last Updated: 2024-08-05T15:41:17.546Z Vendors: n/a Products: n/a Problem Types: n/a Description: paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/template_files/admin.faq.php (id parameter). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96939 - https://github.com/paintballrefjosh/MaNGOSWebV4/issues/18
CVE ID: CVE-2017-6809 State: PUBLISHED Published: 2017-03-11T06:46:00 Last Updated: 2024-08-05T15:41:17.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/template_files/admin.donate.php (id parameter). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96939 - https://github.com/paintballrefjosh/MaNGOSWebV4/issues/21
CVE ID: CVE-2017-6810 State: PUBLISHED Published: 2017-03-11T06:46:00 Last Updated: 2024-08-05T15:41:17.536Z Vendors: n/a Products: n/a Problem Types: n/a Description: paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/template_files/admin.fplinks.php (linkid parameter). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/paintballrefjosh/MaNGOSWebV4/issues/20 - http://www.securityfocus.com/bid/96939
CVE ID: CVE-2017-6811 State: PUBLISHED Published: 2017-03-11T06:46:00 Last Updated: 2024-08-05T15:41:17.515Z Vendors: n/a Products: n/a Problem Types: n/a Description: paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/template_files/admin.shop.php (id parameter). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/paintballrefjosh/MaNGOSWebV4/issues/19 - http://www.securityfocus.com/bid/96939
CVE ID: CVE-2017-6812 State: PUBLISHED Published: 2017-03-11T06:46:00 Last Updated: 2024-08-05T15:41:17.561Z Vendors: n/a Products: n/a Problem Types: n/a Description: paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/template_files/admin.vote.php (id parameter). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96939 - https://github.com/paintballrefjosh/MaNGOSWebV4/issues/17
CVE ID: CVE-2017-6813 State: PUBLISHED Published: 2017-05-23T03:56:00 Last Updated: 2024-08-05T15:41:17.649Z Vendors: n/a Products: n/a Problem Types: n/a Description: A service provided by Zimbra Collaboration Suite (ZCS) before 8.7.6 fails to require needed privileges before performing a few requested operations. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.zimbra.com/wiki/Security_Center - http://www.securityfocus.com/bid/98087 - https://wiki.zimbra.com/wiki/Zimbra_Releases/8.7.6
CVE ID: CVE-2017-6814 State: PUBLISHED Published: 2017-03-12T01:00:00 Last Updated: 2024-08-05T15:41:17.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: In WordPress before 4.7.3, there is authenticated Cross-Site Scripting (XSS) via Media File Metadata. This is demonstrated by both (1) mishandling of the playlist shortcode in the wp_playlist_shortcode function in wp-includes/media.php and (2) mishandling of meta information in the renderTracks function in wp-includes/js/mediaelement/wp-playlist.js. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/WordPress/WordPress/commit/28f838ca3ee205b6f39cd2bf23eb4e5f52796bd7 - http://www.securitytracker
s: - https://github.com/WordPress/WordPress/commit/28f838ca3ee205b6f39cd2bf23eb4e5f52796bd7 - http://www.securitytracker.com/id/1037959 - http://www.debian.org/security/2017/dsa-3815 - https://wpvulndb.com/vulnerabilities/8765 - http://www.securityfocus.com/bid/96601 - https://sumofpwn.nl/advisory/2016/wordpress_audio_playlist_functionality_is_affected_by_cross_site_scripting.html - https://wordpress.org/news/2017/03/wordpress-4-7-3-security-and-maintenance-release/ - http://openwall.com/lists/oss-security/2017/03/06/8 - https://codex.wordpress.org/Version_4.7.3
CVE ID: CVE-2017-6815 State: PUBLISHED Published: 2017-03-12T01:00:00 Last Updated: 2024-08-05T15:41:17.581Z Vendors: n/a Products: n/a Problem Types: n/a Description: In WordPress before 4.7.3 (wp-includes/pluggable.php), control characters can trick redirect URL validation. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96600 - http://www.securitytracker.com/id/1037959 - http://www.debian.org/security/2017/dsa-3815 - https://wpvulndb.com/vulnerabilities/8766 - https://wordpress.org/news/2017/03/wordpress-4-7-3-security-and-maintenance-release/ - https://codex.wordpress.org/Version_4.7.3 - https://github.com/WordPress/WordPress/commit/288cd
d-maintenance-release/ - https://codex.wordpress.org/Version_4.7.3 - https://github.com/WordPress/WordPress/commit/288cd469396cfe7055972b457eb589cea51ce40e
CVE ID: CVE-2017-6816 State: PUBLISHED Published: 2017-03-12T01:00:00 Last Updated: 2024-08-05T15:41:17.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: In WordPress before 4.7.3 (wp-admin/plugins.php), unintended files can be deleted by administrators using the plugin deletion functionality. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037959 - http://www.debian.org/security/2017/dsa-3815 - https://github.com/WordPress/WordPress/commit/4d80f8b3e1b00a3edcee0774dc9c2f4c78f9e663 - https://wordpress.org/news/2017/03/wordpress-4-7-3-security-and-maintenance-release/ - https://wpvulndb.com/vulnerabilities/8767 - https://codex.w
/2017/03/wordpress-4-7-3-security-and-maintenance-release/ - https://wpvulndb.com/vulnerabilities/8767 - https://codex.wordpress.org/Version_4.7.3 - http://www.securityfocus.com/bid/96598
CVE ID: CVE-2017-6817 State: PUBLISHED Published: 2017-03-12T01:00:00 Last Updated: 2024-08-05T15:41:17.605Z Vendors: n/a Products: n/a Problem Types: n/a Description: In WordPress before 4.7.3 (wp-includes/embed.php), there is authenticated Cross-Site Scripting (XSS) in YouTube URL Embeds. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/WordPress/WordPress/commit/419c8d97ce8df7d5004ee0b566bc5e095f0a6ca8 - http://www.securitytracker.com/id/1037959 - http://www.debian.org/security/2017/dsa-3815 - https://wpvulndb.com/vulnerabilities/8768 - http://www.securityfocus.com/bid/96601 - https://wordpress.org/news/2017/03/wordpress-4-7-3-security-and-maintenance-re
http://www.securityfocus.com/bid/96601 - https://wordpress.org/news/2017/03/wordpress-4-7-3-security-and-maintenance-release/ - https://codex.wordpress.org/Version_4.7.3
CVE ID: CVE-2017-6818 State: PUBLISHED Published: 2017-03-12T01:00:00 Last Updated: 2024-08-05T15:41:17.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: In WordPress before 4.7.3 (wp-admin/js/tags-box.js), there is cross-site scripting (XSS) via taxonomy term names. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037959 - http://www.securityfocus.com/bid/96601 - https://wpvulndb.com/vulnerabilities/8769 - https://github.com/WordPress/WordPress/commit/9092fd01e1f452f37c313d38b18f9fe6907541f9 - https://wordpress.org/news/2017/03/wordpress-4-7-3-security-and-maintenance-release/ - https://codex.wordpress.org/Version_4.7.3
CVE ID: CVE-2017-6819 State: PUBLISHED Published: 2017-03-12T01:00:00 Last Updated: 2024-08-05T15:41:17.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: In WordPress before 4.7.3, there is cross-site request forgery (CSRF) in Press This (wp-admin/includes/class-wp-press-this.php), leading to excessive use of server resources. The CSRF can trigger an outbound HTTP request for a large file that is then parsed by Press This. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96602 - http://www.securitytracker.com/id/1037959 - https://wpvulndb.com/vulnerabilities/8770 - http://openwall.com/lists/oss-security/2017/03/06/7 - https://wor
/1037959 - https://wpvulndb.com/vulnerabilities/8770 - http://openwall.com/lists/oss-security/2017/03/06/7 - https://wordpress.org/news/2017/03/wordpress-4-7-3-security-and-maintenance-release/ - https://codex.wordpress.org/Version_4.7.3 - https://github.com/WordPress/WordPress/commit/263831a72d08556bc2f3a328673d95301a152829 - https://sumofpwn.nl/advisory/2016/cross_site_request_forgery_in_wordpress_press_this_function_allows_dos.html
CVE ID: CVE-2017-6820 State: PUBLISHED Published: 2017-03-12T04:57:00 Last Updated: 2024-08-05T15:41:17.592Z Vendors: n/a Products: n/a Problem Types: n/a Description: rcube_utils.php in Roundcube before 1.1.8 and 1.2.x before 1.2.4 is susceptible to a cross-site scripting vulnerability via a crafted Cascading Style Sheets (CSS) token sequence within an SVG element. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/roundcube/roundcubemail/wiki/Changelog#release-124 - https://roundcube.net/news/2017/03/10/updates-1.2.4-and-1.1.8-released - https://github.com/roundcube/roundcubemail/commit/cbd35626f7db7855f3b5e2db00d28ecc1554e9f4 - https://github.com/roundcube
ttps://github.com/roundcube/roundcubemail/commit/cbd35626f7db7855f3b5e2db00d28ecc1554e9f4 - https://github.com/roundcube/roundcubemail/releases/tag/1.1.8 - https://github.com/roundcube/roundcubemail/releases/tag/1.2.4 - http://www.securityfocus.com/bid/96817 - https://github.com/roundcube/roundcubemail/commit/fa2824fdcd44af3f970b2797feb47652482c8305
CVE ID: CVE-2017-6821 State: PUBLISHED Published: 2017-05-23T03:56:00 Last Updated: 2024-08-05T15:41:17.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Zimbra Collaboration Suite (aka ZCS) before 8.7.6 allows attackers to have unspecified impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.zimbra.com/wiki/Security_Center - http://www.securityfocus.com/bid/98090 - https://wiki.zimbra.com/wiki/Zimbra_Releases/8.7.6
CVE ID: CVE-2017-6823 State: PUBLISHED Published: 2017-03-12T04:57:00 Last Updated: 2024-08-05T15:41:17.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: Fiyo CMS 2.0.6.1 allows remote authenticated users to gain privileges via a modified level parameter to dapur/ in an app=user&act=edit action. Additional Analyst Notes: - CVE Program Container: References: - http://rungga.blogspot.co.id/2017/03/privilege-escalation-manipulation-of.html - http://www.securityfocus.com/bid/96889 - https://www.exploit-db.com/exploits/41594/
CVE ID: CVE-2017-6827 State: PUBLISHED Published: 2017-03-15T14:00:00 Last Updated: 2024-08-05T15:41:17.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the MSADPCM::initializeCoefficients function in MSADPCM.cpp in audiofile (aka libaudiofile and Audio File Library) 0.3.6 allows remote attackers to have unspecified impact via a crafted audio file. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2017/dsa-3814 - https://blogs.gentoo.org/ago/2017/02/20/audiofile-heap-based-buffer-overflow-in-msadpcminitializecoefficients-msadpcm-cpp/
CVE ID: CVE-2017-6828 State: PUBLISHED Published: 2017-03-15T14:00:00 Last Updated: 2024-08-05T15:41:17.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the readValue function in FileHandle.cpp in audiofile (aka libaudiofile and Audio File Library) 0.3.6 allows remote attackers to have unspecified impact via a crafted WAV file. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/02/20/audiofile-heap-based-buffer-overflow-in-readvalue-filehandle-cpp/ - http://www.securityfocus.com/bid/97183 - http://www.debian.org/security/2017/dsa-3814
CVE ID: CVE-2017-6829 State: PUBLISHED Published: 2017-03-20T16:00:00 Last Updated: 2024-08-05T15:41:17.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: The decodeSample function in IMA.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (crash) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mpruett/audiofile/issues/33 - http://www.debian.org/security/2017/dsa-3814 - http://www.securityfocus.com/bid/97189 - https://blogs.gentoo.org/ago/2017/02/20/audiofile-global-buffer-overflow-in-decodesample-ima-cpp/ - http://www.openwall.com/lists/oss-security/2017/03/13/1 - https://gi
e-global-buffer-overflow-in-decodesample-ima-cpp/ - http://www.openwall.com/lists/oss-security/2017/03/13/1 - https://github.com/antlarr/audiofile/commit/25eb00ce913452c2e614548d7df93070bf0d066f
CVE ID: CVE-2017-6830 State: PUBLISHED Published: 2017-03-20T16:00:00 Last Updated: 2024-08-05T15:41:17.544Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the alaw2linear_buf function in G711.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (crash) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mpruett/audiofile/pull/42 - https://github.com/mpruett/audiofile/issues/34 - https://blogs.gentoo.org/ago/2017/02/20/audiofile-heap-based-buffer-overflow-in-alaw2linear_buf-g711-cpp/ - http://www.debian.org/security/2017/dsa-3814 - http://www.openwall.
based-buffer-overflow-in-alaw2linear_buf-g711-cpp/ - http://www.debian.org/security/2017/dsa-3814 - http://www.openwall.com/lists/oss-security/2017/03/13/2
CVE ID: CVE-2017-6831 State: PUBLISHED Published: 2017-03-20T16:00:00 Last Updated: 2024-08-05T15:41:17.562Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the decodeBlockWAVE function in IMA.cpp in Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0 and 0.2.7 allows remote attackers to cause a denial of service (crash) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/02/20/audiofile-heap-based-buffer-overflow-in-imadecodeblockwave-ima-cpp/ - https://github.com/mpruett/audiofile/issues/35 - http://www.debian.org/security/2017/dsa-3814 - http://www.sec
ma-cpp/ - https://github.com/mpruett/audiofile/issues/35 - http://www.debian.org/security/2017/dsa-3814 - http://www.securityfocus.com/bid/97588 - http://www.openwall.com/lists/oss-security/2017/03/13/3 - https://github.com/antlarr/audiofile/commit/a2e9eab8ea87c4ffc494d839ebb4ea145eb9f2e6 - https://github.com/Hack-Me/Pocs_for_Multi_Versions/tree/main/CVE-2017-6831
CVE ID: CVE-2017-6832 State: PUBLISHED Published: 2017-03-20T16:00:00 Last Updated: 2024-08-05T15:41:17.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the decodeBlock in MSADPCM.cpp in Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0, 0.2.7 allows remote attackers to cause a denial of service (crash) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mpruett/audiofile/pull/42 - https://blogs.gentoo.org/ago/2017/02/20/audiofile-heap-based-buffer-overflow-in-msadpcmdecodeblock-msadpcm-cpp/ - http://www.securityfocus.com/bid/97589 - http://www.debian.org/security