Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-7688 State: PUBLISHED Published: 2018-06-07T13:00:00Z Last Updated: 2024-09-16T16:14:20.165Z Severity: HIGH (CVSS 7.1 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L) Vendors: openSUSE Products: Open Build Service Problem Types: CWE-862 Description: A missing permission check in the review handling of openSUSE Open Build Service before 2.9.3 allowed all authenticated users to modify sources in projects where they do not have write permissions. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/openSUSE/open-build-service/commit/b15cf19e9e01115f653c76ffdc8f54cd97566553 - https://bugzilla.suse.com/show_bug.cgi?id=CVE-2018-7688 - https://lists.open
/b15cf19e9e01115f653c76ffdc8f54cd97566553 - https://bugzilla.suse.com/show_bug.cgi?id=CVE-2018-7688 - https://lists.opensuse.org/opensuse-buildservice/2018-06/msg00014.html
CVE ID: CVE-2018-7689 State: PUBLISHED Published: 2018-06-07T13:00:00Z Last Updated: 2024-09-16T22:40:22.144Z Severity: HIGH (CVSS 7.1 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L) Vendors: openSUSE Products: Open Build Service Problem Types: CWE-862 Description: Lack of permission checks in the InitializeDevelPackage function in openSUSE Open Build Service before 2.9.3 allowed authenticated users to modify packages where they do not have write permissions. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.suse.com/show_bug.cgi?id=CVE-2018-7689 - https://github.com/openSUSE/open-build-service/commit/990ef7cccef6f38fc1d1a1bb22a08e174dcba43b - https://lists.open
89 - https://github.com/openSUSE/open-build-service/commit/990ef7cccef6f38fc1d1a1bb22a08e174dcba43b - https://lists.opensuse.org/opensuse-buildservice/2018-06/msg00014.html
CVE ID: CVE-2018-7690 State: PUBLISHED Published: 2018-12-13T14:00:00Z Last Updated: 2024-09-17T02:32:23.587Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Micro Focus Products: Fortify Software Security Center (SSC) Problem Types: Remote Unauthorized Access Description: A potential Remote Unauthorized Access in Micro Focus Fortify Software Security Center (SSC), versions 17.10, 17.20, 18.10 this exploitation could allow Remote Unauthorized Access Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/45989/ - https://softwaresupport.softwaregrp.com/doc/KM03298201
CVE ID: CVE-2018-7691 State: PUBLISHED Published: 2018-12-13T14:00:00Z Last Updated: 2024-09-16T17:29:04.713Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Micro Focus Products: Fortify Software Security Center (SSC) Problem Types: Remote Unauthorized Access Description: A potential Remote Unauthorized Access in Micro Focus Fortify Software Security Center (SSC), versions 17.10, 17.20, 18.10 this exploitation could allow Remote Unauthorized Access Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/45990/ - https://softwaresupport.softwaregrp.com/doc/KM03298201
CVE ID: CVE-2018-7692 State: PUBLISHED Published: 2018-08-09T21:00:00Z Last Updated: 2024-09-16T19:20:45.682Z Vendors: Micro Focus Products: NetIQ eDirectory Versions prior to 9.1.1 HF1 Problem Types: Redirection vulnerability. Description: Unvalidated redirect vulnerability in in NetIQ eDirectory before 9.1.1 HF1. Additional Analyst Notes: - CVE Program Container: References: - https://www.netiq.com/documentation/edirectory-91/edirectory9111_releasenotes/data/edirectory9111_releasenotes.html
CVE ID: CVE-2018-7698 State: PUBLISHED Published: 2018-03-05T19:00:00 Last Updated: 2024-08-05T06:31:05.067Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in D-Link mydlink+ 3.8.5 build 259 for DCS-933L 1.05.04 and DCS-934L 1.05.04 devices. The mydlink+ app sends the username and password for connected D-Link cameras (such as DCS-933L and DCS-934L) unencrypted from the app to the camera, allowing attackers to obtain these credentials and gain control of the camera including the ability to view the camera's stream and make changes without the user's knowledge. Additional Analyst Notes: - CVE Program Container: References: - https://blog.nickleghorn.com/201
the user's knowledge. Additional Analyst Notes: - CVE Program Container: References: - https://blog.nickleghorn.com/2019/06/16/d-link-security-cameras-using-mydlink-app-leak-passwords/
CVE ID: CVE-2018-7700 State: PUBLISHED Published: 2018-03-27T18:00:00 Last Updated: 2024-08-05T06:31:05.085Z Vendors: n/a Products: n/a Problem Types: n/a Description: DedeCMS 5.7 has CSRF with an impact of arbitrary code execution, because the partcode parameter in a tag_test_action.php request can specify a runphp field in conjunction with PHP code. Additional Analyst Notes: - CVE Program Container: References: - https://laworigin.github.io/2018/03/07/CVE-2018-7700-dedecms%E5%90%8E%E5%8F%B0%E4%BB%BB%E6%84%8F%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C/
CVE ID: CVE-2018-7701 State: PUBLISHED Published: 2018-03-14T20:00:00 Last Updated: 2024-08-05T06:31:05.203Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in SecurEnvoy SecurMail before 9.2.501 allow remote attackers to hijack the authentication of arbitrary users for requests that (1) delete e-mail messages via a delete action in a request to secmail/getmessage.exe or (2) spoof arbitrary users and reply to their messages via a request to secserver/securectrl.exe. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/Mar/29 - https://www.sec-consult.com/en/blog/advisorie
Container: References: - http://seclists.org/fulldisclosure/2018/Mar/29 - https://www.sec-consult.com/en/blog/advisories/multiple-critical-vulnerabilities-in-securenvoy-securmail/index.html - https://www.exploit-db.com/exploits/44285/
CVE ID: CVE-2018-7702 State: PUBLISHED Published: 2018-03-14T20:00:00 Last Updated: 2024-08-05T06:31:05.202Z Vendors: n/a Products: n/a Problem Types: n/a Description: SecurEnvoy SecurMail before 9.2.501 allows remote attackers to spoof transmission of arbitrary e-mail messages, resend e-mail messages to arbitrary recipients, or modify arbitrary message bodies and attachments by leveraging missing authentication and authorization. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/Mar/29 - https://www.sec-consult.com/en/blog/advisories/multiple-critical-vulnerabilities-in-securenvoy-securmail/index.html - https://www.exploit-db.com/exploi
blog/advisories/multiple-critical-vulnerabilities-in-securenvoy-securmail/index.html - https://www.exploit-db.com/exploits/44285/
CVE ID: CVE-2018-7703 State: PUBLISHED Published: 2018-03-14T20:00:00 Last Updated: 2024-08-05T06:31:05.175Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in SecurEnvoy SecurMail before 9.2.501 allows remote attackers to inject arbitrary web script or HTML via the mailboxid parameter to secmail/getmessage.exe. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/Mar/29 - https://www.sec-consult.com/en/blog/advisories/multiple-critical-vulnerabilities-in-securenvoy-securmail/index.html - https://www.exploit-db.com/exploits/44285/
CVE ID: CVE-2018-7704 State: PUBLISHED Published: 2018-03-14T20:00:00 Last Updated: 2024-08-05T06:31:05.176Z Vendors: n/a Products: n/a Problem Types: n/a Description: SecurEnvoy SecurMail before 9.2.501 allows remote authenticated users to read arbitrary e-mail messages via the option1 parameter in a reply action to secmail/getmessage.exe. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/Mar/29 - https://www.sec-consult.com/en/blog/advisories/multiple-critical-vulnerabilities-in-securenvoy-securmail/index.html - https://www.exploit-db.com/exploits/44285/
CVE ID: CVE-2018-7705 State: PUBLISHED Published: 2018-03-14T20:00:00 Last Updated: 2024-08-05T06:31:05.157Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in SecurEnvoy SecurMail before 9.2.501 allows remote authenticated users to read e-mail messages to arbitrary recipients via a .. (dot dot) in the filename parameter to secupload2/upload.aspx. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/Mar/29 - https://www.sec-consult.com/en/blog/advisories/multiple-critical-vulnerabilities-in-securenvoy-securmail/index.html - https://www.exploit-db.com/exploits/44285/
CVE ID: CVE-2018-7706 State: PUBLISHED Published: 2018-03-14T20:00:00 Last Updated: 2024-08-05T06:31:05.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in SecurEnvoy SecurMail before 9.2.501 allows remote authenticated users to read arbitrary e-mail messages via a .. (dot dot) in the option2 parameter in an attachment action to secmail/getmessage.exe. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/Mar/29 - https://www.sec-consult.com/en/blog/advisories/multiple-critical-vulnerabilities-in-securenvoy-securmail/index.html - https://www.exploit-db.com/exploits/44285/
CVE ID: CVE-2018-7707 State: PUBLISHED Published: 2018-03-14T20:00:00 Last Updated: 2024-08-05T06:31:05.215Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in SecurEnvoy SecurMail before 9.2.501 allows remote attackers to inject arbitrary web script or HTML via an HTML-formatted e-mail message. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/Mar/29 - https://www.sec-consult.com/en/blog/advisories/multiple-critical-vulnerabilities-in-securenvoy-securmail/index.html - https://www.exploit-db.com/exploits/44285/
CVE ID: CVE-2018-7711 State: PUBLISHED Published: 2018-03-05T22:00:00 Last Updated: 2024-08-05T06:31:05.158Z Vendors: n/a Products: n/a Problem Types: n/a Description: HTTPRedirect.php in the saml2 library in SimpleSAMLphp before 1.15.4 has an incorrect check of return values in the signature validation utilities, allowing an attacker to get invalid signatures accepted as valid by forcing an error during validation. This occurs because of a dependency on PHP functionality that interprets a -1 error code as a true boolean value. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/simplesamlphp/saml2/commit/4f6af7f69f29df8555a18b9bb7b646906b45924d - https://list
ner: References: - https://github.com/simplesamlphp/saml2/commit/4f6af7f69f29df8555a18b9bb7b646906b45924d - https://lists.debian.org/debian-lts-announce/2018/03/msg00017.html - https://simplesamlphp.org/security/201803-01
CVE ID: CVE-2018-7712 State: PUBLISHED Published: 2018-03-05T23:00:00 Last Updated: 2024-08-05T06:31:05.064Z Vendors: n/a Products: n/a Problem Types: n/a Description: The validateInputImageSize function in modules/imgcodecs/src/loadsave.cpp in OpenCV 3.4.1 allows remote attackers to cause a denial of service (assertion failure) because (size.height <= (1<<20)) may be false. Note: “OpenCV CV_Assert is not an assertion (C-like assert()), it is regular C++ exception which can raised in case of invalid or non-supported parameters. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/xiaoqx/pocs/tree/master/opencv/dos-by-assert - https://gi
ent: - CVE Program Container: References: - https://github.com/xiaoqx/pocs/tree/master/opencv/dos-by-assert - https://github.com/opencv/opencv/issues/10998
CVE ID: CVE-2018-7713 State: PUBLISHED Published: 2018-03-05T23:00:00 Last Updated: 2024-08-05T06:31:05.201Z Vendors: n/a Products: n/a Problem Types: n/a Description: The validateInputImageSize function in modules/imgcodecs/src/loadsave.cpp in OpenCV 3.4.1 allows remote attackers to cause a denial of service (assertion failure) because (size.width <= (1<<20)) may be false. Note: “OpenCV CV_Assert is not an assertion (C-like assert()), it is regular C++ exception which can raised in case of invalid or non-supported parameters. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/xiaoqx/pocs/tree/master/opencv/dos-by-assert - https://github.com/opencv/opencv/iss
er: References: - https://github.com/xiaoqx/pocs/tree/master/opencv/dos-by-assert - https://github.com/opencv/opencv/issues/10998
CVE ID: CVE-2018-7714 State: PUBLISHED Published: 2018-03-05T23:00:00 Last Updated: 2024-08-05T06:31:05.066Z Vendors: n/a Products: n/a Problem Types: n/a Description: The validateInputImageSize function in modules/imgcodecs/src/loadsave.cpp in OpenCV 3.4.1 allows remote attackers to cause a denial of service (assertion failure) because (pixels <= (1<<30)) may be false. Note: “OpenCV CV_Assert is not an assertion (C-like assert()), it is regular C++ exception which can raised in case of invalid or non-supported parameters. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/xiaoqx/pocs/tree/master/opencv/dos-by-assert - https://github.com/opencv/opencv/issues/
References: - https://github.com/xiaoqx/pocs/tree/master/opencv/dos-by-assert - https://github.com/opencv/opencv/issues/10998
CVE ID: CVE-2018-7715 State: PUBLISHED Published: 2018-03-05T23:00:00Z Last Updated: 2024-09-16T18:39:06.623Z Vendors: n/a Products: n/a Problem Types: n/a Description: PrivateVPN 2.0.31 for macOS suffers from a root privilege escalation vulnerability with its com.privat.vpn.helper privileged helper tool. This privileged helper tool implements an XPC service that allows arbitrary installed applications to connect and send messages. The XPC service extracts the path string from the corresponding XPC message. This string is supposed to point to PrivateVPN's internal openvpn binary. If a new connection has not already been established, an attacker can send the XPC service a malicious XPC messag
inary. If a new connection has not already been established, an attacker can send the XPC service a malicious XPC message with the path string pointing at a binary that he or she controls. This results in the execution of arbitrary code as the root user. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/VerSprite/research/blob/master/advisories/VS-2018-005.md
CVE ID: CVE-2018-7716 State: PUBLISHED Published: 2018-03-05T23:00:00Z Last Updated: 2024-09-16T17:23:08.770Z Vendors: n/a Products: n/a Problem Types: n/a Description: PrivateVPN 2.0.31 for macOS suffers from a root privilege escalation vulnerability with its com.privat.vpn.helper privileged helper tool. This privileged helper tool implements an XPC service that allows arbitrary installed applications to connect and send messages. The XPC service extracts the config string from the corresponding XPC message. This string is supposed to point to an internal OpenVPN configuration file. If a new connection has not already been established, an attacker can send the XPC service a malicious XPC me
tion file. If a new connection has not already been established, an attacker can send the XPC service a malicious XPC message with the config string pointing at an OpenVPN configuration file that he or she controls. In the configuration file, an attacker can specify a dynamic library plugin that should run for every new VPN connection. This plugin will execute code in the context of the root user. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/VerSprite/research/edit/master/advisories/VS-2018-006.md
CVE ID: CVE-2018-7717 State: PUBLISHED Published: 2018-03-05T23:00:00Z Last Updated: 2024-09-17T02:00:50.832Z Vendors: n/a Products: n/a Problem Types: n/a Description: The htmlImageAddTitleAttribute function in sige.php in the Kubik-Rubik Simple Image Gallery Extended (SIGE) extension 3.2.3 for Joomla! has XSS via a crafted image header, as demonstrated by the Caption-Abstract header object in a JPEG file. This is fixed in 3.3.1. Additional Analyst Notes: - CVE Program Container: References: - http://debugtrap.com/2018/03/01/joomla_sige_xss/
CVE ID: CVE-2018-7718 State: PUBLISHED Published: 2018-11-08T21:00:00 Last Updated: 2024-08-05T06:31:05.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Telexy QPath 5.4.462. A low privileged authenticated user supplying a specially crafted serialized request to AdanitDataService.svc may modify user information, including but not limited to email address, username, and password, of other user accounts. The simplest attack approach is for the attacker to intercept their own password-change request and modify the username before the request reaches the server. Also, changing a victim's email address can have a similar account-takeover consequence. Addi
equest reaches the server. Also, changing a victim's email address can have a similar account-takeover consequence. Additional Analyst Notes: - CVE Program Container: References: - https://www.dropbox.com/s/6tlee2uj3t3su8n/Telexy-QPath-CVE-2018-7718.pdf
CVE ID: CVE-2018-7719 State: PUBLISHED Published: 2018-03-25T16:00:00 Last Updated: 2024-08-05T06:31:05.179Z Vendors: n/a Products: n/a Problem Types: n/a Description: Acrolinx Server before 5.2.5 on Windows allows Directory Traversal. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/44345/ - https://support.acrolinx.com/hc/en-us/articles/213987685-Acrolinx-Server-Version-5-1-including-subsequent-service-releases-
CVE ID: CVE-2018-7720 State: PUBLISHED Published: 2018-03-07T08:00:00 Last Updated: 2024-08-05T06:31:05.198Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site request forgery (CSRF) vulnerability exists in Western Bridge Cobub Razor 0.7.2 via /index.php?/user/createNewUser/, resulting in account creation. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Kyhvedn/CVE_Description/blob/master/CVE-2018-7720_Description.md
CVE ID: CVE-2018-7721 State: PUBLISHED Published: 2018-03-07T08:00:00 Last Updated: 2024-08-05T06:31:05.181Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) exists in MetInfo 6.0.0 via /feedback/index.php because app/system/feedback/web/feedback.class.php mishandles input data. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Gitaddy/vluns/blob/master/Metinfo.md
CVE ID: CVE-2018-7722 State: PUBLISHED Published: 2018-03-06T17:00:00 Last Updated: 2024-08-05T06:31:05.212Z Vendors: n/a Products: n/a Problem Types: n/a Description: The management panel in Piwigo 2.9.3 has stored XSS via the name parameter in a /ws.php?format=json request. CSRF exploitation, related to CVE-2017-10681, may be possible. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/summ3rf/Vulner/blob/master/Piwigo%20Store%20XSS.md
CVE ID: CVE-2018-7723 State: PUBLISHED Published: 2018-03-06T17:00:00 Last Updated: 2024-08-05T06:31:05.147Z Vendors: n/a Products: n/a Problem Types: n/a Description: The management panel in Piwigo 2.9.3 has stored XSS via the virtual_name parameter in a /admin.php?page=cat_list request, a different issue than CVE-2017-9836. CSRF exploitation, related to CVE-2017-10681, may be possible. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/summ3rf/Vulner/blob/master/Piwigo%20Store%20XSS.md
CVE ID: CVE-2018-7724 State: PUBLISHED Published: 2018-03-06T17:00:00 Last Updated: 2024-08-05T06:31:05.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: The management panel in Piwigo 2.9.3 has stored XSS via the name parameter in a /admin.php?page=photo-${photo_number} request. CSRF exploitation, related to CVE-2017-10681, may be possible. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/summ3rf/Vulner/blob/master/Piwigo%20Store%20XSS.md
CVE ID: CVE-2018-7725 State: PUBLISHED Published: 2018-03-06T17:00:00 Last Updated: 2024-08-05T06:31:05.095Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ZZIPlib 0.13.68. An invalid memory address dereference was discovered in zzip_disk_fread in mmapped.c. The vulnerability causes an application crash, which leads to denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3699-1/ - https://github.com/gdraheim/zziplib/issues/39 - https://access.redhat.com/errata/RHSA-2018:3229 - https://lists.debian.org/debian-lts-announce/2020/06/msg00029.html
CVE ID: CVE-2018-7726 State: PUBLISHED Published: 2018-03-06T17:00:00 Last Updated: 2024-08-05T06:31:05.122Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ZZIPlib 0.13.68. There is a bus error caused by the __zzip_parse_root_directory function of zip.c. Attackers could leverage this vulnerability to cause a denial of service via a crafted zip file. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3699-1/ - https://access.redhat.com/errata/RHSA-2018:3229 - https://github.com/gdraheim/zziplib/issues/41 - https://lists.debian.org/debian-lts-announce/2020/06/msg00029.html
CVE ID: CVE-2018-7727 State: PUBLISHED Published: 2018-03-06T17:00:00 Last Updated: 2024-08-05T06:31:05.139Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ZZIPlib 0.13.68. There is a memory leak triggered in the function zzip_mem_disk_new in memdisk.c, which will lead to a denial of service attack. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gdraheim/zziplib/issues/40 - https://access.redhat.com/errata/RHSA-2018:3229
CVE ID: CVE-2018-7728 State: PUBLISHED Published: 2018-03-06T18:00:00 Last Updated: 2024-08-05T06:31:05.178Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Exempi through 2.4.4. XMPFiles/source/FileHandlers/TIFF_Handler.cpp mishandles a case of a zero length, leading to a heap-based buffer over-read in the MD5Update() function in third-party/zuid/interfaces/MD5.cpp. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/03/msg00013.html - https://usn.ubuntu.com/3668-1/ - https://cgit.freedesktop.org/exempi/commit/?id=e163667a06a9b656a047b0ec660b871f29a83c9f - https://bugs.freedesktop.org/show_b
://cgit.freedesktop.org/exempi/commit/?id=e163667a06a9b656a047b0ec660b871f29a83c9f - https://bugs.freedesktop.org/show_bug.cgi?id=105205 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BCFXKOOATZ2B5G3G7EBXZWVZHEABN4ZV/
CVE ID: CVE-2018-7729 State: PUBLISHED Published: 2018-03-06T18:00:00 Last Updated: 2024-08-05T06:31:05.245Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Exempi through 2.4.4. There is a stack-based buffer over-read in the PostScript_MetaHandler::ParsePSFile() function in XMPFiles/source/FileHandlers/PostScript_Handler.cpp. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3668-1/ - https://cgit.freedesktop.org/exempi/commit/?id=baa4b8a02c1ffab9645d13f0bfb1c0d10d311a0c - https://bugs.freedesktop.org/show_bug.cgi?id=105206 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/me
org/show_bug.cgi?id=105206 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BCFXKOOATZ2B5G3G7EBXZWVZHEABN4ZV/