Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-8822 State: PUBLISHED Published: 2016-12-16T21:00:00 Last Updated: 2024-08-06T02:35:01.231Z Vendors: Nvidia Corporation Products: Windows GPU Display Driver Problem Types: Denial of Service Description: All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape ID 0x600000E, 0x600000F, and 0x6000010 where a value passed from a user to the driver is used without validation as the index to an internal array, leading to denial of service or potential escalation of privileges. Additional Analyst Notes: - CVE Program Container: References: - http://nvidia.custhelp.com/app/answers/detail/a_id/4278 - ht
ional Analyst Notes: - CVE Program Container: References: - http://nvidia.custhelp.com/app/answers/detail/a_id/4278 - http://www.securityfocus.com/bid/95014
CVE ID: CVE-2016-8823 State: PUBLISHED Published: 2016-12-16T21:00:00 Last Updated: 2024-08-06T02:35:01.119Z Vendors: Nvidia Corporation Products: Windows GPU Display Driver Problem Types: Denial of Service Description: All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer handler for DxgDdiEscape where the size of an input buffer is not validated leading to a denial of service or possible escalation of privileges Additional Analyst Notes: - CVE Program Container: References: - http://nvidia.custhelp.com/app/answers/detail/a_id/4278 - http://www.talosintelligence.com/reports/TALOS-2016-0217/ - http://www.securityfocus.com/bid/94918
CVE ID: CVE-2016-8824 State: PUBLISHED Published: 2016-12-16T21:00:00 Last Updated: 2024-08-06T02:35:02.237Z Vendors: Nvidia Corporation Products: Windows GPU Display Driver Problem Types: Escalation of Privileges Description: All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape where improper access controls allow a regular user to write a part of the registry intended for privileged users only, leading to escalation of privileges. Additional Analyst Notes: - CVE Program Container: References: - http://nvidia.custhelp.com/app/answers/detail/a_id/4278 - http://www.securityfocus.com/bid/95015
CVE ID: CVE-2016-8825 State: PUBLISHED Published: 2016-12-16T21:00:00 Last Updated: 2024-08-06T02:35:01.405Z Vendors: Nvidia Corporation Products: Windows GPU Display Driver Problem Types: Denial of Service Description: All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape where the size of an input buffer is not validated, leading to denial of service or potential escalation of privileges. Additional Analyst Notes: - CVE Program Container: References: - http://nvidia.custhelp.com/app/answers/detail/a_id/4278 - http://www.securityfocus.com/bid/94956
CVE ID: CVE-2016-8826 State: PUBLISHED Published: 2016-12-16T21:00:00 Last Updated: 2024-08-06T02:35:01.608Z Vendors: Nvidia Corporation Products: Windows GPU Display Driver Problem Types: Denial of Service Description: All versions of NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys for Windows or nvidia.ko for Linux) where a user can cause a GPU interrupt storm, leading to a denial of service. Additional Analyst Notes: - CVE Program Container: References: - http://nvidia.custhelp.com/app/answers/detail/a_id/4278 - http://www.securityfocus.com/bid/94957
CVE ID: CVE-2016-8827 State: PUBLISHED Published: 2016-12-16T21:00:00 Last Updated: 2024-08-06T02:35:02.274Z Vendors: Nvidia Corporation Products: GeForce Experience Problem Types: Directory Traversal Description: NVIDIA GeForce Experience 3.x before GFE 3.1.0.52 contains a vulnerability in NVIDIA Web Helper.exe where a local web API endpoint, /VisualOPS/v.1.0./, lacks proper access control and parameter validation, allowing for information disclosure via a directory traversal attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94964 - http://nvidia.custhelp.com/app/answers/detail/a_id/4279 - https://nvidia.custhelp.com/app/answers/detail
com/bid/94964 - http://nvidia.custhelp.com/app/answers/detail/a_id/4279 - https://nvidia.custhelp.com/app/answers/detail/a_id/5033 - https://nvidia.custhelp.com/app/answers/detail/a_id/5155
CVE ID: CVE-2016-8828 State: REJECTED Published: 2017-01-03T20:00:00 Last Updated: 2017-01-03T19:57:01 Description: No description available.
CVE ID: CVE-2016-8829 State: REJECTED Published: 2017-01-03T20:00:00 Last Updated: 2017-01-03T19:57:01 Description: No description available.
CVE ID: CVE-2016-8830 State: REJECTED Published: 2017-01-03T20:00:00 Last Updated: 2017-01-03T19:57:01 Description: No description available.
CVE ID: CVE-2016-8831 State: REJECTED Published: 2017-01-03T20:00:00 Last Updated: 2017-01-03T19:57:01 Description: No description available.
CVE ID: CVE-2016-8832 State: REJECTED Published: 2017-01-03T20:00:00 Last Updated: 2017-01-03T19:57:01 Description: No description available.
CVE ID: CVE-2016-8833 State: REJECTED Published: 2017-01-03T20:00:00 Last Updated: 2017-01-03T19:57:01 Description: No description available.
CVE ID: CVE-2016-8834 State: REJECTED Published: 2017-01-03T20:00:00 Last Updated: 2017-01-03T19:57:01 Description: No description available.
CVE ID: CVE-2016-8835 State: REJECTED Published: 2017-01-03T20:00:00 Last Updated: 2017-01-03T19:57:01 Description: No description available.
CVE ID: CVE-2016-8836 State: REJECTED Published: 2017-01-03T20:00:00 Last Updated: 2017-01-03T19:57:01 Description: No description available.
CVE ID: CVE-2016-8837 State: REJECTED Published: 2017-01-03T20:00:00 Last Updated: 2017-01-03T19:57:01 Description: No description available.
CVE ID: CVE-2016-8838 State: REJECTED Published: 2017-01-03T20:00:00 Last Updated: 2017-01-03T19:57:01 Description: No description available.
CVE ID: CVE-2016-8839 State: REJECTED Published: 2017-01-03T20:00:00 Last Updated: 2017-01-03T19:57:01 Description: No description available.
CVE ID: CVE-2016-8840 State: REJECTED Published: 2017-01-03T20:00:00 Last Updated: 2017-01-03T19:57:01 Description: No description available.
CVE ID: CVE-2016-8841 State: REJECTED Published: 2017-01-03T20:00:00 Last Updated: 2017-01-03T19:57:01 Description: No description available.
CVE ID: CVE-2016-8842 State: REJECTED Published: 2017-01-03T20:00:00 Last Updated: 2017-01-03T19:57:01 Description: No description available.
CVE ID: CVE-2016-8843 State: REJECTED Published: 2017-01-03T20:00:00 Last Updated: 2017-01-03T19:57:01 Description: No description available.
CVE ID: CVE-2016-8844 State: REJECTED Published: 2017-01-03T20:00:00 Last Updated: 2017-01-03T19:57:01 Description: No description available.
CVE ID: CVE-2016-8845 State: REJECTED Published: 2017-01-03T20:00:00 Last Updated: 2017-01-03T19:57:01 Description: No description available.
CVE ID: CVE-2016-8846 State: REJECTED Published: 2017-01-03T20:00:00 Last Updated: 2017-01-03T19:57:01 Description: No description available.
CVE ID: CVE-2016-8847 State: REJECTED Published: 2017-01-03T20:00:00 Last Updated: 2017-01-03T19:57:01 Description: No description available.
CVE ID: CVE-2016-8848 State: REJECTED Published: 2017-01-03T20:00:00 Last Updated: 2017-01-03T19:57:01 Description: No description available.
CVE ID: CVE-2016-8849 State: REJECTED Published: 2017-01-03T20:00:00 Last Updated: 2017-01-03T19:57:01 Description: No description available.
CVE ID: CVE-2016-8850 State: REJECTED Published: 2017-01-03T20:00:00 Last Updated: 2017-01-03T19:57:01 Description: No description available.
CVE ID: CVE-2016-8851 State: REJECTED Published: 2017-01-03T20:00:00 Last Updated: 2017-01-03T19:57:01 Description: No description available.
CVE ID: CVE-2016-8852 State: REJECTED Published: 2017-01-03T20:00:00 Last Updated: 2017-01-03T19:57:01 Description: No description available.
CVE ID: CVE-2016-8853 State: REJECTED Published: 2017-01-03T20:00:00 Last Updated: 2017-01-03T19:57:01 Description: No description available.
CVE ID: CVE-2016-8854 State: REJECTED Published: 2017-01-03T20:00:00 Last Updated: 2017-01-03T19:57:01 Description: No description available.
CVE ID: CVE-2016-8855 State: PUBLISHED Published: 2017-03-19T18:00:00 Last Updated: 2024-08-06T02:35:02.225Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-Site Scripting (XSS) in "/sitecore/client/Applications/List Manager/Taskpages/Contact list" in Sitecore Experience Platform 8.1 rev. 160519 (8.1 Update-3) allows remote attacks via the Name or Description parameter. This is fixed in 8.2 Update-2. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/41618/ - https://packetstormsecurity.com/files/141655/Sitecore-Experience-Platform-8.1-Update-3-Cross-Site-Scripting.html
CVE ID: CVE-2016-8856 State: PUBLISHED Published: 2016-10-31T10:00:00 Last Updated: 2024-08-06T02:35:01.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: Foxit Reader for Mac 2.1.0.0804 and earlier and Foxit Reader for Linux 2.1.0.0805 and earlier suffered from a vulnerability where weak file permissions could be exploited by attackers to execute arbitrary code. After the installation, Foxit Reader's core files were world-writable by default, allowing an attacker to overwrite them with backdoor code, which when executed by privileged user would result in Privilege Escalation, Code Execution, or both. Additional Analyst Notes: - CVE Program Container: References: - http://www.se
lege Escalation, Code Execution, or both. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93608 - https://www.foxitsoftware.com/support/security-bulletins.php - http://www.securitytracker.com/id/1037101
CVE ID: CVE-2016-8858 State: PUBLISHED Published: 2016-12-09T00:00:00 Last Updated: 2024-08-06T02:35:01.046Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kex_input_kexinit function in kex.c in OpenSSH 6.x and 7.x through 7.3 allows remote attackers to cause a denial of service (memory consumption) by sending many duplicate KEXINIT requests. NOTE: a third party reports that "OpenSSH upstream does not consider this as a security issue." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93776 - http://www.openwall.com/lists/oss-security/2016/10/20/1 - https://security.netapp.com/advisory/ntap-20180201-0001/ - http://www.openwall.
ll.com/lists/oss-security/2016/10/20/1 - https://security.netapp.com/advisory/ntap-20180201-0001/ - http://www.openwall.com/lists/oss-security/2016/10/19/3 - http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/kex.c.diff?r1=1.126&r2=1.127&f=h - https://github.com/openssh/openssh-portable/commit/ec165c392ca54317dbe3064a8c200de6531e89ad - https://ftp.openbsd.org/pub/OpenBSD/patches/6.0/common/013_ssh_kexinit.patch.sig - https://security.FreeBSD.org/advisories/FreeBSD-SA-16:33.openssh.asc - http://www.securitytracker.com/id/1037057 - https://security.gentoo.org/glsa/201612-18 - https://bugzilla.redhat.com/show_bug.cgi?id=1384860 - http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/ke
2-18 - https://bugzilla.redhat.com/show_bug.cgi?id=1384860 - http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/kex.c?rev=1.127&content-type=text/x-cvsweb-markup - https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
CVE ID: CVE-2016-8859 State: PUBLISHED Published: 2017-02-13T18:00:00 Last Updated: 2024-08-06T02:35:01.250Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in the TRE library and musl libc allow attackers to cause memory corruption via a large number of (1) states or (2) tags, which triggers an out-of-bounds write. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93795 - https://security.gentoo.org/glsa/201701-11 - http://www.openwall.com/lists/oss-security/2016/10/19/1 - http://www.openwall.com/lists/oss-security/2016/10/19/10 - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00041.html -
wall.com/lists/oss-security/2016/10/19/10 - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00041.html - https://security.gentoo.org/glsa/202007-43
CVE ID: CVE-2016-8860 State: PUBLISHED Published: 2017-01-04T20:00:00 Last Updated: 2024-08-06T02:35:01.107Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tor before 0.2.8.9 and 0.2.9.x before 0.2.9.4-alpha had internal functions that were entitled to expect that buf_t data had NUL termination, but the implementation of or/buffers.c did not ensure that NUL termination was present, which allows remote attackers to cause a denial of service (client, hidden service, relay, or authority crash) via crafted data. Additional Analyst Notes: - CVE Program Container: References: - https://blog.torproject.org/blog/tor-0289-released-important-fixes - https://github.com/torproject/tor/commit
erences: - https://blog.torproject.org/blog/tor-0289-released-important-fixes - https://github.com/torproject/tor/commit/3cea86eb2fbb65949673eb4ba8ebb695c87a57ce - https://security.gentoo.org/glsa/201612-45 - http://openwall.com/lists/oss-security/2016/10/19/11 - https://trac.torproject.org/projects/tor/ticket/20384 - http://www.securityfocus.com/bid/95116 - http://www.debian.org/security/2016/dsa-3694
CVE ID: CVE-2016-8862 State: PUBLISHED Published: 2017-02-15T19:00:00 Last Updated: 2024-08-06T02:35:01.451Z Vendors: n/a Products: n/a Problem Types: n/a Description: The AcquireMagickMemory function in MagickCore/memory.c in ImageMagick before 7.0.3.3 allows remote attackers to have unspecified impact via a crafted image, which triggers a memory allocation failure. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/10/20/3 - https://blogs.gentoo.org/ago/2016/10/17/imagemagick-memory-allocation-failure-in-acquiremagickmemory-memory-c/ - https://bugzilla.redhat.com/show_bug.cgi?id=1387135 - https://github.com/ImageMagick/ImageMagi
emagickmemory-memory-c/ - https://bugzilla.redhat.com/show_bug.cgi?id=1387135 - https://github.com/ImageMagick/ImageMagick/issues/271 - http://www.securityfocus.com/bid/93794 - http://www.openwall.com/lists/oss-security/2016/10/20/2 - http://www.debian.org/security/2016/dsa-3726
CVE ID: CVE-2016-8863 State: PUBLISHED Published: 2017-03-07T16:00:00 Last Updated: 2024-08-06T02:35:01.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the create_url_list function in gena/gena_device.c in Portable UPnP SDK (aka libupnp) before 1.6.21 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a valid URI followed by an invalid one in the CALLBACK header of an SUBSCRIBE request. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/pupnp/bugs/133/ - https://sourceforge.net/p/pupnp/code/ci/master/tree/ChangeLog - https://security.gentoo.org/glsa/201701-52
p/bugs/133/ - https://sourceforge.net/p/pupnp/code/ci/master/tree/ChangeLog - https://security.gentoo.org/glsa/201701-52 - https://www.debian.org/security/2016/dsa-3736 - https://www.tenable.com/security/research/tra-2017-10 - http://www.securityfocus.com/bid/92849
CVE ID: CVE-2016-8864 State: PUBLISHED Published: 2016-11-02T17:00:00 Last Updated: 2024-08-06T02:35:02.198Z Vendors: n/a Products: n/a Problem Types: n/a Description: named in ISC BIND 9.x before 9.9.9-P4, 9.10.x before 9.10.4-P4, and 9.11.x before 9.11.0-P1 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a DNAME record in the answer section of a response to a recursive query, related to db.c and resolver.c. Additional Analyst Notes: - CVE Program Container: References: - https://kb.isc.org/article/AA-01438 - http://rhn.redhat.com/errata/RHSA-2016-2871.html - http://www.securitytracker.com/id/1037156 - https://security.netapp.com/advisory/ntap-20
om/errata/RHSA-2016-2871.html - http://www.securitytracker.com/id/1037156 - https://security.netapp.com/advisory/ntap-20180926-0005/ - http://www.debian.org/security/2016/dsa-3703 - https://security.FreeBSD.org/advisories/FreeBSD-SA-16:34.bind.asc - https://kb.isc.org/article/AA-01435 - https://access.redhat.com/errata/RHSA-2017:1583 - http://rhn.redhat.com/errata/RHSA-2016-2141.html - https://security.gentoo.org/glsa/201701-26 - http://rhn.redhat.com/errata/RHSA-2016-2142.html - https://kb.isc.org/article/AA-01437 - https://kb.isc.org/article/AA-01436 - http://www.securityfocus.com/bid/94067 - https://kb.isc.org/article/AA-01434 - http://rhn.redhat.com/errata/RHSA-2016-2615.html - https://h
focus.com/bid/94067 - https://kb.isc.org/article/AA-01434 - http://rhn.redhat.com/errata/RHSA-2016-2615.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05381687
CVE ID: CVE-2016-8866 State: PUBLISHED Published: 2017-02-15T19:00:00 Last Updated: 2024-08-06T02:35:01.227Z Vendors: n/a Products: n/a Problem Types: n/a Description: The AcquireMagickMemory function in MagickCore/memory.c in ImageMagick 7.0.3.3 before 7.0.3.8 allows remote attackers to have unspecified impact via a crafted image, which triggers a memory allocation failure. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8862. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/10/21/5 - https://bugzilla.redhat.com/show_bug.cgi?id=1388816 - http://lists.opensuse.org/opensuse-updates/2016-12/msg00141.html
https://bugzilla.redhat.com/show_bug.cgi?id=1388816 - http://lists.opensuse.org/opensuse-updates/2016-12/msg00141.html - http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00006.html - http://www.openwall.com/lists/oss-security/2016/10/20/3 - https://blogs.gentoo.org/ago/2016/10/20/imagemagick-memory-allocation-failure-in-acquiremagickmemory-memory-c-incomplete-fix-for-cve-2016-8862/ - https://github.com/ImageMagick/ImageMagick/issues/271 - http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00085.html
CVE ID: CVE-2016-8867 State: PUBLISHED Published: 2016-10-28T15:00:00 Last Updated: 2024-08-06T02:35:02.197Z Vendors: n/a Products: n/a Problem Types: n/a Description: Docker Engine 1.12.2 enabled ambient capabilities with misconfigured capability policies. This allowed malicious images to bypass user permissions to access files within the container filesystem or mounted volumes. Additional Analyst Notes: - CVE Program Container: References: - https://www.docker.com/docker-cve-database - http://www.securityfocus.com/bid/94228 - http://www.securitytracker.com/id/1037203
CVE ID: CVE-2016-8869 State: PUBLISHED Published: 2016-11-04T21:00:00 Last Updated: 2024-08-06T02:35:01.939Z Vendors: n/a Products: n/a Problem Types: n/a Description: The register method in the UsersModelRegistration class in controllers/user.php in the Users component in Joomla! before 3.6.4 allows remote attackers to gain privileges by leveraging incorrect use of unfiltered data when registering on a site. Additional Analyst Notes: - CVE Program Container: References: - https://developer.joomla.org/security-centre/660-20161002-core-elevated-privileges.html - http://www.securityfocus.com/bid/93883 - https://blog.sucuri.net/2016/10/details-on-the-privilege-escalation-vulnerability-in-joomla
ecurityfocus.com/bid/93883 - https://blog.sucuri.net/2016/10/details-on-the-privilege-escalation-vulnerability-in-joomla.html - http://www.rapid7.com/db/modules/auxiliary/admin/http/joomla_registration_privesc - https://www.exploit-db.com/exploits/40637/ - http://www.securitytracker.com/id/1037108 - https://github.com/joomla/joomla-cms/commit/bae1d43938c878480cfd73671e4945211538fdcf - https://medium.com/%40showthread/joomla-3-6-4-account-creation-elevated-privileges-write-up-and-exploit-965d8fb46fa2#.rq4qh1v4r
CVE ID: CVE-2016-8870 State: PUBLISHED Published: 2016-11-04T21:00:00 Last Updated: 2024-08-06T02:35:01.133Z Vendors: n/a Products: n/a Problem Types: n/a Description: The register method in the UsersModelRegistration class in controllers/user.php in the Users component in Joomla! before 3.6.4, when registration has been disabled, allows remote attackers to create user accounts by leveraging failure to check the Allow User Registration configuration setting. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93876 - https://blog.sucuri.net/2016/10/details-on-the-privilege-escalation-vulnerability-in-joomla.html - https://developer.joomla.org/sec
g.sucuri.net/2016/10/details-on-the-privilege-escalation-vulnerability-in-joomla.html - https://developer.joomla.org/security-centre/659-20161001-core-account-creation.html - http://www.rapid7.com/db/modules/auxiliary/admin/http/joomla_registration_privesc - https://www.exploit-db.com/exploits/40637/ - http://www.securitytracker.com/id/1037108 - http://www.securitytracker.com/id/1037107 - https://github.com/joomla/joomla-cms/commit/bae1d43938c878480cfd73671e4945211538fdcf - https://medium.com/%40showthread/joomla-3-6-4-account-creation-elevated-privileges-write-up-and-exploit-965d8fb46fa2#.rq4qh1v4r
CVE ID: CVE-2016-8871 State: PUBLISHED Published: 2016-10-28T15:00:00 Last Updated: 2024-08-06T02:35:02.147Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Botan 1.11.29 through 1.11.32, RSA decryption with certain padding options had a detectable timing channel which could given sufficient queries be used to recover plaintext, aka an "OAEP side channel" attack. Additional Analyst Notes: - CVE Program Container: References: - https://botan.randombit.net/security.html - http://www.securityfocus.com/bid/94225
CVE ID: CVE-2016-8875 State: PUBLISHED Published: 2016-10-31T10:00:00 Last Updated: 2024-08-06T02:35:01.932Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ConvertToPDF plugin in Foxit Reader and PhantomPDF before 8.1 on Windows, when the gflags app is enabled, allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted TIFF image, aka "Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at ConvertToPDF_x86!CreateFXPDFConvertor." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93608 - https://www.foxitsoftware.com/support/security-
rogram Container: References: - http://www.securityfocus.com/bid/93608 - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2016-8876 State: PUBLISHED Published: 2016-10-31T10:00:00 Last Updated: 2024-08-06T02:35:02.062Z Vendors: n/a Products: n/a Problem Types: n/a Description: Out-of-Bounds read vulnerability in Foxit Reader and PhantomPDF before 8.1 on Windows, when the gflags app is enabled, allows remote attackers to execute arbitrary code via a crafted TIFF image embedded in the XFA stream in a PDF document, aka "Read Access Violation starting at FoxitReader." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93608 - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2016-8877 State: PUBLISHED Published: 2016-10-31T10:00:00 Last Updated: 2024-08-06T02:35:01.925Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap buffer overflow (Out-of-Bounds write) vulnerability in Foxit Reader and PhantomPDF before 8.1 on Windows allows remote attackers to execute arbitrary code via a crafted JPEG2000 image embedded in a PDF document, aka a "corrupted suffix pattern" issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93608 - https://www.foxitsoftware.com/support/security-bulletins.php