Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
om/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05385680 - http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175676.html - http://www.openssh.com/txt/release-7.1p2 - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176516.html - https://bto.bluecoat.com/security-advisory/sa109 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05356388 - https://anongit.mindrot.org/openssh.git/commit/?id=2fecfd486bdba9f51b3a789277bb0733ca36e1c0 - https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
CVE ID: CVE-2016-1908 State: PUBLISHED Published: 2017-04-11T00:00:00 Last Updated: 2024-08-05T23:10:40.244Z Vendors: n/a Products: n/a Problem Types: n/a Description: The client in OpenSSH before 7.2 mishandles failed cookie generation for untrusted X11 forwarding and relies on the local X11 server for access-control decisions, which allows remote X11 clients to trigger a fallback and obtain trusted X11 forwarding privileges by leveraging configuration issues on this X11 server, as demonstrated by lack of the SECURITY extension on this X11 server. Additional Analyst Notes: - CVE Program Container: References: - http://www.openssh.com/txt/release-7.2 - http://www.oracle.com/technetwork/topic
- CVE Program Container: References: - http://www.openssh.com/txt/release-7.2 - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - https://anongit.mindrot.org/openssh.git/commit/?id=ed4ce82dbfa8a3a3c8ea6fa0db113c71e234416c - http://openwall.com/lists/oss-security/2016/01/15/13 - http://www.securitytracker.com/id/1034705 - http://rhn.redhat.com/errata/RHSA-2016-0741.html - https://security.gentoo.org/glsa/201612-18 - https://bugzilla.redhat.com/show_bug.cgi?id=1298741 - https://lists.debian.org/debian-lts-announce/2018/09/msg00010.html - http://www.securityfocus.com/bid/84427 - http://rhn.redhat.com/errata/RHSA-2016-0465.html - https://cert-portal.siemens.c
ttp://www.securityfocus.com/bid/84427 - http://rhn.redhat.com/errata/RHSA-2016-0465.html - https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
CVE ID: CVE-2016-1909 State: PUBLISHED Published: 2016-01-15T20:00:00 Last Updated: 2024-08-05T23:10:40.276Z Vendors: n/a Products: n/a Problem Types: n/a Description: Fortinet FortiAnalyzer before 5.0.12 and 5.2.x before 5.2.5; FortiSwitch 3.3.x before 3.3.3; FortiCache 3.0.x before 3.0.8; and FortiOS 4.1.x before 4.1.11, 4.2.x before 4.2.16, 4.3.x before 4.3.17 and 5.0.x before 5.0.8 have a hardcoded passphrase for the Fortimanager_Access account, which allows remote attackers to obtain administrative access via an SSH session. Additional Analyst Notes: - CVE Program Container: References: - http://blog.fortinet.com/post/brief-statement-regarding-issues-found-with-fortios - http://seclists
ainer: References: - http://blog.fortinet.com/post/brief-statement-regarding-issues-found-with-fortios - http://seclists.org/fulldisclosure/2016/Jan/26 - http://packetstormsecurity.com/files/135225/FortiGate-OS-5.0.7-SSH-Backdoor.html - http://www.securitytracker.com/id/1034663 - https://twitter.com/esizkur/status/686842135501508608 - http://www.fortiguard.com/advisory/multiple-products-ssh-undocumented-login-vulnerability - https://www.exploit-db.com/exploits/39224/
CVE ID: CVE-2016-1910 State: PUBLISHED Published: 2016-01-15T20:00:00 Last Updated: 2024-08-05T23:10:40.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: The User Management Engine (UME) in SAP NetWeaver 7.4 allows attackers to decrypt unspecified data via unknown vectors, aka SAP Security Note 2191290. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2016/Apr/60 - http://www.securityfocus.com/bid/80920 - https://erpscan.io/advisories/erpscan-16-003-sap-netweaver-7-4-cryptographic-issues/ - https://erpscan.io/press-center/blog/sap-security-notes-january-2016-review/ - https://www.exploit-db.com/exploits/43495/
CVE ID: CVE-2016-1911 State: PUBLISHED Published: 2016-01-15T20:00:00 Last Updated: 2024-08-05T23:10:40.365Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in SAP NetWeaver 7.4 allow remote attackers to inject arbitrary web script or HTML via vectors related to the (1) Runtime Workbench (RWB) or (2) Pmitest servlet in the Process Monitoring Infrastructure (PMI), aka SAP Security Notes 2206793 and 2234918. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2016/Apr/64 - http://seclists.org/fulldisclosure/2016/Apr/58 - https://erpscan.io/advisories/erpscan-16-004-sap-netweaver-7-4-p
r/64 - http://seclists.org/fulldisclosure/2016/Apr/58 - https://erpscan.io/advisories/erpscan-16-004-sap-netweaver-7-4-pmitest-servlet-xss/ - https://erpscan.io/advisories/erpscan-16-001-xss-sap-netweaver-7-4-mdt-servlet/ - https://erpscan.io/press-center/blog/sap-security-notes-january-2016-review/
CVE ID: CVE-2016-1912 State: PUBLISHED Published: 2016-01-15T20:00:00Z Last Updated: 2024-09-17T02:46:26.761Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Dolibarr ERP/CRM 3.8.3 allow remote authenticated users to inject arbitrary web script or HTML via the (1) lastname, (2) firstname, (3) email, (4) job, or (5) signature parameter to htdocs/user/card.php. Additional Analyst Notes: - CVE Program Container: References: - https://twitter.com/MickaelDorigny/status/684456187870457857 - http://www.information-security.fr/xss-dolibarr-version-3-8-3/ - http://packetstormsecurity.com/files/135201/Dolibarr-3.8.3-Cross-Site-Scripting
ecurity.fr/xss-dolibarr-version-3-8-3/ - http://packetstormsecurity.com/files/135201/Dolibarr-3.8.3-Cross-Site-Scripting.html - https://github.com/GPCsolutions/dolibarr/commit/0d3181324c816bdf664ca5e1548dfe8eb05c54f8 - https://github.com/Dolibarr/dolibarr/issues/4341
CVE ID: CVE-2016-1913 State: PUBLISHED Published: 2016-01-15T20:00:00Z Last Updated: 2024-09-16T22:31:01.428Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Redhen module 7.x-1.x before 7.x-1.11 for Drupal allow remote authenticated users with certain access to inject arbitrary web script or HTML via unspecified vectors, related to (1) individual contacts, (2) notes, or (3) engagement scores. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2649780 - https://www.drupal.org/node/2649800
CVE ID: CVE-2016-1914 State: PUBLISHED Published: 2017-04-13T14:00:00 Last Updated: 2024-08-05T23:10:40.272Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the com.rim.mdm.ui.server.ImageServlet servlet in BlackBerry Enterprise Server 12 (BES12) Self-Service before 12.4 allow remote attackers to execute arbitrary SQL commands via the imageName parameter to (1) mydevice/client/image, (2) admin/client/image, (3) myapps/client/image, (4) ssam/client/image, or (5) all/client/image. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035095 - http://security-assessment.com/files/documents/advisor
tainer: References: - http://www.securitytracker.com/id/1035095 - http://security-assessment.com/files/documents/advisory/Blackberry%20BES12%20Self-Service%20Multiple%20Vulnerabilities.pdf - https://www.exploit-db.com/exploits/39481/ - http://support.blackberry.com/kb/articleDetail?articleNumber=000038033 - http://seclists.org/fulldisclosure/2016/Feb/95
CVE ID: CVE-2016-1915 State: PUBLISHED Published: 2017-04-13T14:00:00 Last Updated: 2024-08-05T23:10:40.273Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in BlackBerry Enterprise Server 12 (BES12) Self-Service before 12.4 allow remote attackers to inject arbitrary web script or HTML via the locale parameter to (1) mydevice/index.jsp or (2) mydevice/loggedOut.jsp. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035095 - http://security-assessment.com/files/documents/advisory/Blackberry%20BES12%20Self-Service%20Multiple%20Vulnerabilities.pdf - https://www.exploit-db.com/exploit
cuments/advisory/Blackberry%20BES12%20Self-Service%20Multiple%20Vulnerabilities.pdf - https://www.exploit-db.com/exploits/39481/ - http://support.blackberry.com/kb/articleDetail?articleNumber=000038033 - http://seclists.org/fulldisclosure/2016/Feb/95
CVE ID: CVE-2016-1916 State: PUBLISHED Published: 2016-04-22T18:00:00 Last Updated: 2024-08-05T23:10:40.263Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Management Console in BlackBerry Enterprise Server (BES) 12 before 12.4.1 allows remote authenticated users to inject arbitrary web script or HTML by leveraging basic administrative access to create a crafted policy, leading to improper rendering on a certain Export IT screen. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035568 - http://www.blackberry.com/btsc/KB38117
CVE ID: CVE-2016-1917 State: PUBLISHED Published: 2016-04-22T18:00:00 Last Updated: 2024-08-05T23:10:40.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Management Console in BlackBerry Enterprise Server (BES) 12 before 12.4.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2016-1918. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035568 - http://www.blackberry.com/btsc/KB38118
CVE ID: CVE-2016-1918 State: PUBLISHED Published: 2016-04-22T18:00:00 Last Updated: 2024-08-05T23:10:40.377Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Management Console in BlackBerry Enterprise Server (BES) 12 before 12.4.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2016-1917. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035568 - http://www.blackberry.com/btsc/KB38118
CVE ID: CVE-2016-1919 State: PUBLISHED Published: 2017-01-27T20:00:00 Last Updated: 2024-08-05T23:10:40.358Z Vendors: n/a Products: n/a Problem Types: n/a Description: Samsung KNOX 1.0 uses a weak eCryptFS Key generation algorithm, which makes it easier for local users to obtain sensitive information by leveraging knowledge of the TIMA key and a brute-force attack. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/135303/Samsung-KNOX-1.0-Weak-eCryptFS-Key-Generation.html - http://www.securityfocus.com/archive/1/537319/100/0/threaded - http://lists.openwall.net/bugtraq/2016/01/17/2 - http://www.securityfocus.com/archive/1/537340/100/0/thread
0/threaded - http://lists.openwall.net/bugtraq/2016/01/17/2 - http://www.securityfocus.com/archive/1/537340/100/0/threaded
CVE ID: CVE-2016-1920 State: PUBLISHED Published: 2017-01-27T20:00:00 Last Updated: 2024-08-05T23:10:40.273Z Vendors: n/a Products: n/a Problem Types: n/a Description: Samsung KNOX 1.0.0 uses the shared certificate on Android, which allows local users to conduct man-in-the-middle attacks as demonstrated by installing a certificate and running a VPN service. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/537339/100/0/threaded - http://www.securityfocus.com/archive/1/537318/100/0/threaded
CVE ID: CVE-2016-1922 State: PUBLISHED Published: 2016-12-29T22:00:00 Last Updated: 2024-08-05T23:10:40.299Z Vendors: n/a Products: n/a Problem Types: n/a Description: QEMU (aka Quick Emulator) built with the TPR optimization for 32-bit Windows guests support is vulnerable to a null pointer dereference flaw. It occurs while doing I/O port write operations via hmp interface. In that, 'current_cpu' remains null, which leads to the null pointer dereference. A user or process could use this flaw to crash the QEMU instance, resulting in DoS issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/01/16/1 - https://security.gentoo.org/
Program Container: References: - http://www.openwall.com/lists/oss-security/2016/01/16/1 - https://security.gentoo.org/glsa/201604-01 - http://www.openwall.com/lists/oss-security/2016/01/16/6 - http://www.debian.org/security/2016/dsa-3469 - http://www.debian.org/security/2016/dsa-3470 - http://www.debian.org/security/2016/dsa-3471 - https://lists.gnu.org/archive/html/qemu-devel/2016-01/msg02812.html - http://www.securityfocus.com/bid/81058 - https://bugzilla.redhat.com/show_bug.cgi?id=1283934
CVE ID: CVE-2016-1923 State: PUBLISHED Published: 2016-01-27T20:00:00 Last Updated: 2024-08-05T23:10:40.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the opj_j2k_update_image_data function in OpenJpeg 2016.1.18 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted JPEG 2000 image. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201612-26 - http://www.openwall.com/lists/oss-security/2016/01/18/7 - http://www.openwall.com/lists/oss-security/2016/01/18/4 - https://www.oracle.com/security-alerts/cpujul2020.html
CVE ID: CVE-2016-1924 State: PUBLISHED Published: 2016-01-27T20:00:00 Last Updated: 2024-08-05T23:10:40.250Z Vendors: n/a Products: n/a Problem Types: n/a Description: The opj_tgt_reset function in OpenJpeg 2016.1.18 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted JPEG 2000 image. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201612-26 - http://www.debian.org/security/2016/dsa-3665 - http://www.openwall.com/lists/oss-security/2016/01/18/7 - http://www.openwall.com/lists/oss-security/2016/01/18/4 - https://www.oracle.com/security-alerts/cpujul2020.html
CVE ID: CVE-2016-1925 State: PUBLISHED Published: 2017-01-23T21:00:00 Last Updated: 2024-08-05T23:10:40.408Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer underflow in header.c in lha allows remote attackers to have unspecified impact via a large header size value for the (1) level0 or (2) level1 header in a lha archive, which triggers a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/01/18/8 - http://www.openwall.com/lists/oss-security/2016/01/18/3 - https://security.gentoo.org/glsa/202007-42
CVE ID: CVE-2016-1926 State: PUBLISHED Published: 2016-01-26T19:00:00 Last Updated: 2024-08-05T23:10:40.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the charts module in Greenbone Security Assistant (GSA) 6.x before 6.0.8 allows remote attackers to inject arbitrary web script or HTML via the aggregate_type parameter in a get_aggregate command to omp. Additional Analyst Notes: - CVE Program Container: References: - https://en.internetwache.org/cve-2016-1926-xss-in-the-greenbone-security-assistant-20-01-2016/ - http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183371.html - http://www.greenbone.net/technology/gbsa2
tp://lists.fedoraproject.org/pipermail/package-announce/2016-May/183371.html - http://www.greenbone.net/technology/gbsa2016-01.html - http://www.openvas.org/OVSA20160113.html - http://www.securityfocus.com/archive/1/537335/100/0/threaded - http://packetstormsecurity.com/files/135328/OpenVAS-Greenbone-Security-Assistant-Cross-Site-Scripting.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184478.html
CVE ID: CVE-2016-1927 State: PUBLISHED Published: 2016-02-20T01:00:00 Last Updated: 2024-08-05T23:10:40.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: The suggestPassword function in js/functions.js in phpMyAdmin 4.0.x before 4.0.10.13, 4.4.x before 4.4.15.3, and 4.5.x before 4.5.4 relies on the Math.random JavaScript function, which makes it easier for remote attackers to guess passwords via a brute-force approach. Additional Analyst Notes: - CVE Program Container: References: - http://www.phpmyadmin.net/home_page/security/PMASA-2016-4.php - http://lists.opensuse.org/opensuse-updates/2016-02/msg00049.html - http://www.debian.org/security/2016/dsa-3627 - http://lists.opensus
pensuse.org/opensuse-updates/2016-02/msg00049.html - http://www.debian.org/security/2016/dsa-3627 - http://lists.opensuse.org/opensuse-updates/2016-02/msg00028.html - https://github.com/phpmyadmin/phpmyadmin/commit/8dedcc1a175eb07debd4fe116407c43694c60b22 - https://github.com/phpmyadmin/phpmyadmin/commit/912856b432d794201884c36e5f390d446339b6e4 - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176739.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176483.html
CVE ID: CVE-2016-1928 State: PUBLISHED Published: 2016-01-20T16:00:00 Last Updated: 2024-08-05T23:10:40.238Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the XS engine (hdbxsengine) in SAP HANA allows remote attackers to cause a denial of service or execute arbitrary code via a crafted HTTP request, related to JSON, aka SAP Security Note 2241978. Additional Analyst Notes: - CVE Program Container: References: - https://erpscan.io/advisories/erpscan-16-005-sap-hana-hdbxsengine-json-dos/ - http://seclists.org/fulldisclosure/2016/Apr/65 - https://erpscan.io/press-center/blog/sap-security-notes-january-2016-review/ - http://www.securityfocus.com/archive/1/538212/1
//erpscan.io/press-center/blog/sap-security-notes-january-2016-review/ - http://www.securityfocus.com/archive/1/538212/100/0/threaded
CVE ID: CVE-2016-1929 State: PUBLISHED Published: 2016-01-20T16:00:00 Last Updated: 2024-08-05T23:10:40.439Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XS engine in SAP HANA allows remote attackers to spoof log entries in trace files and consequently cause a denial of service (disk consumption and process crash) via a crafted HTTP request, related to an unspecified debug function, aka SAP Security Note 2241978. Additional Analyst Notes: - CVE Program Container: References: - https://erpscan.io/advisories/erpscan-16-002-sap-hana-log-injection-and-no-size-restriction/ - https://erpscan.io/press-center/blog/sap-security-notes-january-2016-review/ - http://seclists.org/fulldi
restriction/ - https://erpscan.io/press-center/blog/sap-security-notes-january-2016-review/ - http://seclists.org/fulldisclosure/2016/Apr/59
CVE ID: CVE-2016-1930 State: PUBLISHED Published: 2016-01-31T18:00:00 Last Updated: 2024-08-05T23:10:40.228Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 44.0 and Firefox ESR 38.x before 38.6 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2016/dsa-3457 - http://www.debian.org/security/2016/dsa-3491 - https://bugzilla.mozilla.org/show_bug.cgi?id=1234571 - http://lists.opensuse.org/opensuse-updates/20
ity/2016/dsa-3491 - https://bugzilla.mozilla.org/show_bug.cgi?id=1234571 - http://lists.opensuse.org/opensuse-updates/2016-02/msg00105.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1223670 - http://www.securitytracker.com/id/1034825 - https://bugzilla.mozilla.org/show_bug.cgi?id=1234280 - https://bugzilla.mozilla.org/show_bug.cgi?id=1221385 - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - http://rhn.redhat.com/errata/RHSA-2016-0071.html - http://www.ubuntu.com/usn/USN-2880-1 - http://www.mozilla.org/security/announce/2016/mfsa2016-01.html - http://www.ubuntu.com/usn/USN-2880-2 - https://bugzilla.mozilla.org/show_bug.cgi?id=1224200 - https://bugzil
6-01.html - http://www.ubuntu.com/usn/USN-2880-2 - https://bugzilla.mozilla.org/show_bug.cgi?id=1224200 - https://bugzilla.mozilla.org/show_bug.cgi?id=1233152 - https://bugzilla.mozilla.org/show_bug.cgi?id=1230668 - http://rhn.redhat.com/errata/RHSA-2016-0258.html - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00010.html - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00002.html - http://www.ubuntu.com/usn/USN-2904-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=1230639 - http://www.securityfocus.com/bid/81953 - https://bugzilla.mozilla.org/show_bug.cgi?id=1230686 - https://security.gentoo.org/glsa/201605-06 - http://lists.opensuse.org/opensuse-updates/2
.org/show_bug.cgi?id=1230686 - https://security.gentoo.org/glsa/201605-06 - http://lists.opensuse.org/opensuse-updates/2016-02/msg00101.html - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00001.html - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00003.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1233346 - https://bugzilla.mozilla.org/show_bug.cgi?id=1230483 - https://bugzilla.mozilla.org/show_bug.cgi?id=1233925
CVE ID: CVE-2016-1931 State: PUBLISHED Published: 2016-01-31T18:00:00 Last Updated: 2024-08-05T23:10:40.310Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 44.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to uninitialized memory encountered during brotli data compression, and other vectors. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1206675 - https://bugzilla.mozilla.org/show_bug.cgi?id=1231121 - https://bugzilla.mozilla.org/sh
lla.org/show_bug.cgi?id=1206675 - https://bugzilla.mozilla.org/show_bug.cgi?id=1231121 - https://bugzilla.mozilla.org/show_bug.cgi?id=1209365 - https://bugzilla.mozilla.org/show_bug.cgi?id=1229825 - https://bugzilla.mozilla.org/show_bug.cgi?id=1207298 - http://www.securitytracker.com/id/1034825 - https://bugzilla.mozilla.org/show_bug.cgi?id=1234576 - https://bugzilla.mozilla.org/show_bug.cgi?id=1186973 - https://bugzilla.mozilla.org/show_bug.cgi?id=1209358 - https://bugzilla.mozilla.org/show_bug.cgi?id=1209366 - http://www.ubuntu.com/usn/USN-2880-1 - http://www.mozilla.org/security/announce/2016/mfsa2016-01.html - http://www.ubuntu.com/usn/USN-2880-2 - https://bugzilla.mozilla.org/show_bug.c
security/announce/2016/mfsa2016-01.html - http://www.ubuntu.com/usn/USN-2880-2 - https://bugzilla.mozilla.org/show_bug.cgi?id=1222015 - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00002.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1180064 - https://bugzilla.mozilla.org/show_bug.cgi?id=1209368 - https://bugzilla.mozilla.org/show_bug.cgi?id=1209546 - http://www.securityfocus.com/bid/81953 - https://security.gentoo.org/glsa/201605-06 - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00001.html
CVE ID: CVE-2016-1933 State: PUBLISHED Published: 2016-01-31T18:00:00 Last Updated: 2024-08-05T23:10:40.444Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the image-deinterlacing functionality in Mozilla Firefox before 44.0 allows remote attackers to cause a denial of service (memory consumption or application crash) via a crafted GIF image. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1231761 - http://www.securitytracker.com/id/1034825 - http://www.securityfocus.com/bid/81956 - http://www.ubuntu.com/usn/USN-2880-1 - http://www.ubuntu.com/usn/USN-2880-2 - http://lists.opensuse.org/opensuse-secur