Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-2914 State: PUBLISHED Published: 2017-11-07T16:00:00Z Last Updated: 2024-09-16T23:12:00.909Z Severity: CRITICAL (CVSS 9 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Circle Media Products: Circle Problem Types: authentication bypass Description: An exploitable authentication bypass vulnerability exists in the API daemon of Circle with Disney running firmware 2.0.1. A specially crafted token can bypass the authentication routine of the Apid binary, causing the device to grant unintended administrative access. An attacker needs network connectivity to the device to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www
o the device to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0421
CVE ID: CVE-2017-2915 State: PUBLISHED Published: 2017-11-07T16:00:00Z Last Updated: 2024-09-17T04:20:26.677Z Severity: CRITICAL (CVSS 9 CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Circle Media Products: Circle Problem Types: arbitrary code execution Description: An exploitable vulnerability exists in the WiFi configuration functionality of Circle with Disney running firmware 2.0.1. A specially crafted SSID can cause the device to execute arbitrary shell commands. An attacker needs to send a couple of HTTP requests and setup an access point reachable by the device to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintel
e to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0422
CVE ID: CVE-2017-2916 State: PUBLISHED Published: 2017-11-07T16:00:00Z Last Updated: 2024-09-17T04:00:28.316Z Severity: CRITICAL (CVSS 9.9 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Circle Media Products: Circle Problem Types: arbitrary code execution Description: An exploitable vulnerability exists in the /api/CONFIG/restore functionality of Circle with Disney running firmware 2.0.1. Specially crafted network packets can cause an arbitrary file to be overwritten. An attacker can send an HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0423
CVE ID: CVE-2017-2917 State: PUBLISHED Published: 2017-11-07T16:00:00Z Last Updated: 2024-09-16T20:43:28.399Z Severity: CRITICAL (CVSS 9.9 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Circle Media Products: Circle Problem Types: command injection Description: An exploitable vulnerability exists in the notifications functionality of Circle with Disney running firmware 2.0.1. Specially crafted network packets can cause an OS command injection. An attacker can send an HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0424
CVE ID: CVE-2017-2918 State: PUBLISHED Published: 2018-04-24T19:00:00Z Last Updated: 2024-09-17T02:47:27.505Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Blender Products: Blender Problem Types: buffer overflow Description: An exploitable integer overflow exists in the Image loading functionality of the Blender open-source 3d creation suite v2.78c. A specially crafted .blend file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. An attacker can convince a user to open the file or use it as a library in order to trigger this vulnerability. Additional Analyst Notes: - CVE Pro
user to open the file or use it as a library in order to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/08/msg00011.html - https://www.debian.org/security/2018/dsa-4248 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0425
CVE ID: CVE-2017-2919 State: PUBLISHED Published: 2017-11-20T22:00:00Z Last Updated: 2024-09-17T00:01:43.511Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: libxls Products: libxls Problem Types: remote code execution Description: An exploitable stack based buffer overflow vulnerability exists in the xls_getfcell function of libxls 1.3.4. A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2018/dsa-4173 - https://security.gentoo.org/glsa/202003-64 - htt
ontainer: References: - https://www.debian.org/security/2018/dsa-4173 - https://security.gentoo.org/glsa/202003-64 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0426
CVE ID: CVE-2017-2920 State: PUBLISHED Published: 2017-10-05T19:00:00Z Last Updated: 2024-09-17T01:40:55.531Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Talos Products: Computerinsel Photoline Problem Types: remote code execution Description: An memory corruption vulnerability exists in the .SVG parsing functionality of Computerinsel Photoline 20.02. A specially crafted .SVG file can cause a vulnerability resulting in memory corruption, which can potentially lead to arbitrary code execution. An attacker can send a specific .SVG file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com
rigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101186 - https://security.gentoo.org/glsa/201908-26 - https://github.com/libofx/libofx/commit/a70934eea95c76a7737b83773bffe8738935082d - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0427
CVE ID: CVE-2017-2921 State: PUBLISHED Published: 2017-11-07T16:00:00Z Last Updated: 2024-09-16T22:56:25.193Z Severity: HIGH (CVSS 8.1 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Cesanta Products: Mongoose Problem Types: denial of service Description: An exploitable memory corruption vulnerability exists in the Websocket protocol implementation of Cesanta Mongoose 6.8. A specially crafted websocket packet can cause an integer overflow, leading to a heap buffer overflow and resulting in denial of service and potential remote code execution. An attacker needs to send a specially crafted websocket packet over network to trigger this vulnerability. Additional Analyst Notes: - CVE Prog
nd a specially crafted websocket packet over network to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0428
CVE ID: CVE-2017-2922 State: PUBLISHED Published: 2017-11-07T16:00:00Z Last Updated: 2024-09-16T18:59:36.372Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Cesanta Products: Mongoose Problem Types: remote code execution Description: An exploitable memory corruption vulnerability exists in the Websocket protocol implementation of Cesanta Mongoose 6.8. A specially crafted websocket packet can cause a buffer to be allocated while leaving stale pointers which leads to a use-after-free vulnerability which can be exploited to achieve remote code execution. An attacker needs to send a specially crafted websocket packet over the network to trigger this vulnerabi
ode execution. An attacker needs to send a specially crafted websocket packet over the network to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0429
CVE ID: CVE-2017-2923 State: PUBLISHED Published: 2018-04-24T19:00:00Z Last Updated: 2024-09-16T17:03:55.269Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Alessandro Furieri Products: FreeXL Problem Types: remote code execution Description: An exploitable heap based buffer overflow vulnerability exists in the 'read_biff_next_record function' of FreeXL 1.0.3. A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2017/dsa-3976 - http://www.securityfocus.
Notes: - CVE Program Container: References: - https://www.debian.org/security/2017/dsa-3976 - http://www.securityfocus.com/bid/100807 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0430
CVE ID: CVE-2017-2924 State: PUBLISHED Published: 2018-04-24T19:00:00Z Last Updated: 2024-09-16T18:18:06.113Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Alessandro Furieri Products: FreeXL Problem Types: remote code execution Description: An exploitable heap-based buffer overflow vulnerability exists in the read_legacy_biff function of FreeXL 1.0.3. A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2017/dsa-3976 - http://www.securityfocus.com/bid
- CVE Program Container: References: - https://www.debian.org/security/2017/dsa-3976 - http://www.securityfocus.com/bid/100799 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0431
CVE ID: CVE-2017-2925 State: PUBLISHED Published: 2017-01-11T04:40:00 Last Updated: 2024-08-05T14:09:17.796Z Vendors: n/a Products: Adobe Flash Player 24.0.0.186 and earlier. Problem Types: Memory Corruption Description: Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable memory corruption vulnerability in the JPEG XR codec. Successful exploitation could lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201702-20 - https://helpx.adobe.com/security/products/flash-player/apsb17-02.html - http://rhn.redhat.com/errata/RHSA-2017-0057.html - http://www.securitytracker.com/id/1037570 - http://www.se
7-02.html - http://rhn.redhat.com/errata/RHSA-2017-0057.html - http://www.securitytracker.com/id/1037570 - http://www.securityfocus.com/bid/95350
CVE ID: CVE-2017-2926 State: PUBLISHED Published: 2017-01-11T04:40:00 Last Updated: 2024-08-05T14:09:17.762Z Vendors: n/a Products: Adobe Flash Player 24.0.0.186 and earlier. Problem Types: Memory Corruption Description: Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable memory corruption vulnerability related to processing of atoms in MP4 files. Successful exploitation could lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201702-20 - https://helpx.adobe.com/security/products/flash-player/apsb17-02.html - http://rhn.redhat.com/errata/RHSA-2017-0057.html - http://www.securitytracker.com/id/
ucts/flash-player/apsb17-02.html - http://rhn.redhat.com/errata/RHSA-2017-0057.html - http://www.securitytracker.com/id/1037570 - http://www.securityfocus.com/bid/95350
CVE ID: CVE-2017-2927 State: PUBLISHED Published: 2017-01-11T04:40:00 Last Updated: 2024-08-05T14:09:17.801Z Vendors: n/a Products: Adobe Flash Player 24.0.0.186 and earlier. Problem Types: Heap Overflow Description: Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable heap overflow vulnerability when processing Adobe Texture Format files. Successful exploitation could lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95347 - https://security.gentoo.org/glsa/201702-20 - https://helpx.adobe.com/security/products/flash-player/apsb17-02.html - http://rhn.redhat.com/errata/RHSA-2017-0057.html - ht
://helpx.adobe.com/security/products/flash-player/apsb17-02.html - http://rhn.redhat.com/errata/RHSA-2017-0057.html - http://www.securitytracker.com/id/1037570
CVE ID: CVE-2017-2928 State: PUBLISHED Published: 2017-01-11T04:40:00 Last Updated: 2024-08-05T14:09:17.795Z Vendors: n/a Products: Adobe Flash Player 24.0.0.186 and earlier. Problem Types: Memory Corruption Description: Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable memory corruption vulnerability related to setting visual mode effects. Successful exploitation could lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201702-20 - https://helpx.adobe.com/security/products/flash-player/apsb17-02.html - http://rhn.redhat.com/errata/RHSA-2017-0057.html - http://www.securitytracker.com/id/10375
flash-player/apsb17-02.html - http://rhn.redhat.com/errata/RHSA-2017-0057.html - http://www.securitytracker.com/id/1037570 - http://www.securityfocus.com/bid/95350
CVE ID: CVE-2017-2929 State: PUBLISHED Published: 2017-01-24T07:40:00 Last Updated: 2024-08-05T14:09:17.767Z Vendors: n/a Products: Adobe Acrobat Extension for Chrome 15.1.0.3 Problem Types: DOM-based Cross-Site Scripting Description: Adobe Acrobat Chrome extension version 15.1.0.3 and earlier have a DOM-based cross-site scripting vulnerability. Successful exploitation could lead to JavaScript code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037687 - https://helpx.adobe.com/security/products/acrobat/apsb17-03.html - http://www.securityfocus.com/bid/95693
CVE ID: CVE-2017-2930 State: PUBLISHED Published: 2017-01-11T04:40:00 Last Updated: 2024-08-05T14:09:17.861Z Vendors: n/a Products: Adobe Flash Player 24.0.0.186 and earlier. Problem Types: Memory Corruption Description: Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable memory corruption vulnerability due to a concurrency error when manipulating a display list. Successful exploitation could lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201702-20 - https://www.exploit-db.com/exploits/41012/ - https://helpx.adobe.com/security/products/flash-player/apsb17-02.html - http://rhn.redhat.com/er
b.com/exploits/41012/ - https://helpx.adobe.com/security/products/flash-player/apsb17-02.html - http://rhn.redhat.com/errata/RHSA-2017-0057.html - https://www.exploit-db.com/exploits/41008/ - https://cosig.gouv.qc.ca/en/cosig-2017-01-en/ - http://www.securitytracker.com/id/1037570 - http://www.securityfocus.com/bid/95350 - http://packetstormsecurity.com/files/140463/Adobe-Flash-24.0.0.186-Code-Execution.html
CVE ID: CVE-2017-2931 State: PUBLISHED Published: 2017-01-11T04:40:00 Last Updated: 2024-08-05T14:09:17.755Z Vendors: n/a Products: Adobe Flash Player 24.0.0.186 and earlier. Problem Types: Memory Corruption Description: Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable memory corruption vulnerability related to the parsing of SWF metadata. Successful exploitation could lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201702-20 - https://helpx.adobe.com/security/products/flash-player/apsb17-02.html - http://rhn.redhat.com/errata/RHSA-2017-0057.html - http://www.securitytracker.com/id/10375
flash-player/apsb17-02.html - http://rhn.redhat.com/errata/RHSA-2017-0057.html - http://www.securitytracker.com/id/1037570 - http://www.securityfocus.com/bid/95350 - https://www.exploit-db.com/exploits/41608/
CVE ID: CVE-2017-2932 State: PUBLISHED Published: 2017-01-11T04:40:00 Last Updated: 2024-08-05T14:09:17.765Z Vendors: n/a Products: Adobe Flash Player 24.0.0.186 and earlier. Problem Types: Use After Free Description: Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable use after free vulnerability in the ActionScript MovieClip class. Successful exploitation could lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201702-20 - http://www.securityfocus.com/bid/95342 - https://helpx.adobe.com/security/products/flash-player/apsb17-02.html - http://rhn.redhat.com/errata/RHSA-2017-0057.html - https:/
lpx.adobe.com/security/products/flash-player/apsb17-02.html - http://rhn.redhat.com/errata/RHSA-2017-0057.html - https://www.exploit-db.com/exploits/41609/ - http://www.securitytracker.com/id/1037570
CVE ID: CVE-2017-2933 State: PUBLISHED Published: 2017-01-11T04:40:00 Last Updated: 2024-08-05T14:09:17.763Z Vendors: n/a Products: Adobe Flash Player 24.0.0.186 and earlier. Problem Types: Heap Overflow Description: Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable heap overflow vulnerability related to texture compression. Successful exploitation could lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95347 - https://security.gentoo.org/glsa/201702-20 - https://helpx.adobe.com/security/products/flash-player/apsb17-02.html - http://rhn.redhat.com/errata/RHSA-2017-0057.html - https://www.ex
be.com/security/products/flash-player/apsb17-02.html - http://rhn.redhat.com/errata/RHSA-2017-0057.html - https://www.exploit-db.com/exploits/41610/ - http://www.securitytracker.com/id/1037570
CVE ID: CVE-2017-2934 State: PUBLISHED Published: 2017-01-11T04:40:00 Last Updated: 2024-08-05T14:09:17.756Z Vendors: n/a Products: Adobe Flash Player 24.0.0.186 and earlier. Problem Types: Heap Overflow Description: Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable heap overflow vulnerability when parsing Adobe Texture Format files. Successful exploitation could lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95347 - https://security.gentoo.org/glsa/201702-20 - https://helpx.adobe.com/security/products/flash-player/apsb17-02.html - https://www.exploit-db.com/exploits/41611/ - http://rhn.
helpx.adobe.com/security/products/flash-player/apsb17-02.html - https://www.exploit-db.com/exploits/41611/ - http://rhn.redhat.com/errata/RHSA-2017-0057.html - http://www.securitytracker.com/id/1037570
CVE ID: CVE-2017-2935 State: PUBLISHED Published: 2017-01-11T04:40:00 Last Updated: 2024-08-05T14:09:17.739Z Vendors: n/a Products: Adobe Flash Player 24.0.0.186 and earlier. Problem Types: Heap Overflow Description: Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable heap overflow vulnerability when processing the Flash Video container file format. Successful exploitation could lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95347 - https://security.gentoo.org/glsa/201702-20 - https://helpx.adobe.com/security/products/flash-player/apsb17-02.html - http://rhn.redhat.com/errata/RHSA-2017-005
-20 - https://helpx.adobe.com/security/products/flash-player/apsb17-02.html - http://rhn.redhat.com/errata/RHSA-2017-0057.html - http://www.securitytracker.com/id/1037570 - https://www.exploit-db.com/exploits/41612/
CVE ID: CVE-2017-2936 State: PUBLISHED Published: 2017-01-11T04:40:00 Last Updated: 2024-08-05T14:09:17.764Z Vendors: n/a Products: Adobe Flash Player 24.0.0.186 and earlier. Problem Types: Use After Free Description: Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable use after free vulnerability in the ActionScript FileReference class. Successful exploitation could lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201702-20 - http://www.securityfocus.com/bid/95342 - https://helpx.adobe.com/security/products/flash-player/apsb17-02.html - http://rhn.redhat.com/errata/RHSA-2017-0057.html - htt
//helpx.adobe.com/security/products/flash-player/apsb17-02.html - http://rhn.redhat.com/errata/RHSA-2017-0057.html - http://www.securitytracker.com/id/1037570
CVE ID: CVE-2017-2937 State: PUBLISHED Published: 2017-01-11T04:40:00 Last Updated: 2024-08-05T14:09:17.777Z Vendors: n/a Products: Adobe Flash Player 24.0.0.186 and earlier. Problem Types: Use After Free Description: Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable use after free vulnerability in the ActionScript FileReference class, when using class inheritance. Successful exploitation could lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201702-20 - http://www.securityfocus.com/bid/95342 - https://helpx.adobe.com/security/products/flash-player/apsb17-02.html - http://rhn.redhat.com/er
tyfocus.com/bid/95342 - https://helpx.adobe.com/security/products/flash-player/apsb17-02.html - http://rhn.redhat.com/errata/RHSA-2017-0057.html - http://www.securitytracker.com/id/1037570
CVE ID: CVE-2017-2938 State: PUBLISHED Published: 2017-01-11T04:40:00 Last Updated: 2024-08-05T14:09:17.798Z Vendors: n/a Products: Adobe Flash Player 24.0.0.186 and earlier. Problem Types: Security Bypass Description: Adobe Flash Player versions 24.0.0.186 and earlier have a security bypass vulnerability related to handling TCP connections. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201702-20 - https://helpx.adobe.com/security/products/flash-player/apsb17-02.html - http://rhn.redhat.com/errata/RHSA-2017-0057.html - http://www.securityfocus.com/bid/95341 - http://www.securitytracker.com/id/1037570
CVE ID: CVE-2017-2939 State: PUBLISHED Published: 2017-01-11T04:40:00 Last Updated: 2024-08-05T14:09:17.807Z Vendors: n/a Products: Adobe Acrobat Reader 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier. Problem Types: Memory Corruption Description: Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable memory corruption vulnerability when processing a malformed cross-reference table. Successful exploitation could lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95345 - http://www.securitytracker.com/id/1037574 - https://h
Container: References: - http://www.securityfocus.com/bid/95345 - http://www.securitytracker.com/id/1037574 - https://helpx.adobe.com/security/products/acrobat/apsb17-01.html
CVE ID: CVE-2017-2940 State: PUBLISHED Published: 2017-01-11T04:40:00 Last Updated: 2024-08-05T14:09:17.750Z Vendors: n/a Products: Adobe Acrobat Reader 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier. Problem Types: Memory Corruption Description: Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable memory corruption vulnerability when processing JPEG 2000 files. Successful exploitation could lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95345 - http://www.securitytracker.com/id/1037574 - https://helpx.adobe.com/sec
nces: - http://www.securityfocus.com/bid/95345 - http://www.securitytracker.com/id/1037574 - https://helpx.adobe.com/security/products/acrobat/apsb17-01.html
CVE ID: CVE-2017-2941 State: PUBLISHED Published: 2017-01-11T04:40:00 Last Updated: 2024-08-05T14:09:17.769Z Vendors: n/a Products: Adobe Acrobat Reader 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier. Problem Types: Memory Corruption Description: Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable memory corruption vulnerability when processing Compact Font Format data. Successful exploitation could lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-17-002 - http://www.securityfocus.com/bid/95345 - http: