Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-6281 State: PUBLISHED Published: 2018-03-12T13:00:00Z Last Updated: 2024-09-16T18:19:06.624Z Vendors: Nvidia Corporation Products: Android Problem Types: Elevation of privilege Description: NVIDIA libnvomx contains a possible out of bounds write due to a improper input validation which could lead to local escalation of privilege. This issue is rated as high. Product: Android. Version: N/A. Android: A-66969318. Reference: N-CVE-2017-6281. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-03-01 - http://www.securityfocus.com/bid/103286
CVE ID: CVE-2017-6282 State: PUBLISHED Published: 2018-03-06T16:00:00Z Last Updated: 2024-09-16T23:36:44.901Z Vendors: Nvidia Corporation Products: SHIELD TV Problem Types: Escalation of Pivileges Description: NVIDIA Tegra kernel driver contains a vulnerability in NVMAP where an attacker has the ability to write an arbitrary value to an arbitrary location which may lead to an escalation of privileges. This issue is rated as high. Additional Analyst Notes: - CVE Program Container: References: - http://nvidia.custhelp.com/app/answers/detail/a_id/4631
CVE ID: CVE-2017-6283 State: PUBLISHED Published: 2018-03-06T16:00:00Z Last Updated: 2024-09-17T00:10:51.538Z Vendors: Nvidia Corporation Products: SHIELD TV Problem Types: Information Disclosure Description: NVIDIA Security Engine contains a vulnerability in the RSA function where the keyslot read/write lock permissions are cleared on a chip reset which may lead to information disclosure. This issue is rated as high. Additional Analyst Notes: - CVE Program Container: References: - http://nvidia.custhelp.com/app/answers/detail/a_id/4631
CVE ID: CVE-2017-6284 State: PUBLISHED Published: 2018-03-06T16:00:00Z Last Updated: 2024-09-16T22:40:51.732Z Vendors: Nvidia Corporation Products: SHIELD TV Problem Types: Information Disclosure Description: NVIDIA Security Engine contains a vulnerability in the Deterministic Random Bit Generator (DRBG) where the DRBG does not properly initialize and store or transmits sensitive data using a weakened encryption scheme that is unable to protect sensitive data which may lead to information disclosure.This issue is rated as moderate. Additional Analyst Notes: - CVE Program Container: References: - http://nvidia.custhelp.com/app/answers/detail/a_id/4631 - https://nvidia.custhelp.com/app/answers
ntainer: References: - http://nvidia.custhelp.com/app/answers/detail/a_id/4631 - https://nvidia.custhelp.com/app/answers/detail/a_id/4787
CVE ID: CVE-2017-6285 State: PUBLISHED Published: 2018-03-12T13:00:00Z Last Updated: 2024-09-16T23:36:14.846Z Vendors: Nvidia Corporation Products: Android Problem Types: Information Disclosure Description: NVIDIA libnvrm contains a possible out of bounds read due to a missing bounds check which could lead to local information disclosure. This issue is rated as moderate. Product: Android. Version: N/A. Android: A-64893156. Reference: N-CVE-2017-6285. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2018-03-01
CVE ID: CVE-2017-6286 State: PUBLISHED Published: 2018-03-12T13:00:00Z Last Updated: 2024-09-16T17:03:06.148Z Vendors: Nvidia Corporation Products: Android Problem Types: Elevation of privilege Description: NVIDIA libnvomx contains a possible out of bounds write due to a missing bounds check which could lead to local escalation of privilege. This issue is rated as high. Product: Android. Version: N/A. Android: A-64893247. Reference: N-CVE-2017-6286. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-03-01 - http://www.securityfocus.com/bid/103286
CVE ID: CVE-2017-6287 State: PUBLISHED Published: 2018-03-12T13:00:00Z Last Updated: 2024-09-17T02:11:05.696Z Vendors: Nvidia Corporation Products: Android Problem Types: Information Disclosure Description: NVIDIA libnvrm contains a possible out of bounds read due to a missing bounds check which could lead to local information disclosure. This issue is rated as moderate.Product: Android. Version: N/A. Android: A-64893264. Reference: N-CVE-2017-6287. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2018-03-01
CVE ID: CVE-2017-6288 State: PUBLISHED Published: 2018-03-12T13:00:00Z Last Updated: 2024-09-16T17:49:26.292Z Vendors: Nvidia Corporation Products: Android Problem Types: Information Disclosure Description: NVIDIA libnvrm contains a possible out of bounds read due to a missing bounds check which could lead to local information disclosure. This issue is rated as moderate. Product: Android. Version: N/A. Android: A-65482562. Reference: N-CVE-2017-6288. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2018-03-01
CVE ID: CVE-2017-6289 State: PUBLISHED Published: 2018-05-10T14:00:00Z Last Updated: 2024-09-17T02:37:41.024Z Vendors: Nvidia Corporation Products: Android Problem Types: Elevation of privileges Description: In Android before the 2018-05-05 security patch level, NVIDIA Trusted Execution Environment (TEE) contains a memory corruption (due to unusual root cause) vulnerability, which if run within the speculative execution of the TEE, may lead to local escalation of privileges. This issue is rated as critical. Android: A-72830049. Reference: N-CVE-2017-6289. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104145 - https://source.android.com/secu
Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104145 - https://source.android.com/security/bulletin/2018-05-01
CVE ID: CVE-2017-6290 State: PUBLISHED Published: 2018-06-07T19:00:00Z Last Updated: 2024-09-16T22:25:38.380Z Vendors: Nvidia Corporation Products: GPU Display Driver Problem Types: Escalation of Privileges Description: In Android before the 2018-06-05 security patch level, NVIDIA TLK TrustZone contains a possible out of bounds write due to an integer overflow which could lead to local escalation of privilege with no additional execution privileges needed. User interaction not needed for exploitation. This issue is rated as high. Version: N/A. Android: A-69559414. Reference: N-CVE-2017-6290. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/
: N-CVE-2017-6290. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-06-01
CVE ID: CVE-2017-6292 State: PUBLISHED Published: 2018-06-07T19:00:00Z Last Updated: 2024-09-16T17:59:19.251Z Vendors: Nvidia Corporation Products: GPU Display Driver Problem Types: Escalation of Privileges Description: In Android before the 2018-06-05 security patch level, NVIDIA TLZ TrustZone contains a possible out of bounds write due to integer overflow which could lead to local escalation of privilege in the TrustZone with no additional execution privileges needed. User interaction is not needed for exploitation. This issue is rated as high. Version: N/A. Android: A-69480285. Reference: N-CVE-2017-6292. Additional Analyst Notes: - CVE Program Container: References: - https://source.andr
480285. Reference: N-CVE-2017-6292. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-06-01
CVE ID: CVE-2017-6293 State: PUBLISHED Published: 2018-05-10T14:00:00Z Last Updated: 2024-09-16T17:48:07.072Z Vendors: Nvidia Corporation Products: Android Problem Types: Elevation of privileges Description: In Android before the 2018-05-05 security patch level, NVIDIA Tegra X1 TZ contains a vulnerability in Widevine TA where the software writes data past the end, or before the beginning, of the intended buffer, which may lead to escalation of Privileges. This issue is rated as high. Android: A-69377364. Reference: N-CVE-2017-6293. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104145 - https://source.android.com/security/bulletin/2018-05-01
CVE ID: CVE-2017-6294 State: PUBLISHED Published: 2018-06-07T19:00:00Z Last Updated: 2024-09-16T17:15:30.614Z Vendors: Nvidia Corporation Products: GPU Display Driver Problem Types: Escalation of Privileges Description: In Android before the 2018-06-05 security patch level, NVIDIA Tegra X1 TZ contains a possible out of bounds write due to missing bounds check which could lead to escalation of privilege from the kernel to the TZ. User interaction is not needed for exploitation. This issue is rated as high. Version: N/A. Android: A-69316825. Reference: N-CVE-2017-6294. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-06-01
CVE ID: CVE-2017-6295 State: PUBLISHED Published: 2018-03-06T16:00:00Z Last Updated: 2024-09-17T02:46:45.070Z Vendors: Nvidia Corporation Products: SHIELD TV Problem Types: Denial of Service Description: NVIDIA TrustZone Software contains a vulnerability in the Keymaster implementation where the software reads data past the end, or before the beginning, of the intended buffer; and may lead to denial of service or information disclosure. This issue is rated as high. Additional Analyst Notes: - CVE Program Container: References: - http://nvidia.custhelp.com/app/answers/detail/a_id/4631
CVE ID: CVE-2017-6296 State: PUBLISHED Published: 2018-03-06T16:00:00Z Last Updated: 2024-09-16T18:49:20.194Z Vendors: Nvidia Corporation Products: SHIELD TV Problem Types: Denial of Service Description: NVIDIA TrustZone Software contains a TOCTOU issue in the DRM application which may lead to the denial of service or possible escalation of privileges. This issue is rated as moderate. Additional Analyst Notes: - CVE Program Container: References: - http://nvidia.custhelp.com/app/answers/detail/a_id/4631
CVE ID: CVE-2017-6297 State: PUBLISHED Published: 2017-02-27T07:25:00 Last Updated: 2024-08-05T15:25:48.822Z Vendors: n/a Products: n/a Problem Types: n/a Description: The L2TP Client in MikroTik RouterOS versions 6.83.3 and 6.37.4 does not enable IPsec encryption after a reboot, which allows man-in-the-middle attackers to view transmitted data unencrypted and gain access to networks on the L2TP server by monitoring the packets for the transmitted data and obtaining the L2TP secret. Additional Analyst Notes: - CVE Program Container: References: - https://blog.milne.it/2017/02/24/mikrotik-routeros-security-vulnerability-l2tp-tunnel-unencrypted-cve-2017-6297/ - http://www.securityfocus.com/bid
02/24/mikrotik-routeros-security-vulnerability-l2tp-tunnel-unencrypted-cve-2017-6297/ - http://www.securityfocus.com/bid/96447
CVE ID: CVE-2017-6298 State: PUBLISHED Published: 2017-02-24T04:23:00 Last Updated: 2024-08-05T15:25:48.546Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "1 of 9. Null Pointer Deref / calloc return value not checked." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96423 - http://www.openwall.com/lists/oss-security/2017/02/15/4 - https://github.com/Yeraze/ytnef/pull/27 - http://www.debian.org/security/2017/dsa-3846 - https://www.x41-dsec.de/lab/advisories/x41-2017-002-ytnef/ - https://lists.fedoraproject.org/archives/list/package-announce%40li
www.x41-dsec.de/lab/advisories/x41-2017-002-ytnef/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/
CVE ID: CVE-2017-6299 State: PUBLISHED Published: 2017-02-24T04:23:00 Last Updated: 2024-08-05T15:25:48.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "2 of 9. Infinite Loop / DoS in the TNEFFillMapi function in lib/ytnef.c." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96423 - http://www.openwall.com/lists/oss-security/2017/02/15/4 - https://github.com/Yeraze/ytnef/pull/27 - http://www.debian.org/security/2017/dsa-3846 - https://www.x41-dsec.de/lab/advisories/x41-2017-002-ytnef/ - https://lists.fedoraproject.org/archives/list/package-an
- https://www.x41-dsec.de/lab/advisories/x41-2017-002-ytnef/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/
CVE ID: CVE-2017-6300 State: PUBLISHED Published: 2017-02-24T04:23:00 Last Updated: 2024-08-05T15:25:48.840Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "3 of 9. Buffer Overflow in version field in lib/tnef-types.h." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96423 - http://www.openwall.com/lists/oss-security/2017/02/15/4 - https://github.com/Yeraze/ytnef/pull/27 - http://www.debian.org/security/2017/dsa-3846 - https://www.x41-dsec.de/lab/advisories/x41-2017-002-ytnef/ - https://lists.fedoraproject.org/archives/list/package-announce%40li
CVE ID: CVE-2017-6301 State: PUBLISHED Published: 2017-02-24T04:23:00 Last Updated: 2024-08-05T15:25:48.631Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "4 of 9. Out of Bounds Reads." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96423 - http://www.openwall.com/lists/oss-security/2017/02/15/4 - https://github.com/Yeraze/ytnef/pull/27 - http://www.debian.org/security/2017/dsa-3846 - https://www.x41-dsec.de/lab/advisories/x41-2017-002-ytnef/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJ
1-2017-002-ytnef/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/
CVE ID: CVE-2017-6302 State: PUBLISHED Published: 2017-02-24T04:23:00 Last Updated: 2024-08-05T15:25:49.007Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "5 of 9. Integer Overflow." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96423 - http://www.openwall.com/lists/oss-security/2017/02/15/4 - https://github.com/Yeraze/ytnef/pull/27 - http://www.debian.org/security/2017/dsa-3846 - https://www.x41-dsec.de/lab/advisories/x41-2017-002-ytnef/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMU
017-002-ytnef/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/
CVE ID: CVE-2017-6303 State: PUBLISHED Published: 2017-02-24T04:23:00 Last Updated: 2024-08-05T15:25:48.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "6 of 9. Invalid Write and Integer Overflow." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96423 - http://www.openwall.com/lists/oss-security/2017/02/15/4 - https://github.com/Yeraze/ytnef/pull/27 - http://www.debian.org/security/2017/dsa-3846 - https://www.x41-dsec.de/lab/advisories/x41-2017-002-ytnef/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.
b/advisories/x41-2017-002-ytnef/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/
CVE ID: CVE-2017-6304 State: PUBLISHED Published: 2017-02-24T04:23:00 Last Updated: 2024-08-05T15:25:48.584Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "7 of 9. Out of Bounds read." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96423 - http://www.openwall.com/lists/oss-security/2017/02/15/4 - https://github.com/Yeraze/ytnef/pull/27 - http://www.debian.org/security/2017/dsa-3846 - https://www.x41-dsec.de/lab/advisories/x41-2017-002-ytnef/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJW
-2017-002-ytnef/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/
CVE ID: CVE-2017-6305 State: PUBLISHED Published: 2017-02-24T04:23:00 Last Updated: 2024-08-05T15:25:48.669Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "8 of 9. Out of Bounds read and write." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96423 - http://www.openwall.com/lists/oss-security/2017/02/15/4 - https://github.com/Yeraze/ytnef/pull/27 - http://www.debian.org/security/2017/dsa-3846 - https://www.x41-dsec.de/lab/advisories/x41-2017-002-ytnef/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/me
sories/x41-2017-002-ytnef/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/
CVE ID: CVE-2017-6306 State: PUBLISHED Published: 2017-02-24T04:23:00 Last Updated: 2024-08-05T15:25:48.714Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "9 of 9. Directory Traversal using the filename; SanitizeFilename function in settings.c." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96423 - http://www.openwall.com/lists/oss-security/2017/02/15/4 - https://github.com/Yeraze/ytnef/pull/27 - http://www.debian.org/security/2017/dsa-3846 - https://www.x41-dsec.de/lab/advisories/x41-2017-002-ytnef/ - https://lists.fedoraproject.org/archives
ty/2017/dsa-3846 - https://www.x41-dsec.de/lab/advisories/x41-2017-002-ytnef/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/
CVE ID: CVE-2017-6307 State: PUBLISHED Published: 2017-02-24T04:23:00 Last Updated: 2024-08-05T15:25:48.802Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in tnef before 1.4.13. Two OOB Writes have been identified in src/mapi_attr.c:mapi_attr_read(). These might lead to invalid read and write operations, controlled by an attacker. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/verdammelt/tnef/blob/master/ChangeLog - http://www.securityfocus.com/bid/96427 - https://www.x41-dsec.de/lab/advisories/x41-2017-004-tnef/ - https://github.com/verdammelt/tnef/commit/1a17af1ed0c791aec44dbdc9eab91218cc1e335a - http://www.debian.or
17-004-tnef/ - https://github.com/verdammelt/tnef/commit/1a17af1ed0c791aec44dbdc9eab91218cc1e335a - http://www.debian.org/security/2017/dsa-3798 - https://security.gentoo.org/glsa/201708-02
CVE ID: CVE-2017-6308 State: PUBLISHED Published: 2017-02-24T04:23:00 Last Updated: 2024-08-05T15:25:49.020Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in tnef before 1.4.13. Several Integer Overflows, which can lead to Heap Overflows, have been identified in the functions that wrap memory allocation. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/verdammelt/tnef/blob/master/ChangeLog - http://www.securityfocus.com/bid/96427 - https://www.x41-dsec.de/lab/advisories/x41-2017-004-tnef/ - https://github.com/verdammelt/tnef/commit/c5044689e50039635e7700fe2472fd632ac77176 - http://www.debian.org/security/2017/dsa-3798 -
ub.com/verdammelt/tnef/commit/c5044689e50039635e7700fe2472fd632ac77176 - http://www.debian.org/security/2017/dsa-3798 - https://security.gentoo.org/glsa/201708-02
CVE ID: CVE-2017-6309 State: PUBLISHED Published: 2017-02-24T04:23:00 Last Updated: 2024-08-05T15:25:48.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in tnef before 1.4.13. Two type confusions have been identified in the parse_file() function. These might lead to invalid read and write operations, controlled by an attacker. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/verdammelt/tnef/blob/master/ChangeLog - http://www.securityfocus.com/bid/96427 - https://www.x41-dsec.de/lab/advisories/x41-2017-004-tnef/ - http://www.debian.org/security/2017/dsa-3798 - https://security.gentoo.org/glsa/201708-02 - https://github.
-004-tnef/ - http://www.debian.org/security/2017/dsa-3798 - https://security.gentoo.org/glsa/201708-02 - https://github.com/verdammelt/tnef/commit/8dccf79857ceeb7a6d3e42c1e762e7b865d5344d
CVE ID: CVE-2017-6310 State: PUBLISHED Published: 2017-02-24T04:23:00 Last Updated: 2024-08-05T15:25:48.882Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in tnef before 1.4.13. Four type confusions have been identified in the file_add_mapi_attrs() function. These might lead to invalid read and write operations, controlled by an attacker. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/verdammelt/tnef/blob/master/ChangeLog - http://www.securityfocus.com/bid/96427 - https://www.x41-dsec.de/lab/advisories/x41-2017-004-tnef/ - http://www.debian.org/security/2017/dsa-3798 - https://security.gentoo.org/glsa/201708-02 - https
s/x41-2017-004-tnef/ - http://www.debian.org/security/2017/dsa-3798 - https://security.gentoo.org/glsa/201708-02 - https://github.com/verdammelt/tnef/commit/8dccf79857ceeb7a6d3e42c1e762e7b865d5344d
CVE ID: CVE-2017-6311 State: PUBLISHED Published: 2017-03-10T02:00:00 Last Updated: 2024-08-05T15:25:48.866Z Vendors: n/a Products: n/a Problem Types: n/a Description: gdk-pixbuf-thumbnailer.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service (NULL pointer dereference and application crash) via vectors related to printing an error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2017/02/21/4 - http://www.securityfocus.com/bid/96779 - http://mov.sx/2017/02/21/bug-hunting-gdk-pixbuf.html - https://bugzilla.gnome.org/show_bug.cgi?id=778204 - http://www.openwall.com/lists/oss-security/2017/02/26/1 - h
f.html - https://bugzilla.gnome.org/show_bug.cgi?id=778204 - http://www.openwall.com/lists/oss-security/2017/02/26/1 - https://security.gentoo.org/glsa/201709-08 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SJF5ARFOX4BFUK6YCBKGAKBQYECO3AI2/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VSAZ6UCKKXC5VOWXGWQHOX2ZBLLATIOT/
CVE ID: CVE-2017-6312 State: PUBLISHED Published: 2017-03-10T02:00:00 Last Updated: 2024-08-05T15:25:48.924Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in io-ico.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service (segmentation fault and application crash) via a crafted image entry offset in an ICO file, which triggers an out-of-bounds read, related to compiler optimizations. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2017/02/21/4 - https://bugzilla.gnome.org/show_bug.cgi?id=779012 - http://www.securityfocus.com/bid/96779 - http://mov.sx/2017/02/21/bug-hunting-gdk-pix
gnome.org/show_bug.cgi?id=779012 - http://www.securityfocus.com/bid/96779 - http://mov.sx/2017/02/21/bug-hunting-gdk-pixbuf.html - http://www.openwall.com/lists/oss-security/2017/02/26/1 - https://security.gentoo.org/glsa/201709-08 - https://lists.debian.org/debian-lts-announce/2019/12/msg00025.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SJF5ARFOX4BFUK6YCBKGAKBQYECO3AI2/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VSAZ6UCKKXC5VOWXGWQHOX2ZBLLATIOT/