Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-7540 State: PUBLISHED Published: 2017-04-20T18:00:00 Last Updated: 2024-08-06T02:04:54.932Z Vendors: n/a Products: n/a Problem Types: n/a Description: coders/rgf.c in ImageMagick before 6.9.4-10 allows remote attackers to cause a denial of service (assertion failure) by converting an image to rgf format. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/commit/a0108a892f9ea3c2bb1e7a49b7d71376c2ecbff7 - http://www.openwall.com/lists/oss-security/2016/09/22/2 - https://github.com/ImageMagick/ImageMagick/pull/223 - https://bugzilla.redhat.com/show_bug.cgi?id=1378777 - https://bugs.launchpad.net/ubuntu/+source/imagemagick
k/pull/223 - https://bugzilla.redhat.com/show_bug.cgi?id=1378777 - https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1594060 - http://www.securityfocus.com/bid/93228
CVE ID: CVE-2016-7541 State: PUBLISHED Published: 2017-03-30T14:00:00 Last Updated: 2024-10-25T14:35:50.321Z Vendors: Fortinet Products: FortiOS Problem Types: Protection bypass Description: Long lived sessions in Fortinet FortiGate devices with FortiOS 5.x before 5.4.0 could violate a security policy during IPS signature updates when the FortiGate's IPSengine is configured in flow mode. All FortiGate versions with IPS configured in proxy mode (the default mode) are not affected. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/94477 - http://fortiguard.com/advisory/FG-IR-16-088
CVE ID: CVE-2016-7542 State: PUBLISHED Published: 2017-03-30T14:00:00 Last Updated: 2024-10-25T14:35:34.799Z Vendors: Fortinet Products: FortiOS Problem Types: Information leak Description: A read-only administrator on Fortinet devices with FortiOS 5.2.x before 5.2.10 GA and 5.4.x before 5.4.2 GA may have access to read-write administrators password hashes (not including super-admins) stored on the appliance via the webui REST API, and may therefore be able to crack them. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/94690 - http://fortiguard.com/advisory/FG-IR-16-050 - http://www.securitytracker.com/id/1037394
CVE ID: CVE-2016-7543 State: PUBLISHED Published: 2017-01-19T20:00:00 Last Updated: 2024-08-06T02:04:54.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bash before 4.4 allows local users to execute arbitrary commands with root privileges via crafted SHELLOPTS and PS4 environment variables. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2017-0725.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OU3C756YPHDAAPFX76UGZBAQQQ5UMHS5/ - https://access.redhat.com/errata/RHSA-2017:1931 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/messa
m/errata/RHSA-2017:1931 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F7XOQSHU63Y357NHU5FPTFBM6I3YOCQB/ - http://www.openwall.com/lists/oss-security/2016/09/26/9 - https://lists.gnu.org/archive/html/bug-bash/2016-09/msg00018.html - http://www.securityfocus.com/bid/93183 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05388115 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z2VRBSIPZDZ75ZQ2DLITHUIDW4W26KVR/ - http://www.securitytracker.com/id/1037812 - https://security.gentoo.org/glsa/201701-02
CVE ID: CVE-2016-7544 State: PUBLISHED Published: 2017-01-30T21:00:00 Last Updated: 2024-08-06T02:04:54.914Z Vendors: n/a Products: n/a Problem Types: n/a Description: Crypto++ 5.6.4 incorrectly uses Microsoft's stack-based _malloca and _freea functions. The library will request a block of memory to align a table in memory. If the table is later reallocated, then the wrong pointer could be freed. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93164 - http://www.openwall.com/lists/oss-security/2016/09/23/5 - https://github.com/weidai11/cryptopp/issues/302 - https://www.cryptopp.com/release565.html - http://www.openwall.com/lists/oss-security/
om/weidai11/cryptopp/issues/302 - https://www.cryptopp.com/release565.html - http://www.openwall.com/lists/oss-security/2016/09/23/9
CVE ID: CVE-2016-7545 State: PUBLISHED Published: 2017-01-19T20:00:00 Last Updated: 2024-08-06T02:04:54.960Z Vendors: n/a Products: n/a Problem Types: n/a Description: SELinux policycoreutils allows local users to execute arbitrary commands outside of the sandbox via a crafted TIOCSTI ioctl call. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2017-0536.html - http://www.openwall.com/lists/oss-security/2016/09/25/1 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UPRNK3PWMAVNJZ53YW5GOEOGJSFNAQIF/ - http://rhn.redhat.com/errata/RHSA-2017-0535.html - http://rhn.redhat.com/errata/RHSA-2016-2702.
NJZ53YW5GOEOGJSFNAQIF/ - http://rhn.redhat.com/errata/RHSA-2017-0535.html - http://rhn.redhat.com/errata/RHSA-2016-2702.html - http://www.securityfocus.com/bid/93156 - http://www.securitytracker.com/id/1037283 - https://github.com/SELinuxProject/selinux/commit/acca96a135a4d2a028ba9b636886af99c0915379 - https://marc.info/?l=selinux&m=147465160112766&w=2
CVE ID: CVE-2016-7547 State: PUBLISHED Published: 2017-04-12T10:00:00 Last Updated: 2024-08-06T02:04:54.953Z Vendors: n/a Products: n/a Problem Types: n/a Description: A command execution flaw on the Trend Micro Threat Discovery Appliance 2.6.1062r1 exists with the timezone parameter in the admin_sys_time.cgi interface. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97610 - https://github.com/rapid7/metasploit-framework/pull/8216/commits/0f07875a2ddb0bfbb4e985ab074e9fc56da1dcf6
CVE ID: CVE-2016-7549 State: PUBLISHED Published: 2016-09-25T20:00:00 Last Updated: 2024-08-06T02:04:54.959Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 53.0.2785.113 does not ensure that the recipient of a certain IPC message is a valid RenderFrame or RenderWidget, which allows remote attackers to cause a denial of service (invalid pointer dereference and application crash) or possibly have unspecified other impact by leveraging access to a renderer process, related to render_frame_host_impl.cc and render_widget_host_impl.cc, as demonstrated by a Password Manager message. Additional Analyst Notes: - CVE Program Container: References: - http://www.security
ated by a Password Manager message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93160 - https://crbug.com/556351 - https://googlechromereleases.blogspot.com/2016/09/stable-channel-update-for-desktop_13.html - http://rhn.redhat.com/errata/RHSA-2016-1905.html - https://crbug.com/646394 - https://codereview.chromium.org/1534933002
CVE ID: CVE-2016-7550 State: PUBLISHED Published: 2019-05-23T18:23:59 Last Updated: 2024-08-06T02:04:55.340Z Vendors: n/a Products: n/a Problem Types: n/a Description: asterisk 13.10.0 is affected by: denial of service issues in asterisk. The impact is: cause a denial of service (remote). Additional Analyst Notes: - CVE Program Container: References: - http://downloads.asterisk.org/pub/security/AST-2016-006.html
CVE ID: CVE-2016-7551 State: PUBLISHED Published: 2017-04-17T16:00:00 Last Updated: 2024-08-06T02:04:55.787Z Vendors: n/a Products: n/a Problem Types: n/a Description: chain_sip in Asterisk Open Source 11.x before 11.23.1 and 13.x 13.11.1 and Certified Asterisk 11.6 before 11.6-cert15 and 13.8 before 13.8-cert3 allows remote attackers to cause a denial of service (port exhaustion). Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=838832 - https://issues.asterisk.org/jira/browse/ASTERISK-26272 - https://bugzilla.redhat.com/show_bug.cgi?id=1374733 - http://downloads.asterisk.org/pub/security/AST-2016-007.html - http://www.debian
la.redhat.com/show_bug.cgi?id=1374733 - http://downloads.asterisk.org/pub/security/AST-2016-007.html - http://www.debian.org/security/2016/dsa-3700
CVE ID: CVE-2016-7552 State: PUBLISHED Published: 2017-04-12T10:00:00 Last Updated: 2024-08-06T02:04:55.596Z Vendors: n/a Products: n/a Problem Types: n/a Description: On the Trend Micro Threat Discovery Appliance 2.6.1062r1, directory traversal when processing a session_id cookie allows a remote, unauthenticated attacker to delete arbitrary files as root. This can be used to bypass authentication or cause a DoS. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rapid7/metasploit-framework/pull/8216/commits/0f07875a2ddb0bfbb4e985ab074e9fc56da1dcf6 - http://www.securityfocus.com/bid/97599
CVE ID: CVE-2016-7553 State: PUBLISHED Published: 2017-02-27T22:00:00 Last Updated: 2024-08-06T02:04:55.277Z Vendors: n/a Products: n/a Problem Types: n/a Description: The buf.pl script before 2.20 in Irssi before 0.8.20 uses weak permissions for the scrollbuffer dump file created between upgrades, which might allow local users to obtain sensitive information from private chat conversations by reading the file. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/09/26/4 - http://www.openwall.com/lists/oss-security/2016/09/24/1 - https://irssi.org/security/buf_pl_sa_2016.txt - https://github.com/irssi/scripts.irssi.org/commit/f1b1eb
/2016/09/24/1 - https://irssi.org/security/buf_pl_sa_2016.txt - https://github.com/irssi/scripts.irssi.org/commit/f1b1eb154baa684fad5d65bf4dff79c8ded8b65a - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7OM3WHWQ7RIAOZSOZZUM4CUYGKSIAGJJ/ - http://www.securityfocus.com/bid/93155
CVE ID: CVE-2016-7554 State: REJECTED Published: 2016-09-26T19:00:00 Last Updated: 2016-09-26T19:57:01 Description: No description available.
CVE ID: CVE-2016-7555 State: PUBLISHED Published: 2016-12-23T05:00:00 Last Updated: 2024-08-06T02:04:55.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: The avi_read_header function in libavformat/avidec.c in FFmpeg before 3.1.4 is vulnerable to memory leak when decoding an AVI file that has a crafted "strh" structure. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/10/08/1 - http://www.securityfocus.com/bid/94838 - https://security.gentoo.org/glsa/201701-71
CVE ID: CVE-2016-7560 State: PUBLISHED Published: 2016-10-05T16:00:00 Last Updated: 2024-08-06T02:04:54.763Z Vendors: n/a Products: n/a Problem Types: n/a Description: The rsyncd server in Fortinet FortiWLC 6.1-2-29 and earlier, 7.0-9-1, 7.0-10-0, 8.0-5-0, 8.1-2-0, and 8.2-4-0 has a hardcoded rsync account, which allows remote attackers to read or write to arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://fortiguard.com/advisory/FG-IR-16-029 - http://www.securityfocus.com/bid/93286
CVE ID: CVE-2016-7561 State: PUBLISHED Published: 2016-10-05T16:00:00 Last Updated: 2024-08-06T02:04:54.929Z Vendors: n/a Products: n/a Problem Types: n/a Description: Fortinet FortiWLC 6.1-2-29 and earlier, 7.0-9-1, 7.0-10-0, 8.0-5-0, 8.1-2-0, and 8.2-4-0 allow administrators to obtain sensitive user credentials by reading the pam.log file. Additional Analyst Notes: - CVE Program Container: References: - http://fortiguard.com/advisory/FG-IR-16-030 - http://www.securityfocus.com/bid/93282
CVE ID: CVE-2016-7562 State: PUBLISHED Published: 2016-12-23T05:00:00 Last Updated: 2024-08-06T02:04:54.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ff_draw_pc_font function in libavcodec/cga_data.c in FFmpeg before 3.1.4 allows remote attackers to cause a denial of service (buffer overflow) via a crafted AVI file. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/10/08/1 - https://security.gentoo.org/glsa/201701-71 - http://www.securityfocus.com/bid/94835
CVE ID: CVE-2016-7563 State: PUBLISHED Published: 2017-01-18T17:00:00 Last Updated: 2024-08-06T02:04:54.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: The chartorune function in Artifex Software MuJS allows attackers to cause a denial of service (out-of-bounds read) via a * (asterisk) at the end of the input. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/09/28/11 - https://bugs.ghostscript.com/show_bug.cgi?id=697136 - http://www.openwall.com/lists/oss-security/2016/09/21/5
CVE ID: CVE-2016-7564 State: PUBLISHED Published: 2017-01-18T17:00:00 Last Updated: 2024-08-06T02:04:54.865Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the Fp_toString function in jsfunction.c in Artifex Software MuJS allows attackers to cause a denial of service (crash) via crafted input. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.ghostscript.com/show_bug.cgi?id=697137 - http://www.openwall.com/lists/oss-security/2016/09/28/11 - http://www.openwall.com/lists/oss-security/2016/09/21/5
CVE ID: CVE-2016-7565 State: PUBLISHED Published: 2017-02-13T18:00:00 Last Updated: 2024-08-06T02:04:55.470Z Vendors: n/a Products: n/a Problem Types: n/a Description: install/index.php in Exponent CMS 2.3.9 allows remote attackers to execute arbitrary commands via shell metacharacters in the sc array parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/exponentcms/exponent-cms/releases/tag/v2.4.0 - https://github.com/exponentcms/exponent-cms/commit/4ae457ff1bf80e8b61286cd125ca794b25564e86 - https://exponentcms.lighthouseapp.com/projects/61783/changesets/4ae457ff1bf80e8b61286cd125ca794b25564e86 - http://www.openwall.com/lists/oss-security/2016/09/22/
jects/61783/changesets/4ae457ff1bf80e8b61286cd125ca794b25564e86 - http://www.openwall.com/lists/oss-security/2016/09/22/6
CVE ID: CVE-2016-7567 State: PUBLISHED Published: 2017-01-23T21:00:00 Last Updated: 2024-08-06T02:04:54.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the SLPFoldWhiteSpace function in common/slp_compare.c in OpenSLP 2.0 allows remote attackers to have unspecified impact via a crafted string. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/09/27/4 - http://www.securityfocus.com/bid/93186 - http://www.openwall.com/lists/oss-security/2016/09/28/1 - https://security.gentoo.org/glsa/201707-05 - https://www.exploit-db.com/exploits/45804/ - https://sourceforge.net/p/openslp/mercurial/ci/34fb3aa5e6b
glsa/201707-05 - https://www.exploit-db.com/exploits/45804/ - https://sourceforge.net/p/openslp/mercurial/ci/34fb3aa5e6b4997fa21cb614e480de36da5dbc9a/
CVE ID: CVE-2016-7568 State: PUBLISHED Published: 2016-09-28T20:00:00 Last Updated: 2024-08-06T02:04:55.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the gdImageWebpCtx function in gd_webp.c in the GD Graphics Library (aka libgd) through 2.2.3, as used in PHP through 7.0.11, allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted imagewebp and imagedestroy calls. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/php/php-src/commit/c18263e0e0769faee96a5d0ee04b750c442783c6 - http://www.debian.org/security/2016/dsa-3693 - https://security.gentoo
commit/c18263e0e0769faee96a5d0ee04b750c442783c6 - http://www.debian.org/security/2016/dsa-3693 - https://security.gentoo.org/glsa/201612-09 - https://bugs.php.net/bug.php?id=73003 - https://github.com/libgd/libgd/issues/308 - https://github.com/libgd/libgd/commit/40bec0f38f50e8510f5bb71a82f516d46facde03 - http://www.securityfocus.com/bid/93184
CVE ID: CVE-2016-7569 State: PUBLISHED Published: 2017-01-27T22:01:00 Last Updated: 2024-08-06T02:04:55.607Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in docker2aci before 0.13.0 allows remote attackers to write to arbitrary files via a .. (dot dot) in the embedded layer data in an image. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/appc/docker2aci/issues/201 - https://github.com/appc/docker2aci/releases/tag/v0.13.0 - http://www.openwall.com/lists/oss-security/2016/09/28/2 - http://www.openwall.com/lists/oss-security/2016/09/28/4 - http://www.securityfocus.com/bid/93194
CVE ID: CVE-2016-7570 State: PUBLISHED Published: 2016-10-03T18:00:00 Last Updated: 2024-08-06T02:04:55.431Z Vendors: n/a Products: n/a Problem Types: n/a Description: Drupal 8.x before 8.1.10 does not properly check for "Administer comments" permission, which allows remote authenticated users to set the visibility of comments for arbitrary nodes by leveraging rights to edit those nodes. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/SA-CORE-2016-004 - http://www.securityfocus.com/bid/93101 - http://www.securitytracker.com/id/1036886
CVE ID: CVE-2016-7571 State: PUBLISHED Published: 2016-10-03T18:00:00 Last Updated: 2024-08-06T02:04:55.572Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Drupal 8.x before 8.1.10 allows remote attackers to inject arbitrary web script or HTML via vectors involving an HTTP exception. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/SA-CORE-2016-004 - http://www.securityfocus.com/bid/93101 - http://www.securitytracker.com/id/1036886
CVE ID: CVE-2016-7572 State: PUBLISHED Published: 2016-10-03T18:00:00 Last Updated: 2024-08-06T02:04:55.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: The system.temporary route in Drupal 8.x before 8.1.10 does not properly check for "Export configuration" permission, which allows remote authenticated users to bypass intended access restrictions and read a full config export via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/SA-CORE-2016-004 - http://www.securityfocus.com/bid/93101 - http://www.securitytracker.com/id/1036886
CVE ID: CVE-2016-7575 State: REJECTED Published: 2016-02-26T02:00:00Z Last Updated: 2024-09-17T03:22:52.159Z Description: No description available.
CVE ID: CVE-2016-7576 State: PUBLISHED Published: 2019-01-11T18:00:00 Last Updated: 2024-08-06T02:04:55.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: In iOS before 9.3.3, a memory corruption issue existed in the kernel. This issue was addressed through improved memory handling. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT206902
CVE ID: CVE-2016-7577 State: PUBLISHED Published: 2017-02-20T08:35:00 Last Updated: 2024-08-06T02:04:55.576Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10.12.1 is affected. The issue involves the "FaceTime" component, which allows remote attackers to trigger memory corruption and obtain audio data from a call that appeared to have ended. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT207271 - http://www.securityfocus.com/bid/94429 - https://support.apple.com/HT207275
CVE ID: CVE-2016-7578 State: PUBLISHED Published: 2017-02-20T08:35:00 Last Updated: 2024-08-06T02:04:55.646Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 10.1 is affected. Safari before 10.0.1 is affected. iCloud before 6.0.1 is affected. iTunes before 12.5.2 is affected. tvOS before 10.0.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT207271 - http://www.securityfocus.c
al Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT207271 - http://www.securityfocus.com/bid/93949 - https://support.apple.com/HT207273 - https://support.apple.com/HT207270 - https://support.apple.com/HT207274 - http://www.securitytracker.com/id/1037139 - https://support.apple.com/HT207272
CVE ID: CVE-2016-7579 State: PUBLISHED Published: 2017-02-20T08:35:00 Last Updated: 2024-08-06T02:04:56.020Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10.12.1 is affected. tvOS before 10.0.1 is affected. The issue involves the "CFNetwork Proxies" component, which allows man-in-the-middle attackers to spoof a proxy password authentication requirement and obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT207271 - http://www.securitytracker.com/id/1037086 - https://support.apple.com/HT207270 - https://support.apple
le.com/HT207271 - http://www.securitytracker.com/id/1037086 - https://support.apple.com/HT207270 - https://support.apple.com/HT207275 - http://www.securityfocus.com/bid/93856
CVE ID: CVE-2016-7580 State: PUBLISHED Published: 2017-02-20T08:35:00 Last Updated: 2024-08-06T02:04:55.614Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. macOS before 10.12 is affected. The issue involves the "Mail" component, which allows remote web servers to cause a denial of service via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94434 - https://support.apple.com/HT207170
CVE ID: CVE-2016-7581 State: PUBLISHED Published: 2017-02-20T08:35:00 Last Updated: 2024-08-06T02:04:55.586Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 10.1 is affected. The issue involves the "Safari" component, which allows remote web servers to cause a denial of service via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT207271 - http://www.securityfocus.com/bid/94432
CVE ID: CVE-2016-7582 State: PUBLISHED Published: 2017-02-20T08:35:00 Last Updated: 2024-08-06T02:04:55.260Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. macOS before 10.12 is affected. The issue involves the "Intel Graphics Driver" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94435 - https://support.apple.com/HT207170
CVE ID: CVE-2016-7583 State: PUBLISHED Published: 2017-02-20T08:35:00 Last Updated: 2024-08-06T02:04:55.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iCloud before 6.0.1 is affected. The issue involves the setup subsystem in the "iCloud" component. It allows local users to gain privileges via a crafted dynamic library in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT207273 - http://www.securityfocus.com/bid/94570