deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-11997
Published: 2020-01-16
Description: A potential security vulnerability has been identified in HPE enhanced Internet Usage Manager (eIUM) versions 8.3 and 9.0. The vulnerability could be used for unauthorized access to information via cross site scripting. HPE has made the following software updates to resolve the vulnerability in eIUM. The eIUM 8.3 FP01 customers are advised to install eIUM83FP01Patch_QXCR[PII_REDACTED].20[PII_REDACTED] patch. The eIUM 9.0 customers are advised to upgrade to eIUM 9.0 FP02 PI5 or later versions. For other versions, please, contact the product support.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03975en_us; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03975en_us
CVE: CVE-2019-11998
Published: 2020-01-16
Description: HPE Superdome Flex Server is vulnerable to multiple remote vulnerabilities via improper input validation of administrator commands. This vulnerability could allow an Administrator to bypass security restrictions and access multiple remote vulnerabilities including information disclosure, or denial of service. HPE has provided firmware updates that address the above vulnerabilities for the HPE Superdome Flex Server starting with firmware version v3.20.186 (not available online) and v3.20.206 (available online). Apply v3.20.206 (4 December 2019) or a newer version to resolve this issue. Please visit HPE Support Center https://support.hpe.com/hpesc/public/home to obtain the updated firmware for your product.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03978en_us; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03978en_us
CVE: CVE-2019-9500
Published: 2020-01-16
Description: The Broadcom brcmfmac WiFi driver prior to commit 1b5e2423164b3670e8bc9174e4762d297990deff is vulnerable to a heap buffer overflow. If the Wake-up on Wireless LAN functionality is configured, a malicious event frame can be constructed to trigger an heap buffer overflow in the brcmf_wowl_nd_results function. This vulnerability can be exploited with compromised chipsets to compromise the host, or when used in combination with CVE-2019-9503, can be used remotely. In the worst case scenario, by sending specially-crafted WiFi packets, a remote, unauthenticated attacker may be able to execute arbitrary code on a vulnerable system. More typically, this vulnerability will result in denial-of-service conditions.
CVSS Score: 7.9 (HIGH)
CWE: CWE-122, CWE-787
References: https://blog.quarkslab.com/reverse-engineering-broadcom-wireless-chipsets.html; https://git.kernel.org/linus/1b5e2423164b3670e8bc9174e4762d297990deff; https://kb.cert.org/vuls/id/166939/
CVE: CVE-2019-9503
Published: 2020-01-16
Description: The Broadcom brcmfmac WiFi driver prior to commit a4176ec356c73a46c07c181c6d04039fafa34a9f is vulnerable to a frame validation bypass. If the brcmfmac driver receives a firmware event frame from a remote source, the is_wlc_event_frame function will cause this frame to be discarded and unprocessed. If the driver receives the firmware event frame from the host, the appropriate handler is called. This frame validation can be bypassed if the bus used is USB (for instance by a wifi dongle). This can allow firmware event frames from a remote source to be processed. In the worst case scenario, by sending specially-crafted WiFi packets, a remote, unauthenticated attacker may be able to execute arbitrary code on a vulnerable system. More typically, this vulnerability will result in denial-of-service conditions.
CVSS Score: 7.9 (HIGH)
CWE: CWE-20, CWE-20
References: https://blog.quarkslab.com/reverse-engineering-broadcom-wireless-chipsets.html; https://bugzilla.redhat.com/show_bug.cgi?id=1701842; https://bugzilla.suse.com/show_bug.cgi?id=1132828
CVE: CVE-2020-7047
Published: 2020-01-16
Description: The WordPress plugin, WP Database Reset through 3.1, contains a flaw that gave any authenticated user, with minimal permissions, the ability (with a simple wp-admin/admin.php?db-reset-tables[]=users request) to escalate their privileges to administrator while dropping all other users from the table.
CVSS Score: 8.8 (HIGH)
CWE: CWE-269
References: https://wordpress.org/plugins/wordpress-database-reset/#developers; https://wpvulndb.com/vulnerabilities/10028; https://www.wordfence.com/blog/2020/01/easily-exploitable-vulnerabilities-patched-in-wp-database-reset-plugin/
CVE: CVE-2020-7048
Published: 2020-01-16
Description: The WordPress plugin, WP Database Reset through 3.1, contains a flaw that allowed any unauthenticated user to reset any table in the database to the initial WordPress set-up state (deleting all site content stored in that table), as demonstrated by a wp-admin/admin-post.php?db-reset-tables[]=comments URI.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-306
References: https://wordpress.org/plugins/wordpress-database-reset/#developers; https://wpvulndb.com/vulnerabilities/10027; https://www.wordfence.com/blog/2020/01/easily-exploitable-vulnerabilities-patched-in-wp-database-reset-plugin/
CVE: CVE-2019-5126
Published: 2020-01-16
Description: An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit PDF Reader, version 9.7.0.29435. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious site can also trigger the vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://talosintelligence.com/vulnerability_reports/TALOS-2019-0915; https://talosintelligence.com/vulnerability_reports/TALOS-2019-0915
CVE: CVE-2019-5130
Published: 2020-01-16
Description: An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.7.0.29435. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious site can also trigger the vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://talosintelligence.com/vulnerability_reports/TALOS-2019-0935; https://talosintelligence.com/vulnerability_reports/TALOS-2019-0935
CVE: CVE-2019-5131
Published: 2020-01-16
Description: An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader, version 9.7.0.29435. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious site can also trigger the vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://talosintelligence.com/vulnerability_reports/TALOS-2019-0920; https://talosintelligence.com/vulnerability_reports/TALOS-2019-0920
CVE: CVE-2019-5145
Published: 2020-01-16
Description: An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit PDF Reader, version 9.7.0.29435. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious site can also trigger the vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://talosintelligence.com/vulnerability_reports/TALOS-2019-0934; https://talosintelligence.com/vulnerability_reports/TALOS-2019-0934
CVE: CVE-2019-3997
Published: 2020-01-16
Description: Authentication bypass using an alternate path or channel in SimpliSafe SS3 firmware 1.0-1.3 allows a local, unauthenticated attacker to pair a rogue keypad to an armed system.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-287
References: https://www.tenable.com/security/research/tra-2020-03; https://www.tenable.com/security/research/tra-2020-03
CVE: CVE-2020-7039
Published: 2020-01-16
Description: tcp_emu in tcp_subr.c in libslirp 4.1.0, as used in QEMU 4.2.0, mismanages memory, as demonstrated by IRC DCC commands in EMU_IRC. This can cause a heap-based buffer overflow or other out-of-bounds access which can lead to a DoS or potential execute arbitrary code.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00007.html; http://www.openwall.com/lists/oss-security/2020/01/16/2; https://access.redhat.com/errata/RHSA-2020:0348
CVE: CVE-2019-15742
Published: 2020-01-17
Description: A local privilege-escalation vulnerability exists in the Poly Plantronics Hub before 3.14 for Windows client application. A local attacker can exploit this issue to gain elevated privileges.
CVSS Score: 7.8 (HIGH)
References: http://packetstormsecurity.com/files/155952/Plantronics-Hub-SpokesUpdateService-Privilege-Escalation.html; http://packetstormsecurity.com/files/155952/Plantronics-Hub-SpokesUpdateService-Privilege-Escalation.html
CVE: CVE-2020-5398
Published: 2020-01-17
Description: In Spring Framework, versions 5.2.x prior to 5.2.3, versions 5.1.x prior to 5.1.13, and versions 5.0.x prior to 5.0.16, an application is vulnerable to a reflected file download (RFD) attack when it sets a "Content-Disposition" header in the response where the filename attribute is derived from user supplied input.
CVSS Score: 7.5 (HIGH)
CWE: CWE-79, CWE-494
References: https://lists.apache.org/thread.html/r028977b9b9d44a89823639aa3296fb0f0cfdd76b4450df89d3c4fbbf%40%3Cissues.karaf.apache.org%3E; https://lists.apache.org/thread.html/r0f2d0ae1bad2edb3d4a863d77f3097b5e88cfbdae7b809f4f42d6aad%40%3Cissues.karaf.apache.org%3E; https://lists.apache.org/thread.html/r0f3530f7cb510036e497532ffc4e0bd0b882940448cf4e233994b08b%40%3Ccommits.karaf.apache.org%3E
CVE: CVE-2019-17361
Published: 2020-01-17
Description: In SaltStack Salt through 2019.2.0, the salt-api NET API with the ssh client enabled is vulnerable to command injection. This allows an unauthenticated attacker with network access to the API endpoint to execute arbitrary code on the salt-api host.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00026.html; https://docs.saltstack.com/en/latest/topics/releases/2019.2.3.html#security-fix; https://github.com/saltstack/salt/commits/master
CVE: CVE-2019-19142
Published: 2020-01-17
Description: Intelbras WRN240 devices do not require authentication to replace the firmware via a POST request to the incoming/Firmware.cfg URI.
CVSS Score: 7.5 (HIGH)
CWE: CWE-306
References: http://packetstormsecurity.com/files/156589/Intelbras-Wireless-N-150Mbps-WRN240-Authentication-Bypass.html; https://fireshellsecurity.team/hack-n-routers/; http://packetstormsecurity.com/files/156589/Intelbras-Wireless-N-150Mbps-WRN240-Authentication-Bypass.html
CVE: CVE-2019-19801
Published: 2020-01-17
Description: In Gallagher Command Centre Server versions of v8.10 prior to v8.10.1134(MR4), v8.00 prior to v8.00.1161(MR5), v7.90 prior to v7.90.991(MR5), v7.80 prior to v7.80.960(MR2) and v7.70 or earlier, an unprivileged but authenticated user is able to perform a backup of the Command Centre databases.
CVSS Score: 5.5 (MEDIUM)
References: https://security.gallagher.com/cve-2019-19801; https://security.gallagher.com/cve-2019-19801
CVE: CVE-2019-19802
Published: 2020-01-17
Description: In Gallagher Command Centre Server v8.10 prior to v8.10.1134(MR4), v8.00 prior to v8.00.1161(MR5), v7.90 prior to v7.90.991(MR5), v7.80 prior to v7.80.960(MR2) and v7.70 or earlier, an authenticated user connecting to OPCUA can view all data that would be replicated in a multi-server setup without privilege checks being applied.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862
References: https://security.gallagher.com/cve-2019-19802; https://security.gallagher.com/cve-2019-19802
CVE: CVE-2019-3682
Published: 2020-01-17
Description: The docker-kubic package in SUSE CaaS Platform 3.0 before 17.09.1_ce-7.6.1 provided access to an insecure API locally on the Kubernetes master node.
CVSS Score: 8.4 (HIGH)
CWE: CWE-668, CWE-668
References: https://bugzilla.suse.com/show_bug.cgi?id=1121148; https://bugzilla.suse.com/show_bug.cgi?id=1121148
CVE: CVE-2019-3683
Published: 2020-01-17
Description: The keystone-json-assignment package in SUSE Openstack Cloud 8 before commit d7888c[PII_REDACTED]0250c00cc0ef4bb1af662f9f every user listed in the /etc/keystone/user-project-map.json was assigned full "member" role access to every project. This allowed these users to access, modify, create and delete arbitrary resources, contrary to expectations.
CVSS Score: 8.8 (HIGH)
CWE: CWE-732, CWE-732
References: https://bugzilla.suse.com/show_bug.cgi?id=1124864; https://www.suse.com/security/cve/CVE-2019-3683/; https://bugzilla.suse.com/show_bug.cgi?id=1124864
CVE: CVE-2019-3686
Published: 2020-01-17
Description: openQA before commit c172e8883d8f32fced5e02f9b6faaacc913df27b was vulnerable to XSS in the distri and version parameter. This was reported through the bug bounty program of Offensive Security
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://bugzilla.suse.com/show_bug.cgi?id=1142849; https://bugzilla.suse.com/show_bug.cgi?id=1142849
CVE: CVE-2019-20003
Published: 2020-01-17
Description: Feldtech easescreen Crystal 9.0 Web-Services 9.0.1.16265 allows Stored XSS via the Debug-Log and Display-Log components. This could be exploited when an attacker sends an crafted string for FTP authentication.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://easescreen.com/en/; https://github.com/0xedh/someshit/blob/master/CVE-2019-20003.md; https://easescreen.com/en/
CVE: CVE-2019-15854
Published: 2020-01-17
Description: An issue was discovered in Maarch RM before 2.5. A privilege escalation vulnerability allows an authenticated user with lowest privileges to give herself highest administration privileges via a crafted PUT request to an unauthorized resource.
CVSS Score: 8.8 (HIGH)
References: https://labs.maarch.org/maarch/maarchRM/blob/master/CHANGELOG.md; https://labs.maarch.org/maarch/maarchRM/blob/master/CHANGELOG.md
CVE: CVE-2019-15855
Published: 2020-01-17
Description: An issue was discovered in Maarch RM before 2.5. A path traversal vulnerability allows an unauthenticated remote attacker to overwrite any files with a crafted POST request if the default installation procedure was followed. This results in a permanent Denial of Service.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-22
References: https://labs.maarch.org/maarch/maarchRM/blob/master/CHANGELOG.md; https://labs.maarch.org/maarch/maarchRM/blob/master/CHANGELOG.md
CVE: CVE-2019-10956
Published: 2020-01-17
Description: Geutebruck IP Cameras G-Code(EEC-2xxx), G-Cam(EBC-21xx/EFD-22xx/ETHC-22xx/EWPC-22xx): All versions 1.12.0.25 and prior may allow a remote authenticated user, using a specially crafted URL command, to execute commands as root.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78, CWE-78
References: https://www.us-cert.gov/ics/advisories/ICSA-19-155-03; https://www.us-cert.gov/ics/advisories/ICSA-19-155-03
CVE: CVE-2019-10957
Published: 2020-01-17
Description: Geutebruck IP Cameras G-Code(EEC-2xxx), G-Cam(EBC-21xx/EFD-22xx/ETHC-22xx/EWPC-22xx): All versions 1.12.0.25 and prior may allow a remote authenticated attacker with access to event configuration to store malicious code on the server, which could later be triggered by a legitimate user resulting in code execution within the user’s browser.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.us-cert.gov/ics/advisories/ICSA-19-155-03; https://www.us-cert.gov/ics/advisories/ICSA-19-155-03
CVE: CVE-2019-10958
Published: 2020-01-17
Description: Geutebruck IP Cameras G-Code(EEC-2xxx), G-Cam(EBC-21xx/EFD-22xx/ETHC-22xx/EWPC-22xx): All versions 1.12.0.25 and prior may allow a remote authenticated attacker with access to network configuration to supply system commands to the server, leading to remote code execution as root.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78, CWE-78
References: https://www.us-cert.gov/ics/advisories/ICSA-19-155-03; https://www.us-cert.gov/ics/advisories/ICSA-19-155-03
CVE: CVE-2019-14596
Published: 2020-01-17
Description: Improper access control in the installer for Intel(R) Chipset Device Software INF Utility before version 10.1.18 may allow an authenticated user to potentially enable denial of service via local access.
CVSS Score: 5.5 (MEDIUM)
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00306.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00306.html
CVE: CVE-2019-14600
Published: 2020-01-17
Description: Uncontrolled search path element in the installer for Intel(R) SNMP Subagent Stand-Alone for Windows* may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00300.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00300.html
CVE: CVE-2019-14601
Published: 2020-01-17
Description: Improper permissions in the installer for Intel(R) RWC 3 for Windows before version 7.010.009.000 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-276
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00308.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00308.html
CVE: CVE-2019-14613
Published: 2020-01-17
Description: Improper access control in driver for Intel(R) VTune(TM) Amplifier for Windows* before update 8 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00325.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00325.html
CVE: CVE-2019-14615
Published: 2020-01-17
Description: Insufficient control flow in certain data structures for some Intel(R) Processors with Intel(R) Processor Graphics may allow an unauthenticated user to potentially enable information disclosure via local access.
CVSS Score: 5.5 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html; http://packetstormsecurity.com/files/156185/Kernel-Live-Patch-Security-Notice-LSN-0062-1.html; http://packetstormsecurity.com/files/156455/Kernel-Live-Patch-Security-Notice-LSN-0063-1.html
CVE: CVE-2019-14629
Published: 2020-01-17
Description: Improper permissions in Intel(R) DAAL before version 2020 Gold may allow an authenticated user to potentially enable information disclosure via local access.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-732
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00332.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00332.html
CVE: CVE-2019-17125
Published: 2020-01-17
Description: A Reflected Client Side Template Injection (CSTI) with Angular was discovered in the SolarWinds Orion Platform 2019.2 HF1 in many forms. An attacker can inject an Angular expression and escape the Angular sandbox to achieve stored XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://support.solarwinds.com/SuccessCenter/s/article/Orion-Platform-2019-4-Hotfix-3?ui-force-components-controllers-recordGlobalValueProvider.RecordGvp.getRecord=1&r=116&ui-knowledge-components-aura-actions.KnowledgeArticleVersionCreateDraftFromOnlineAction.createDraftFromOnlineArticle=1; https://support.solarwinds.com/SuccessCenter/s/orion-platform; https://support.solarwinds.com/SuccessCenter/s/article/Orion-Platform-2019-4-Hotfix-3?ui-force-components-controllers-recordGlobalValueProvider.RecordGvp.getRecord=1&r=116&ui-knowledge-components-aura-actions.KnowledgeArticleVersionCreateDraftFromOnlineAction.createDraftFromOnlineArticle=1
CVE: CVE-2019-17127
Published: 2020-01-17
Description: A Stored Client Side Template Injection (CSTI) with Angular was discovered in the SolarWinds Orion Platform 2019.2 HF1 in many application forms. An attacker can inject an Angular expression and escape the Angular sandbox to achieve stored XSS. This can lead to privilege escalation.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://support.solarwinds.com/SuccessCenter/s/article/Orion-Platform-2019-4-Hotfix-3?ui-force-components-controllers-recordGlobalValueProvider.RecordGvp.getRecord=1&r=116&ui-knowledge-components-aura-actions.KnowledgeArticleVersionCreateDraftFromOnlineAction.createDraftFromOnlineArticle=1; https://support.solarwinds.com/SuccessCenter/s/orion-platform; https://support.solarwinds.com/SuccessCenter/s/article/Orion-Platform-2019-4-Hotfix-3?ui-force-components-controllers-recordGlobalValueProvider.RecordGvp.getRecord=1&r=116&ui-knowledge-components-aura-actions.KnowledgeArticleVersionCreateDraftFromOnlineAction.createDraftFromOnlineArticle=1
CVE: CVE-2020-3940
Published: 2020-01-17
Description: VMware Workspace ONE SDK and dependent mobile application updates address sensitive information disclosure vulnerability.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-295
References: https://www.vmware.com/security/advisories/VMSA-2020-0001.html; https://www.vmware.com/security/advisories/VMSA-2020-0001.html
CVE: CVE-2020-6862
Published: 2020-01-17
Description: V6.0.10P2T2 and V6.0.10P2T5 of F6x2W product are impacted by Information leak vulnerability. Unauthorized users could log in directly to obtain page information without entering a verification code.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-669
References: http://packetstormsecurity.com/files/159135/ZTE-F602W-CAPTCHA-Bypass.html; http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1012162; http://packetstormsecurity.com/files/159135/ZTE-F602W-CAPTCHA-Bypass.html
CVE: CVE-2007-6070
Published: 2020-01-17
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2008-1382. Reason: This candidate is a reservation duplicate of CVE-2008-1382. Notes: All CVE users should reference CVE-2008-1382 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2019-17634
Published: 2020-01-17
Description: Eclipse Memory Analyzer version 1.9.1 and earlier is subject to a cross site scripting (XSS) vulnerability when generating an HTML report from a malicious heap dump. The user must chose todownload, open the malicious heap dump and generate an HTML report for the problem to occur. The heap dump could be specially crafted, or could come from a crafted application or from an application processing malicious data. The vulnerability is present whena report is generated and opened from the Memory Analyzer graphical user interface, or when a report generated in batch mode is then opened in Memory Analyzer or by a web browser. The vulnerability could possibly allow code execution on the local system whenthe report is opened in Memory Analyzer.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-79, CWE-79
References: https://bugs.eclipse.org/bugs/show_bug.cgi?id=552542; https://bugs.eclipse.org/bugs/show_bug.cgi?id=552542