deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-5956
Published: 2017-03-20
Description: The vrend_draw_vbo function in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (out-of-bounds array access and QEMU process crash) via vectors involving vertext_buffer_index.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://www.openwall.com/lists/oss-security/2017/02/13/2; http://www.securityfocus.com/bid/96187; https://cgit.freedesktop.org/virglrenderer/commit/?id=a5ac49940c40ae415eac0cf912eac7070b4ba95d
CVE: CVE-2017-5987
Published: 2017-03-20
Description: The sdhci_sdma_transfer_multi_blocks function in hw/sd/sdhci.c in QEMU (aka Quick Emulator) allows local OS guest privileged users to cause a denial of service (infinite loop and QEMU process crash) via vectors involving the transfer mode register during multi block transfer.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-835
References: http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=6e86d90352adf6cb[PII_REDACTED]0295cf23c4286e; http://www.openwall.com/lists/oss-security/2017/02/14/8; http://www.securityfocus.com/bid/96263
CVE: CVE-2017-6058
Published: 2017-03-20
Description: Buffer overflow in NetRxPkt::ehdr_buf in hw/net/net_rx_pkt.c in QEMU (aka Quick Emulator), when the VLANSTRIP feature is enabled on the vmxnet3 device, allows remote attackers to cause a denial of service (out-of-bounds access and QEMU process crash) via vectors related to VLAN stripping.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=df8bf7a7fe75eb5d5caffa55f5cd4292b757aea6; http://www.openwall.com/lists/oss-security/2017/02/17/2; http://www.securityfocus.com/bid/96277
CVE: CVE-2017-6178
Published: 2017-03-20
Description: The IofCallDriver function in USBPcap 1.1.0.0 allows local users to gain privileges via a crafted 0x00090028 IOCTL call, which triggers a NULL pointer dereference.
CVSS Score: 7.8 (HIGH)
CWE: CWE-476
References: http://packetstormsecurity.com/files/141526/USBPcap-1.1.0.0-Privilege-Escalation.html; http://www.securityfocus.com/bid/97026; https://www.exploit-db.com/exploits/41542/
CVE: CVE-2017-6318
Published: 2017-03-20
Description: saned in sane-backends 1.0.25 allows remote attackers to obtain sensitive memory information via a crafted SANE_NET_CONTROL_OPTION packet.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://lists.alioth.debian.org/pipermail/sane-devel/2017-February/035054.html; http://lists.alioth.debian.org/pipermail/sane-devel/2017-February/035059.html; http://lists.opensuse.org/opensuse-updates/2017-03/msg00016.html
CVE: CVE-2017-6356
Published: 2017-03-20
Description: Palo Alto Networks Terminal Services (aka TS) Agent 6.0, 7.0, and 8.0 before 8.0.1 uses weak permissions for unspecified resources, which allows attackers to obtain sensitive session information via unknown vectors.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-732
References: http://www.securityfocus.com/bid/96925; https://security.paloaltonetworks.com/CVE-2017-6356; http://www.securityfocus.com/bid/96925
CVE: CVE-2017-6550
Published: 2017-03-20
Description: Multiple SQL injection vulnerabilities in Kinsey Infor-Lawson (formerly ESBUS) allow remote attackers to execute arbitrary SQL commands via the (1) TABLE parameter to esbus/servlet/GetSQLData or (2) QUERY parameter to KK_LS9ReportingPortal/GetData.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://packetstormsecurity.com/files/141575/Kinseys-Infor-Lawson-SQL-Injection.html; http://seclists.org/fulldisclosure/2017/Mar/31; http://www.securityfocus.com/bid/96821
CVE: CVE-2017-6803
Published: 2017-03-20
Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the web interface in the Scheduler in SolarWinds (formerly Serv-U) FTP Voyager 16.2.0 allow remote attackers to hijack the authentication of users for requests that (1) change the admin password, (2) terminate the scheduler, or (3) possibly execute arbitrary commands via crafted requests to Admin/XML/Result.xml.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://hyp3rlinx.altervista.org/advisories/FTP-VOYAGER-SCHEDULER-CSRF-REMOTE-CMD-EXECUTION.txt; http://packetstormsecurity.com/files/141567/FTP-Voyager-Scheduler-16.2.0-CSRF-Denial-Of-Service.html; http://www.securityfocus.com/bid/96814
CVE: CVE-2017-6805
Published: 2017-03-20
Description: Directory traversal vulnerability in the TFTP server in MobaXterm Personal Edition 9.4 allows remote attackers to read arbitrary files via a .. (dot dot) in a GET command.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22
References: http://hyp3rlinx.altervista.org/advisories/MOBAXTERM-TFTP-PATH-TRAVERSAL-REMOTE-FILE-ACCESS.txt; http://packetstormsecurity.com/files/141582/MobaXterm-Personal-Edition-9.4-Path-Traversal.html; http://seclists.org/fulldisclosure/2017/Mar/34
CVE: CVE-2017-6829
Published: 2017-03-20
Description: The decodeSample function in IMA.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (crash) via a crafted file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://www.debian.org/security/2017/dsa-3814; http://www.openwall.com/lists/oss-security/2017/03/13/1; http://www.securityfocus.com/bid/97189
CVE: CVE-2017-6830
Published: 2017-03-20
Description: Heap-based buffer overflow in the alaw2linear_buf function in G711.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (crash) via a crafted file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: http://www.debian.org/security/2017/dsa-3814; http://www.openwall.com/lists/oss-security/2017/03/13/2; https://blogs.gentoo.org/ago/2017/02/20/audiofile-heap-based-buffer-overflow-in-alaw2linear_buf-g711-cpp/
CVE: CVE-2017-6831
Published: 2017-03-20
Description: Heap-based buffer overflow in the decodeBlockWAVE function in IMA.cpp in Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0 and 0.2.7 allows remote attackers to cause a denial of service (crash) via a crafted file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: http://www.debian.org/security/2017/dsa-3814; http://www.openwall.com/lists/oss-security/2017/03/13/3; http://www.securityfocus.com/bid/97588
CVE: CVE-2017-6832
Published: 2017-03-20
Description: Heap-based buffer overflow in the decodeBlock in MSADPCM.cpp in Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0, 0.2.7 allows remote attackers to cause a denial of service (crash) via a crafted file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: http://www.debian.org/security/2017/dsa-3814; http://www.openwall.com/lists/oss-security/2017/03/13/4; http://www.securityfocus.com/bid/97589
CVE: CVE-2017-6833
Published: 2017-03-20
Description: The runPull function in libaudiofile/modules/BlockCodec.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (divide-by-zero error and crash) via a crafted file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-369
References: http://www.debian.org/security/2017/dsa-3814; http://www.openwall.com/lists/oss-security/2017/03/13/5; https://blogs.gentoo.org/ago/2017/02/20/audiofile-divide-by-zero-in-blockcodecrunpull-blockcodec-cpp/
CVE: CVE-2017-6834
Published: 2017-03-20
Description: Heap-based buffer overflow in the ulaw2linear_buf function in G711.cpp in Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0, 0.2.7 allows remote attackers to cause a denial of service (crash) via a crafted file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: http://www.debian.org/security/2017/dsa-3814; http://www.openwall.com/lists/oss-security/2017/03/13/6; https://blogs.gentoo.org/ago/2017/02/20/audiofile-heap-based-buffer-overflow-in-ulaw2linear_buf-g711-cpp/
CVE: CVE-2017-6835
Published: 2017-03-20
Description: The reset1 function in libaudiofile/modules/BlockCodec.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (divide-by-zero error and crash) via a crafted file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-369
References: http://www.debian.org/security/2017/dsa-3814; http://www.openwall.com/lists/oss-security/2017/03/13/7; https://blogs.gentoo.org/ago/2017/02/20/audiofile-divide-by-zero-in-blockcodecreset1-blockcodec-cpp/
CVE: CVE-2017-6836
Published: 2017-03-20
Description: Heap-based buffer overflow in the Expand3To4Module::run function in libaudiofile/modules/SimpleModule.h in Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0 allows remote attackers to cause a denial of service (crash) via a crafted file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: http://www.debian.org/security/2017/dsa-3814; http://www.openwall.com/lists/oss-security/2017/03/13/8; https://blogs.gentoo.org/ago/2017/02/20/audiofile-heap-based-buffer-overflow-in-expand3to4modulerun-simplemodule-h/
CVE: CVE-2017-6837
Published: 2017-03-20
Description: WAVE.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (crash) via vectors related to a large number of coefficients.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: http://www.debian.org/security/2017/dsa-3814; http://www.openwall.com/lists/oss-security/2017/03/13/9; http://www.securityfocus.com/bid/97314
CVE: CVE-2017-6838
Published: 2017-03-20
Description: Integer overflow in sfcommands/sfconvert.c in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (crash) via a crafted file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-190
References: http://www.debian.org/security/2017/dsa-3814; http://www.openwall.com/lists/oss-security/2017/03/13/9; https://blogs.gentoo.org/ago/2017/02/20/audiofile-multiple-ubsan-crashes/
CVE: CVE-2017-6839
Published: 2017-03-20
Description: Integer overflow in modules/MSADPCM.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (crash) via a crafted file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-190
References: http://www.debian.org/security/2017/dsa-3814; http://www.openwall.com/lists/oss-security/2017/03/13/9; https://blogs.gentoo.org/ago/2017/02/20/audiofile-multiple-ubsan-crashes/
CVE: CVE-2016-6816
Published: 2017-03-20
Description: The code in Apache Tomcat 9.0.0.M1 to 9.0.0.M11, 8.5.0 to 8.5.6, 8.0.0.RC1 to 8.0.38, 7.0.0 to 7.0.72, and 6.0.0 to 6.0.47 that parsed the HTTP request line permitted invalid characters. This could be exploited, in conjunction with a proxy that also permitted the invalid characters but with a different interpretation, to inject data into the HTTP response. By manipulating the HTTP response the attacker could poison a web-cache, perform an XSS attack and/or obtain sensitive information from requests other then their own.
CVSS Score: 7.1 (HIGH)
CWE: CWE-20
References: http://rhn.redhat.com/errata/RHSA-2017-0244.html; http://rhn.redhat.com/errata/RHSA-2017-0245.html; http://rhn.redhat.com/errata/RHSA-2017-0246.html
CVE: CVE-2016-4926
Published: 2017-03-20
Description: Insufficient authentication vulnerability in Junos Space before 15.2R2 allows remote network based users with access to Junos Space web interface to perform certain administrative tasks without authentication.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: http://www.securityfocus.com/bid/93540; https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10760; http://www.securityfocus.com/bid/93540
CVE: CVE-2016-4927
Published: 2017-03-20
Description: Insufficient validation of SSH keys in Junos Space before 15.2R2 allows man-in-the-middle (MITM) type of attacks while a Space device is communicating with managed devices.
CVSS Score: 8.1 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/93540; https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10760; http://www.securityfocus.com/bid/93540
CVE: CVE-2016-4928
Published: 2017-03-20
Description: Cross site request forgery vulnerability in Junos Space before 15.2R2 allows remote attackers to perform certain administrative actions on Junos Space.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://www.securityfocus.com/bid/93540; https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10760; http://www.securityfocus.com/bid/93540
CVE: CVE-2016-4929
Published: 2017-03-20
Description: Command injection vulnerability in Junos Space before 15.2R2 allows attackers to execute arbitrary code as a root user.
CVSS Score: 8.8 (HIGH)
CWE: CWE-77
References: http://www.securityfocus.com/bid/93540; https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10760; http://www.securityfocus.com/bid/93540
CVE: CVE-2016-4930
Published: 2017-03-20
Description: Cross-site scripting (XSS) vulnerability in Junos Space before 15.2R2 allows remote attackers to steal sensitive information or perform certain administrative actions.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/93540; https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10760; http://www.securityfocus.com/bid/93540
CVE: CVE-2016-4931
Published: 2017-03-20
Description: XML entity injection in Junos Space before 15.2R2 allows attackers to cause a denial of service.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-611
References: http://www.securityfocus.com/bid/93540; https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10760; http://www.securityfocus.com/bid/93540
CVE: CVE-2014-9939
Published: 2017-03-21
Description: ihex.c in GNU Binutils before 2.26 contains a stack buffer overflow when printing bad bytes in Intel Hex objects.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.openwall.com/lists/oss-security/2015/07/31/6; https://sourceware.org/bugzilla/show_bug.cgi?id=18750; https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=7e27a9d5f22f9f7ead11738b1546d0b5c737266b
CVE: CVE-2017-7200
Published: 2017-03-21
Description: An SSRF issue was discovered in OpenStack Glance before Newton. The 'copy_from' feature in the Image Service API v1 allowed an attacker to perform masked network port scans. With v1, it is possible to create images with a URL such as 'http://localhost:22'. This could then allow an attacker to enumerate internal network details while appearing masked, since the scan would appear to originate from the Glance Image service.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-918
References: http://www.securityfocus.com/bid/96988; https://bugs.launchpad.net/ossn/+bug/1153614; https://bugs.launchpad.net/ossn/+bug/1606495
CVE: CVE-2017-7202
Published: 2017-03-21
Description: Multiple Cross-Site Scripting (XSS) were discovered in SLiMS 7 Cendana before 2017-03-16. The vulnerabilities exist due to insufficient filtration of user-supplied data (id) passed to the 'slims7_cendana-master/template/default/detail_template.php' and 'slims7_cendana-master/template/default-rtl/detail_template.php' URLs. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/97004; https://github.com/slims/slims7_cendana/issues/50; http://www.securityfocus.com/bid/97004
CVE: CVE-2017-7203
Published: 2017-03-21
Description: A Cross-Site Scripting (XSS) was discovered in ZoneMinder before 1.30.2. The vulnerability exists due to insufficient filtration of user-supplied data (postLoginQuery) passed to the "ZoneMinder-master/web/skins/classic/views/js/postlogin.js.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/97001; https://github.com/ZoneMinder/ZoneMinder/issues/1797; http://www.securityfocus.com/bid/97001
CVE: CVE-2017-7204
Published: 2017-03-21
Description: A Cross-Site Scripting (XSS) was discovered in imdbphp 5.1.1. The vulnerability exists due to insufficient filtration of user-supplied data (name) passed to the "imdbphp-master/demo/search.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/97002; https://github.com/tboothman/imdbphp/issues/88; http://www.securityfocus.com/bid/97002
CVE: CVE-2017-7205
Published: 2017-03-21
Description: A Cross-Site Scripting (XSS) was discovered in GamePanelX-V3 3.0.12. The vulnerability exists due to insufficient filtration of user-supplied data (a) passed to the "GamePanelX-V3-master/ajax/ajax.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/97003; https://github.com/devryan/GamePanelX-V3/issues/161; http://www.securityfocus.com/bid/97003
CVE: CVE-2017-7206
Published: 2017-03-21
Description: The ff_h2645_extract_rbsp function in libavcodec in libav 9.21 allows remote attackers to cause a denial of service (heap-based buffer over-read) or obtain sensitive information from process memory via a crafted h264 video file.
CVSS Score: 7.1 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/97006; https://bugzilla.libav.org/show_bug.cgi?id=1002; http://www.securityfocus.com/bid/97006
CVE: CVE-2017-7207
Published: 2017-03-21
Description: The mem_get_bits_rectangle function in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted PostScript document.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: http://www.debian.org/security/2017/dsa-3838; http://www.ghostscript.com/cgi-bin/findgit.cgi?309eca4e0a31ea70dcc[PII_REDACTED]39312dad091; http://www.securityfocus.com/bid/96995
CVE: CVE-2017-7208
Published: 2017-03-21
Description: The decode_residual function in libavcodec in libav 9.21 allows remote attackers to cause a denial of service (buffer over-read) or obtain sensitive information from process memory via a crafted h264 video file.
CVSS Score: 7.1 (HIGH)
CWE: CWE-125
References: http://www.debian.org/security/2017/dsa-4012; http://www.securityfocus.com/bid/97005; https://bugzilla.libav.org/show_bug.cgi?id=1000
CVE: CVE-2017-7209
Published: 2017-03-21
Description: The dump_section_as_bytes function in readelf in GNU Binutils 2.28 accesses a NULL pointer while reading section contents in a corrupt binary, leading to a program crash.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: http://www.securityfocus.com/bid/96994; https://security.gentoo.org/glsa/201801-01; https://sourceware.org/bugzilla/show_bug.cgi?id=21135
CVE: CVE-2017-7210
Published: 2017-03-21
Description: objdump in GNU Binutils 2.28 is vulnerable to multiple heap-based buffer over-reads (of size 1 and size 8) while handling corrupt STABS enum type strings in a crafted object file, leading to program crash.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: http://www.securityfocus.com/bid/96992; https://security.gentoo.org/glsa/201801-01; https://sourceware.org/bugzilla/show_bug.cgi?id=21157
CVE: CVE-2016-4504
Published: 2017-03-21
Description: A Cross-Site Request Forgery issue was discovered in Meteocontrol WEB'log Basic 100 all versions, Light all versions, Pro all versions, and Pro Unlimited all versions. There is no CSRF Token generated per page or per function.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://ics-cert.us-cert.gov/advisories/ICSA-16-133-01; https://ics-cert.us-cert.gov/advisories/ICSA-16-133-01
CVE: CVE-2016-6650
Published: 2017-03-21
Description: EMC RecoverPoint versions prior to 5.0 and EMC RecoverPoint for Virtual Machines versions prior to 5.0 have an SSL Stripping Vulnerability that may potentially be exploited by malicious users to compromise the affected system.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://www.securityfocus.com/archive/1/540303/30/0/threaded; http://www.securityfocus.com/bid/96156; http://www.securitytracker.com/id/1038066
CVE: CVE-2017-3849
Published: 2017-03-21
Description: A vulnerability in the Autonomic Networking Infrastructure (ANI) registrar feature of Cisco IOS Software (possibly 15.2 through 15.6) and Cisco IOS XE Software (possibly 3.7 through 3.18, and 16) could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition. The vulnerability is due to incomplete input validation on certain crafted packets. An attacker could exploit this vulnerability by sending a crafted autonomic network channel discovery packet to a device that has all the following characteristics: (1) running a Cisco IOS Software or Cisco IOS XE Software release that supports the ANI feature; (2) configured as an autonomic registrar; (3) has a whitelist configured. An exploit could allow the attacker to cause the affected device to reload. Note: Autonomic networking should be configured with a whitelist. Do not remove the whitelist as a workaround. Cisco Bug IDs: CSCvc42717.
CVSS Score: 7.4 (HIGH)
CWE: CWE-20, CWE-20
References: http://www.securityfocus.com/bid/96972; http://www.securitytracker.com/id/1038064; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170320-ani
CVE: CVE-2017-3850
Published: 2017-03-21
Description: A vulnerability in the Autonomic Networking Infrastructure (ANI) feature of Cisco IOS Software (15.4 through 15.6) and Cisco IOS XE Software (3.7 through 3.18, and 16) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to incomplete input validation on certain crafted packets. An attacker could exploit this vulnerability by sending a crafted IPv6 packet to a device that is running a Cisco IOS Software or Cisco IOS XE Software release that supports the ANI feature. A device must meet two conditions to be affected by this vulnerability: (1) the device must be running a version of Cisco IOS Software or Cisco IOS XE Software that supports ANI (regardless of whether ANI is configured); and (2) the device must have a reachable IPv6 interface. An exploit could allow the attacker to cause the affected device to reload. Cisco Bug IDs: CSCvc42729.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-20, CWE-20
References: http://www.securityfocus.com/bid/96971; http://www.securitytracker.com/id/1038065; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170320-aniipv6
CVE: CVE-2017-5565
Published: 2017-03-21
Description: Code injection vulnerability in Trend Micro Maximum Security 11.0 (and earlier), Internet Security 11.0 (and earlier), and Antivirus+ Security 11.0 (and earlier) allows a local attacker to bypass a self-protection mechanism, inject arbitrary code, and take full control of any Trend Micro process via a "DoubleAgent" attack. One perspective on this issue is that (1) these products do not use the Protected Processes feature, and therefore an attacker can enter an arbitrary Application Verifier Provider DLL under Image File Execution Options in the registry; (2) the self-protection mechanism is intended to block all local processes (regardless of privileges) from modifying Image File Execution Options for these products; and (3) this mechanism can be bypassed by an attacker who temporarily renames Image File Execution Options during the attack.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427
References: http://cybellum.com/doubleagent-taking-full-control-antivirus/; http://cybellum.com/doubleagentzero-day-code-injection-and-persistence-technique/; http://www.securityfocus.com/bid/97031