deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-16395
Published: 2017-12-09
Description: An issue was discovered in Adobe Acrobat and Reader: 2[PII_REDACTED]8 and earlier versions, 2[PII_REDACTED]6 and earlier versions, 2[PII_REDACTED]5 and earlier versions, and 11.0.22 and earlier versions. The vulnerability is caused by a buffer access with an incorrect length value in the image conversion module when processing Enhanced Metafile Format (EMF). Crafted EMF input (EMR_STRETCHDIBITS) causes a mismatch between allocated buffer size and the access allowed by the computation. If an attacker can adequately control the accessible memory then this vulnerability can be leveraged to achieve arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/101831; http://www.securitytracker.com/id/1039791; https://helpx.adobe.com/security/products/acrobat/apsb17-36.html
CVE: CVE-2017-16396
Published: 2017-12-09
Description: An issue was discovered in Adobe Acrobat and Reader: 2[PII_REDACTED]8 and earlier versions, 2[PII_REDACTED]6 and earlier versions, 2[PII_REDACTED]5 and earlier versions, and 11.0.22 and earlier versions. The vulnerability is caused by a buffer access with an incorrect length value in the TIFF processing module. Crafted input causes a mismatch between allocated buffer size and the access allowed by the computation. If an attacker can adequately control the accessible memory then this vulnerability can be leveraged to achieve arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/101831; http://www.securitytracker.com/id/1039791; https://helpx.adobe.com/security/products/acrobat/apsb17-36.html
CVE: CVE-2017-16397
Published: 2017-12-09
Description: An issue was discovered in Adobe Acrobat and Reader: 2[PII_REDACTED]8 and earlier versions, 2[PII_REDACTED]6 and earlier versions, 2[PII_REDACTED]5 and earlier versions, and 11.0.22 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the target buffer; the computation is a part of Enhanced Metafile Format (EMF) processing within the image conversion module. The use of an invalid (out-of-range) pointer offset during access of internal data structure fields causes the vulnerability. A successful attack can lead to sensitive data exposure.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/102140; http://www.securitytracker.com/id/1039791; https://helpx.adobe.com/security/products/acrobat/apsb17-36.html
CVE: CVE-2017-16398
Published: 2017-12-09
Description: An issue was discovered in Adobe Acrobat and Reader: 2[PII_REDACTED]8 and earlier versions, 2[PII_REDACTED]6 and earlier versions, 2[PII_REDACTED]5 and earlier versions, and 11.0.22 and earlier versions. This vulnerability is an instance of a use after free vulnerability in the JavaScript engine. The mismatch between an old and a new object can provide an attacker with unintended memory access -- potentially leading to code corruption, control-flow hijack, or an information leak attack. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: http://www.securityfocus.com/bid/101818; http://www.securitytracker.com/id/1039791; https://helpx.adobe.com/security/products/acrobat/apsb17-36.html
CVE: CVE-2017-16399
Published: 2017-12-09
Description: An issue was discovered in Adobe Acrobat and Reader: 2[PII_REDACTED]8 and earlier versions, 2[PII_REDACTED]6 and earlier versions, 2[PII_REDACTED]5 and earlier versions, and 11.0.22 and earlier versions. This issue is due to an untrusted pointer dereference in the XPS parsing module. In this scenario, the input is crafted in a way that the computation results in pointers to memory locations that do not belong to the relevant process address space. The dereferencing operation is a read operation, and an attack can result in sensitive data exposure.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/102140; http://www.securitytracker.com/id/1039791; https://helpx.adobe.com/security/products/acrobat/apsb17-36.html
CVE: CVE-2017-16400
Published: 2017-12-09
Description: An issue was discovered in Adobe Acrobat and Reader: 2[PII_REDACTED]8 and earlier versions, 2[PII_REDACTED]6 and earlier versions, 2[PII_REDACTED]5 and earlier versions, and 11.0.22 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the target buffer; the computation is part of the JPEG 2000 parser. The use of an invalid (out-of-range) pointer offset during access of internal data structure fields causes the vulnerability. A successful attack can lead to sensitive data exposure.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/102140; http://www.securitytracker.com/id/1039791; https://helpx.adobe.com/security/products/acrobat/apsb17-36.html
CVE: CVE-2017-16401
Published: 2017-12-09
Description: An issue was discovered in Adobe Acrobat and Reader: 2[PII_REDACTED]8 and earlier versions, 2[PII_REDACTED]6 and earlier versions, 2[PII_REDACTED]5 and earlier versions, and 11.0.22 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the target buffer; the computation is part of an image conversion, specifically in Enhanced Metafile Format Plus (EMF +) processing modules. The use of an invalid (out-of-range) pointer offset during access of internal data structure fields causes the vulnerability. A successful attack can lead to sensitive data exposure.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/102140; http://www.securitytracker.com/id/1039791; https://helpx.adobe.com/security/products/acrobat/apsb17-36.html
CVE: CVE-2017-16402
Published: 2017-12-09
Description: An issue was discovered in Adobe Acrobat and Reader: 2[PII_REDACTED]8 and earlier versions, 2[PII_REDACTED]6 and earlier versions, 2[PII_REDACTED]5 and earlier versions, and 11.0.22 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the target buffer; the computation is a part of the JPEG 2000 module. The use of an invalid (out-of-range) pointer offset during access of internal data structure fields causes the vulnerability. A successful attack can lead to sensitive data exposure.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/102140; http://www.securitytracker.com/id/1039791; https://helpx.adobe.com/security/products/acrobat/apsb17-36.html
CVE: CVE-2017-16403
Published: 2017-12-09
Description: An issue was discovered in Adobe Acrobat and Reader: 2[PII_REDACTED]8 and earlier versions, 2[PII_REDACTED]6 and earlier versions, 2[PII_REDACTED]5 and earlier versions, and 11.0.22 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the target buffer; the computation is part of the image conversion module that processes Enhanced Metafile Format Plus (EMF+) data. The use of an invalid (out-of-range) pointer offset during access of internal data structure fields causes the vulnerability. A successful attack can lead to sensitive data exposure.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/102140; http://www.securitytracker.com/id/1039791; https://helpx.adobe.com/security/products/acrobat/apsb17-36.html
CVE: CVE-2017-16404
Published: 2017-12-09
Description: An issue was discovered in Adobe Acrobat and Reader: 2[PII_REDACTED]8 and earlier versions, 2[PII_REDACTED]6 and earlier versions, 2[PII_REDACTED]5 and earlier versions, and 11.0.22 and earlier versions. The vulnerability is caused by a computation that writes data past the end of the intended buffer; the computation is part of processing Enhanced Metafile Format Plus (EMF+). The vulnerability is a result of an out of range pointer offset that is used to access sub-elements of an internal data structure. An attacker can potentially leverage the vulnerability to corrupt sensitive data or execute arbitrary code.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/102140; http://www.securitytracker.com/id/1039791; https://helpx.adobe.com/security/products/acrobat/apsb17-36.html
CVE: CVE-2017-16405
Published: 2017-12-09
Description: An issue was discovered in Adobe Acrobat and Reader: 2[PII_REDACTED]8 and earlier versions, 2[PII_REDACTED]6 and earlier versions, 2[PII_REDACTED]5 and earlier versions, and 11.0.22 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the target buffer; the computation is part of Acrobat's page display functionality. The use of an invalid (out-of-range) pointer offset during access of internal data structure fields causes the vulnerability. A successful attack can lead to sensitive data exposure.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/102140; http://www.securitytracker.com/id/1039791; https://helpx.adobe.com/security/products/acrobat/apsb17-36.html
CVE: CVE-2017-16406
Published: 2017-12-09
Description: An issue was discovered in Adobe Acrobat and Reader: 2[PII_REDACTED]8 and earlier versions, 2[PII_REDACTED]6 and earlier versions, 2[PII_REDACTED]5 and earlier versions, and 11.0.22 and earlier versions. This vulnerability is an instance of a type confusion vulnerability in the EMF processing module. The issue causes the program to access an object using an incompatible type, leading to an out of bounds memory access. Attackers can exploit the vulnerability by using the out of bounds access for unintended reads, writes, or frees -- potentially leading to code corruption, control-flow hijack, or information leak attack.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/101815; http://www.securitytracker.com/id/1039791; https://helpx.adobe.com/security/products/acrobat/apsb17-36.html
CVE: CVE-2017-16407
Published: 2017-12-09
Description: An issue was discovered in Adobe Acrobat and Reader: 2[PII_REDACTED]8 and earlier versions, 2[PII_REDACTED]6 and earlier versions, 2[PII_REDACTED]5 and earlier versions, and 11.0.22 and earlier versions. The vulnerability is caused by a computation that writes data past the end of the intended buffer; the computation is part of handling an EMF EMR_BITBLT record. The vulnerability is a result of an out of range pointer offset that is used to access sub-elements of an internal data structure. An attacker can potentially leverage the vulnerability to corrupt sensitive data or execute arbitrary code.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/101812; http://www.securitytracker.com/id/1039791; https://helpx.adobe.com/security/products/acrobat/apsb17-36.html
CVE: CVE-2017-16408
Published: 2017-12-09
Description: An issue was discovered in Adobe Acrobat and Reader: 2[PII_REDACTED]8 and earlier versions, 2[PII_REDACTED]6 and earlier versions, 2[PII_REDACTED]5 and earlier versions, and 11.0.22 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the target buffer; the computation is a part of the WebCapture module. The use of an invalid (out-of-range) pointer offset during access of internal data structure fields causes the vulnerability. A successful attack can lead to sensitive data exposure.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/102140; http://www.securitytracker.com/id/1039791; https://helpx.adobe.com/security/products/acrobat/apsb17-36.html
CVE: CVE-2017-16409
Published: 2017-12-09
Description: An issue was discovered in Adobe Acrobat and Reader: 2[PII_REDACTED]8 and earlier versions, 2[PII_REDACTED]6 and earlier versions, 2[PII_REDACTED]5 and earlier versions, and 11.0.22 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the target buffer; the computation is part of the Adobe graphics module responsible for displaying textual data. The use of an invalid (out-of-range) pointer offset during access of internal data structure fields causes the vulnerability. A successful attack can lead to sensitive data exposure.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/102140; http://www.securitytracker.com/id/1039791; https://helpx.adobe.com/security/products/acrobat/apsb17-36.html
CVE: CVE-2017-16410
Published: 2017-12-09
Description: An issue was discovered in Adobe Acrobat and Reader: 2[PII_REDACTED]8 and earlier versions, 2[PII_REDACTED]6 and earlier versions, 2[PII_REDACTED]5 and earlier versions, and 11.0.22 and earlier versions. The vulnerability is a result of untrusted input that is used to calculate an array index; the calculation occurs in the image conversion module, when processing GIF files. The vulnerability leads to an operation that can write to a memory location that is outside of the memory addresses allocated for the data structure. The specific scenario leads to a write access to a memory location that does not belong to the relevant process address space.
CVSS Score: 8.8 (HIGH)
CWE: CWE-129
References: http://www.securityfocus.com/bid/101819; http://www.securitytracker.com/id/1039791; https://helpx.adobe.com/security/products/acrobat/apsb17-36.html
CVE: CVE-2017-16411
Published: 2017-12-09
Description: An issue was discovered in Adobe Acrobat and Reader: 2[PII_REDACTED]8 and earlier versions, 2[PII_REDACTED]6 and earlier versions, 2[PII_REDACTED]5 and earlier versions, and 11.0.22 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the target buffer; the computation is part of the WebCapture module, related to an internal hash table implementation. The use of an invalid (out-of-range) pointer offset during access of internal data structure fields causes the vulnerability. A successful attack can lead to sensitive data exposure.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/101813; http://www.securitytracker.com/id/1039791; https://helpx.adobe.com/security/products/acrobat/apsb17-36.html
CVE: CVE-2017-16412
Published: 2017-12-09
Description: An issue was discovered in Adobe Acrobat and Reader: 2[PII_REDACTED]8 and earlier versions, 2[PII_REDACTED]6 and earlier versions, 2[PII_REDACTED]5 and earlier versions, and 11.0.22 and earlier versions. This vulnerability occurs because of a computation that reads data that is past the end of the target buffer; the computation is part of the XPS conversion module, when handling a JPEG resource. The use of an invalid (out-of-range) pointer offset during access of internal data structure fields causes the vulnerability. A successful attack can lead to sensitive data exposure.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/102140; http://www.securitytracker.com/id/1039791; https://helpx.adobe.com/security/products/acrobat/apsb17-36.html
CVE: CVE-2017-16413
Published: 2017-12-09
Description: An issue was discovered in Adobe Acrobat and Reader: 2[PII_REDACTED]8 and earlier versions, 2[PII_REDACTED]6 and earlier versions, 2[PII_REDACTED]5 and earlier versions, and 11.0.22 and earlier versions. The vulnerability is caused by a computation that writes data past the end of the intended buffer; the computation is part of the XPS to PDF conversion module, when processing TIFF files. The vulnerability is a result of an out of range pointer offset that is used to access sub-elements of an internal data structure. An attacker can potentially leverage the vulnerability to corrupt sensitive data or execute arbitrary code.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/101812; http://www.securitytracker.com/id/1039791; https://helpx.adobe.com/security/products/acrobat/apsb17-36.html
CVE: CVE-2017-16414
Published: 2017-12-09
Description: An issue was discovered in Adobe Acrobat and Reader: 2[PII_REDACTED]8 and earlier versions, 2[PII_REDACTED]6 and earlier versions, 2[PII_REDACTED]5 and earlier versions, and 11.0.22 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the target buffer; the computation is a part of the JavaScript API module responsible for form field computation. The use of an invalid (out-of-range) pointer offset during access of internal data structure fields causes the vulnerability. A successful attack can lead to sensitive data exposure.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/102140; http://www.securitytracker.com/id/1039791; https://helpx.adobe.com/security/products/acrobat/apsb17-36.html
CVE: CVE-2017-16415
Published: 2017-12-09
Description: An issue was discovered in Adobe Acrobat and Reader: 2[PII_REDACTED]8 and earlier versions, 2[PII_REDACTED]6 and earlier versions, 2[PII_REDACTED]5 and earlier versions, and 11.0.22 and earlier versions. The vulnerability is caused by a computation that writes data past the end of the intended buffer; the computation is a part of the functionality that handles font encodings. The vulnerability is a result of out of range pointer offset that is used to access sub-elements of an internal data structure. An attacker can potentially leverage the vulnerability to corrupt sensitive data or execute arbitrary code.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/101812; http://www.securitytracker.com/id/1039791; https://helpx.adobe.com/security/products/acrobat/apsb17-36.html
CVE: CVE-2017-16416
Published: 2017-12-09
Description: An issue was discovered in Adobe Acrobat and Reader: 2[PII_REDACTED]8 and earlier versions, 2[PII_REDACTED]6 and earlier versions, 2[PII_REDACTED]5 and earlier versions, and 11.0.22 and earlier versions. The vulnerability is caused by a computation that writes data past the end of the intended buffer; the computation is part of the image conversion module that handles Enhanced Metafile Format Plus (EMF+) data. The vulnerability is a result of an out of range pointer offset that is used to access sub-elements of an internal data structure. An attacker can potentially leverage the vulnerability to corrupt sensitive data or execute arbitrary code.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/101812; http://www.securitytracker.com/id/1039791; https://helpx.adobe.com/security/products/acrobat/apsb17-36.html
CVE: CVE-2017-16417
Published: 2017-12-09
Description: An issue was discovered in Adobe Acrobat and Reader: 2[PII_REDACTED]8 and earlier versions, 2[PII_REDACTED]6 and earlier versions, 2[PII_REDACTED]5 and earlier versions, and 11.0.22 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the target buffer; the computation is a part of the font parsing module. The use of an invalid (out-of-range) pointer offset during access of internal data structure fields causes the vulnerability. A successful attack can lead to sensitive data exposure.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/102140; http://www.securitytracker.com/id/1039791; https://helpx.adobe.com/security/products/acrobat/apsb17-36.html
CVE: CVE-2017-16418
Published: 2017-12-09
Description: An issue was discovered in Adobe Acrobat and Reader: 2[PII_REDACTED]8 and earlier versions, 2[PII_REDACTED]6 and earlier versions, 2[PII_REDACTED]5 and earlier versions, and 11.0.22 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the target buffer; the computation is a part of the image conversion module that handles XPS files. The use of an invalid (out-of-range) pointer offset during access of internal data structure fields causes the vulnerability. A successful attack can lead to sensitive data exposure.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/102140; http://www.securitytracker.com/id/1039791; https://helpx.adobe.com/security/products/acrobat/apsb17-36.html
CVE: CVE-2017-16419
Published: 2017-12-09
Description: An issue was discovered in Adobe Acrobat and Reader: 2[PII_REDACTED]8 and earlier versions, 2[PII_REDACTED]6 and earlier versions, 2[PII_REDACTED]5 and earlier versions, and 11.0.22 and earlier versions. The issue is a stack exhaustion problem within the JavaScript API, where the computation does not correctly control the amount of recursion that can happen with respect to system resources.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-674
References: http://www.securityfocus.com/bid/101817; http://www.securitytracker.com/id/1039791; https://helpx.adobe.com/security/products/acrobat/apsb17-36.html
CVE: CVE-2017-16420
Published: 2017-12-09
Description: An issue was discovered in Adobe Acrobat and Reader: 2[PII_REDACTED]8 and earlier versions, 2[PII_REDACTED]6 and earlier versions, 2[PII_REDACTED]5 and earlier versions, and 11.0.22 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the target buffer; the computation is in the part of the JavaScript engine that handles annotation abstraction. The use of an invalid (out-of-range) pointer offset during access of internal data structure fields causes the vulnerability. A successful attack can lead to sensitive data exposure.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/102140; http://www.securitytracker.com/id/1039791; https://helpx.adobe.com/security/products/acrobat/apsb17-36.html
CVE: CVE-2017-3109
Published: 2017-12-09
Description: An issue was discovered in Adobe Experience Manager 6.3, 6.2, 6.1, 6.0. Adobe Experience Manager has a reflected cross-site scripting vulnerability in the HtmlRendererServlet.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/101834; http://www.securitytracker.com/id/1039800; https://helpx.adobe.com/security/products/experience-manager/apsb17-41.html
CVE: CVE-2017-3111
Published: 2017-12-09
Description: An issue was discovered in Adobe Experience Manager 6.3, 6.2, 6.1, 6.0. Sensitive tokens are included in http GET requests under certain circumstances.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://www.securityfocus.com/bid/101843; http://www.securitytracker.com/id/1039800; https://helpx.adobe.com/security/products/experience-manager/apsb17-41.html
CVE: CVE-2017-3112
Published: 2017-12-09
Description: An issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the target buffer; the computation is part of AdobePSDK metadata. The use of an invalid (out-of-range) pointer offset during access of internal data structure fields causes the vulnerability. A successful attack can lead to sensitive data exposure.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125
References: http://www.securityfocus.com/bid/101837; http://www.securitytracker.com/id/1039778; https://access.redhat.com/errata/RHSA-2017:3222
CVE: CVE-2017-3114
Published: 2017-12-09
Description: An issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the target buffer; the computation is part of providing language- and region- or country- specific functionality. The use of an invalid (out-of-range) pointer offset during access of internal data structure fields causes the vulnerability. A successful attack can lead to sensitive data exposure.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125
References: http://www.securityfocus.com/bid/101837; http://www.securitytracker.com/id/1039778; https://access.redhat.com/errata/RHSA-2017:3222