deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-3819
Published: 2017-03-15
Description: A privilege escalation vulnerability in the Secure Shell (SSH) subsystem in the StarOS operating system for Cisco ASR 5000 Series, ASR 5500 Series, ASR 5700 Series devices, and Cisco Virtualized Packet Core could allow an authenticated, remote attacker to gain unrestricted, root shell access. The vulnerability is due to missing input validation of parameters passed during SSH or SFTP login. An attacker could exploit this vulnerability by providing crafted user input to the SSH or SFTP command-line interface (CLI) during SSH or SFTP login. An exploit could allow an authenticated attacker to gain root privileges access on the router. Note: Only traffic directed to the affected system can be used to exploit this vulnerability. This vulnerability can be triggered via both IPv4 and IPv6 traffic. An established TCP connection toward port 22, the SSH default port, is needed to perform the attack. The attacker must have valid credentials to login to the system via SSH or SFTP. The following products have been confirmed to be vulnerable: Cisco ASR 5000/5500/5700 Series devices running StarOS after 17.7.0 and prior to 18.7.4, 19.5, and 20.2.3 with SSH configured are vulnerable. Cisco Virtualized Packet Core - Single Instance (VPC-SI) and Distributed Instance (VPC-DI) devices running StarOS prior to N4.2.7 (19.3.v7) and N4.7 (20.2.v0) with SSH configured are vulnerable. Cisco Bug IDs: CSCva65853.
CVSS Score: 8.8 (HIGH)
CWE: CWE-264, CWE-306
References: http://www.securityfocus.com/bid/96913; http://www.securitytracker.com/id/1038050; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-asr
CVE: CVE-2017-3831
Published: 2017-03-15
Description: A vulnerability in the web-based GUI of Cisco Mobility Express 1800 Series Access Points could allow an unauthenticated, remote attacker to bypass authentication. The attacker could be granted full administrator privileges. The vulnerability is due to improper implementation of authentication for accessing certain web pages using the GUI interface. An attacker could exploit this vulnerability by sending a crafted HTTP request to the web interface of the affected system. A successful exploit could allow the attacker to bypass authentication and perform unauthorized configuration changes or issue control commands to the affected device. This vulnerability affects Cisco Mobility Express 1800 Series Access Points running a software version prior to 8.2.110.0. Cisco Bug IDs: CSCuy68219.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-264, CWE-287
References: http://www.securityfocus.com/bid/96909; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-ap1800; http://www.securityfocus.com/bid/96909
CVE: CVE-2017-3846
Published: 2017-03-15
Description: A vulnerability in the Client Manager Server of Cisco Workload Automation and Cisco Tidal Enterprise Scheduler could allow an unauthenticated, remote attacker to retrieve any file from the Client Manager Server. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending a crafted URL to the Client Manager Server. An exploit could allow the attacker to retrieve any file from the Cisco Workload Automation or Cisco Tidal Enterprise Scheduler Client Manager Server. This vulnerability affects the following products: Cisco Tidal Enterprise Scheduler Client Manager Server releases 6.2.1.435 and later, Cisco Workload Automation Client Manager Server releases 6.3.0.116 and later. Cisco Bug IDs: CSCvc90789.
CVSS Score: 8.6 (HIGH)
CWE: CWE-20, CWE-20
References: http://www.securityfocus.com/bid/96910; http://www.securitytracker.com/id/1038044; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-tes
CVE: CVE-2017-3854
Published: 2017-03-15
Description: A vulnerability in the mesh code of Cisco Wireless LAN Controller (WLC) software could allow an unauthenticated, remote attacker to impersonate a WLC in a meshed topology. The vulnerability is due to insufficient authentication of the parent access point in a mesh configuration. An attacker could exploit this vulnerability by forcing the target system to disconnect from the correct parent access point and reconnect to a rogue access point owned by the attacker. An exploit could allow the attacker to control the traffic flowing through the impacted access point or take full control of the target system. This vulnerability affects the following products running a vulnerable version of Wireless LAN Controller software and configured for meshed mode: Cisco 8500 Series Wireless Controller, Cisco 5500 Series Wireless Controller, Cisco 2500 Series Wireless Controller, Cisco Flex 7500 Series Wireless Controller, Cisco Virtual Wireless Controller, Wireless Services Module 2 (WiSM2). Note that additional configuration is needed in addition to upgrading to a fixed release. Cisco Bug IDs: CSCuc98992 CSCuu14804.
CVSS Score: 8.8 (HIGH)
CWE: CWE-287
References: http://www.securityfocus.com/bid/96911; http://www.securitytracker.com/id/1038041; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-wlc-mesh
CVE: CVE-2017-6453
Published: 2017-03-15
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none
CVE: CVE-2017-6454
Published: 2017-03-15
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none
CVE: CVE-2017-6456
Published: 2017-03-15
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none
CVE: CVE-2017-6457
Published: 2017-03-15
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none
CVE: CVE-2017-6461
Published: 2017-03-15
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none
CVE: CVE-2017-6023
Published: 2017-03-16
Description: An issue was discovered in Fatek Automation PLC Ethernet Module. The affected Ether_cfg software configuration tool runs on the following Fatek PLCs: CBEH versions prior to V3.6 Build 170215, CBE versions prior to V3.6 Build 170215, CM55E versions prior to V3.6 Build 170215, and CM25E versions prior to V3.6 Build 170215. A stack-based buffer overflow vulnerability has been identified, which may allow remote code execution or crash the affected device.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-121, CWE-119
References: http://www.securityfocus.com/bid/96892; https://ics-cert.us-cert.gov/advisories/ICSA-17-073-01; http://www.securityfocus.com/bid/96892
CVE: CVE-2017-6061
Published: 2017-03-16
Description: Cross-site scripting (XSS) vulnerability in the help component of SAP BusinessObjects Financial Consolidation 10.0.0.1933 allows remote attackers to inject arbitrary web script or HTML via a GET request. /finance/help/en/frameset.htm is the URI for this component. The vendor response is SAP Security Note 2368106.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/141349/SAP-BusinessObjects-Financial-Consolidation-10.0.0.1933-Cross-Site-Scripting.html; http://seclists.org/fulldisclosure/2017/Feb/69; http://www.securityfocus.com/bid/96461
CVE: CVE-2016-10246
Published: 2017-03-16
Description: Buffer overflow in the main function in jstest_main.c in Mujstest in Artifex Software, Inc. MuPDF before 1.10 allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: http://git.ghostscript.com/?p=mupdf.git%3Bh=cfe8f35bca[PII_REDACTED]8c343be36812abde0a06; http://www.openwall.com/lists/oss-security/2017/03/13/21; https://blogs.gentoo.org/ago/2016/09/24/mupdf-mujstest-global-buffer-overflow-in-main-jstest_main-c/
CVE: CVE-2016-10247
Published: 2017-03-16
Description: Buffer overflow in the my_getline function in jstest_main.c in Mujstest in Artifex Software, Inc. MuPDF before 1.10 allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: http://git.ghostscript.com/?p=mupdf.git%3Bh=446097f97b71ce20fa8d1e45e070f2e62676003e; http://www.openwall.com/lists/oss-security/2017/03/13/20; http://www.securityfocus.com/bid/97099
CVE: CVE-2017-6377
Published: 2017-03-16
Description: When adding a private file via the editor in Drupal 8.2.x before 8.2.7, the editor will not correctly check access for the file being attached, resulting in an access bypass.
CVSS Score: 7.5 (HIGH)
CWE: CWE-863
References: http://www.securityfocus.com/bid/96919; http://www.securitytracker.com/id/1038058; https://www.drupal.org/SA-2017-001
CVE: CVE-2017-6379
Published: 2017-03-16
Description: Some administrative paths in Drupal 8.2.x before 8.2.7 did not include protection for CSRF. This would allow an attacker to disable some blocks on a site. This issue is mitigated by the fact that users would have to know the block ID.
CVSS Score: 7.5 (HIGH)
CWE: CWE-352
References: http://www.securityfocus.com/bid/96919; http://www.securitytracker.com/id/1038058; https://www.drupal.org/SA-2017-001
CVE: CVE-2017-6381
Published: 2017-03-16
Description: A 3rd party development library including with Drupal 8 development dependencies is vulnerable to remote code execution. This is mitigated by the default .htaccess protection against PHP execution, and the fact that Composer development dependencies aren't normal installed. You might be vulnerable to this if you are running a version of Drupal before 8.2.2. To be sure you aren't vulnerable, you can remove the <siteroot>/vendor/phpunit directory from your production deployments
CVSS Score: 8.1 (HIGH)
CWE: CWE-829
References: http://www.securityfocus.com/bid/96919; http://www.securitytracker.com/id/1038058; https://www.drupal.org/SA-2017-001
CVE: CVE-2017-6510
Published: 2017-03-16
Description: Easy File Sharing FTP Server version 3.6 is vulnerable to a directory traversal vulnerability which allows an attacker to list and download any file from any folder outside the FTP root Directory.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://www.securityfocus.com/bid/96944; https://www.rapid7.com/db/modules/auxiliary/scanner/ftp/easy_file_sharing_ftp; http://www.securityfocus.com/bid/96944
CVE: CVE-2015-0983
Published: 2017-03-16
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2015.  Notes: none
CVE: CVE-2015-3941
Published: 2017-03-16
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2015.  Notes: none
CVE: CVE-2015-3944
Published: 2017-03-16
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2015.  Notes: none
CVE: CVE-2015-3945
Published: 2017-03-16
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2015.  Notes: none
CVE: CVE-2015-3975
Published: 2017-03-16
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2015.  Notes: none
CVE: CVE-2015-6455
Published: 2017-03-16
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2015.  Notes: none
CVE: CVE-2015-6487
Published: 2017-03-16
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2015.  Notes: none
CVE: CVE-2015-7920
Published: 2017-03-16
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2015.  Notes: none
CVE: CVE-2015-7922
Published: 2017-03-16
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2015.  Notes: none
CVE: CVE-2015-8582
Published: 2017-03-16
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2015.  Notes: none
CVE: CVE-2015-8583
Published: 2017-03-16
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2015.  Notes: none
CVE: CVE-2015-8584
Published: 2017-03-16
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2015.  Notes: none
CVE: CVE-2015-8585
Published: 2017-03-16
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2015.  Notes: none
CVE: CVE-2015-8586
Published: 2017-03-16
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2015.  Notes: none
CVE: CVE-2015-8587
Published: 2017-03-16
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2015.  Notes: none
CVE: CVE-2015-8588
Published: 2017-03-16
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2015.  Notes: none
CVE: CVE-2015-8589
Published: 2017-03-16
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2015.  Notes: none
CVE: CVE-2015-8590
Published: 2017-03-16
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2015.  Notes: none
CVE: CVE-2015-8591
Published: 2017-03-16
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2015.  Notes: none
CVE: CVE-2015-8981
Published: 2017-03-16
Description: Heap-based buffer overflow in the PdfParser::ReadXRefSubsection function in base/PdfParser.cpp in PoDoFo allows attackers to have unspecified impact via vectors related to m_offsets.size.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.openwall.com/lists/oss-security/2017/02/01/20; http://www.openwall.com/lists/oss-security/2017/02/02/15; https://sourceforge.net/p/podofo/code/1672
CVE: CVE-2016-0770
Published: 2017-03-16
Description: Cross-site scripting (XSS) vulnerability in includes/admin/pages/manage.php in the Connections Business Directory plugin before 8.5.9 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s variable.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2016/02/02/1; http://www.securityfocus.com/bid/82355; http://www.vapidlabs.com/advisory.php?v=161
CVE: CVE-2016-10187
Published: 2017-03-16
Description: The E-book viewer in calibre before 2.75 allows remote attackers to read arbitrary files via a crafted epub file with JavaScript.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-264
References: http://www.openwall.com/lists/oss-security/2017/01/29/8; http://www.openwall.com/lists/oss-security/2017/01/31/9; http://www.securityfocus.com/bid/95909
CVE: CVE-2017-5505
Published: 2017-03-16
Description: The jas_matrix_asl function in jas_seq.c in JasPer 1.900.27 allows remote attackers to cause a denial of service (invalid memory read and crash) via a crafted image.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00082.html; http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00085.html; http://www.openwall.com/lists/oss-security/2017/01/16/5
CVE: CVE-2017-5617
Published: 2017-03-16
Description: The SVG Salamander (aka svgSalamander) library, when used in a web application, allows remote attackers to conduct server-side request forgery (SSRF) attacks via an xlink:href attribute in an SVG file.
CVSS Score: 7.4 (HIGH)
CWE: CWE-918
References: http://www.debian.org/security/2017/dsa-3781; http://www.openwall.com/lists/oss-security/2017/01/27/3; http://www.openwall.com/lists/oss-security/2017/01/29/2
CVE: CVE-2017-5643
Published: 2017-03-16
Description: Apache Camel's Validation Component is vulnerable against SSRF via remote DTDs and XXE.
CVSS Score: 7.4 (HIGH)
CWE: CWE-918
References: http://camel.apache.org/security-advisories.data/CVE-2017-5643.txt.asc?version=1&modificationDate=[PII_REDACTED]00&api=v2; http://www.securityfocus.com/bid/97226; https://access.redhat.com/errata/RHSA-2017:1832
CVE: CVE-2017-5667
Published: 2017-03-16
Description: The sdhci_sdma_transfer_multi_blocks function in hw/sd/sdhci.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (out-of-bounds heap access and crash) or execute arbitrary code on the QEMU host via vectors involving the data transfer length.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://git.qemu-project.org/?p=qemu.git%3Ba=commitdiff%3Bh=42922105beb14c2fc58185ea022b9f72fb5465e9; http://www.openwall.com/lists/oss-security/2017/01/30/2; http://www.openwall.com/lists/oss-security/2017/01/31/10
CVE: CVE-2017-5856
Published: 2017-03-16
Description: Memory leak in the megasas_handle_dcmd function in hw/scsi/megasas.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption) via MegaRAID Firmware Interface (MFI) commands with the sglist size set to a value over 2 Gb.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-401
References: http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=765a707000e838c30b18d712fe6cb3dd8e0435f3; http://www.openwall.com/lists/oss-security/2017/02/01/19; http://www.openwall.com/lists/oss-security/2017/02/02/14
CVE: CVE-2017-5857
Published: 2017-03-16
Description: Memory leak in the virgl_cmd_resource_unref function in hw/display/virtio-gpu-3d.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a denial of service (host memory consumption) via a large number of VIRTIO_GPU_CMD_RESOURCE_UNREF commands sent without detaching the backing storage beforehand.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-401
References: http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=5e8e3c4c75c199aa1017db816fca02be2a9f8798; http://www.openwall.com/lists/oss-security/2017/02/01/21; http://www.openwall.com/lists/oss-security/2017/02/02/16
CVE: CVE-2017-9999
Published: 2017-03-16
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was used as an example and was not assigned for a  security issue.  Notes: none
CVE: CVE-2017-6949
Published: 2017-03-16
Description: An issue was discovered in CHICKEN Scheme through 4.12.0. When using a nonstandard CHICKEN-specific extension to allocate an SRFI-4 vector in unmanaged memory, the vector size would be used in unsanitised form as an argument to malloc(). With an unexpected size, the impact may have been a segfault or buffer overflow.
CVSS Score: 8.1 (HIGH)
CWE: CWE-119
References: http://lists.gnu.org/archive/html/chicken-announce/2017-03/msg00000.html; http://www.securityfocus.com/bid/97317; http://lists.gnu.org/archive/html/chicken-announce/2017-03/msg00000.html
CVE: CVE-2017-6951
Published: 2017-03-16
Description: The keyring_search_aux function in security/keys/keyring.c in the Linux kernel through 3.14.79 allows local users to cause a denial of service (NULL pointer dereference and OOPS) via a request_key system call for the "dead" type.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: http://www.securityfocus.com/bid/96943; http://www.spinics.net/lists/keyrings/msg01845.html; http://www.spinics.net/lists/keyrings/msg01846.html
CVE: CVE-2017-6952
Published: 2017-03-16
Description: Integer overflow in the cs_winkernel_malloc function in winkernel_mm.c in Capstone 3.0.4 and earlier allows attackers to cause a denial of service (heap-based buffer overflow in a kernel driver) or possibly have unspecified other impact via a large value.
CVSS Score: 8.8 (HIGH)
CWE: CWE-190
References: http://www.securityfocus.com/bid/97323; https://github.com/aquynh/capstone/commit/6fe86eef621b9849f51a5e1e5d73258a93440403; http://www.securityfocus.com/bid/97323
CVE: CVE-2017-0001
Published: 2017-03-17
Description: The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows local users to gain privileges via a crafted application, aka "Windows GDI Elevation of Privilege Vulnerability." This vulnerability is different from those described in CVE-2017-0005, CVE-2017-0025, and CVE-2017-0047.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/96057; http://www.securitytracker.com/id/1038002; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0001
CVE: CVE-2017-0005
Published: 2017-03-17
Description: The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows local users to gain privileges via a crafted application, aka "Windows GDI Elevation of Privilege Vulnerability." This vulnerability is different from those described in CVE-2017-0001, CVE-2017-0025, and CVE-2017-0047.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/96033; http://www.securitytracker.com/id/1038002; https://blogs.technet.microsoft.com/mmpc/2017/03/27/detecting-and-mitigating-elevation-of-privilege-exploit-for-cve-2017-0005/
CVE: CVE-2017-0006
Published: 2017-03-17
Description: Microsoft Excel 2007 SP3, Office Compatibility Pack SP3, Excel Viewer, and Excel Services on SharePoint Server 2007 SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability." This vulnerability is different from those described in CVE-2017-0019, CVE-2017-0020, CVE-2017-0030, CVE-2017-0031, CVE-2017-0052, and CVE-2017-0053.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/96740; http://www.securitytracker.com/id/1038010; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0006
CVE: CVE-2017-0007
Published: 2017-03-17
Description: Device Guard in Microsoft Windows 10 Gold, 1511, 1607, and Windows Server 2016 allows remote attackers to modify PowerShell script without invalidating associated signatures, aka "PowerShell Security Feature Bypass Vulnerability."
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/bid/96018; http://www.securitytracker.com/id/1038001; https://enigma0x3.net/2017/04/03/defeating-device-guard-a-look-into-cve-2017-0007/