deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-2895
Published: 2017-11-07
Description: An exploitable arbitrary memory read vulnerability exists in the MQTT packet parsing functionality of Cesanta Mongoose 6.8. A specially crafted MQTT SUBSCRIBE packet can cause an arbitrary out-of-bounds memory read potentially resulting in information disclosure and denial of service. An attacker needs to send a specially crafted MQTT packet over the network to trigger this vulnerability.
CVSS Score: 8.2 (HIGH)
CWE: CWE-125
References: https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0402; https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0402
CVE: CVE-2017-2898
Published: 2017-11-07
Description: An exploitable vulnerability exists in the signature verification of the firmware update functionality of Circle with Disney. Specially crafted network packets can cause an unsigned firmware to be installed in the device resulting in arbitrary code execution. An attacker can send a series of packets to trigger this vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-362
References: https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0405; https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0405
CVE: CVE-2017-2909
Published: 2017-11-07
Description: An infinite loop programming error exists in the DNS server functionality of Cesanta Mongoose 6.8 library. A specially crafted DNS request can cause an infinite loop resulting in high CPU usage and Denial Of Service. An attacker can send a packet over the network to trigger this vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-835
References: https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0416; https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0416
CVE: CVE-2017-2911
Published: 2017-11-07
Description: An exploitable vulnerability exists in the remote control functionality of Circle with Disney running firmware 2.0.1. SSL certificates for specific domain names can cause the rclient daemon to accept a different certificate than intended. An attacker can host an HTTPS server with this certificate to trigger this vulnerability.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-297
References: https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0418; https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0418
CVE: CVE-2017-2912
Published: 2017-11-07
Description: An exploitable vulnerability exists in the remote control functionality of Circle with Disney running firmware 2.0.1. SSL certificates for specific domain names can cause the goclient daemon to accept a different certificate than intended. An attacker can host an HTTPS server with this certificate to trigger this vulnerability.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-297
References: https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0419; https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0419
CVE: CVE-2017-2913
Published: 2017-11-07
Description: An exploitable vulnerability exists in the filtering functionality of Circle with Disney. SSL certificates for specific domain names can cause the Bluecoat library to accept a different certificate than intended. An attacker can host an HTTPS server with this certificate to trigger this vulnerability.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-295
References: https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0420; https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0420
CVE: CVE-2017-2914
Published: 2017-11-07
Description: An exploitable authentication bypass vulnerability exists in the API daemon of Circle with Disney running firmware 2.0.1. A specially crafted token can bypass the authentication routine of the Apid binary, causing the device to grant unintended administrative access. An attacker needs network connectivity to the device to trigger this vulnerability.
CVSS Score: 8.1 (HIGH)
CWE: CWE-287
References: https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0421; https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0421
CVE: CVE-2017-2915
Published: 2017-11-07
Description: An exploitable vulnerability exists in the WiFi configuration functionality of Circle with Disney running firmware 2.0.1. A specially crafted SSID can cause the device to execute arbitrary shell commands. An attacker needs to send a couple of HTTP requests and setup an access point reachable by the device to trigger this vulnerability.
CVSS Score: 8.0 (HIGH)
References: https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0422; https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0422
CVE: CVE-2017-2916
Published: 2017-11-07
Description: An exploitable vulnerability exists in the /api/CONFIG/restore functionality of Circle with Disney running firmware 2.0.1. Specially crafted network packets can cause an arbitrary file to be overwritten. An attacker can send an HTTP request to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-59
References: https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0423; https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0423
CVE: CVE-2017-2917
Published: 2017-11-07
Description: An exploitable vulnerability exists in the notifications functionality of Circle with Disney running firmware 2.0.1. Specially crafted network packets can cause an OS command injection. An attacker can send an HTTP request to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0424; https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0424
CVE: CVE-2017-2921
Published: 2017-11-07
Description: An exploitable memory corruption vulnerability exists in the Websocket protocol implementation of Cesanta Mongoose 6.8. A specially crafted websocket packet can cause an integer overflow, leading to a heap buffer overflow and resulting in denial of service and potential remote code execution. An attacker needs to send a specially crafted websocket packet over network to trigger this vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0428; https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0428
CVE: CVE-2017-2922
Published: 2017-11-07
Description: An exploitable memory corruption vulnerability exists in the Websocket protocol implementation of Cesanta Mongoose 6.8. A specially crafted websocket packet can cause a buffer to be allocated while leaving stale pointers which leads to a use-after-free vulnerability which can be exploited to achieve remote code execution. An attacker needs to send a specially crafted websocket packet over the network to trigger this vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0429; https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0429
CVE: CVE-2017-16641
Published: 2017-11-07
Description: lib/rrd.php in Cacti 1.1.27 allows remote authenticated administrators to execute arbitrary OS commands via the path_rrdtool parameter in an action=save request to settings.php.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://github.com/Cacti/cacti/issues/1057; https://github.com/Cacti/cacti/issues/1057
CVE: CVE-2008-7319
Published: 2017-11-07
Description: The Net::Ping::External extension through 0.15 for Perl does not properly sanitize arguments (e.g., invalid hostnames) containing shell metacharacters before use of backticks in External.pm, allowing for shell command injection and arbitrary command execution if untrusted input is used.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: http://matthias.sdfeu.org/devel/net-ping-external-cmd-injection.patch; http://www.openwall.com/lists/oss-security/2017/11/07/4; https://bugs.debian.org/881097
CVE: CVE-2016-0872
Published: 2017-11-07
Description: A Plaintext Storage of a Password issue was discovered in Kabona AB WebDatorCentral (WDC) versions prior to Version 3.4.0. WDC stores password credentials in plaintext.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-255
References: https://ics-cert.us-cert.gov/advisories/ICSA-16-287-07; https://ics-cert.us-cert.gov/advisories/ICSA-16-287-07
CVE: CVE-2017-16642
Published: 2017-11-07
Description: In PHP before 5.6.32, 7.x before 7.0.25, and 7.1.x before 7.1.11, an error in the date extension's timelib_meridian handling of 'front of' and 'back of' directives could be used by attackers able to supply date strings to leak information from the interpreter, related to ext/date/lib/parse_date.c out-of-bounds reads affecting the php_parse_date function. NOTE: this is a different issue than CVE-2017-11145.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://php.net/ChangeLog-5.php; http://php.net/ChangeLog-7.php; http://www.securityfocus.com/bid/101745
CVE: CVE-2017-16561
Published: 2017-11-07
Description: /view/friend_profile.php in Ingenious School Management System 2.3.0 is vulnerable to Boolean-based and Time-based SQL injection in the 'friend_index' parameter of a GET request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.exploit-db.com/exploits/43108/; https://www.exploit-db.com/exploits/43108/
CVE: CVE-2017-16643
Published: 2017-11-07
Description: The parse_hid_report_descriptor function in drivers/input/tablet/gtco.c in the Linux kernel before 4.13.11 allows local users to cause a denial of service (out-of-bounds read and system crash) or possibly have unspecified other impact via a crafted USB device.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-125
References: http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.11; http://www.securityfocus.com/bid/101769; https://github.com/torvalds/linux/commit/a50829479f58416a013a4ccca791336af3c584c7
CVE: CVE-2017-16644
Published: 2017-11-07
Description: The hdpvr_probe function in drivers/media/usb/hdpvr/hdpvr-core.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (improper error handling and system crash) or possibly have unspecified other impact via a crafted USB device.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-388
References: http://www.securityfocus.com/bid/101842; https://groups.google.com/d/msg/syzkaller/ngC5SLvxPm4/gduhCARhAwAJ; https://patchwork.kernel.org/patch/9966135/
CVE: CVE-2017-16645
Published: 2017-11-07
Description: The ims_pcu_get_cdc_union_desc function in drivers/input/misc/ims-pcu.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (ims_pcu_parse_cdc_data out-of-bounds read and system crash) or possibly have unspecified other impact via a crafted USB device.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/101768; https://github.com/torvalds/linux/commit/ea04efee7635c9120d015dcdeeeb6988130cb67a; https://groups.google.com/d/msg/syzkaller/q6jjr1OhqO8/WcA99AVFBAAJ
CVE: CVE-2017-16646
Published: 2017-11-07
Description: drivers/media/usb/dvb-usb/dib0700_devices.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (BUG and system crash) or possibly have unspecified other impact via a crafted USB device.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-476
References: http://www.securityfocus.com/bid/101846; https://groups.google.com/d/msg/syzkaller/-d6ilzbVu_g/OBy8_62mAwAJ; https://patchwork.linuxtv.org/patch/45291/
CVE: CVE-2017-16647
Published: 2017-11-07
Description: drivers/net/usb/asix_devices.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a crafted USB device.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-476
References: http://www.securityfocus.com/bid/101767; https://groups.google.com/d/msg/syzkaller/_9a6pd-p_0E/OnmnplQuAgAJ; https://patchwork.ozlabs.org/patch/834686/
CVE: CVE-2017-16648
Published: 2017-11-07
Description: The dvb_frontend_free function in drivers/media/dvb-core/dvb_frontend.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (use-after-free and system crash) or possibly have unspecified other impact via a crafted USB device. NOTE: the function was later renamed __dvb_frontend_free.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-416
References: http://www.securityfocus.com/bid/101758; https://access.redhat.com/errata/RHSA-2018:2948; https://groups.google.com/d/msg/syzkaller/0HJQqTm0G_g/T931ItskBAAJ
CVE: CVE-2017-16649
Published: 2017-11-07
Description: The usbnet_generic_cdc_bind function in drivers/net/usb/cdc_ether.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (divide-by-zero error and system crash) or possibly have unspecified other impact via a crafted USB device.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-369
References: http://www.securityfocus.com/bid/101761; https://groups.google.com/d/msg/syzkaller/0e0gmaX9R0g/9Me9JcY2BQAJ; https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html
CVE: CVE-2017-16650
Published: 2017-11-07
Description: The qmi_wwan_bind function in drivers/net/usb/qmi_wwan.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (divide-by-zero error and system crash) or possibly have unspecified other impact via a crafted USB device.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-369
References: http://www.securityfocus.com/bid/101791; https://groups.google.com/d/msg/syzkaller/0e0gmaX9R0g/9Me9JcY2BQAJ; https://patchwork.ozlabs.org/patch/834770/
CVE: CVE-2017-16615
Published: 2017-11-08
Description: An exploitable vulnerability exists in the YAML parsing functionality in the parse_yaml_query method in parser.py in MLAlchemy before 0.2.2. When processing YAML-Based queries for data, a YAML parser can execute arbitrary Python commands resulting in command execution because load is used where safe_load should have been used. An attacker can insert Python into loaded YAML to trigger this vulnerability.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/thanethomson/MLAlchemy/commit/bc795757febdcce430d89f9d08f75c32d6989d3c; https://github.com/thanethomson/MLAlchemy/issues/1; https://joel-malwarebenchmark.github.io/blog/2017/11/08/cve-2017-16615-critical-restful-web-applications-vulnerability/
CVE: CVE-2017-16616
Published: 2017-11-08
Description: An exploitable vulnerability exists in the YAML parsing functionality in the YAMLParser method in Interfaces.py in PyAnyAPI before 0.6.1. A YAML parser can execute arbitrary Python commands resulting in command execution because load is used where safe_load should have been used. An attacker can insert Python into loaded YAML to trigger this vulnerability.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/Stranger6667/pyanyapi/issues/41; https://github.com/Stranger6667/pyanyapi/releases/tag/0.6.1; https://joel-malwarebenchmark.github.io/blog/2017/11/08/cve-2017-16616-yamlparser-in-pyanyapi/
CVE: CVE-2017-16618
Published: 2017-11-08
Description: An exploitable vulnerability exists in the YAML loading functionality of util.py in OwlMixin before 2.0.0a12. A "Load YAML" string or file (aka load_yaml or load_yamlf) can execute arbitrary Python commands resulting in command execution because load is used where safe_load should have been used. An attacker can insert Python into loaded YAML to trigger this vulnerability.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/tadashi-aikawa/owlmixin/commit/5d0575303f6df869a515ced4285f24ba721e0d4e; https://github.com/tadashi-aikawa/owlmixin/issues/12; https://joel-malwarebenchmark.github.io/blog/2017/11/08/cve-2017-16618-convert-through-owlmixin/
CVE: CVE-2017-16659
Published: 2017-11-08
Description: The Gentoo mail-filter/assp package 1.9.8.13030 and earlier allows local users to gain privileges by leveraging access to the assp user account to install a Trojan horse /usr/share/assp/assp.pl script.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: https://bugs.gentoo.org/629442; https://bugs.gentoo.org/629442
CVE: CVE-2017-16660
Published: 2017-11-08
Description: Cacti 1.1.27 allows remote authenticated administrators to conduct Remote Code Execution attacks by placing the Log Path under the web root, and then making a remote_agent.php request containing PHP code in a Client-ip header.
CVSS Score: 7.2 (HIGH)
CWE: CWE-668
References: https://github.com/Cacti/cacti/issues/1066; https://github.com/Cacti/cacti/issues/1066
CVE: CVE-2017-16661
Published: 2017-11-08
Description: Cacti 1.1.27 allows remote authenticated administrators to read arbitrary files by placing the Log Path into a private directory, and then making a clog.php?filename= request, as demonstrated by filename=passwd (with a Log Path under /etc) to read /etc/passwd.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-200
References: https://github.com/Cacti/cacti/issues/1066; https://github.com/Cacti/cacti/issues/1066
CVE: CVE-2017-16663
Published: 2017-11-08
Description: In sam2p 0.49.4, there are integer overflows (with resultant heap-based buffer overflows) in input-bmp.ci in the function ReadImage, because "width * height" multiplications occur unsafely.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-190
References: https://github.com/pts/sam2p/issues/16; https://lists.debian.org/debian-lts-announce/2017/11/msg00031.html; https://github.com/pts/sam2p/issues/16
CVE: CVE-2017-12824
Published: 2017-11-08
Description: Special crafted InPage document leads to arbitrary code execution in InPage reader.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/94548; https://securelist.com/inpage-zero-day-exploit-used-to-attack-financial-institutions-in-asia/76717/; http://www.securityfocus.com/bid/94548
CVE: CVE-2017-14360
Published: 2017-11-08
Description: A potential security vulnerability has been identified in HPE Content Manager Workgroup Service v9.00. The vulnerability could be remotely exploited to allow Denial of Service (DoS).
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-400
References: http://www.securityfocus.com/bid/101792; https://softwaresupport.hpe.com/document/-/facetsearch/document/KM03006302; http://www.securityfocus.com/bid/101792
CVE: CVE-2015-3933
Published: 2017-11-08
Description: Multiple SQL injection vulnerabilities in inc/lib/User.class.php in MetalGenix GeniXCMS before 0.0.3-patch allow remote attackers to execute arbitrary SQL commands via the (1) email parameter or (2) userid parameter to register.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/semplon/GeniXCMS/releases/tag/v0.0.3-patch; https://www.exploit-db.com/exploits/37363/; https://github.com/semplon/GeniXCMS/releases/tag/v0.0.3-patch
CVE: CVE-2017-9096
Published: 2017-11-08
Description: The XML parsers in iText before 5.5.12 and 7.x before 7.0.3 do not disable external entities, which might allow remote attackers to conduct XML external entity (XXE) attacks via a crafted PDF.
CVSS Score: 8.8 (HIGH)
CWE: CWE-611
References: http://www.securityfocus.com/archive/1/541483/100/0/threaded; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03902en_us; https://www.compass-security.com/fileadmin/Datein/Research/Advisories/CSNC-2017-017_itext_xml_external_entity_attack.txt
CVE: CVE-2017-16665
Published: 2017-11-08
Description: RemObjects Remoting SDK 9 1.0.0.0 for Delphi is vulnerable to a reflected Cross Site Scripting (XSS) attack via the service parameter to the /soap URI, triggering an invalid attempt to generate WSDL.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://talk.remobjects.com/t/reflected-cross-site-scripting-xss-vulnerability/14662; https://talk.remobjects.com/t/reflected-cross-site-scripting-xss-vulnerability/14662
CVE: CVE-2013-6055
Published: 2017-11-08
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none
CVE: CVE-2017-16667
Published: 2017-11-08
Description: backintime (aka Back in Time) before 1.1.24 did improper escaping/quoting of file paths used as arguments to the 'notify-send' command, leading to some parts of file paths being executed as shell commands within an os.system call in qt4/plugins/notifyplugin.py. This could allow an attacker to craft an unreadable file with a specific name to run arbitrary shell commands.
CVSS Score: 7.8 (HIGH)
CWE: CWE-78
References: https://github.com/bit-team/backintime/commit/cef81d0da93ff601252607df3db1a48f7f6f01b3; https://github.com/bit-team/backintime/issues/834; https://github.com/bit-team/backintime/releases/tag/v1.1.24
CVE: CVE-2017-15085
Published: 2017-11-08
Description: It was discovered that the fix for CVE-2017-12150 was not properly shipped in erratum RHSA-2017:2858 for Red Hat Gluster Storage 3.3 for RHEL 6.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-300, CWE-200
References: http://www.securityfocus.com/bid/101554; https://access.redhat.com/errata/RHSA-2017:3110; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-15085
CVE: CVE-2017-15086
Published: 2017-11-08
Description: It was discovered that the fix for CVE-2017-12151 was not properly shipped in erratum RHSA-2017:2858 for Red Hat Gluster Storage 3.3 for RHEL 6.
CVSS Score: 7.4 (HIGH)
CWE: CWE-300
References: http://www.securityfocus.com/bid/101555; https://access.redhat.com/errata/RHSA-2017:3110; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-15086
CVE: CVE-2017-15087
Published: 2017-11-08
Description: It was discovered that the fix for CVE-2017-12163 was not properly shipped in erratum RHSA-2017:2858 for Red Hat Gluster Storage 3.3 for RHEL 6.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200, CWE-200
References: http://www.securityfocus.com/bid/101556; https://access.redhat.com/errata/RHSA-2017:3110; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-15087
CVE: CVE-2017-15865
Published: 2017-11-08
Description: bgpd in FRRouting (FRR) before 2.0.2 and 3.x before 3.0.2, as used in Cumulus Linux before 3.4.3 and other products, allows remote attackers to obtain sensitive information via a malformed BGP UPDATE packet from a connected peer, which triggers transmission of up to a few thousand unintended bytes because of a mishandled attribute length, aka RN-690 (CM-18492).
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://www.securityfocus.com/bid/101794; https://frrouting.org/community/security.html; https://lists.cumulusnetworks.com/pipermail/cumulus-security-announce/2017-November/000009.html
CVE: CVE-2017-11511
Published: 2017-11-08
Description: The ManageEngine ServiceDesk 9.3.9328 is vulnerable to arbitrary file downloads due to improper restrictions of the pathname used in the filepath parameter for the download-file URL. An unauthenticated remote attacker can use this vulnerability to download arbitrary files.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-200
References: http://www.securityfocus.com/bid/101788; https://www.tenable.com/security/research/tra-2017-31; http://www.securityfocus.com/bid/101788
CVE: CVE-2017-11512
Published: 2017-11-08
Description: The ManageEngine ServiceDesk 9.3.9328 is vulnerable to arbitrary file downloads due to improper restrictions of the pathname used in the name parameter for the download-snapshot URL. An unauthenticated remote attacker can use this vulnerability to download arbitrary files.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-22
References: http://www.securityfocus.com/bid/101789; https://www.tenable.com/security/research/tra-2017-31; http://www.securityfocus.com/bid/101789
CVE: CVE-2017-16669
Published: 2017-11-09
Description: coders/wpg.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted file, related to the AcquireCacheNexus function in magick/pixel_cache.c.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://hg.code.sf.net/p/graphicsmagick/code/rev/135bdcb88b8d; http://hg.code.sf.net/p/graphicsmagick/code/rev/1b9e64a8901e; http://hg.code.sf.net/p/graphicsmagick/code/rev/2a21cda3145b