deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-14258
Published: 2017-09-11
Description: In the SDK in Bento4 1.5.0-616, SetItemCount in Core/Ap4StscAtom.h file contains a Write Memory Access Violation vulnerability. It is possible to exploit this vulnerability and possibly execute arbitrary code by opening a crafted .MP4 file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/axiomatic-systems/Bento4/issues/181; https://github.com/axiomatic-systems/Bento4/issues/181
CVE: CVE-2017-14259
Published: 2017-09-11
Description: In the SDK in Bento4 1.5.0-616, the AP4_StscAtom class in Ap4StscAtom.cpp contains a Write Memory Access Violation vulnerability. It is possible to exploit this vulnerability and possibly execute arbitrary code by opening a crafted .MP4 file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/axiomatic-systems/Bento4/issues/181; https://github.com/axiomatic-systems/Bento4/issues/181
CVE: CVE-2017-14260
Published: 2017-09-11
Description: In the SDK in Bento4 1.5.0-616, the AP4_StssAtom class in Ap4StssAtom.cpp contains a Write Memory Access Violation vulnerability. It is possible to exploit this vulnerability and possibly execute arbitrary code by opening a crafted .MP4 file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/axiomatic-systems/Bento4/issues/181; https://github.com/axiomatic-systems/Bento4/issues/181
CVE: CVE-2017-14261
Published: 2017-09-11
Description: In the SDK in Bento4 1.5.0-616, the AP4_StszAtom class in Ap4StszAtom.cpp file contains a Read Memory Access Violation vulnerability. It is possible to exploit this vulnerability by opening a crafted .MP4 file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/axiomatic-systems/Bento4/issues/181; https://github.com/axiomatic-systems/Bento4/issues/181
CVE: CVE-2017-14262
Published: 2017-09-11
Description: On Samsung NVR devices, remote attackers can read the MD5 password hash of the 'admin' account via certain szUserName JSON data to cgi-bin/main-cgi, and login to the device with that hash in the szUserPasswd parameter.
CVSS Score: 8.1 (HIGH)
CWE: CWE-326
References: https://github.com/zzz66686/Samsung_NVR_vul; https://github.com/zzz66686/Samsung_NVR_vul
CVE: CVE-2017-14263
Published: 2017-09-11
Description: Honeywell NVR devices allow remote attackers to create a user account in the admin group by leveraging access to a guest account to obtain a session ID, and then sending that session ID in a userManager.addUser request to the /RPC2 URI. The attacker can login to the device with that new user account to fully control the device.
CVSS Score: 8.1 (HIGH)
CWE: CWE-384
References: https://github.com/zzz66686/Honeywell_NVR_vul; https://github.com/zzz66686/Honeywell_NVR_vul
CVE: CVE-2017-14265
Published: 2017-09-11
Description: A Stack-based Buffer Overflow was discovered in xtrans_interpolate in internal/dcraw_common.cpp in LibRaw before 0.18.3. It could allow a remote denial of service or code execution attack.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://github.com/LibRaw/LibRaw/issues/99; https://github.com/LibRaw/LibRaw/issues/99
CVE: CVE-2017-14267
Published: 2017-09-11
Description: EE 4GEE WiFi MBB (before EE60_00_05.00_31) devices have CSRF, related to goform/AddNewProfile, goform/setWanDisconnect, goform/setSMSAutoRedirectSetting, goform/setReset, and goform/uploadBackupSettings.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://seclists.org/fulldisclosure/2017/Sep/13; https://blog.jameshemmings.co.uk/2017/08/24/ee-4gee-mobile-wifi-router-multiple-security-vulnerabilities-writeup; https://github.com/JamesIT/vuln-advisories-/blob/master/EE-4GEE-Multiple-Vulns/CSRF/AddProfileCSRFXSSPoc.html
CVE: CVE-2017-14268
Published: 2017-09-11
Description: EE 4GEE WiFi MBB (before EE60_00_05.00_31) devices have XSS in the sms_content parameter in a getSMSlist request.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://seclists.org/fulldisclosure/2017/Sep/13; https://blog.jameshemmings.co.uk/2017/08/24/ee-4gee-mobile-wifi-router-multiple-security-vulnerabilities-writeup; http://seclists.org/fulldisclosure/2017/Sep/13
CVE: CVE-2017-14269
Published: 2017-09-11
Description: EE 4GEE WiFi MBB (before EE60_00_05.00_31) devices allow remote attackers to obtain sensitive information via a JSONP endpoint, as demonstrated by passwords and SMS content.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-200
References: http://seclists.org/fulldisclosure/2017/Sep/13; https://blog.jameshemmings.co.uk/2017/08/24/ee-4gee-mobile-wifi-router-multiple-security-vulnerabilities-writeup; http://seclists.org/fulldisclosure/2017/Sep/13
CVE: CVE-2017-7649
Published: 2017-09-11
Description: The network enabled distribution of Kura before 2.1.0 takes control over the device's firewall setup but does not allow IPv6 firewall rules to be configured. Still the Equinox console port 5002 is left open, allowing to log into Kura without any user credentials over unencrypted telnet and executing commands using the Equinox "exec" command. As the process is running as "root" full control over the device can be acquired. IPv6 is also left in auto-configuration mode, accepting router advertisements automatically and assigns a MAC address based IPv6 address.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://bugs.eclipse.org/bugs/show_bug.cgi?id=514681; https://github.com/eclipse/kura/issues/956; https://bugs.eclipse.org/bugs/show_bug.cgi?id=514681
CVE: CVE-2017-7650
Published: 2017-09-11
Description: In Mosquitto before 1.4.12, pattern based ACLs can be bypassed by clients that set their username/client id to '#' or '+'. This allows locally or remotely connected clients to access MQTT topics that they do have the rights to. The same issue may be present in third party authentication/access control plugins for Mosquitto.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-287
References: http://mosquitto.org/2017/05/security-advisory-cve-2017-7650/; http://www.debian.org/security/2017/dsa-3865; http://www.securityfocus.com/bid/98741
CVE: CVE-2015-4523
Published: 2017-09-11
Description: Blue Coat Malware Analysis Appliance (MAA) before 4.2.5 and Malware Analyzer G2 allow remote attackers to bypass a virtual machine protection mechanism and consequently write to arbitrary files, cause a denial of service (host reboot or reset to factory defaults), or execute arbitrary code via vectors related to saving files during analysis.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-264
References: https://bto.bluecoat.com/security-advisory/sa97; https://bto.bluecoat.com/security-advisory/sa97
CVE: CVE-2015-7877
Published: 2017-09-11
Description: Multiple SQL injection vulnerabilities in the User Dashboard module 7.x before 7.x-1.4 for Drupal allow remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.drupal.org/node/2572341; https://www.drupal.org/node/2577901; https://www.drupal.org/node/2572341
CVE: CVE-2015-7879
Published: 2017-09-11
Description: Cross-site scripting (XSS) vulnerability in the Stickynote module 7.x before 7.x-1.3 for Drupal allows remote authenticated users with permission to create or edit a stickynote to inject arbitrary web script or HTML via note text on the admin listing page.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2015/10/21/2; http://www.securityfocus.com/bid/77022; https://www.drupal.org/node/2581519
CVE: CVE-2017-14075
Published: 2017-09-11
Description: This vulnerability allows local attackers to escalate privileges on Jungo WinDriver 12.4.0 and earlier. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the processing of IOCTL 0x953824a7 by the windrvr1240 kernel driver. The issue lies in the failure to properly validate user-supplied data which can result in an out-of-bounds write condition. An attacker can leverage this vulnerability to execute arbitrary code under the context of kernel.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://packetstormsecurity.com/files/144045/Jungo-DriverWizard-WinDrive-OOB-Write-Privilege-Escalation.html; https://www.exploit-db.com/exploits/42625/; http://packetstormsecurity.com/files/144045/Jungo-DriverWizard-WinDrive-OOB-Write-Privilege-Escalation.html
CVE: CVE-2017-14153
Published: 2017-09-11
Description: This vulnerability allows local attackers to escalate privileges on Jungo WinDriver 12.4.0 and earlier. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the processing of IOCTL 0x953824b7 by the windrvr1240 kernel driver. The issue lies in the failure to properly validate user-supplied data which can result in a kernel pool overflow. An attacker can leverage this vulnerability to execute arbitrary code under the context of kernel.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://packetstormsecurity.com/files/144046/Jungo-DriverWizard-WinDrive-Overflow.html; https://www.exploit-db.com/exploits/42624/; http://packetstormsecurity.com/files/144046/Jungo-DriverWizard-WinDrive-Overflow.html
CVE: CVE-2017-14270
Published: 2017-09-11
Description: XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a "User Mode Write AV starting at ntdll_77400000!RtlFillMemoryUlong+0x[PII_REDACTED]000010."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14270; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14270
CVE: CVE-2017-14271
Published: 2017-09-11
Description: XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a "User Mode Write AV starting at ntdll_77400000!RtlImpersonateSelfEx+0x[PII_REDACTED]00024e."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14271; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14271
CVE: CVE-2017-14272
Published: 2017-09-11
Description: XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a "User Mode Write AV starting at jbig2dec+0x[PII_REDACTED]00595d."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14272; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14272
CVE: CVE-2017-14273
Published: 2017-09-11
Description: XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a "User Mode Write AV starting at ntdll_77400000!RtlInterlockedPopEntrySList+0x[PII_REDACTED]0003b0."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14273; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14273
CVE: CVE-2017-14274
Published: 2017-09-11
Description: XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to "Data from Faulting Address controls subsequent Write Address starting at jbig2dec+0x[PII_REDACTED]008706."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14274; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14274
CVE: CVE-2017-14275
Published: 2017-09-11
Description: XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a "User Mode Write AV near NULL starting at wow64!Wow64NotifyDebugger+0x[PII_REDACTED]00001d."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14275; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14275
CVE: CVE-2017-14276
Published: 2017-09-11
Description: XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to "Possible Stack Corruption starting at jbig2dec+0x[PII_REDACTED]002fbe."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14276; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14276
CVE: CVE-2017-14277
Published: 2017-09-11
Description: XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to a "Read Access Violation starting at jbig2dec+0x[PII_REDACTED]005956."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14277; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14277
CVE: CVE-2017-14278
Published: 2017-09-11
Description: XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to a "Read Access Violation starting at jbig2dec+0x[PII_REDACTED]005940."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14278; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14278
CVE: CVE-2017-14279
Published: 2017-09-11
Description: XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to a "Read Access Violation starting at jbig2dec+0x[PII_REDACTED]005643."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14279; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14279
CVE: CVE-2017-14280
Published: 2017-09-11
Description: XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to "Data from Faulting Address controls Branch Selection starting at jbig2dec+0x[PII_REDACTED]00571d."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14280; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14280
CVE: CVE-2017-14281
Published: 2017-09-11
Description: XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to "Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at jbig2dec+0x[PII_REDACTED]0090f1."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14281; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14281
CVE: CVE-2017-14282
Published: 2017-09-11
Description: XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to a "Read Access Violation starting at jbig2dec+0x[PII_REDACTED]005862."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14282; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14282
CVE: CVE-2017-14283
Published: 2017-09-11
Description: XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to a "Read Access Violation starting at jbig2dec+0x[PII_REDACTED]008fe4."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14283; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14283
CVE: CVE-2017-14284
Published: 2017-09-11
Description: XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77400000!RtlGetCurrentDirectory_U+0x[PII_REDACTED]00016c."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14284; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14284
CVE: CVE-2017-14285
Published: 2017-09-11
Description: XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77400000!RtlInterlockedPopEntrySList+0x[PII_REDACTED]00039b."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14285; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14285
CVE: CVE-2017-14286
Published: 2017-09-11
Description: STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a "User Mode Write AV starting at STDUJBIG2File!DllUnregisterServer+0x[PII_REDACTED]00cb8c."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14286; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14286
CVE: CVE-2017-14287
Published: 2017-09-11
Description: STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a "Read Access Violation on Control Flow starting at STDUJBIG2File+0x[PII_REDACTED]0015eb."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14287; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14287
CVE: CVE-2017-14288
Published: 2017-09-11
Description: STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a "User Mode Write AV starting at STDUJBIG2File!DllGetClassObject+0x[PII_REDACTED]002ff7."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14288; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14288
CVE: CVE-2017-14289
Published: 2017-09-11
Description: STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a "User Mode Write AV starting at STDUJBIG2File!DllGetClassObject+0x[PII_REDACTED]00303e."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14289; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14289
CVE: CVE-2017-14290
Published: 2017-09-11
Description: STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to "Heap Corruption starting at wow64!Wow64NotifyDebugger+0x[PII_REDACTED]00001d."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14290; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14290
CVE: CVE-2017-14291
Published: 2017-09-11
Description: STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a "User Mode Write AV starting at STDUJBIG2File!DllUnregisterServer+0x[PII_REDACTED]0076d8."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14291; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14291
CVE: CVE-2017-14292
Published: 2017-09-11
Description: STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a "User Mode Write AV starting at STDUJBIG2File!DllUnregisterServer+0x[PII_REDACTED]00570e."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14292; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14292
CVE: CVE-2017-14293
Published: 2017-09-11
Description: STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to "Heap Corruption starting at wow64!Wow64LdrpInitialize+0x[PII_REDACTED]0008e1."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14293; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14293
CVE: CVE-2017-14294
Published: 2017-09-11
Description: STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a "User Mode Write AV starting at STDUJBIG2File!DllUnregisterServer+0x[PII_REDACTED]00566e."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14294; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14294
CVE: CVE-2017-14295
Published: 2017-09-11
Description: STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to "Data from Faulting Address controls Code Flow starting at STDUJBIG2File+0x[PII_REDACTED]0015e9."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14295; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14295
CVE: CVE-2017-14296
Published: 2017-09-11
Description: STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to "Data from Faulting Address controls subsequent Write Address starting at STDUJBIG2File!DllGetClassObject+0x[PII_REDACTED]0043e6."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14296; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14296
CVE: CVE-2017-14297
Published: 2017-09-11
Description: STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to "Data from Faulting Address controls Code Flow starting at STDUJBIG2File!DllGetClassObject+0x[PII_REDACTED]002f35."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14297; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14297
CVE: CVE-2017-14298
Published: 2017-09-11
Description: STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to "Data from Faulting Address controls subsequent Write Address starting at STDUJBIG2File!DllGetClassObject+0x[PII_REDACTED]0038e8."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14298; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14298
CVE: CVE-2017-14299
Published: 2017-09-11
Description: STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to "Data from Faulting Address controls subsequent Write Address starting at STDUJBIG2File!DllGetClassObject+0x[PII_REDACTED]00384b."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14299; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14299
CVE: CVE-2017-14300
Published: 2017-09-11
Description: STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to "Data from Faulting Address controls subsequent Write Address starting at STDUJBIG2File!DllGetClassObject+0x[PII_REDACTED]004479."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14300; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14300