deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-14121
Published: 2017-09-03
Description: The DecodeNumber function in unrarlib.c in unrar 0.0.1 (aka unrar-free or unrar-gpl) suffers from a NULL pointer dereference flaw triggered by a crafted RAR archive. NOTE: this may be the same as one of the several test cases in the CVE-2017-11189 references.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: http://www.openwall.com/lists/oss-security/2017/08/20/1; https://bugs.debian.org/874061; https://lists.debian.org/debian-lts-announce/2021/02/msg00026.html
CVE: CVE-2017-14122
Published: 2017-09-03
Description: unrar 0.0.1 (aka unrar-free or unrar-gpl) suffers from a stack-based buffer over-read in unrarlib.c, related to ExtrFile and stricomp.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-125
References: http://www.openwall.com/lists/oss-security/2017/08/20/1; https://bugs.debian.org/874060; https://lists.debian.org/debian-lts-announce/2021/02/msg00026.html
CVE: CVE-2017-14123
Published: 2017-09-04
Description: Zoho ManageEngine Firewall Analyzer 12200 has an unrestricted File Upload vulnerability in the "Group Chat" section. Any user can upload files with any extensions. By uploading a PHP file to the server, an attacker can cause it to execute in the server context, as demonstrated by /itplus/FileStorage/302/shell.jsp.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://blogs.securiteam.com/index.php/archives/3228; https://pitstop.manageengine.com/portal/kb/articles/latest-consolidated-patch; https://blogs.securiteam.com/index.php/archives/3228
CVE: CVE-2017-14126
Published: 2017-09-04
Description: The Participants Database plugin before 1.7.5.10 for WordPress has XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://limbenjamin.com/articles/cve-2017-14126-participants-database-xss.html; https://wordpress.org/plugins/participants-database/#developers; https://www.exploit-db.com/exploits/42618/
CVE: CVE-2017-14127
Published: 2017-09-04
Description: Command Injection in the Ping Module in the Web Interface on Technicolor TD5336 OI_Fw_v7 devices allows remote attackers to execute arbitrary OS commands as root via shell metacharacters in the pingAddr parameter to mnt_ping.cgi.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: http://jordyf.me/2017/09/02/technicolor-pwn.html; http://jordyf.me/2017/09/02/technicolor-pwn.html
CVE: CVE-2017-14128
Published: 2017-09-04
Description: The decode_line_info function in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (read_1_byte heap-based buffer over-read and application crash) via a crafted ELF file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/100623; https://security.gentoo.org/glsa/201801-01; https://sourceware.org/bugzilla/show_bug.cgi?id=22059
CVE: CVE-2017-14129
Published: 2017-09-04
Description: The read_section function in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (parse_comp_unit heap-based buffer over-read and application crash) via a crafted ELF file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/100624; https://security.gentoo.org/glsa/201801-01; https://sourceware.org/bugzilla/show_bug.cgi?id=22047
CVE: CVE-2017-14130
Published: 2017-09-04
Description: The _bfd_elf_parse_attributes function in elf-attrs.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (_bfd_elf_attr_strdup heap-based buffer over-read and application crash) via a crafted ELF file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/100625; https://security.gentoo.org/glsa/201801-01; https://sourceware.org/bugzilla/show_bug.cgi?id=22058
CVE: CVE-2017-14132
Published: 2017-09-04
Description: JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16, 1.900.17, 1.900.18, 1.900.19, 1.900.20, 1.900.21, 1.900.22, 1.900.23, 1.900.24, 1.900.25, 1.900.26, 1.900.27, 1.900.28, 1.900.29, 1.900.30, 1.900.31, 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, 2.0.6, 2.0.7, 2.0.8, 2.0.9, 2.0.10, 2.0.11, 2.0.12, 2.0.13, 2.0.14, 2.0.15, 2.0.16 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted image, related to the jas_image_ishomosamp function in libjasper/base/jas_image.c.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00082.html; http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00085.html; https://github.com/mdadams/jasper/issues/147
CVE: CVE-2017-14135
Published: 2017-09-04
Description: enigma2-plugins/blob/master/webadmin/src/WebChilds/Script.py in the webadmin plugin for opendreambox 2.0.0 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the command parameter to the /script URI.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://the-infosec.com/2017/07/05/from-shodan-to-rce-opendreambox-2-0-0-code-execution/; https://the-infosec.com/2017/07/05/from-shodan-to-rce-opendreambox-2-0-0-code-execution/
CVE: CVE-2017-14136
Published: 2017-09-04
Description: OpenCV (Open Source Computer Vision Library) 3.3 has an out-of-bounds write error in the function FillColorRow1 in utils.cpp when reading an image file by using cv::imread. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-12597.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://github.com/opencv/opencv/issues/9443; https://github.com/opencv/opencv/pull/9448; https://github.com/xiaoqx/pocs/blob/master/opencv.md
CVE: CVE-2017-14137
Published: 2017-09-04
Description: ReadWEBPImage in coders/webp.c in ImageMagick 7.0.6-5 has an issue where memory allocation is excessive because it depends only on a length field in a header.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://github.com/ImageMagick/ImageMagick/issues/641; https://security.gentoo.org/glsa/201711-07; https://github.com/ImageMagick/ImageMagick/issues/641
CVE: CVE-2017-14138
Published: 2017-09-04
Description: ImageMagick 7.0.6-5 has a memory leak vulnerability in ReadWEBPImage in coders/webp.c because memory is not freed in certain error cases, as demonstrated by VP8 errors.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-772
References: https://github.com/ImageMagick/ImageMagick/issues/639; https://security.gentoo.org/glsa/201711-07; https://github.com/ImageMagick/ImageMagick/issues/639
CVE: CVE-2017-14139
Published: 2017-09-04
Description: ImageMagick 7.0.6-2 has a memory leak vulnerability in WriteMSLImage in coders/msl.c.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-772
References: https://github.com/ImageMagick/ImageMagick/issues/578; https://security.gentoo.org/glsa/201711-07; https://github.com/ImageMagick/ImageMagick/issues/578
CVE: CVE-2[PII_REDACTED]
Published: 2017-09-05
Description: backend/comics/comics-document.c (aka the comic book backend) in GNOME Evince before 3.24.1 allows remote attackers to execute arbitrary commands via a .cbt file that is a TAR archive containing a filename beginning with a "--" command-line option substring, as demonstrated by a --checkpoint-action=exec=bash at the beginning of the filename.
CVSS Score: 7.8 (HIGH)
References: http://seclists.org/oss-sec/2017/q3/128; http://www.debian.org/security/2017/dsa-3911; http://www.securityfocus.com/bid/99597
CVE: CVE-2017-14108
Published: 2017-09-05
Description: libgedit.a in GNOME gedit through 3.22.1 allows remote attackers to cause a denial of service (CPU consumption) via a file that begins with many '\0' characters.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-400
References: https://bugzilla.gnome.org/show_bug.cgi?id=791037; https://cxsecurity.com/issue/WLB[PII_REDACTED]; https://packetstormsecurity.com/files/143983/libgedit.a-3.22.1-Denial-Of-Service.html
CVE: CVE-2017-14140
Published: 2017-09-05
Description: The move_pages system call in mm/migrate.c in the Linux kernel before 4.12.9 doesn't check the effective uid of the target process, enabling a local attacker to learn the memory layout of a setuid executable despite ASLR.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=197e7e521384a23b9e585178f3f11c9fa08274b9; http://www.debian.org/security/2017/dsa-3981; http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.12.9
CVE: CVE-2017-14145
Published: 2017-09-05
Description: HelpDEZk 1.1.1 has SQL Injection in app\modules\admin\controllers\loginController.php via the admin/login/getWarningInfo/id/ PATH_INFO, related to the selectWarning function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/M4ple/vulnerability/blob/master/helpdezk_sql/helpdezk_sql_injection.md; https://github.com/M4ple/vulnerability/blob/master/helpdezk_sql/helpdezk_sql_injection.md
CVE: CVE-2017-14146
Published: 2017-09-05
Description: HelpDEZk 1.1.1 allows remote authenticated users to execute arbitrary PHP code by uploading a .php attachment and then requesting it in the helpdezk\app\uploads\helpdezk\attachments\ directory.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: https://github.com/M4ple/vulnerability/blob/master/helpdezk_file_upload/helpdezk_file_upload.md; https://github.com/M4ple/vulnerability/blob/master/helpdezk_file_upload/helpdezk_file_upload.md
CVE: CVE-2017-14149
Published: 2017-09-05
Description: GoAhead 3.4.0 through 3.6.5 has a NULL Pointer Dereference in the websDecodeUrl function in http.c, leading to a crash for a "POST / HTTP/1.1" request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://github.com/shadow4u/goaheaddebug/blob/master/README.md; https://github.com/shadow4u/goaheaddebug/blob/master/README.md
CVE: CVE-2016-3086
Published: 2017-09-05
Description: The YARN NodeManager in Apache Hadoop 2.6.x before 2.6.5 and 2.7.x before 2.7.3 can leak the password for credential store provider used by the NodeManager to YARN Applications.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-200
References: http://mail-archives.apache.org/mod_mbox/hadoop-general/201701.mbox/%3C0ed32746-5a53-9051-5877-2b1abd88beb6%40apache.org%3E; http://www.securityfocus.com/bid/95335; http://mail-archives.apache.org/mod_mbox/hadoop-general/201701.mbox/%3C0ed32746-5a53-9051-5877-2b1abd88beb6%40apache.org%3E
CVE: CVE-2017-14151
Published: 2017-09-05
Description: An off-by-one error was discovered in opj_tcd_code_block_enc_allocate_data in lib/openjp2/tcd.c in OpenJPEG 2.2.0. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service (heap-based buffer overflow affecting opj_mqc_flush in lib/openjp2/mqc.c and opj_t1_encode_cblk in lib/openjp2/t1.c) or possibly remote code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.debian.org/security/2017/dsa-4013; http://www.securityfocus.com/bid/100633; https://blogs.gentoo.org/ago/2017/08/16/openjpeg-heap-based-buffer-overflow-in-opj_mqc_flush-mqc-c/
CVE: CVE-2017-14152
Published: 2017-09-05
Description: A mishandled zero case was discovered in opj_j2k_set_cinema_parameters in lib/openjp2/j2k.c in OpenJPEG 2.2.0. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service (heap-based buffer overflow affecting opj_write_bytes_LE in lib/openjp2/cio.c and opj_j2k_write_sot in lib/openjp2/j2k.c) or possibly remote code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://www.debian.org/security/2017/dsa-4013; https://blogs.gentoo.org/ago/2017/08/16/openjpeg-heap-based-buffer-overflow-in-opj_write_bytes_le-cio-c/; https://github.com/uclouvain/openjpeg/commit/4241ae6fbbf1de9658764a80944dc8108f2b4154
CVE: CVE-2017-14156
Published: 2017-09-05
Description: The atyfb_ioctl function in drivers/video/fbdev/aty/atyfb_base.c in the Linux kernel through 4.12.10 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel stack memory by reading locations associated with padding bytes.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.debian.org/security/2017/dsa-3981; http://www.securityfocus.com/bid/100634; https://github.com/torvalds/linux/pull/441
CVE: CVE-2017-14158
Published: 2017-09-05
Description: Scrapy 1.4 allows remote attackers to cause a denial of service (memory consumption) via large files because arbitrarily many files are read into memory, which is especially problematic if the files are then individually written in a separate thread to a slow storage resource, as demonstrated by interaction between dataReceived (in core/downloader/handlers/http11.py) and S3FilesStore.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: http://blog.csdn.net/wangtua/article/details/75228728; https://github.com/scrapy/scrapy/issues/482; http://blog.csdn.net/wangtua/article/details/75228728
CVE: CVE-2017-14159
Published: 2017-09-05
Description: slapd in OpenLDAP 2.4.45 and earlier creates a PID file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for PID file modification before a root script executes a "kill `cat /pathname`" command, as demonstrated by openldap-initscript.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-665
References: http://www.openldap.org/its/index.cgi?findid=8703; https://www.oracle.com/security-alerts/cpuapr2022.html; http://www.openldap.org/its/index.cgi?findid=8703
CVE: CVE-2017-2779
Published: 2017-09-05
Description: An exploitable memory corruption vulnerability exists in the RSRC segment parsing functionality of LabVIEW 2017, LabVIEW 2016, LabVIEW 2015, and LabVIEW 2014. A specially crafted Virtual Instrument (VI) file can cause an attacker controlled looping condition resulting in an arbitrary null write. An attacker controlled VI file can be used to trigger this vulnerability and can potentially result in code execution.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: http://www.ni.com/product-documentation/54099/en/; http://www.securityfocus.com/bid/100519; https://0patch.blogspot.com/2017/09/0patching-rsrc-arbitrary-null-write.html
CVE: CVE-2017-2807
Published: 2017-09-05
Description: An exploitable buffer overflow vulnerability exists in the tag parsing functionality of Ledger-CLI 3.1.1. A specially crafted journal file can cause an integer underflow resulting in code execution. An attacker can construct a malicious journal file to trigger this vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00031.html; http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00029.html; http://www.securityfocus.com/bid/100543
CVE: CVE-2017-2808
Published: 2017-09-05
Description: An exploitable use-after-free vulnerability exists in the account parsing component of the Ledger-CLI 3.1.1. A specially crafted ledger file can cause a use-after-free vulnerability resulting in arbitrary code execution. An attacker can convince a user to load a journal file to trigger this vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-416
References: http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00031.html; http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00029.html; http://www.securityfocus.com/bid/100546
CVE: CVE-2017-2821
Published: 2017-09-05
Description: An exploitable use-after-free exists in the PDF parsing functionality of Lexmark Perspective Document Filters 11.3.0.2400 and 11.4.0.2452. A crafted PDF document can lead to a use-after-free resulting in direct code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: http://www.securityfocus.com/bid/100510; https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0322; http://www.securityfocus.com/bid/100510
CVE: CVE-2017-2822
Published: 2017-09-05
Description: An exploitable code execution vulnerability exists in the image rendering functionality of Lexmark Perceptive Document Filters 11.3.0.2400. A specifically crafted PDF can cause a function call on a corrupted DCTStream to occur, resulting in user controlled data being written to the stack. A maliciously crafted PDF file can be used to trigger this vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/100512; https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0323; http://www.securityfocus.com/bid/100512
CVE: CVE-2017-2862
Published: 2017-09-05
Description: An exploitable heap overflow vulnerability exists in the gdk_pixbuf__jpeg_image_load_increment functionality of Gdk-Pixbuf 2.36.6. A specially crafted jpeg file can cause a heap overflow resulting in remote code execution. An attacker can send a file or url to trigger this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://www.debian.org/security/2017/dsa-3978; http://www.securityfocus.com/bid/100541; https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0366
CVE: CVE-2017-2870
Published: 2017-09-05
Description: An exploitable integer overflow vulnerability exists in the tiff_image_parse functionality of Gdk-Pixbuf 2.36.6 when compiled with Clang. A specially crafted tiff file can cause a heap-overflow resulting in remote code execution. An attacker can send a file or a URL to trigger this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: http://www.securityfocus.com/bid/100541; https://lists.debian.org/debian-lts-announce/2019/12/msg00025.html; https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0377
CVE: CVE-2017-5698
Published: 2017-09-05
Description: Intel Active Management Technology, Intel Standard Manageability, and Intel Small Business Technology firmware versions 11.0.25.3001 and 11.0.26.3000 anti-rollback will not prevent upgrading to firmware version 11.6.x.1xxx which is vulnerable to CVE-2017-5689 and can be performed by a local user with administrative privileges.
CVSS Score: 4.4 (MEDIUM)
References: https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00082&languageid=en-fr; https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00082&languageid=en-fr
CVE: CVE-2017-5716
Published: 2017-09-05
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2017-12865.  Reason: This candidate is a reservation duplicate of CVE-2017-12865.  Notes: All CVE users should reference CVE-2017-12865 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2017-1097
Published: 2017-09-05
Description: IBM Emptoris Strategic Supply Management Platform 10.0.0.x through 10.1.1.x is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 120657.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://www.ibm.com/support/docview.wss?uid=swg22006963; https://exchange.xforce.ibmcloud.com/vulnerabilities/120657; http://www.ibm.com/support/docview.wss?uid=swg22006963
CVE: CVE-2017-1129
Published: 2017-09-05
Description: IBM Notes 8.5 and 9.0 is vulnerable to a denial of service. If a user is persuaded to click on a malicious link, it could cause the Notes client to hang and have to be restarted. IBM X-Force ID: 121370.
CVSS Score: 6.5 (MEDIUM)
References: http://www.ibm.com/support/docview.wss?uid=swg21999385; http://www.ibm.com/support/docview.wss?uid=swg22002103; https://exchange.xforce.ibmcloud.com/vulnerabilities/121370
CVE: CVE-2017-1130
Published: 2017-09-05
Description: IBM Notes 8.5 and 9.0 is vulnerable to a denial of service. If a user is persuaded to click on a malicious link, it would open up many file select dialog boxes which would cause the client hang and have to be restarted. IBM X-Force ID: 121371.
CVSS Score: 6.5 (MEDIUM)
References: http://www.ibm.com/support/docview.wss?uid=swg21999384; http://www.securityfocus.com/bid/100632; https://exchange.xforce.ibmcloud.com/vulnerabilities/121371
CVE: CVE-2017-1457
Published: 2017-09-05
Description: IBM QRadar Network Security 5.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 128376.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=swg22007550; http://www.securityfocus.com/bid/100636; https://exchange.xforce.ibmcloud.com/vulnerabilities/128376
CVE: CVE-2017-1458
Published: 2017-09-05
Description: IBM QRadar Network Security 5.4 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 128377.
CVSS Score: 8.1 (HIGH)
CWE: CWE-611
References: http://www.ibm.com/support/docview.wss?uid=swg22007551; http://www.securityfocus.com/bid/100638; https://exchange.xforce.ibmcloud.com/vulnerabilities/128377
CVE: CVE-2017-1491
Published: 2017-09-05
Description: IBM QRadar Network Security 5.4 supports interaction between multiple actors and allows those actors to negotiate which algorithm should be used as a protection mechanism such as encryption or authentication, but it does not select the strongest algorithm that is available to both parties. IBM X-Force ID: 128689.
CVSS Score: 7.5 (HIGH)
References: http://www.ibm.com/support/docview.wss?uid=swg22007535; https://exchange.xforce.ibmcloud.com/vulnerabilities/128689; http://www.ibm.com/support/docview.wss?uid=swg22007535
CVE: CVE-2017-12474
Published: 2017-09-06
Description: The AP4_AtomSampleTable::GetSample function in Core/Ap4AtomSampleTable.cpp in Bento4 mp42ts before 1.5.0-616 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted mp4 file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://drive.google.com/open?id=0B6wBkDmxMGMKUjNscThnbTlSZ2s; https://drive.google.com/open?id=0B9DojFnTUSNGZ1JfNUc1am9pcnc; https://github.com/axiomatic-systems/Bento4/commit/4d3f0bebd5f8518fd775f671c12bea58c68e814e
CVE: CVE-2017-12475
Published: 2017-09-06
Description: The AP4_Processor::Process function in Core/Ap4Processor.cpp in Bento4 mp4encrypt before 1.5.0-616 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted mp4 file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://drive.google.com/open?id=0B6wBkDmxMGMKUjNscThnbTlSZ2s; https://drive.google.com/open?id=0B9DojFnTUSNGZ1JfNUc1am9pcnc; https://github.com/axiomatic-systems/Bento4/commit/4d3f0bebd5f8518fd775f671c12bea58c68e814e
CVE: CVE-2017-12476
Published: 2017-09-06
Description: The AP4_AvccAtom::InspectFields function in Core/Ap4AvccAtom.cpp in Bento4 mp4dump before 1.5.0-616 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted mp4 file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://drive.google.com/open?id=0B6wBkDmxMGMKUjNscThnbTlSZ2s; https://drive.google.com/open?id=0B9DojFnTUSNGZ1JfNUc1am9pcnc; https://github.com/axiomatic-systems/Bento4/commit/4d3f0bebd5f8518fd775f671c12bea58c68e814e
CVE: CVE-2017-14164
Published: 2017-09-06
Description: A size-validation issue was discovered in opj_j2k_write_sot in lib/openjp2/j2k.c in OpenJPEG 2.2.0. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service (heap-based buffer overflow affecting opj_write_bytes_LE in lib/openjp2/cio.c) or possibly remote code execution. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-14152.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119, CWE-787
References: http://www.securityfocus.com/bid/100677; https://blogs.gentoo.org/ago/2017/09/06/heap-based-buffer-overflow-in-opj_write_bytes_le-cio-c-incomplete-fix-for-cve-2017-14152/; https://github.com/uclouvain/openjpeg/commit/dcac91b8c72f743bda7dbfa9032356bc8110098a