deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2016-6448
Published: 2016-11-03
Description: A vulnerability in the Session Description Protocol (SDP) parser of Cisco Meeting Server could allow an unauthenticated, remote attacker to execute arbitrary code on an affected system. This vulnerability affects the following products: Cisco Meeting Server releases prior to Release 2.0.3, Acano Server releases 1.9.x prior to Release 1.9.5, Acano Server releases 1.8.x prior to Release 1.8.17. More Information: CSCva76004. Known Affected Releases: 1.8.x 1.92.0.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/94076; http://www.securitytracker.com/id/1037181; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161102-cms1
CVE: CVE-2016-6451
Published: 2016-11-03
Description: Multiple vulnerabilities in the web framework code of the Cisco Prime Collaboration Provisioning could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against the user of the web interface of the affected system. More Information: CSCut43061 CSCut43066 CSCut43736 CSCut43738 CSCut43741 CSCut43745 CSCut43748 CSCut43751 CSCut43756 CSCut43759 CSCut43764 CSCut43766. Known Affected Releases: 10.6.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/93917; http://www.securitytracker.com/id/1037112; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161026-pcp
CVE: CVE-2016-6452
Published: 2016-11-03
Description: A vulnerability in the web-based graphical user interface (GUI) of Cisco Prime Home could allow an unauthenticated, remote attacker to bypass authentication. The attacker could be granted full administrator privileges. Cisco Prime Home versions 5.1.1.6 and earlier and 5.2.2.2 and earlier have been confirmed to be vulnerable. Cisco Prime Home versions 6.0 and later are not vulnerable. More Information: CSCvb71732. Known Affected Releases: 5.0 5.0(1) 5.0(1.1) 5.0(1.2) 5.0(2) 5.15.1(0) 5.1(1) 5.1(1.3) 5.1(1.4) 5.1(1.5) 5.1(1.6) 5.1(2) 5.1(2.1) 5.1(2.3) 5.25.2(0.1) 5.2(1.0) 5.2(1.2) 5.2(2.0) 5.2(2.1) 5.2(2.2).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: http://www.securityfocus.com/bid/94070; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161102-cph; http://www.securityfocus.com/bid/94070
CVE: CVE-2016-6453
Published: 2016-11-03
Description: A vulnerability in the web framework code of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to execute arbitrary SQL commands on the database. More Information: CSCva46542. Known Affected Releases: 1.3(0.876).
CVSS Score: 7.3 (HIGH)
CWE: CWE-89
References: http://www.securityfocus.com/bid/93897; http://www.securitytracker.com/id/1037109; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161026-ise
CVE: CVE-2016-6454
Published: 2016-11-03
Description: A cross-site request forgery (CSRF) vulnerability in the web interface of the Cisco Hosted Collaboration Mediation Fulfillment application could allow an unauthenticated, remote attacker to execute unwanted actions. More Information: CSCva54241. Known Affected Releases: 11.5(1). Known Fixed Releases: 11.5(0.98000.216).
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: http://www.securityfocus.com/bid/93916; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161026-hcmf; http://www.securityfocus.com/bid/93916
CVE: CVE-2016-6455
Published: 2016-11-03
Description: A vulnerability in the Slowpath of StarOS for Cisco ASR 5500 Series routers with Data Processing Card 2 (DPC2) could allow an unauthenticated, remote attacker to cause a subset of the subscriber sessions to be disconnected, resulting in a partial denial of service (DoS) condition. This vulnerability affects Cisco ASR 5500 devices with Data Processing Card 2 (DPC2) running StarOS 18.0 or later. More Information: CSCvb12081. Known Affected Releases: 18.7.4 19.5.0 20.0.2.64048 20.2.3 21.0.0. Known Fixed Releases: 18.7.4 18.7.4.65030 18.8.M0.65044 19.5.0 19.5.0.65092 19.5.M0.65023 19.5.M0.65050 20.2.3 20.2.3.64982 20.2.3.65017 20.2.a4.65307 20.3.M0.64984 20.3.M0.65029 20.3.M0.65037 20.3.M0.65071 20.3.T0.64985 20.3.T0.65031 20.3.T0.65043 20.3.T0.65067 21.0.0 21.0.0.65256 21.0.M0.64922 21.0.M0.64983 21.0.M0.65140 21.0.V0.65150 21.1.A0.64932 21.1.A0.64987 21.1.A0.65145 21.1.PP0.65270 21.1.R0.65130 21.1.R0.65135 21.1.R0.65154 21.1.VC0.65203 21.2.A0.65147.
CVSS Score: 7.5 (HIGH)
CWE: CWE-399
References: http://www.securityfocus.com/bid/94071; http://www.securitytracker.com/id/1037186; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161102-asr
CVE: CVE-2016-9176
Published: 2016-11-04
Description: Stack buffer overflow in the send.exe and receive.exe components of Micro Focus Rumba 9.4 and earlier could be used by local attackers or attackers able to inject arguments to these binaries to execute code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/94236; https://www.exploit-db.com/exploits/40648/; http://www.securityfocus.com/bid/94236
CVE: CVE-2016-9177
Published: 2016-11-04
Description: Directory traversal vulnerability in Spark 2.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the URI.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://seclists.org/fulldisclosure/2016/Nov/13; http://www.securityfocus.com/bid/94218; https://access.redhat.com/errata/RHSA-2017:0868
CVE: CVE-2016-9182
Published: 2016-11-04
Description: Exponent CMS 2.4 uses PHP reflection to call a method of a controller class, and then uses the method name to check user permission. But, the method name in PHP reflection is case insensitive, and Exponent CMS permits undefined actions to execute by default, so an attacker can use a capitalized method name to bypass the permission check, e.g., controller=expHTMLEditor&action=preview&editor=ckeditor and controller=expHTMLEditor&action=Preview&editor=ckeditor. An anonymous user will be rejected for the former but can access the latter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-284
References: http://www.securityfocus.com/bid/94227; https://github.com/exponentcms/exponent-cms/commit/684d79424f768db8bb345d5c68aa2a886239492b; http://www.securityfocus.com/bid/94227
CVE: CVE-2016-9183
Published: 2016-11-04
Description: In /framework/modules/ecommerce/controllers/orderController.php of Exponent CMS 2.4.0, untrusted input is passed into selectObjectsBySql. The method selectObjectsBySql of class mysqli_database uses the injectProof method to prevent SQL injection, but this filter can be bypassed easily: it only sanitizes user input if there are odd numbers of ' or " characters. Impact is Information Disclosure.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://www.securityfocus.com/bid/94227; https://github.com/exponentcms/exponent-cms/commit/3b3557e9f6ba193a4c23c8ce5498fa285dddf3f3; http://www.securityfocus.com/bid/94227
CVE: CVE-2016-9184
Published: 2016-11-04
Description: In /framework/modules/core/controllers/expHTMLEditorController.php of Exponent CMS 2.4.0, untrusted input is used to construct a table name, and in the selectObject method in mysqli class, table names are wrapped with a character that common filters do not filter, allowing for SQL Injection. Impact is Information Disclosure.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89, CWE-200
References: http://www.securityfocus.com/bid/94227; https://github.com/exponentcms/exponent-cms/commit/0ce8b94d745b818bd207933d9a2e7f32587c2c89; http://www.securityfocus.com/bid/94227
CVE: CVE-2016-9185
Published: 2016-11-04
Description: In OpenStack Heat, by launching a new Heat stack with a local URL an authenticated user may conduct network discovery revealing internal network configuration. Affected versions are <=5.0.3, >=6.0.0 <=6.1.0, and ==7.0.0.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/94205; https://access.redhat.com/errata/RHSA-2017:1450; https://access.redhat.com/errata/RHSA-2017:1456
CVE: CVE-2016-9186
Published: 2016-11-04
Description: Unrestricted file upload vulnerability in the "legacy course files" and "file manager" modules in Moodle 3.1.2 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, and then accessing it via unspecified vectors.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: http://www.securityfocus.com/bid/94190; https://packetstormsecurity.com/files/139466/Moodle-CMS-3.1.2-Cross-Site-Scripting-File-Upload.html; http://www.securityfocus.com/bid/94190
CVE: CVE-2016-9187
Published: 2016-11-04
Description: Unrestricted file upload vulnerability in the double extension support in the "image" module in Moodle 3.1.2 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, and then accessing it via unspecified vectors.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: http://www.securityfocus.com/bid/94191; https://packetstormsecurity.com/files/139466/Moodle-CMS-3.1.2-Cross-Site-Scripting-File-Upload.html; http://www.securityfocus.com/bid/94191
CVE: CVE-2016-9188
Published: 2016-11-04
Description: Cross-site scripting (XSS) vulnerabilities in Moodle CMS on or before 3.1.2 allow remote attackers to inject arbitrary web script or HTML via the s_additionalhtmlhead, s_additionalhtmltopofbody, and s_additionalhtmlfooter parameters.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/94189; https://packetstormsecurity.com/files/139466/Moodle-CMS-3.1.2-Cross-Site-Scripting-File-Upload.html; http://www.securityfocus.com/bid/94189
CVE: CVE-2016-9189
Published: 2016-11-04
Description: Pillow before 3.3.2 allows context-dependent attackers to obtain sensitive information by using the "crafted image file" approach, related to an "Integer Overflow" issue affecting the Image.core.map_buffer in map.c component.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-190
References: http://pillow.readthedocs.io/en/3.4.x/releasenotes/3.3.2.html; http://www.debian.org/security/2016/dsa-3710; http://www.securityfocus.com/bid/94234
CVE: CVE-2016-9190
Published: 2016-11-04
Description: Pillow before 3.3.2 allows context-dependent attackers to execute arbitrary code by using the "crafted image file" approach, related to an "Insecure Sign Extension" issue affecting the ImagingNew in Storage.c component.
CVSS Score: 7.8 (HIGH)
CWE: CWE-284
References: http://pillow.readthedocs.io/en/3.4.x/releasenotes/3.3.2.html; http://www.debian.org/security/2016/dsa-3710; http://www.securityfocus.com/bid/94234
CVE: CVE-2016-8576
Published: 2016-11-04
Description: The xhci_ring_fetch function in hw/usb/hcd-xhci.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) by leveraging failure to limit the number of link Transfer Request Blocks (TRB) to process.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-770
References: http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=05f43d44e4bc26611ce25fd7d726e483f73363ce; http://lists.opensuse.org/opensuse-updates/2016-12/msg00140.html; http://www.openwall.com/lists/oss-security/2016/10/10/12
CVE: CVE-2016-8577
Published: 2016-11-04
Description: Memory leak in the v9fs_read function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (memory consumption) via vectors related to an I/O read operation.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-772
References: http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=e95c9a493a5a8d6f969e86c9f19f80ffe6587e19; http://lists.opensuse.org/opensuse-updates/2016-12/msg00140.html; http://www.openwall.com/lists/oss-security/2016/10/10/13
CVE: CVE-2016-8578
Published: 2016-11-04
Description: The v9fs_iov_vunmarshal function in fsdev/9p-iov-marshal.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (NULL pointer dereference and QEMU process crash) by sending an empty string parameter to a 9P operation.
CVSS Score: 6.0 (MEDIUM)
References: http://lists.opensuse.org/opensuse-updates/2016-12/msg00140.html; http://www.openwall.com/lists/oss-security/2016/10/10/14; http://www.openwall.com/lists/oss-security/2016/10/10/8
CVE: CVE-2016-8667
Published: 2016-11-04
Description: The rc4030_write function in hw/dma/rc4030.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (divide-by-zero error and QEMU process crash) via a large interval timer reload value.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-369
References: http://lists.opensuse.org/opensuse-updates/2016-12/msg00140.html; http://www.openwall.com/lists/oss-security/2016/10/14/6; http://www.openwall.com/lists/oss-security/2016/10/15/4
CVE: CVE-2016-8668
Published: 2016-11-04
Description: The rocker_io_writel function in hw/net/rocker/rocker.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (out-of-bounds read and QEMU process crash) by leveraging failure to limit DMA buffer size.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-120
References: http://lists.opensuse.org/opensuse-updates/2016-12/msg00140.html; http://www.openwall.com/lists/oss-security/2016/10/14/8; http://www.openwall.com/lists/oss-security/2016/10/15/9
CVE: CVE-2016-8669
Published: 2016-11-04
Description: The serial_update_parameters function in hw/char/serial.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (divide-by-zero error and QEMU process crash) via vectors involving a value of divider greater than baud base.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-369
References: http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=3592fe0c919cf27a81d8e9f9b4f269553418bb01; http://lists.opensuse.org/opensuse-updates/2016-12/msg00140.html; http://www.openwall.com/lists/oss-security/2016/10/14/9
CVE: CVE-2016-8869
Published: 2016-11-04
Description: The register method in the UsersModelRegistration class in controllers/user.php in the Users component in Joomla! before 3.6.4 allows remote attackers to gain privileges by leveraging incorrect use of unfiltered data when registering on a site.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: http://www.rapid7.com/db/modules/auxiliary/admin/http/joomla_registration_privesc; http://www.securityfocus.com/bid/93883; http://www.securitytracker.com/id/1037108
CVE: CVE-2016-8870
Published: 2016-11-04
Description: The register method in the UsersModelRegistration class in controllers/user.php in the Users component in Joomla! before 3.6.4, when registration has been disabled, allows remote attackers to create user accounts by leveraging failure to check the Allow User Registration configuration setting.
CVSS Score: 8.1 (HIGH)
CWE: CWE-20
References: http://www.rapid7.com/db/modules/auxiliary/admin/http/joomla_registration_privesc; http://www.securityfocus.com/bid/93876; http://www.securitytracker.com/id/1037107
CVE: CVE-2016-8909
Published: 2016-11-04
Description: The intel_hda_xfer function in hw/audio/intel-hda.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop and CPU consumption) via an entry with the same value for buffer length and pointer position.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-835
References: http://lists.opensuse.org/opensuse-updates/2016-12/msg00140.html; http://www.openwall.com/lists/oss-security/2016/10/24/1; http://www.openwall.com/lists/oss-security/2016/10/24/4
CVE: CVE-2016-8910
Published: 2016-11-04
Description: The rtl8139_cplus_transmit function in hw/net/rtl8139.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop and CPU consumption) by leveraging failure to limit the ring descriptor count.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-835
References: http://lists.opensuse.org/opensuse-updates/2016-12/msg00140.html; http://www.openwall.com/lists/oss-security/2016/10/24/2; http://www.openwall.com/lists/oss-security/2016/10/24/5
CVE: CVE-2016-9111
Published: 2016-11-07
Description: Incorrect access control mechanisms in Citrix Receiver Desktop Lock 4.5 allow an attacker to bypass the authentication requirement by leveraging physical access to a VDI for temporary disconnection of a LAN cable. NOTE: as of 20161208, the vendor could not reproduce the issue, stating "the researcher was unable to provide us with information that would allow us to confirm the behaviour and, despite extensive investigation on test deployments of supported products, we were unable to reproduce the behaviour as he described. The researcher has also, despite additional requests for information, ceased to respond to us."
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-254, CWE-284
References: http://www.securityfocus.com/bid/94229; http://www.securitytracker.com/id/1037176; https://packetstormsecurity.com/files/139493/Citrix-Receiver-Receiver-Desktop-Lock-4.5-Authentication-Bypass.html
CVE: CVE-2016-9242
Published: 2016-11-07
Description: Multiple SQL injection vulnerabilities in the update method in framework/modules/core/controllers/expRatingController.php in Exponent CMS 2.4.0 allow remote authenticated users to execute arbitrary SQL commands via the (1) content_type or (2) subtype parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: http://www.securityfocus.com/bid/94194; https://github.com/exponentcms/exponent-cms/commit/6172f67620ac13fc2f4e9d650c61937d48e9ecb9; http://www.securityfocus.com/bid/94194
CVE: CVE-2016-7851
Published: 2016-11-08
Description: Adobe Connect version 9.5.6 and earlier does not adequately validate input in the events registration module. This vulnerability could be exploited in cross-site scripting attacks.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/94152; http://www.securitytracker.com/id/1037239; https://helpx.adobe.com/security/products/connect/apsb16-35.html
CVE: CVE-2016-7857
Published: 2016-11-08
Description: Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: http://rhn.redhat.com/errata/RHSA-2016-2676.html; http://www.securityfocus.com/bid/94153; http://www.securitytracker.com/id/1037240
CVE: CVE-2016-7858
Published: 2016-11-08
Description: Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: http://rhn.redhat.com/errata/RHSA-2016-2676.html; http://www.securityfocus.com/bid/94153; http://www.securitytracker.com/id/1037240
CVE: CVE-2016-7859
Published: 2016-11-08
Description: Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: http://rhn.redhat.com/errata/RHSA-2016-2676.html; http://www.securityfocus.com/bid/94153; http://www.securitytracker.com/id/1037240
CVE: CVE-2016-7860
Published: 2016-11-08
Description: Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable type confusion vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-704
References: http://rhn.redhat.com/errata/RHSA-2016-2676.html; http://www.securityfocus.com/bid/94151; http://www.securitytracker.com/id/1037240
CVE: CVE-2016-7861
Published: 2016-11-08
Description: Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable type confusion vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-704
References: http://rhn.redhat.com/errata/RHSA-2016-2676.html; http://www.securityfocus.com/bid/94151; http://www.securitytracker.com/id/1037240
CVE: CVE-2016-7862
Published: 2016-11-08
Description: Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: http://rhn.redhat.com/errata/RHSA-2016-2676.html; http://www.securityfocus.com/bid/94153; http://www.securitytracker.com/id/1037240
CVE: CVE-2016-7863
Published: 2016-11-08
Description: Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: http://rhn.redhat.com/errata/RHSA-2016-2676.html; http://www.securityfocus.com/bid/94153; http://www.securitytracker.com/id/1037240
CVE: CVE-2016-7864
Published: 2016-11-08
Description: Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: http://rhn.redhat.com/errata/RHSA-2016-2676.html; http://www.securityfocus.com/bid/94153; http://www.securitytracker.com/id/1037240
CVE: CVE-2016-7865
Published: 2016-11-08
Description: Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable type confusion vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-704
References: http://rhn.redhat.com/errata/RHSA-2016-2676.html; http://www.securityfocus.com/bid/94151; http://www.securitytracker.com/id/1037240
CVE: CVE-2016-3161
Published: 2016-11-08
Description: For the NVIDIA Quadro, NVS, and GeForce products, GFE GameStream and NVTray Plugin unquoted service path vulnerabilities are examples of the unquoted service path vulnerability in Windows. A successful exploit of a vulnerable service installation can enable malicious code to execute on the system at the system/user privilege level. The CVE-2016-3161 ID is for the GameStream unquoted service path.
CVSS Score: 7.8 (HIGH)
References: http://nvidia.custhelp.com/app/answers/detail/a_id/4213; http://www.securityfocus.com/bid/93251; https://support.lenovo.com/us/en/product_security/ps500070
CVE: CVE-2016-4959
Published: 2016-11-08
Description: For the NVIDIA Quadro, NVS, and GeForce products, there is a Remote Desktop denial of service. A successful exploit of a vulnerable system will result in a kernel null pointer dereference, causing a blue screen crash.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: http://nvidia.custhelp.com/app/answers/detail/a_id/4213; http://www.securityfocus.com/bid/93256; http://www.tripwire.com/state-of-security/vulnerability-management/warning-this-post-contains-graphic-nvidia-content/
CVE: CVE-2016-4960
Published: 2016-11-08
Description: For the NVIDIA Quadro, NVS, and GeForce products, the NVIDIA NVStreamKMS.sys service component is improperly validating user-supplied data through its API entry points causing an elevation of privilege.
CVSS Score: 7.3 (HIGH)
CWE: CWE-20
References: http://nvidia.custhelp.com/app/answers/detail/a_id/4213; http://www.securityfocus.com/bid/93251; https://support.lenovo.com/us/en/product_security/ps500070
CVE: CVE-2016-4961
Published: 2016-11-08
Description: For the NVIDIA Quadro, NVS, and GeForce products, improper sanitization of parameters in the NVStreamKMS.sys API layer caused a denial of service vulnerability (blue screen crash) within the NVIDIA Windows graphics drivers.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: http://nvidia.custhelp.com/app/answers/detail/a_id/4213; http://www.securityfocus.com/bid/93251; https://support.lenovo.com/us/en/product_security/ps500070
CVE: CVE-2016-5025
Published: 2016-11-08
Description: For the NVIDIA Quadro, NVS, and GeForce products, improper sanitization of parameters in the NVAPI support layer causes a denial of service vulnerability (blue screen crash) within the NVIDIA Windows graphics drivers.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-20
References: http://nvidia.custhelp.com/app/answers/detail/a_id/4213; http://www.securityfocus.com/bid/93251; https://support.lenovo.com/us/en/product_security/ps500070