deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-0360
Published: 2017-04-04
Description: file_open in Tryton 3.x and 4.x through 4.2.2 allows remote authenticated users with certain permissions to read arbitrary files via a "same root name but with a suffix" attack. NOTE: This vulnerability exists because of an incomplete fix for CVE-2016-1242.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-269
References: http://hg.tryton.org/trytond?cmd=changeset%3Bnode=472510fdc6f8; http://www.debian.org/security/2017/dsa-3826; http://www.securityfocus.com/bid/97489
CVE: CVE-2017-7233
Published: 2017-04-04
Description: Django 1.10 before 1.10.7, 1.9 before 1.9.13, and 1.8 before 1.8.18 relies on user input in some cases to redirect the user to an "on success" URL. The security check for these redirects (namely ``django.utils.http.is_safe_url()``) considered some numeric URLs "safe" when they shouldn't be, aka an open redirect vulnerability. Also, if a developer relies on ``is_safe_url()`` to provide safe redirect targets and puts such a URL into a link, they could suffer from an XSS attack.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: http://www.debian.org/security/2017/dsa-3835; http://www.securityfocus.com/bid/97406; http://www.securitytracker.com/id/1038177
CVE: CVE-2017-7234
Published: 2017-04-04
Description: A maliciously crafted URL to a Django (1.10 before 1.10.7, 1.9 before 1.9.13, and 1.8 before 1.8.18) site using the ``django.views.static.serve()`` view could redirect to any other domain, aka an open redirect vulnerability.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: http://www.debian.org/security/2017/dsa-3835; http://www.securityfocus.com/bid/97401; http://www.securitytracker.com/id/1038177
CVE: CVE-2017-7418
Published: 2017-04-04
Description: ProFTPD before 1.3.5e and 1.3.6 before 1.3.6rc5 controls whether the home directory of a user could contain a symbolic link through the AllowChrootSymlinks configuration option, but checks only the last path component when enforcing AllowChrootSymlinks. Attackers with local access could bypass the AllowChrootSymlinks control by replacing a path component (other than the last one) with a symbolic link. The threat model includes an attacker who is not granted full filesystem access by a hosting provider, but can reconfigure the home directory of an FTP user.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-59
References: http://bugs.proftpd.org/show_bug.cgi?id=4295; http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00004.html; http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00022.html
CVE: CVE-2016-3740
Published: 2017-04-04
Description: Heap-based buffer overflow in the CreateFXPDFConvertor function in ConvertToPdf_x86.dll in Foxit Reader 7.3.4.311 allows remote attackers to execute arbitrary code via a large SamplesPerPixel value in a crafted TIFF image that is mishandled during PDF conversion. This is fixed in 8.0.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://0patch.blogspot.com/2016/07/0patching-foxit-readers-heap-buffer.html; https://www.foxitsoftware.com/support/security-bulletins.php; https://0patch.blogspot.com/2016/07/0patching-foxit-readers-heap-buffer.html
CVE: CVE-2016-5870
Published: 2017-04-04
Description: The msm_ipc_router_close function in net/ipc_router/ipc_router_socket.c in the ipc_router component for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allow attackers to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact by triggering failure of an accept system call for an AF_MSM_IPC socket.
CVSS Score: 7.8 (HIGH)
CWE: CWE-476
References: http://www.securityfocus.com/bid/97414; https://source.codeaurora.org/quic/la//kernel/msm-3.18/commit/?id=71fe5361cbef34e2d606b79e8936a910a3e95566; https://www.codeaurora.org/null-pointer-dereference-when-processing-accept-system-call-user-process-afmsmipc-sockets-cve-2016
CVE: CVE-2017-5649
Published: 2017-04-04
Description: Apache Geode before 1.1.1, when a cluster has enabled security by setting the security-manager property, allows remote authenticated users with CLUSTER:READ but not DATA:READ permission to access the data browser page in Pulse and consequently execute an OQL query that exposes data stored in the cluster.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://mail-archives.apache.org/mod_mbox/geode-user/201704.mbox/%3cCAEwge-E4y=EVfhwpfRwsbnBH_hBS3Q-BJS+1BX5omYGW4dnR1w%40mail.gmail.com%3e; http://www.securityfocus.com/bid/97378; http://mail-archives.apache.org/mod_mbox/geode-user/201704.mbox/%3cCAEwge-E4y=EVfhwpfRwsbnBH_hBS3Q-BJS+1BX5omYGW4dnR1w%40mail.gmail.com%3e
CVE: CVE-2017-2671
Published: 2017-04-05
Description: The ping_unhash function in net/ipv4/ping.c in the Linux kernel through 4.10.8 is too late in obtaining a certain lock and consequently cannot ensure that disconnect function calls are safe, which allows local users to cause a denial of service (panic) by leveraging access to the protocol value of IPPROTO_ICMP in a socket system call.
CVSS Score: 5.5 (MEDIUM)
References: http://openwall.com/lists/oss-security/2017/04/04/8; http://www.securityfocus.com/bid/97407; https://access.redhat.com/errata/RHSA-2017:1842
CVE: CVE-2017-7358
Published: 2017-04-05
Description: In LightDM through 1.22.0, a directory traversal issue in debian/guest-account.sh allows local attackers to own arbitrary directory path locations and escalate privileges to root when the guest user logs out.
CVSS Score: 7.3 (HIGH)
CWE: CWE-22
References: http://bazaar.launchpad.net/~lightdm-team/lightdm/trunk/revision/2478; http://www.securityfocus.com/bid/97486; https://launchpad.net/bugs/1677924
CVE: CVE-2017-0325
Published: 2017-04-05
Description: An elevation of privilege vulnerability in the NVIDIA I2C HID driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel 3.10 and Kernel 3.18. Android ID: A-33040280. References: N-CVE-2017-0325.
CVSS Score: 7.0 (HIGH)
CWE: CWE-787
References: http://nvidia.custhelp.com/app/answers/detail/a_id/4561; http://www.securityfocus.com/bid/97350; http://www.securitytracker.com/id/1038201
CVE: CVE-2017-0327
Published: 2017-04-05
Description: An elevation of privilege vulnerability in the NVIDIA crypto driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel 3.10. Android ID: A-33893669. References: N-CVE-2017-0327.
CVSS Score: 7.0 (HIGH)
CWE: CWE-120
References: http://nvidia.custhelp.com/app/answers/detail/a_id/4561; http://www.securityfocus.com/bid/97333; http://www.securitytracker.com/id/1038201
CVE: CVE-2017-0328
Published: 2017-04-05
Description: An information disclosure vulnerability in the NVIDIA crypto driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel 3.10. Android ID: A-33898322. References: N-CVE-2017-0328.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/97347; http://www.securitytracker.com/id/1038201; https://source.android.com/security/bulletin/2017-04-01.html
CVE: CVE-2017-0329
Published: 2017-04-05
Description: An elevation of privilege vulnerability in the NVIDIA boot and power management processor driver could enable a local malicious application to execute arbitrary code within the context of the boot and power management processor. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel 3.18. Android ID:A-34115304. References: N-CVE-2017-0329.
CVSS Score: 7.0 (HIGH)
References: http://www.securityfocus.com/bid/97353; http://www.securitytracker.com/id/1038201; https://source.android.com/security/bulletin/2017-04-01.html
CVE: CVE-2017-0330
Published: 2017-04-05
Description: An information disclosure vulnerability in the NVIDIA crypto driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel 3.10. Android ID: A-33899858. References: N-CVE-2017-0330.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/97347; http://www.securitytracker.com/id/1038201; https://nvidia.custhelp.com/app/answers/detail/a_id/4787
CVE: CVE-2017-0332
Published: 2017-04-05
Description: An elevation of privilege vulnerability in the NVIDIA crypto driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel 3.10. Android ID: A-33812508. References: N-CVE-2017-0332.
CVSS Score: 7.0 (HIGH)
CWE: CWE-787
References: http://nvidia.custhelp.com/app/answers/detail/a_id/4561; http://www.securityfocus.com/bid/97333; http://www.securitytracker.com/id/1038201
CVE: CVE-2017-0339
Published: 2017-04-05
Description: An elevation of privilege vulnerability in the NVIDIA crypto driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel 3.10. Android ID: A-27930566. References: N-CVE-2017-0339.
CVSS Score: 7.0 (HIGH)
References: http://www.securityfocus.com/bid/97333; http://www.securitytracker.com/id/1038201; https://source.android.com/security/bulletin/2017-04-01.html
CVE: CVE-2017-6956
Published: 2017-04-05
Description: On the Broadcom Wi-Fi HardMAC SoC with fbt firmware, a stack buffer overflow occurs when handling an 802.11r (FT) authentication response, leading to remote code execution via a crafted access point that sends a long R0KH-ID field in a Fast BSS Transition Information Element (FT-IE).
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: https://bugs.chromium.org/p/project-zero/issues/detail?id=1059; https://googleprojectzero.blogspot.com/2017/04/over-air-exploiting-broadcoms-wi-fi_4.html; https://bugs.chromium.org/p/project-zero/issues/detail?id=1059
CVE: CVE-2017-6975
Published: 2017-04-05
Description: Wi-Fi in Apple iOS before 10.3.1 does not prevent CVE-2017-6956 stack buffer overflow exploitation via a crafted access point.  NOTE: because an operating system could potentially isolate itself from CVE-2017-6956 exploitation without patching Broadcom firmware functions, there is a separate CVE ID for the operating-system behavior.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://seclists.org/fulldisclosure/2019/May/24; http://www.securityfocus.com/bid/97328; http://www.securitytracker.com/id/1038172
CVE: CVE-2016-9091
Published: 2017-04-05
Description: Blue Coat Advanced Secure Gateway (ASG) 6.6 before 6.6.5.4 and Content Analysis System (CAS) 1.3 before 1.3.7.4 are susceptible to an OS command injection vulnerability. An authenticated malicious administrator can execute arbitrary OS commands with elevated system privileges.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: http://www.securityfocus.com/bid/97372; https://bto.bluecoat.com/security-advisory/sa138; https://www.exploit-db.com/exploits/41785/
CVE: CVE-2017-6338
Published: 2017-04-05
Description: Multiple Access Control issues in Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5 before CP 1746 allow an authenticated, remote user with low privileges like 'Reports Only' or 'Auditor' to change FTP Access Control Settings, create or modify reports, or upload an HTTPS Decryption Certificate and Private Key.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-732
References: http://www.securityfocus.com/bid/97482; https://success.trendmicro.com/solution/1116960; https://www.qualys.com/2017/01/12/qsa-2017-01-12/qsa-2017-01-12.pdf
CVE: CVE-2017-6339
Published: 2017-04-05
Description: Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5 before CP 1746 mismanages certain key and certificate data. Per IWSVA documentation, by default, IWSVA acts as a private Certificate Authority (CA) and dynamically generates digital certificates that are sent to client browsers to complete a secure passage for HTTPS connections. It also allows administrators to upload their own certificates signed by a root CA. An attacker with low privileges can download the current CA certificate and Private Key (either the default ones or ones uploaded by administrators) and use those to decrypt HTTPS traffic, thus compromising confidentiality. Also, the default Private Key on this appliance is encrypted with a very weak passphrase. If an appliance uses the default Certificate and Private Key provided by Trend Micro, an attacker can simply download these and decrypt the Private Key using the default/weak passphrase.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-269, CWE-521
References: http://www.securityfocus.com/bid/97492; https://success.trendmicro.com/solution/1116960; https://www.qualys.com/2017/01/12/qsa-2017-01-12/qsa-2017-01-12.pdf
CVE: CVE-2017-6340
Published: 2017-04-05
Description: Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5 before CP 1746 does not sanitize a rest/commonlog/report/template name field, which allows a 'Reports Only' user to inject malicious JavaScript while creating a new report. Additionally, IWSVA implements incorrect access control that allows any authenticated, remote user (even with low privileges like 'Auditor') to create or modify reports, and consequently take advantage of this XSS vulnerability. The JavaScript is executed when victims visit reports or auditlog pages.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/97487; https://success.trendmicro.com/solution/1116960; https://www.qualys.com/2017/01/12/qsa-2017-01-12/qsa-2017-01-12.pdf
CVE: CVE-2014-9829
Published: 2017-04-05
Description: coders/sun.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds access) via a crafted sun file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://www.openwall.com/lists/oss-security/2016/06/02/13; https://anonscm.debian.org/cgit/collab-maint/imagemagick.git/commit/?h=debian-patches/6.8.9.9-4-for-upstream&id=8e72cbfca8db81132319af14d1f33a3e833666d7; https://bugzilla.redhat.com/show_bug.cgi?id=1343485
CVE: CVE-2015-4680
Published: 2017-04-05
Description: FreeRADIUS 2.2.x before 2.2.8 and 3.0.x before 3.0.9 does not properly check revocation of intermediate CA certificates.
CVSS Score: 7.5 (HIGH)
CWE: CWE-295
References: http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00010.html; http://packetstormsecurity.com/files/132415/FreeRADIUS-Insufficient-CRL-Application.html; http://www.ocert.org/advisories/ocert-2015-008.html
CVE: CVE-2016-3015
Published: 2017-04-05
Description: IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference #: 1998887.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=swg21998887; http://www.securityfocus.com/bid/97279; http://www.ibm.com/support/docview.wss?uid=swg21998887
CVE: CVE-2016-3031
Published: 2017-04-05
Description: IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference #: 1998887.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=swg21998887; http://www.securityfocus.com/bid/97280; http://www.ibm.com/support/docview.wss?uid=swg21998887
CVE: CVE-2016-6100
Published: 2017-04-05
Description: IBM Disposal and Governance Management for IT and IBM Global Retention Policy and Schedule Management, components of IBM Atlas Policy Suite 6.0.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM Reference #: 2000771.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://www.ibm.com/support/docview.wss?uid=swg22000771; http://www.securityfocus.com/bid/97326; http://www.ibm.com/support/docview.wss?uid=swg22000771
CVE: CVE-2017-1180
Published: 2017-04-05
Description: The IBM TRIRIGA Document Manager contains a vulnerability that could allow an authenticated user to execute actions they did not have access to. IBM Reference #: 2001084.
CVSS Score: 5.3 (MEDIUM)
References: http://www.ibm.com/support/docview.wss?uid=swg22001084; http://www.securityfocus.com/bid/97273; https://exchange.xforce.ibmcloud.com/vulnerabilities/123432?cm_mc_uid=[PII_REDACTED][PII_REDACTED]221&cm_mc_sid_50200000=[PII_REDACTED]
CVE: CVE-2017-0883
Published: 2017-04-05
Description: Nextcloud Server before 9.0.55 and 10.0.2 suffers from a permission increase on re-sharing via OCS API issue. A permission related issue within the OCS sharing API allowed an authenticated adversary to reshare shared files with an increasing permission set. This may allow an attacker to edit files in a share despite having only a 'read' permission set. Note that this only affects folders and files that the adversary has at least read-only permissions for.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-275, CWE-732
References: https://hackerone.com/reports/169680; https://nextcloud.com/security/advisory/?id=nc-sa-2017-001; https://hackerone.com/reports/169680
CVE: CVE-2017-0884
Published: 2017-04-05
Description: Nextcloud Server before 9.0.55 and 10.0.2 suffers from a creation of folders in read-only folders despite lacking permissions issue. Due to a logical error in the file caching layer an authenticated adversary is able to create empty folders inside a shared folder. Note that this only affects folders and files that the adversary has at least read-only permissions for.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-275, CWE-732
References: https://hackerone.com/reports/169680; https://nextcloud.com/security/advisory/?id=nc-sa-2017-002; https://hackerone.com/reports/169680
CVE: CVE-2017-0885
Published: 2017-04-05
Description: Nextcloud Server before 9.0.55 and 10.0.2 suffers from a error message disclosing existence of file in write-only share. Due to an error in the application logic an adversary with access to a write-only share may enumerate the names of existing files and subfolders by comparing the exception messages.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-209, CWE-200
References: https://hackerone.com/reports/174524; https://nextcloud.com/security/advisory/?id=nc-sa-2017-003; https://hackerone.com/reports/174524
CVE: CVE-2017-0886
Published: 2017-04-05
Description: Nextcloud Server before 9.0.55 and 10.0.2 suffers from a Denial of Service attack. Due to an error in the application logic an authenticated adversary may trigger an endless recursion in the application leading to a potential Denial of Service.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-674, CWE-674
References: https://hackerone.com/reports/174524; https://nextcloud.com/security/advisory/?id=nc-sa-2017-004; https://hackerone.com/reports/174524
CVE: CVE-2017-0887
Published: 2017-04-05
Description: Nextcloud Server before 9.0.55 and 10.0.2 suffers from a bypass in the quota limitation. Due to not properly sanitizing values provided by the `OC-Total-Length` HTTP header an authenticated adversary may be able to exceed their configured user quota. Thus using more space than allowed by the administrator.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-807, CWE-20
References: https://hackerone.com/reports/173622; https://nextcloud.com/security/advisory/?id=nc-sa-2017-005; https://hackerone.com/reports/173622
CVE: CVE-2017-0888
Published: 2017-04-05
Description: Nextcloud Server before 9.0.55 and 10.0.2 suffers from a Content-Spoofing vulnerability in the "files" app. The top navigation bar displayed in the files list contained partially user-controllable input leading to a potential misrepresentation of information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-451, CWE-20
References: http://www.securityfocus.com/bid/97491; https://hackerone.com/reports/179073; https://nextcloud.com/security/advisory/?id=nc-sa-2017-006
CVE: CVE-2017-7443
Published: 2017-04-05
Description: apt-cacher before 1.7.15 and apt-cacher-ng before 3.4 allow HTTP response splitting via encoded newline characters, related to lack of blocking for the %0[ad] regular expression.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-113
References: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=858739; https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=858833; https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=858739
CVE: CVE-2017-7444
Published: 2017-04-05
Description: In Veritas System Recovery before 16 SP1, there is a DLL hijacking vulnerability in the patch installer if an attacker has write access to the directory from which the product is executed.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/97483; https://www.veritas.com/content/support/en_US/security/VTS17-001.html#Issue1; http://www.securityfocus.com/bid/97483
CVE: CVE-2015-9019
Published: 2017-04-05
Description: In libxslt 1.1.29 and earlier, the EXSLT math.random function was not initialized with a random seed during startup, which could cause usage of this function to produce predictable outputs.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-330
References: https://bugzilla.gnome.org/show_bug.cgi?id=758400; https://bugzilla.suse.com/show_bug.cgi?id=934119; https://bugzilla.gnome.org/show_bug.cgi?id=758400
CVE: CVE-2017-7446
Published: 2017-04-05
Description: HelpDEZk 1.1.1 has CSRF in admin/home#/person/ with an impact of obtaining admin privileges.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://rungga.blogspot.co.id/2017/04/multiple-csrf-remote-code-execution.html; http://www.securityfocus.com/bid/97484; https://github.com/albandes/helpdezk/issues/2
CVE: CVE-2017-7447
Published: 2017-04-05
Description: HelpDEZk 1.1.1 has CSRF in admin/home#/logos/ with an impact of remote execution of arbitrary PHP code.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://rungga.blogspot.co.id/2017/04/multiple-csrf-remote-code-execution.html; http://www.securityfocus.com/bid/97485; https://github.com/albandes/helpdezk/issues/2
CVE: CVE-2017-7448
Published: 2017-04-05
Description: The allocate_channel_framebuffer function in uncompressed_components.hh in Dropbox Lepton 1.2.1 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a malformed JPEG image.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-369
References: http://www.securityfocus.com/bid/97490; https://github.com/dropbox/lepton/commit/7789d99ac156adfd7bbf66e7824bd3e948a74cf7; https://github.com/dropbox/lepton/issues/86
CVE: CVE-2017-7450
Published: 2017-04-05
Description: AIRTAME HDMI dongle with firmware before 2.2.0 allows unauthenticated access to a big part of the management interface. It is possible to extract all information including the Wi-Fi password, reboot, or force a software update at an arbitrary time.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: http://cweiske.de/tagebuch/airtame-security.htm; http://cweiske.de/tagebuch/airtame-security.htm
CVE: CVE-2017-7452
Published: 2017-04-06
Description: The iwbmp_read_info_header function in imagew-bmp.c in libimageworsener.a in ImageWorsener 1.3.0 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: http://www.securityfocus.com/bid/97496; https://github.com/jsummers/imageworsener/issues/8; https://security.gentoo.org/glsa/201706-06