deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-4888
Published: 2018-02-27
Description: An issue was discovered in Adobe Acrobat Reader 2[PII_REDACTED]0 and earlier versions, 2[PII_REDACTED]0 and earlier versions, 2[PII_REDACTED]4 and earlier versions. This vulnerability is an instance of a use after free vulnerability. The vulnerability is triggered by a crafted PDF file that can cause a memory access violation exception in the XFA engine because of a dangling reference left as a consequence of freeing an object in the computation that manipulates internal nodes in a graph representation of a document object model used in XFA. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: http://www.securityfocus.com/bid/102995; http://www.securitytracker.com/id/1040364; https://helpx.adobe.com/security/products/acrobat/apsb18-02.html
CVE: CVE-2018-4889
Published: 2018-02-27
Description: An issue was discovered in Adobe Acrobat Reader 2[PII_REDACTED]0 and earlier versions, 2[PII_REDACTED]0 and earlier versions, 2[PII_REDACTED]4 and earlier versions. This vulnerability occurs as a result of computation that reads data that is past the end of the target buffer; the computation is part of the XPS image conversion. A successful attack can lead to sensitive data exposure.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/102996; http://www.securitytracker.com/id/1040364; https://helpx.adobe.com/security/products/acrobat/apsb18-02.html
CVE: CVE-2018-4890
Published: 2018-02-27
Description: An issue was discovered in Adobe Acrobat Reader 2[PII_REDACTED]0 and earlier versions, 2[PII_REDACTED]0 and earlier versions, 2[PII_REDACTED]4 and earlier versions. This vulnerability is an instance of a heap overflow vulnerability in the image conversion engine, when handling JPEG data embedded within an XPS file. A successful attack can lead to code corruption, control-flow hijack, or an information leak attack.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/102992; http://www.securitytracker.com/id/1040364; https://helpx.adobe.com/security/products/acrobat/apsb18-02.html
CVE: CVE-2018-4891
Published: 2018-02-27
Description: An issue was discovered in Adobe Acrobat Reader 2[PII_REDACTED]0 and earlier versions, 2[PII_REDACTED]0 and earlier versions, 2[PII_REDACTED]4 and earlier versions. This vulnerability occurs as a result of computation that reads data that is past the end of the target buffer; the computation is part of the XPS module that handles TIFF data. A successful attack can lead to sensitive data exposure.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/102996; http://www.securitytracker.com/id/1040364; https://helpx.adobe.com/security/products/acrobat/apsb18-02.html
CVE: CVE-2018-4892
Published: 2018-02-27
Description: An issue was discovered in Adobe Acrobat Reader 2[PII_REDACTED]0 and earlier versions, 2[PII_REDACTED]0 and earlier versions, 2[PII_REDACTED]4 and earlier versions. This vulnerability is an instance of a use after free vulnerability in the JBIG2 decoder. The vulnerability is triggered by a crafted PDF file that contains a malformed JBIG2 stream. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: http://www.securityfocus.com/bid/102995; http://www.securitytracker.com/id/1040364; https://helpx.adobe.com/security/products/acrobat/apsb18-02.html
CVE: CVE-2018-4893
Published: 2018-02-27
Description: An issue was discovered in Adobe Acrobat Reader 2[PII_REDACTED]0 and earlier versions, 2[PII_REDACTED]0 and earlier versions, 2[PII_REDACTED]4 and earlier versions. This vulnerability occurs as a result of computation that reads data that is past the end of the target buffer; the computation is part of XPS font processing. A successful attack can lead to sensitive data exposure.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/102996; http://www.securitytracker.com/id/1040364; https://helpx.adobe.com/security/products/acrobat/apsb18-02.html
CVE: CVE-2018-4894
Published: 2018-02-27
Description: An issue was discovered in Adobe Acrobat Reader 2[PII_REDACTED]0 and earlier versions, 2[PII_REDACTED]0 and earlier versions, 2[PII_REDACTED]4 and earlier versions. This vulnerability occurs as a result of computation that reads data that is past the end of the target buffer; the computation is part of the XPS font processing. A successful attack can lead to sensitive data exposure.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/102996; http://www.securitytracker.com/id/1040364; https://helpx.adobe.com/security/products/acrobat/apsb18-02.html
CVE: CVE-2018-4895
Published: 2018-02-27
Description: An issue was discovered in Adobe Acrobat Reader 2[PII_REDACTED]0 and earlier versions, 2[PII_REDACTED]0 and earlier versions, 2[PII_REDACTED]4 and earlier versions. The vulnerability is caused by the computation that writes data past the end of the intended buffer; the computation is part of the image conversion engine when processing Enhanced Metafile Format Plus (EMF+) data. An attacker can potentially leverage the vulnerability to corrupt sensitive data or execute arbitrary code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: http://www.securityfocus.com/bid/102994; http://www.securitytracker.com/id/1040364; https://helpx.adobe.com/security/products/acrobat/apsb18-02.html
CVE: CVE-2018-4896
Published: 2018-02-27
Description: An issue was discovered in Adobe Acrobat Reader 2[PII_REDACTED]0 and earlier versions, 2[PII_REDACTED]0 and earlier versions, 2[PII_REDACTED]4 and earlier versions. This vulnerability occurs as a result of computation that reads data that is past the end of the target buffer; the computation is part of the image conversion module that handles Enhanced Metafile Format Plus (EMF+) data. A successful attack can lead to sensitive data exposure.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/102996; http://www.securitytracker.com/id/1040364; https://helpx.adobe.com/security/products/acrobat/apsb18-02.html
CVE: CVE-2018-4897
Published: 2018-02-27
Description: An issue was discovered in Adobe Acrobat Reader 2[PII_REDACTED]0 and earlier versions, 2[PII_REDACTED]0 and earlier versions, 2[PII_REDACTED]4 and earlier versions. This vulnerability occurs as a result of computation that reads data that is past the end of the target buffer; the computation is part of the image conversion module that parses TIFF metadata. A successful attack can lead to sensitive data exposure.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/102996; http://www.securitytracker.com/id/1040364; https://helpx.adobe.com/security/products/acrobat/apsb18-02.html
CVE: CVE-2018-4898
Published: 2018-02-27
Description: An issue was discovered in Adobe Acrobat Reader 2[PII_REDACTED]0 and earlier versions, 2[PII_REDACTED]0 and earlier versions, 2[PII_REDACTED]4 and earlier versions. The vulnerability is caused by the computation that writes data past the end of the intended buffer; the computation is part of the XPS engine that adds vector graphics and images to a fixed page. An attacker can potentially leverage the vulnerability to corrupt sensitive data or execute arbitrary code.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/102994; http://www.securitytracker.com/id/1040364; https://helpx.adobe.com/security/products/acrobat/apsb18-02.html
CVE: CVE-2018-4899
Published: 2018-02-27
Description: An issue was discovered in Adobe Acrobat Reader 2[PII_REDACTED]0 and earlier versions, 2[PII_REDACTED]0 and earlier versions, 2[PII_REDACTED]4 and earlier versions. This vulnerability occurs as a result of computation that reads data that is past the end of the target buffer; the computation is part of the initial XPS page processing. A successful attack can lead to sensitive data exposure.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/102996; http://www.securitytracker.com/id/1040364; https://helpx.adobe.com/security/products/acrobat/apsb18-02.html
CVE: CVE-2018-4900
Published: 2018-02-27
Description: An issue was discovered in Adobe Acrobat Reader 2[PII_REDACTED]0 and earlier versions, 2[PII_REDACTED]0 and earlier versions, 2[PII_REDACTED]4 and earlier versions. This vulnerability occurs as a result of computation that reads data that is past the end of the target buffer; the computation is part of JavaScript manipulation of an Annotation object. A successful attack can lead to sensitive data exposure.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/102996; http://www.securitytracker.com/id/1040364; https://helpx.adobe.com/security/products/acrobat/apsb18-02.html
CVE: CVE-2018-4901
Published: 2018-02-27
Description: An issue was discovered in Adobe Acrobat Reader 2[PII_REDACTED]0 and earlier versions, 2[PII_REDACTED]0 and earlier versions, 2[PII_REDACTED]4 and earlier versions. The vulnerability is caused by the computation that writes data past the end of the intended buffer; the computation is part of the document identity representation. An attacker can potentially leverage the vulnerability to corrupt sensitive data or execute arbitrary code.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/102994; http://www.securitytracker.com/id/1040364; https://helpx.adobe.com/security/products/acrobat/apsb18-02.html
CVE: CVE-2018-4902
Published: 2018-02-27
Description: An issue was discovered in Adobe Acrobat Reader 2[PII_REDACTED]0 and earlier versions, 2[PII_REDACTED]0 and earlier versions, 2[PII_REDACTED]4 and earlier versions. This vulnerability is an instance of a use after free vulnerability in the rendering engine. The vulnerability is triggered by a crafted PDF file containing a video annotation (and corresponding media files) that is activated by the embedded JavaScript. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: http://www.securityfocus.com/bid/102995; http://www.securitytracker.com/id/1040364; https://helpx.adobe.com/security/products/acrobat/apsb18-02.html
CVE: CVE-2018-4903
Published: 2018-02-27
Description: An issue was discovered in Adobe Acrobat Reader 2[PII_REDACTED]0 and earlier versions, 2[PII_REDACTED]0 and earlier versions, 2[PII_REDACTED]4 and earlier versions. This vulnerability occurs as a result of computation that reads data that is past the end of the target buffer; the computation is part of the TIFF processing within the XPS module. A successful attack can lead to sensitive data exposure.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/102996; http://www.securitytracker.com/id/1040364; https://helpx.adobe.com/security/products/acrobat/apsb18-02.html
CVE: CVE-2018-4904
Published: 2018-02-27
Description: An issue was discovered in Adobe Acrobat Reader 2[PII_REDACTED]0 and earlier versions, 2[PII_REDACTED]0 and earlier versions, 2[PII_REDACTED]4 and earlier versions. This vulnerability is an instance of a heap overflow vulnerability. The vulnerability is triggered by crafted TIFF data within an XPS file, which causes an out of bounds memory access. An attacker can potentially leverage the vulnerability to corrupt sensitive data or execute arbitrary code.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/102992; http://www.securitytracker.com/id/1040364; https://helpx.adobe.com/security/products/acrobat/apsb18-02.html
CVE: CVE-2018-4905
Published: 2018-02-27
Description: An issue was discovered in Adobe Acrobat Reader 2[PII_REDACTED]0 and earlier versions, 2[PII_REDACTED]0 and earlier versions, 2[PII_REDACTED]4 and earlier versions. This vulnerability occurs as a result of computation that reads data that is past the end of the target buffer; the computation is part of TIFF processing within the XPS module. A successful attack can lead to sensitive data exposure.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/102996; http://www.securitytracker.com/id/1040364; https://helpx.adobe.com/security/products/acrobat/apsb18-02.html
CVE: CVE-2018-4906
Published: 2018-02-27
Description: An issue was discovered in Adobe Acrobat Reader 2[PII_REDACTED]0 and earlier versions, 2[PII_REDACTED]0 and earlier versions, 2[PII_REDACTED]4 and earlier versions. This vulnerability occurs as a result of computation that reads data that is past the end of the target buffer; the computation is part of the image conversion module that handles Enhanced Metafile Format Plus (EMF+) data related to graphic object image attributes. A successful attack can lead to sensitive data exposure.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/102996; http://www.securitytracker.com/id/1040364; https://helpx.adobe.com/security/products/acrobat/apsb18-02.html
CVE: CVE-2018-4907
Published: 2018-02-27
Description: An issue was discovered in Adobe Acrobat Reader 2[PII_REDACTED]0 and earlier versions, 2[PII_REDACTED]0 and earlier versions, 2[PII_REDACTED]4 and earlier versions. This vulnerability occurs as a result of computation that reads data that is past the end of the target buffer; the computation is part of the TIFF processing in the XPS module. A successful attack can lead to sensitive data exposure.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/102996; http://www.securitytracker.com/id/1040364; https://helpx.adobe.com/security/products/acrobat/apsb18-02.html
CVE: CVE-2018-4908
Published: 2018-02-27
Description: An issue was discovered in Adobe Acrobat Reader 2[PII_REDACTED]0 and earlier versions, 2[PII_REDACTED]0 and earlier versions, 2[PII_REDACTED]4 and earlier versions. This vulnerability occurs as a result of computation that reads data that is past the end of the target buffer; the computation is part of the TTF font processing in the XPS module. A successful attack can lead to sensitive data exposure.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/102996; http://www.securitytracker.com/id/1040364; https://helpx.adobe.com/security/products/acrobat/apsb18-02.html
CVE: CVE-2018-4909
Published: 2018-02-27
Description: An issue was discovered in Adobe Acrobat Reader 2[PII_REDACTED]0 and earlier versions, 2[PII_REDACTED]0 and earlier versions, 2[PII_REDACTED]4 and earlier versions. This vulnerability occurs as a result of computation that reads data that is past the end of the target buffer; the computation is part of the image conversion module when processing metadata in JPEG images. A successful attack can lead to sensitive data exposure.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/102996; http://www.securitytracker.com/id/1040364; https://helpx.adobe.com/security/products/acrobat/apsb18-02.html
CVE: CVE-2018-4910
Published: 2018-02-27
Description: An issue was discovered in Adobe Acrobat Reader 2[PII_REDACTED]0 and earlier versions, 2[PII_REDACTED]0 and earlier versions, 2[PII_REDACTED]4 and earlier versions. This vulnerability is an instance of a heap overflow vulnerability in the JavaScript engine. The vulnerability is triggered by a PDF file with crafted JavaScript code that manipulates the optional content group (OCG). A successful attack can lead to code corruption, control-flow hijack, or a code re-use attack.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/102992; http://www.securitytracker.com/id/1040364; https://helpx.adobe.com/security/products/acrobat/apsb18-02.html
CVE: CVE-2018-4911
Published: 2018-02-27
Description: An issue was discovered in Adobe Acrobat Reader 2[PII_REDACTED]0 and earlier versions, 2[PII_REDACTED]0 and earlier versions, 2[PII_REDACTED]4 and earlier versions. This vulnerability is an instance of a use after free vulnerability in the JavaScript API related to bookmark functionality. The vulnerability is triggered by crafted JavaScript code embedded within a PDF file. A successful attack can lead to code corruption, control-flow hijack, or a code re-use attack.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: http://www.securityfocus.com/bid/102995; http://www.securitytracker.com/id/1040364; https://helpx.adobe.com/security/products/acrobat/apsb18-02.html
CVE: CVE-2018-4912
Published: 2018-02-27
Description: An issue was discovered in Adobe Acrobat Reader 2[PII_REDACTED]0 and earlier versions, 2[PII_REDACTED]0 and earlier versions, 2[PII_REDACTED]4 and earlier versions. This vulnerability occurs as a result of computation that reads data that is past the end of the target buffer; the computation is part of the image conversion module that handles JPEG 2000 data. A successful attack can lead to sensitive data exposure.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/102996; http://www.securitytracker.com/id/1040364; https://helpx.adobe.com/security/products/acrobat/apsb18-02.html
CVE: CVE-2018-4913
Published: 2018-02-27
Description: An issue was discovered in Adobe Acrobat Reader 2[PII_REDACTED]0 and earlier versions, 2[PII_REDACTED]0 and earlier versions, 2[PII_REDACTED]4 and earlier versions. This vulnerability is an instance of a use after free vulnerability in the XFA engine, related to DOM manipulation. The vulnerability is triggered by crafted XFA script definitions in a PDF file. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: http://www.securityfocus.com/bid/102995; http://www.securitytracker.com/id/1040364; https://helpx.adobe.com/security/products/acrobat/apsb18-02.html
CVE: CVE-2018-4914
Published: 2018-02-27
Description: An issue was discovered in Adobe Acrobat Reader 2[PII_REDACTED]0 and earlier versions, 2[PII_REDACTED]0 and earlier versions, 2[PII_REDACTED]4 and earlier versions. This vulnerability occurs as a result of computation that reads data that is past the end of the target buffer; the computation is part of the TIFF processing in the XPS engine. A successful attack can lead to sensitive data exposure.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/102996; http://www.securitytracker.com/id/1040364; https://helpx.adobe.com/security/products/acrobat/apsb18-02.html
CVE: CVE-2018-4915
Published: 2018-02-27
Description: An issue was discovered in Adobe Acrobat Reader 2[PII_REDACTED]0 and earlier versions, 2[PII_REDACTED]0 and earlier versions, 2[PII_REDACTED]4 and earlier versions. The vulnerability is caused by the computation that writes data past the end of the intended buffer; the computation is part of the JavaScript API related to color conversion. An attacker can potentially leverage the vulnerability to corrupt sensitive data or execute arbitrary code.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/102994; http://www.securitytracker.com/id/1040364; https://helpx.adobe.com/security/products/acrobat/apsb18-02.html
CVE: CVE-2018-4916
Published: 2018-02-27
Description: An issue was discovered in Adobe Acrobat Reader 2[PII_REDACTED]0 and earlier versions, 2[PII_REDACTED]0 and earlier versions, 2[PII_REDACTED]4 and earlier versions. The vulnerability is caused by the computation that writes data past the end of the intended buffer; the computation is part of the image conversion module that handless TIFF data. An attacker can potentially leverage the vulnerability to corrupt sensitive data or execute arbitrary code.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/102994; http://www.securitytracker.com/id/1040364; https://helpx.adobe.com/security/products/acrobat/apsb18-02.html
CVE: CVE-2017-18202
Published: 2018-02-27
Description: The __oom_reap_task_mm function in mm/oom_kill.c in the Linux kernel before 4.14.4 mishandles gather operations, which allows attackers to cause a denial of service (TLB entry leak or use-after-free) or possibly have unspecified other impact by triggering a copy_to_user call within a certain time window.
CVSS Score: 7.0 (HIGH)
CWE: CWE-416
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=687cb0884a714ff484d038e9190edc874edcf146; http://www.securityfocus.com/bid/103161; https://access.redhat.com/errata/RHSA-2018:2772
CVE: CVE-2017-10938
Published: 2018-02-27
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none
CVE: CVE-2017-10939
Published: 2018-02-27
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none
CVE: CVE-2017-15692
Published: 2018-02-27
Description: In Apache Geode before v1.4.0, the TcpServer within the Geode locator opens a network port that deserializes data. If an unprivileged user gains access to the Geode locator, they may be able to cause remote code execution if certain classes are present on the classpath.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: http://www.securityfocus.com/bid/103205; https://lists.apache.org/thread.html/d0e00f2e147a9e9b13a[PII_REDACTED]f349b2882bf[PII_REDACTED]a52600%40%3Cannounce.tomcat.apache.org%3E; http://www.securityfocus.com/bid/103205
CVE: CVE-2017-15693
Published: 2018-02-27
Description: In Apache Geode before v1.4.0, the Geode server stores application objects in serialized form. Certain cluster operations and API invocations cause these objects to be deserialized. A user with DATA:WRITE access to the cluster may be able to cause remote code execution if certain classes are present on the classpath.
CVSS Score: 7.5 (HIGH)
CWE: CWE-502
References: http://www.securityfocus.com/bid/103206; https://lists.apache.org/thread.html/cc3ec1d06062f54fdaa0357874c1d148fc54bb955f2d2df4ca328a3d%40%3Cuser.geode.apache.org%3E; http://www.securityfocus.com/bid/103206
CVE: CVE-2017-16767
Published: 2018-02-27
Description: Cross-site scripting (XSS) vulnerability in User Profile in Synology Surveillance Station before 8.1.2-5469 allows remote authenticated users to inject arbitrary web script or HTML via the userDesc parameter.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.synology.com/en-global/support/security/Synology_SA_17_77; https://www.synology.com/en-global/support/security/Synology_SA_17_77
CVE: CVE-2017-16770
Published: 2018-02-27
Description: File and directory information exposure vulnerability in SYNO.SurveillanceStation.PersonalSettings.Photo in Synology Surveillance Station before 8.1.2-5469 allows remote authenticated users to obtain other user's sensitive files via the filename parameter.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-538, CWE-200
References: https://www.synology.com/en-global/support/security/Synology_SA_17_77; https://www.synology.com/en-global/support/security/Synology_SA_17_77
CVE: CVE-2017-17478
Published: 2018-02-27
Description: An XSS issue was discovered in Designer Studio in Pegasystems Pega Platform 7.1.7, 7.1.8, 7.1.9, 7.1.10, 7.2, 7.2.1, and 7.2.2. A user with developer credentials can insert malicious code (up to 64 characters) into a text field in Designer Studio, after establishing context. Designer Studio is the developer workbench for Pega Platform. That XSS payload will execute when other developers visit the affected pages.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://pdn.pega.com/pegasystems-security-bulletin-cve-2017-17478/pegasystems-security-bulletin-cve-2017-17478; https://pdn.pega.com/pegasystems-security-bulletin-cve-2017-17478/pegasystems-security-bulletin-cve-2017-17478