deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2016-7563
Published: 2017-01-18
Description: The chartorune function in Artifex Software MuJS allows attackers to cause a denial of service (out-of-bounds read) via a * (asterisk) at the end of the input.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://www.openwall.com/lists/oss-security/2016/09/21/5; http://www.openwall.com/lists/oss-security/2016/09/28/11; https://bugs.ghostscript.com/show_bug.cgi?id=697136
CVE: CVE-2016-7564
Published: 2017-01-18
Description: Heap-based buffer overflow in the Fp_toString function in jsfunction.c in Artifex Software MuJS allows attackers to cause a denial of service (crash) via crafted input.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.openwall.com/lists/oss-security/2016/09/21/5; http://www.openwall.com/lists/oss-security/2016/09/28/11; https://bugs.ghostscript.com/show_bug.cgi?id=697137
CVE: CVE-2016-7799
Published: 2017-01-18
Description: MagickCore/profile.c in ImageMagick before 7.0.3-2 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://www.debian.org/security/2016/dsa-3726; http://www.openwall.com/lists/oss-security/2016/10/01/4; http://www.openwall.com/lists/oss-security/2016/10/01/6
CVE: CVE-2016-7906
Published: 2017-01-18
Description: magick/attribute.c in ImageMagick 7.0.3-2 allows remote attackers to cause a denial of service (use-after-free) via a crafted file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-416
References: http://www.debian.org/security/2016/dsa-3726; http://www.openwall.com/lists/oss-security/2016/10/02/1; http://www.openwall.com/lists/oss-security/2016/10/02/3
CVE: CVE-2016-7980
Published: 2017-01-18
Description: Cross-site request forgery (CSRF) vulnerability in ecrire/exec/valider_xml.php in SPIP 3.1.2 and earlier allows remote attackers to hijack the authentication of administrators for requests that execute the XML validator on a local file via a crafted valider_xml request.  NOTE: this issue can be combined with CVE-2016-7998 to execute arbitrary PHP code.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://www.openwall.com/lists/oss-security/2016/10/05/17; http://www.openwall.com/lists/oss-security/2016/10/06/6; http://www.openwall.com/lists/oss-security/2016/10/12/6
CVE: CVE-2016-7981
Published: 2017-01-18
Description: Cross-site scripting (XSS) vulnerability in valider_xml.php in SPIP 3.1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the var_url parameter in a valider_xml action.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2016/10/05/17; http://www.openwall.com/lists/oss-security/2016/10/06/6; http://www.openwall.com/lists/oss-security/2016/10/12/7
CVE: CVE-2016-7982
Published: 2017-01-18
Description: Directory traversal vulnerability in ecrire/exec/valider_xml.php in SPIP 3.1.2 and earlier allows remote attackers to enumerate the files on the system via the var_url parameter in a valider_xml action.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://www.openwall.com/lists/oss-security/2016/10/05/17; http://www.openwall.com/lists/oss-security/2016/10/06/6; http://www.openwall.com/lists/oss-security/2016/10/12/8
CVE: CVE-2016-7996
Published: 2017-01-18
Description: Heap-based buffer overflow in the WPG format reader in GraphicsMagick 1.3.25 and earlier allows remote attackers to have unspecified impact via a colormap with a large number of entries.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.debian.org/security/2016/dsa-3746; http://www.openwall.com/lists/oss-security/2016/10/07/4; http://www.openwall.com/lists/oss-security/2016/10/08/5
CVE: CVE-2016-7997
Published: 2017-01-18
Description: The WPG format reader in GraphicsMagick 1.3.25 and earlier allows remote attackers to cause a denial of service (assertion failure and crash) via vectors related to a ReferenceBlob and a NULL pointer.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: http://www.debian.org/security/2016/dsa-3746; http://www.openwall.com/lists/oss-security/2016/10/07/4; http://www.openwall.com/lists/oss-security/2016/10/08/5
CVE: CVE-2016-7998
Published: 2017-01-18
Description: The SPIP template composer/compiler in SPIP 3.1.2 and earlier allows remote authenticated users to execute arbitrary PHP code by uploading an HTML file with a crafted (1) INCLUDE or (2) INCLURE tag and then accessing it with a valider_xml action.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: http://www.openwall.com/lists/oss-security/2016/10/05/17; http://www.openwall.com/lists/oss-security/2016/10/07/5; http://www.openwall.com/lists/oss-security/2016/10/08/6
CVE: CVE-2016-7999
Published: 2017-01-18
Description: ecrire/exec/valider_xml.php in SPIP 3.1.2 and earlier allows remote attackers to conduct server side request forgery (SSRF) attacks via a URL in the var_url parameter in a valider_xml action.
CVSS Score: 7.4 (HIGH)
CWE: CWE-918
References: http://www.openwall.com/lists/oss-security/2016/10/05/17; http://www.openwall.com/lists/oss-security/2016/10/07/5; http://www.openwall.com/lists/oss-security/2016/10/08/6
CVE: CVE-2016-9109
Published: 2017-01-18
Description: Artifex Software MuJS allows attackers to cause a denial of service (crash) via vectors related to incomplete escape sequences.  NOTE: this vulnerability exists due to an incomplete fix for CVE-2016-7563.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://www.openwall.com/lists/oss-security/2016/10/30/13; http://www.openwall.com/lists/oss-security/2016/10/30/4; http://www.openwall.com/lists/oss-security/2016/11/07/5
CVE: CVE-2016-9273
Published: 2017-01-18
Description: tiffsplit in libtiff 4.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file, related to changing td_nstrips in TIFF_STRIPCHOP mode.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://bugzilla.maptools.org/show_bug.cgi?id=2587; http://www.debian.org/security/2017/dsa-3762; http://www.openwall.com/lists/oss-security/2016/11/09/20
CVE: CVE-2016-9278
Published: 2017-01-18
Description: The Samsung Exynos fimg2d driver for Android with Exynos 5433, 54xx, or 7420 chipsets allows local users to cause a denial of service (kernel panic) via a crafted ioctl command. The Samsung ID is SVE-2016-6736.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: http://security.samsungmobile.com/smrupdate.html#SMR-NOV-2016; http://www.openwall.com/lists/oss-security/2016/11/09/3; http://www.openwall.com/lists/oss-security/2016/11/11/11
CVE: CVE-2016-9279
Published: 2017-01-18
Description: Use-after-free vulnerability in the Samsung Exynos fimg2d driver for Android with Exynos 5433, 54xx, or 7420 chipsets allows attackers to obtain sensitive information via unspecified vectors. The Samsung ID is SVE-2016-6853.
CVSS Score: 7.5 (HIGH)
CWE: CWE-416
References: http://security.samsungmobile.com/smrupdate.html#SMR-NOV-2016; http://www.openwall.com/lists/oss-security/2016/11/09/3; http://www.openwall.com/lists/oss-security/2016/11/11/11
CVE: CVE-2016-9297
Published: 2017-01-18
Description: The TIFFFetchNormalTag function in LibTiff 4.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) via crafted TIFF_SETGET_C16ASCII or TIFF_SETGET_C32_ASCII tag values.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://bugzilla.maptools.org/show_bug.cgi?id=2590; http://www.debian.org/security/2017/dsa-3762; http://www.openwall.com/lists/oss-security/2016/11/12/2
CVE: CVE-2016-9584
Published: 2017-01-18
Description: libical allows remote attackers to cause a denial of service (use-after-free) and possibly read heap memory via a crafted ics file.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-416
References: http://www.openwall.com/lists/oss-security/2016/12/15/5; http://www.securityfocus.com/bid/94948; http://www.openwall.com/lists/oss-security/2016/12/15/5
CVE: CVE-2016-9844
Published: 2017-01-18
Description: Buffer overflow in the zi_short function in zipinfo.c in Info-Zip UnZip 6.0 allows remote attackers to cause a denial of service (crash) via a large compression method value in the central directory file header.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-119
References: http://www.openwall.com/lists/oss-security/2016/12/05/13; http://www.openwall.com/lists/oss-security/2016/12/05/19; http://www.openwall.com/lists/oss-security/2016/12/05/20
CVE: CVE-2016-10147
Published: 2017-01-18
Description: crypto/mcryptd.c in the Linux kernel before 4.8.15 allows local users to cause a denial of service (NULL pointer dereference and system crash) by using an AF_ALG socket with an incompatible algorithm, as demonstrated by mcryptd(md5).
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=48a992727d82cb7db076fa15d372178743b1f4cd; http://marc.info/?l=linux-crypto-vger&m=[PII_REDACTED]0477&w=2; http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.15
CVE: CVE-2016-10148
Published: 2017-01-18
Description: The wp_ajax_update_plugin function in wp-admin/includes/ajax-actions.php in WordPress before 4.6 makes a get_plugin_data call before checking the update_plugins capability, which allows remote authenticated users to bypass intended read-access restrictions via the plugin parameter to wp-admin/admin-ajax.php, a related issue to CVE-2016-6896.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-254, CWE-284
References: http://www.openwall.com/lists/oss-security/2016/08/20/1; http://www.securityfocus.com/bid/96847; https://core.trac.wordpress.org/changeset/38168
CVE: CVE-2016-6896
Published: 2017-01-18
Description: Directory traversal vulnerability in the wp_ajax_update_plugin function in wp-admin/includes/ajax-actions.php in WordPress 4.5.3 allows remote authenticated users to cause a denial of service or read certain text files via a .. (dot dot) in the plugin parameter to wp-admin/admin-ajax.php, as demonstrated by /dev/random read operations that deplete the entropy pool.
CVSS Score: 7.1 (HIGH)
CWE: CWE-22
References: http://www.openwall.com/lists/oss-security/2016/08/20/1; http://www.securitytracker.com/id/1036683; https://sumofpwn.nl/advisory/2016/path_traversal_vulnerability_in_wordpress_core_ajax_handlers.html
CVE: CVE-2016-6897
Published: 2017-01-18
Description: Cross-site request forgery (CSRF) vulnerability in the wp_ajax_update_plugin function in wp-admin/includes/ajax-actions.php in WordPress before 4.6 allows remote attackers to hijack the authentication of subscribers for /dev/random read operations by leveraging a late call to the check_ajax_referer function, a related issue to CVE-2016-6896.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: http://www.openwall.com/lists/oss-security/2016/08/20/1; http://www.securityfocus.com/bid/92572; http://www.securitytracker.com/id/1036683
CVE: CVE-2016-10086
Published: 2017-01-18
Description: RESTful web services in CA Service Desk Manager 12.9 and CA Service Desk Management 14.1 might allow remote authenticated users to read or modify task information by leveraging incorrect permissions applied to a RESTful request.
CVSS Score: 8.1 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/95366; http://www.securitytracker.com/id/1037583; https://www.ca.com/us/services-support/ca-support/ca-support-online/product-content/recommended-reading/security-notices/ca20170109-01-security-notice-for-ca-service-desk-manager.html
CVE: CVE-2016-3401
Published: 2017-01-18
Description: Unspecified vulnerability in Zimbra Collaboration before 8.7.0 allows remote authenticated users to affect integrity via unknown vectors, aka bug 99810.
CVSS Score: 6.5 (MEDIUM)
References: http://www.securityfocus.com/bid/95860; https://wiki.zimbra.com/wiki/Zimbra_Releases/8.7.0; https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories
CVE: CVE-2016-3402
Published: 2017-01-18
Description: Unspecified vulnerability in Zimbra Collaboration before 8.7.0 allows remote attackers to affect confidentiality via unknown vectors, aka bug 99167.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/95887; https://wiki.zimbra.com/wiki/Zimbra_Releases/8.7.0; https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories
CVE: CVE-2016-3404
Published: 2017-01-18
Description: Unspecified vulnerability in Zimbra Collaboration before 8.7.0 allows remote attackers to affect integrity via unknown vectors, aka bug 103959.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/95894; https://wiki.zimbra.com/wiki/Zimbra_Releases/8.7.0; https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories
CVE: CVE-2016-3405
Published: 2017-01-18
Description: Multiple unspecified vulnerabilities in Zimbra Collaboration before 8.7.0 allow remote attackers to affect integrity via unknown vectors, aka bugs 103961 and 104828.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/95886; https://wiki.zimbra.com/wiki/Zimbra_Releases/8.7.0; https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories
CVE: CVE-2016-3406
Published: 2017-01-18
Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Zimbra Collaboration before 8.7.0 allow remote attackers to hijack the authentication of unspecified victims via vectors involving (1) the Client uploader extension or (2) extension REST handlers, aka bugs 104294 and 104456.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://www.securityfocus.com/bid/95890; https://bugzilla.zimbra.com/show_bug.cgi?id=104294; https://bugzilla.zimbra.com/show_bug.cgi?id=104456
CVE: CVE-2016-3407
Published: 2017-01-18
Description: Multiple cross-site scripting (XSS) vulnerabilities in Zimbra Collaboration before 8.7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka bugs 104222, 104910, 105071, and 105175.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/95897; https://wiki.zimbra.com/wiki/Zimbra_Releases/8.7.0; https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories
CVE: CVE-2016-3408
Published: 2017-01-18
Description: Cross-site scripting (XSS) vulnerability in Zimbra Collaboration before 8.7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka bug 101813.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/95923; https://wiki.zimbra.com/wiki/Zimbra_Releases/8.7.0; https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories
CVE: CVE-2016-3409
Published: 2017-01-18
Description: Cross-site scripting (XSS) vulnerability in Zimbra Collaboration before 8.7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka bug 102637.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/95896; https://wiki.zimbra.com/wiki/Zimbra_Releases/8.7.0; https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories
CVE: CVE-2016-3410
Published: 2017-01-18
Description: Multiple cross-site scripting (XSS) vulnerabilities in Zimbra Collaboration before 8.7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka bugs 103956, 103995, 104475, 104838, and 104839.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/95900; https://wiki.zimbra.com/wiki/Zimbra_Releases/8.7.0; https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories
CVE: CVE-2016-3411
Published: 2017-01-18
Description: Cross-site scripting (XSS) vulnerability in Zimbra Collaboration before 8.7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka bug 103609.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/95901; https://wiki.zimbra.com/wiki/Zimbra_Releases/8.7.0; https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories
CVE: CVE-2016-3412
Published: 2017-01-18
Description: Multiple cross-site scripting (XSS) vulnerabilities in Zimbra Collaboration before 8.7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka bugs 103997, 104413, 104414, 104777, and 104791.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/95899; https://wiki.zimbra.com/wiki/Zimbra_Releases/8.7.0; https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories
CVE: CVE-2016-3413
Published: 2017-01-18
Description: Unspecified vulnerability in Zimbra Collaboration before 8.7.0 allows remote attackers to affect integrity via unknown vectors, aka bug 103996.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/95895; https://wiki.zimbra.com/wiki/Zimbra_Releases/8.7.0; https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories
CVE: CVE-2016-3414
Published: 2017-01-18
Description: Unspecified vulnerability in Zimbra Collaboration before 8.6.0 Patch 7 allows remote authenticated users to affect availability via unknown vectors, aka bug 102029.
CVSS Score: 6.5 (MEDIUM)
References: http://www.securityfocus.com/bid/95918; https://forums.zimbra.org/viewtopic.php?f=8&t=59816; https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories
CVE: CVE-2016-3415
Published: 2017-01-18
Description: Zimbra Collaboration before 8.7.0 allows remote attackers to conduct deserialization attacks via unspecified vectors, aka bug 102276.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-502
References: http://www.securityfocus.com/bid/95917; https://wiki.zimbra.com/wiki/Zimbra_Releases/8.7.0; https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories
CVE: CVE-2016-3999
Published: 2017-01-18
Description: Multiple cross-site scripting (XSS) vulnerabilities in Zimbra Collaboration before 8.7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka bugs 104552 and 104703.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/95921; https://wiki.zimbra.com/wiki/Zimbra_Releases/8.7.0; https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories
CVE: CVE-2016-4019
Published: 2017-01-18
Description: Unspecified vulnerability in Zimbra Collaboration before 8.7.0 allows remote attackers to affect integrity via unknown vectors, aka bug 104477.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/95922; https://wiki.zimbra.com/wiki/Zimbra_Releases/8.7.0; https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories
CVE: CVE-2016-6271
Published: 2017-01-18
Description: The Bzrtp library (aka libbzrtp) 1.0.x before 1.0.4 allows man-in-the-middle attackers to conduct spoofing attacks by leveraging a missing HVI check on DHPart2 packet reception.
CVSS Score: 7.5 (HIGH)
CWE: CWE-254
References: http://www.securityfocus.com/bid/95928; https://github.com/BelledonneCommunications/bzrtp/commit/bbb1e6e2f467ee4bd7b9a8c800e4f07343d7d99b; https://github.com/gteissier/CVE-2016-6271
CVE: CVE-2016-6283
Published: 2017-01-18
Description: Cross-site scripting (XSS) vulnerability in Atlassian Confluence before 5.10.6 allows remote attackers to inject arbitrary web script or HTML via the newFileName parameter to pages/doeditattachment.action.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/140363/Atlassian-Confluence-5.9.12-Cross-Site-Scripting.html; http://seclists.org/fulldisclosure/2017/Jan/12; http://seclists.org/fulldisclosure/2017/Jan/3
CVE: CVE-2016-6497
Published: 2017-01-18
Description: main/java/org/apache/directory/groovyldap/LDAP.java in the Groovy LDAP API in Apache allows attackers to conduct LDAP entry poisoning attacks by leveraging setting returnObjFlag to true for all search methods.
CVSS Score: 7.5 (HIGH)
CWE: CWE-254
References: http://svn.apache.org/viewvc/directory/sandbox/szoerner/groovyldap/src/main/java/org/apache/directory/groovyldap/LDAP.java?r1=1765362&r2=1765361&pathrev=1765362&view=patch; http://www.securityfocus.com/bid/95929; https://mail-archives.apache.org/mod_mbox/directory-users/201610.mbox/%3Cb7d7e909-a8ed-1ab4-c853-4078c1e7624a%40stefan-seelmann.de%3E
CVE: CVE-2016-9676
Published: 2017-01-18
Description: Buffer overflow in Citrix Provisioning Services before 7.12 allows attackers to execute arbitrary code via unspecified vectors.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/95620; http://www.securitytracker.com/id/1037625; https://support.citrix.com/article/CTX219580
CVE: CVE-2016-9677
Published: 2017-01-18
Description: Citrix Provisioning Services before 7.12 allows attackers to obtain sensitive kernel address information via unspecified vectors.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/95620; http://www.securitytracker.com/id/1037625; https://support.citrix.com/article/CTX219580
CVE: CVE-2016-9678
Published: 2017-01-18
Description: Use-after-free vulnerability in Citrix Provisioning Services before 7.12 allows attackers to execute arbitrary code via unspecified vectors.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: http://www.securityfocus.com/bid/95620; http://www.securitytracker.com/id/1037625; https://support.citrix.com/article/CTX219580
CVE: CVE-2016-9679
Published: 2017-01-18
Description: Citrix Provisioning Services before 7.12 allows attackers to execute arbitrary code by overwriting a function pointer.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/95620; http://www.securitytracker.com/id/1037625; https://support.citrix.com/article/CTX219580
CVE: CVE-2016-9680
Published: 2017-01-18
Description: Citrix Provisioning Services before 7.12 allows attackers to obtain sensitive information from kernel memory via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://www.securityfocus.com/bid/95620; http://www.securitytracker.com/id/1037625; https://support.citrix.com/article/CTX219580
CVE: CVE-2016-5196
Published: 2017-01-19
Description: The content renderer client in Google Chrome prior to 54.0.2840.85 for Android insufficiently enforced the Same Origin Policy amongst downloaded files, which allowed a remote attacker to access any downloaded file and interact with sites, including those the user was logged into, via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-254
References: http://www.securityfocus.com/bid/94078; https://chromereleases.googleblog.com/2016/10/chrome-for-android-update_31.html; https://crbug.com/659492
CVE: CVE-2016-5197
Published: 2017-01-19
Description: The content view client in Google Chrome prior to 54.0.2840.85 for Android insufficiently validated intent URLs, which allowed a remote attacker who had compromised the renderer process to start arbitrary activity on the system via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/94078; https://chromereleases.googleblog.com/2016/10/chrome-for-android-update_31.html; https://crbug.com/659477
CVE: CVE-2016-5198
Published: 2017-01-19
Description: V8 in Google Chrome prior to 54.0.2840.90 for Linux, and 54.0.2840.85 for Android, and 54.0.2840.87 for Windows and Mac included incorrect optimisation assumptions, which allowed a remote attacker to perform arbitrary read/write operations, leading to code execution, via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787, CWE-787
References: http://rhn.redhat.com/errata/RHSA-2016-2672.html; http://www.securityfocus.com/bid/94079; http://www.securitytracker.com/id/1037224
CVE: CVE-2016-5199
Published: 2017-01-19
Description: An off by one error resulting in an allocation of zero size in FFmpeg in Google Chrome prior to 54.0.2840.98 for Mac, and 54.0.2840.99 for Windows, and 54.0.2840.100 for Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted video file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://rhn.redhat.com/errata/RHSA-2016-2718.html; http://www.securityfocus.com/bid/94196; http://www.securitytracker.com/id/1037273
CVE: CVE-2016-5200
Published: 2017-01-19
Description: V8 in Google Chrome prior to 54.0.2840.98 for Mac, and 54.0.2840.99 for Windows, and 54.0.2840.100 for Linux, and 55.0.2883.84 for Android incorrectly applied type rules, which allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://rhn.redhat.com/errata/RHSA-2016-2718.html; http://www.securityfocus.com/bid/94196; http://www.securitytracker.com/id/1037273