deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-3075
Published: 2017-06-20
Description: Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability when manipulating the ActionsScript 2 XML class. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: http://www.securityfocus.com/bid/99023; http://www.securitytracker.com/id/1038655; https://access.redhat.com/errata/RHSA-2017:1439
CVE: CVE-2017-3076
Published: 2017-06-20
Description: Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the MPEG-4 AVC module. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/99025; http://www.securitytracker.com/id/1038655; https://access.redhat.com/errata/RHSA-2017:1439
CVE: CVE-2017-3077
Published: 2017-06-20
Description: Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the PNG image parser. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/99025; http://www.securitytracker.com/id/1038655; https://access.redhat.com/errata/RHSA-2017:1439
CVE: CVE-2017-3078
Published: 2017-06-20
Description: Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the Adobe Texture Format (ATF) module. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/99025; http://www.securitytracker.com/id/1038655; https://access.redhat.com/errata/RHSA-2017:1439
CVE: CVE-2017-3079
Published: 2017-06-20
Description: Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the internal representation of raster data. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/99025; http://www.securitytracker.com/id/1038655; https://access.redhat.com/errata/RHSA-2017:1439
CVE: CVE-2017-3081
Published: 2017-06-20
Description: Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability during internal computation caused by multiple display object mask manipulations. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: http://www.securityfocus.com/bid/99023; http://www.securitytracker.com/id/1038655; https://access.redhat.com/errata/RHSA-2017:1439
CVE: CVE-2017-3082
Published: 2017-06-20
Description: Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the LocaleID class. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/99025; http://www.securitytracker.com/id/1038655; https://access.redhat.com/errata/RHSA-2017:1439
CVE: CVE-2017-3083
Published: 2017-06-20
Description: Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability in the Primetime SDK functionality related to the profile metadata of the media stream. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: http://www.securityfocus.com/bid/99023; http://www.securitytracker.com/id/1038655; https://access.redhat.com/errata/RHSA-2017:1439
CVE: CVE-2017-3084
Published: 2017-06-20
Description: Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability in the advertising metadata functionality. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: http://www.securityfocus.com/bid/99023; http://www.securitytracker.com/id/1038655; https://access.redhat.com/errata/RHSA-2017:1439
CVE: CVE-2017-3086
Published: 2017-06-20
Description: Adobe Shockwave versions 12.2.8.198 and earlier have an exploitable memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/99019; http://www.securitytracker.com/id/1038656; https://fortiguard.com/zeroday/FG-VD-16-036
CVE: CVE-2017-3087
Published: 2017-06-20
Description: Adobe Captivate versions 9 and earlier have an information disclosure vulnerability resulting from abuse of the quiz reporting feature in Captivate.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://www.securitytracker.com/id/1038657; https://helpx.adobe.com/security/products/captivate/apsb17-19.html; http://www.securitytracker.com/id/1038657
CVE: CVE-2017-3088
Published: 2017-06-20
Description: Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerability in the PDF runtime engine. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/99020; http://www.securitytracker.com/id/1038658; https://helpx.adobe.com/security/products/Digital-Editions/apsb17-20.html
CVE: CVE-2017-3089
Published: 2017-06-20
Description: Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerability in the PDF imaging model. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/99020; http://www.securitytracker.com/id/1038658; https://helpx.adobe.com/security/products/Digital-Editions/apsb17-20.html
CVE: CVE-2017-3090
Published: 2017-06-20
Description: Adobe Digital Editions versions 4.5.4 and earlier contain an insecure library loading vulnerability. The vulnerability is due to unsafe library loading of browser related library extensions in the installer plugin. A successful exploitation could lead to arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-427
References: http://www.securityfocus.com/bid/99024; http://www.securitytracker.com/id/1038658; https://helpx.adobe.com/security/products/Digital-Editions/apsb17-20.html
CVE: CVE-2017-3092
Published: 2017-06-20
Description: Adobe Digital Editions versions 4.5.4 and earlier contain an insecure library loading vulnerability. The vulnerability is due to unsafe library loading of editor control library functions in the installer plugin. A successful exploitation could lead to arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-427
References: http://www.securityfocus.com/bid/99024; http://www.securitytracker.com/id/1038658; https://helpx.adobe.com/security/products/Digital-Editions/apsb17-20.html
CVE: CVE-2017-3093
Published: 2017-06-20
Description: Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerability in the bitmap representation module. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/99020; http://www.securitytracker.com/id/1038658; https://helpx.adobe.com/security/products/Digital-Editions/apsb17-20.html
CVE: CVE-2017-3094
Published: 2017-06-20
Description: Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerability in the PDF processing engine. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/99021; http://www.securitytracker.com/id/1038658; https://helpx.adobe.com/security/products/Digital-Editions/apsb17-20.html
CVE: CVE-2017-3095
Published: 2017-06-20
Description: Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerability in the PDF parsing engine. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/99021; http://www.securitytracker.com/id/1038658; https://helpx.adobe.com/security/products/Digital-Editions/apsb17-20.html
CVE: CVE-2017-3096
Published: 2017-06-20
Description: Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerability in the character code mapping module. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/99020; http://www.securitytracker.com/id/1038658; https://helpx.adobe.com/security/products/Digital-Editions/apsb17-20.html
CVE: CVE-2017-3097
Published: 2017-06-20
Description: Adobe Digital Editions versions 4.5.4 and earlier contain an insecure library loading vulnerability. The vulnerability is due to unsafe library loading functions in the installer plugin. A successful exploitation could lead to arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-427
References: http://www.securityfocus.com/bid/99024; http://www.securitytracker.com/id/1038658; https://helpx.adobe.com/security/products/Digital-Editions/apsb17-20.html
CVE: CVE-2017-3098
Published: 2017-06-20
Description: Adobe Captivate versions 9 and earlier have a remote code execution vulnerability in the quiz reporting feature that could be abused to read and write arbitrary files to the server.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: http://www.securitytracker.com/id/1038657; https://helpx.adobe.com/security/products/captivate/apsb17-19.html; http://www.securitytracker.com/id/1038657
CVE: CVE-2017-9129
Published: 2017-06-21
Description: The wav_open_read function in frontend/input.c in Freeware Advanced Audio Coder (FAAC) 1.28 allows remote attackers to cause a denial of service (large loop) via a crafted wav file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-400
References: https://www.exploit-db.com/exploits/42207/; https://www.exploit-db.com/exploits/42207/
CVE: CVE-2017-9130
Published: 2017-06-21
Description: The faacEncOpen function in libfaac/frame.c in Freeware Advanced Audio Coder (FAAC) 1.28 allows remote attackers to cause a denial of service (invalid memory read and application crash) via a crafted wav file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://www.exploit-db.com/exploits/42207/; https://www.exploit-db.com/exploits/42207/
CVE: CVE-2017-9766
Published: 2017-06-21
Description: In Wireshark 2.2.7, PROFINET IO data with a high recursion depth allows remote attackers to cause a denial of service (stack exhaustion) in the dissect_IODWriteReq function in plugins/profinet/packet-dcerpc-pn-io.c.
CVSS Score: 7.5 (HIGH)
CWE: CWE-674
References: http://www.securityfocus.com/bid/99187; https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13811; https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=d6e888400ba64de3147d1111a4c23edf389b0000
CVE: CVE-2017-9771
Published: 2017-06-21
Description: install\save.php in WebsiteBaker v2.10.0 allows remote attackers to execute arbitrary PHP code via the database_username, database_host, or database_password parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://github.com/XiaoZhis/ProjectSend/issues/3; https://github.com/XiaoZhis/ProjectSend/issues/3
CVE: CVE-2017-9778
Published: 2017-06-21
Description: GNU Debugger (GDB) 8.0 and earlier fails to detect a negative length field in a DWARF section. A malformed section in an ELF binary or a core file can cause GDB to repeatedly allocate memory until a process limit is reached. This can, for example, impede efforts to analyze malware with GDB.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20, CWE-770
References: http://www.securityfocus.com/bid/99244; https://sourceware.org/bugzilla/show_bug.cgi?id=21600; http://www.securityfocus.com/bid/99244
CVE: CVE-2017-2805
Published: 2017-06-21
Description: An exploitable stack-based buffer overflow vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera. A specially crafted http request can cause a stack-based buffer overflow resulting in overwriting arbitrary data on the stack frame. An attacker can simply send an http request to the device to trigger this vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: http://www.securityfocus.com/bid/99190; https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0299; http://www.securityfocus.com/bid/99190
CVE: CVE-2017-2827
Published: 2017-06-21
Description: An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.37. A specially crafted HTTP request can allow for a user to inject arbitrary shell characters during account creation resulting in command injection. An attacker can simply send an HTTP request to the device to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: http://www.securityfocus.com/bid/99184; https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0328; http://www.securityfocus.com/bid/99184
CVE: CVE-2017-2828
Published: 2017-06-21
Description: An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.37. A specially crafted HTTP request can allow for a user to inject arbitrary shell characters during account creation resulting in command injection. An attacker can simply send an HTTP request to the device to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: http://www.securityfocus.com/bid/99184; https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0329; http://www.securityfocus.com/bid/99184
CVE: CVE-2017-2829
Published: 2017-06-21
Description: An exploitable directory traversal vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.37. A specially crafted HTTP request can cause the application to read a file from disk but a failure to adequately filter characters results in allowing an attacker to specify a file outside of a directory. An attacker can simply send an HTTP request to the device to trigger this vulnerability.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: http://www.securityfocus.com/bid/99250; https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0330; http://www.securityfocus.com/bid/99250
CVE: CVE-2017-2830
Published: 2017-06-21
Description: An exploitable buffer overflow vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.37. A specially crafted HTTP request can cause a buffer overflow resulting in overwriting arbitrary data. An attacker can simply send an HTTP request to the device to trigger this vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: http://www.securityfocus.com/bid/99190; https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0331; http://www.securityfocus.com/bid/99190
CVE: CVE-2017-2831
Published: 2017-06-21
Description: An exploitable buffer overflow vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.37. A specially crafted HTTP request can cause a buffer overflow resulting in overwriting arbitrary data. An attacker can simply send an HTTP request to the device to trigger this vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: http://www.securityfocus.com/bid/99190; https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0332; http://www.securityfocus.com/bid/99190
CVE: CVE-2017-9780
Published: 2017-06-21
Description: In Flatpak before 0.8.7, a third-party app repository could include malicious apps that contain files with inappropriate permissions, for example setuid or world-writable. The files are deployed with those permissions, which would let a local attacker run the setuid executable or write to the world-writable location. In the case of the "system helper" component, files deployed as part of the app are owned by root, so in the worst case they could be setuid root.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: http://www.debian.org/security/2017/dsa-3895; http://www.securityfocus.com/bid/99346; https://bugs.debian.org/865413
CVE: CVE-2017-1117
Published: 2017-06-21
Description: IBM WebSphere MQ 8.0 and 9.0 could allow an authenticated user to cause a denial of service to the MQXR channel when trace is enabled. IBM X-Force ID: 121155.
CVSS Score: 5.3 (MEDIUM)
References: http://www.ibm.com/support/docview.wss?uid=swg22001468; http://www.securityfocus.com/bid/99136; https://exchange.xforce.ibmcloud.com/vulnerabilities/121155
CVE: CVE-2017-1304
Published: 2017-06-21
Description: IBM has identified a vulnerability with IBM Spectrum Scale/GPFS utilized on the Elastic Storage Server (ESS)/GPFS Storage Server (GSS) during testing of an unsupported configuration, where users applications are running on an active ESS I/O server node and utilize direct I/O to perform a read or a write to a Spectrum Scale file. This vulnerability may result in the use of an incorrect memory address, leading to a Spectrum Scale/GPFS daemon failure with a Signal 11, and possibly leading to denial of service or undetected data corruption. IBM X-Force ID: 125458.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-119
References: http://www.ibm.com/support/docview.wss?uid=ssg1S1010230; http://www.securityfocus.com/bid/99274; https://exchange.xforce.ibmcloud.com/vulnerabilities/125458
CVE: CVE-2017-9773
Published: 2017-06-21
Description: Denial of Service was found in Horde_Image 2.x before 2.5.0 via a crafted URL to the "Null" image driver.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-20
References: https://lists.horde.org/archives/announce/2017/001234.html; https://www.debian.org/security/2018/dsa-4276; https://lists.horde.org/archives/announce/2017/001234.html
CVE: CVE-2017-9774
Published: 2017-06-21
Description: Remote Code Execution was found in Horde_Image 2.x before 2.5.0 via a crafted GET request. Exploitation requires authentication.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: https://lists.horde.org/archives/announce/2017/001234.html; https://www.debian.org/security/2018/dsa-4276; https://lists.horde.org/archives/announce/2017/001234.html
CVE: CVE-2017-9781
Published: 2017-06-21
Description: A cross site scripting (XSS) vulnerability exists in Check_MK versions 1.4.0x prior to 1.4.0p6, allowing an unauthenticated remote attacker to inject arbitrary HTML or JavaScript via the _username parameter when attempting authentication to webapi.py, which is returned unencoded with content type text/html.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://git.mathias-kettner.de/git/?p=check_mk.git%3Ba=blob%3Bf=.werks/4757%3Bhb=c248f0b6ff7b15ced9f07a3df8a80fad656ea5b1; https://www.tenable.com/security/research/tra-2017-21; http://git.mathias-kettner.de/git/?p=check_mk.git%3Ba=blob%3Bf=.werks/4757%3Bhb=c248f0b6ff7b15ced9f07a3df8a80fad656ea5b1
CVE: CVE-2016-8731
Published: 2017-06-21
Description: Hard-coded FTP credentials (r:r) are included in the Foscam C1 running firmware 1.9.1.12. Knowledge of these credentials would allow remote access to any cameras found on the internet that do not have port 50021 blocked by an intermediate device.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: http://www.securityfocus.com/bid/99193; https://www.talosintelligence.com/vulnerability_reports/TALOS-2016-0245; http://www.securityfocus.com/bid/99193
CVE: CVE-2017-2813
Published: 2017-06-21
Description: An exploitable integer overflow vulnerability exists in the JPEG 2000 parser functionality of IrfanView 4.44. A specially crafted jpeg2000 image can cause an integer overflow leading to wrong memory allocation resulting in arbitrary code execution. Vulnerability can be triggered by viewing the image in via the application or by using thumbnailing feature of IrfanView.
CVSS Score: 8.8 (HIGH)
CWE: CWE-190
References: http://www.securityfocus.com/bid/98046; https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0310; http://www.securityfocus.com/bid/98046
CVE: CVE-2017-6043
Published: 2017-06-21
Description: A Resource Consumption issue was discovered in Trihedral VTScada Versions prior to 11.2.26. The client does not properly validate the input or limit the amount of resources that are utilized by an attacker, which can be used to consume more resources than are available.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-400
References: http://www.securityfocus.com/bid/99066; https://ics-cert.us-cert.gov/advisories/ICSA-17-164-01; http://www.securityfocus.com/bid/99066
CVE: CVE-2017-6045
Published: 2017-06-21
Description: An Information Exposure issue was discovered in Trihedral VTScada Versions prior to 11.2.26. Some files are exposed within the web server application to unauthenticated users. These files may contain sensitive configuration information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-548, CWE-200
References: http://www.securityfocus.com/bid/99066; https://ics-cert.us-cert.gov/advisories/ICSA-17-164-01; http://www.securityfocus.com/bid/99066
CVE: CVE-2017-6050
Published: 2017-06-21
Description: A SQL Injection issue was discovered in Ecava IntegraXor Versions 5.2.1231.0 and prior. The application fails to properly validate user input, which may allow for an unauthenticated attacker to remotely execute arbitrary code in the form of SQL queries.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: http://www.securityfocus.com/bid/99164; https://ics-cert.us-cert.gov/advisories/ICSA-17-171-01; https://www.tenable.com/security/research/tra-2017-24
CVE: CVE-2017-6053
Published: 2017-06-21
Description: A Cross-Site Scripting issue was discovered in Trihedral VTScada Versions prior to 11.2.26. A cross-site scripting vulnerability may allow JavaScript code supplied by the attacker to execute within the user's browser.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://www.securityfocus.com/bid/99066; https://ics-cert.us-cert.gov/advisories/ICSA-17-164-01; http://www.securityfocus.com/bid/99066
CVE: CVE-2017-7918
Published: 2017-06-21
Description: An Improper Access Control issue was discovered in Cambium Networks ePMP. After a valid user has used SNMP configuration export, an attacker is able to remotely trigger device configuration backups using specific MIBs. These backups lack proper access control and may allow access to sensitive information and possibly allow for configuration changes.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-284, CWE-269
References: http://www.securityfocus.com/bid/99083; https://ics-cert.us-cert.gov/advisories/ICSA-17-166-01; http://www.securityfocus.com/bid/99083
CVE: CVE-2017-7922
Published: 2017-06-21
Description: An Improper Privilege Management issue was discovered in Cambium Networks ePMP. The privileges for SNMP community strings are not properly restricted, which may allow an attacker to gain access to sensitive information and possibly allow for configuration changes.
CVSS Score: 7.6 (HIGH)
CWE: CWE-269, CWE-269
References: http://www.securityfocus.com/bid/99083; https://ics-cert.us-cert.gov/advisories/ICSA-17-166-01; http://www.securityfocus.com/bid/99083
CVE: CVE-2016-7508
Published: 2017-06-21
Description: Multiple SQL injection vulnerabilities in GLPI 0.90.4 allow an authenticated remote attacker to execute arbitrary SQL commands by using a certain character when the database is configured to use Big5 Asian encoding.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://github.com/glpi-project/glpi/issues/1047; https://www.exploit-db.com/exploits/42262/; https://github.com/glpi-project/glpi/issues/1047
CVE: CVE-2017-3218
Published: 2017-06-21
Description: Samsung Magician 5.0 fails to validate TLS certificates for HTTPS software update traffic. Prior to version 5.0, Samsung Magician uses HTTP for software updates.
CVSS Score: 8.8 (HIGH)
CWE: CWE-295, CWE-311, CWE-345
References: http://www.securityfocus.com/bid/99081; https://www.kb.cert.org/vuls/id/846320; http://www.securityfocus.com/bid/99081