deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-16364
Published: 2017-12-09
Description: An issue was discovered in Adobe Acrobat and Reader: 2[PII_REDACTED]8 and earlier versions, 2[PII_REDACTED]6 and earlier versions, 2[PII_REDACTED]5 and earlier versions, and 11.0.22 and earlier versions. This issue is due to an untrusted pointer dereference when handling number format dictionary entries. In this scenario, the input is crafted in way that the computation results in pointers to memory locations that do not belong to the relevant process address space. The dereferencing operation is a read operation, and an attack can result in sensitive data exposure.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/101813; http://www.securitytracker.com/id/1039791; https://helpx.adobe.com/security/products/acrobat/apsb17-36.html
CVE: CVE-2017-16365
Published: 2017-12-09
Description: An issue was discovered in Adobe Acrobat and Reader: 2[PII_REDACTED]8 and earlier versions, 2[PII_REDACTED]6 and earlier versions, 2[PII_REDACTED]5 and earlier versions, and 11.0.22 and earlier versions. The vulnerability is caused by a buffer over-read in the True Type2 Font parsing module. A corrupted cmap table input leads to a computation where the pointer arithmetic results in a location outside valid memory locations belonging to the buffer. An attack can be used to obtain sensitive information, such as object heap addresses, etc.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/101824; http://www.securitytracker.com/id/1039791; https://helpx.adobe.com/security/products/acrobat/apsb17-36.html
CVE: CVE-2017-16366
Published: 2017-12-09
Description: An issue was discovered in Adobe Acrobat and Reader: 2[PII_REDACTED]8 and earlier versions, 2[PII_REDACTED]6 and earlier versions, 2[PII_REDACTED]5 and earlier versions, and 11.0.22 and earlier versions. This vulnerability is an instance of a security bypass vulnerability in the AcroPDF plugin.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/101830; http://www.securitytracker.com/id/1039791; https://helpx.adobe.com/security/products/acrobat/apsb17-36.html
CVE: CVE-2017-16367
Published: 2017-12-09
Description: An issue was discovered in Adobe Acrobat and Reader: 2[PII_REDACTED]8 and earlier versions, 2[PII_REDACTED]6 and earlier versions, 2[PII_REDACTED]5 and earlier versions, and 11.0.22 and earlier versions. This vulnerability is an instance of a type confusion overflow vulnerability. The vulnerability leads to an out of bounds memory access. Attackers can exploit the vulnerability by using the out of bounds access for unintended reads or writes -- potentially leading to code corruption, control-flow hijack, or an information leak attack.
CVSS Score: 8.8 (HIGH)
CWE: CWE-704
References: http://www.securityfocus.com/bid/101815; http://www.securitytracker.com/id/1039791; https://helpx.adobe.com/security/products/acrobat/apsb17-36.html
CVE: CVE-2017-16368
Published: 2017-12-09
Description: An issue was discovered in Adobe Acrobat and Reader: 2[PII_REDACTED]8 and earlier versions, 2[PII_REDACTED]6 and earlier versions, 2[PII_REDACTED]5 and earlier versions, and 11.0.22 and earlier versions. This vulnerability leads to a stack-based buffer overflow condition in the internal Unicode string manipulation module. It is triggered by an invalid PDF file, where a crafted Unicode string causes an out of bounds memory access of a stack allocated buffer, due to improper checks when manipulating an offset of a pointer to the buffer. Attackers can exploit the vulnerability and achieve arbitrary code execution if they can effectively control the accessible memory.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119, CWE-119
References: http://www.securityfocus.com/bid/101816; http://www.securitytracker.com/id/1039791; https://helpx.adobe.com/security/products/acrobat/apsb17-36.html
CVE: CVE-2017-16369
Published: 2017-12-09
Description: An issue was discovered in Adobe Acrobat and Reader: 2[PII_REDACTED]8 and earlier versions, 2[PII_REDACTED]6 and earlier versions, 2[PII_REDACTED]5 and earlier versions, and 11.0.22 and earlier versions. This vulnerability is an instance of a Same Origin Policy security bypass vulnerability, affecting files on the local system, etc.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/101820; http://www.securitytracker.com/id/1039791; https://helpx.adobe.com/security/products/acrobat/apsb17-36.html
CVE: CVE-2017-16370
Published: 2017-12-09
Description: An issue was discovered in Adobe Acrobat and Reader: 2[PII_REDACTED]8 and earlier versions, 2[PII_REDACTED]6 and earlier versions, 2[PII_REDACTED]5 and earlier versions, and 11.0.22 and earlier versions. This vulnerability occurs because of a computation that reads data that is past the end of the target buffer; the computation is a part of the JavaScript engine. The use of an invalid (out-of-range) pointer offset during access of internal data structure fields causes the vulnerability. A successful attack can lead to sensitive data exposure.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/102140; http://www.securitytracker.com/id/1039791; https://helpx.adobe.com/security/products/acrobat/apsb17-36.html
CVE: CVE-2017-16371
Published: 2017-12-09
Description: An issue was discovered in Adobe Acrobat and Reader: 2[PII_REDACTED]8 and earlier versions, 2[PII_REDACTED]6 and earlier versions, 2[PII_REDACTED]5 and earlier versions, and 11.0.22 and earlier versions. This issue is due to an untrusted pointer dereference in the JavaScript engine. In this scenario, the input is crafted in a way that the computation results in pointers to memory locations that do not belong to the relevant process address space. The dereferencing operation is a read operation, and an attack can result in sensitive data exposure.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/101813; http://www.securitytracker.com/id/1039791; https://helpx.adobe.com/security/products/acrobat/apsb17-36.html
CVE: CVE-2017-16372
Published: 2017-12-09
Description: An issue was discovered in Adobe Acrobat and Reader: 2[PII_REDACTED]8 and earlier versions, 2[PII_REDACTED]6 and earlier versions, 2[PII_REDACTED]5 and earlier versions, and 11.0.22 and earlier versions. This issue is due to untrusted pointer dereference in the JavaScript API engine. In this scenario, the JavaScript input is crafted in way that the computation results with pointer to memory locations that do not belong to the relevant process address space. The dereferencing operation is a read operation, and an attack can result with sensitive data exposure.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/101813; http://www.securitytracker.com/id/1039791; https://helpx.adobe.com/security/products/acrobat/apsb17-36.html
CVE: CVE-2017-16373
Published: 2017-12-09
Description: An issue was discovered in Adobe Acrobat and Reader: 2[PII_REDACTED]8 and earlier versions, 2[PII_REDACTED]6 and earlier versions, 2[PII_REDACTED]5 and earlier versions, and 11.0.22 and earlier versions. This issue is due to an untrusted pointer dereference. In this scenario, the input is crafted in way that the computation results in pointers to memory locations that do not belong to the relevant process address space. The dereferencing operation is a read operation, and an attack can result in sensitive data exposure.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/101813; http://www.securitytracker.com/id/1039791; https://helpx.adobe.com/security/products/acrobat/apsb17-36.html
CVE: CVE-2017-16374
Published: 2017-12-09
Description: An issue was discovered in Adobe Acrobat and Reader: 2[PII_REDACTED]8 and earlier versions, 2[PII_REDACTED]6 and earlier versions, 2[PII_REDACTED]5 and earlier versions, and 11.0.22 and earlier versions. The vulnerability is caused by a buffer over-read in the JPEG 2000 module. An invalid JPEG 2000 input code stream leads to a computation where the pointer arithmetic results in a location outside valid memory locations belonging to the buffer. An attack can be used to obtain sensitive information, such as object heap addresses, etc.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/101824; http://www.securitytracker.com/id/1039791; https://helpx.adobe.com/security/products/acrobat/apsb17-36.html
CVE: CVE-2017-16375
Published: 2017-12-09
Description: An issue was discovered in Adobe Acrobat and Reader: 2[PII_REDACTED]8 and earlier versions, 2[PII_REDACTED]6 and earlier versions, 2[PII_REDACTED]5 and earlier versions, and 11.0.22 and earlier versions. This issue is due to an untrusted pointer dereference in the JavaSscript API engine. In this scenario, the JavaScript input is crafted in way that the computation results in pointers to memory locations that do not belong to the relevant process address space. The dereferencing operation is a read operation, and an attack can result in sensitive data exposure.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/101813; http://www.securitytracker.com/id/1039791; https://helpx.adobe.com/security/products/acrobat/apsb17-36.html
CVE: CVE-2017-16376
Published: 2017-12-09
Description: An issue was discovered in Adobe Acrobat and Reader: 2[PII_REDACTED]8 and earlier versions, 2[PII_REDACTED]6 and earlier versions, 2[PII_REDACTED]5 and earlier versions, and 11.0.22 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the target buffer; the computation is a part of the MakeAccessible plugin. The use of an invalid (out-of-range) pointer offset during access of internal data structure fields causes the vulnerability. A successful attack can lead to sensitive data exposure.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/102140; http://www.securitytracker.com/id/1039791; https://helpx.adobe.com/security/products/acrobat/apsb17-36.html
CVE: CVE-2017-16377
Published: 2017-12-09
Description: An issue was discovered in Adobe Acrobat and Reader: 2[PII_REDACTED]8 and earlier versions, 2[PII_REDACTED]6 and earlier versions, 2[PII_REDACTED]5 and earlier versions, and 11.0.22 and earlier versions. This vulnerability is due to a computation that accesses a pointer that has not been initialized in the main DLL. In this case, a computation defines a read from an unexpected memory location. Therefore, an attacker might be able to read sensitive portions of memory.
CVSS Score: 8.8 (HIGH)
CWE: CWE-824
References: http://www.securityfocus.com/bid/101821; http://www.securitytracker.com/id/1039791; https://helpx.adobe.com/security/products/acrobat/apsb17-36.html
CVE: CVE-2017-16378
Published: 2017-12-09
Description: An issue was discovered in Adobe Acrobat and Reader: 2[PII_REDACTED]8 and earlier versions, 2[PII_REDACTED]6 and earlier versions, 2[PII_REDACTED]5 and earlier versions, and 11.0.22 and earlier versions. This vulnerability is due to a computation that accesses a pointer that has not been initialized; the computation occurs during internal AST thread manipulation. In this case, a computation defines a read from an unexpected memory location. Therefore, an attacker might be able to read sensitive portions of memory.
CVSS Score: 8.8 (HIGH)
CWE: CWE-824
References: http://www.securityfocus.com/bid/101821; http://www.securitytracker.com/id/1039791; https://helpx.adobe.com/security/products/acrobat/apsb17-36.html
CVE: CVE-2017-16379
Published: 2017-12-09
Description: An issue was discovered in Adobe Acrobat and Reader: 2[PII_REDACTED]8 and earlier versions, 2[PII_REDACTED]6 and earlier versions, 2[PII_REDACTED]5 and earlier versions, and 11.0.22 and earlier versions. This vulnerability is an instance of a type confusion overflow vulnerability in the graphics rendering engine.
CVSS Score: 8.8 (HIGH)
CWE: CWE-704
References: http://www.securityfocus.com/bid/101815; http://www.securitytracker.com/id/1039791; https://helpx.adobe.com/security/products/acrobat/apsb17-36.html
CVE: CVE-2017-16380
Published: 2017-12-09
Description: An issue was discovered in Adobe Acrobat and Reader: 2[PII_REDACTED]8 and earlier versions, 2[PII_REDACTED]6 and earlier versions, 2[PII_REDACTED]5 and earlier versions, and 11.0.22 and earlier versions. This vulnerability is an instance of a security bypass vulnerability for a certain file-type extension. Acrobat maintains both a blacklist and whitelist (the user can specify an allowed attachment). However, any file extensions that are neither on the blacklist nor the whitelist can still be opened after displaying a warning prompt.
CVSS Score: 8.8 (HIGH)
References: http://www.securityfocus.com/bid/101814; http://www.securitytracker.com/id/1039791; https://helpx.adobe.com/security/products/acrobat/apsb17-36.html
CVE: CVE-2017-16381
Published: 2017-12-09
Description: An issue was discovered in Adobe Acrobat and Reader: 2[PII_REDACTED]8 and earlier versions, 2[PII_REDACTED]6 and earlier versions, 2[PII_REDACTED]5 and earlier versions, and 11.0.22 and earlier versions. The vulnerability is caused by a buffer access with an incorrect length value when processing TIFF files embedded within an XPS document. Crafted TIFF image input causes a mismatch between allocated buffer size and the access allowed by the computation. If an attacker can adequately control the accessible memory then this vulnerability can be leveraged to achieve arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/101831; http://www.securitytracker.com/id/1039791; https://helpx.adobe.com/security/products/acrobat/apsb17-36.html
CVE: CVE-2017-16382
Published: 2017-12-09
Description: An issue was discovered in Adobe Acrobat and Reader: 2[PII_REDACTED]8 and earlier versions, 2[PII_REDACTED]6 and earlier versions, 2[PII_REDACTED]5 and earlier versions, and 11.0.22 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the target buffer; the computation is part of the image conversion module. The use of an invalid (out-of-range) pointer offset during access of internal data structure fields causes the vulnerability. A successful attack can lead to sensitive data exposure.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/102140; http://www.securitytracker.com/id/1039791; https://helpx.adobe.com/security/products/acrobat/apsb17-36.html
CVE: CVE-2017-16383
Published: 2017-12-09
Description: An issue was discovered in Adobe Acrobat and Reader: 2[PII_REDACTED]8 and earlier versions, 2[PII_REDACTED]6 and earlier versions, 2[PII_REDACTED]5 and earlier versions, and 11.0.22 and earlier versions. This vulnerability is an instance of a heap overflow vulnerability when processing a JPEG file embedded within an XPS document.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/101823; http://www.securitytracker.com/id/1039791; https://helpx.adobe.com/security/products/acrobat/apsb17-36.html
CVE: CVE-2017-16384
Published: 2017-12-09
Description: An issue was discovered in Adobe Acrobat and Reader: 2[PII_REDACTED]8 and earlier versions, 2[PII_REDACTED]6 and earlier versions, 2[PII_REDACTED]5 and earlier versions, and 11.0.22 and earlier versions. The vulnerability is caused by a buffer over-read in the exif processing module for a PNG file (during XPS conversion). Invalid input leads to a computation where pointer arithmetic results in a location outside valid memory locations belonging to the buffer. An attack can be used to obtain sensitive information, such as object heap addresses, etc.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/101824; http://www.securitytracker.com/id/1039791; https://helpx.adobe.com/security/products/acrobat/apsb17-36.html
CVE: CVE-2017-16385
Published: 2017-12-09
Description: An issue was discovered in Adobe Acrobat and Reader: 2[PII_REDACTED]8 and earlier versions, 2[PII_REDACTED]6 and earlier versions, 2[PII_REDACTED]5 and earlier versions, and 11.0.22 and earlier versions. The vulnerability is caused by a buffer access with an incorrect length value in TIFF parsing during XPS conversion. Crafted TIFF image input causes a mismatch between allocated buffer size and the access allowed by the computation. If an attacker can adequately control the accessible memory then this vulnerability can be leveraged to achieve arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/101831; http://www.securitytracker.com/id/1039791; https://helpx.adobe.com/security/products/acrobat/apsb17-36.html
CVE: CVE-2017-16386
Published: 2017-12-09
Description: An issue was discovered in Adobe Acrobat and Reader: 2[PII_REDACTED]8 and earlier versions, 2[PII_REDACTED]6 and earlier versions, 2[PII_REDACTED]5 and earlier versions, and 11.0.22 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the target buffer; the computation is part of the XPS2PDF conversion engine. The use of an invalid (out-of-range) pointer offset during access of internal data structure fields causes the vulnerability. A successful attack can lead to sensitive data exposure.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/101824; http://www.securitytracker.com/id/1039791; https://helpx.adobe.com/security/products/acrobat/apsb17-36.html
CVE: CVE-2017-16387
Published: 2017-12-09
Description: An issue was discovered in Adobe Acrobat and Reader: 2[PII_REDACTED]8 and earlier versions, 2[PII_REDACTED]6 and earlier versions, 2[PII_REDACTED]5 and earlier versions, and 11.0.22 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the target buffer; the computation is part of the JPEG2000 codec. The use of an invalid (out-of-range) pointer offset during access of internal data structure fields causes the vulnerability. A successful attack can lead to sensitive data exposure.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/101824; http://www.securitytracker.com/id/1039791; https://helpx.adobe.com/security/products/acrobat/apsb17-36.html
CVE: CVE-2017-16388
Published: 2017-12-09
Description: An issue was discovered in Adobe Acrobat and Reader: 2[PII_REDACTED]8 and earlier versions, 2[PII_REDACTED]6 and earlier versions, 2[PII_REDACTED]5 and earlier versions, and 11.0.22 and earlier versions. This vulnerability is an instance of a use after free vulnerability in the JavaScript API engine. The mismatch between an old and a new object can provide an attacker with unintended memory access -- potentially leading to code corruption, control-flow hijack, or an information leak attack. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: http://www.securityfocus.com/bid/101818; http://www.securitytracker.com/id/1039791; https://helpx.adobe.com/security/products/acrobat/apsb17-36.html
CVE: CVE-2017-16389
Published: 2017-12-09
Description: An issue was discovered in Adobe Acrobat and Reader: 2[PII_REDACTED]8 and earlier versions, 2[PII_REDACTED]6 and earlier versions, 2[PII_REDACTED]5 and earlier versions, and 11.0.22 and earlier versions. This vulnerability is an instance of a use after free vulnerability in the JavaScript engine. The mismatch between an old and a new object can provide an attacker with unintended memory access. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: http://www.securityfocus.com/bid/101818; http://www.securitytracker.com/id/1039791; https://helpx.adobe.com/security/products/acrobat/apsb17-36.html
CVE: CVE-2017-16390
Published: 2017-12-09
Description: An issue was discovered in Adobe Acrobat and Reader: 2[PII_REDACTED]8 and earlier versions, 2[PII_REDACTED]6 and earlier versions, 2[PII_REDACTED]5 and earlier versions, and 11.0.22 and earlier versions. This vulnerability is an instance of a use after free vulnerability in the JavaScript engine API. The mismatch between an old and a new object can provide an attacker with unintended memory access -- potentially leading to code corruption, control-flow hijack, or an information leak attack. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: http://www.securityfocus.com/bid/101818; http://www.securitytracker.com/id/1039791; https://helpx.adobe.com/security/products/acrobat/apsb17-36.html
CVE: CVE-2017-16391
Published: 2017-12-09
Description: An issue was discovered in Adobe Acrobat and Reader: 2[PII_REDACTED]8 and earlier versions, 2[PII_REDACTED]6 and earlier versions, 2[PII_REDACTED]5 and earlier versions, and 11.0.22 and earlier versions. The vulnerability is a result of untrusted input that is used to calculate an array index; the calculation occurs in the printing functionality. The vulnerability leads to an operation that can write to a memory location that is outside of the memory addresses allocated for the data structure. The specific scenario leads to a write access to a memory location that does not belong to the relevant process address space.
CVSS Score: 8.8 (HIGH)
CWE: CWE-129
References: http://www.securityfocus.com/bid/101819; http://www.securitytracker.com/id/1039791; https://helpx.adobe.com/security/products/acrobat/apsb17-36.html
CVE: CVE-2017-16392
Published: 2017-12-09
Description: An issue was discovered in Adobe Acrobat and Reader: 2[PII_REDACTED]8 and earlier versions, 2[PII_REDACTED]6 and earlier versions, 2[PII_REDACTED]5 and earlier versions, and 11.0.22 and earlier versions. The vulnerability is caused by a buffer access with an incorrect length value in the JPEG processing module. Crafted input with an unexpected JPEG file segment size causes a mismatch between allocated buffer size and the access allowed by the computation. If an attacker can adequately control the accessible memory then this vulnerability can be leveraged to achieve arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/101831; http://www.securitytracker.com/id/1039791; https://helpx.adobe.com/security/products/acrobat/apsb17-36.html
CVE: CVE-2017-16393
Published: 2017-12-09
Description: An issue was discovered in Adobe Acrobat and Reader: 2[PII_REDACTED]8 and earlier versions, 2[PII_REDACTED]6 and earlier versions, 2[PII_REDACTED]5 and earlier versions, and 11.0.22 and earlier versions. This vulnerability is an instance of a use after free vulnerability in the JavaScript engine. The mismatch between an old and a new object can provide an attacker with unintended memory access -- potentially leading to code corruption, control-flow hijack, or an information leak attack. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: http://www.securityfocus.com/bid/101818; http://www.securitytracker.com/id/1039791; https://helpx.adobe.com/security/products/acrobat/apsb17-36.html
CVE: CVE-2017-16394
Published: 2017-12-09
Description: An issue was discovered in Adobe Acrobat and Reader: 2[PII_REDACTED]8 and earlier versions, 2[PII_REDACTED]6 and earlier versions, 2[PII_REDACTED]5 and earlier versions, and 11.0.22 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the target buffer; the computation is a part of the WebCapture module. The use of an invalid (out-of-range) pointer offset during access of internal data structure fields causes the vulnerability. A successful attack can lead to sensitive data exposure.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/102140; http://www.securitytracker.com/id/1039791; https://helpx.adobe.com/security/products/acrobat/apsb17-36.html