deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-17449
Published: 2017-12-07
Description: The __netlink_deliver_tap_skb function in net/netlink/af_netlink.c in the Linux kernel through 4.14.4, when CONFIG_NLMON is enabled, does not restrict observations of Netlink messages to a single net namespace, which allows local users to obtain sensitive information by leveraging the CAP_NET_ADMIN capability to sniff an nlmon interface for all Netlink activity on the system.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/102122; https://access.redhat.com/errata/RHSA-2018:0654; https://access.redhat.com/errata/RHSA-2018:0676
CVE: CVE-2017-17450
Published: 2017-12-07
Description: net/netfilter/xt_osf.c in the Linux kernel through 4.14.4 does not require the CAP_NET_ADMIN capability for add_callback and remove_callback operations, which allows local users to bypass intended access restrictions because the xt_osf_fingers data structure is shared across all net namespaces.
CVSS Score: 7.8 (HIGH)
CWE: CWE-862
References: http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html; http://www.securityfocus.com/bid/102110; https://lkml.org/lkml/2017/12/5/982
CVE: CVE-2017-17451
Published: 2017-12-07
Description: The WP Mailster plugin before 1.5.5 for WordPress has XSS in the unsubscribe handler via the mes parameter to view/subscription/unsubscribe2.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://packetstormsecurity.com/files/145222/WordPress-WP-Mailster-1.5.4.0-Cross-Site-Scripting.html; https://wordpress.org/plugins/wp-mailster/#developers; https://wpvulndb.com/vulnerabilities/8973
CVE: CVE-2017-15121
Published: 2017-12-07
Description: A non-privileged user is able to mount a fuse filesystem on RHEL 6 or 7 and crash a system if an application punches a hole in a file that does not end aligned to a page boundary.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20, CWE-20
References: http://www.securityfocus.com/bid/102128; https://access.redhat.com/errata/RHSA-2018:0676; https://access.redhat.com/errata/RHSA-2018:1062
CVE: CVE-2017-16884
Published: 2017-12-07
Description: Cross-site scripting (XSS) vulnerability in MistServer before 2.13 allows remote attackers to inject arbitrary web script or HTML via vectors related to failed authentication requests alerts.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://hyp3rlinx.altervista.org/advisories/MIST-SERVER-v2.12-UNAUTHENTICATED-PERSISTENT-XSS-CVE-2017-16884.txt; http://packetstormsecurity.com/files/145182/MistServer-2.12-Cross-Site-Scripting.html; http://seclists.org/fulldisclosure/2017/Dec/2
CVE: CVE-2017-17055
Published: 2017-12-07
Description: Artica Web Proxy before 3.06.112911 allows remote attackers to execute arbitrary code as root by conducting a cross-site scripting (XSS) attack involving the username-form-id parameter to freeradius.users.php.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-78
References: http://hyp3rlinx.altervista.org/advisories/ARTICA-WEB-PROXY-v3.06-REMOTE-CODE-EXECUTION-CVE-2017-17055.txt; http://packetstormsecurity.com/files/145183/Artica-Web-Proxy-3.06.112216-Remote-Code-Execution.html; http://seclists.org/fulldisclosure/2017/Dec/3
CVE: CVE-2017-17381
Published: 2017-12-07
Description: The Virtio Vring implementation in QEMU allows local OS guest users to cause a denial of service (divide-by-zero error and QEMU process crash) by unsetting vring alignment while updating Virtio rings.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-369
References: http://www.openwall.com/lists/oss-security/2017/12/05/2; http://www.securityfocus.com/bid/102059; https://lists.gnu.org/archive/html/qemu-devel/2017-12/msg00166.html
CVE: CVE-2017-17384
Published: 2017-12-07
Description: ISPConfig 3.x before 3.1.9 allows remote authenticated users to obtain root access by creating a crafted cron job.
CVSS Score: 8.8 (HIGH)
CWE: CWE-269
References: https://www.ispconfig.org/blog/ispconfig-3-1-9-released-important-security-update/; https://www.ispconfig.org/blog/ispconfig-3-1-9-released-important-security-update/
CVE: CVE-2017-17430
Published: 2017-12-07
Description: Sangoma NetBorder / Vega Session Controller before 2.3.12-80-GA allows remote attackers to execute arbitrary commands via the web interface.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: ftp://ftp.sangoma.com/nsc/2.3/Changelog; ftp://ftp.sangoma.com/nsc/2.3/Changelog
CVE: CVE-2017-17456
Published: 2017-12-07
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-14245. Reason: This candidate is a duplicate of CVE-2017-14245. Notes: All CVE users should reference CVE-2017-14245 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2017-17457
Published: 2017-12-07
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-14246. Reason: This candidate is a duplicate of CVE-2017-14246. Notes: All CVE users should reference CVE-2017-14246 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2017-1271
Published: 2017-12-07
Description: IBM Security Guardium 9.0, 9.1, and 9.5 supports interaction between multiple actors and allows those actors to negotiate which algorithm should be used as a protection mechanism such as encryption or authentication, but it does not select the strongest algorithm that is available to both parties. IBM X-Force ID: 124746.
CVSS Score: 7.5 (HIGH)
CWE: CWE-326
References: http://www.ibm.com/support/docview.wss?uid=swg22010435; http://www.securityfocus.com/bid/102034; http://www.securitytracker.com/id/1039961
CVE: CVE-2017-1336
Published: 2017-12-07
Description: IBM Infosphere BigInsights 4.2.0 could allow an attacker to inject code that could allow access to restricted data and files. IBM X-Force ID: 126244.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-94
References: http://www.ibm.com/support/docview.wss?uid=swg22010812; http://www.securityfocus.com/bid/102061; https://exchange.xforce.ibmcloud.com/vulnerabilities/126244
CVE: CVE-2017-1341
Published: 2017-12-07
Description: IBM WebSphere MQ 8.0 and 9.0 could allow, under special circumstances, an unauthorized user to access an object which they should have been denied access. IBM X-Force ID: 126456.
CVSS Score: 3.7 (LOW)
References: http://www.ibm.com/support/docview.wss?uid=swg22005400; http://www.securityfocus.com/bid/102042; https://exchange.xforce.ibmcloud.com/vulnerabilities/126456
CVE: CVE-2017-1342
Published: 2017-12-07
Description: IBM Insights Foundation for Energy 2.0 could reveal sensitive information in error messages to authenticated users that could e used to conduct further attacks. IBM X-Force ID: 126457.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www.ibm.com/support/docview.wss?uid=swg22009039; https://exchange.xforce.ibmcloud.com/vulnerabilities/126457; http://www.ibm.com/support/docview.wss?uid=swg22009039
CVE: CVE-2017-1353
Published: 2017-12-07
Description: IBM Atlas eDiscovery Process Management 6.0.3 could allow an authenticated attacker to obtain sensitive information when an unsuspecting user clicks on unsafe third-party links. IBM X-Force ID: 126680.
CVSS Score: 3.5 (LOW)
CWE: CWE-200
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/126680; https://www.ibm.com/support/docview.wss?uid=swg22005827; https://exchange.xforce.ibmcloud.com/vulnerabilities/126680
CVE: CVE-2017-1354
Published: 2017-12-07
Description: IBM Atlas eDiscovery Process Management 6.0.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 126681.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/126681; https://www.ibm.com/support/docview.wss?uid=swg22005828; https://exchange.xforce.ibmcloud.com/vulnerabilities/126681
CVE: CVE-2017-1355
Published: 2017-12-07
Description: IBM Atlas eDiscovery Process Management 6.0.3 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 126682.
CVSS Score: 3.7 (LOW)
CWE: CWE-200
References: http://www.securityfocus.com/bid/102016; https://exchange.xforce.ibmcloud.com/vulnerabilities/126682; https://www.ibm.com/support/docview.wss?uid=swg22005836
CVE: CVE-2017-1356
Published: 2017-12-07
Description: IBM Atlas eDiscovery Process Management 6.0.3 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 126683.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: http://www.securityfocus.com/bid/102033; https://exchange.xforce.ibmcloud.com/vulnerabilities/126683; https://www.ibm.com/support/docview.wss?uid=swg22005835
CVE: CVE-2017-1433
Published: 2017-12-07
Description: IBM WebSphere MQ 7.5, 8.0, and 9.0 could allow an authenticated user to insert messages with a corrupt RFH header into the channel which would cause it to restart. IBM X-Force ID: 127803.
CVSS Score: 6.5 (MEDIUM)
References: http://www.ibm.com/support/docview.wss?uid=swg22005525; http://www.securityfocus.com/bid/102163; https://exchange.xforce.ibmcloud.com/vulnerabilities/127803
CVE: CVE-2017-1465
Published: 2017-12-07
Description: IBM TRIRIGA 3.2, 3.3, 3.4, and 3.5 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 128464.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=swg22006184; https://exchange.xforce.ibmcloud.com/vulnerabilities/128464; http://www.ibm.com/support/docview.wss?uid=swg22006184
CVE: CVE-2017-1481
Published: 2017-12-07
Description: IBM Sterling B2B Integrator Standard Edition 5.2 allows a user to view sensitive information that belongs to another user. IBM X-Force ID: 128619.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www.ibm.com/support/docview.wss?uid=swg22010761; http://www.securityfocus.com/bid/102043; https://exchange.xforce.ibmcloud.com/vulnerabilities/128619
CVE: CVE-2017-1482
Published: 2017-12-07
Description: IBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 128620.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=swg22010762; http://www.securityfocus.com/bid/102035; https://exchange.xforce.ibmcloud.com/vulnerabilities/128620
CVE: CVE-2017-1487
Published: 2017-12-07
Description: IBM Sterling File Gateway 2.2 could allow an authenticated attacker to obtain sensitive information such as login ids on the system. IBM X-Force ID: 128626.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: http://www.ibm.com/support/docview.wss?uid=swg22010552; http://www.securityfocus.com/bid/102036; https://exchange.xforce.ibmcloud.com/vulnerabilities/128626
CVE: CVE-2017-1497
Published: 2017-12-07
Description: IBM Sterling File Gateway 2.2 could allow an unauthorized user to view files they should not have access to providing they know the directory location of the file. IBM X-Force ID: 128695.
CVSS Score: 3.7 (LOW)
CWE: CWE-200
References: http://www.ibm.com/support/docview.wss?uid=swg22010738; http://www.securityfocus.com/bid/102187; https://exchange.xforce.ibmcloud.com/vulnerabilities/128695
CVE: CVE-2017-1498
Published: 2017-12-07
Description: IBM Connections 5.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 129020.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=swg22006286; http://www.securityfocus.com/bid/102048; https://exchange.xforce.ibmcloud.com/vulnerabilities/129020
CVE: CVE-2017-3737
Published: 2017-12-07
Description: OpenSSL 1.0.2 (starting from version 1.0.2b) introduced an "error state" mechanism. The intent was that if a fatal error occurred during a handshake then OpenSSL would move into the error state and would immediately fail if you attempted to continue the handshake. This works as designed for the explicit handshake functions (SSL_do_handshake(), SSL_accept() and SSL_connect()), however due to a bug it does not work correctly if SSL_read() or SSL_write() is called directly. In that scenario, if the handshake fails then a fatal error will be returned in the initial function call. If SSL_read()/SSL_write() is subsequently called by the application for the same SSL object then it will succeed and the data is passed without being decrypted/encrypted directly from the SSL/TLS record layer. In order to exploit this issue an application bug would have to be present that resulted in a call to SSL_read()/SSL_write() being issued after having already received a fatal error. OpenSSL version 1.0.2b-1.0.2m are affected. Fixed in OpenSSL 1.0.2n. OpenSSL 1.1.0 is not affected.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-125, CWE-787
References: http://www.oracle.com/technetwork/security-advisory/cpuapr2[PII_REDACTED].html; http://www.oracle.com/technetwork/security-advisory/cpujan2[PII_REDACTED].html; http://www.oracle.com/technetwork/security-advisory/cpujul2[PII_REDACTED].html
CVE: CVE-2017-3738
Published: 2017-12-07
Description: There is an overflow bug in the AVX2 Montgomery multiplication procedure used in exponentiation with 1024-bit moduli. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH1024 are considered just feasible, because most of the work necessary to deduce information about a private key may be performed offline. The amount of resources required for such an attack would be significant. However, for an attack on TLS to be meaningful, the server would have to share the DH1024 private key among multiple clients, which is no longer an option since CVE-2016-0701. This only affects processors that support the AVX2 but not ADX extensions like Intel Haswell (4th generation). Note: The impact from this issue is similar to CVE-2017-3736, CVE-2017-3732 and CVE-2015-3193. OpenSSL version 1.0.2-1.0.2m and 1.1.0-1.1.0g are affected. Fixed in OpenSSL 1.0.2n. Due to the low severity of this issue we are not issuing a new release of OpenSSL 1.1.0 at this time. The fix will be included in OpenSSL 1.1.0h when it becomes available. The fix is also available in commit e502cc86d in the OpenSSL git repository.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-200
References: http://www.oracle.com/technetwork/security-advisory/cpuapr2[PII_REDACTED].html; http://www.oracle.com/technetwork/security-advisory/cpujan2[PII_REDACTED].html; http://www.oracle.com/technetwork/security-advisory/cpujul2[PII_REDACTED].html
CVE: CVE-2017-11937
Published: 2017-12-07
Description: The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Windows 7 SP1, Windows 8.1, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, 1709 and Windows Server 2016, Windows Server, version 1709, Microsoft Exchange Server 2013 and 2016, does not properly scan a specially crafted file leading to remote code execution. aka "Microsoft Malware Protection Engine Remote Code Execution Vulnerability".
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/102070; http://www.securitytracker.com/id/1039972; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11937
CVE: CVE-2017-17458
Published: 2017-12-07
Description: In Mercurial before 4.4.1, it is possible that a specially malformed repository can cause Git subrepositories to run arbitrary code in the form of a .git/hooks/post-update script checked into the repository. Typical use of Mercurial prevents construction of such repositories, but they can be created programmatically.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: http://www.securityfocus.com/bid/102926; https://bz.mercurial-scm.org/show_bug.cgi?id=5730; https://confluence.atlassian.com/sourcetreekb/sourcetree-security-advisory-2018-01-24-942834324.html
CVE: CVE-2017-17459
Published: 2017-12-07
Description: http_transport.c in Fossil before 2.4, when the SSH sync protocol is used, allows user-assisted remote attackers to execute arbitrary commands via an ssh URL with an initial dash character in the hostname, a related issue to CVE-2017-9800, CVE-2017-12836, CVE-2017-12976, CVE-2017-14176, CVE-2017-16228, CVE-2[PII_REDACTED], and CVE-2[PII_REDACTED].
CVSS Score: 8.8 (HIGH)
References: https://bugzilla.opensuse.org/show_bug.cgi?id=1071709; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BLAFCQGE7C5UMX75LESNUMKTXTURUVQM/; https://www.fossil-scm.org/xfer/doc/trunk/www/changes.wiki#v2_4
CVE: CVE-2[PII_REDACTED]
Published: 2017-12-07
Description: The Linux kernel version 3.3-rc1 and later is affected by a vulnerability lies in the processing of incoming L2CAP commands - ConfigRequest, and ConfigResponse messages. This info leak is a result of uninitialized stack variables that may be returned to an attacker in their uninitialized state. By manipulating the code flows that precede the handling of these configuration messages, an attacker can also gain some control over which data will be held in the uninitialized stack variables. This can allow him to bypass KASLR, and stack canaries protection - as both pointers and stack canaries may be leaked in this manner. Combining this vulnerability (for example) with the previously disclosed RCE vulnerability in L2CAP configuration parsing (CVE-2[PII_REDACTED]) may allow an attacker to exploit the RCE against kernels which were built with the above mitigations. These are the specifics of this vulnerability: In the function l2cap_parse_conf_rsp and in the function l2cap_parse_conf_req the following variable is declared without initialization: struct l2cap_conf_efs efs; In addition, when parsing input configuration parameters in both of these functions, the switch case for handling EFS elements may skip the memcpy call that will write to the efs variable: ... case L2CAP_CONF_EFS: if (olen == sizeof(efs)) memcpy(&efs, (void *)val, olen); ... The olen in the above if is attacker controlled, and regardless of that if, in both of these functions the efs variable would eventually be added to the outgoing configuration request that is being built: l2cap_add_conf_opt(&ptr, L2CAP_CONF_EFS, sizeof(efs), (unsigned long) &efs); So by sending a configuration request, or response, that contains an L2CAP_CONF_EFS element, but with an element length that is not sizeof(efs) - the memcpy to the uninitialized efs variable can be avoided, and the uninitialized variable would be returned to the attacker (16 bytes).
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://seclists.org/oss-sec/2017/q4/357; http://www.securityfocus.com/bid/102101; https://access.redhat.com/errata/RHSA-2018:0654
CVE: CVE-2017-14386
Published: 2017-12-07
Description: The web user interface of Dell 2335dn and 2355dn Multifunction Laser Printers, firmware versions prior to V2.70.06.26 A13 and V2.70.45.34 A10 respectively, are affected by a cross-site scripting vulnerability. Attackers could potentially exploit this vulnerability to execute arbitrary HTML or JavaScript code in the user's browser session in the context of the affected website.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.dell.com/support/home/us/en/19/drivers/driversdetails?driverId=782W3; http://www.dell.com/support/home/us/en/19/drivers/driversdetails?driverId=CG55V; http://www.dell.com/support/home/us/en/19/drivers/driversdetails?driverId=782W3
CVE: CVE-2017-17461
Published: 2017-12-08
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none
CVE: CVE-2017-17463
Published: 2017-12-08
Description: Vivo modems allow remote attackers to obtain sensitive information by reading the index.cgi?page=wifi HTML source code, as demonstrated by ssid and psk_wepkey fields.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://github.com/mateeuslinno/viv0n; https://github.com/mateeuslinno/viv0n
CVE: CVE-2017-17464
Published: 2017-12-08
Description: K7Sentry.sys 15.1.0.59 in K7 Antivirus 15.1.0309 has a NULL pointer dereference via a 0x95002570 DeviceIoControl request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-476
References: https://github.com/k0keoyo/Driver-Loaded-PoC/tree/master/K7-Antivirus/K7Anti_Nullptr_Dereference_0x95002570; https://github.com/k0keoyo/Driver-Loaded-PoC/tree/master/K7-Antivirus/K7Anti_Nullptr_Dereference_0x95002570
CVE: CVE-2017-17465
Published: 2017-12-08
Description: K7Sentry.sys 15.1.0.59 in K7 Antivirus 15.1.0309 has a NULL pointer dereference via a 0x95002574 DeviceIoControl request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-476
References: https://github.com/k0keoyo/Driver-Loaded-PoC/tree/master/K7-Antivirus/K7Anti_Nullptr_Dereference_0x95002574; https://github.com/k0keoyo/Driver-Loaded-PoC/tree/master/K7-Antivirus/K7Anti_Nullptr_Dereference_0x95002574
CVE: CVE-2017-17466
Published: 2017-12-08
Description: TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to gain privileges or cause a denial of service (Arbitrary Write) via a \\.\Viragtlt DeviceIoControl request of 0x82730088.
CVSS Score: 7.8 (HIGH)
References: https://github.com/rubyfly/Vir.IT-explorer_POC/tree/master/0x82730088; https://github.com/rubyfly/Vir.IT-explorer_POC/tree/master/0x82730088
CVE: CVE-2017-17467
Published: 2017-12-08
Description: TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact via a \\.\Viragtlt DeviceIoControl request of 0x82730074.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/rubyfly/Vir.IT-explorer_POC/tree/master/0x82730074; https://github.com/rubyfly/Vir.IT-explorer_POC/tree/master/0x82730074
CVE: CVE-2017-17468
Published: 2017-12-08
Description: TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to gain privileges or cause a denial of service (Arbitrary Write) via a \\.\Viragtlt DeviceIoControl request of 0x82730020, a different vulnerability than CVE-2017-17050.
CVSS Score: 7.8 (HIGH)
References: https://github.com/rubyfly/Vir.IT-explorer_POC/tree/master/0x82730020; https://github.com/rubyfly/Vir.IT-explorer_POC/tree/master/0x82730020
CVE: CVE-2017-17469
Published: 2017-12-08
Description: TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact via a \\.\Viragtlt DeviceIoControl request of 0x82730008, a different vulnerability than CVE-2017-16948.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/rubyfly/Vir.IT-explorer_POC/tree/master/0x82730008; https://github.com/rubyfly/Vir.IT-explorer_POC/tree/master/0x82730008
CVE: CVE-2017-17470
Published: 2017-12-08
Description: TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact via a \\.\Viragtlt DeviceIoControl request of 0x82730054.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/rubyfly/Vir.IT-explorer_POC/tree/master/0x82730054; https://github.com/rubyfly/Vir.IT-explorer_POC/tree/master/0x82730054