deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2012-2773
Published: 2017-08-09
Description: Unspecified vulnerability in FFmpeg before 0.10.3 has unknown impact and attack vectors, a different vulnerability than CVE-2012-2771, CVE-2012-2778, CVE-2012-2780, and CVE-2012-2781.
CVSS Score: 9.8 (CRITICAL)
References: http://www.securityfocus.com/bid/100274; https://www.ffmpeg.org/security.html; http://www.securityfocus.com/bid/100274
CVE: CVE-2012-2778
Published: 2017-08-09
Description: Unspecified vulnerability in FFmpeg before 0.10.3 has unknown impact and attack vectors, a different vulnerability than CVE-2012-2771, CVE-2012-2773, CVE-2012-2780, and CVE-2012-2781.
CVSS Score: 9.8 (CRITICAL)
References: http://www.securityfocus.com/bid/100273; https://www.ffmpeg.org/security.html; http://www.securityfocus.com/bid/100273
CVE: CVE-2012-2780
Published: 2017-08-09
Description: Unspecified vulnerability in FFmpeg before 0.10.3 has unknown impact and attack vectors, a different vulnerability than CVE-2012-2771, CVE-2012-2773, CVE-2012-2778, and CVE-2012-2781.
CVSS Score: 9.8 (CRITICAL)
References: http://www.securityfocus.com/bid/100272; https://www.ffmpeg.org/security.html; http://www.securityfocus.com/bid/100272
CVE: CVE-2012-2781
Published: 2017-08-09
Description: Unspecified vulnerability in FFmpeg before 0.10.3 has unknown impact and attack vectors, a different vulnerability than CVE-2012-2771, CVE-2012-2773, CVE-2012-2778, and CVE-2012-2780.
CVSS Score: 9.8 (CRITICAL)
References: http://www.securityfocus.com/bid/100250; https://www.ffmpeg.org/security.html; http://www.securityfocus.com/bid/100250
CVE: CVE-2014-5144
Published: 2017-08-09
Description: Cross-site scripting (XSS) vulnerability in Telescope before 0.9.3 allows remote authenticated users to inject arbitrary web script or HTML via crafted markdown.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.telescopeapp.org/blog/telescope-v093-dailyscope/; https://www.exploit-db.com/exploits/36463/; http://www.telescopeapp.org/blog/telescope-v093-dailyscope/
CVE: CVE-2014-6393
Published: 2017-08-09
Description: The Express web framework before 3.11 and 4.x before 4.5 for Node.js does not provide a charset field in HTTP Content-Type headers in 400 level responses, which might allow remote attackers to conduct cross-site scripting (XSS) attacks via characters in a non-standard encoding.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://bugzilla.redhat.com/show_bug.cgi?id=1203190; https://nodesecurity.io/advisories/express-no-charset-in-content-type-header; https://bugzilla.redhat.com/show_bug.cgi?id=1203190
CVE: CVE-2014-9701
Published: 2017-08-09
Description: Cross-site scripting (XSS) vulnerability in MantisBT before 1.2.19 and 1.3.x before 1.3.0-beta.2 allows remote attackers to inject arbitrary web script or HTML via the url parameter to permalink_page.php.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2015/03/15/2; https://bugzilla.redhat.com/show_bug.cgi?id=1202885; https://github.com/mantisbt/mantisbt/commit/d95f070db852614fa18ccca6a4f12f4bffede1fd
CVE: CVE-2015-0780
Published: 2017-08-09
Description: SQL injection vulnerability in the GetReRequestData method of the GetStoredResult class in Novell ZENworks Configuration Management (ZCM) allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://www.securityfocus.com/bid/74284; http://www.securitytracker.com/id/1032166; http://www.zerodayinitiative.com/advisories/ZDI-15-147
CVE: CVE-2015-0781
Published: 2017-08-09
Description: Directory traversal vulnerability in the doPost method of the Rtrlet class in Novell ZENworks Configuration Management (ZCM) allows remote attackers to upload and execute arbitrary files via unspecified vectors.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: http://www.securityfocus.com/bid/74291; http://www.zerodayinitiative.com/advisories/ZDI-15-151; https://www.novell.com/support/kb/doc.php?id=7016431
CVE: CVE-2015-0782
Published: 2017-08-09
Description: SQL injection vulnerability in the ScheduleQuery method of the schedule class in Novell ZENworks Configuration Management (ZCM) allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://www.securityfocus.com/bid/72808; http://www.zerodayinitiative.com/advisories/ZDI-15-148; https://www.novell.com/support/kb/doc.php?id=7016431
CVE: CVE-2015-0783
Published: 2017-08-09
Description: The FileViewer class in Novell ZENworks Configuration Management (ZCM) allows remote authenticated users to read arbitrary files via the filename variable.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: http://www.securitytracker.com/id/1032166; http://www.zerodayinitiative.com/advisories/ZDI-15-150; https://www.novell.com/support/kb/doc.php?id=7016431
CVE: CVE-2015-0784
Published: 2017-08-09
Description: Rtrlet.class in Novell ZENworks Configuration Management (ZCM) allows remote attackers to obtain Session IDs of logged in users via a value of ShowLogins for the maintenance variable.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://www.securityfocus.com/bid/74289; http://www.securitytracker.com/id/1032166; http://www.zerodayinitiative.com/advisories/ZDI-15-149
CVE: CVE-2015-0785
Published: 2017-08-09
Description: com.novell.zenworks.inventory.rtr.actionclasses.wcreports in Novell ZENworks Configuration Management (ZCM) allows remote attackers to read arbitrary folders via the dirname variable.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://www.securityfocus.com/bid/74288; http://www.zerodayinitiative.com/advisories/ZDI-15-152; https://www.novell.com/support/kb/doc.php?id=7016431
CVE: CVE-2015-0786
Published: 2017-08-09
Description: Stack-based buffer overflow in the logging functionality in the Preboot Policy service in Novell ZENworks Configuration Management (ZCM) allows remote attackers to execute arbitrary code via unspecified vectors.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/74290; http://www.securitytracker.com/id/1032166; http://www.zerodayinitiative.com/advisories/ZDI-15-153
CVE: CVE-2015-1820
Published: 2017-08-09
Description: REST client for Ruby (aka rest-client) before 1.8.0 allows remote attackers to conduct session fixation attacks or obtain sensitive cookie information by leveraging passage of cookies set in a response to a redirect.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-384
References: http://www.openwall.com/lists/oss-security/2015/03/24/3; http://www.securityfocus.com/bid/73295; https://bugzilla.redhat.com/show_bug.cgi?id=1205291
CVE: CVE-2015-2291
Published: 2017-08-09
Description: (1) IQVW32.sys before 1.3.1.0 and (2) IQVW64.sys before 1.3.1.0 in the Intel Ethernet diagnostics driver for Windows allows local users to cause a denial of service or possibly execute arbitrary code with kernel privileges via a crafted (a) 0x80862013, (b) 0x8086200B, (c) 0x8086200F, or (d) 0x80862007 IOCTL call.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20, CWE-20
References: http://packetstormsecurity.com/files/130854/Intel-Network-Adapter-Diagnostic-Driver-IOCTL-DoS.html; http://www.securityfocus.com/bid/79623; https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00051&languageid=en-fr
CVE: CVE-2015-2310
Published: 2017-08-09
Description: Integer overflow in layout.c++ in Sandstorm Cap'n Proto before 0.4.1.1 and 0.5.x before 0.5.1.1 allows remote peers to cause a denial of service or possibly obtain sensitive information from memory via a crafted message, related to pointer validation.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-190
References: http://www.openwall.com/lists/oss-security/2015/03/17/3; https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=780565; https://github.com/capnproto/capnproto/blob/master/security-advisories/2015-03-02-0-c%2B%2B-integer-overflow.md
CVE: CVE-2015-2311
Published: 2017-08-09
Description: Integer underflow in Sandstorm Cap'n Proto before 0.4.1.1 and 0.5.x before 0.5.1.1 might allow remote peers to cause a denial of service or possibly obtain sensitive information from memory or execute arbitrary code via a crafted message.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-191
References: http://www.openwall.com/lists/oss-security/2015/03/17/3; https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=780566; https://github.com/capnproto/capnproto/blob/master/security-advisories/2015-03-02-1-c%2B%2B-integer-underflow.md
CVE: CVE-2015-2312
Published: 2017-08-09
Description: Sandstorm Cap'n Proto before 0.4.1.1 and 0.5.x before 0.5.1.1 allows remote peers to cause a denial of service (CPU and possibly general resource consumption) via a list with a large number of elements.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: http://www.openwall.com/lists/oss-security/2015/03/17/3; https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=780567; https://github.com/capnproto/capnproto/blob/master/security-advisories/2015-03-02-2-all-cpu-amplification.md
CVE: CVE-2015-2313
Published: 2017-08-09
Description: Sandstorm Cap'n Proto before 0.4.1.1 and 0.5.x before 0.5.1.2, when an application invokes the totalSize method on an object reader, allows remote peers to cause a denial of service (CPU consumption) via a crafted small message, which triggers a "tight" for loop.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-2312.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: http://www.openwall.com/lists/oss-security/2015/03/17/3; https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=780568; https://github.com/capnproto/capnproto/blob/master/security-advisories/2015-03-05-0-c%2B%2B-addl-cpu-amplification.md
CVE: CVE-2015-2674
Published: 2017-08-09
Description: Restkit allows man-in-the-middle attackers to spoof TLS servers by leveraging use of the ssl.wrap_socket function in Python with the default CERT_NONE value for the cert_reqs argument.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-295
References: http://www.openwall.com/lists/oss-security/2015/03/23/7; https://bugzilla.redhat.com/show_bug.cgi?id=1202837; https://github.com/benoitc/restkit/issues/140
CVE: CVE-2015-2687
Published: 2017-08-09
Description: OpenStack Compute (nova) Icehouse, Juno and Havana when live migration fails allows local users to access VM volumes that they would normally not have permissions for.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-284
References: http://www.openwall.com/lists/oss-security/2015/03/24/10; http://www.openwall.com/lists/oss-security/2015/03/25/3; http://www.securityfocus.com/bid/77505
CVE: CVE-2015-3277
Published: 2017-08-09
Description: The mod_nss module before 1.0.11 in Fedora allows remote attackers to obtain cipher lists due to incorrect parsing of multi-keyword cipherstring.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://lists.fedoraproject.org/pipermail/package-announce/2015-November/170607.html; https://bugzilla.redhat.com/show_bug.cgi?id=1238324; https://bugzilla.redhat.com/show_bug.cgi?id=1243518
CVE: CVE-2015-6498
Published: 2017-08-09
Description: Alcatel-Lucent Home Device Manager before 4.1.10, 4.2.x before 4.2.2 allows remote attackers to spoof and make calls as target devices.
CVSS Score: 7.5 (HIGH)
CWE: CWE-254
References: http://packetstormsecurity.com/files/134191/Alcatel-Lucent-Home-Device-Manager-Spoofing.html; http://seclists.org/fulldisclosure/2015/Nov/6; http://www.securityfocus.com/bid/77406
CVE: CVE-2015-6816
Published: 2017-08-09
Description: ganglia-web before 3.7.1 allows remote attackers to bypass authentication.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: http://lists.fedoraproject.org/pipermail/package-announce/2015-November/170362.html; http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169641.html; http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169788.html
CVE: CVE-2015-7894
Published: 2017-08-09
Description: The DCMProvider service in Samsung LibQjpeg on a Samsung SM-G925V device running build number LRX22G.G925VVRU1AOE2 allows remote attackers to cause a denial of service (segmentation fault and process crash) and execute arbitrary code via a crafted JPG.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://packetstormsecurity.com/files/134197/Samsung-LibQjpeg-Image-Decoding-Memory-Corruption.html; http://www.securityfocus.com/bid/77423; https://bugs.chromium.org/p/project-zero/issues/detail?id=495&redir=1
CVE: CVE-2016-6121
Published: 2017-08-09
Description: IBM Emptoris Supplier Lifecycle Management 10.0.x and 10.1.x is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 118383.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=swg22006854; http://www.securityfocus.com/bid/100222; https://exchange.xforce.ibmcloud.com/vulnerabilities/118383
CVE: CVE-2016-8949
Published: 2017-08-09
Description: IBM Emptoris Supplier Lifecycle Management 10.0.x and 10.1.x could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 118836.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-601
References: http://www.ibm.com/support/docview.wss?uid=swg22006854; http://www.securityfocus.com/bid/100222; https://exchange.xforce.ibmcloud.com/vulnerabilities/118836
CVE: CVE-2017-11368
Published: 2017-08-09
Description: In MIT Kerberos 5 (aka krb5) 1.7 and later, an authenticated attacker can cause a KDC assertion failure by sending invalid S4U2Self or S4U2Proxy requests.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-617
References: http://www.securityfocus.com/bid/100291; https://access.redhat.com/errata/RHSA-2018:0666; https://github.com/krb5/krb5/commit/ffb35baac6981f9e8914f8f3bffd37f284b85970
CVE: CVE-2017-1357
Published: 2017-08-09
Description: IBM Maximo Asset Management 7.5 and 7.6 could allow an authenticated user to manipulate work orders to forge emails which could be used to conduct further advanced attacks. IBM X-Force ID: 126684.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://www.ibm.com/support/docview.wss?uid=swg22006647; http://www.securityfocus.com/bid/100214; https://exchange.xforce.ibmcloud.com/vulnerabilities/126684
CVE: CVE-2017-1448
Published: 2017-08-09
Description: IBM Emptoris Supplier Lifecycle Management 10.0.x and 10.1.x could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 128173.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-601
References: http://www.ibm.com/support/docview.wss?uid=swg22006854; http://www.securityfocus.com/bid/100222; https://exchange.xforce.ibmcloud.com/vulnerabilities/128173
CVE: CVE-2017-0712
Published: 2017-08-09
Description: A elevation of privilege vulnerability in the Android framework (wi-fi service). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37207928.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20, CWE-119
References: http://www.securityfocus.com/bid/100220; https://source.android.com/security/bulletin/2017-08-01; http://www.securityfocus.com/bid/100220
CVE: CVE-2017-0713
Published: 2017-08-09
Description: A remote code execution vulnerability in the Android libraries (sfntly). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-32096780.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/100219; https://source.android.com/security/bulletin/2017-08-01; http://www.securityfocus.com/bid/100219
CVE: CVE-2017-0714
Published: 2017-08-09
Description: A remote code execution vulnerability in the Android media framework (h263 decoder). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36492637.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/100204; https://source.android.com/security/bulletin/2017-08-01; http://www.securityfocus.com/bid/100204
CVE: CVE-2017-0715
Published: 2017-08-09
Description: A remote code execution vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36998372.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119, CWE-131
References: http://www.securityfocus.com/bid/100204; https://source.android.com/security/bulletin/2017-08-01; http://www.securityfocus.com/bid/100204
CVE: CVE-2017-0716
Published: 2017-08-09
Description: A remote code execution vulnerability in the Android media framework (libmpeg2). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37203196.
CVSS Score: 7.8 (HIGH)
CWE: CWE-129
References: http://www.securityfocus.com/bid/100204; https://source.android.com/security/bulletin/2017-08-01; http://www.securityfocus.com/bid/100204
CVE: CVE-2017-0718
Published: 2017-08-09
Description: A remote code execution vulnerability in the Android media framework (mpeg2 decoder). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37273547.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/100204; https://source.android.com/security/bulletin/2017-08-01; http://www.securityfocus.com/bid/100204
CVE: CVE-2017-0719
Published: 2017-08-09
Description: A remote code execution vulnerability in the Android media framework (mpeg2 decoder). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37273673.
CVSS Score: 7.8 (HIGH)
CWE: CWE-772
References: http://www.securityfocus.com/bid/100204; https://source.android.com/security/bulletin/2017-08-01; http://www.securityfocus.com/bid/100204
CVE: CVE-2017-0720
Published: 2017-08-09
Description: A remote code execution vulnerability in the Android media framework (libhevc). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37430213.
CVSS Score: 7.8 (HIGH)
CWE: CWE-252
References: http://www.securityfocus.com/bid/100204; https://source.android.com/security/bulletin/2017-08-01; http://www.securityfocus.com/bid/100204
CVE: CVE-2017-0721
Published: 2017-08-09
Description: A remote code execution vulnerability in the Android media framework (libmpeg2). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37561455.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/100204; https://source.android.com/security/bulletin/2017-08-01; http://www.securityfocus.com/bid/100204
CVE: CVE-2017-0722
Published: 2017-08-09
Description: A remote code execution vulnerability in the Android media framework (h263 decoder). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37660827.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/100204; https://source.android.com/security/bulletin/2017-08-01; http://www.securityfocus.com/bid/100204
CVE: CVE-2017-0723
Published: 2017-08-09
Description: A remote code execution vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37968755.
CVSS Score: 7.8 (HIGH)
CWE: CWE-665
References: http://www.securityfocus.com/bid/100204; https://source.android.com/security/bulletin/2017-08-01; http://www.securityfocus.com/bid/100204
CVE: CVE-2017-0724
Published: 2017-08-09
Description: A denial of service vulnerability in the Android media framework (libmpeg2). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36819262.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/bid/100204; https://source.android.com/security/bulletin/2017-08-01; http://www.securityfocus.com/bid/100204
CVE: CVE-2017-0725
Published: 2017-08-09
Description: A denial of service vulnerability in the Android media framework (libskia). Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-37627194.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125, CWE-770
References: http://www.securityfocus.com/bid/100204; https://source.android.com/security/bulletin/2017-08-01; http://www.securityfocus.com/bid/100204
CVE: CVE-2017-0726
Published: 2017-08-09
Description: A denial of service vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36389123.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-772
References: http://www.securityfocus.com/bid/100204; https://source.android.com/security/bulletin/2017-08-01; http://www.securityfocus.com/bid/100204
CVE: CVE-2017-0727
Published: 2017-08-09
Description: A elevation of privilege vulnerability in the Android media framework (libgui). Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-33004354.
CVSS Score: 7.8 (HIGH)
CWE: CWE-362, CWE-416
References: http://www.securityfocus.com/bid/100204; https://source.android.com/security/bulletin/2017-08-01; http://www.securityfocus.com/bid/100204
CVE: CVE-2017-0728
Published: 2017-08-09
Description: A denial of service vulnerability in the Android media framework (hevc decoder). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37469795.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/100204; https://source.android.com/security/bulletin/2017-08-01; http://www.securityfocus.com/bid/100204
CVE: CVE-2017-0729
Published: 2017-08-09
Description: A elevation of privilege vulnerability in the Android media framework (mediadrmserver). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37710346.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: http://www.securityfocus.com/bid/100204; https://source.android.com/security/bulletin/2017-08-01; http://www.securityfocus.com/bid/100204
CVE: CVE-2017-0730
Published: 2017-08-09
Description: A denial of service vulnerability in the Android media framework (h264 decoder). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36279112.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-909
References: http://www.securityfocus.com/bid/100204; https://source.android.com/security/bulletin/2017-08-01; http://www.securityfocus.com/bid/100204
CVE: CVE-2017-0731
Published: 2017-08-09
Description: A elevation of privilege vulnerability in the Android media framework (mpeg4 encoder). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36075363.
CVSS Score: 7.8 (HIGH)
CWE: CWE-763
References: http://www.securityfocus.com/bid/100204; https://source.android.com/security/bulletin/2017-08-01; http://www.securityfocus.com/bid/100204
CVE: CVE-2017-0732
Published: 2017-08-09
Description: A elevation of privilege vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37504237.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/100204; https://source.android.com/security/bulletin/2017-08-01; http://www.securityfocus.com/bid/100204
CVE: CVE-2017-0733
Published: 2017-08-09
Description: A denial of service vulnerability in the Android media framework (libmediaplayerservice). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-38391487.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-404
References: http://www.securityfocus.com/bid/100204; https://source.android.com/security/bulletin/2017-08-01; http://www.securityfocus.com/bid/100204
CVE: CVE-2017-0734
Published: 2017-08-09
Description: A denial of service vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-38014992.
CVSS Score: 5.5 (MEDIUM)
References: http://www.securityfocus.com/bid/100204; https://source.android.com/security/bulletin/2017-08-01; http://www.securityfocus.com/bid/100204