deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2014-9659
Published: 2015-02-08
Description: cff/cf2intrp.c in the CFF CharString interpreter in FreeType before 2.5.4 proceeds with additional hints after the hint mask has been computed, which allows remote attackers to execute arbitrary code or cause a denial of service (stack-based buffer overflow) via a crafted OpenType font.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2240.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://code.google.com/p/google-security-research/issues/detail?id=190; http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=2cdc4562f873237f1c77d43540537c7a721d3fd8; http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150148.html
CVE: CVE-2014-9660
Published: 2015-02-08
Description: The _bdf_parse_glyphs function in bdf/bdflib.c in FreeType before 2.5.4 does not properly handle a missing ENDCHAR record, which allows remote attackers to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via a crafted BDF font.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: http://advisories.mageia.org/MGASA-2015-0083.html; http://code.google.com/p/google-security-research/issues/detail?id=188; http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=af8346172a7b573715134f7a51e6c5c60fa7f2ab
CVE: CVE-2014-9661
Published: 2015-02-08
Description: type42/t42parse.c in FreeType before 2.5.4 does not consider that scanning can be incomplete without triggering an error, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted Type42 font.
CVSS Score: 7.5 (HIGH)
References: http://advisories.mageia.org/MGASA-2015-0083.html; http://code.google.com/p/google-security-research/issues/detail?id=187; http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=3788187e0c396952cd7d905c6c61f3ff8e84b2b4
CVE: CVE-2014-9662
Published: 2015-02-08
Description: cff/cf2ft.c in FreeType before 2.5.4 does not validate the return values of point-allocation functions, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted OTF font.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://advisories.mageia.org/MGASA-2015-0083.html; http://code.google.com/p/google-security-research/issues/detail?id=185; http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=5f201ab5c24cb69bc96b724fd66e739928d6c5e2
CVE: CVE-2014-9663
Published: 2015-02-08
Description: The tt_cmap4_validate function in sfnt/ttcmap.c in FreeType before 2.5.4 validates a certain length field before that field's value is completely calculated, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted cmap SFNT table.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://advisories.mageia.org/MGASA-2015-0083.html; http://code.google.com/p/google-security-research/issues/detail?id=184; http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=9bd20b7304aae61de5d50ac359cf27132bafd4c1
CVE: CVE-2014-9664
Published: 2015-02-08
Description: FreeType before 2.5.4 does not check for the end of the data during certain parsing actions, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted Type42 font, related to type42/t42parse.c and type1/t1load.c.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://advisories.mageia.org/MGASA-2015-0083.html; http://code.google.com/p/google-security-research/issues/detail?id=183; http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=73be9f9ab67842cfbec36ee99e8d2301434c84ca
CVE: CVE-2014-9665
Published: 2015-02-08
Description: The Load_SBit_Png function in sfnt/pngshim.c in FreeType before 2.5.4 does not restrict the rows and pitch values of PNG data, which allows remote attackers to cause a denial of service (integer overflow and heap-based buffer overflow) or possibly have unspecified other impact by embedding a PNG file in a .ttf font file.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://code.google.com/p/google-security-research/issues/detail?id=168; http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=54abd22891bd51ef8b533b24df53b3019b5cee81; http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=b3500af[PII_REDACTED]46ec4076d1e1c0641e33727
CVE: CVE-2014-9666
Published: 2015-02-08
Description: The tt_sbit_decoder_init function in sfnt/ttsbit.c in FreeType before 2.5.4 proceeds with a count-to-size association without restricting the count value, which allows remote attackers to cause a denial of service (integer overflow and out-of-bounds read) or possibly have unspecified other impact via a crafted embedded bitmap.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-189
References: http://advisories.mageia.org/MGASA-2015-0083.html; http://code.google.com/p/google-security-research/issues/detail?id=167; http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=257c270bd25e15890190a28a1456e7623bba4439
CVE: CVE-2014-9667
Published: 2015-02-08
Description: sfnt/ttload.c in FreeType before 2.5.4 proceeds with offset+length calculations without restricting the values, which allows remote attackers to cause a denial of service (integer overflow and out-of-bounds read) or possibly have unspecified other impact via a crafted SFNT table.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://advisories.mageia.org/MGASA-2015-0083.html; http://code.google.com/p/google-security-research/issues/detail?id=166; http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=677ddf4f1dc1b36cef7c7ddd59a14c508f4b1891
CVE: CVE-2014-9668
Published: 2015-02-08
Description: The woff_open_font function in sfnt/sfobjs.c in FreeType before 2.5.4 proceeds with offset+length calculations without restricting length values, which allows remote attackers to cause a denial of service (integer overflow and heap-based buffer overflow) or possibly have unspecified other impact via a crafted Web Open Font Format (WOFF) file.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://code.google.com/p/google-security-research/issues/detail?id=164; http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=f46add13895337ece929b18bb8f036431b3fb538; http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150148.html
CVE: CVE-2014-9669
Published: 2015-02-08
Description: Multiple integer overflows in sfnt/ttcmap.c in FreeType before 2.5.4 allow remote attackers to cause a denial of service (out-of-bounds read or memory corruption) or possibly have unspecified other impact via a crafted cmap SFNT table.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-125
References: http://advisories.mageia.org/MGASA-2015-0083.html; http://code.google.com/p/google-security-research/issues/detail?id=163; http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=602040b1112c9f94d68e200be59ea7ac3d104565
CVE: CVE-2014-9670
Published: 2015-02-08
Description: Multiple integer signedness errors in the pcf_get_encodings function in pcf/pcfread.c in FreeType before 2.5.4 allow remote attackers to cause a denial of service (integer overflow, NULL pointer dereference, and application crash) via a crafted PCF file that specifies negative values for the first column and first row.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-189
References: http://advisories.mageia.org/MGASA-2015-0083.html; http://code.google.com/p/google-security-research/issues/detail?id=158; http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=ef1eba75187adfac750f326b563fe543dd5ff4e6
CVE: CVE-2014-9671
Published: 2015-02-08
Description: Off-by-one error in the pcf_get_properties function in pcf/pcfread.c in FreeType before 2.5.4 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted PCF file with a 0xffffffff size value that is improperly incremented.
CVSS Score: 4.3 (MEDIUM)
References: http://advisories.mageia.org/MGASA-2015-0083.html; http://code.google.com/p/google-security-research/issues/detail?id=157; http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=0e2f5d518c60e2978f26400d110eff178fa7e3c3
CVE: CVE-2014-9672
Published: 2015-02-08
Description: Array index error in the parse_fond function in base/ftmac.c in FreeType before 2.5.4 allows remote attackers to cause a denial of service (out-of-bounds read) or obtain sensitive information from process memory via a crafted FOND resource in a Mac font file.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-119
References: http://advisories.mageia.org/MGASA-2015-0083.html; http://code.google.com/p/google-security-research/issues/detail?id=155; http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=18a8f0d[PII_REDACTED]bc4de92d411c78fb08d616c
CVE: CVE-2014-9673
Published: 2015-02-08
Description: Integer signedness error in the Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.5.4 allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted Mac font.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://advisories.mageia.org/MGASA-2015-0083.html; http://code.google.com/p/google-security-research/issues/detail?id=154; http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=35252ae9aa1dd9343e9f4884e9ddb1fee10ef415
CVE: CVE-2014-9674
Published: 2015-02-08
Description: The Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.5.4 proceeds with adding to length values without validating the original values, which allows remote attackers to cause a denial of service (integer overflow and heap-based buffer overflow) or possibly have unspecified other impact via a crafted Mac font.
CVSS Score: 7.5 (HIGH)
References: http://advisories.mageia.org/MGASA-2015-0083.html; http://code.google.com/p/google-security-research/issues/detail?id=153; http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=240c94a185cd8dae7d03059abec8a5662c35ecd3
CVE: CVE-2014-9675
Published: 2015-02-08
Description: bdf/bdflib.c in FreeType before 2.5.4 identifies property names by only verifying that an initial substring is present, which allows remote attackers to discover heap pointer values and bypass the ASLR protection mechanism via a crafted BDF font.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://advisories.mageia.org/MGASA-2015-0083.html; http://code.google.com/p/google-security-research/issues/detail?id=151; http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=2c4832d30939b45c05757f0a05128ce64c4cacc7
CVE: CVE-2014-8614
Published: 2015-02-09
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2014.  Notes: none
CVE: CVE-2014-8615
Published: 2015-02-09
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2014.  Notes: none
CVE: CVE-2015-1558
Published: 2015-02-09
Description: Asterisk Open Source 12.x before 12.8.1 and 13.x before 13.1.1, when using the PJSIP channel driver, does not properly reclaim RTP ports, which allows remote authenticated users to cause a denial of service (file descriptor consumption) via an SDP offer containing only incompatible codecs.
CVSS Score: 3.5 (LOW)
CWE: CWE-399
References: http://downloads.asterisk.org/pub/security/AST-2015-001.html; http://seclists.org/fulldisclosure/2015/Jan/116; http://www.securityfocus.com/archive/1/534573/100/0/threaded
CVE: CVE-2015-1562
Published: 2015-02-09
Description: Multiple cross-site scripting (XSS) vulnerabilities in Saurus CMS 4.7.0 allow remote attackers to inject arbitrary web script or HTML via the (1) search parameter to admin/user_management.php, (2) data_search parameter to /admin/profile_data.php, or (3) filter parameter to error_log.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://seclists.org/fulldisclosure/2015/Jan/112; http://sroesemann.blogspot.de/2015/01/report-for-advisory-sroeadv-2015-05.html; http://sroesemann.blogspot.de/2015/01/sroeadv-2015-05.html
CVE: CVE-2015-1563
Published: 2015-02-09
Description: The ARM GIC distributor virtualization in Xen 4.4.x and 4.5.x allows local guests to cause a denial of service by causing a large number messages to be logged.
CVSS Score: 2.1 (LOW)
CWE: CWE-399
References: http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152776.html; http://www.openwall.com/lists/oss-security/2015/01/29/9; http://www.securityfocus.com/bid/72766
CVE: CVE-2013-4186
Published: 2015-02-09
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
CVE: CVE-2015-0246
Published: 2015-02-09
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2015-1493.  Reason: This candidate is a reservation duplicate of CVE-2015-1493.  Notes: All CVE users should reference CVE-2015-1493 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2015-1564
Published: 2015-02-09
Description: Cross-site scripting (XSS) vulnerability in style-underground/search in Plain Black WebGUI 7.10.29 and earlier allows remote attackers to inject arbitrary web script or HTML via the Search field.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://seclists.org/fulldisclosure/2015/Jan/79; http://secupent.com/exploit/WebGUI-7.10.29-XSS.txt; http://seclists.org/fulldisclosure/2015/Jan/79
CVE: CVE-2015-1565
Published: 2015-02-09
Description: Cross-site scripting (XSS) vulnerability in the online help in Hitachi Device Manager, Tiered Storage Manager, Replication Manager, and Global Link Manager before 8.1.2-00, and Compute Systems Manager before 7.6.1-08 and 8.x before 8.1.2-00, as used in Hitachi Command Suite, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/62579; http://secunia.com/advisories/62584; http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS15-001/index.html
CVE: CVE-2015-1566
Published: 2015-02-09
Description: Cross-site scripting (XSS) vulnerability in DotNetNuke (DNN) before 7.4.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/62832; http://www.dnnsoftware.com/platform/manage/security-center; http://secunia.com/advisories/62832
CVE: CVE-2015-1567
Published: 2015-02-09
Description: Cross-site scripting (XSS) vulnerability in the admin page in the GD Infinite Scroll module before 7.x-1.4 for Drupal allows remote authenticated users with the "edit gd infinite scroll settings" permission to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/100629; https://www.drupal.org/node/2415219; https://www.drupal.org/node/2415885
CVE: CVE-2015-1568
Published: 2015-02-09
Description: Cross-site request forgery (CSRF) vulnerability in the GD Infinite Scroll module before 7.x-1.4 for Drupal allows remote attackers to hijack the authentication of users with the "edit gd infinite scroll settings" permission for requests that delete settings via unspecified vectors.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/100628; https://www.drupal.org/node/2415219; https://www.drupal.org/node/2415885
CVE: CVE-2015-1431
Published: 2015-02-10
Description: Cross-site scripting (XSS) vulnerability in includes/startup.php in phpBB before 3.0.13 allows remote attackers to inject arbitrary web script or HTML via vectors related to "Relative Path Overwrite."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://seclists.org/oss-sec/2015/q1/373; http://www.securityfocus.com/bid/72405; https://exchange.xforce.ibmcloud.com/vulnerabilities/100670
CVE: CVE-2015-1432
Published: 2015-02-10
Description: The message_options function in includes/ucp/ucp_pm_options.php in phpBB before 3.0.13 does not properly validate the form key, which allows remote attackers to conduct CSRF attacks and change the full folder setting via unspecified vectors.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://seclists.org/oss-sec/2015/q1/373; http://www.securityfocus.com/bid/72399; https://exchange.xforce.ibmcloud.com/vulnerabilities/100671
CVE: CVE-2015-1559
Published: 2015-02-10
Description: Multiple cross-site request forgery (CSRF) vulnerabilities in administrator.php in Epignosis eFront Open Source Edition before 3.6.15.3 build 18022 allow remote attackers to hijack the authentication of administrators for requests that (1) delete modules via the delete_module parameter, (2) deactivate modules via the deactivate_module parameter, (3) activate modules via the activate_module parameter, (4) delete users via the delete_user parameter, (5) deactivate users via the deactivate_user parameter, (6) activate users via the activate_user parameter, (7) activate themes via the set_theme parameter, (8) deactivate themes via the set_theme parameter, (9) delete themes via the delete parameter, (10) deactivate events (user registration or email activation) via the deactivate_notification parameter, (11) activate events via the activate_notification parameter, (12) delete events via the delete_notification parameter, (13) deactivate language settings via the deactivate_language parameter, (14) activate language settings via the activate_language parameter, (15) delete language settings via the delete_language parameter, or (16) activate or deactivate the autologin feature for a user via a crafted maintenance request.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://seclists.org/fulldisclosure/2015/Feb/30; http://seclists.org/oss-sec/2015/q1/468; http://seclists.org/oss-sec/2015/q1/475
CVE: CVE-2014-8733
Published: 2015-02-10
Description: Cloudera Manager 5.2.0, 5.2.1, and 5.3.0 stores the LDAP bind password in plaintext in unspecified world-readable files under /etc/hadoop, which allows local users to obtain this password.
CVSS Score: 2.1 (LOW)
CWE: CWE-200
References: http://www.cloudera.com/content/cloudera/en/documentation/security-bulletins/Security-Bulletin/csb_topic_2.html; http://www.cloudera.com/content/cloudera/en/documentation/security-bulletins/Security-Bulletin/csb_topic_2.html
CVE: CVE-2015-1031
Published: 2015-02-10
Description: Multiple use-after-free vulnerabilities in Privoxy before 3.0.22 allow remote attackers to have unspecified impact via vectors related to (1) the unmap function in list.c or (2) "two additional unconfirmed use-after-free complaints made by Coverity scan." NOTE: some of these details are obtained from third party information.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/62123; http://www.debian.org/security/2015/dsa-3133; http://www.openwall.com/lists/oss-security/2015/01/11/1
CVE: CVE-2015-1548
Published: 2015-02-10
Description: mini_httpd 1.21 and earlier allows remote attackers to obtain sensitive information from process memory via an HTTP request with a long protocol string, which triggers an incorrect response size calculation and an out-of-bounds read.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://itinsight.hu/en/posts/articles/2015-01-23-mini-httpd/; http://www.securityfocus.com/bid/73450; http://itinsight.hu/en/posts/articles/2015-01-23-mini-httpd/
CVE: CVE-2015-1042
Published: 2015-02-10
Description: The string_sanitize_url function in core/string_api.php in MantisBT 1.2.0a3 through 1.2.18 uses an incorrect regular expression, which allows remote attackers to conduct open redirect and phishing attacks via a URL with a ":/" (colon slash) separator in the return parameter to login_page.php, a different vulnerability than CVE-2014-6316.
CVSS Score: 5.8 (MEDIUM)
References: http://packetstormsecurity.com/files/130142/Mantis-BugTracker-1.2.19-Open-Redirect.html; http://seclists.org/fulldisclosure/2015/Jan/110; http://www.openwall.com/lists/oss-security/2015/01/10/5
CVE: CVE-2015-1169
Published: 2015-02-10
Description: Apereo Central Authentication Service (CAS) Server before 3.5.3 allows remote attackers to conduct LDAP injection attacks via a crafted username, as demonstrated by using a wildcard and a valid password to bypass LDAP authentication.
CVSS Score: 7.5 (HIGH)
CWE: CWE-74
References: http://packetstormsecurity.com/files/130053/CAS-Server-3.5.2-LDAP-Authentication-Bypass.html; http://seclists.org/fulldisclosure/2015/Jan/87; https://github.com/Jasig/cas/commit/7de61b4c6244af9ff8e75a2c92a570f3b075309c
CVE: CVE-2015-1377
Published: 2015-02-10
Description: The Read Mail module in Webmin 1.720 allows local users to read arbitrary files via a symlink attack on an unspecified file.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-59
References: http://secunia.com/advisories/62157; http://www.webmin.com/changes.html; http://www.webmin.com/security.html
CVE: CVE-2015-1569
Published: 2015-02-10
Description: Fortinet FortiClient 5.2.028 for iOS does not validate certificates, which makes it easier for man-in-the-middle attackers to spoof SSL VPN servers via a crafted certificate.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-310
References: http://seclists.org/fulldisclosure/2015/Jan/124; http://www.security-assessment.com/files/documents/advisory/Fortinet_FortiClient_Multiple_Vulnerabilities.pdf; http://seclists.org/fulldisclosure/2015/Jan/124
CVE: CVE-2015-1570
Published: 2015-02-10
Description: The Endpoint Control protocol implementation in Fortinet FortiClient 5.2.3.091 for Android and 5.2.028 for iOS does not validate certificates, which makes it easier for man-in-the-middle attackers to spoof servers via a crafted certificate.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-310
References: http://seclists.org/fulldisclosure/2015/Jan/124; http://www.security-assessment.com/files/documents/advisory/Fortinet_FortiClient_Multiple_Vulnerabilities.pdf; http://seclists.org/fulldisclosure/2015/Jan/124
CVE: CVE-2015-1571
Published: 2015-02-10
Description: The CAPWAP DTLS protocol implementation in Fortinet FortiOS 5.0 Patch 7 build 4457 uses the same certificate and private key across different customers' installations, which makes it easier for man-in-the-middle attackers to spoof SSL servers by leveraging the Fortinet_Factory certificate and private key.  NOTE: FG-IR-15-002 says "The Fortinet_Factory certificate is unique to each device ... An attacker cannot therefore stage a MitM attack.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-310
References: http://seclists.org/fulldisclosure/2015/Jan/125; http://www.fortiguard.com/advisory/FG-IR-15-002/; http://www.security-assessment.com/files/documents/advisory/Fortinet_FortiOS_Multiple_Vulnerabilities.pdf
CVE: CVE-2014-6362
Published: 2015-02-11
Description: Use-after-free vulnerability in Microsoft Office 2007 SP3, 2010 SP2, and 2013 Gold and SP1 allows remote attackers to bypass the ASLR protection mechanism via a crafted document, aka "Microsoft Office Component Use After Free Vulnerability."
CVSS Score: 4.3 (MEDIUM)
References: http://www.securityfocus.com/bid/72467; http://www.securitytracker.com/id/1031721; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-013
CVE: CVE-2015-0003
Published: 2015-02-11
Description: win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges or cause a denial of service (NULL pointer dereference) via a crafted application, aka "Win32k Elevation of Privilege Vulnerability."
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-476
References: http://www.securityfocus.com/bid/72457; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-010; https://exchange.xforce.ibmcloud.com/vulnerabilities/100430