deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2014-3176
Published: 2014-08-27
Description: Google Chrome before 37.0.2062.94 does not properly handle the interaction of extensions, IPC, the sync API, and Google V8, which allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-3177.
CVSS Score: 10.0 (HIGH)
CWE: CWE-94
References: http://googlechromereleases.blogspot.com/2014/08/stable-channel-update_26.html; http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00027.html; http://secunia.com/advisories/60268
CVE: CVE-2014-3177
Published: 2014-08-27
Description: Google Chrome before 37.0.2062.94 does not properly handle the interaction of extensions, IPC, the sync API, and Google V8, which allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-3176.
CVSS Score: 10.0 (HIGH)
CWE: CWE-94
References: http://googlechromereleases.blogspot.com/2014/08/stable-channel-update_26.html; http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00027.html; http://secunia.com/advisories/60268
CVE: CVE-2014-0761
Published: 2014-08-28
Description: The DNP3 driver in CG Automation ePAQ-9410 Substation Gateway allows remote attackers to cause a denial of service (infinite loop or process crash) via a crafted TCP packet.
CVSS Score: 7.1 (HIGH)
CWE: CWE-20, CWE-20
References: http://mail.cgautomationusa.com/login.aspx; https://www.cisa.gov/news-events/ics-advisories/icsa-14-238-01; https://ics-cert.us-cert.gov/advisories/ICSA-14-238-01
CVE: CVE-2014-0762
Published: 2014-08-28
Description: The CG Automation Software DNP3 driver, used in the ePAQ-9410 Substation
 Gateway products, does not validate input correctly. An attacker could 
cause the software to go into an infinite loop, causing the process to 
crash. The system must be restarted manually to clear the condition.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-20, CWE-20
References: http://mail.cgautomationusa.com/login.aspx; https://www.cisa.gov/news-events/ics-advisories/icsa-14-238-01; https://ics-cert.us-cert.gov/advisories/ICSA-14-238-01
CVE: CVE-2014-2380
Published: 2014-08-28
Description: Schneider Electric Wonderware Information Server (WIS) Portal 4.0 SP1 through 5.5 uses weak encryption, which allows remote attackers to obtain sensitive information by reading a credential file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-326
References: https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2014/icsa-14-238-02.json; https://www.cisa.gov/news-events/ics-advisories/icsa-14-238-02; https://ics-cert.us-cert.gov/advisories/ICSA-14-238-02
CVE: CVE-2014-2381
Published: 2014-08-28
Description: Schneider Electric Wonderware Information Server (WIS) Portal 4.0 SP1 through 5.5 uses weak encryption, which allows local users to obtain sensitive information by reading a credential file.
CVSS Score: 2.1 (LOW)
CWE: CWE-326
References: https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2014/icsa-14-238-02.json; https://www.cisa.gov/news-events/ics-advisories/icsa-14-238-02; https://ics-cert.us-cert.gov/advisories/ICSA-14-238-02
CVE: CVE-2014-3344
Published: 2014-08-28
Description: Multiple cross-site scripting (XSS) vulnerabilities in the web framework in Cisco Transport Gateway for Smart Call Home (aka TG-SCH or Transport Gateway Installation Software) 4.0 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug IDs CSCuq31129, CSCuq31134, CSCuq31137, and CSCuq31563.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/60278; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3344; http://tools.cisco.com/security/center/viewAlert.x?alertId=35431
CVE: CVE-2014-4619
Published: 2014-08-28
Description: EMC RSA Identity Management and Governance (IMG) 6.5.x before 6.5.1 P11, 6.5.2 before P02HF01, and 6.8.x before 6.8.1 P07, when Novell Identity Manager (aka NovellIM) is used, allows remote attackers to bypass authentication via an arbitrary valid username.
CVSS Score: 9.3 (HIGH)
CWE: CWE-287
References: http://archives.neohapsis.com/archives/bugtraq/2014-08/0133.html; http://packetstormsecurity.com/files/128005/RSA-Identity-Management-And-Governance-Authentication-Bypass.html; http://secunia.com/advisories/60281
CVE: CVE-2014-5397
Published: 2014-08-28
Description: Cross-site scripting (XSS) vulnerability in Schneider Electric Wonderware Information Server (WIS) Portal 4.0 SP1 through 5.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-79, CWE-79
References: https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2014/icsa-14-238-02.json; https://www.cisa.gov/news-events/ics-advisories/icsa-14-238-02; http://www.securityfocus.com/bid/69418
CVE: CVE-2014-5398
Published: 2014-08-28
Description: Schneider Electric Wonderware Information Server (WIS) Portal 4.0 SP1 through 5.5 allows remote attackers to read arbitrary files or cause a denial of service via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
CVSS Score: 2.1 (LOW)
CWE: CWE-20, CWE-20
References: https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2014/icsa-14-238-02.json; https://www.cisa.gov/news-events/ics-advisories/icsa-14-238-02; https://ics-cert.us-cert.gov/advisories/ICSA-14-238-02
CVE: CVE-2014-5399
Published: 2014-08-28
Description: SQL injection vulnerability in Schneider Electric Wonderware Information Server (WIS) Portal 4.0 SP1 through 5.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89, CWE-89
References: https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2014/icsa-14-238-02.json; https://www.cisa.gov/news-events/ics-advisories/icsa-14-238-02; http://www.securityfocus.com/bid/69416
CVE: CVE-2014-4199
Published: 2014-08-28
Description: vm-support 0.88 in VMware Tools, as distributed with VMware Workstation through 10.0.3 and other products, allows local users to write to arbitrary files via a symlink attack on a file in /tmp.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-59
References: http://seclists.org/fulldisclosure/2014/Aug/71; http://www.osvdb.org/110458; http://www.securitytracker.com/id/1030758
CVE: CVE-2014-4200
Published: 2014-08-28
Description: vm-support 0.88 in VMware Tools, as distributed with VMware Workstation through 10.0.3 and other products, uses 0644 permissions for the vm-support archive, which allows local users to obtain sensitive information by extracting files from this archive.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-264
References: http://seclists.org/fulldisclosure/2014/Aug/71; http://www.securityfocus.com/bid/69410; http://www.securitytracker.com/id/1030758
CVE: CVE-2014-3345
Published: 2014-08-28
Description: The web framework in Cisco Transport Gateway for Smart Call Home (aka TG-SCH or Transport Gateway Installation Software) 4.0 does not properly check authorization for administrative web pages, which allows remote attackers to modify the product via a crafted URL, aka Bug ID CSCuq31503.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://secunia.com/advisories/60391; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3345; http://tools.cisco.com/security/center/viewAlert.x?alertId=35468
CVE: CVE-2014-3347
Published: 2014-08-28
Description: Cisco IOS 15.1(4)M2 on Cisco 1800 ISR devices, when the ISDN Basic Rate Interface is enabled, allows remote attackers to cause a denial of service (device hang) by leveraging knowledge of the ISDN phone number to trigger an interrupt timer collision during entropy collection, leading to an invalid state of the hardware encryption module, aka Bug ID CSCul77897.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-399
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3347; http://tools.cisco.com/security/center/viewAlert.x?alertId=35453; http://www.securityfocus.com/bid/69439
CVE: CVE-2013-5467
Published: 2014-08-29
Description: Monitoring Agent for UNIX Logs 6.2.0 through FP03, 6.2.1 through FP04, 6.2.2 through FP09, and 6.2.3 through FP04 and Monitoring Server (ms) and Shared Libraries (ax) 6.2.0 through FP03, 6.2.1 through FP04, 6.2.2 through FP08, 6.2.3 through FP01, and 6.3.0 through FP01 in IBM Tivoli Monitoring (ITM) on UNIX allow local users to gain privileges via unspecified vectors.
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://www-01.ibm.com/support/docview.wss?uid=swg21675798; http://www.securityfocus.com/bid/69436; https://exchange.xforce.ibmcloud.com/vulnerabilities/88370
CVE: CVE-2014-0600
Published: 2014-08-29
Description: FileUploadServlet in the Administration service in Novell GroupWise 2014 before SP1 allows remote attackers to read or write to arbitrary files via the poLibMaintenanceFileSave parameter, aka ZDI-CAN-2287.
CVSS Score: 7.8 (HIGH)
CWE: CWE-200
References: http://www.novell.com/support/kb/doc.php?id=7015566; http://www.securitytracker.com/id/1030801; http://www.zerodayinitiative.com/advisories/ZDI-14-296/
CVE: CVE-2014-0888
Published: 2014-08-29
Description: IBM Worklight Foundation 5.x and 6.x before 6.2.0.0, as used in Worklight and Mobile Foundation, allows remote authenticated users to bypass the application-authenticity feature via unspecified vectors.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-264
References: http://www-01.ibm.com/support/docview.wss?uid=swg21682798; https://exchange.xforce.ibmcloud.com/vulnerabilities/91239; http://www-01.ibm.com/support/docview.wss?uid=swg21682798
CVE: CVE-2014-0897
Published: 2014-08-29
Description: The Configuration Patterns component in IBM Flex System Manager (FSM) 1.2.0.x, 1.2.1.x, 1.3.0.x, and 1.3.1.x uses a weak algorithm in an encryption step during Chassis Management Module (CMM) account creation, which makes it easier for remote authenticated users to defeat cryptographic protection mechanisms via unspecified vectors.
CVSS Score: 3.5 (LOW)
CWE: CWE-310
References: http://www-01.ibm.com/support/docview.wss?uid=swg1IT03824; http://www.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096153; https://exchange.xforce.ibmcloud.com/vulnerabilities/91395
CVE: CVE-2014-3024
Published: 2014-08-29
Description: Cross-site request forgery (CSRF) vulnerability in IBM Maximo Asset Management 7.1 through 7.1.1.12 and 7.5 through 7.5.0.6 and Maximo Asset Management 7.5.0 through 7.5.0.3 and 7.5.1 through 7.5.1.2 for SmartCloud Control Desk allows remote authenticated users to hijack the authentication of arbitrary users.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-352
References: http://secunia.com/advisories/60408; http://www-01.ibm.com/support/docview.wss?uid=swg1IV56643; http://www-01.ibm.com/support/docview.wss?uid=swg21679918
CVE: CVE-2014-3084
Published: 2014-08-29
Description: IBM Maximo Asset Management 6.1 through 6.5, 7.1 through 7.1.1.13, and 7.5 through 7.5.0.6; Maximo Asset Management 7.5.0 through 7.5.0.3 and 7.5.1 through 7.5.1.2 for SmartCloud Control Desk; and Maximo Asset Management 6.2.8, 7.1, and 7.2 for Tivoli IT Asset Management for IT and certain other products allow remote authenticated users to bypass intended write-access restrictions on calendar entries via unspecified vectors.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-264
References: http://secunia.com/advisories/60408; http://secunia.com/advisories/60453; http://www-01.ibm.com/support/docview.wss?uid=swg1IV61274
CVE: CVE-2014-3093
Published: 2014-08-29
Description: IBM PowerVC 1.2.0 before FP3 and 1.2.1 before FP2 uses cleartext passwords in (1) api-paste.ini, (2) debug logs, (3) the installation process, (4) environment checks, (5) powervc-ldap-config, (6) powervc-restore, and (7) powervc-diag, which allows local users to obtain sensitive information by entering a ps command or reading a file.
CVSS Score: 2.1 (LOW)
CWE: CWE-310
References: http://www-01.ibm.com/support/docview.wss?uid=nas8N1020242; http://www.securityfocus.com/bid/69437; https://exchange.xforce.ibmcloud.com/vulnerabilities/94259
CVE: CVE-2014-3346
Published: 2014-08-29
Description: The web framework in Cisco Transport Gateway for Smart Call Home (aka TG-SCH or Transport Gateway Installation Software) does not validate an unspecified parameter, which allows remote authenticated users to cause a denial of service (service crash) via a crafted string, aka Bug ID CSCuq31819.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-20
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3346; http://www.securityfocus.com/bid/69441; http://www.securitytracker.com/id/1030773
CVE: CVE-2014-3349
Published: 2014-08-29
Description: Cisco Intelligent Automation for Cloud (aka Cisco Cloud Portal) does not validate file types during the handling of file submission, which allows remote authenticated users to upload arbitrary files via a crafted request, aka Bug ID CSCuh87410.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-20
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3349; http://www.securityfocus.com/bid/69455; http://www.securitytracker.com/id/1030783
CVE: CVE-2014-3350
Published: 2014-08-29
Description: Cisco Intelligent Automation for Cloud (aka Cisco Cloud Portal) does not properly implement URL redirection, which allows remote authenticated users to obtain sensitive information via a crafted URL, aka Bug ID CSCuh84870.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-264
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3350; http://www.securityfocus.com/bid/69457; http://www.securitytracker.com/id/1030784
CVE: CVE-2014-3351
Published: 2014-08-29
Description: Cisco Intelligent Automation for Cloud (aka Cisco Cloud Portal) does not properly consider whether a session is a problematic NULL session, which allows remote attackers to obtain sensitive information via crafted packets, aka Bug IDs CSCuh87398 and CSCuh87380.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://secunia.com/advisories/60960; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3351; http://www.securityfocus.com/bid/69456
CVE: CVE-2014-4806
Published: 2014-08-29
Description: The installation process in IBM Security AppScan Enterprise 8.x before 8.6.0.2 iFix 003, 8.7.x before 8.7.0.1 iFix 003, 8.8.x before 8.8.0.1 iFix 002, and 9.0.x before 9.0.0.1 iFix 001 on Linux places a cleartext password in a temporary file, which allows local users to obtain sensitive information by reading this file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-522
References: http://www-01.ibm.com/support/docview.wss?uid=swg21682642; http://www.securityfocus.com/bid/69435; https://exchange.xforce.ibmcloud.com/vulnerabilities/95354
CVE: CVE-2012-1503
Published: 2014-08-29
Description: Cross-site scripting (XSS) vulnerability in Six Apart (formerly Six Apart KK) Movable Type (MT) Pro 5.13 allows remote attackers to inject arbitrary web script or HTML via the comment section.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/show/osvdb/86729; http://packetstormsecurity.org/files/117564/Movable-Type-Pro-5.13en-Cross-Site-Scripting.html; http://www.cloudscan.me/2012/10/cve-2012-1503-movable-type-pro-513en.html
CVE: CVE-2014-2593
Published: 2014-08-29
Description: The management console in Aruba Networks ClearPass Policy Manager 6.3.0.60730 allows local users to execute arbitrary commands via shell metacharacters in certain arguments of a valid command, as demonstrated by the (1) system status-rasession and (2) network ping commands.
CVSS Score: 9.0 (HIGH)
CWE: CWE-264
References: http://osvdb.org/show/osvdb/109662; http://www.arubanetworks.com/support/alerts/aid-050214.asc; http://www.securityfocus.com/bid/69391
CVE: CVE-2014-4930
Published: 2014-08-29
Description: Multiple cross-site scripting (XSS) vulnerabilities in event/index2.do in ManageEngine EventLog Analyzer before 9.0 build 9002 allow remote attackers to inject arbitrary web script or HTML via the (1) width, (2) height, (3) url, (4) helpP, (5) tab, (6) module, (7) completeData, (8) RBBNAME, (9) TC, (10) rtype, (11) eventCriteria, (12) q, (13) flushCache, or (14) product parameter. Fixed in Build 11072.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/128012/ManageEngine-EventLog-Analyzer-7-Cross-Site-Scripting.html; http://seclists.org/fulldisclosure/2014/Aug/74; http://www.securityfocus.com/bid/69420
CVE: CVE-2014-5127
Published: 2014-08-29
Description: Open redirect vulnerability in Innovative Interfaces Encore Discovery Solution 4.3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in an unspecified parameter.
CVSS Score: 5.8 (MEDIUM)
References: http://packetstormsecurity.com/files/128013/Encore-Discovery-Solution-4.3-Open-Redirect-Session-Token-In-URL.html; http://www.securityfocus.com/archive/1/533233/100/0/threaded; http://www.securityfocus.com/bid/69427
CVE: CVE-2014-5128
Published: 2014-08-29
Description: Innovative Interfaces Encore Discovery Solution 4.3 places a session token in the URI, which might allow remote attackers to obtain sensitive information via unspecified vectors.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://packetstormsecurity.com/files/128013/Encore-Discovery-Solution-4.3-Open-Redirect-Session-Token-In-URL.html; http://www.securityfocus.com/archive/1/533233/100/0/threaded; http://www.securityfocus.com/bid/69431
CVE: CVE-2014-5337
Published: 2014-08-29
Description: The WordPress Mobile Pack plugin before 2.0.2 for WordPress does not properly restrict access to password protected posts, which allows remote attackers to obtain sensitive information via an exportarticles action to export/content.php.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://secunia.com/advisories/60584; http://wordpress.org/plugins/wordpress-mobile-pack/changelog/; http://www.securityfocus.com/bid/69292
CVE: CVE-2010-5110
Published: 2014-08-29
Description: DCTStream.cc in Poppler before 0.13.3 allows remote attackers to cause a denial of service (crash) via a crafted PDF file.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://cgit.freedesktop.org/poppler/poppler/commit/poppler/DCTStream.cc?id=fc071d800cb4329a3ccf898d7bf16b4db7323ad8; http://comments.gmane.org/gmane.comp.security.oss.general/11132; http://secunia.com/advisories/59857
CVE: CVE-2014-2390
Published: 2014-08-29
Description: Cross-site request forgery (CSRF) vulnerability in the User Management module in McAfee Network Security Manager (NSM) before 6.1.15.39 7.1.5.x before 7.1.5.15, 7.1.15.x before 7.1.15.7, 7.5.x before 7.5.5.9, and 8.x before 8.1.7.3 allows remote attackers to hijack the authentication of users for requests that modify user accounts via unspecified vectors.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://www.securitytracker.com/id/1030674; https://kc.mcafee.com/corporate/index?page=content&id=SB10081; http://www.securitytracker.com/id/1030674
CVE: CVE-2014-5073
Published: 2014-08-29
Description: vmtadmin.cgi in VMTurbo Operations Manager before 4.6 build 28657 allows remote attackers to execute arbitrary commands via shell metacharacters in the fileDate parameter in a DOWN call.
CVSS Score: 7.5 (HIGH)
References: http://disse.cting.org/2014/07/30/vmturbo-operation-manager-remote-command-execution/; http://packetstormsecurity.com/files/127864/VMTurbo-Operations-Manager-4.6-vmtadmin.cgi-Remote-Command-Execution.html; http://secunia.com/advisories/58880
CVE: CVE-2014-5119
Published: 2014-08-29
Description: Off-by-one error in the __gconv_translit_find function in gconv_trans.c in GNU C Library (aka glibc) allows context-dependent attackers to cause a denial of service (crash) or execute arbitrary code via vectors related to the CHARSET environment variable and gconv transliteration modules.
CVSS Score: 7.5 (HIGH)
CWE: CWE-189
References: http://googleprojectzero.blogspot.com/2014/08/the-poisoned-nul-byte-2014-edition.html; http://linux.oracle.com/errata/ELSA-2015-0092.html; http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00017.html
CVE: CVE-2014-5147
Published: 2014-08-29
Description: Xen 4.4.x, when running a 64-bit kernel on an ARM system, does not properly handle traps from the guest domain that use a different address width, which allows local guest users to cause a denial of service (host crash) via a crafted 32-bit process.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-264
References: http://www.securitytracker.com/id/1030724; http://xenbits.xen.org/xsa/advisory-102.html; http://www.securitytracker.com/id/1030724
CVE: CVE-2014-5247
Published: 2014-08-29
Description: The _UpgradeBeforeConfigurationChange function in lib/client/gnt_cluster.py in Ganeti 2.10.0 before 2.10.7 and 2.11.0 before 2.11.5 uses world-readable permissions for the configuration backup file, which allows local users to obtain SSL keys, remote API credentials, and other sensitive information by reading the file, related to the upgrade command.
CVSS Score: 2.1 (LOW)
CWE: CWE-264
References: http://git.ganeti.org/?p=ganeti.git%3Ba=commit%3Bh=a89f62e2db9ccf715d64d1a6322474b54d2d9ae0; http://packetstormsecurity.com/files/127851/Ganeti-Insecure-Archive-Permission.html; http://seclists.org/oss-sec/2014/q3/370
CVE: CVE-2014-3352
Published: 2014-08-30
Description: Cisco Intelligent Automation for Cloud (aka Cisco Cloud Portal) 2008.3_SP9 and earlier does not properly consider whether a session is a problematic NULL session, which allows remote attackers to obtain sensitive information via crafted packets, related to an "iFrame vulnerability," aka Bug ID CSCuh84801.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://secunia.com/advisories/60956; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3352; http://tools.cisco.com/security/center/viewAlert.x?alertId=35479
CVE: CVE-2014-3908
Published: 2014-08-30
Description: The Amazon.com Kindle application before 4.5.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-310
References: http://jvn.jp/en/jp/JVN17637243/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2014-000102; http://jvn.jp/en/jp/JVN17637243/index.html
CVE: CVE-2013-2595
Published: 2014-08-31
Description: The device-initialization functionality in the MSM camera driver for the Linux kernel 2.6.x and 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, enables MSM_CAM_IOCTL_SET_MEM_MAP_INFO ioctl calls for an unrestricted mmap interface, which allows attackers to gain privileges via a crafted application.
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: https://www.codeaurora.org/projects/security-advisories/uncontrolled-memory-mapping-camera-driver-cve-2013-2595; https://www.codeaurora.org/projects/security-advisories/uncontrolled-memory-mapping-camera-driver-cve-2013-2595
CVE: CVE-2013-2597
Published: 2014-08-31
Description: Stack-based buffer overflow in the acdb_ioctl function in audio_acdb.c in the acdb audio driver for the Linux kernel 2.6.x and 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers to gain privileges via an application that leverages /dev/msm_acdb access and provides a large size value in an ioctl argument.
CVSS Score: 8.4 (HIGH)
CWE: CWE-121
References: https://www.codeaurora.org/projects/security-advisories/stack-based-buffer-overflow-acdb-audio-driver-cve-2013-2597; https://www.codeaurora.org/projects/security-advisories/stack-based-buffer-overflow-acdb-audio-driver-cve-2013-2597; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2013-2597