deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-14520
Published: 2017-09-17
Description: In Poppler 0.59.0, a floating point exception occurs in Splash::scaleImageYuXd() in Splash.cc, which may lead to a potential attack when handling malicious PDF files.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://bugs.freedesktop.org/show_bug.cgi?id=102719; https://www.debian.org/security/2018/dsa-4079; https://bugs.freedesktop.org/show_bug.cgi?id=102719
CVE: CVE-2017-14528
Published: 2017-09-18
Description: The TIFFSetProfiles function in coders/tiff.c in ImageMagick 7.0.6 has incorrect expectations about whether LibTIFF TIFFGetField return values imply that data validation has occurred, which allows remote attackers to cause a denial of service (use-after-free after an invalid call to TIFFSetField, and application crash) via a crafted file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-416
References: http://bugzilla.maptools.org/show_bug.cgi?id=2730; http://www.securityfocus.com/bid/100875; https://lists.debian.org/debian-lts-announce/2021/01/msg00010.html
CVE: CVE-2017-14529
Published: 2017-09-18
Description: The pe_print_idata function in peXXigen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, mishandles HintName vector entries, which allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted PE file, related to the bfd_getl16 function.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://sourceware.org/bugzilla/show_bug.cgi?id=22113; https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=4d465c689a8fb27212ef358d0aee89d60dee69a6; https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=dcaaca89e8618eba35193c27afcb1cfa54f74582
CVE: CVE-2017-14530
Published: 2017-09-18
Description: WP_Admin_UI in the Crony Cronjob Manager plugin before 0.4.7 for WordPress has CSRF via the name parameter in an action=manage&do=create operation, as demonstrated by inserting XSS sequences.
CVSS Score: 8.0 (HIGH)
CWE: CWE-352
References: https://cybersecurityworks.com/zerodays/cve-2017-14530-crony.html; https://github.com/cybersecurityworks/Disclosed/issues/9; https://wordpress.org/plugins/crony/#developers
CVE: CVE-2017-14531
Published: 2017-09-18
Description: ImageMagick 7.0.7-0 has a memory exhaustion issue in ReadSUNImage in coders/sun.c.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-770
References: http://www.securityfocus.com/bid/100888; https://github.com/ImageMagick/ImageMagick/issues/718; https://usn.ubuntu.com/3681-1/
CVE: CVE-2017-14532
Published: 2017-09-18
Description: ImageMagick 7.0.7-0 has a NULL Pointer Dereference in TIFFIgnoreTags in coders/tiff.c.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-476
References: http://www.securityfocus.com/bid/100883; https://github.com/ImageMagick/ImageMagick/issues/719; https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html
CVE: CVE-2017-14533
Published: 2017-09-18
Description: ImageMagick 7.0.6-6 has a memory leak in ReadMATImage in coders/mat.c.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-772
References: http://www.securityfocus.com/bid/100885; https://github.com/ImageMagick/ImageMagick/issues/648; https://usn.ubuntu.com/3681-1/
CVE: CVE-2017-9333
Published: 2017-09-18
Description: OpenWebif 1.2.5 allows remote code execution via a URL to the CallOPKG function in the IpkgController class in plugin/controllers/ipkg.py, when the URL refers to an attacker-controlled web site with a Trojan horse package. This has security implications in cases where untrusted users can trigger CallOPKG calls, and these users can enter an arbitrary URL in an input field, even though that input field was only intended for a package name. This threat model may be relevant in the latest versions of third-party products that bundle OpenWebif, i.e., set-top box products. The issue of Trojan horse packages does NOT have security implications in cases where the attacker has full OpenWebif access.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: https://github.com/E2OpenPlugins/e2openplugin-OpenWebif/issues/619; https://github.com/E2OpenPlugins/e2openplugin-OpenWebif/issues/621; https://github.com/E2OpenPlugins/e2openplugin-OpenWebif/issues/619
CVE: CVE-2017-12156
Published: 2017-09-18
Description: Moodle 3.x has XSS in the contact form on the "non-respondents" page in non-anonymous feedback.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/100867; https://moodle.org/mod/forum/discuss.php?d=358585; http://www.securityfocus.com/bid/100867
CVE: CVE-2017-12157
Published: 2017-09-18
Description: In Moodle 3.x, various course reports allow teachers to view details about users in the groups they can't access.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/100848; https://moodle.org/mod/forum/discuss.php?d=358586; http://www.securityfocus.com/bid/100848
CVE: CVE-2017-14534
Published: 2017-09-18
Description: Cross Site Scripting (XSS) exists in NexusPHP 1.5.beta5.20120707 via the PATH_INFO to location.php, related to PHP_SELF.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://raw.githubusercontent.com/yangchonghui2017/cve/master/2.txt; https://raw.githubusercontent.com/yangchonghui2017/cve/master/2.txt
CVE: CVE-2014-6106
Published: 2017-09-18
Description: Cross-site request forgery (CSRF) vulnerability in IBM Security Identity Manager 5.1, 6.0, and 7.0 allows remote attackers to hijack the authentication of users for requests that can cause cross-site scripting attacks, web cache poisoning, or other unspecified impacts via unknown vectors.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://www.securityfocus.com/bid/73167; https://exchange.xforce.ibmcloud.com/vulnerabilities/96145; https://www-01.ibm.com/support/docview.wss?uid=swg21698020
CVE: CVE-2017-9798
Published: 2017-09-18
Description: Apache httpd allows remote attackers to read secret data from process memory if the Limit directive can be set in a user's .htaccess file, or if httpd.conf has certain misconfigurations, aka Optionsbleed. This affects the Apache HTTP Server through 2.2.34 and 2.4.x through 2.4.27. The attacker sends an unauthenticated OPTIONS HTTP request when attempting to read secret data. This is a use-after-free issue and thus secret data is not always sent, and the specific data depends on many factors including configuration. Exploitation with .htaccess can be blocked with a patch to the ap_limit_section function in server/core.c.
CVSS Score: 7.5 (HIGH)
CWE: CWE-416
References: http://openwall.com/lists/oss-security/2017/09/18/2; http://www.debian.org/security/2017/dsa-3980; http://www.oracle.com/technetwork/security-advisory/cpuapr2[PII_REDACTED].html
CVE: CVE-2017-0380
Published: 2017-09-18
Description: The rend_service_intro_established function in or/rendservice.c in Tor before 0.2.8.15, 0.2.9.x before 0.2.9.12, 0.3.0.x before 0.3.0.11, 0.3.1.x before 0.3.1.7, and 0.3.2.x before 0.3.2.1-alpha, when SafeLogging is disabled, allows attackers to obtain sensitive information by leveraging access to the log files of a hidden service, because uninitialized stack data is included in an error message about construction of an introduction point circuit.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-532
References: http://www.debian.org/security/2017/dsa-3993; http://www.securitytracker.com/id/1039519; https://github.com/torproject/tor/commit/09ea89764a4d3a907808ed7d4fe42abfe64bd486
CVE: CVE-2017-14538
Published: 2017-09-18
Description: XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to "Data from Faulting Address controls subsequent Write Address starting at jbig2dec+0x[PII_REDACTED]008823."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14538; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14538
CVE: CVE-2017-14539
Published: 2017-09-18
Description: IrfanView 4.44 - 32bit allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .svg file, related to "Data from Faulting Address controls Branch Selection starting at image00000000_00400000+0x[PII_REDACTED]11d767."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.irfanview.net/main_history.htm; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14539; http://www.irfanview.net/main_history.htm
CVE: CVE-2017-14540
Published: 2017-09-18
Description: IrfanView 4.44 - 32bit allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .svg file, related to "Data from Faulting Address controls Branch Selection starting at CADIMAGE+0x[PII_REDACTED]01f23e."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.irfanview.net/main_history.htm; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14540; http://www.irfanview.net/main_history.htm
CVE: CVE-2017-14541
Published: 2017-09-18
Description: XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .svg file, related to "Data from Faulting Address controls Branch Selection starting at CADImage+0x[PII_REDACTED]01f23e."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14541; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14541
CVE: CVE-2017-14542
Published: 2017-09-18
Description: STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .epub file, related to a "Read Access Violation on Block Data Move starting at STDUEPubFile!DllUnregisterServer+0x[PII_REDACTED]010262."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14542; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14542
CVE: CVE-2017-14543
Published: 2017-09-18
Description: STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .epub file, related to "Data from Faulting Address controls Branch Selection starting at STDUEPubFile!DllUnregisterServer+0x[PII_REDACTED]039335."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14543; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14543
CVE: CVE-2017-14544
Published: 2017-09-18
Description: STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .epub file, related to "Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at STDUEPubFile!DllUnregisterServer+0x[PII_REDACTED]03fff1."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14544; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14544
CVE: CVE-2017-14545
Published: 2017-09-18
Description: STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .epub file, related to "Data from Faulting Address controls Branch Selection starting at STDUEPubFile!DllUnregisterServer+0x[PII_REDACTED]010332."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14545; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14545
CVE: CVE-2017-14546
Published: 2017-09-18
Description: STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .epub file, related to an "Error Code (0xe06d7363) starting at wow64!Wow64NotifyDebugger+0x[PII_REDACTED]00001d."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14546; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14546
CVE: CVE-2017-14547
Published: 2017-09-18
Description: STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .mobi file, related to a "Read Access Violation starting at STDUMOBIFile!DllUnregisterServer+0x[PII_REDACTED]02efc0."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14547; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14547
CVE: CVE-2017-14548
Published: 2017-09-18
Description: STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .djvu file, related to a "User Mode Write AV starting at STDUDjVuFile!DllUnregisterServer+0x[PII_REDACTED]00854d."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14548; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14548
CVE: CVE-2017-14549
Published: 2017-09-18
Description: STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .djvu file, related to a "Heap Corruption starting at wow64!Wow64NotifyDebugger+0x[PII_REDACTED]00001d."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14549; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14549
CVE: CVE-2017-14550
Published: 2017-09-18
Description: STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .djvu file, related to a "Possible Stack Corruption starting at STDUDjVuFile!DllUnregisterServer+0x[PII_REDACTED]00e8b8."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14550; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14550
CVE: CVE-2017-14551
Published: 2017-09-18
Description: STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .djvu file, related to "Data from Faulting Address controls Branch Selection starting at STDUDjVuFile!DllUnregisterServer+0x[PII_REDACTED]00d9f2."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14551; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14551
CVE: CVE-2017-14552
Published: 2017-09-18
Description: STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .djvu file, related to a "User Mode Write AV starting at STDUDjVuFile!DllUnregisterServer+0x[PII_REDACTED]00d9a9."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14552; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14552
CVE: CVE-2017-14553
Published: 2017-09-18
Description: STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .djvu file, related to a "User Mode Write AV starting at STDUDjVuFile!DllUnregisterServer+0x[PII_REDACTED]0085f5."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14553; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14553
CVE: CVE-2017-14554
Published: 2017-09-18
Description: STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .djvu file, related to a "Possible Stack Corruption starting at STDUDjVuFile!DllUnregisterServer+0x[PII_REDACTED]00d908."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14554; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14554
CVE: CVE-2017-14555
Published: 2017-09-18
Description: STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .djvu file, related to "Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at STDUDjVuFile!DllUnregisterServer+0x[PII_REDACTED]00ec6e."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14555; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14555
CVE: CVE-2017-14556
Published: 2017-09-18
Description: STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .djvu file, related to a "User Mode Write AV starting at STDUDjVuFile!DllUnregisterServer+0x[PII_REDACTED]00da27."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14556; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14556
CVE: CVE-2017-14557
Published: 2017-09-18
Description: STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .djvu file, related to a "User Mode Write AV starting at STDUDjVuFile!DllUnregisterServer+0x[PII_REDACTED]00dd3f."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14557; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14557
CVE: CVE-2017-14558
Published: 2017-09-18
Description: STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .djvu file, related to a "User Mode Write AV starting at STDUDjVuFile!DllUnregisterServer+0x[PII_REDACTED]018cc2."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14558; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14558
CVE: CVE-2017-14559
Published: 2017-09-18
Description: STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to a "Read Access Violation on Block Data Move starting at STDUXPSFile!DllUnregisterServer+0x[PII_REDACTED]005af2."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14559; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14559
CVE: CVE-2017-14560
Published: 2017-09-18
Description: STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .xps file, related to "Data from Faulting Address controls Branch Selection starting at STDUXPSFile!DllUnregisterServer+0x[PII_REDACTED]005bd2."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14560; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14560
CVE: CVE-2017-14561
Published: 2017-09-18
Description: STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to an "Illegal Instruction Violation starting at Unknown Symbol @ 0x[PII_REDACTED]8c024d called from STDUXPSFile!DllUnregisterServer+0x[PII_REDACTED]025638."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14561; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14561
CVE: CVE-2017-14562
Published: 2017-09-18
Description: STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .xps file, related to an "Error Code (0xe06d7363) starting at wow64!Wow64NotifyDebugger+0x[PII_REDACTED]00001d."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14562; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14562
CVE: CVE-2017-14563
Published: 2017-09-18
Description: STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to a "Read Access Violation on Block Data Move starting at STDUXPSFile!DllUnregisterServer+0x[PII_REDACTED]005311."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14563; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14563
CVE: CVE-2017-14564
Published: 2017-09-18
Description: STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .xps file, related to "Data from Faulting Address controls Branch Selection starting at STDUXPSFile!DllUnregisterServer+0x[PII_REDACTED]028657."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14564; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14564
CVE: CVE-2017-14565
Published: 2017-09-18
Description: STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .xps file, related to a "Possible Stack Corruption starting at Unknown Symbol @ 0x[PII_REDACTED]8f2fbf called from image00000000_00400000+0x[PII_REDACTED]240065."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14565; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14565
CVE: CVE-2017-14566
Published: 2017-09-18
Description: STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to a "User Mode Write AV starting at Unknown Symbol @ 0x[PII_REDACTED]9d76c4 called from Unknown Symbol @ 0x[PII_REDACTED]049d2c."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14566; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14566
CVE: CVE-2017-14567
Published: 2017-09-18
Description: STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to an "Illegal Instruction Violation starting at Unknown Symbol @ 0x[PII_REDACTED]8c024d called from STDUXPSFile!DllUnregisterServer+0x[PII_REDACTED]02e77b."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14567; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14567
CVE: CVE-2017-14568
Published: 2017-09-18
Description: STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to an "Illegal Instruction Violation starting at Unknown Symbol @ 0x[PII_REDACTED]97024c called from STDUXPSFile!DllUnregisterServer+0x[PII_REDACTED]025630."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14568; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14568
CVE: CVE-2017-14569
Published: 2017-09-18
Description: STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .xps file, related to a "Read Access Violation starting at STDUXPSFile!DllUnregisterServer+0x[PII_REDACTED]005bd5."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14569; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14569
CVE: CVE-2017-14570
Published: 2017-09-18
Description: STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to a "User Mode Write AV near NULL starting at wow64!Wow64LdrpInitialize+0x[PII_REDACTED]0008e1."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14570; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14570