deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2015-0326
Published: 2015-02-06
Description: Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2015-0325 and CVE-2015-0328.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00006.html; http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00007.html; http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00008.html
CVE: CVE-2015-0327
Published: 2015-02-06
Description: Heap-based buffer overflow in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0323.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00006.html; http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00007.html; http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00008.html
CVE: CVE-2015-0328
Published: 2015-02-06
Description: Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2015-0325 and CVE-2015-0326.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00006.html; http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00007.html; http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00008.html
CVE: CVE-2015-0329
Published: 2015-02-06
Description: Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0314, CVE-2015-0316, CVE-2015-0318, CVE-2015-0321, and CVE-2015-0330.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00006.html; http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00007.html; http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00008.html
CVE: CVE-2015-0330
Published: 2015-02-06
Description: Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0314, CVE-2015-0316, CVE-2015-0318, CVE-2015-0321, and CVE-2015-0329.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00006.html; http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00007.html; http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00008.html
CVE: CVE-2014-0603
Published: 2015-02-06
Description: The rftpcom.dll ActiveX control in Attachmate Reflection FTP Client before 14.1.429 allows remote attackers to cause a denial of service (memory corruption) and execute arbitrary code via vectors related to the (1) GetGlobalSettings or (2) GetSiteProperties3 methods, which triggers a dereference of an arbitrary memory address.  NOTE: this issue was MERGED with CVE-2014-0606 because it is the same type of vulnerability, affecting the same set of versions, and discovered by the same researcher.
CVSS Score: 10.0 (HIGH)
CWE: CWE-94
References: http://support.attachmate.com/techdocs/2501.html; http://www.zerodayinitiative.com/advisories/ZDI-14-288/; http://www.zerodayinitiative.com/advisories/ZDI-14-291/
CVE: CVE-2014-0604
Published: 2015-02-06
Description: Directory traversal vulnerability in the rftpcom.dll ActiveX control in Attachmate Reflection FTP Client before 14.1.429 allows remote attackers to execute arbitrary code via unspecified vectors to the StartLog method.
CVSS Score: 10.0 (HIGH)
CWE: CWE-22
References: http://support.attachmate.com/techdocs/2501.html; http://www.zerodayinitiative.com/advisories/ZDI-14-289/; http://support.attachmate.com/techdocs/2501.html
CVE: CVE-2014-0605
Published: 2015-02-06
Description: Directory traversal vulnerability in the rftpcom.dll ActiveX control in Attachmate Reflection FTP Client before 14.1.429 allows remote attackers to execute arbitrary code via unspecified vectors to the SaveSettings method.
CVSS Score: 10.0 (HIGH)
CWE: CWE-22
References: http://support.attachmate.com/techdocs/2501.html; http://www.zerodayinitiative.com/advisories/ZDI-14-290/; http://support.attachmate.com/techdocs/2501.html
CVE: CVE-2014-0606
Published: 2015-02-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-0603. Reason: This issue was MERGED into CVE-2014-0603 in accordance with CVE content decisions, because it is the same type of vulnerability and affects the same versions.  Notes: All CVE users should reference CVE-2014-0603 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2014-5332
Published: 2015-02-06
Description: Race condition in NVMap in NVIDIA Tegra Linux Kernel 3.10 allows local users to gain privileges via a crafted NVMAP_IOC_CREATE IOCTL call, which triggers a use-after-free error, as demonstrated by using a race condition to escape the Chrome sandbox.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-362
References: http://googleprojectzero.blogspot.com/2015/01/exploiting-nvmap-to-escape-chrome.html; http://nvidia.custhelp.com/app/answers/detail/a_id/3618; http://googleprojectzero.blogspot.com/2015/01/exploiting-nvmap-to-escape-chrome.html
CVE: CVE-2014-9353
Published: 2015-02-06
Description: NetApp OnCommand Balance before 4.2P2 contains a "default privileged account," which allows remote attackers to gain privileges via unspecified vectors.
CVSS Score: 10.0 (HIGH)
CWE: CWE-264
References: https://kb.netapp.com/support/index?page=content&id=9010020; https://kb.netapp.com/support/index?page=content&id=9010020
CVE: CVE-2014-9354
Published: 2015-02-06
Description: NetApp OnCommand Balance before 4.2P3 allows local users to obtain sensitive information via unspecified vectors related to cleartext storage.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-200
References: https://kb.netapp.com/support/index?page=content&id=9010021; https://kb.netapp.com/support/index?page=content&id=9010021
CVE: CVE-2015-1209
Published: 2015-02-06
Description: Use-after-free vulnerability in the VisibleSelection::nonBoundaryShadowTreeRootNode function in core/editing/VisibleSelection.cpp in the DOM implementation in Blink, as used in Google Chrome before 40.0.2214.111 on Windows, OS X, and Linux and before 40.0.2214.109 on Android, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that triggers improper handling of a shadow-root anchor.
CVSS Score: 7.5 (HIGH)
CWE: CWE-416
References: http://googlechromereleases.blogspot.com/2015/02/chrome-for-android-update.html; http://googlechromereleases.blogspot.com/2015/02/stable-channel-update.html; http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00005.html
CVE: CVE-2015-1210
Published: 2015-02-06
Description: The V8ThrowException::createDOMException function in bindings/core/v8/V8ThrowException.cpp in the V8 bindings in Blink, as used in Google Chrome before 40.0.2214.111 on Windows, OS X, and Linux and before 40.0.2214.109 on Android, does not properly consider frame access restrictions during the throwing of an exception, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.
CVSS Score: 5.0 (MEDIUM)
References: http://googlechromereleases.blogspot.com/2015/02/chrome-for-android-update.html; http://googlechromereleases.blogspot.com/2015/02/stable-channel-update.html; http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00005.html
CVE: CVE-2015-1211
Published: 2015-02-06
Description: The OriginCanAccessServiceWorkers function in content/browser/service_worker/service_worker_dispatcher_host.cc in Google Chrome before 40.0.2214.111 on Windows, OS X, and Linux and before 40.0.2214.109 on Android does not properly restrict the URI scheme during a ServiceWorker registration, which allows remote attackers to gain privileges via a filesystem: URI.
CVSS Score: 7.5 (HIGH)
References: http://googlechromereleases.blogspot.com/2015/02/chrome-for-android-update.html; http://googlechromereleases.blogspot.com/2015/02/stable-channel-update.html; http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00005.html
CVE: CVE-2015-1212
Published: 2015-02-06
Description: Multiple unspecified vulnerabilities in Google Chrome before 40.0.2214.111 on Windows, OS X, and Linux and before 40.0.2214.109 on Android allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
CVSS Score: 7.5 (HIGH)
References: http://googlechromereleases.blogspot.com/2015/02/chrome-for-android-update.html; http://googlechromereleases.blogspot.com/2015/02/stable-channel-update.html; http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00005.html
CVE: CVE-2014-9632
Published: 2015-02-06
Description: The TDI driver (avgtdix.sys) in AVG Internet Security before 2013.3495 Hot Fix 18 and 2015.x before 2015.5315 and Protection before 2015.5315 allows local users to write to arbitrary memory locations, and consequently gain privileges, via a crafted 0x830020f8 IOCTL call.
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://packetstormsecurity.com/files/130248/AVG-Internet-Security-2015.0.5315-Privilege-Escalation.html; http://www.avg.com/eu-en/avg-release-notes; http://www.exploit-db.com/exploits/35993
CVE: CVE-2014-9636
Published: 2015-02-06
Description: unzip 6.0 allows remote attackers to cause a denial of service (out-of-bounds read or write and crash) via an extra field with an uncompressed size smaller than the compressed field size in a zip archive that advertises STORED method compression.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148792.html; http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148849.html; http://seclists.org/oss-sec/2014/q4/1131
CVE: CVE-2014-9641
Published: 2015-02-06
Description: The tmeext.sys driver before 2.0.0.1015 in Trend Micro Antivirus Plus, Internet Security, and Maximum Security allows local users to write to arbitrary memory locations, and consequently gain privileges, via a crafted 0x00222400 IOCTL call.
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://esupport.trendmicro.com/en-us/home/pages/technical-support/1106233.aspx; http://www.exploit-db.com/exploits/35962; http://www.greyhathacker.net/?p=818
CVE: CVE-2014-9642
Published: 2015-02-06
Description: bdagent.sys in BullGuard Antivirus, Internet Security, Premium Protection, and Online Backup before 15.0.288 allows local users to write data to arbitrary memory locations, and consequently gain privileges, via a crafted 0x0022405c IOCTL call.
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://packetstormsecurity.com/files/130247/BullGuard-14.1.285.4-Privilege-Escalation.html; http://www.bullguard.com/about/release-notes.aspx; http://www.exploit-db.com/exploits/35994
CVE: CVE-2014-9643
Published: 2015-02-06
Description: K7Sentry.sys in K7 Computing Ultimate Security, Anti-Virus Plus, and Total Security before 14.2.0.253 allows local users to write to arbitrary memory locations, and consequently gain privileges, via a crafted 0x95002570, 0x95002574, 0x95002580, 0x950025a8, 0x950025ac, or 0x950025c8 IOCTL call.
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://packetstormsecurity.com/files/130246/K7-Computing-14.2.0.240-Privilege-Escalation.html; http://www.exploit-db.com/exploits/35992; http://www.greyhathacker.net/?p=818
CVE: CVE-2015-1305
Published: 2015-02-06
Description: McAfee Data Loss Prevention Endpoint (DLPe) before 9.3.400 allows local users to write to arbitrary memory locations, and consequently gain privileges, via a crafted (1) 0x00224014 or (2) 0x0022c018 IOCTL call.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-264
References: http://packetstormsecurity.com/files/130177/McAfee-Data-Loss-Prevention-Endpoint-Privilege-Escalation.html; http://www.exploit-db.com/exploits/35953; http://www.greyhathacker.net/?p=818
CVE: CVE-2015-1442
Published: 2015-02-06
Description: SQL injection vulnerability in views/zero_transact_user.php in the administrative backend in ZeroCMS 1.3.3, 1.3.2, and earlier allows remote authenticated users to execute arbitrary SQL commands via the user_id parameter in a Modify Account action.  NOTE: The article_id parameter to zero_view_article.php vector is already covered by CVE-2014-4034.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.com/files/130192/ZeroCMS-1.3.3-SQL-Injection.html; http://seclists.org/fulldisclosure/2015/Feb/4; http://seclists.org/oss-sec/2015/q1/379
CVE: CVE-2015-1444
Published: 2015-02-06
Description: Multiple cross-site scripting (XSS) vulnerabilities in the web administration frontend in the httpd package in fli4l before 3.10.1 and 4.0 before 2015-01-30 allow remote attackers to inject arbitrary web script or HTML via the (1) conntrack.cgi, (2) index.cgi, (3) log_syslog.cgi, (4) problems.cgi, (5) status.cgi, (6) status_network.cgi, or (7) status_system.cgi script in admin/.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://seclists.org/oss-sec/2015/q1/376; http://seclists.org/oss-sec/2015/q1/381; http://www.fli4l.de/fileadmin/fli4l/security/advisory-FFL-1113.txt
CVE: CVE-2015-1467
Published: 2015-02-06
Description: Multiple SQL injection vulnerabilities in Translations in Fork CMS before 3.8.6 allow remote authenticated users to execute arbitrary SQL commands via the (1) language[] or (2) type[] parameter to private/en/locale/index.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.com/files/130242/Fork-CMS-3.8.5-SQL-Injection.html; http://www.fork-cms.com/blog/detail/fork-3.8.6-released; http://www.securityfocus.com/archive/1/534616/100/0/threaded
CVE: CVE-2015-1512
Published: 2015-02-06
Description: Multiple cross-site scripting (XSS) vulnerabilities in FancyFon FAMOC before 3.17.4 allow remote attackers to inject arbitrary web script or HTML via the (1) LoginForm[username] to ui/system/login or the (2) order or (3) myorgs to index.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/130119/FancyFon-FAMOC-3.16.5-Cross-Site-Scripting.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/100410; https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2014-011.txt
CVE: CVE-2015-1513
Published: 2015-02-06
Description: SQL injection vulnerability in SIPhone Enterprise PBX allows remote attackers to execute arbitrary SQL commands via the Username.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.com/files/130194/SIPhone-Enterprise-PBX-SQL-Injection.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/100582; http://packetstormsecurity.com/files/130194/SIPhone-Enterprise-PBX-SQL-Injection.html
CVE: CVE-2015-1514
Published: 2015-02-06
Description: Multiple SQL injection vulnerabilities in FancyFon FAMOC before 3.17.4 allow (1) remote attackers to execute arbitrary SQL commands via the device ID REST parameter (PATH_INFO) to /ajax.php or (2) remote authenticated users to execute arbitrary SQL commands via the order parameter to index.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.com/files/130117/FancyFon-FAMOC-3.16.5-SQL-Injection.html; http://www.securityfocus.com/archive/1/534552/100/0/threaded; https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2014-010.txt
CVE: CVE-2013-5557
Published: 2015-02-07
Description: The Proxy Bypass Content Rewriter feature in the WebVPN subsystem in Cisco Adaptive Security Appliance (ASA) Software 9.1(.2) and earlier allows remote authenticated users to cause a denial of service (device crash or error-recovery event) via an HTTP request that triggers a rewrite, aka Bug ID CSCug91577.
CVSS Score: 6.3 (MEDIUM)
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5557; http://tools.cisco.com/security/center/viewAlert.x?alertId=37383; http://www.securityfocus.com/bid/72529
CVE: CVE-2015-0601
Published: 2015-02-07
Description: Cisco Unified IP 9900 phones with firmware 9.4(.1) and earlier allow local users to cause a denial of service (device reload) via crafted commands, aka Bug ID CSCup92790.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-20
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0601; http://tools.cisco.com/security/center/viewAlert.x?alertId=37344; http://www.securityfocus.com/bid/72483
CVE: CVE-2015-0603
Published: 2015-02-07
Description: Cisco Unified IP 9900 phones with firmware 9.4(.1) and earlier use weak permissions for unspecified files, which allows local users to cause a denial of service (persistent hang or reboot) by writing to a phone's filesystem, aka Bug ID CSCup90474.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-264
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0603; http://tools.cisco.com/security/center/viewAlert.x?alertId=37345; http://www.securityfocus.com/bid/72484
CVE: CVE-2015-0604
Published: 2015-02-07
Description: The web framework on Cisco Unified IP 9900 phones with firmware 9.4(.1) and earlier allows remote attackers to upload files to arbitrary locations on a phone's filesystem via crafted HTTP requests, aka Bug ID CSCup90424.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://secunia.com/advisories/62761; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0604; http://tools.cisco.com/security/center/viewAlert.x?alertId=37346
CVE: CVE-2015-0605
Published: 2015-02-07
Description: The uuencode inspection engine in Cisco AsyncOS on Cisco Email Security Appliance (ESA) devices 8.5 and earlier allows remote attackers to bypass intended content restrictions via a crafted e-mail attachment with uuencode encoding, aka Bug ID CSCzv54343.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-264
References: http://secunia.com/advisories/62829; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0605; http://tools.cisco.com/security/center/viewAlert.x?alertId=37384
CVE: CVE-2014-9203
Published: 2015-02-07
Description: Buffer overflow in the Field Device Tool (FDT) Frame application in the HART Device Type Manager (DTM) library, as used in MACTek Bullet DTM 1.00.0, GE Vector DTM 1.00.0, GE SVi1000 Positioner DTM 1.00.0, GE SVI II AP Positioner DTM 2.00.1, and GE 12400 Level Transmitter DTM 1.00.0, allows remote attackers to cause a denial of service (DTM outage) via crafted packets.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://www.geoilandgas.com/securityadvisory; https://ics-cert.us-cert.gov/advisories/ICSA-15-036-01; http://www.geoilandgas.com/securityadvisory
CVE: CVE-2015-0589
Published: 2015-02-07
Description: The administrative web interface in Cisco WebEx Meetings Server 1.0 through 1.5 allows remote authenticated users to execute arbitrary OS commands with root privileges via unspecified fields, aka Bug ID CSCuj40460.
CVSS Score: 9.0 (HIGH)
CWE: CWE-20
References: http://secunia.com/advisories/62799; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150204-wbx; http://www.securityfocus.com/bid/72493
CVE: CVE-2015-0600
Published: 2015-02-07
Description: The mobility extension on Cisco Unified IP 9900 phones with firmware 9.4(.1) and earlier allows remote attackers to cause a denial of service (logoff) via crafted packets, aka Bug ID CSCuq12139.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0600; http://tools.cisco.com/security/center/viewAlert.x?alertId=37341; http://www.securityfocus.com/bid/72481
CVE: CVE-2015-0602
Published: 2015-02-07
Description: The mobility extension on Cisco Unified IP 9900 phones with firmware 9.4(.1) and earlier allows remote attackers to obtain sensitive information by sniffing the network, aka Bug ID CSCuq12117.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0602; http://tools.cisco.com/security/center/viewAlert.x?alertId=37342; http://www.securityfocus.com/bid/72482
CVE: CVE-2015-0871
Published: 2015-02-07
Description: Cross-site scripting (XSS) vulnerability in Mrs. Shiromuku Perl CGI shiromuku(u1)GUESTBOOK 1.62 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN17480391/995116/index.html; http://jvn.jp/en/jp/JVN17480391/index.html; http://jvn.jp/en/jp/JVN17480391/995116/index.html
CVE: CVE-2015-0072
Published: 2015-02-07
Description: Cross-site scripting (XSS) vulnerability in Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass the Same Origin Policy and inject arbitrary web script or HTML via vectors involving an IFRAME element that triggers a redirect, a second IFRAME element that does not trigger a redirect, and an eval of a WindowProxy object, aka "Universal XSS (UXSS)."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://community.websense.com/blogs/securitylabs/archive/2015/02/05/another-day-another-zero-day-internet-explorer-s-turn-cve-2015-0072.aspx; http://innerht.ml/blog/ie-uxss.html; http://packetstormsecurity.com/files/130308/Microsoft-Internet-Explorer-Universal-XSS-Proof-Of-Concept.html
CVE: CVE-2014-9656
Published: 2015-02-08
Description: The tt_sbit_decoder_load_image function in sfnt/ttsbit.c in FreeType before 2.5.4 does not properly check for an integer overflow, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted OpenType font.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://advisories.mageia.org/MGASA-2015-0083.html; http://code.google.com/p/google-security-research/issues/detail?id=196; http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=f0292bb9920aa1dbfed5f53861e7c7a89b35833a
CVE: CVE-2014-9657
Published: 2015-02-08
Description: The tt_face_load_hdmx function in truetype/ttpload.c in FreeType before 2.5.4 does not establish a minimum record size, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted TrueType font.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://advisories.mageia.org/MGASA-2015-0083.html; http://code.google.com/p/google-security-research/issues/detail?id=195; http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=eca0f[PII_REDACTED]70a429fe91f6329e499390d55
CVE: CVE-2014-9658
Published: 2015-02-08
Description: The tt_face_load_kern function in sfnt/ttkern.c in FreeType before 2.5.4 enforces an incorrect minimum table length, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted TrueType font.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://advisories.mageia.org/MGASA-2015-0083.html; http://code.google.com/p/google-security-research/issues/detail?id=194; http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=f70d9342e65cd2cb44e9f26b6d7edeedf191fc6c