deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2016-10310
Published: 2017-04-10
Description: Buffer overflow in the MobiLink Synchronization Server component in SAP SQL Anywhere 17 and possibly earlier allows remote authenticated users to cause a denial of service (resource consumption and process crash) by sending a crafted packet several times, aka SAP Security Note 2308778.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-119
References: http://www.securityfocus.com/bid/91197; https://erpscan.io/advisories/erpscan-16-024-sap-sql-anywhere-mobilink-synchronization-server-buffer-overflow/; http://www.securityfocus.com/bid/91197
CVE: CVE-2016-10311
Published: 2017-04-10
Description: Stack-based buffer overflow in SAP NetWeaver 7.0 through 7.5 allows remote attackers to cause a denial of service () by sending a crafted packet to the SAPSTARTSRV port, aka SAP Security Note 2295238.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://erpscan.io/advisories/erpscan-16-030-sap-netweaver-sapstartsrv-stack-based-buffer-overflow/; https://erpscan.io/advisories/erpscan-16-030-sap-netweaver-sapstartsrv-stack-based-buffer-overflow/
CVE: CVE-2016-6878
Published: 2017-04-10
Description: The Curve25519 code in botan before 1.11.31, on systems without a native 128-bit integer type, might allow attackers to have unspecified impact via vectors related to undefined behavior, as demonstrated on 32-bit ARM systems compiled by Clang.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://botan.randombit.net/security.html#id2; https://botan.randombit.net/security.html#id2
CVE: CVE-2016-6879
Published: 2017-04-10
Description: The X509_Certificate::allowed_usage function in botan 1.11.x before 1.11.31 might allow attackers to have unspecified impact by leveraging a call with more than one Key_Usage set in the enum value.
CVSS Score: 7.5 (HIGH)
CWE: CWE-320
References: https://botan.randombit.net/security.html#id2; https://botan.randombit.net/security.html#id2
CVE: CVE-2017-5607
Published: 2017-04-10
Description: Splunk Enterprise 5.0.x before 5.0.18, 6.0.x before 6.0.14, 6.1.x before 6.1.13, 6.2.x before 6.2.13.1, 6.3.x before 6.3.10, 6.4.x before 6.4.6, and 6.5.x before 6.5.3 and Splunk Light before 6.5.2 assigns the $C JS property to the global Window namespace, which might allow remote attackers to obtain sensitive logged-in username and version-related information via a crafted webpage.
CVSS Score: 3.5 (LOW)
CWE: CWE-200
References: http://hyp3rlinx.altervista.org/advisories/SPLUNK-ENTERPRISE-INFORMATION-THEFT.txt; http://seclists.org/fulldisclosure/2017/Mar/89; http://www.securityfocus.com/archive/1/540346/100/0/threaded
CVE: CVE-2017-5983
Published: 2017-04-10
Description: The JIRA Workflow Designer Plugin in Atlassian JIRA Server before 6.3.0 improperly uses an XML parser and deserializer, which allows remote attackers to execute arbitrary code, read arbitrary files, or cause a denial of service via a crafted serialized Java object.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: http://codewhitesec.blogspot.com/2017/04/amf.html; http://www.securityfocus.com/bid/97379; https://confluence.atlassian.com/jira063/jira-security-advisory-2017-03-09-875604401.html
CVE: CVE-2017-5988
Published: 2017-04-10
Description: NetApp Clustered Data ONTAP 8.1 through 9.1P1, when NFS or SMB is enabled, allows remote attackers to cause a denial of service via unspecified vectors.
CVSS Score: 7.5 (HIGH)
References: https://kb.netapp.com/support/s/article/NTAP-20[PII_REDACTED]; https://kb.netapp.com/support/s/article/NTAP-20[PII_REDACTED]
CVE: CVE-2017-7185
Published: 2017-04-10
Description: Use-after-free vulnerability in the mg_http_multipart_wait_for_boundary function in mongoose.c in Cesanta Mongoose Embedded Web Server Library 6.7 and earlier and Mongoose OS 1.2 and earlier allows remote attackers to cause a denial of service (crash) via a multipart/form-data POST request without a MIME boundary string.
CVSS Score: 7.5 (HIGH)
CWE: CWE-416
References: http://www.securityfocus.com/archive/1/540355/100/0/threaded; http://www.securityfocus.com/bid/97370; https://github.com/cesanta/mongoose-os/commit/042eb437973a202d00589b13d628181c6de5cf5b
CVE: CVE-2017-7239
Published: 2017-04-10
Description: Ninka before 1.3.2 might allow remote attackers to obtain sensitive information, manipulate license compliance scan results, or cause a denial of service (process hang) via a crafted filename.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-74
References: http://www.openwall.com/lists/oss-security/2017/04/03/3; http://www.securityfocus.com/bid/97325; https://github.com/dmgerman/ninka/commit/81f185261c8863c5b84344ee31192870be939faf
CVE: CVE-2017-7345
Published: 2017-04-10
Description: NetApp OnCommand Performance Manager and OnCommand Unified Manager for Clustered Data ONTAP before 7.1P1 improperly bind the Java Management Extension Remote Method Invocation (aka JMX RMI) service to the network, which allows remote attackers to obtain sensitive information via unspecified vectors.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/97537; https://kb.netapp.com/support/s/article/NTAP-20[PII_REDACTED]; http://www.securityfocus.com/bid/97537
CVE: CVE-2017-7377
Published: 2017-04-10
Description: The (1) v9fs_create and (2) v9fs_lcreate functions in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allow local guest OS privileged users to cause a denial of service (file descriptor or memory consumption) via vectors related to an already in-use fid.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-772
References: http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=d63fb193e71644a073b77ff5ac6f1216f2f6cf6e; http://www.openwall.com/lists/oss-security/2017/04/03/2; http://www.securityfocus.com/bid/97319
CVE: CVE-2016-5041
Published: 2017-04-10
Description: dwarf_macro5.c in libdwarf before 20160923 allows remote attackers to cause a denial of service (NULL pointer dereference) via a debugging information entry using DWARF5 and without a DW_AT_name.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: http://www.openwall.com/lists/oss-security/2016/05/24/1; http://www.openwall.com/lists/oss-security/2016/05/25/1; https://www.prevanders.net/dwarfbug.html
CVE: CVE-2017-7622
Published: 2017-04-10
Description: dde-daemon, the daemon process of DDE (Deepin Desktop Environment) 15.0 through 15.3, runs with root privileges and hardly does anything to identify the user who calls the function through D-Bus. Anybody can change the grub config, even to append some arguments to make a backdoor or privilege escalation, by calling DoWriteGrubSettings() provided by dde-daemon.
CVSS Score: 8.8 (HIGH)
CWE: CWE-862
References: https://github.com/kings-way/deepinhack/blob/master/dde_daemon_poc.py; https://github.com/kings-way/deepinhack/blob/master/dde_daemon_poc.py
CVE: CVE-2017-7623
Published: 2017-04-10
Description: The iwmiffr_convert_row32 function in imagew-miff.c in libimageworsener.a in ImageWorsener 1.3.0 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/97577; https://github.com/jsummers/imageworsener/issues/12; http://www.securityfocus.com/bid/97577
CVE: CVE-2017-7624
Published: 2017-04-10
Description: The iw_read_bmp_file function in imagew-bmp.c in libimageworsener.a in ImageWorsener 1.3.0 allows remote attackers to consume an amount of available memory via a crafted file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-772
References: http://www.securityfocus.com/bid/97575; https://github.com/jsummers/imageworsener/issues/10; http://www.securityfocus.com/bid/97575
CVE: CVE-2017-7625
Published: 2017-04-10
Description: In Fiyo CMS 2.x through 2.0.7, attackers may upload a webshell via the content parameter to "/dapur/apps/app_theme/libs/save_file.php" and then execute code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: http://www.securityfocus.com/bid/97571; https://github.com/Xyntax/POC-T/blob/2.0/script/fiyo2.0.7-getshell.py; http://www.securityfocus.com/bid/97571
CVE: CVE-2016-10322
Published: 2017-04-10
Description: Synology Photo Station before 6.3-2958 allows remote authenticated guest users to execute arbitrary commands via shell metacharacters in the X-Forwarded-For HTTP header to photo/login.php.
CVSS Score: 8.8 (HIGH)
CWE: CWE-77
References: http://seclists.org/oss-sec/2016/q1/236; https://www.synology.com/en-us/releaseNote/PhotoStation; http://seclists.org/oss-sec/2016/q1/236
CVE: CVE-2016-10323
Published: 2017-04-10
Description: Synology Photo Station before 6.3-2958 allows local users to gain privileges by leveraging setuid execution of a "synophoto_dsm_user --copy-no-ea" command.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://seclists.org/oss-sec/2016/q1/236; https://www.synology.com/en-us/releaseNote/PhotoStation; http://seclists.org/oss-sec/2016/q1/236
CVE: CVE-2016-8235
Published: 2017-04-10
Description: Privilege escalation in Lenovo Customer Care Software Development Kit (CCSDK) versions earlier than 2.0.16.3 allows local users to execute code with elevated privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/97543; https://support.lenovo.com/us/en/solutions/LEN-11340; http://www.securityfocus.com/bid/97543
CVE: CVE-2016-8237
Published: 2017-04-10
Description: Remote code execution in Lenovo Updates (not Lenovo System Update) allows man-in-the-middle attackers to execute arbitrary code.
CVSS Score: 8.1 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/97560; https://support.lenovo.com/us/en/solutions/LEN-8313; http://www.securityfocus.com/bid/97560
CVE: CVE-2017-7646
Published: 2017-04-10
Description: SolarWinds Log & Event Manager (LEM) before 6.3.1 Hotfix 4 allows an authenticated user to browse the server's filesystem and read the contents of arbitrary files contained within.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://thwack.solarwinds.com/thread/111223; https://thwack.solarwinds.com/thread/111223
CVE: CVE-2017-7647
Published: 2017-04-10
Description: SolarWinds Log & Event Manager (LEM) before 6.3.1 Hotfix 4 allows an authenticated user to execute arbitrary commands.
CVSS Score: 8.8 (HIGH)
References: https://thwack.solarwinds.com/thread/111223; https://thwack.solarwinds.com/thread/111223
CVE: CVE-2017-7648
Published: 2017-04-10
Description: Foscam networked devices use the same hardcoded SSL private key across different customers' installations, which allows remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key from another installation.
CVSS Score: 8.1 (HIGH)
CWE: CWE-798
References: http://www.securityfocus.com/archive/1/540388/30/0/threaded; http://www.securityfocus.com/archive/1/540388/30/0/threaded
CVE: CVE-2017-7621
Published: 2017-04-11
Description: Cross Site Scripting Vulnerability in core-eMLi in AuroMeera Technometrix Pvt. Ltd. eMLi V1.0 allows an Attacker to send malicious code, generally in the form of a browser-side script, to a different end user via the page parameter to code/student_portal/home.php. The affected versions are eMLi School Management 1.0, eMLi College Campus Management 1.0, and eMLi University Management 1.0.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://sudoat.blogspot.in/2017/04/xss-vulnerability-in-multiple-emli.html; https://sudoat.blogspot.in/2017/04/xss-vulnerability-in-multiple-emli.html
CVE: CVE-2016-10259
Published: 2017-04-11
Description: Symantec SSL Visibility (SSLV) 3.8.4FC, 3.9, 3.10 before 3.10.4.1, and 3.11 before 3.11.3.1 is susceptible to a denial-of-service vulnerability that impacts the SSL servers for intercepted SSL connections. A malicious SSL client can, under certain circumstances, temporarily exhaust the TCP connection pool of an SSL server.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-399
References: http://www.securityfocus.com/bid/97525; https://bto.bluecoat.com/security-advisory/sa142; https://www.symantec.com/security-center/network-protection-security-advisories/SA142
CVE: CVE-2016-6811
Published: 2017-04-11
Description: In Apache Hadoop 2.x before 2.7.4, a user who can escalate to yarn user can possibly run arbitrary commands as root user.
CVSS Score: 8.8 (HIGH)
CWE: CWE-264
References: https://lists.apache.org/thread.html/9ba3c12bbdfd5b2cae60909e48f92608e00c8d99196390b8cfeca307%40%3Cgeneral.hadoop.apache.org%3E; https://lists.apache.org/thread.html/9ba3c12bbdfd5b2cae60909e48f92608e00c8d99196390b8cfeca307%40%3Cgeneral.hadoop.apache.org%3E
CVE: CVE-2016-7467
Published: 2017-04-11
Description: The TMM SSO plugin in F5 BIG-IP APM 12.0.0 - 12.1.1, 11.6.0 - 11.6.1 HF1, 11.5.4 - 11.5.4 HF2, when configured as a SAML Identity Provider with a Service Provider (SP) connector, might allow traffic to be disrupted or failover initiated when a malformed, signed SAML authentication request from an authenticated user is sent via the SP connector.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/bid/97168; http://www.securitytracker.com/id/1038131; https://support.f5.com/csp/article/K95444512
CVE: CVE-2016-4468
Published: 2017-04-11
Description: SQL injection vulnerability in Pivotal Cloud Foundry (PCF) before 238; UAA 2.x before 2.7.4.4, 3.x before 3.3.0.2, and 3.4.x before 3.4.1; UAA BOSH before 11.2 and 12.x before 12.2; Elastic Runtime before 1.6.29 and 1.7.x before 1.7.7; and Ops Manager 1.7.x before 1.7.8 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://lists.cloudfoundry.org/archives/list/cf-dev%40lists.cloudfoundry.org/thread/WMTZBIH5U7DTOOX2SNRVTPQI3U2AINOB/; https://pivotal.io/security/cve-2016-4468; https://lists.cloudfoundry.org/archives/list/cf-dev%40lists.cloudfoundry.org/thread/WMTZBIH5U7DTOOX2SNRVTPQI3U2AINOB/
CVE: CVE-2016-5011
Published: 2017-04-11
Description: The parse_dos_extended function in partitions/dos.c in the libblkid library in util-linux allows physically proximate attackers to cause a denial of service (memory consumption) via a crafted MSDOS partition table with an extended partition boot record at zero offset.
CVSS Score: 4.6 (MEDIUM)
References: http://rhn.redhat.com/errata/RHSA-2016-2605.html; http://www-01.ibm.com/support/docview.wss?uid=isg3T1024543; http://www-01.ibm.com/support/docview.wss?uid=nas8N1021801
CVE: CVE-2017-5672
Published: 2017-04-11
Description: Kony Enterprise Mobile Management (EMM) before 4.2.5.2 has the vulnerability of disclosing the private key in clear-text when changing the parameters of the request.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: http://packetstormsecurity.com/files/142012/Kony-EMM-4.2.0-Private-Key-Disclosure.html; http://packetstormsecurity.com/files/142012/Kony-EMM-4.2.0-Private-Key-Disclosure.html
CVE: CVE-2017-5873
Published: 2017-04-11
Description: Unquoted Windows search path vulnerability in the guest service in Unisys s-Par before 4.4.20 allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory, as demonstrated by program.exe.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-428
References: http://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=41; http://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=41
CVE: CVE-2017-7461
Published: 2017-04-11
Description: Directory traversal vulnerability in the web-based management site on the Intellinet NFC-30ir IP Camera with firmware LM.1.6.16.05 allows remote attackers to read arbitrary files via a request to a vendor-supplied CGI script that is used to read HTML text file, but that does not do any URI/path sanitization.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-22
References: https://www.exploit-db.com/exploits/41829/; https://www.exploit-db.com/exploits/41829/
CVE: CVE-2017-7462
Published: 2017-04-11
Description: Intellinet NFC-30ir IP Camera has a vendor backdoor that can allow a remote attacker access to a vendor-supplied CGI script in the web directory.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22, CWE-798
References: https://www.exploit-db.com/exploits/41829/; https://www.exploit-db.com/exploits/41829/
CVE: CVE-2016-0779
Published: 2017-04-11
Description: The EjbObjectInputStream class in Apache TomEE before 1.7.4 and 7.x before 7.0.0-M3 allows remote attackers to execute arbitrary code via a crafted serialized object.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: http://packetstormsecurity.com/files/136256/Apache-TomEE-Patched.html; http://tomee-openejb.979440.n4.nabble.com/Document-resolved-vulnerability-CVE-2015-8581-td4678073.html; http://tomee.apache.org/security/tomee.html
CVE: CVE-2016-4483
Published: 2017-04-11
Description: The xmlBufAttrSerializeTxtContent function in xmlsave.c in libxml2 allows context-dependent attackers to cause a denial of service (out-of-bounds read and application crash) via a non-UTF-8 attribute value, related to serialization.  NOTE: this vulnerability may be a duplicate of CVE-2016-3627.
CVSS Score: 7.5 (HIGH)
CWE: CWE-502
References: http://rhn.redhat.com/errata/RHSA-2016-2957.html; http://www.debian.org/security/2016/dsa-3593; http://www.openwall.com/lists/oss-security/2016/05/03/8
CVE: CVE-2017-5338
Published: 2017-04-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2017-5339
Published: 2017-04-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2017-5969
Published: 2017-04-11
Description: libxml2 2.9.4, when used in recover mode, allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted XML document.  NOTE: The maintainer states "I would disagree of a CVE with the Recover parsing option which should only be used for manual recovery at least for XML parser.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-476
References: http://www.openwall.com/lists/oss-security/2016/11/05/3; http://www.openwall.com/lists/oss-security/2017/02/13/1; http://www.securityfocus.com/bid/96188
CVE: CVE-2016-1908
Published: 2017-04-11
Description: The client in OpenSSH before 7.2 mishandles failed cookie generation for untrusted X11 forwarding and relies on the local X11 server for access-control decisions, which allows remote X11 clients to trigger a fallback and obtain trusted X11 forwarding privileges by leveraging configuration issues on this X11 server, as demonstrated by lack of the SECURITY extension on this X11 server.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: http://openwall.com/lists/oss-security/2016/01/15/13; http://rhn.redhat.com/errata/RHSA-2016-0465.html; http://rhn.redhat.com/errata/RHSA-2016-0741.html
CVE: CVE-2016-4444
Published: 2017-04-11
Description: The allow_execmod plugin for setroubleshoot before 3.2.23 allows local users to execute arbitrary commands by triggering an execmod SELinux denial with a crafted binary filename, related to the commands.getstatusoutput function.
CVSS Score: 7.0 (HIGH)
CWE: CWE-77
References: http://seclists.org/oss-sec/2016/q2/575; http://www.securityfocus.com/bid/91476; http://www.securitytracker.com/id/1036144
CVE: CVE-2016-4445
Published: 2017-04-11
Description: The fix_lookup_id function in sealert in setroubleshoot before 3.2.23 allows local users to execute arbitrary commands as root by triggering an SELinux denial with a crafted file name, related to executing external commands with the commands.getstatusoutput function.
CVSS Score: 7.0 (HIGH)
CWE: CWE-77
References: http://seclists.org/oss-sec/2016/q2/575; http://www.securityfocus.com/bid/91430; http://www.securitytracker.com/id/1036144
CVE: CVE-2016-4446
Published: 2017-04-11
Description: The allow_execstack plugin for setroubleshoot allows local users to execute arbitrary commands by triggering an execstack SELinux denial with a crafted filename, related to the commands.getoutput function.
CVSS Score: 7.0 (HIGH)
CWE: CWE-77
References: http://seclists.org/oss-sec/2016/q2/575; http://www.securityfocus.com/bid/91427; http://www.securitytracker.com/id/1036144
CVE: CVE-2016-4989
Published: 2017-04-11
Description: setroubleshoot allows local users to bypass an intended container protection mechanism and execute arbitrary commands by (1) triggering an SELinux denial with a crafted file name, which is handled by the _set_tpath function in audit_data.py or via a crafted (2) local_id or (3) analysis_id field in a crafted XML document to the run_fix function in SetroubleshootFixit.py, related to the subprocess.check_output and commands.getstatusoutput functions, a different vulnerability than CVE-2016-4445.
CVSS Score: 7.0 (HIGH)
CWE: CWE-77
References: http://seclists.org/oss-sec/2016/q2/574; http://securitytracker.com/id/1036144; https://access.redhat.com/errata/RHSA-2016:1293
CVE: CVE-2016-5322
Published: 2017-04-11
Description: The setByteArray function in tif_dir.c in libtiff 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted tiff image.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://www.debian.org/security/2017/dsa-3762; http://www.openwall.com/lists/oss-security/2016/06/15/2; http://www.securityfocus.com/bid/91204
CVE: CVE-2017-6088
Published: 2017-04-11
Description: Multiple SQL injection vulnerabilities in EyesOfNetwork (aka EON) 5.0 and earlier allow remote authenticated users to execute arbitrary SQL commands via the (1) bp_name, (2) display, (3) search, or (4) equipment parameter to module/monitoring_ged/ged_functions.php or the (5) type parameter to monitoring_ged/ajax.php.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: http://www.openwall.com/lists/oss-security/2017/03/23/4; http://www.securityfocus.com/bid/97084; https://sysdream.com/news/lab/2017-03-14-cve-2017-6088-eon-5-0-multiple-sql-injection/
CVE: CVE-2013-6647
Published: 2017-04-11
Description: A use-after-free in AnimationController::endAnimationUpdate in Google Chrome.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: https://bugs.chromium.org/p/chromium/issues/detail?id=315889; https://bugs.chromium.org/p/chromium/issues/detail?id=315889
CVE: CVE-2014-8354
Published: 2017-04-11
Description: The HorizontalFilter function in resize.c in ImageMagick before 6.8.9-9 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted image file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://packetstormsecurity.com/files/128944/ImageMagick-Out-Of-Bounds-Read-Heap-Overflow.html; http://www.securityfocus.com/bid/70830; https://bugzilla.redhat.com/show_bug.cgi?id=1158518
CVE: CVE-2014-8355
Published: 2017-04-11
Description: PCX parser code in ImageMagick before 6.8.9-9 allows remote attackers to cause a denial of service (out-of-bounds read).
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://packetstormsecurity.com/files/128944/ImageMagick-Out-Of-Bounds-Read-Heap-Overflow.html; http://www.securityfocus.com/bid/70839; https://bugzilla.redhat.com/show_bug.cgi?id=1158523
CVE: CVE-2014-8562
Published: 2017-04-11
Description: DCM decode in ImageMagick before 6.8.9-9 allows remote attackers to cause a denial of service (out-of-bounds read).
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/70837; https://bugzilla.redhat.com/show_bug.cgi?id=1159362; https://int21.de/cve/CVE-2014-8562-ImageMagick-dcm-oob-heap-overflow.html
CVE: CVE-2014-8716
Published: 2017-04-11
Description: The JPEG decoder in ImageMagick before 6.8.9-9 allows local users to cause a denial of service (out-of-bounds memory access and crash).
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-125
References: http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=26456; http://www.securityfocus.com/bid/70992; https://bugzilla.redhat.com/show_bug.cgi?id=1164248