rainbutterfly/cve_corpus huggingface dataset:
CVE-2016-5752 
The SAML2 implementation in Identity Server in NetIQ Access Manager 4.1 before 4.1.2 HF1 and 4.2 before 4.2.2 was handling unsigned SAML requests incorrectly, leaking results to a potentially malicious "Assertion Consumer Service URL" instead of the original requester.
Problem types: description: handling unsigned SAML requests incorrectly
Affected products: vendor: n/a
product: NetIQ Access Manager
Published: 2017-03-23T06:36:00.000Z
CVE-2016-5754 
Presence of a .htaccess file could leak information in NetIQ Access Manager 4.1 before 4.1.2 Hot Fix 1 and 4.2 before SP2.
Problem types: description: leak information
Affected products: vendor: n/a
product: NetIQ Access Manager
Published: 2017-03-23T06:36:00.000Z
CVE-2016-5755 
NetIQ Access Manager 4.1 before 4.1.2 Hot Fix 1 and 4.2 before 4.2.2 was vulnerable to clickjacking attacks due to a missing SAMEORIGIN filter in the "high encryption" setting.
Problem types: description: clickjacking
Affected products: vendor: n/a
product: NetIQ Access Manager
Published: 2017-03-23T06:36:00.000Z
CVE-2016-5756 
Multiple components of the web tools in NetIQ Access Manager 4.1 before 4.1.2 Hot Fix 1 and 4.2 before 4.2.2 were vulnerable to Reflected Cross Site Scripting attacks which could be used to hijack user sessions: nps/servlet/frameservice, nps/servlet/webacc, roma/admin/cntl, roma/jsp/admin/appliance/devicedetail_edit.jsp, roma/jsp/admin/managementip/mgmt_ip_details_frameset.jsp, roma/jsp/admin/managementip/mgmt_ip_details_middleframe.jsp, roma/jsp/volsc/monitoring/appliance.jsp, and roma/jsp/volsc/monitoring/graph.jsp.
Problem types: description: XSS
Affected products: vendor: n/a
product: NetIQ Access Manager
Published: 2017-03-23T06:36:00.000Z
CVE-2016-5757 
iManager Admin Console in NetIQ Access Manager 4.1 before 4.1.2 Hot Fix 1 and 4.2 before 4.2.2 was vulnerable to iFrame manipulation attacks, which could allow remote users to gain access to authentication credentials.
Problem types: description: iFrame manipulation
Affected products: vendor: n/a
product: NetIQ Access Manager
Published: 2017-03-23T06:36:00.000Z
CVE-2016-5758 
A cross site request forgery protection mechanism in NetIQ Access Manager 4.1 before 4.1.2 Hot Fix 1 and 4.2 before 4.2.2 could be circumvented by repeated uploads causing a high load.
Problem types: description: cross site request forgery
Affected products: vendor: n/a
product: NetIQ Access Manager
Published: 2017-03-23T06:36:00.000Z
CVE-2016-5759 
The mkdumprd script called "dracut" in the current working directory "." allows local users to trick the administrator into executing code as root.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-08T18:00:00.000Z
CVE-2016-5760 
Multiple cross-site scripting (XSS) vulnerabilities in the administrator console in Novell GroupWise before 2014 R2 Service Pack 1 Hot Patch 1 allow remote attackers to inject arbitrary web script or HTML via the (1) token parameter to gwadmin-console/install/login.jsp or (2) PATH_INFO to gwadmin-console/index.jsp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-20T17:00:00.000Z
CVE-2016-5761 
Cross-site scripting (XSS) vulnerability in Novell GroupWise before 2014 R2 Service Pack 1 Hot Patch 1 allows remote attackers to inject arbitrary web script or HTML via a crafted email.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-20T17:00:00.000Z
CVE-2016-5762 
Integer overflow in the Post Office Agent in Novell GroupWise before 2014 R2 Service Pack 1 Hot Patch 1 might allow remote attackers to execute arbitrary code via a long (1) username or (2) password, which triggers a heap-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-20T17:00:00.000Z
CVE-2016-5763 
Vulnerability in Novell Open Enterprise Server (OES2015 SP1 before Scheduled Maintenance Update 10992, OES2015 before Scheduled Maintenance Update 10990, OES11 SP3 before Scheduled Maintenance Update 10991, OES11 SP2 before Scheduled Maintenance Update 10989) might allow authenticated remote attackers to perform unauthorized file access and modification.
Problem types: description: unauthorized file access and modification
Affected products: vendor: n/a
product: Novell Open Enterprise Server 11 and 2015
Published: 2016-11-15T19:00:00.000Z
CVE-2016-5764 
Micro Focus Rumba FTP 4.X client buffer overflow makes it possible to corrupt the stack and allow arbitrary code execution. Fixed in: Rumba FTP 4.5 (HF 14668). This can only occur if a client connects to a malicious server.
Problem types: description: unspecified
Affected products: vendor: n/a
product: Micro Focus Rumba FTP 4.X before 4.5 (HF 14668)
Published: 2016-10-27T20:00:00.000Z
CVE-2016-5765 
Administrative Server in Micro Focus Host Access Management and Security Server (MSS) and Reflection for the Web (RWeb) and Reflection Security Gateway (RSG) and Reflection ZFE (ZFE) allows remote unauthenticated attackers to read arbitrary files via a specially crafted URL that allows limited directory traversal. Applies to MSS 12.3 before 12.3.326 and MSS 12.2 before 12.2.342 and RSG 12.1 before 12.1.362 and RWeb 12.3 before 12.3.312 and RWeb 12.2 before 12.2.342 and RWeb 12.1 before 12.1.362 and ZFE 2.0.1 before 2.0.1.18 and ZFE 2.0.0 before 2.0.0.52 and ZFE 1.4.0 before 1.4.0.14.
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Micro Focus MSS, RWeb, ZFE, RSG 1.x, 2.x, 12.x
Published: 2016-11-29T11:00:00.000Z
CVE-2016-5766 
Integer overflow in the _gd2GetHeader function in gd_gd2.c in the GD Graphics Library (aka libgd) before 2.2.3, as used in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8, allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via crafted chunk dimensions in an image.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-08-07T10:00:00.000Z
CVE-2016-5767 
Integer overflow in the gdImageCreate function in gd.c in the GD Graphics Library (aka libgd) before 2.0.34RC1, as used in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8, allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted image dimensions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-08-07T10:00:00.000Z
CVE-2016-5768 
Double free vulnerability in the _php_mb_regex_ereg_replace_exec function in php_mbregex.c in the mbstring extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by leveraging a callback exception.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-08-07T10:00:00.000Z
CVE-2016-5769 
Multiple integer overflows in mcrypt.c in the mcrypt extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 allow remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted length value, related to the (1) mcrypt_generic and (2) mdecrypt_generic functions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-08-07T10:00:00.000Z
CVE-2016-5770 
Integer overflow in the SplFileObject::fread function in spl_directory.c in the SPL extension in PHP before 5.5.37 and 5.6.x before 5.6.23 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a large integer argument, a related issue to CVE-2016-5096.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-08-07T10:00:00.000Z
CVE-2016-5771 
spl_array.c in the SPL extension in PHP before 5.5.37 and 5.6.x before 5.6.23 improperly interacts with the unserialize implementation and garbage collection, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free and application crash) via crafted serialized data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-08-07T10:00:00.000Z
CVE-2016-5772 
Double free vulnerability in the php_wddx_process_data function in wddx.c in the WDDX extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted XML data that is mishandled in a wddx_deserialize call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-08-07T10:00:00.000Z
CVE-2016-5773 
php_zip.c in the zip extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 improperly interacts with the unserialize implementation and garbage collection, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free and application crash) via crafted serialized data containing a ZipArchive object.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-08-07T10:00:00.000Z
CVE-2016-5774 
The HTTPS server in Blue Coat PacketShaper S-Series 11.5.x before 11.5.3.2 might allow remote attackers to obtain sensitive credentials and other information via unspecified vectors, related to use of insecure cryptographic parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-12T19:00:00.000Z
CVE-2016-5781 
Stack-based buffer overflow in WECON LeviStudio allows remote attackers to execute arbitrary code via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-12T01:00:00.000Z
CVE-2016-5782 
An issue was discovered in Locus Energy LGate prior to 1.05H, LGate 50, LGate 100, LGate 101, LGate 120, and LGate 320. Locus Energy meters use a PHP script to manage the energy meter parameters for voltage monitoring and network configuration. The PHP code does not properly validate information that is sent in the POST request.
Problem types: description: Locus Energy LGate Command Injection Vulnerability
Affected products: vendor: n/a
product: Locus Energy LGate through 320
Published: 2017-02-13T21:00:00.000Z
CVE-2016-5786 
An issue was discovered in OmniMetrix OmniView, Version 1.2. The OmniView web application transmits credentials with the HTTP protocol, which could be sniffed by an attacker that may result in the compromise of account credentials.
Problem types: description: OmniMetrix OmniView unencrypted http
Affected products: vendor: n/a
product: OmniMetrix OmniView 1.2
Published: 2017-02-13T21:00:00.000Z
CVE-2016-5787 
General Electric (GE) Digital Proficy HMI/SCADA - CIMPLICITY before 8.2 SIM 27 mishandles service DACLs, which allows local users to modify a service configuration via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-15T16:00:00.000Z
CVE-2016-5788 
General Electric (GE) Bently Nevada 3500/22M USB with firmware before 5.0 and Bently Nevada 3500/22M Serial have open ports, which makes it easier for remote attackers to obtain privileged access via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-11-25T03:38:00.000Z
CVE-2016-5789 
A Cross-site Request Forgery issue was discovered in JanTek JTC-200, all versions. An attacker could perform actions with the same permissions as a victim user, provided the victim has an active session and is induced to trigger the malicious request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-13T02:00:00.000Z
CVE-2016-5790 
Tollgrade LightHouse SMS before 5.1 patch 3 allows remote attackers to bypass authentication and restart the software via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-15T16:00:00.000Z
CVE-2016-5791 
An Improper Authentication issue was discovered in JanTek JTC-200, all versions. The improper authentication could provide an undocumented BusyBox Linux shell accessible over the TELNET service without any authentication.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-13T02:00:00.000Z
CVE-2016-5792 
SQL injection vulnerability in Moxa SoftCMS before 1.5 allows remote attackers to execute arbitrary SQL commands via unspecified fields.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-08-08T00:00:00.000Z
CVE-2016-5793 
Unquoted Windows search path vulnerability in Moxa Active OPC Server before 2.4.19 allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-24T10:00:00.000Z
CVE-2016-5795 
An XXE issue was discovered in Automated Logic Corporation (ALC) Liebert SiteScan Web Version 6.5 and prior, ALC WebCTRL Version 6.5 and prior, and Carrier i-Vu Version 6.5 and prior. An attacker could enter malicious input to WebCTRL, i-Vu, or SiteScan Web through a weakly configured XML parser causing the application to execute arbitrary code or disclose file contents from a server or connected network.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-31T21:00:00.000Z
CVE-2016-5796 
An issue was discovered in Fatek Automation PM Designer V3 Version 2.1.2.2, and Automation FV Designer Version 1.2.8.0. Sending additional valid packets could allow the attacker to cause a crash or to execute arbitrary code, because of Improper Restriction of Operations within the Bounds of a Memory Buffer.
Problem types: description: Fatek Automation Designer Memory Corruption Vulnerabilities
Affected products: vendor: n/a
product: Fatek Automation Designer 2.1.2.2
Published: 2017-02-13T21:00:00.000Z
CVE-2016-5797 
Tollgrade LightHouse SMS before 5.1 patch 3 provides different error messages for failed authentication attempts depending on whether the username exists, which allows remote attackers to enumerate account names via a series of attempts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-15T16:00:00.000Z
CVE-2016-5798 
An issue was discovered in Fatek Automation PM Designer V3 Version 2.1.2.2, and Automation FV Designer Version 1.2.8.0. By sending additional valid packets, an attacker could trigger a stack-based buffer overflow and cause a crash. Also, a malicious attacker can trigger a remote buffer overflow on the Fatek Communication Server.
Problem types: description: Fatek Automation Designer buffer overflow
Affected products: vendor: n/a
product: Fatek Automation Designer 2.1.2.2
Published: 2017-02-13T21:00:00.000Z
CVE-2016-5799 
Moxa OnCell G3100V2 devices before 2.8 and G3111, G3151, G3211, and G3251 devices before 1.7 do not properly restrict authentication attempts, which makes it easier for remote attackers to obtain access via a brute-force attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-08-24T01:00:00.000Z
CVE-2016-5800 
A malicious attacker can trigger a remote buffer overflow in the Communication Server in Fatek Automation PM Designer V3 Version 2.1.2.2, and Automation FV Designer Version 1.2.8.0.
Problem types: cwe_id: CWE-121
description: Buffer overflow CWE-121
Affected products: vendor: Fatek
product: Automation PM Designer V3
vendor: Fatek
product: Automation FV Designer
Published: 2019-03-21T13:56:42.000Z
CVE-2016-5801 
An issue was discovered in OmniMetrix OmniView, Version 1.2. Insufficient password requirements for the OmniView web application may allow an attacker to gain access by brute forcing account passwords.
Problem types: description: OmniMetrix OmniView Insufficient password requirements
Affected products: vendor: n/a
product: OmniMetrix OmniView 1.2
Published: 2017-02-13T21:00:00.000Z
CVE-2016-5802 
An issue was discovered in Delta Electronics WPLSoft, Versions prior to V2.42.11, ISPSoft, Versions prior to 3.02.11, and PMSoft, Versions prior to 2.10.10. Multiple instances of out-of-bounds write conditions may allow malicious files to be read and executed by the affected software.
Problem types: description: Delta Electronics WPLSoft, ISPSoft, and PMSoft out-of-bounds write
Affected products: vendor: n/a
product: Delta Electronics WPLSoft, ISPSoft, and PMSoft
Published: 2017-02-13T21:00:00.000Z
CVE-2016-5803 
An issue was discovered in CA Unified Infrastructure Management Version 8.47 and earlier. The Unified Infrastructure Management software uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize sequences such as ".." that can resolve to a location that is outside of that directory.
Problem types: description: CA Unified Infrastructure Management Directory Traversal Vulnerability
Affected products: vendor: n/a
product: CA Unified Infrastructure Management 8.47 and earlier
Published: 2017-02-13T21:00:00.000Z
CVE-2016-5804 
Moxa MGate MB3180 before 1.8, MGate MB3280 before 2.7, MGate MB3480 before 2.6, MGate MB3170 before 2.5, and MGate MB3270 before 2.7 use weak encryption, which allows remote attackers to bypass authentication via a brute-force series of guesses for a parameter value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-15T16:00:00.000Z
CVE-2016-5805 
An issue was discovered in Delta Electronics WPLSoft, Versions prior to V2.42.11, ISPSoft, Versions prior to 3.02.11, and PMSoft, Versions prior to2.10.10. There are multiple instances of heap-based buffer overflows that may allow malicious files to cause the execution of arbitrary code or a denial of service.
Problem types: description: Delta Electronics WPLSoft, ISPSoft, and PMSoft heap-based buffer overflows
Affected products: vendor: n/a
product: Delta Electronics WPLSoft, ISPSoft, and PMSoft
Published: 2017-02-13T21:00:00.000Z
CVE-2016-5807 
Tollgrade LightHouse SMS before 5.1 patch 3 allows remote authenticated users to bypass an intended administrative-authentication requirement, and read or change parameter values, via a direct request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-15T16:00:00.000Z
CVE-2016-5809 
An issue was discovered on Schneider Electric IONXXXX series power meters ION73XX series, ION75XX series, ION76XX series, ION8650 series, ION8800 series, and PM5XXX series. There is no CSRF Token generated to authenticate the user during a session. Successful exploitation of this vulnerability can allow unauthorized configuration changes to be made and saved.
Problem types: description: Schneider Electric IONXXXX Series csrf
Affected products: vendor: n/a
product: Schneider Electric IONXXXX Series
Published: 2017-02-13T21:00:00.000Z
CVE-2016-5810 
upAdminPg.asp in Advantech WebAccess before 8.1_20160519 allows remote authenticated administrators to obtain sensitive password information via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-05-02T14:00:00.000Z
CVE-2016-5811 
An issue was discovered in Visonic PowerLink2, all versions prior to October 2016 firmware release. User controlled input is not neutralized prior to being placed in web page output (CROSS-SITE SCRIPTING).
Problem types: description: Visonic PowerLink2 XSS
Affected products: vendor: n/a
product: Visonic PowerLink2
Published: 2017-02-13T21:00:00.000Z
CVE-2016-5812 
Moxa OnCell G3100V2 devices before 2.8 and G3111, G3151, G3211, and G3251 devices before 1.7 use cleartext password storage, which makes it easier for local users to obtain sensitive information by reading a configuration file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-08-24T01:00:00.000Z
CVE-2016-5813 
An issue was discovered in Visonic PowerLink2, all versions prior to October 2016 firmware release. When a specific URL to an image is accessed, the downloaded image carries with it source code used in the web server (INFORMATION EXPOSURE).
Problem types: description: Visonic PowerLink2 INFORMATION EXPOSURE
Affected products: vendor: n/a
product: Visonic PowerLink2
Published: 2017-02-13T21:00:00.000Z
CVE-2016-5814 
Buffer overflow in Rockwell Automation RSLogix Micro Starter Lite, RSLogix Micro Developer, RSLogix 500 Starter Edition, RSLogix 500 Standard Edition, and RSLogix 500 Professional Edition allows remote attackers to execute arbitrary code via a crafted RSS project file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-19T01:00:00.000Z
CVE-2016-5815 
An issue was discovered on Schneider Electric IONXXXX series power meters ION73XX series, ION75XX series, ION76XX series, ION8650 series, ION8800 series, and PM5XXX series. No authentication is configured by default. An unauthorized user can access the device management portal and make configuration changes.
Problem types: description: Schneider Electric IONXXXX Series Power Meter Vulnerabilities
Affected products: vendor: n/a
product: Schneider Electric IONXXXX Series Power Meter Vulnerabilities
Published: 2017-02-13T21:00:00.000Z
CVE-2016-5816 
A Use of Hard-Coded Cryptographic Key issue was discovered in MRD-305-DIN versions older than 1.7.5.0, and MRD-315, MRD-355, MRD-455 versions older than 1.7.5.0. The device utilizes hard-coded private cryptographic keys that may allow an attacker to decrypt traffic from any other source.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-25T16:00:00.000Z
CVE-2016-5817 
SQL injection vulnerability in news pages in Cargotec Navis WebAccess before 2016-08-10 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-08-22T10:00:00.000Z
CVE-2016-5818 
An issue was discovered in Schneider Electric PowerLogic PM8ECC device 2.651 and older. Undocumented hard-coded credentials allow access to the device.
Problem types: description: Schneider Electric PowerLogic PM8ECC Hard-coded Password Vulnerability
Affected products: vendor: n/a
product: Schneider Electric PowerLogic 2.651 and older
Published: 2017-02-13T21:00:00.000Z
CVE-2016-5819 
Moxa G3100V2 Series, editions prior to Version 2.8, and OnCell G3111/G3151/G3211/G3251 Series, editions prior to Version 1.7 allows a reflected cross-site scripting attack which may allow an attacker to execute arbitrary script code in the user’s browser within the trust relationship between their browser and the server.
Problem types: cwe_id: CWE-79
description: Cross-site scripting CWE-79
Affected products: vendor: Moxa
product: OnCell G3100V2 Series
vendor: Moxa
product: OnCell G3111/G3151/G3211/G3251 Series
Published: 2019-03-21T13:23:04.000Z
CVE-2016-5821 
Huawei HiSuite before 4.0.4.204_ove (Out of China) and before 4.0.4.301 (China) use a weak ACL (FILE_WRITE_DATA for BUILTIN\Users) for the HiSuite service directory, which allows local users to gain SYSTEM privileges via a Trojan horse (1) SspiCli.dll or (2) USERENV.dll file or possibly other unspecified DLL files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-13T15:00:00.000Z
CVE-2016-5822 
Huawei Oceanstor 5800 before V300R002C10SPC100 allows remote attackers to cause a denial of service (CPU consumption) via a large number of crafted HTTP packets.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-27T20:00:00.000Z
CVE-2016-5823 
The icalproperty_new_clone function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service (use-after-free) via a crafted ics file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-27T22:01:00.000Z