rainbutterfly/cve_corpus huggingface dataset:
CVE-2017-2773 
An issue was discovered in Pivotal PCF Elastic Runtime 1.6.x versions prior to 1.6.60, 1.7.x versions prior to 1.7.41, 1.8.x versions prior to 1.8.23, and 1.9.x versions prior to 1.9.1. Incomplete validation logic in JSON Web Token (JWT) libraries can allow unprivileged attackers to impersonate other users in multiple components included in PCF Elastic Runtime, aka an "Unauthenticated JWT signing algorithm in multiple components" issue.
Problem types: description: Unauthenticated JWT signing algorithm in multiple components
Affected products: vendor: n/a
product: PCF Elastic Runtime
Published: 2017-06-13T06:00:00.000Z
CVE-2017-2775 
An exploitable memory corruption vulnerability exists in the LvVariantUnflatten functionality in 64-bit versions of LabVIEW before 2015 SP1 f7 Patch and 2016 before f2 Patch. A specially crafted VI file can cause a user controlled value to be used as a loop terminator resulting in internal heap corruption. An attacker controlled VI file can be used to trigger this vulnerability, exploitation could lead to remote code execution.
Problem types: description: remote code execution
Affected products: vendor: National Instruments
product: LabVIEW 2016 Evaluation
Published: 2017-03-31T18:00:00.000Z
CVE-2017-2777 
An exploitable heap overflow vulnerability exists in the ipStringCreate function of Iceni Argus Version 6.6.05. A specially crafted pdf file can cause an integer overflow resulting in heap overflow. An attacker can send file to trigger this vulnerability.
Problem types: description: integer overflow
Affected products: vendor: Iceni
product: Argus
Published: 2018-09-17T17:00:00.000Z
CVE-2017-2779 
An exploitable memory corruption vulnerability exists in the RSRC segment parsing functionality of LabVIEW 2017, LabVIEW 2016, LabVIEW 2015, and LabVIEW 2014. A specially crafted Virtual Instrument (VI) file can cause an attacker controlled looping condition resulting in an arbitrary null write. An attacker controlled VI file can be used to trigger this vulnerability and can potentially result in code execution.
Problem types: description: remote code execution
Affected products: vendor: National Instruments
product: LabVIEW 2016
Published: 2017-09-05T18:00:00.000Z
CVE-2017-2780 
An exploitable heap buffer overflow vulnerability exists in the X509 certificate parsing functionality of InsideSecure MatrixSSL 3.8.7b. A specially crafted x509 certificate can cause a buffer overflow on the heap resulting in remote code execution. To trigger this vulnerability, a specially crafted x509 certificate must be presented to the vulnerable client or server application when initiating secure connection.
Problem types: description: remote code execution
Affected products: vendor: Inside Secure
product: MatrixSSL
Published: 2017-06-22T21:00:00.000Z
CVE-2017-2781 
An exploitable heap buffer overflow vulnerability exists in the X509 certificate parsing functionality of InsideSecure MatrixSSL 3.8.7b. A specially crafted x509 certificate can cause a buffer overflow on the heap resulting in remote code execution. To trigger this vulnerability, a specially crafted x509 certificate must be presented to the vulnerable client or server application when initiating secure connection.
Problem types: description: remote code execution
Affected products: vendor: Inside Secure
product: MatrixSSL
Published: 2017-06-22T21:00:00.000Z
CVE-2017-2782 
An integer overflow vulnerability exists in the X509 certificate parsing functionality of InsideSecure MatrixSSL 3.8.7b. A specially crafted x509 certificate can cause a length counter to overflow, leading to a controlled out of bounds copy operation. To trigger this vulnerability, a specially crafted x509 certificate must be presented to the vulnerable client or server application when initiating secure connection
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-22T21:00:00.000Z
CVE-2017-2783 
An exploitable heap corruption vulnerability exists in the FillRowFormat functionality of Antenna House DMC HTMLFilter that is shipped with MarkLogic 8.0-6. A specially crafted xls file can cause a heap corruption resulting in arbitrary code execution. An attacker can send/provide malicious xls file to trigger this vulnerability.
Problem types: description: remote code execution
Affected products: vendor: Antenna House
product: DMC HTMLFilter
Published: 2017-05-23T16:00:00.000Z
CVE-2017-2784 
An exploitable free of a stack pointer vulnerability exists in the x509 certificate parsing code of ARM mbed TLS before 1.3.19, 2.x before 2.1.7, and 2.4.x before 2.4.2. A specially crafted x509 certificate, when parsed by mbed TLS library, can cause an invalid free of a stack pointer leading to a potential remote code execution. In order to exploit this vulnerability, an attacker can act as either a client or a server on a network to deliver malicious x509 certificates to vulnerable applications.
Problem types: description: Stack pointer vulnerability
Affected products: vendor: ARM
product: mbed TLS
Published: 2017-04-20T18:00:00.000Z
CVE-2017-2785 
An exploitable buffer overflow exists in the psnotifyd application of the Pharos PopUp printer client version 9.0. A specially crafted packet can be sent to the victim's computer and can lead to a heap based buffer overflow resulting in remote code execution. This client is always listening, has root privileges, and requires no user interaction to exploit.
Problem types: description: remote code execution
Affected products: vendor: Pharos
product: PopUp Printer Client
Published: 2017-03-10T10:29:00.000Z
CVE-2017-2786 
A denial of service vulnerability exists in the psnotifyd application of the Pharos PopUp printer client version 9.0. A specially crafted packet can be sent to the victim's computer and can lead to an out of bounds read causing a crash and a denial of service.
Problem types: description: denial of service
Affected products: vendor: Pharos
product: PopUp Printer Client
Published: 2017-03-10T10:29:00.000Z
CVE-2017-2787 
A buffer overflows exists in the psnotifyd application of the Pharos PopUp printer client version 9.0. A specially crafted packet can be sent to the victim's computer and can lead to a heap based buffer overflow resulting in potential remote code execution. This client is always listening, has root privileges, and requires no user interaction to exploit.
Problem types: description: remote code execution
Affected products: vendor: Pharos
product: PopUp Printer Client
Published: 2017-03-10T10:29:00.000Z
CVE-2017-2788 
A buffer overflows exists in the psnotifyd application of the Pharos PopUp printer client version 9.0. A specially crafted packet can be sent to the victim's computer and can lead to a heap based buffer overflow resulting in potential remote code execution. This client is always listening, has root privileges, and requires no user interaction to exploit.
Problem types: description: remote code execution
Affected products: vendor: Pharos
product: PopUp Printer Client
Published: 2017-03-10T10:29:00.000Z
CVE-2017-2789 
When copying filedata into a buffer, JustSystems Ichitaro Office 2016 Trial will calculate two values to determine how much data to copy from the document. If both of these values are larger than the size of the buffer, the application will choose the smaller of the two and trust it to copy data from the file. This value is larger than the buffer size, which leads to a heap-based buffer overflow. This overflow corrupts an offset in the heap used in pointer arithmetic for writing data and can lead to code execution under the context of the application.
Problem types: description: remote code execution
Affected products: vendor: JustSystems
product: Ichitaro
Published: 2017-02-24T22:00:00.000Z
CVE-2017-2790 
When processing a record type of 0x3c from a Workbook stream from an Excel file (.xls), JustSystems Ichitaro Office trusts that the size is greater than zero, subtracts one from the length, and uses this result as the size for a memcpy. This results in a heap-based buffer overflow and can lead to code execution under the context of the application.
Problem types: description: remote code execution
Affected products: vendor: JustSystems
product: Ichitaro
Published: 2017-02-24T22:00:00.000Z
CVE-2017-2791 
JustSystems Ichitaro 2016 Trial contains a vulnerability that exists when trying to open a specially crafted PowerPoint file. Due to the application incorrectly handling the error case for a function's result, the application will use this result in a pointer calculation for reading file data into. Due to this, the application will read data from the file into an invalid address thus corrupting memory. Under the right conditions, this can lead to code execution under the context of the application.
Problem types: description: remote code execution
Affected products: vendor: JustSystems
product: Ichitaro
Published: 2017-02-24T22:00:00.000Z
CVE-2017-2792 
An exploitable heap corruption vulnerability exists in the iBldDirInfo functionality of Antenna House DMC HTMLFilter used by MarkLogic 8.0-6. A specially crafted xls file can cause a heap corruption resulting in arbitrary code execution. An attacker can provide a malicious xls file to trigger this vulnerability.
Problem types: description: remote code execution
Affected products: vendor: Antenna House
product: DMC HTMLFilter
Published: 2018-09-07T16:00:00.000Z
CVE-2017-2793 
An exploitable heap corruption vulnerability exists in the UnCompressUnicode functionality of Antenna House DMC HTMLFilter used by MarkLogic 8.0-6. A specially crafted xls file can cause a heap corruption resulting in arbitrary code execution. An attacker can send/provide malicious XLS file to trigger this vulnerability.
Problem types: description: remote code execution
Affected products: vendor: Antenna House
product: DMC HTMLFilter
Published: 2017-05-23T16:00:00.000Z
CVE-2017-2794 
An exploitable stack-based buffer overflow vulnerability exists in the DHFSummary functionality of AntennaHouse DMC HTMLFilter as used by MarkLogic 8.0-6. A specially crafted PPT file can cause a stack corruption resulting in arbitrary code execution. An attacker can send/provide malicious PPT file to trigger this vulnerability.
Problem types: description: remote code execution
Affected products: vendor: Antenna House
product: DMC HTMLFilter
Published: 2017-05-23T16:00:00.000Z
CVE-2017-2795 
An exploitable heap corruption vulnerability exists in the Txo functionality of Antenna House DMC HTMLFilter as used by MarkLogic 8.0-6. A specially crafted xls file can cause a heap corruption resulting in arbitrary code execution. An attacker can send/provide malicious XLS file to trigger this vulnerability.
Problem types: description: remote code execution
Affected products: vendor: Antenna House
product: DMC HTMLFilter
Published: 2018-09-07T16:00:00.000Z
CVE-2017-2797 
An exploitable heap overflow vulnerability exists in the ParseEnvironment functionality of AntennaHouse DMC HTMLFilter as used by MarkLogic 8.0-6.
Problem types: description: heap overflow
Affected products: vendor: Antenna House
product: DMC HTMLFilter
Published: 2017-05-23T16:00:00.000Z
CVE-2017-2798 
An exploitable heap corruption vulnerability exists in the GetIndexArray functionality of Antenna House DMC HTMLFilter as used by MarkLogic 8.0-6. A specially crafted XLS file can cause a heap corruption resulting in arbitrary code execution. An attacker can send or provide a malicious XLS file to trigger this vulnerability.
Problem types: description: heap overflow
Affected products: vendor: Antenna House
product: DMC HTMLFilter
Published: 2017-05-24T14:00:00.000Z
CVE-2017-2799 
An exploitable heap corruption vulnerability exists in the AddSst functionality of Antenna House DMC HTMLFilter as used by MarkLogic 8.0-6. A specially crafted XLS file can cause a heap corruption resulting in arbitrary code execution. An attacker can send or provide a malicious XLS file to trigger this vulnerability.
Problem types: description: heap overflow
Affected products: vendor: Antenna House
product: DMC HTMLFilter
Published: 2017-05-24T14:00:00.000Z
CVE-2017-2800 
A specially crafted x509 certificate can cause a single out of bounds byte overwrite in wolfSSL through 3.10.2 resulting in potential certificate validation vulnerabilities, denial of service and possible remote code execution. In order to trigger this vulnerability, the attacker needs to supply a malicious x509 certificate to either a server or a client application using this library.
Problem types: description: validation vulnerabilities
Affected products: vendor: wolfSSL
product: wolfSSL
Published: 2017-05-24T14:00:00.000Z
CVE-2017-2801 
A programming error exists in a way Randombit Botan cryptographic library version 2.0.1 implements x500 string comparisons which could lead to certificate verification issues and abuse. A specially crafted X509 certificate would need to be delivered to the client or server application in order to trigger this vulnerability.
Problem types: description: Certificate validation bypass
Affected products: vendor: Randombit
product: Botan
Published: 2017-05-24T14:00:00.000Z
CVE-2017-2802 
An exploitable dll hijacking vulnerability exists in the poaService.exe service component of the Dell Precision Optimizer software version 3.5.5.0. A specifically named malicious dll file located in one of directories pointed to by the PATH environment variable will lead to privilege escalation. An attacker with local access to vulnerable system can exploit this vulnerability.
Problem types: description: dll hijiacking
Affected products: vendor: dell
product: Dell
Published: 2018-04-24T19:00:00.000Z
CVE-2017-2803 
A remote out of bound write vulnerability exists in the TIFF parsing functionality of Core PHOTO-PAINT X8 version 18.1.0.661. A specially crafted TIFF file can cause a vulnerability resulting in potential memory corruption. An attacker can send the victim a specific TIFF file to trigger this vulnerability. This vulnerability only exists in the 64-bit version.
Problem types: description: Out of bounds Write
Affected products: vendor: Corel
product: PHOTO-PAINT
Published: 2018-04-24T19:00:00.000Z
CVE-2017-2804 
A remote out of bound write vulnerability exists in the TIFF parsing functionality of Core PHOTO-PAINT X8 18.1.0.661. A specially crafted TIFF file can cause a vulnerability resulting in potential memory corruption. An attacker can send the victim a specific TIFF file to trigger this vulnerability.
Problem types: description: Out of bounds Write
Affected products: vendor: Corel
product: PHOTO-PAINT
Published: 2018-04-24T19:00:00.000Z
CVE-2017-2805 
An exploitable stack-based buffer overflow vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera. A specially crafted http request can cause a stack-based buffer overflow resulting in overwriting arbitrary data on the stack frame. An attacker can simply send an http request to the device to trigger this vulnerability.
Problem types: description: remote code execution
Affected products: vendor: Foscam
product: Indoor IP Camera C1 Series
Published: 2017-06-21T13:00:00.000Z
CVE-2017-2806 
An exploitable arbitrary read exists in the XLS parsing of the Lexmark Perspective Document Filters conversion functionality. A crafted XLS document can lead to a arbitrary read resulting in memory disclosure. The vulnerability was confirmed on versions 11.3.0.2228 and 11.3.0.2400
Problem types: description: Out of bounds read
Affected products: vendor: Lexmark
product: Perceptive Document Filters
Published: 2017-04-20T18:00:00.000Z
CVE-2017-2807 
An exploitable buffer overflow vulnerability exists in the tag parsing functionality of Ledger-CLI 3.1.1. A specially crafted journal file can cause an integer underflow resulting in code execution. An attacker can construct a malicious journal file to trigger this vulnerability.
Problem types: description: remote code execution
Affected products: vendor: Ledger
product: Ledger CLI
Published: 2017-09-05T18:00:00.000Z
CVE-2017-2808 
An exploitable use-after-free vulnerability exists in the account parsing component of the Ledger-CLI 3.1.1. A specially crafted ledger file can cause a use-after-free vulnerability resulting in arbitrary code execution. An attacker can convince a user to load a journal file to trigger this vulnerability.
Problem types: description: arbitrary code execution
Affected products: vendor: Ledger
product: Ledger CLI
Published: 2017-09-05T18:00:00.000Z
CVE-2017-2809 
An exploitable vulnerability exists in the yaml loading functionality of ansible-vault before 1.0.5. A specially crafted vault can execute arbitrary python commands resulting in command execution. An attacker can insert python into the vault to trigger this vulnerability.
Problem types: description: code execution
Affected products: vendor: Tomohiro Nakamura
product: ansible-vault
Published: 2017-09-14T19:00:00.000Z
CVE-2017-2810 
An exploitable vulnerability exists in the Databook loading functionality of Tablib 0.11.4. A yaml loaded Databook can execute arbitrary python commands resulting in command execution. An attacker can insert python into loaded yaml to trigger this vulnerability.
Problem types: description: remote code execution
Affected products: vendor: Kenneth Reitz
product: Tablib
Published: 2017-06-14T13:00:00.000Z
CVE-2017-2811 
A code execution vulnerability exists in the Kakadu SDK 7.9's parsing of compressed JPEG 2000 images. A specially crafted JPEG 2000 file can be read by the program, and can lead to an out of bounds write causing an exploitable condition to arise.
Problem types: description: remote code execution
Affected products: vendor: Kakadu Software
product: Kakadu SDK
Published: 2018-04-24T19:00:00.000Z
CVE-2017-2812 
A code execution vulnerability exists in the kdu_buffered_expand function of the Kakadu SDK 7.9. A specially crafted JPEG 2000 file can be read by the program and can lead to an out of bounds write causing an exploitable condition to arise.
Problem types: description: remote code execution
Affected products: vendor: Kakadu Software
product: Kakadu SDK
Published: 2018-04-24T19:00:00.000Z
CVE-2017-2813 
An exploitable integer overflow vulnerability exists in the JPEG 2000 parser functionality of IrfanView 4.44. A specially crafted jpeg2000 image can cause an integer overflow leading to wrong memory allocation resulting in arbitrary code execution. Vulnerability can be triggered by viewing the image in via the application or by using thumbnailing feature of IrfanView.
Problem types: description: arbitrary code execution
Affected products: vendor: Irfanview
product: Irfanview
Published: 2017-06-21T19:00:00.000Z
CVE-2017-2814 
An exploitable heap overflow vulnerability exists in the image rendering functionality of Poppler 0.53.0. A specifically crafted pdf can cause an image resizing after allocation has already occurred, resulting in heap corruption which can lead to code execution. An attacker controlled PDF file can be used to trigger this vulnerability.
Problem types: description: heap overflow
Affected products: vendor: Poppler
product: Poppler
Published: 2017-07-12T17:00:00.000Z
CVE-2017-2815 
An exploitable XML entity injection vulnerability exists in OpenFire User Import Export Plugin 2.6.0. A specially crafted web request can cause the retrieval of arbitrary files or denial of service. An authenticated attacker can send a crafted web request to trigger this vulnerability.
Problem types: description: XML External Entity Injection
Affected products: vendor: Talos
product: Open Fire User Import Export Plugin
Published: 2018-05-15T17:00:00.000Z
CVE-2017-2816 
An exploitable buffer overflow vulnerability exists in the tag parsing functionality of LibOFX 0.9.11. A specially crafted OFX file can cause a write out of bounds resulting in a buffer overflow on the stack. An attacker can construct a malicious OFX file to trigger this vulnerability.
Problem types: description: buffer overflow
Affected products: vendor: LibOFX
product: LibOfx
Published: 2017-09-13T18:00:00.000Z
CVE-2017-2817 
A stack buffer overflow vulnerability exists in the ISO parsing functionality of Power Software Ltd PowerISO 6.8. A specially crafted ISO file can cause a vulnerability resulting in potential code execution. An attacker can send a specific ISO file to trigger this vulnerability.
Problem types: description: remote code execution
Affected products: vendor: Power Software
product: PowerISO
Published: 2017-05-24T14:00:00.000Z
CVE-2017-2818 
An exploitable heap overflow vulnerability exists in the image rendering functionality of Poppler 0.53.0. A specifically crafted PDF can cause an overly large number of color components during image rendering, resulting in heap corruption. An attacker controlled PDF file can be used to trigger this vulnerability.
Problem types: description: heap overflow
Affected products: vendor: Poppler
product: Poppler
Published: 2017-07-12T17:00:00.000Z
CVE-2017-2819 
An exploitable heap-based buffer overflow exists in the Hangul Word Processor component (version 9.6.1.4350) of Hancom Thinkfree Office NEO 9.6.1.4902. A specially crafted document stream can cause an integer underflow resulting in a buffer overflow which can lead to code execution under the context of the application. An attacker can entice a user to open up a document in order to trigger this vulnerability.
Problem types: description: heap-based buffer overflow
Affected products: vendor: Hancom
product: Hangul Word Processor in Thinkfree Office NEO Trial Word
Published: 2017-05-24T14:00:00.000Z
CVE-2017-2820 
An exploitable integer overflow vulnerability exists in the JPEG 2000 image parsing functionality of freedesktop.org Poppler 0.53.0. A specially crafted PDF file can lead to an integer overflow causing out of bounds memory overwrite on the heap resulting in potential arbitrary code execution. To trigger this vulnerability, a victim must open the malicious PDF in an application using this library.
Problem types: description: heap overflow
Affected products: vendor: Poppler
product: Poppler
Published: 2017-07-12T17:00:00.000Z
CVE-2017-2821 
An exploitable use-after-free exists in the PDF parsing functionality of Lexmark Perspective Document Filters 11.3.0.2400 and 11.4.0.2452. A crafted PDF document can lead to a use-after-free resulting in direct code execution.
Problem types: description: direct code execution
Affected products: vendor: Lexmark
product: Perceptive Document Filters
Published: 2017-09-05T18:00:00.000Z
CVE-2017-2822 
An exploitable code execution vulnerability exists in the image rendering functionality of Lexmark Perceptive Document Filters 11.3.0.2400. A specifically crafted PDF can cause a function call on a corrupted DCTStream to occur, resulting in user controlled data being written to the stack. A maliciously crafted PDF file can be used to trigger this vulnerability.
Problem types: description: remote code execution
Affected products: vendor: Lexmark
product: Perceptive Document Filters
Published: 2017-09-05T18:00:00.000Z
CVE-2017-2823 
A use-after-free vulnerability exists in the .ISO parsing functionality of PowerISO 6.8. A specially crafted .ISO file can cause a vulnerability resulting in potential code execution. An attacker can send a specific .ISO file to trigger this vulnerability.
Problem types: description: remote code execution
Affected products: vendor: Power Software
product: PowerIso
Published: 2017-05-24T14:00:00.000Z
CVE-2017-2824 
An exploitable code execution vulnerability exists in the trapper command functionality of Zabbix Server 2.4.X. A specially crafted set of packets can cause a command injection resulting in remote code execution. An attacker can make requests from an active Zabbix Proxy to trigger this vulnerability.
Problem types: description: remote code execution
Affected products: vendor: Zabbix
product: Zabbix Server
Published: 2017-05-24T14:00:00.000Z