rainbutterfly/cve_corpus huggingface dataset:
CVE-2017-14225 
The av_color_primaries_name function in libavutil/pixdesc.c in FFmpeg 3.3.3 may return a NULL pointer depending on a value contained in a file, but callers do not anticipate this, as demonstrated by the avcodec_string function in libavcodec/utils.c, leading to a NULL pointer dereference. (It is also conceivable that there is security relevance for a NULL pointer dereference in av_color_primaries_name calls within the ffprobe command-line program.)
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-09T08:00:00.000Z
CVE-2017-14226 
WP1StylesListener.cpp, WP5StylesListener.cpp, and WP42StylesListener.cpp in libwpd 0.10.1 mishandle iterators, which allows remote attackers to cause a denial of service (heap-based buffer over-read in the WPXTableList class in WPXTable.cpp). This vulnerability can be triggered in LibreOffice before 5.3.7. It may lead to suffering a remote attack against a LibreOffice application.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-09T08:00:00.000Z
CVE-2017-14227 
In MongoDB libbson 1.7.0, the bson_iter_codewscope function in bson-iter.c miscalculates a bson_utf8_validate length argument, which allows remote attackers to cause a denial of service (heap-based buffer over-read in the bson_utf8_validate function in bson-utf8.c), as demonstrated by bson-to-json.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-09T08:00:00.000Z
CVE-2017-14228 
In Netwide Assembler (NASM) 2.14rc0, there is an illegal address access in the function paste_tokens() in preproc.c, aka a NULL pointer dereference. It will lead to remote denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-09T08:00:00.000Z
CVE-2017-14229 
There is an infinite loop in the jpc_dec_tileinit function in jpc/jpc_dec.c of Jasper 2.0.13. It will lead to a remote denial of service attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-09T08:00:00.000Z
CVE-2017-14230 
In the mboxlist_do_find function in imap/mboxlist.c in Cyrus IMAP before 3.0.4, an off-by-one error in prefix calculation for the LIST command caused use of uninitialized memory, which might allow remote attackers to obtain sensitive information or cause a denial of service (daemon crash) via a 'LIST "" "Other Users"' command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-10T07:00:00.000Z
CVE-2017-14231 
GeniXCMS before 1.1.0 allows remote attackers to cause a denial of service (account blockage) by leveraging the mishandling of certain username substring relationships, such as the admin<script> username versus the admin username, related to register.php, User.class.php, and Type.class.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-10T07:00:00.000Z
CVE-2017-14232 
The read_chunk function in flif-dec.cpp in Free Lossless Image Format (FLIF) 0.3 allows remote attackers to cause a denial of service (invalid memory read and application crash) via a crafted flif file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-15T16:24:28.000Z
CVE-2017-14238 
SQL injection vulnerability in admin/menus/edit.php in Dolibarr ERP/CRM version 6.0.0 allows remote attackers to execute arbitrary SQL commands via the menuId parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-11T09:00:00.000Z
CVE-2017-14239 
Multiple cross-site scripting (XSS) vulnerabilities in Dolibarr ERP/CRM 6.0.0 allow remote authenticated users to inject arbitrary web script or HTML via the (1) CompanyName, (2) CompanyAddress, (3) CompanyZip, (4) CompanyTown, (5) Fax, (6) EMail, (7) Web, (8) ManagingDirectors, (9) Note, (10) Capital, (11) ProfId1, (12) ProfId2, (13) ProfId3, (14) ProfId4, (15) ProfId5, or (16) ProfId6 parameter to htdocs/admin/company.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-11T09:00:00.000Z
CVE-2017-14240 
There is a sensitive information disclosure vulnerability in document.php in Dolibarr ERP/CRM version 6.0.0 via the file parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-11T09:00:00.000Z
CVE-2017-14241 
Cross-site scripting (XSS) vulnerability in Dolibarr ERP/CRM 6.0.0 allows remote authenticated users to inject arbitrary web script or HTML via the Title parameter to htdocs/admin/menus/edit.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-11T09:00:00.000Z
CVE-2017-14242 
SQL injection vulnerability in don/list.php in Dolibarr version 6.0.0 allows remote attackers to execute arbitrary SQL commands via the statut parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-11T09:00:00.000Z
CVE-2017-14243 
An authentication bypass vulnerability on UTStar WA3002G4 ADSL Broadband Modem WA3002G4-0021.01 devices allows attackers to directly access administrative settings and obtain cleartext credentials from HTML source, as demonstrated by info.cgi, upload.cgi, backupsettings.cgi, pppoe.cgi, resetrouter.cgi, and password.cgi.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-17T19:00:00.000Z
CVE-2017-14244 
An authentication bypass vulnerability on iBall Baton ADSL2+ Home Router FW_iB-LR7011A_1.0.2 devices potentially allows attackers to directly access administrative router settings by crafting URLs with a .cgi extension, as demonstrated by /info.cgi and /password.cgi.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-17T19:00:00.000Z
CVE-2017-14245 
An out of bounds read in the function d2alaw_array() in alaw.c of libsndfile 1.0.28 may lead to a remote DoS attack or information disclosure, related to mishandling of the NAN and INFINITY floating-point values.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-21T13:00:00.000Z
CVE-2017-14246 
An out of bounds read in the function d2ulaw_array() in ulaw.c of libsndfile 1.0.28 may lead to a remote DoS attack or information disclosure, related to mishandling of the NAN and INFINITY floating-point values.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-21T13:00:00.000Z
CVE-2017-14247 
SQL Injection exists in the EyesOfNetwork web interface (aka eonweb) 5.1-0 via the user_id cookie to header.php, a related issue to CVE-2017-1000060.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-11T09:00:00.000Z
CVE-2017-14248 
A heap-based buffer over-read in SampleImage() in MagickCore/resize.c in ImageMagick 7.0.6-8 Q16 allows remote attackers to cause a denial of service via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-11T09:00:00.000Z
CVE-2017-14249 
ImageMagick 7.0.6-8 Q16 mishandles EOF checks in ReadMPCImage in coders/mpc.c, leading to division by zero in GetPixelCacheTileSize in MagickCore/cache.c, allowing remote attackers to cause a denial of service via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-11T09:00:00.000Z
CVE-2017-14251 
Unrestricted File Upload vulnerability in the fileDenyPattern in sysext/core/Classes/Core/SystemEnvironmentBuilder.php in TYPO3 7.6.0 to 7.6.21 and 8.0.0 to 8.7.4 allows remote authenticated users to upload files with a .pht extension and consequently execute arbitrary PHP code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-11T09:00:00.000Z
CVE-2017-14252 
SQL Injection exists in the EyesOfNetwork web interface (aka eonweb) 5.1-0 via the group_id cookie to side.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-11T09:00:00.000Z
CVE-2017-14257 
In the SDK in Bento4 1.5.0-616, AP4_AtomSampleTable::GetSample in Core/Ap4AtomSampleTable.cpp contains a Read Memory Access Violation vulnerability. It is possible to exploit this vulnerability by opening a crafted .MP4 file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-11T09:00:00.000Z
CVE-2017-14258 
In the SDK in Bento4 1.5.0-616, SetItemCount in Core/Ap4StscAtom.h file contains a Write Memory Access Violation vulnerability. It is possible to exploit this vulnerability and possibly execute arbitrary code by opening a crafted .MP4 file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-11T09:00:00.000Z
CVE-2017-14259 
In the SDK in Bento4 1.5.0-616, the AP4_StscAtom class in Ap4StscAtom.cpp contains a Write Memory Access Violation vulnerability. It is possible to exploit this vulnerability and possibly execute arbitrary code by opening a crafted .MP4 file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-11T09:00:00.000Z
CVE-2017-14260 
In the SDK in Bento4 1.5.0-616, the AP4_StssAtom class in Ap4StssAtom.cpp contains a Write Memory Access Violation vulnerability. It is possible to exploit this vulnerability and possibly execute arbitrary code by opening a crafted .MP4 file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-11T09:00:00.000Z
CVE-2017-14261 
In the SDK in Bento4 1.5.0-616, the AP4_StszAtom class in Ap4StszAtom.cpp file contains a Read Memory Access Violation vulnerability. It is possible to exploit this vulnerability by opening a crafted .MP4 file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-11T09:00:00.000Z
CVE-2017-14262 
On Samsung NVR devices, remote attackers can read the MD5 password hash of the 'admin' account via certain szUserName JSON data to cgi-bin/main-cgi, and login to the device with that hash in the szUserPasswd parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-11T09:00:00.000Z
CVE-2017-14263 
Honeywell NVR devices allow remote attackers to create a user account in the admin group by leveraging access to a guest account to obtain a session ID, and then sending that session ID in a userManager.addUser request to the /RPC2 URI. The attacker can login to the device with that new user account to fully control the device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-11T09:00:00.000Z
CVE-2017-14265 
A Stack-based Buffer Overflow was discovered in xtrans_interpolate in internal/dcraw_common.cpp in LibRaw before 0.18.3. It could allow a remote denial of service or code execution attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-11T09:00:00.000Z
CVE-2017-14266 
tcprewrite in Tcpreplay 3.4.4 has a Heap-Based Buffer Overflow vulnerability triggered by a crafted PCAP file, a related issue to CVE-2016-6160.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-12T08:00:00.000Z
CVE-2017-14267 
EE 4GEE WiFi MBB (before EE60_00_05.00_31) devices have CSRF, related to goform/AddNewProfile, goform/setWanDisconnect, goform/setSMSAutoRedirectSetting, goform/setReset, and goform/uploadBackupSettings.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-11T09:00:00.000Z
CVE-2017-14268 
EE 4GEE WiFi MBB (before EE60_00_05.00_31) devices have XSS in the sms_content parameter in a getSMSlist request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-11T09:00:00.000Z
CVE-2017-14269 
EE 4GEE WiFi MBB (before EE60_00_05.00_31) devices allow remote attackers to obtain sensitive information via a JSONP endpoint, as demonstrated by passwords and SMS content.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-11T09:00:00.000Z
CVE-2017-14270 
XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a "User Mode Write AV starting at ntdll_77400000!RtlFillMemoryUlong+0x0000000000000010."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-11T18:00:00.000Z
CVE-2017-14271 
XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a "User Mode Write AV starting at ntdll_77400000!RtlImpersonateSelfEx+0x000000000000024e."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-11T18:00:00.000Z
CVE-2017-14272 
XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a "User Mode Write AV starting at jbig2dec+0x000000000000595d."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-11T18:00:00.000Z
CVE-2017-14273 
XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a "User Mode Write AV starting at ntdll_77400000!RtlInterlockedPopEntrySList+0x00000000000003b0."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-11T18:00:00.000Z
CVE-2017-14274 
XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to "Data from Faulting Address controls subsequent Write Address starting at jbig2dec+0x0000000000008706."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-11T18:00:00.000Z
CVE-2017-14275 
XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a "User Mode Write AV near NULL starting at wow64!Wow64NotifyDebugger+0x000000000000001d."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-11T18:00:00.000Z
CVE-2017-14276 
XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to "Possible Stack Corruption starting at jbig2dec+0x0000000000002fbe."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-11T18:00:00.000Z
CVE-2017-14277 
XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to a "Read Access Violation starting at jbig2dec+0x0000000000005956."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-11T18:00:00.000Z
CVE-2017-14278 
XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to a "Read Access Violation starting at jbig2dec+0x0000000000005940."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-11T18:00:00.000Z
CVE-2017-14279 
XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to a "Read Access Violation starting at jbig2dec+0x0000000000005643."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-11T18:00:00.000Z
CVE-2017-14280 
XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to "Data from Faulting Address controls Branch Selection starting at jbig2dec+0x000000000000571d."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-11T18:00:00.000Z
CVE-2017-14281 
XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to "Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at jbig2dec+0x00000000000090f1."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-11T18:00:00.000Z
CVE-2017-14282 
XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to a "Read Access Violation starting at jbig2dec+0x0000000000005862."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-11T18:00:00.000Z
CVE-2017-14283 
XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to a "Read Access Violation starting at jbig2dec+0x0000000000008fe4."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-11T18:00:00.000Z
CVE-2017-14284 
XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77400000!RtlGetCurrentDirectory_U+0x000000000000016c."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-11T18:00:00.000Z
CVE-2017-14285 
XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77400000!RtlInterlockedPopEntrySList+0x000000000000039b."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-11T18:00:00.000Z
CVE-2017-14286 
STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a "User Mode Write AV starting at STDUJBIG2File!DllUnregisterServer+0x000000000000cb8c."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-11T18:00:00.000Z
CVE-2017-14287 
STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a "Read Access Violation on Control Flow starting at STDUJBIG2File+0x00000000000015eb."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-11T18:00:00.000Z
CVE-2017-14288 
STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a "User Mode Write AV starting at STDUJBIG2File!DllGetClassObject+0x0000000000002ff7."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-11T18:00:00.000Z
CVE-2017-14289 
STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a "User Mode Write AV starting at STDUJBIG2File!DllGetClassObject+0x000000000000303e."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-11T18:00:00.000Z
CVE-2017-14290 
STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to "Heap Corruption starting at wow64!Wow64NotifyDebugger+0x000000000000001d."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-11T18:00:00.000Z
CVE-2017-14291 
STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a "User Mode Write AV starting at STDUJBIG2File!DllUnregisterServer+0x00000000000076d8."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-11T18:00:00.000Z
CVE-2017-14292 
STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a "User Mode Write AV starting at STDUJBIG2File!DllUnregisterServer+0x000000000000570e."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-11T18:00:00.000Z
CVE-2017-14293 
STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to "Heap Corruption starting at wow64!Wow64LdrpInitialize+0x00000000000008e1."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-11T18:00:00.000Z
CVE-2017-14294 
STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a "User Mode Write AV starting at STDUJBIG2File!DllUnregisterServer+0x000000000000566e."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-11T18:00:00.000Z
CVE-2017-14295 
STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to "Data from Faulting Address controls Code Flow starting at STDUJBIG2File+0x00000000000015e9."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-11T18:00:00.000Z
CVE-2017-14296 
STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to "Data from Faulting Address controls subsequent Write Address starting at STDUJBIG2File!DllGetClassObject+0x00000000000043e6."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-11T18:00:00.000Z
CVE-2017-14297 
STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to "Data from Faulting Address controls Code Flow starting at STDUJBIG2File!DllGetClassObject+0x0000000000002f35."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-11T18:00:00.000Z
CVE-2017-14298 
STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to "Data from Faulting Address controls subsequent Write Address starting at STDUJBIG2File!DllGetClassObject+0x00000000000038e8."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-11T18:00:00.000Z
CVE-2017-14299 
STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to "Data from Faulting Address controls subsequent Write Address starting at STDUJBIG2File!DllGetClassObject+0x000000000000384b."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-11T18:00:00.000Z
CVE-2017-14300 
STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to "Data from Faulting Address controls subsequent Write Address starting at STDUJBIG2File!DllGetClassObject+0x0000000000004479."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-11T18:00:00.000Z
CVE-2017-14301 
STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to "Data from Faulting Address controls subsequent Write Address starting at STDUJBIG2File!DllUnregisterServer+0x00000000000076d3."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-11T18:00:00.000Z
CVE-2017-14302 
STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to "Data from Faulting Address controls Branch Selection starting at STDUJBIG2File!DllGetClassObject+0x00000000000064d7."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-11T18:00:00.000Z