CVE-2016-9842 | ByteOS Network

Vulnerability Details :

CVE-2016-9842

Assigner-microfocus

Assigner Org ID-f81092c5-7f14-476d-80dc-24857f90be84

Published At-23 May, 2017 | 03:56

Updated At-06 Aug, 2024 | 02:59

The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers.

EPSS History

Score

Latest Score

-

N/A

Percentile

Latest Percentile

-

N/A

▼Common Vulnerabilities and Exposures (CVE)

Assigner:microfocus

Assigner Org ID:f81092c5-7f14-476d-80dc-24857f90be84

Published At:23 May, 2017 | 03:56

Updated At:06 Aug, 2024 | 02:59

▼CVE Numbering Authority (CNA)

The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers.

Affected Products

Vendor

Product

Versions

Affected

n/a

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
https://access.redhat.com/errata/RHSA-2017:1221	vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2017:1220	vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2017:3047	vendor-advisory x_refsource_REDHAT
http://www.openwall.com/lists/oss-security/2016/12/05/21	mailing-list x_refsource_MLIST
http://www.securityfocus.com/bid/95131	vdb-entry x_refsource_BID
https://access.redhat.com/errata/RHSA-2017:3046	vendor-advisory x_refsource_REDHAT
http://lists.opensuse.org/opensuse-updates/2017-01/msg00050.html	vendor-advisory x_refsource_SUSE
https://security.gentoo.org/glsa/201701-56	vendor-advisory x_refsource_GENTOO
http://www.securitytracker.com/id/1039427	vdb-entry x_refsource_SECTRACK
https://access.redhat.com/errata/RHSA-2017:1222	vendor-advisory x_refsource_REDHAT
http://lists.opensuse.org/opensuse-updates/2017-01/msg00053.html	vendor-advisory x_refsource_SUSE
https://access.redhat.com/errata/RHSA-2017:3453	vendor-advisory x_refsource_REDHAT
http://lists.opensuse.org/opensuse-updates/2016-12/msg00127.html	vendor-advisory x_refsource_SUSE
https://access.redhat.com/errata/RHSA-2017:2999	vendor-advisory x_refsource_REDHAT
https://lists.debian.org/debian-lts-announce/2019/03/msg00027.html	mailing-list x_refsource_MLIST
https://usn.ubuntu.com/4246-1/	vendor-advisory x_refsource_UBUNTU
https://lists.debian.org/debian-lts-announce/2020/01/msg00030.html	mailing-list x_refsource_MLIST
https://usn.ubuntu.com/4292-1/	vendor-advisory x_refsource_UBUNTU
http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html	x_refsource_CONFIRM
https://www.oracle.com/security-alerts/cpujul2020.html	x_refsource_MISC
http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html	x_refsource_CONFIRM
https://support.apple.com/HT208144	x_refsource_CONFIRM
https://wiki.mozilla.org/MOSS/Secure_Open_Source/Completed#zlib	x_refsource_MISC
https://support.apple.com/HT208113	x_refsource_CONFIRM
https://support.apple.com/HT208112	x_refsource_CONFIRM
https://support.apple.com/HT208115	x_refsource_CONFIRM
https://wiki.mozilla.org/images/0/09/Zlib-report.pdf	x_refsource_MISC
https://bugzilla.redhat.com/show_bug.cgi?id=1402348	x_refsource_CONFIRM
https://github.com/madler/zlib/commit/e54e1299404101a5a9d0cf5e45512b543967f958	x_refsource_CONFIRM
https://security.gentoo.org/glsa/202007-54	vendor-advisory x_refsource_GENTOO

Hyperlink: https://access.redhat.com/errata/RHSA-2017:1221

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: https://access.redhat.com/errata/RHSA-2017:1220

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: https://access.redhat.com/errata/RHSA-2017:3047

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: http://www.openwall.com/lists/oss-security/2016/12/05/21

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: http://www.securityfocus.com/bid/95131

Resource:

vdb-entry

x_refsource_BID

Hyperlink: https://access.redhat.com/errata/RHSA-2017:3046

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: http://lists.opensuse.org/opensuse-updates/2017-01/msg00050.html

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: https://security.gentoo.org/glsa/201701-56

Resource:

vendor-advisory

x_refsource_GENTOO

Hyperlink: http://www.securitytracker.com/id/1039427

Resource:

vdb-entry

x_refsource_SECTRACK

Hyperlink: https://access.redhat.com/errata/RHSA-2017:1222

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: http://lists.opensuse.org/opensuse-updates/2017-01/msg00053.html

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: https://access.redhat.com/errata/RHSA-2017:3453

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: http://lists.opensuse.org/opensuse-updates/2016-12/msg00127.html

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: https://access.redhat.com/errata/RHSA-2017:2999

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: https://lists.debian.org/debian-lts-announce/2019/03/msg00027.html

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: https://usn.ubuntu.com/4246-1/

Resource:

vendor-advisory

x_refsource_UBUNTU

Hyperlink: https://lists.debian.org/debian-lts-announce/2020/01/msg00030.html

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: https://usn.ubuntu.com/4292-1/

Resource:

vendor-advisory

x_refsource_UBUNTU

Hyperlink: http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html

Resource:

x_refsource_CONFIRM

Hyperlink: https://www.oracle.com/security-alerts/cpujul2020.html

Resource:

x_refsource_MISC

Hyperlink: http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html

Resource:

x_refsource_CONFIRM

Hyperlink: https://support.apple.com/HT208144

Resource:

x_refsource_CONFIRM

Hyperlink: https://wiki.mozilla.org/MOSS/Secure_Open_Source/Completed#zlib

Resource:

x_refsource_MISC

Hyperlink: https://support.apple.com/HT208113

Resource:

x_refsource_CONFIRM

Hyperlink: https://support.apple.com/HT208112

Resource:

x_refsource_CONFIRM

Hyperlink: https://support.apple.com/HT208115

Resource:

x_refsource_CONFIRM

Hyperlink: https://wiki.mozilla.org/images/0/09/Zlib-report.pdf

Resource:

x_refsource_MISC

Hyperlink: https://bugzilla.redhat.com/show_bug.cgi?id=1402348

Resource:

x_refsource_CONFIRM

Hyperlink: https://github.com/madler/zlib/commit/e54e1299404101a5a9d0cf5e45512b543967f958

Resource:

x_refsource_CONFIRM

Hyperlink: https://security.gentoo.org/glsa/202007-54

Resource:

vendor-advisory

x_refsource_GENTOO

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://access.redhat.com/errata/RHSA-2017:1221	vendor-advisory x_refsource_REDHAT x_transferred
https://access.redhat.com/errata/RHSA-2017:1220	vendor-advisory x_refsource_REDHAT x_transferred
https://access.redhat.com/errata/RHSA-2017:3047	vendor-advisory x_refsource_REDHAT x_transferred
http://www.openwall.com/lists/oss-security/2016/12/05/21	mailing-list x_refsource_MLIST x_transferred
http://www.securityfocus.com/bid/95131	vdb-entry x_refsource_BID x_transferred
https://access.redhat.com/errata/RHSA-2017:3046	vendor-advisory x_refsource_REDHAT x_transferred
http://lists.opensuse.org/opensuse-updates/2017-01/msg00050.html	vendor-advisory x_refsource_SUSE x_transferred
https://security.gentoo.org/glsa/201701-56	vendor-advisory x_refsource_GENTOO x_transferred
http://www.securitytracker.com/id/1039427	vdb-entry x_refsource_SECTRACK x_transferred
https://access.redhat.com/errata/RHSA-2017:1222	vendor-advisory x_refsource_REDHAT x_transferred
http://lists.opensuse.org/opensuse-updates/2017-01/msg00053.html	vendor-advisory x_refsource_SUSE x_transferred
https://access.redhat.com/errata/RHSA-2017:3453	vendor-advisory x_refsource_REDHAT x_transferred
http://lists.opensuse.org/opensuse-updates/2016-12/msg00127.html	vendor-advisory x_refsource_SUSE x_transferred
https://access.redhat.com/errata/RHSA-2017:2999	vendor-advisory x_refsource_REDHAT x_transferred
https://lists.debian.org/debian-lts-announce/2019/03/msg00027.html	mailing-list x_refsource_MLIST x_transferred
https://usn.ubuntu.com/4246-1/	vendor-advisory x_refsource_UBUNTU x_transferred
https://lists.debian.org/debian-lts-announce/2020/01/msg00030.html	mailing-list x_refsource_MLIST x_transferred
https://usn.ubuntu.com/4292-1/	vendor-advisory x_refsource_UBUNTU x_transferred
http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html	x_refsource_CONFIRM x_transferred
https://www.oracle.com/security-alerts/cpujul2020.html	x_refsource_MISC x_transferred
http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html	x_refsource_CONFIRM x_transferred
https://support.apple.com/HT208144	x_refsource_CONFIRM x_transferred
https://wiki.mozilla.org/MOSS/Secure_Open_Source/Completed#zlib	x_refsource_MISC x_transferred
https://support.apple.com/HT208113	x_refsource_CONFIRM x_transferred
https://support.apple.com/HT208112	x_refsource_CONFIRM x_transferred
https://support.apple.com/HT208115	x_refsource_CONFIRM x_transferred
https://wiki.mozilla.org/images/0/09/Zlib-report.pdf	x_refsource_MISC x_transferred
https://bugzilla.redhat.com/show_bug.cgi?id=1402348	x_refsource_CONFIRM x_transferred
https://github.com/madler/zlib/commit/e54e1299404101a5a9d0cf5e45512b543967f958	x_refsource_CONFIRM x_transferred
https://security.gentoo.org/glsa/202007-54	vendor-advisory x_refsource_GENTOO x_transferred

Hyperlink: https://access.redhat.com/errata/RHSA-2017:1221

Resource:

vendor-advisory

x_refsource_REDHAT

x_transferred

Hyperlink: https://access.redhat.com/errata/RHSA-2017:1220

Resource:

vendor-advisory

x_refsource_REDHAT

x_transferred

Hyperlink: https://access.redhat.com/errata/RHSA-2017:3047

Resource:

vendor-advisory

x_refsource_REDHAT

x_transferred

Hyperlink: http://www.openwall.com/lists/oss-security/2016/12/05/21

Resource:

mailing-list

x_refsource_MLIST

x_transferred

Hyperlink: http://www.securityfocus.com/bid/95131

Resource:

vdb-entry

x_refsource_BID

x_transferred

Hyperlink: https://access.redhat.com/errata/RHSA-2017:3046

Resource:

vendor-advisory

x_refsource_REDHAT

x_transferred

Hyperlink: http://lists.opensuse.org/opensuse-updates/2017-01/msg00050.html

Resource:

vendor-advisory

x_refsource_SUSE

x_transferred

Hyperlink: https://security.gentoo.org/glsa/201701-56

Resource:

vendor-advisory

x_refsource_GENTOO

x_transferred

Hyperlink: http://www.securitytracker.com/id/1039427

Resource:

vdb-entry

x_refsource_SECTRACK

x_transferred

Hyperlink: https://access.redhat.com/errata/RHSA-2017:1222

Resource:

vendor-advisory

x_refsource_REDHAT

x_transferred

Hyperlink: http://lists.opensuse.org/opensuse-updates/2017-01/msg00053.html

Resource:

vendor-advisory

x_refsource_SUSE

x_transferred

Hyperlink: https://access.redhat.com/errata/RHSA-2017:3453

Resource:

vendor-advisory

x_refsource_REDHAT

x_transferred

Hyperlink: http://lists.opensuse.org/opensuse-updates/2016-12/msg00127.html

Resource:

vendor-advisory

x_refsource_SUSE

x_transferred

Hyperlink: https://access.redhat.com/errata/RHSA-2017:2999

Resource:

vendor-advisory

x_refsource_REDHAT

x_transferred

Hyperlink: https://lists.debian.org/debian-lts-announce/2019/03/msg00027.html

Resource:

mailing-list

x_refsource_MLIST

x_transferred

Hyperlink: https://usn.ubuntu.com/4246-1/

Resource:

vendor-advisory

x_refsource_UBUNTU

x_transferred

Hyperlink: https://lists.debian.org/debian-lts-announce/2020/01/msg00030.html

Resource:

mailing-list

x_refsource_MLIST

x_transferred

Hyperlink: https://usn.ubuntu.com/4292-1/

Resource:

vendor-advisory

x_refsource_UBUNTU

x_transferred

Hyperlink: http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: https://www.oracle.com/security-alerts/cpujul2020.html

Resource:

x_refsource_MISC

x_transferred

Hyperlink: http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: https://support.apple.com/HT208144

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: https://wiki.mozilla.org/MOSS/Secure_Open_Source/Completed#zlib

Resource:

x_refsource_MISC

x_transferred

Hyperlink: https://support.apple.com/HT208113

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: https://support.apple.com/HT208112

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: https://support.apple.com/HT208115

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: https://wiki.mozilla.org/images/0/09/Zlib-report.pdf

Resource:

x_refsource_MISC

x_transferred

Hyperlink: https://bugzilla.redhat.com/show_bug.cgi?id=1402348

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: https://github.com/madler/zlib/commit/e54e1299404101a5a9d0cf5e45512b543967f958

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: https://security.gentoo.org/glsa/202007-54

Resource:

vendor-advisory

x_refsource_GENTOO

x_transferred

▼National Vulnerability Database (NVD)

Source:security@opentext.com

Published At:23 May, 2017 | 04:29

Updated At:20 Apr, 2025 | 01:37

The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	8.8	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Primary	2.0	6.8	MEDIUM	AV:N/AC:M/Au:N/C:P/I:P/A:P

Type: Primary

Version: 3.1

Base score: 8.8

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Type: Primary

Version: 2.0

Base score: 6.8

Base severity: MEDIUM

Vector:

AV:N/AC:M/Au:N/C:P/I:P/A:P

CPE Matches

zlib>>zlib>>Versions from 1.2.3.4(inclusive) to 1.2.9(exclusive)

cpe:2.3:a:zlib:zlib:*:*:*:*:*:*:*:*

>>leap>>42.1

cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*

>>leap>>42.2

cpe:2.3:o:opensuse:leap:42.2:*:*:*:*:*:*:*

>>opensuse>>13.2

cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*

Debian GNU/Linux

>>debian_linux>>8.0

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

>>ubuntu_linux>>16.04

cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*

>>ubuntu_linux>>18.04

cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:esm:*:*:*

Oracle Corporation

>>database_server>>18c

cpe:2.3:a:oracle:database_server:18c:*:*:*:*:*:*:*

Oracle Corporation

>>jdk>>1.6.0

cpe:2.3:a:oracle:jdk:1.6.0:update161:*:*:*:*:*:*

Oracle Corporation

>>jdk>>1.7.0

cpe:2.3:a:oracle:jdk:1.7.0:update151:*:*:*:*:*:*

Oracle Corporation

>>jdk>>1.8.0

cpe:2.3:a:oracle:jdk:1.8.0:update144:*:*:*:*:*:*

Oracle Corporation

>>jre>>1.6.0

cpe:2.3:a:oracle:jre:1.6.0:update161:*:*:*:*:*:*

Oracle Corporation

>>jre>>1.7.0

cpe:2.3:a:oracle:jre:1.7.0:update151:*:*:*:*:*:*

Oracle Corporation

>>jre>>1.8.0

cpe:2.3:a:oracle:jre:1.8.0:update144:*:*:*:*:*:*

Oracle Corporation

>>mysql>>Versions from 5.5.0(inclusive) to 5.5.61(inclusive)

cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*

Oracle Corporation

>>mysql>>Versions from 5.6.0(inclusive) to 5.6.41(inclusive)

cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*

Oracle Corporation

>>mysql>>Versions from 5.7.0(inclusive) to 5.7.23(inclusive)

cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*

Oracle Corporation

>>mysql>>Versions from 8.0.0(inclusive) to 8.0.12(inclusive)

cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*

>>satellite>>5.8

cpe:2.3:a:redhat:satellite:5.8:*:*:*:*:*:*:*

>>enterprise_linux_desktop>>6.0

cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*

>>enterprise_linux_desktop>>7.0

cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*

>>enterprise_linux_eus>>7.4

cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*

>>enterprise_linux_eus>>7.5

cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*

>>enterprise_linux_server>>6.0

cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*

>>enterprise_linux_server>>7.0

cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*

>>enterprise_linux_workstation>>6.0

cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*

>>enterprise_linux_workstation>>7.0

cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*

>>iphone_os>>Versions before 11(exclusive)

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

>>mac_os_x>>Versions from 10.0.0(inclusive) to 10.13.0(exclusive)

cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*

>>tvos>>Versions before 11.0(exclusive)

cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*

>>watchos>>Versions before 4(exclusive)

cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*

Node.js (OpenJS Foundation)

>>node.js>>Versions from 4.0.0(inclusive) to 4.1.2(inclusive)

cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*

Node.js (OpenJS Foundation)

>>node.js>>Versions from 4.2.0(inclusive) to 4.8.2(exclusive)

cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*

Node.js (OpenJS Foundation)

>>node.js>>Versions from 6.0.0(inclusive) to 6.8.1(inclusive)

cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*

Node.js (OpenJS Foundation)

>>node.js>>Versions from 6.9.0(inclusive) to 6.10.2(exclusive)

cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*

Node.js (OpenJS Foundation)

>>node.js>>Versions from 7.0.0(inclusive) to 7.6.0(exclusive)

cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*

Weaknesses

CWE ID	Type	Source
NVD-CWE-noinfo	Primary	nvd@nist.gov

CWE ID: NVD-CWE-noinfo

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://lists.opensuse.org/opensuse-updates/2016-12/msg00127.html	security@opentext.com	Broken Link
http://lists.opensuse.org/opensuse-updates/2017-01/msg00050.html	security@opentext.com	Broken Link
http://lists.opensuse.org/opensuse-updates/2017-01/msg00053.html	security@opentext.com	Broken Link
http://www.openwall.com/lists/oss-security/2016/12/05/21	security@opentext.com	Mailing List Patch
http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html	security@opentext.com	Third Party Advisory
http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html	security@opentext.com	Third Party Advisory
http://www.securityfocus.com/bid/95131	security@opentext.com	Broken Link Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1039427	security@opentext.com	Broken Link Third Party Advisory VDB Entry
https://access.redhat.com/errata/RHSA-2017:1220	security@opentext.com	Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:1221	security@opentext.com	Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:1222	security@opentext.com	Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:2999	security@opentext.com	Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:3046	security@opentext.com	Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:3047	security@opentext.com	Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:3453	security@opentext.com	Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1402348	security@opentext.com	Issue Tracking Patch
https://github.com/madler/zlib/commit/e54e1299404101a5a9d0cf5e45512b543967f958	security@opentext.com	Patch
https://lists.debian.org/debian-lts-announce/2019/03/msg00027.html	security@opentext.com	Mailing List Third Party Advisory
https://lists.debian.org/debian-lts-announce/2020/01/msg00030.html	security@opentext.com	Mailing List Third Party Advisory
https://security.gentoo.org/glsa/201701-56	security@opentext.com	Third Party Advisory
https://security.gentoo.org/glsa/202007-54	security@opentext.com	Third Party Advisory
https://support.apple.com/HT208112	security@opentext.com	Third Party Advisory
https://support.apple.com/HT208113	security@opentext.com	Third Party Advisory
https://support.apple.com/HT208115	security@opentext.com	Third Party Advisory
https://support.apple.com/HT208144	security@opentext.com	Third Party Advisory
https://usn.ubuntu.com/4246-1/	security@opentext.com	Third Party Advisory
https://usn.ubuntu.com/4292-1/	security@opentext.com	Third Party Advisory
https://wiki.mozilla.org/MOSS/Secure_Open_Source/Completed#zlib	security@opentext.com	Third Party Advisory
https://wiki.mozilla.org/images/0/09/Zlib-report.pdf	security@opentext.com	Third Party Advisory
https://www.oracle.com/security-alerts/cpujul2020.html	security@opentext.com	Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2016-12/msg00127.html	af854a3a-2127-422b-91ae-364da2661108	Broken Link
http://lists.opensuse.org/opensuse-updates/2017-01/msg00050.html	af854a3a-2127-422b-91ae-364da2661108	Broken Link
http://lists.opensuse.org/opensuse-updates/2017-01/msg00053.html	af854a3a-2127-422b-91ae-364da2661108	Broken Link
http://www.openwall.com/lists/oss-security/2016/12/05/21	af854a3a-2127-422b-91ae-364da2661108	Mailing List Patch
http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://www.securityfocus.com/bid/95131	af854a3a-2127-422b-91ae-364da2661108	Broken Link Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1039427	af854a3a-2127-422b-91ae-364da2661108	Broken Link Third Party Advisory VDB Entry
https://access.redhat.com/errata/RHSA-2017:1220	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:1221	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:1222	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:2999	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:3046	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:3047	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:3453	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1402348	af854a3a-2127-422b-91ae-364da2661108	Issue Tracking Patch
https://github.com/madler/zlib/commit/e54e1299404101a5a9d0cf5e45512b543967f958	af854a3a-2127-422b-91ae-364da2661108	Patch
https://lists.debian.org/debian-lts-announce/2019/03/msg00027.html	af854a3a-2127-422b-91ae-364da2661108	Mailing List Third Party Advisory
https://lists.debian.org/debian-lts-announce/2020/01/msg00030.html	af854a3a-2127-422b-91ae-364da2661108	Mailing List Third Party Advisory
https://security.gentoo.org/glsa/201701-56	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
https://security.gentoo.org/glsa/202007-54	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
https://support.apple.com/HT208112	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
https://support.apple.com/HT208113	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
https://support.apple.com/HT208115	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
https://support.apple.com/HT208144	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
https://usn.ubuntu.com/4246-1/	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
https://usn.ubuntu.com/4292-1/	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
https://wiki.mozilla.org/MOSS/Secure_Open_Source/Completed#zlib	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
https://wiki.mozilla.org/images/0/09/Zlib-report.pdf	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
https://www.oracle.com/security-alerts/cpujul2020.html	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory

Hyperlink: http://lists.opensuse.org/opensuse-updates/2016-12/msg00127.html

Source: security@opentext.com

Resource:

Broken Link

Hyperlink: http://lists.opensuse.org/opensuse-updates/2017-01/msg00050.html

Source: security@opentext.com

Resource:

Broken Link

Hyperlink: http://lists.opensuse.org/opensuse-updates/2017-01/msg00053.html

Source: security@opentext.com

Resource:

Broken Link

Hyperlink: http://www.openwall.com/lists/oss-security/2016/12/05/21

Source: security@opentext.com

Resource:

Mailing List

Patch

Hyperlink: http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html

Source: security@opentext.com

Resource:

Third Party Advisory

Hyperlink: http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html

Source: security@opentext.com

Resource:

Third Party Advisory

Hyperlink: http://www.securityfocus.com/bid/95131

Source: security@opentext.com

Resource:

Broken Link

Third Party Advisory

VDB Entry

Hyperlink: http://www.securitytracker.com/id/1039427

Source: security@opentext.com

Resource:

Broken Link

Third Party Advisory

VDB Entry

Hyperlink: https://access.redhat.com/errata/RHSA-2017:1220

Source: security@opentext.com

Resource:

Third Party Advisory

Hyperlink: https://access.redhat.com/errata/RHSA-2017:1221

Source: security@opentext.com

Resource:

Third Party Advisory

Hyperlink: https://access.redhat.com/errata/RHSA-2017:1222

Source: security@opentext.com

Resource:

Third Party Advisory

Hyperlink: https://access.redhat.com/errata/RHSA-2017:2999

Source: security@opentext.com

Resource:

Third Party Advisory

Hyperlink: https://access.redhat.com/errata/RHSA-2017:3046

Source: security@opentext.com

Resource:

Third Party Advisory

Hyperlink: https://access.redhat.com/errata/RHSA-2017:3047

Source: security@opentext.com

Resource:

Third Party Advisory

Hyperlink: https://access.redhat.com/errata/RHSA-2017:3453

Source: security@opentext.com

Resource:

Third Party Advisory

Hyperlink: https://bugzilla.redhat.com/show_bug.cgi?id=1402348

Source: security@opentext.com

Resource:

Issue Tracking

Patch

Hyperlink: https://github.com/madler/zlib/commit/e54e1299404101a5a9d0cf5e45512b543967f958

Source: security@opentext.com

Resource:

Patch

Hyperlink: https://lists.debian.org/debian-lts-announce/2019/03/msg00027.html

Source: security@opentext.com

Resource:

Mailing List

Third Party Advisory

Hyperlink: https://lists.debian.org/debian-lts-announce/2020/01/msg00030.html

Source: security@opentext.com

Resource:

Mailing List

Third Party Advisory

Hyperlink: https://security.gentoo.org/glsa/201701-56

Source: security@opentext.com

Resource:

Third Party Advisory

Hyperlink: https://security.gentoo.org/glsa/202007-54

Source: security@opentext.com

Resource:

Third Party Advisory

Hyperlink: https://support.apple.com/HT208112

Source: security@opentext.com

Resource:

Third Party Advisory

Hyperlink: https://support.apple.com/HT208113

Source: security@opentext.com

Resource:

Third Party Advisory

Hyperlink: https://support.apple.com/HT208115

Source: security@opentext.com

Resource:

Third Party Advisory

Hyperlink: https://support.apple.com/HT208144

Source: security@opentext.com

Resource:

Third Party Advisory

Hyperlink: https://usn.ubuntu.com/4246-1/

Source: security@opentext.com

Resource:

Third Party Advisory

Hyperlink: https://usn.ubuntu.com/4292-1/

Source: security@opentext.com

Resource:

Third Party Advisory

Hyperlink: https://wiki.mozilla.org/MOSS/Secure_Open_Source/Completed#zlib

Source: security@opentext.com

Resource:

Third Party Advisory

Hyperlink: https://wiki.mozilla.org/images/0/09/Zlib-report.pdf

Source: security@opentext.com

Resource:

Third Party Advisory

Hyperlink: https://www.oracle.com/security-alerts/cpujul2020.html

Source: security@opentext.com

Resource:

Third Party Advisory

Hyperlink: http://lists.opensuse.org/opensuse-updates/2016-12/msg00127.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Broken Link

Hyperlink: http://lists.opensuse.org/opensuse-updates/2017-01/msg00050.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Broken Link

Hyperlink: http://lists.opensuse.org/opensuse-updates/2017-01/msg00053.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Broken Link

Hyperlink: http://www.openwall.com/lists/oss-security/2016/12/05/21

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Mailing List

Patch

Hyperlink: http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

Hyperlink: http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

Hyperlink: http://www.securityfocus.com/bid/95131

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Broken Link

Third Party Advisory

VDB Entry

Hyperlink: http://www.securitytracker.com/id/1039427

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Broken Link

Third Party Advisory

VDB Entry

Hyperlink: https://access.redhat.com/errata/RHSA-2017:1220

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

Hyperlink: https://access.redhat.com/errata/RHSA-2017:1221

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

Hyperlink: https://access.redhat.com/errata/RHSA-2017:1222

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

Hyperlink: https://access.redhat.com/errata/RHSA-2017:2999

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

Hyperlink: https://access.redhat.com/errata/RHSA-2017:3046

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

Hyperlink: https://access.redhat.com/errata/RHSA-2017:3047

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

Hyperlink: https://access.redhat.com/errata/RHSA-2017:3453

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

Hyperlink: https://bugzilla.redhat.com/show_bug.cgi?id=1402348

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Issue Tracking

Patch

Hyperlink: https://github.com/madler/zlib/commit/e54e1299404101a5a9d0cf5e45512b543967f958

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Patch

Hyperlink: https://lists.debian.org/debian-lts-announce/2019/03/msg00027.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Mailing List

Third Party Advisory

Hyperlink: https://lists.debian.org/debian-lts-announce/2020/01/msg00030.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Mailing List

Third Party Advisory

Hyperlink: https://security.gentoo.org/glsa/201701-56

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

Hyperlink: https://security.gentoo.org/glsa/202007-54

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

Hyperlink: https://support.apple.com/HT208112

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

Hyperlink: https://support.apple.com/HT208113

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

Hyperlink: https://support.apple.com/HT208115

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

Hyperlink: https://support.apple.com/HT208144

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

Hyperlink: https://usn.ubuntu.com/4246-1/

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

Hyperlink: https://usn.ubuntu.com/4292-1/

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

Hyperlink: https://wiki.mozilla.org/MOSS/Secure_Open_Source/Completed#zlib

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

Hyperlink: https://wiki.mozilla.org/images/0/09/Zlib-report.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

Hyperlink: https://www.oracle.com/security-alerts/cpujul2020.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

Similar CVEs

4224Records found

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-6.8||MEDIUM

EPSS-1.92% / 82.59%

||

7 Day CHG~0.00%

Published-31 Mar, 2015 | 14:00

Updated-12 Apr, 2025 | 10:46

FreeXL before 1.0.0i allows remote attackers to cause a denial of service (stack corruption) or possibly execute arbitrary code via a crafted sector in a workbook.

Vendor-gaia-gis n/a Debian GNU/Linux

Product-debian_linux freexl n/a

CWE ID-CWE-20

Improper Input Validation

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-6.8||MEDIUM

EPSS-0.64% / 69.64%

||

7 Day CHG~0.00%

Published-20 Apr, 2011 | 10:00

Updated-11 Apr, 2025 | 00:51

Unspecified vulnerability in Oracle JD Edwards EnterpriseOne Tools 8.9 GA through 8.98.4.1 and OneWorld Tools through 24.1.3 allows remote attackers to affect confidentiality, integrity, and availability, related to Enterprise Infrastructure SEC.

Vendor-n/a Oracle Corporation

Product-jd_edwards_enterpriseone_ep peoplesoft_and_jdedwards_product_suite jd_edwards_enterpriseone enterpriseone_tools peoplesoft_and_jdedwards_suite_scm oneworld_tools n/a

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-6.8||MEDIUM

EPSS-0.48% / 64.33%

||

7 Day CHG~0.00%

Published-20 Jul, 2011 | 22:36

Updated-11 Apr, 2025 | 00:51

Unspecified vulnerability in the Content Management component in Oracle Database Server 10.1.0.5, 10.2.0.3, 10.2.0.4, and 11.1.0.7; and Oracle Enterprise Manager Grid Control 10.1.0.6, 10.2.0.5, and 11.1.0.1; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Scheduler.

Vendor-n/a Oracle Corporation

Product-database_server enterprise_manager_grid_control n/a

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-6.8||MEDIUM

EPSS-3.74% / 87.54%

||

7 Day CHG~0.00%

Published-10 Mar, 2011 | 20:00

Updated-11 Apr, 2025 | 00:51

Use-after-free vulnerability in WebKit, as used in Apple Safari before 5.0.5; iOS before 4.3.2 for iPhone, iPod, and iPad; iOS before 4.2.7 for iPhone 4 (CDMA); and possibly other products allows remote attackers to execute arbitrary code by adding children to a WBR tag and then removing the tag, related to text nodes, as demonstrated by Chaouki Bekrar during a Pwn2Own competition at CanSecWest 2011.

Vendor-n/a Apple Inc.

Product-ipad iphone_os ipod_touch iphone safari n/a

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-6.8||MEDIUM

EPSS-2.15% / 83.55%

||

7 Day CHG~0.00%

Published-25 Mar, 2011 | 19:00

Updated-11 Apr, 2025 | 00:51

The default configuration of the shell_escape_commands directive in conf/texmf.d/95NonPath.cnf in the tex-common package before 2.08.1 in Debian GNU/Linux squeeze, Ubuntu 10.10 and 10.04 LTS, and possibly other operating systems lists certain programs, which might allow remote attackers to execute arbitrary code via a crafted TeX document.

Vendor-n/a Debian GNU/Linux Canonical Ltd.

Product-ubuntu_linux tex-common debian_linux n/a

Matching Score-8

Assigner-Red Hat, Inc.

Matching Score-8

Assigner-Red Hat, Inc.

CVSS Score-6.8||MEDIUM

EPSS-1.20% / 78.02%

||

7 Day CHG~0.00%

Published-27 Jul, 2011 | 01:00

Updated-11 Apr, 2025 | 00:51

jboss-seam.jar in the JBoss Seam 2 framework 2.2.x and earlier, as distributed in Red Hat JBoss Enterprise SOA Platform 4.3.0.CP04 and 5.1.0 and JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3.0.CP09 and 5.1.0, does not properly restrict use of Expression Language (EL) statements in FacesMessages during page exception handling, which allows remote attackers to execute arbitrary Java code via a crafted URL to an application.

Vendor-n/a Red Hat, Inc.

Product-jboss_enterprise_soa_platform jboss_enterprise_application_platform jboss_seam_2_framework n/a

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-6.8||MEDIUM

EPSS-2.48% / 84.67%

||

7 Day CHG~0.00%

Published-03 May, 2011 | 22:00

Updated-11 Apr, 2025 | 00:51

Use-after-free vulnerability in Google Chrome before 11.0.696.57 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the ruby element and Cascading Style Sheets (CSS) token sequences.

Vendor-n/a Apple Inc.Debian GNU/Linux Google LLC

Product-debian_linux itunes safari chrome n/a

CWE ID-CWE-416

Use After Free

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-6.8||MEDIUM

EPSS-2.34% / 84.23%

||

7 Day CHG~0.00%

Published-03 May, 2011 | 22:00

Updated-11 Apr, 2025 | 00:51

Use-after-free vulnerability in the WebSockets implementation in Google Chrome before 11.0.696.57 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.

Vendor-n/a Google LLC Apple Inc.

Product-iphone_os itunes safari chrome n/a

CWE ID-CWE-416

Use After Free

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-6.8||MEDIUM

EPSS-1.00% / 76.12%

||

7 Day CHG~0.00%

Published-20 Jul, 2011 | 22:36

Updated-11 Apr, 2025 | 00:51

Unspecified vulnerability in the Database Control component in Oracle Enterprise Manager Grid Control 10.1.0.6 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

Vendor-n/a Oracle Corporation

Product-enterprise_manager_grid_control n/a

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-6.8||MEDIUM

EPSS-0.48% / 64.33%

||

7 Day CHG~0.00%

Published-20 Jul, 2011 | 22:36

Updated-11 Apr, 2025 | 00:51

Unspecified vulnerability in the Security Management component in Oracle Database Server 10.1.0.5, 10.2.0.3, and 10.2.0.4; and Oracle Enterprise Manager Grid Control 10.1.0.6; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Audit Administration.

Vendor-n/a Oracle Corporation

Product-database_server enterprise_manager_grid_control n/a

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-6.8||MEDIUM

EPSS-0.69% / 70.88%

||

7 Day CHG~0.00%

Published-03 May, 2011 | 22:00

Updated-11 Apr, 2025 | 00:51

Race condition in the sandbox launcher implementation in Google Chrome before 11.0.696.57 on Linux allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.

Vendor-n/a Linux Kernel Organization, Inc Debian GNU/Linux Google LLC

Product-linux_kernel debian_linux chrome n/a

CWE ID-CWE-362

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-8.1||HIGH

EPSS-3.78% / 87.60%

||

7 Day CHG~0.00%

Published-25 Aug, 2020 | 17:04

Updated-04 Aug, 2024 | 15:19

FasterXML jackson-databind 2.x before 2.9.10.6 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPDataSource (aka Anteros-DBCP).

Vendor-n/a Debian GNU/Linux Oracle Corporation FasterXML, LLC.NetApp, Inc.

CWE ID-CWE-502

Deserialization of Untrusted Data

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.8||CRITICAL

EPSS-1.00% / 76.01%

||

7 Day CHG~0.00%

Published-09 Sep, 2020 | 18:10

Updated-04 Aug, 2024 | 15:12

WebDAV implementation in Yaws web server versions 1.81 to 2.0.7 is vulnerable to XXE injection.

Vendor-yaws n/a Canonical Ltd.Debian GNU/Linux

Product-yaws debian_linux ubuntu_linux n/a

CWE ID-CWE-611

Improper Restriction of XML External Entity Reference

Matching Score-8

Assigner-Red Hat, Inc.

Matching Score-8

Assigner-Red Hat, Inc.

CVSS Score-7.8||HIGH

EPSS-0.32% / 54.44%

||

7 Day CHG~0.00%

Published-14 Nov, 2019 | 01:51

Updated-06 Aug, 2024 | 22:28

Thunar before 1.3.1 could crash when copy and pasting a file name with % format characters due to a format string error.

Vendor-xfce thunar Debian GNU/Linux openSUSE

Product-debian_linux opensuse thunar thunar

CWE ID-CWE-134

Use of Externally-Controlled Format String

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-8.8||HIGH

EPSS-5.05% / 89.36%

||

7 Day CHG~0.00%

Published-14 Sep, 2017 | 16:00

Updated-20 Apr, 2025 | 01:37

GNU Emacs before 25.3 allows remote attackers to execute arbitrary code via email with crafted "Content-Type: text/enriched" data containing an x-display XML element that specifies execution of shell commands, related to an unsafe text/enriched extension in lisp/textmodes/enriched.el, and unsafe Gnus support for enriched and richtext inline MIME objects in lisp/gnus/mm-view.el. In particular, an Emacs user can be instantly compromised by reading a crafted email message (or Usenet news article).

Vendor-n/a Debian GNU/Linux GNU

Product-debian_linux emacs n/a

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-6.8||MEDIUM

EPSS-1.52% / 80.51%

||

7 Day CHG~0.00%

Published-28 Mar, 2005 | 05:00

Updated-03 Apr, 2025 | 01:03

Multiple cross-site scripting (XSS) vulnerabilities in Oracle Configurator before 11.5.7.17.32 and 11.5.6.16.53 allows remote attackers to inject arbitrary web script or HTML via (1) Text Features in the DHTML UI or (2) the test parameter to the oracle.apps.cz.servlet.UiServlet servlet.

Vendor-n/a Oracle Corporation

Product-configurator n/a

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-6.8||MEDIUM

EPSS-0.48% / 64.33%

||

7 Day CHG~0.00%

Published-20 Jul, 2011 | 22:36

Updated-11 Apr, 2025 | 00:51

Unspecified vulnerability in the Security Framework component in Oracle Database Server 10.1.0.5, 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.1, and 11.2.0.2; and Oracle Enterprise Manager Grid Control 10.1.0.6 and 10.2.0.5; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to User Model.

Vendor-n/a Oracle Corporation

Product-database_server enterprise_manager_grid_control n/a

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-6.8||MEDIUM

EPSS-0.32% / 53.97%

||

7 Day CHG~0.00%

Published-03 May, 2011 | 22:00

Updated-11 Apr, 2025 | 00:51

Race condition in Google Chrome before 11.0.696.57 on Linux and Mac OS X allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to linked lists and a database.

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Google LLC

Product-linux_kernel macos chrome n/a

CWE ID-CWE-362

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-6.8||MEDIUM

EPSS-2.12% / 83.43%

||

7 Day CHG~0.00%

Published-20 Jul, 2011 | 22:36

Updated-11 Apr, 2025 | 00:51

Unspecified vulnerability in the Schema Management component in Oracle Database Server 10.1.0.5, 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.1, and 11.2.0.2; and Oracle Enterprise Manager Grid Control 10.1.0.6 and 10.2.0.5; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

Vendor-n/a Oracle Corporation

Product-database_server enterprise_manager_grid_control n/a

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-6.8||MEDIUM

EPSS-11.35% / 93.28%

||

7 Day CHG~0.00%

Published-24 Jun, 2011 | 20:00

Updated-11 Apr, 2025 | 00:51

Heap-based buffer overflow in Apple Type Services (ATS) in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code via a crafted embedded TrueType font.

Vendor-n/a Apple Inc.

Product-mac_os_x mac_os_x_server n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-6.8||MEDIUM

EPSS-1.48% / 80.18%

||

7 Day CHG~0.00%

Published-23 Mar, 2011 | 01:00

Updated-11 Apr, 2025 | 00:51

Multiple buffer overflows in Apple Type Services (ATS) in Apple Mac OS X before 10.6.7 allow remote attackers to execute arbitrary code via a document that contains a crafted SFNT table in an embedded font.

Vendor-n/a Apple Inc.

Product-mac_os_x mac_os_x_server n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-6.8||MEDIUM

EPSS-1.58% / 80.83%

||

7 Day CHG~0.00%

Published-23 Mar, 2011 | 01:00

Updated-11 Apr, 2025 | 00:51

Multiple buffer overflows in Apple Type Services (ATS) in Apple Mac OS X before 10.6.7 allow remote attackers to execute arbitrary code via a document that contains a crafted embedded Type 1 font.

Vendor-n/a Apple Inc.

Product-mac_os_x mac_os_x_server n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-7.8||HIGH

EPSS-0.32% / 54.63%

||

7 Day CHG~0.00%

Published-30 Aug, 2018 | 01:00

Updated-05 Aug, 2024 | 10:17

A buffer underwrite vulnerability in get_line() (read.c) in fig2dev 3.2.7a allows an attacker to write prior to the beginning of the buffer via a crafted .fig file.

Vendor-fig2dev_project n/a Canonical Ltd.

Product-ubuntu_linux fig2dev n/a

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-6.8||MEDIUM

EPSS-1.10% / 77.10%

||

7 Day CHG~0.00%

Published-23 Mar, 2011 | 01:00

Updated-11 Apr, 2025 | 00:51

Integer overflow in ImageIO in Apple Mac OS X 10.6 before 10.6.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted TIFF image with JPEG encoding.

Vendor-n/a Apple Inc.

Product-imageio mac_os_x mac_os_x_server n/a

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-8.8||HIGH

EPSS-0.34% / 55.64%

||

7 Day CHG~0.00%

Published-04 Oct, 2017 | 07:00

Updated-20 Apr, 2025 | 01:37

ImageMagick 7.0.7-0 Q16 has a NULL pointer dereference vulnerability in ReadOneMNGImage in coders/png.c.

Vendor-n/a Canonical Ltd.ImageMagick Studio LLC

Product-ubuntu_linux imagemagick n/a

CWE ID-CWE-476

NULL Pointer Dereference

Matching Score-8

Assigner-Talos

Matching Score-8

Assigner-Talos

CVSS Score-7.8||HIGH

EPSS-1.59% / 80.92%

||

7 Day CHG+1.30%

Published-16 Feb, 2022 | 16:38

Updated-15 Apr, 2025 | 19:09

A stack-based buffer overflow vulnerability exists in the Gerber Viewer gerber and excellon ReadXYCoord coordinate parsing functionality of KiCad EDA 6.0.1 and master commit de006fc010. A specially-crafted gerber or excellon file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.

Vendor-kicad n/a Fedora Project Debian GNU/Linux

Product-eda debian_linux fedora KiCad

CWE ID-CWE-121

Stack-based Buffer Overflow

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-6.8||MEDIUM

EPSS-6.12% / 90.42%

||

7 Day CHG~0.00%

Published-24 Jun, 2011 | 20:00

Updated-11 Apr, 2025 | 00:51

Heap-based buffer overflow in ImageIO in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted JPEG2000 image.

Vendor-n/a Apple Inc.

Product-imageio mac_os_x mac_os_x_server n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Talos

Matching Score-8

Assigner-Talos

CVSS Score-7.8||HIGH

EPSS-1.18% / 77.88%

||

7 Day CHG+0.84%

Published-16 Feb, 2022 | 16:38

Updated-15 Apr, 2025 | 19:09

A stack-based buffer overflow vulnerability exists in the Gerber Viewer gerber and excellon ReadIJCoord coordinate parsing functionality of KiCad EDA 6.0.1 and master commit de006fc010. A specially-crafted gerber or excellon file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.

Vendor-kicad n/a Fedora Project Debian GNU/Linux

Product-eda debian_linux fedora KiCad

CWE ID-CWE-121

Stack-based Buffer Overflow

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-6.8||MEDIUM

EPSS-1.48% / 80.20%

||

7 Day CHG~0.00%

Published-24 Jun, 2011 | 20:00

Updated-11 Apr, 2025 | 00:51

Integer overflow in CoreGraphics in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted embedded Type 1 font in a PDF document.

Vendor-n/a Apple Inc.

Product-mac_os_x mac_os_x_server n/a

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-6.8||MEDIUM

EPSS-1.40% / 79.67%

||

7 Day CHG~0.00%

Published-24 Jun, 2011 | 20:00

Updated-11 Apr, 2025 | 00:51

Integer overflow in QuickTime in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file.

Vendor-n/a Apple Inc.

Product-quicktime mac_os_x mac_os_x_server n/a

CWE ID-CWE-190

Integer Overflow or Wraparound

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-6.8||MEDIUM

EPSS-1.40% / 79.67%

||

7 Day CHG~0.00%

Published-24 Jun, 2011 | 20:00

Updated-11 Apr, 2025 | 00:51

Integer overflow in QuickTime in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted RIFF WAV file.

Vendor-n/a Apple Inc.

Product-quicktime mac_os_x mac_os_x_server n/a

CWE ID-CWE-190

Integer Overflow or Wraparound

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-6.8||MEDIUM

EPSS-0.66% / 70.15%

||

7 Day CHG~0.00%

Published-23 Mar, 2011 | 01:00

Updated-11 Apr, 2025 | 00:51

Multiple format string vulnerabilities in AppleScript in Apple Mac OS X before 10.6.7 allow context-dependent attackers to execute arbitrary code or cause a denial of service (application crash) via format string specifiers in a (1) display dialog or (2) display alert command in a dialog in an AppleScript Studio application.

Vendor-n/a Apple Inc.

Product-mac_os_x_server mac_os_x applescript n/a

CWE ID-CWE-134

Use of Externally-Controlled Format String

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-6.8||MEDIUM

EPSS-1.41% / 79.68%

||

7 Day CHG~0.00%

Published-14 Oct, 2011 | 10:00

Updated-11 Apr, 2025 | 00:51

CoreMedia in Apple Mac OS X through 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted QuickTime movie file.

Vendor-n/a Apple Inc.

Product-mac_os_x mac_os_x_server n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-6.8||MEDIUM

EPSS-1.29% / 78.85%

||

7 Day CHG~0.00%

Published-11 Jan, 2011 | 01:00

Updated-11 Apr, 2025 | 00:51

dpkg-source in dpkg before 1.14.31 and 1.15.x allows user-assisted remote attackers to modify arbitrary files via a symlink attack on unspecified files in the .pc directory.

Vendor-n/a Debian GNU/Linux

Product-dpkg n/a

CWE ID-CWE-59

Improper Link Resolution Before File Access ('Link Following')

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-6.8||MEDIUM

EPSS-2.06% / 83.16%

||

7 Day CHG~0.00%

Published-24 Jun, 2011 | 20:00

Updated-11 Apr, 2025 | 00:51

QuickTime in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted sample tables in a movie file.

Vendor-n/a Apple Inc.

Product-quicktime mac_os_x mac_os_x_server n/a

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-6.8||MEDIUM

EPSS-2.87% / 85.74%

||

7 Day CHG~0.00%

Published-24 Jun, 2011 | 20:00

Updated-11 Apr, 2025 | 00:51

Integer overflow in ColorSync in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via an image containing a crafted embedded ColorSync profile that triggers a heap-based buffer overflow.

Vendor-n/a Apple Inc.

Product-mac_os_x mac_os_x_server n/a

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-6.8||MEDIUM

EPSS-0.82% / 73.42%

||

7 Day CHG~0.00%

Published-24 Jun, 2011 | 20:00

Updated-11 Apr, 2025 | 00:51

Buffer overflow in QuickTime in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted JPEG file.

Vendor-n/a Apple Inc.

Product-quicktime mac_os_x mac_os_x_server n/a

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-6.8||MEDIUM

EPSS-1.16% / 77.73%

||

7 Day CHG~0.00%

Published-23 Mar, 2011 | 01:00

Updated-11 Apr, 2025 | 00:51

Multiple buffer overflows in Image RAW in Apple Mac OS X before 10.6.7 allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted Canon RAW image.

Vendor-n/a Apple Inc.

Product-mac_os_x mac_os_x_server n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-6.8||MEDIUM

EPSS-1.82% / 82.15%

||

7 Day CHG~0.00%

Published-14 Oct, 2011 | 10:00

Updated-11 Apr, 2025 | 00:51

Apple Type Services (ATS) in Apple Mac OS X through 10.6.8 does not properly handle embedded Type 1 fonts, which allows remote attackers to execute arbitrary code via a crafted document that triggers an out-of-bounds memory access.

Vendor-n/a Apple Inc.

Product-mac_os_x mac_os_x_server n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Adobe Systems Incorporated

Matching Score-8

Assigner-Adobe Systems Incorporated

CVSS Score-6.8||MEDIUM

EPSS-4.12% / 88.16%

||

7 Day CHG~0.00%

Published-10 Feb, 2011 | 17:00

Updated-11 Apr, 2025 | 00:51

Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

Vendor-n/a Adobe Inc.Apple Inc.

Product-acrobat_reader acrobat mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-6.8||MEDIUM

EPSS-2.06% / 83.16%

||

7 Day CHG~0.00%

Published-24 Jun, 2011 | 20:00

Updated-11 Apr, 2025 | 00:51

QuickLook in Apple Mac OS X 10.6 before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted Microsoft Office document.

Vendor-n/a Apple Inc.

Product-mac_os_x mac_os_x_server n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-6.8||MEDIUM

EPSS-3.44% / 87.03%

||

7 Day CHG~0.00%

Published-23 Mar, 2011 | 01:00

Updated-11 Apr, 2025 | 00:51

The VpMemAlloc function in bigdecimal.c in the BigDecimal class in Ruby 1.9.2-p136 and earlier, as used on Apple Mac OS X before 10.6.7 and other platforms, does not properly allocate memory, which allows context-dependent attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving creation of a large BigDecimal value within a 64-bit process, related to an "integer truncation issue."

Vendor-n/a Apple Inc.Ruby

Product-ruby mac_os_x mac_os_x_server n/a

Matching Score-8

Assigner-Talos

Matching Score-8

Assigner-Talos

CVSS Score-7.8||HIGH

EPSS-0.77% / 72.53%

||

7 Day CHG+0.55%

Published-04 Feb, 2022 | 22:28

Updated-15 Apr, 2025 | 19:11

A stack-based buffer overflow vulnerability exists in the Gerber Viewer gerber and excellon GCodeNumber parsing functionality of KiCad EDA 6.0.1 and master commit de006fc010. A specially-crafted gerber or excellon file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.

Vendor-kicad n/a Fedora Project Debian GNU/Linux

Product-debian_linux fedora kicad_eda KiCad

CWE ID-CWE-121

Stack-based Buffer Overflow

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-6.8||MEDIUM

EPSS-12.36% / 93.62%

||

7 Day CHG~0.00%

Published-23 Mar, 2011 | 01:00

Updated-11 Apr, 2025 | 00:51

Integer overflow in ImageIO in Apple Mac OS X before 10.6.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted XBM image.

Vendor-n/a Apple Inc.

Product-imageio mac_os_x mac_os_x_server n/a

Matching Score-8

Assigner-Adobe Systems Incorporated

Matching Score-8

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-93.70% / 99.84%

||

7 Day CHG~0.00%

Published-13 Apr, 2011 | 14:00

Updated-30 Jul, 2025 | 01:47

Known KEV||Action Due Date - 2022-03-24||The impacted product is end-of-life and should be disconnected if still in use.

Adobe Flash Player before 10.2.154.27 on Windows, Mac OS X, Linux, and Solaris and 10.2.156.12 and earlier on Android; Adobe AIR before 2.6.19140; and Authplay.dll (aka AuthPlayLib.bundle) in Adobe Reader 9.x before 9.4.4 and 10.x through 10.0.1 on Windows, Adobe Reader 9.x before 9.4.4 and 10.x before 10.0.3 on Mac OS X, and Adobe Acrobat 9.x before 9.4.4 and 10.x before 10.0.3 on Windows and Mac OS X allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content; as demonstrated by a Microsoft Office document with an embedded .swf file that has a size inconsistency in a "group of included constants," object type confusion, ActionScript that adds custom functions to prototypes, and Date objects; and as exploited in the wild in April 2011.

Vendor-n/a Adobe Inc.Oracle Corporation Microsoft Corporation SUSE Apple Inc.Linux Kernel Organization, Inc Google LLC openSUSE

Product-linux_kernel chrome_os windows acrobat_reader opensuse solaris acrobat flash_player android adobe_air chrome linux_enterprise_desktop mac_os_x n/a reader flash_player acrobat air Flash Player

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

Matching Score-8

Assigner-Adobe Systems Incorporated

Matching Score-8

Assigner-Adobe Systems Incorporated

CVSS Score-7.8||HIGH

EPSS-16.49% / 94.63%

||

7 Day CHG~0.00%

Published-05 Nov, 2020 | 19:32

Updated-17 Sep, 2024 | 04:04

Acrobat Reader DC Heap-based Buffer Overflow Could Lead to Arbitrary Code Execution

Acrobat Reader DC versions 2020.012.20048 (and earlier), 2020.001.30005 (and earlier) and 2017.011.30175 (and earlier) are affected by a heap-based buffer overflow vulnerability in the submitForm function, potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted .pdf file in Acrobat Reader.

Vendor-Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat_dc acrobat_reader acrobat acrobat_reader_dc windows macos Acrobat Reader

CWE ID-CWE-122

Heap-based Buffer Overflow

Matching Score-8

Assigner-Adobe Systems Incorporated

Matching Score-8

Assigner-Adobe Systems Incorporated

CVSS Score-6.8||MEDIUM

EPSS-3.72% / 87.51%

||

7 Day CHG~0.00%

Published-10 Feb, 2011 | 17:00

Updated-11 Apr, 2025 | 00:51

Unspecified vulnerability in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Mac OS X allows attackers to cause a denial of service or possibly execute arbitrary code via unknown vectors.

Vendor-n/a Adobe Inc.Apple Inc.

Product-acrobat_reader acrobat mac_os_x n/a

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-6.8||MEDIUM

EPSS-2.43% / 84.53%

||

7 Day CHG~0.00%

Published-23 Mar, 2011 | 01:00

Updated-11 Apr, 2025 | 00:51

QuickLook in Apple Mac OS X 10.6 before 10.6.7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via an Excel spreadsheet with a crafted formula that uses unspecified opcodes.

Vendor-n/a Apple Inc.

Product-mac_os_x mac_os_x_server n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-6.8||MEDIUM

EPSS-1.18% / 77.88%

||

7 Day CHG~0.00%

Published-23 Mar, 2011 | 01:00

Updated-11 Apr, 2025 | 00:51

CoreText in Apple Mac OS X before 10.6.7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a document that contains a crafted embedded font.

Vendor-n/a Apple Inc.

Product-mac_os_x mac_os_x_server n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-6.8||MEDIUM

EPSS-3.72% / 87.50%

||

7 Day CHG~0.00%

Published-24 Jun, 2011 | 20:00

Updated-11 Apr, 2025 | 00:51

Heap-based buffer overflow in ImageIO in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted TIFF image.

Vendor-n/a Apple Inc.

Product-imageio mac_os_x mac_os_x_server n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer