Vulnerability Summary for the Week of September 18, 2017
Total Page:16
File Type:pdf, Size:1020Kb
Vulnerability Summary for the Week of September 18, 2017 The vulnerabilities are based on the CVE vulnerability naming standard and are organized according to severity, determined by the Common Vulnerability Scoring System (CVSS) standard. The division of high, medium, and low severities correspond to the following scores: High - Vulnerabilities will be labeled High severity if they have a CVSS base score of 7.0 - 10.0 Medium - Vulnerabilities will be labeled Medium severity if they have a CVSS base score of 4.0 - 6.9 Low - Vulnerabilities will be labeled Low severity if they have a CVSS base score of 0.0 - 3.9 High Vulnerabilities Primary CVSS Source & Patch Vendor -- Product Description Published Score Info CVE-2017-10813 CG-WLR300NM Firmware version MISC(link is 1.90 and earlier allows an attacker to external) corega -- execute arbitrary OS commands via 2017-09- JVN(link is wlr_300_nm_firmware unspecified vectors. 15 7.7 external) Buffer overflow in CG-WLR300NM CVE-2017-10814 Firmware version 1.90 and earlier MISC(link is allows an attacker to execute external) corega -- arbitrary code via unspecified 2017-09- JVN(link is wlr_300_nm_firmware vectors. 15 7.7 external) Untrusted search path vulnerability in "i-filter 6.0 install program" file CVE-2017-10858 version 1.0.8.1 and earlier allows an MISC(link is attacker to gain privileges via a external) Trojan horse DLL in an unspecified 2017-09- JVN(link is daj -- i-filter_installer directory. 15 9.3 external) Untrusted search path vulnerability in "i-filter 6.0 installer" timestamp of CVE-2017-10859 code signing is before 23 Aug 2017 MISC(link is (JST) allows an attacker to gain external) privileges via a Trojan horse DLL in 2017-09- JVN(link is daj -- i-filter_installer an unspecified directory. 15 9.3 external) Untrusted search path vulnerability CVE-2017-10860 in "i-filter 6.0 installer" timestamp of MISC(link is code signing is before 23 Aug 2017 external) 2017-09- (JST) allows an attacker to execute BID(link is daj -- i-filter_installer 15 9.3 arbitrary code via a specially crafted external) Primary CVSS Source & Patch Vendor -- Product Description Published Score Info executable file in an unspecified JVN(link is directory. external) Untrusted search path vulnerability CVE-2017-10855 in FENCE-Explorer for Windows MISC(link is V8.4.1 and earlier allows an attacker external) to gain privileges via a Trojan horse 2017-09- JVN(link is fujitsu -- fence-explorer DLL in an unspecified directory. 15 9.3 external) Multiple SQL injection CVE-2015-4073 vulnerabilities in the Helpdesk Pro MISC(link is plugin before 1.4.0 for Joomla! allow external) remote attackers to execute arbitrary FULLDISC SQL commands via the (1) BID(link is ticket_code or (2) email parameter or external) (3) remote authenticated users to EXPLOIT- helpdesk_pro_project -- execute arbitrary SQL commands via 2017-09- DB(link is helpdesk_pro the filter_order parameter. 20 7.5 external) CVE-2017-14531 BID(link is ImageMagick 7.0.7-0 has a memory external) exhaustion issue in ReadSUNImage 2017-09- CONFIRM(link imagemagick -- imagemagick in coders/sun.c. 17 7.1 is external) CVE-2017-14532 BID(link is ImageMagick 7.0.7-0 has a NULL external) Pointer Dereference in 2017-09- CONFIRM(link imagemagick -- imagemagick TIFFIgnoreTags in coders/tiff.c. 17 7.5 is external) ImageMagick 7.0.7-0 Q16 has a CVE-2017-14624 NULL Pointer Dereference BID(link is vulnerability in the function external) PostscriptDelegateMessage in 2017-09- CONFIRM(link imagemagick -- imagemagick coders/ps.c. 21 7.5 is external) CVE-2017-14625 ImageMagick 7.0.7-0 Q16 has a BID(link is NULL Pointer Dereference external) vulnerability in the function 2017-09- CONFIRM(link imagemagick -- imagemagick sixel_output_create in coders/sixel.c. 21 7.5 is external) CVE-2017-14626 BID(link is 2017-09- ImageMagick 7.0.7-0 Q16 has a external) imagemagick -- imagemagick 21 7.5 NULL Pointer Dereference CONFIRM(link Primary CVSS Source & Patch Vendor -- Product Description Published Score Info vulnerability in the function is external) sixel_decode in coders/sixel.c. CONFIRM(link is external) CVE-2017-14497 CONFIRM MLIST BID(link is external) SECTRACK(link The tpacket_rcv function in is external) net/packet/af_packet.c in the Linux CONFIRM(link kernel before 4.13 mishandles vnet is external) headers, which might allow local CONFIRM(link users to cause a denial of service is external) (buffer overflow, and disk and CONFIRM(link memory corruption) or possibly have is external) unspecified other impact via crafted 2017-09- CONFIRM(link linux -- linux_kernel system calls. 15 7.2 is external) NexusPHP 1.5.beta5.20120707 has SQL Injection in forummanage.php via the sort parameter in an CVE-2017-14512 editforum action, a different 2017-09- MISC(link is nexusphp_project -- nexusphp vulnerability than CVE-2017-12981. 17 7.5 external) Wi-Fi STATION L-02F Software version V10g and earlier allows CVE-2017-10845 remote attackers to access the device JVN(link is with administrative privileges and external) nttdocomo -- wi-fi_station_l- perform unintended operations 2017-09- MISC(link is 02f_firmware through a backdoor account. 15 10.0 external) CVE-2015-4681 FULLDISC BUGTRAQ(link is external) BID(link is external) Polycom RealPresence Resource MISC(link is Manager (aka RPRM) before 8.4 external) allows local users to have CONFIRM(link polycom -- unspecified impact via vectors 2017-09- is external) realpresence_resource_manager related to weak passwords. 19 7.2 EXPLOIT- Primary CVSS Source & Patch Vendor -- Product Description Published Score Info DB(link is external) CVE-2015-4683 MISC(link is external) FULLDISC BUGTRAQ(link is external) Polycom RealPresence Resource BID(link is Manager (aka RPRM) before 8.4 external) allows attackers to obtain sensitive CONFIRM(link information and potentially gain is external) privileges by leveraging use of EXPLOIT- polycom -- session identifiers as parameters with 2017-09- DB(link is realpresence_resource_manager HTTP GET requests. 19 7.5 external) Medium Vulnerabilities CV SS Primary Publis Sco Source & Vendor -- Product Description hed re Patch Info Cisco Cloud Web Security before 3.0.1.7 allows remote CVE-2015- attackers to bypass intended filtering protection 0689 cisco -- mechanisms by leveraging improper handling of HTTP 2017- CISCO(link cloud_web_security methods, aka Bug ID CSCut69743. 09-19 5.0 is external) In Poppler 0.59.0, a NULL Pointer Dereference exists CVE-2017- in the XRef::parseEntry() function in XRef.cc via a 2017- 14517 freedesktop -- poppler crafted PDF document. 09-17 4.3 CONFIRM In Poppler 0.59.0, a floating point exception exists in CVE-2017- the isImageInterpolationRequired() function in 2017- 14518 freedesktop -- poppler Splash.cc via a crafted PDF document. 09-17 6.8 CONFIRM In Poppler 0.59.0, memory corruption occurs in a call to Object::streamGetChar in Object.h after a repeating series of Gfx::display, Gfx::go, Gfx::execOp, CVE-2017- Gfx::opShowText, and Gfx::doShowText calls (aka a 2017- 14519 freedesktop -- poppler Gfx.cc infinite loop). 09-17 5.0 CONFIRM CV SS Primary Publis Sco Source & Vendor -- Product Description hed re Patch Info In Poppler 0.59.0, a floating point exception occurs in Splash::scaleImageYuXd() in Splash.cc, which may CVE-2017- lead to a potential attack when handling malicious PDF 2017- 14520 freedesktop -- poppler files. 09-17 6.8 CONFIRM The pe_print_idata function in peXXigen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, mishandles HintName CVE-2017- vector entries, which allows remote attackers to cause a 14529 denial of service (heap-based buffer over-read and CONFIRM application crash) via a crafted PE file, related to the 2017- CONFIRM gnu -- binutils bfd_getl16 function. 09-17 4.3 CONFIRM CVE-2015- 1527 BID(link is external) CONFIRM( link is Integer overflow in IAudioPolicyService.cpp in external) Android allows local users to gain privileges via a 2017- MISC(link google -- android crafted application, aka Android Bug ID 19261727. 09-15 4.6 is external) CVE-2017- 14504 CONFIRM BID(link is external) CONFIRM( link is ReadPNMImage in coders/pnm.c in GraphicsMagick external) 1.3.26 does not ensure the correct number of colors for CONFIRM( graphicsmagick -- the XV 332 format, leading to a NULL Pointer 2017- link is graphicsmagick Dereference. 09-17 4.3 external) CVE-2015- 4074 MISC(link is external) Directory traversal vulnerability in the Helpdesk Pro FULLDISC plugin before 1.4.0 for Joomla! allows remote attackers BID(link is helpdesk_pro_project - to read arbitrary files via a .. (dot dot) in the filename 2017- external) - helpdesk_pro parameter in a ticket.download_attachment task. 09-20 5.0 EXPLOIT- CV SS Primary Publis Sco Source & Vendor -- Product Description hed re Patch Info DB(link is external) CVE-2015- 4075 MISC(link is external) FULLDISC BID(link is external) The Helpdesk Pro plugin before 1.4.0 for Joomla! EXPLOIT- helpdesk_pro_project - allows remote attackers to write to arbitrary .ini files via 2017- DB(link is - helpdesk_pro a crafted language.save task. 09-20 6.8 external) Huawei P8 before GRA-CL00C92B210, before GRA- CVE-2015- L09C432B200, before GRA-TL00C01B210, and before 8224 GRA-UL00C00B210 allows remote attackers to obtain CONFIRM( user equipment (aka UE) measurements of signal 2017- link is huawei -- p8_firmware strengths. 09-20 4.3 external) CVE-2014- 6106 BID(link is Cross-site request forgery (CSRF) vulnerability in IBM external) Security Identity Manager 5.1, 6.0, and 7.0 allows XF(link is remote attackers to hijack the authentication of users for external) ibm -- requests that can cause cross-site scripting attacks, web CONFIRM( security_identity_mana cache poisoning, or other unspecified impacts via 2017- link is ger unknown vectors. 09-18 6.8 external) DrawGetStrokeDashArray in wand/drawing-wand.c in CVE-2017- ImageMagick 7.0.7-1 mishandles certain NULL arrays, 14505 which allows attackers to perform Denial of Service BID(link is (NULL pointer dereference and application crash in external) AcquireQuantumMemory within CONFIRM( imagemagick -- MagickCore/memory.c) by providing a crafted Image 2017- link is imagemagick File as input.