NVD

Id
84994  
Name
CVE-2017-7960  
Description
The cr_input_new_from_uri function in cr-input.c in libcroco 0.6.11 and 0.6.12 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted CSS file.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:P)  
Pub Date
2017-07-18  
Published
2017-04-19  
Modified Date
2017-07-10  
Seq
2017-7960  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
414499 84994 CVE-2017-6550 http://packetstormsecurity.com/files/141575/Kinseys-Infor-Lawson-SQL-Injection.html  View
414500 84994 CVE-2017-6550 20170310 CVE-2017-6550: Kinsey Infor-Lawson - Multiple SQL Injections  View
414501 84994 CVE-2017-6550 96821  View
414502 84994 CVE-2017-6550 41577  View
414503 84994 CVE-2017-6550 http://packetstormsecurity.com/files/141575/Kinseys-Infor-Lawson-SQL-Injection.html  View
414504 84994 CVE-2017-6550 20170310 CVE-2017-6550: Kinsey Infor-Lawson - Multiple SQL Injections  View
414505 84994 CVE-2017-6550 96821  View
414506 84994 CVE-2017-6550 41577  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
66883 JVNDB-2017-003208 libcroco の cr-input.c の cr_input_new_from_uri 関数におけるサービス運用妨害 (DoS) の脆弱性 libcroco の cr-input.c の cr_input_new_from_uri 関数には、サービス運用妨害 (ヒープベースのバッファオーバーリード) 状態にされる脆弱性が存在します。 CVE-2017-7960 0 CVE-2017-7960 84994 4.3 5.5 http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-003208.html 2017-04-16 2017-05-19 View