NVD

Id
86701  
Name
CVE-2017-9471  
Description
In ytnef 1.9.2, the SwapWord function in lib/ytnef.c allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:P)  
Pub Date
2017-06-12  
Published
2017-06-07  
Modified Date
2017-06-09  
Seq
2017-9471  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
420699 86701 CVE-2016-7528 [oss-security] 20160922 Re: CVE Requests: Various ImageMagick issues (as reported in the Debian BTS)  View
420700 86701 CVE-2016-7528 93226  View
420701 86701 CVE-2016-7528 https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1537425  View
420702 86701 CVE-2016-7528 https://bugzilla.redhat.com/show_bug.cgi?id=1378760  View
420703 86701 CVE-2016-7528 https://github.com/ImageMagick/ImageMagick/commit/ca0c886abd6d3ef335eb74150cd23b89ebd17135  View
420704 86701 CVE-2016-7528 https://github.com/ImageMagick/ImageMagick/issues/99  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
68296 JVNDB-2017-004553 ytnef の lib/ytnef.c の SwapWord 関数におけるサービス運用妨害 (DoS) の脆弱性 ytnef の lib/ytnef.c の SwapWord 関数には、サービス運用妨害 (ヒープベースのバッファオーバーリードおよびアプリケーションクラッシュ) 状態にされる脆弱性が存在します。 CVE-2017-9471 0 CVE-2017-9471 86701 4.3 5.5 http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-004553.html 2017-05-24 2017-06-29 View