Vulnerabilities

DATE CVE VULNERABILITY TITLE RISK
2017-02-15 CVE-2017-0308 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Nvidia GPU Driver
All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where untrusted input is used for buffer size calculation leading to denial of service or escalation of privileges.
local
low complexity
nvidia CWE-119
8.8
2017-02-15 CVE-2016-8681 Out-of-bounds Read vulnerability in Libdwarf Project Libdwarf
The _dwarf_get_abbrev_for_code function in dwarf_util.c in libdwarf 20161001 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) by calling the dwarfdump command on a crafted file.
local
low complexity
libdwarf-project CWE-125
5.5
2017-02-15 CVE-2016-8680 Out-of-bounds Read vulnerability in Libdwarf Project Libdwarf
The _dwarf_get_abbrev_for_code function in dwarf_util.c in libdwarf 20161001 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) by calling the dwarfdump command on a crafted file.
network
low complexity
libdwarf-project CWE-125
6.5
2017-02-15 CVE-2016-8679 Out-of-bounds Read vulnerability in Libdwarf Project Libdwarf
The _dwarf_get_size_of_val function in libdwarf/dwarf_util.c in Libdwarf before 20161124 allows remote attackers to cause a denial of service (out-of-bounds read) by calling the dwarfdump command on a crafted file.
network
low complexity
libdwarf-project CWE-125
6.5
2017-02-15 CVE-2016-8678 Out-of-bounds Read vulnerability in Imagemagick 7.0.30
The IsPixelMonochrome function in MagickCore/pixel-accessor.h in ImageMagick 7.0.3.0 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted file.
local
low complexity
imagemagick CWE-125
5.5
2017-02-15 CVE-2016-8677 The AcquireQuantumPixels function in MagickCore/quantum.c in ImageMagick before 7.0.3-1 allows remote attackers to have unspecified impact via a crafted image file, which triggers a memory allocation failure.
network
low complexity
imagemagick opensuse debian
8.8
2017-02-15 CVE-2016-8676 NULL Pointer Dereference vulnerability in Libav
The get_vlc2 function in get_bits.h in Libav 11.9 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted mp3 file.
local
low complexity
libav CWE-476
5.5
2017-02-15 CVE-2016-8675 NULL Pointer Dereference vulnerability in Libav
The get_vlc2 function in get_bits.h in Libav before 11.9 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted mp3 file, possibly related to startcode sequences during m4v detection.
local
low complexity
libav CWE-476
5.5
2017-02-15 CVE-2016-8674 Use After Free vulnerability in Artifex Mupdf
The pdf_to_num function in pdf-object.c in MuPDF before 1.10 allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted file.
local
low complexity
artifex CWE-416
5.5
2017-02-15 CVE-2016-7499 Divide By Zero vulnerability in Libav 11.7
The sbr_make_f_master function in aacsbr.c in Libav 11.7 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted mp3 file.
local
low complexity
libav CWE-369
5.5