From 6d5d316bf34389799d57f8c8c71f66beee14e01d Mon Sep 17 00:00:00 2001 From: Kurt Seifried Date: Fri, 29 Dec 2017 13:46:47 -0700 Subject: [PATCH 1/3] Added CVE-2017-1000414 --- 2017/1000xxx/CVE-2017-1000414.json | 1 + 1 file changed, 1 insertion(+) create mode 100644 2017/1000xxx/CVE-2017-1000414.json diff --git a/2017/1000xxx/CVE-2017-1000414.json b/2017/1000xxx/CVE-2017-1000414.json new file mode 100644 index 00000000000..e1aa04cb973 --- /dev/null +++ b/2017/1000xxx/CVE-2017-1000414.json @@ -0,0 +1 @@ +{"data_version": "4.0","references": {"reference_data": [{"url": "https://sourceforge.net/p/jpegsnoop/code/HEAD/tree/"}]},"description": {"description_data": [{"lang": "eng","value": "ImpulseAdventure JPEGsnoop version 1.7.5 is vulnerable to a division by zero in the JFIF decode handling resulting denial of service."}]},"data_type": "CVE","affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"version": {"version_data": [{"version_value": "1.7.5"}]},"product_name": "JPEGsnoop"}]},"vendor_name": "ImpulseAdventure - JPEGsnoop"}]}},"CVE_data_meta": {"DATE_ASSIGNED": "2017-12-29","ID": "CVE-2017-1000414","ASSIGNER": "kurt@seifried.org","REQUESTER": "nafiez.skins@gmail.com"},"data_format": "MITRE","problemtype": {"problemtype_data": [{"description": [{"lang": "eng","value": "Division by zero"}]}]}} \ No newline at end of file From f30a296e97ff9917fa2c41e597cb2ecbab71760b Mon Sep 17 00:00:00 2001 From: Kurt Seifried Date: Wed, 24 Jan 2018 21:10:15 -0700 Subject: [PATCH 2/3] updated refs --- 2017/1000xxx/CVE-2017-1000414.json | 68 +++++++++++++++++++++++++++++- 1 file changed, 67 insertions(+), 1 deletion(-) diff --git a/2017/1000xxx/CVE-2017-1000414.json b/2017/1000xxx/CVE-2017-1000414.json index e1aa04cb973..c09658ccd0f 100644 --- a/2017/1000xxx/CVE-2017-1000414.json +++ b/2017/1000xxx/CVE-2017-1000414.json @@ -1 +1,67 @@ -{"data_version": "4.0","references": {"reference_data": [{"url": "https://sourceforge.net/p/jpegsnoop/code/HEAD/tree/"}]},"description": {"description_data": [{"lang": "eng","value": "ImpulseAdventure JPEGsnoop version 1.7.5 is vulnerable to a division by zero in the JFIF decode handling resulting denial of service."}]},"data_type": "CVE","affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"version": {"version_data": [{"version_value": "1.7.5"}]},"product_name": "JPEGsnoop"}]},"vendor_name": "ImpulseAdventure - JPEGsnoop"}]}},"CVE_data_meta": {"DATE_ASSIGNED": "2017-12-29","ID": "CVE-2017-1000414","ASSIGNER": "kurt@seifried.org","REQUESTER": "nafiez.skins@gmail.com"},"data_format": "MITRE","problemtype": {"problemtype_data": [{"description": [{"lang": "eng","value": "Division by zero"}]}]}} \ No newline at end of file +{ + "data_version": "4.0", + "references": { + "reference_data": [ + { + "url": "https://sourceforge.net/p/jpegsnoop/code/HEAD/tree/" + }, + { + "url": "https://www.impulseadventure.com/photo/jpeg-snoop-history.html " + }, + { + "url": "https://github.com/ImpulseAdventure/JPEGsnoop/search?utf8=%E2%9C%93&q=m_anSofHorzSampFact_Hi&type=" + } + ] + }, + "description": { + "description_data": [ + { + "lang": "eng", + "value": "ImpulseAdventure JPEGsnoop version 1.7.5 is vulnerable to a division by zero in the JFIF decode handling resulting denial of service." + } + ] + }, + "data_type": "CVE", + "affects": { + "vendor": { + "vendor_data": [ + { + "product": { + "product_data": [ + { + "version": { + "version_data": [ + { + "version_value": "1.7.5" + } + ] + }, + "product_name": "JPEGsnoop" + } + ] + }, + "vendor_name": "ImpulseAdventure - JPEGsnoop" + } + ] + } + }, + "CVE_data_meta": { + "DATE_ASSIGNED": "2017-12-29", + "ID": "CVE-2017-1000414", + "ASSIGNER": "kurt@seifried.org", + "REQUESTER": "nafiez.skins@gmail.com" + }, + "data_format": "MITRE", + "problemtype": { + "problemtype_data": [ + { + "description": [ + { + "lang": "eng", + "value": "Division by zero" + } + ] + } + ] + } +} From d2677264e5a9c27a6fcf9918a9063882be93679a Mon Sep 17 00:00:00 2001 From: Kurt Seifried Date: Thu, 25 Jan 2018 08:22:05 -0700 Subject: [PATCH 3/3] updated ref url --- 2017/1000xxx/CVE-2017-1000414.json | 3 +++ 1 file changed, 3 insertions(+) diff --git a/2017/1000xxx/CVE-2017-1000414.json b/2017/1000xxx/CVE-2017-1000414.json index c09658ccd0f..211dc5f2d05 100644 --- a/2017/1000xxx/CVE-2017-1000414.json +++ b/2017/1000xxx/CVE-2017-1000414.json @@ -10,6 +10,9 @@ }, { "url": "https://github.com/ImpulseAdventure/JPEGsnoop/search?utf8=%E2%9C%93&q=m_anSofHorzSampFact_Hi&type=" + }, + { + "url": "https://github.com/ImpulseAdventure/JPEGsnoop/commit/b4e458612d4294e0cfe01dbf1c0b09a07a8133a4#diff-cf9182aecc9d630e8db2e0e35f1eec65" } ] },