admin/cvelist
1
0
Fork 0
mirror of https://github.com/CVEProject/cvelist.git synced 2025-07-29 05:56:59 +00:00
Code Issues Packages Projects Releases Wiki Activity

Added CVE-2017-9806 for Apache. Updated entries for CVE-2016-6804 and CVE-2017-0909.

Browse Source
This commit is contained in:
CVE Team 2017-11-20 11:40:44 -05:00
parent 49c9e2805c
commit 748ccd4b47
No known key found for this signature in database
GPG Key ID: 3504EC0FB4B2FE56
3 changed files with 61 additions and 13 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
2016/6xxx/CVE-2016-6804.json
View File

@ -1,6 +1,7 @@
{
"CVE_data_meta" : {
"ASSIGNER" : "security@apache.org",
"DATE_PUBLIC" : "2017-11-18T00:00:00",
"ID" : "CVE-2016-6804",
"STATE" : "PUBLIC"
},
@ -11,18 +12,21 @@
"product" : {
"product_data" : [
{
"product_name" : "n/a",
"product_name" : "Apache OpenOffice",
"version" : {
"version_data" : [
{
"version_value" : "n/a"
"version_value" : "4.0.0 to 4.1.2"
},
{
"version_value" : "older releases are also affected, including some branded as OpenOffice.org"
}
]
}
}
]
},
"vendor_name" : "n/a"
"vendor_name" : "Apache Software Foundation"
}
]
}
@ -44,7 +48,7 @@
"description" : [
{
"lang" : "eng",
"value" : "n/a"
"value" : "Arbitrary Code Execution at installation time"
}
]
}

13
2017/0xxx/CVE-2017-0909.json
View File

@ -1,6 +1,7 @@
{
"CVE_data_meta" : {
"ASSIGNER" : "support@hackerone.com",
"DATE_PUBLIC" : "2017-11-16T00:00:00",
"ID" : "CVE-2017-0909",
"STATE" : "PUBLIC"
},
@ -11,18 +12,18 @@
"product" : {
"product_data" : [
{
"product_name" : "n/a",
"product_name" : "private_address_check ruby gem",
"version" : {
"version_data" : [
{
"version_value" : "n/a"
"version_value" : "Versions before 0.4.1"
}
]
}
}
]
},
"vendor_name" : "n/a"
"vendor_name" : "HackerOne"
}
]
}
@ -44,7 +45,7 @@
"description" : [
{
"lang" : "eng",
"value" : "n/a"
"value" : "Incomplete Blacklist (CWE-184)"
}
]
}
@ -53,10 +54,10 @@
"references" : {
"reference_data" : [
{
"url" : "https://hackerone.com/reports/288950"
"url" : "https://github.com/jtdowney/private_address_check/pull/3"
},
{
"url" : "https://github.com/jtdowney/private_address_check/pull/3"
"url" : "https://hackerone.com/reports/288950"
}
]
}

49
2017/9xxx/CVE-2017-9806.json
View File

@ -1,8 +1,32 @@
{
"CVE_data_meta" : {
"ASSIGNER" : "cve@mitre.org",
"ASSIGNER" : "security@apache.org",
"DATE_PUBLIC" : "2017-11-18T00:00:00",
"ID" : "CVE-2017-9806",
"STATE" : "RESERVED"
"STATE" : "PUBLIC"
},
"affects" : {
"vendor" : {
"vendor_data" : [
{
"product" : {
"product_data" : [
{
"product_name" : "Apache OpenOffice",
"version" : {
"version_data" : [
{
"version_value" : "4.0.0 to 4.1.3, and some previous releases, including some using our old OpenOffice.org brand"
}
]
}
}
]
},
"vendor_name" : "Apache Software Foundation"
}
]
}
},
"data_format" : "MITRE",
"data_type" : "CVE",
@ -11,7 +35,26 @@
"description_data" : [
{
"lang" : "eng",
"value" : "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
"value" : "A vulnerability in the OpenOffice Writer DOC file parser, and specifically in the WW8Fonts Constructor, allows attackers to craft malicious documents that cause denial of service (memory corruption and application crash) potentially resulting in arbitrary code execution. Affected versions: 4.1.3 and earlier."
}
]
},
"problemtype" : {
"problemtype_data" : [
{
"description" : [
{
"lang" : "eng",
"value" : "Potential Arbitrary Code Execution"
}
]
}
]
},
"references" : {
"reference_data" : [
{
"url" : "http://www.openoffice.org/security/cves/CVE-2017-9806.html"
}
]
}