# CVEs published 2017-02-03

44 CVEs were published on February 3, 2017: 0 critical, 0 high. Days are UTC.

- [CVE-2015-4049](https://cve.now/CVE-2015-4049.md): Unisys Libra 43xx, 63xx, and 83xx, and FS600 class systems with MCP-FIRMWARE 40.0 before 40.0IC4 Build 270 might allow remote… (no CVSS)
- [CVE-2016-10165](https://cve.now/CVE-2016-10165.md): The Type\_MLU\_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to obtain sensitive information or cause a denial (no CVSS)
- [CVE-2016-6500](https://cve.now/CVE-2016-6500.md): Unspecified methods in the RACF Connector component before 1.1.1.0 in ForgeRock OpenIDM and OpenICF improperly call the SearchControls… (no CVSS)
- [CVE-2016-3183](https://cve.now/CVE-2016-3183.md): The sycc422\_t\_rgb function in common/color.c in OpenJPEG before 2.1.1 allows remote attackers to cause a denial of service (out-of-bounds… (no CVSS)
- [CVE-2016-4796](https://cve.now/CVE-2016-4796.md): Heap-based buffer overflow in the color\_cmyk\_to\_rgb in common/color.c in OpenJPEG before 2.1.1 allows remote attackers to cause a denial… (no CVSS)
- [CVE-2016-4797](https://cve.now/CVE-2016-4797.md): Divide-by-zero vulnerability in the opj\_tcd\_init\_tile function in tcd.c in OpenJPEG before 2.1.1 allows remote attackers to cause a denial… (no CVSS)
- [CVE-2016-6188](https://cve.now/CVE-2016-6188.md): Memory leak in SOGo 2.3.7 allows remote attackers to cause a denial of service (memory consumption) via a large number of attempts to… (no CVSS)
- [CVE-2016-2317](https://cve.now/CVE-2016-2317.md): Multiple buffer overflows in GraphicsMagick 1.3.23 allow remote attackers to cause a denial of service (crash) via a crafted SVG file… (no CVSS)
- [CVE-2016-2318](https://cve.now/CVE-2016-2318.md): GraphicsMagick 1.3.23 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted SVG file, related to… (no CVSS)
- [CVE-2016-4352](https://cve.now/CVE-2016-4352.md): Integer overflow in the demuxer function in libmpdemux/demux\_gif.c in Mplayer allows remote attackers to cause a denial of service (crash)… (no CVSS)
- [CVE-2016-4570](https://cve.now/CVE-2016-4570.md): The mxmlDelete function in mxml-node.c in mxml 2.9, 2.7, and possibly earlier allows remote attackers to cause a denial of service (stack… (no CVSS)
- [CVE-2016-4571](https://cve.now/CVE-2016-4571.md): The mxml\_write\_node function in mxml-file.c in mxml 2.9, 2.7, and possibly earlier allows remote attackers to cause a denial of service… (no CVSS)
- [CVE-2016-5115](https://cve.now/CVE-2016-5115.md): The avcodec\_decode\_audio4 function in libavcodec in libavformat 57.34.103, as used in MPlayer, allows remote attackers to cause a denial… (no CVSS)
- [CVE-2016-5241](https://cve.now/CVE-2016-5241.md): magick/render.c in GraphicsMagick before 1.3.24 allows remote attackers to cause a denial of service (arithmetic exception and application… (no CVSS)
- [CVE-2016-6163](https://cve.now/CVE-2016-6163.md): The rsvg\_pattern\_fix\_fallback function in rsvg-paint\_server.c in librsvg2 2.40.2 allows remote attackers to cause a denial of service… (no CVSS)
- [CVE-2016-8568](https://cve.now/CVE-2016-8568.md): The git\_commit\_message function in oid.c in libgit2 before 0.24.3 allows remote attackers to cause a denial of service (out-of-bounds… (no CVSS)
- [CVE-2016-8569](https://cve.now/CVE-2016-8569.md): The git\_oid\_nfmt function in commit.c in libgit2 before 0.24.3 allows remote attackers to cause a denial of service (NULL pointer… (no CVSS)
- [CVE-2016-9082](https://cve.now/CVE-2016-9082.md): Integer overflow in the write\_png function in cairo 1.14.6 allows remote attackers to cause a denial of service (invalid pointer… (no CVSS)
- [CVE-2016-9085](https://cve.now/CVE-2016-9085.md): Multiple integer overflows in libwebp allows attackers to have unspecified impact via unknown vectors. (no CVSS)
- [CVE-2016-9108](https://cve.now/CVE-2016-9108.md): Integer overflow in the js\_regcomp function in regexp.c in Artifex Software, Inc. (no CVSS)
- [CVE-2016-9642](https://cve.now/CVE-2016-9642.md): JavaScriptCore in WebKit allows attackers to cause a denial of service (out-of-bounds heap read) via a crafted Javascript file. (no CVSS)
- [CVE-2016-0890](https://cve.now/CVE-2016-0890.md): EMC PowerPath Virtual (Management) Appliance 2.0, EMC PowerPath Virtual (Management) Appliance 2.0 SP1 is affected by a sensitive… (no CVSS, EMC PowerPath Virtual (Management) Appliance EMC PowerPath…)
- [CVE-2016-0919](https://cve.now/CVE-2016-0919.md): EMC RSA Web Threat Detection version 5.0, RSA Web Threat Detection version 5.1, RSA Web Threat Detection version 5.1.2 has a cross site… (no CVSS, RSA Web Threat Detection RSA Web Threat Detection)
- [CVE-2016-6648](https://cve.now/CVE-2016-6648.md): EMC RecoverPoint versions before 4.4.1.1 and EMC RecoverPoint for Virtual Machines versions before 5.0 are affected by sensitive… (no CVSS, EMC RecoverPoint and EMC RecoverPoint for Virtual Machines…)
- [CVE-2016-6649](https://cve.now/CVE-2016-6649.md): EMC RecoverPoint versions before 4.4.1.1 and EMC RecoverPoint for Virtual Machines versions before 5.0 are affected by multiple command… (no CVSS, EMC RecoverPoint and EMC RecoverPoint for Virtual Machines…)
- [CVE-2016-8211](https://cve.now/CVE-2016-8211.md): EMC Data Protection Advisor 6.1.x, EMC Data Protection Advisor 6.2, EMC Data Protection Advisor 6.2.1, EMC Data Protection Advisor 6.2.2… (no CVSS, EMC Data Protection Advisor EMC Data Protection Advisor 6.1…)
- [CVE-2016-8212](https://cve.now/CVE-2016-8212.md): An issue was discovered in EMC RSA BSAFE Crypto-J versions prior to 6.2.2. (no CVSS, RSA BSAFE Crypto-J RSA BSAFE Crypto-J versions prior to)
- [CVE-2016-8216](https://cve.now/CVE-2016-8216.md): EMC Data Domain OS (DD OS) 5.4 all versions, EMC Data Domain OS (DD OS) 5.5 family all versions prior to 5.5.5.0, EMC Data Domain OS (DD… (no CVSS, EMC Data Domain DD OS EMC Data Domain OS (DD OS) 5.4 all ve…)
- [CVE-2016-8217](https://cve.now/CVE-2016-8217.md): EMC RSA BSAFE Crypto-J versions prior to 6.2.2 has a PKCS#12 Timing Attack Vulnerability. (no CVSS, RSA BSAFE Crypto-J RSA BSAFE Crypto-J versions prior to)
- [CVE-2016-9871](https://cve.now/CVE-2016-9871.md): EMC Isilon OneFS 7.2.1.0 - 7.2.1.3, EMC Isilon OneFS 7.2.0.x, EMC Isilon OneFS 7.1.1.0 - 7.1.1.10, EMC Isilon OneFS 7.1.0.x is affected by… (no CVSS, EMC Isilon OneFS EMC Isilon OneFS 7.2.1.0 7.2.1.3, EMC Isil…)
- [CVE-2016-9872](https://cve.now/CVE-2016-9872.md): EMC Documentum D2 version 4.5 and EMC Documentum D2 version 4.6 has Reflected Cross-Site Scripting Vulnerabilities that could potentially… (no CVSS, EMC Documentum D2 EMC Documentum D2)
- [CVE-2016-9873](https://cve.now/CVE-2016-9873.md): EMC Documentum D2 version 4.5 and EMC Documentum D2 version 4.6 has a DQL Injection Vulnerability that could potentially be exploited by… (no CVSS, EMC Documentum D2 EMC Documentum D2)
- [CVE-2017-2766](https://cve.now/CVE-2017-2766.md): EMC Documentum eRoom version 7.4.4, EMC Documentum eRoom version 7.4.4 SP1, EMC Documentum eRoom version prior to 7.4.5 P04, EMC… (no CVSS, EMC Documentum eRoom EMC Documentum eRoom)
- [CVE-2017-2767](https://cve.now/CVE-2017-2767.md): EMC Network Configuration Manager (NCM) 9.3.x, EMC Network Configuration Manager (NCM) 9.4.0.x, EMC Network Configuration Manager (NCM)… (no CVSS, EMC Network Configuration Manager EMC Network Configuration…)
- [CVE-2017-2768](https://cve.now/CVE-2017-2768.md): EMC Network Configuration Manager (NCM) 9.3.x, EMC Network Configuration Manager (NCM) 9.4.0.x, EMC Network Configuration Manager (NCM)… (no CVSS, EMC Network Configuration Manager EMC Network Configuration…)
- [CVE-2017-3806](https://cve.now/CVE-2017-3806.md): A vulnerability in CLI command processing in the Cisco Firepower 4100 Series Next-Generation Firewall and Cisco Firepower 9300 Security… (no CVSS, Cisco Firepower 4100 Series Next-Generation Firewall and Ci…)
- [CVE-2017-3809](https://cve.now/CVE-2017-3809.md): A vulnerability in the Policy deployment module of the Cisco Firepower Management Center (FMC) could allow an unauthenticated, remote… (no CVSS, Cisco Firepower Management Center (FMC) 6.1.0)
- [CVE-2017-3810](https://cve.now/CVE-2017-3810.md): A vulnerability in the web framework of Cisco Prime Service Catalog could allow an authenticated, remote attacker to conduct a web URL… (no CVSS, Cisco Prime Service Catalog 10.0\_R2\_tanggula)
- [CVE-2017-3812](https://cve.now/CVE-2017-3812.md): A vulnerability in the implementation of Common Industrial Protocol (CIP) functionality in Cisco Industrial Ethernet 2000 Series Switches… (no CVSS, Cisco Industrial Ethernet 2000 Switches 15.2(5.4.32i)E2)
- [CVE-2017-3814](https://cve.now/CVE-2017-3814.md): A vulnerability in Cisco Firepower System Software could allow an unauthenticated, remote attacker to maliciously bypass the appliance's… (no CVSS, Cisco Firepower System Software 5.x 6.x)
- [CVE-2017-3818](https://cve.now/CVE-2017-3818.md): A vulnerability in the Multipurpose Internet Mail Extensions (MIME) scanner of Cisco AsyncOS Software for Cisco Email Security Appliances… (no CVSS, Cisco AsyncOS 9.7.1-066)
- [CVE-2017-3820](https://cve.now/CVE-2017-3820.md): A vulnerability in Simple Network Management Protocol (SNMP) functions of Cisco ASR 1000 Series Aggregation Services Routers running Cisco… (no CVSS, Cisco IOS XE 15.x)
- [CVE-2017-3822](https://cve.now/CVE-2017-3822.md): A vulnerability in the logging subsystem of the Cisco Firepower Threat Defense (FTD) Firepower Device Manager (FDM) could allow an… (no CVSS, Cisco Firepower Threat Defense Software versions 6.1.x)
- [CVE-2017-3824](https://cve.now/CVE-2017-3824.md): A vulnerability in the handling of list headers in Cisco cBR Series Converged Broadband Routers could allow an unauthenticated, remote… (no CVSS, Cisco IOS XE 15.x)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2017-02-03
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.