CVEs published December 23, 2016
29 CVEs were published on December 23, 2016: 0 critical, 3 high.
- Published
- 29
- Critical
- 0
- High
- 3
- Medium
- 0
- Low
- 0
- Unrated
- 26
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- Cloud Foundry v247 and earlier and UAA v3.9.2 & earlier and…
- 1
- Desigo PX Web modules with all firmware versions <
- 1
- ImageMagick 7.0.3-1
- 1
- Tarantool
- 1
- Tarantool Msgpuck library
- 1
High 3
- CVE-2016-8707An exploitable out of bounds write exists in the handling of compressed TIFF images in ImageMagicks's convert utility.ImageMagick 7.0.3-1
- CVE-2016-9036An exploitable incorrect return value vulnerability exists in the mp_check function of Tarantool's Msgpuck library 1.0.3.Tarantool Msgpuck library
- CVE-2016-9037An exploitable out-of-bounds array access vulnerability exists in the xrow_header_decode function of Tarantool 1.7.2.0-g8e92715.Tarantool
Medium, low and unrated 26
- CVE-2016-2312Turning all screens off in Plasma-workspace and kscreenlocker while the lock screen is shown can result in the screen being unlocked when tu
- CVE-2016-7787A maliciously crafted command line for kdesu can result in the user only seeing part of the commands that will actually get executed as supe
- CVE-2016-7966Through a malicious URL that contained a quote character it was possible to inject HTML code in KMail's plaintext viewer.
- CVE-2016-7967KMail since version 5.3.0 used a QWebEngine based viewer that had JavaScript enabled.
- CVE-2016-7968KMail since version 5.3.0 used a QWebEngine based viewer that had JavaScript enabled.
- CVE-2016-9907Quick Emulator (Qemu) built with the USB redirector usb-guest support is vulnerable to a memory leakage flaw.
- CVE-2016-9908Quick Emulator (Qemu) built with the Virtio GPU Device emulator support is vulnerable to an information leakage issue.
- CVE-2016-9911Quick Emulator (Qemu) built with the USB EHCI Emulation support is vulnerable to a memory leakage issue.
- CVE-2016-9912Quick Emulator (Qemu) built with the Virtio GPU Device emulator support is vulnerable to a memory leakage issue.
- CVE-2016-9921Quick emulator (Qemu) built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to a divide by zero issue.
- CVE-2016-9923Quick Emulator (Qemu) built with the 'chardev' backend support is vulnerable to a use after free issue.
- CVE-2016-6910The non-existent notification listener vulnerability was introduced in the initial Android 5.0.2 builds for the Samsung Galaxy S6 Edge devic
- CVE-2016-6659Cloud Foundry before 248; UAA 2.x before 2.7.4.12, 3.x before 3.6.5, and 3.7.x through 3.9.x before 3.9.3; and UAA bosh release (aka uaa-relCloud Foundry v247 and earlier and UAA v3.9.2 & earlier and…
- CVE-2016-6671The raw_decode function in libavcodec/rawdec.c in FFmpeg before 3.1.2 allows remote attackers to cause a denial of service (memory corruptio
- CVE-2016-6881The zlib_refill function in libavformat/swfdec.c in FFmpeg before 3.1.3 allows remote attackers to cause an infinite loop denial of service
- CVE-2016-7122The avi_read_nikon function in libavformat/avidec.c in FFmpeg before 3.1.4 is vulnerable to infinite loop when it decodes an AVI file that h
- CVE-2016-7450The ff_log2_16bit_c function in libavutil/intmath.h in FFmpeg before 3.1.4 is vulnerable to reading out-of-bounds memory when it decodes a m
- CVE-2016-7502The cavs_idct8_add_c function in libavcodec/cavsdsp.c in FFmpeg before 3.1.4 is vulnerable to reading out-of-bounds memory when decoding wit
- CVE-2016-7555The avi_read_header function in libavformat/avidec.c in FFmpeg before 3.1.4 is vulnerable to memory leak when decoding an AVI file that has
- CVE-2016-7562The ff_draw_pc_font function in libavcodec/cga_data.c in FFmpeg before 3.1.4 allows remote attackers to cause a denial of service (buffer ov
- CVE-2016-7785The avi_read_seek function in libavformat/avidec.c in FFmpeg before 3.1.4 allows remote attackers to cause a denial of service (assert fault
- CVE-2016-7905The read_gab2_sub function in libavformat/avidec.c in FFmpeg before 3.1.4 allows remote attackers to cause a denial of service (NULL pointer
- CVE-2016-8595The gsm_parse function in libavcodec/gsm_parser.c in FFmpeg before 3.1.5 allows remote attackers to cause a denial of service (assert fault)
- CVE-2016-9154Siemens Desigo PX Web modules PXA40-W0, PXA40-W1, PXA40-W2 for Desigo PX automation controllers PXC00-E.D, PXC50-E.D, PXC100-E.D, PXC200-E.DDesigo PX Web modules with all firmware versions <
- CVE-2016-9561The che_configure function in libavcodec/aacdec_template.c in FFmpeg before 3.2.1 allows remote attackers to cause a denial of service (allo
- CVE-2016-9889Some forms with the parameter geo_zoomlevel_to_found_location in Tiki Wiki CMS 12.x before 12.10 LTS, 15.x before 15.3 LTS, and 16.x before