CVEs published January 6, 2017
53 CVEs were published on January 6, 2017: 2 critical, 1 high.
- Published
- 53
- Critical
- 2
- High
- 1
- Medium
- 1
- Low
- 0
- Unrated
- 49
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- Pidgin
- 16
- Hancom Office
- 6
- NTP Project NTP · NTPsec Project NTPSec
- 4
- EMC ScaleIO versions before
- 3
- Kaspersky Internet Security
- 3
- Lexmark Perceptive Document Filters
- 3
- Memcached
- 3
- Kaspersky Total Security
- 2
- Ruby
- 2
- Trane ComfortLink II SCC firmware
- 2
Critical 2
- CVE-2016-8704An integer overflow in the process_bin_append_prepend function in Memcached, which is responsible for processing multiple commands of MemcacMemcached
- CVE-2016-8705Multiple integer overflows in process_bin_update function in Memcached, which is responsible for processing multiple commands of Memcached bMemcached
High 1
Medium, low and unrated 50
- CVE-2016-9867An issue was discovered in EMC ScaleIO versions before 2.0.1.1.EMC ScaleIO versions before
- CVE-2016-9868An issue was discovered in EMC ScaleIO versions before 2.0.1.1.EMC ScaleIO versions before
- CVE-2016-9869An issue was discovered in EMC ScaleIO versions before 2.0.1.1.EMC ScaleIO versions before
- CVE-2016-9879An issue was discovered in Pivotal Spring Security before 3.2.10, 4.1.x before 4.1.4, and 4.2.x before 4.2.1.Pivotal Spring Security before 3.2.10, 4.1.x before 4.1.4,…
- CVE-2016-9885An issue was discovered in Pivotal GemFire for PCF 1.6.x versions prior to 1.6.5 and 1.7.x versions prior to 1.7.1.GemFire for PCF 1.6.x versions prior to 1.6.5 and 1.7.x ver…
- CVE-2015-2867A design flaw in the Trane ComfortLink II SCC firmware version 2.0.2 service allows remote attackers to take complete control of the system.Trane ComfortLink II SCC firmware
- CVE-2015-2868An exploitable remote code execution vulnerability exists in the Trane ComfortLink II firmware version 2.0.2 in DSS service.Trane ComfortLink II SCC firmware
- CVE-2015-7848An integer overflow can occur in NTP-dev.4.3.70 leading to an out-of-bounds memory copy operation when processing a specially crafted privat
- CVE-2016-1547An off-path attacker can cause a preemptible client association to be demobilized in NTP 4.2.8p4 and earlier and NTPSec a5fb34b9cc89b92a8fefNTP Project NTP · NTPsec Project NTPSec
- CVE-2016-1548An attacker can spoof a packet from a legitimate ntpd server with an origin timestamp that matches the peer->dst timestamp recorded for thatNTP Project NTP · NTPsec Project NTPSec
- CVE-2016-1549A malicious authenticated peer can create arbitrarily-many ephemeral associations in order to win the clock selection algorithm in ntpd in NNTP Project NTP · NTPsec Project NTPSec
- CVE-2016-1550An exploitable vulnerability exists in the message authentication functionality of libntp in ntp 4.2.8p4 and NTPSec a5fb34b9cc89b92a8fef2f45NTP Project NTP · NTPsec Project NTPSec
- CVE-2016-2336Type confusion exists in two methods of Ruby's WIN32OLE class, ole_invoke and ole_query_interface.Ruby
- CVE-2016-2337Type confusion exists in _cancel_eval Ruby's TclTkIp class method.Ruby · Tcl/Tk
- CVE-2016-2339An exploitable heap overflow vulnerability exists in the Fiddle::Function.new "initialize" function functionality of Ruby.Ruby
- CVE-2016-2365A denial of service vulnerability exists in the handling of the MXIT protocol in Pidgin.Pidgin
- CVE-2016-2366A denial of service vulnerability exists in the handling of the MXIT protocol in Pidgin.Pidgin
- CVE-2016-2367An information leak exists in the handling of the MXIT protocol in Pidgin.Pidgin
- CVE-2016-2368Multiple memory corruption vulnerabilities exist in the handling of the MXIT protocol in Pidgin.Pidgin
- CVE-2016-2369A NULL pointer dereference vulnerability exists in the handling of the MXIT protocol in Pidgin.Pidgin
- CVE-2016-2370A denial of service vulnerability exists in the handling of the MXIT protocol in Pidgin.Pidgin
- CVE-2016-2371An out-of-bounds write vulnerability exists in the handling of the MXIT protocol in Pidgin.Pidgin
- CVE-2016-2372An information leak exists in the handling of the MXIT protocol in Pidgin.Pidgin
- CVE-2016-2373A denial of service vulnerability exists in the handling of the MXIT protocol in Pidgin.Pidgin
- CVE-2016-2374An exploitable memory corruption vulnerability exists in the handling of the MXIT protocol in Pidgin.Pidgin
- CVE-2016-2375An exploitable out-of-bounds read exists in the handling of the MXIT protocol in Pidgin.Pidgin
- CVE-2016-2376A buffer overflow vulnerability exists in the handling of the MXIT protocol in Pidgin.Pidgin
- CVE-2016-2377A buffer overflow vulnerability exists in the handling of the MXIT protocol in Pidgin.Pidgin
- CVE-2016-2378A buffer overflow vulnerability exists in the handling of the MXIT protocol Pidgin.Pidgin
- CVE-2016-2380An information leak exists in the handling of the MXIT protocol in Pidgin.Pidgin
- CVE-2016-4288A local privilege escalation vulnerability exists in BlueStacks App Player.BlueStacks App Player
- CVE-2016-4290When opening a Hangul HShow Document (.hpt) and processing a structure within the document, Hancom Office 2014 will attempt to allocate spacHancom Office
- CVE-2016-4291When opening a Hangul HShow Document (.hpt) and processing a structure within the document, Hancom Office 2014 will use a field from the strHancom Office
- CVE-2016-4292When opening a Hangul HShow Document (.hpt) and processing a structure within the document, Hancom Office 2014 will use a static size to allHancom Office
- CVE-2016-4294When opening a Hangul Hcell Document (.cell) and processing a property record within the Workbook stream, Hancom Office 2014 will attempt toHancom Office
- CVE-2016-4295When opening a Hangul Hcell Document (.cell) and processing a particular record within the Workbook stream, an index miscalculation leading Hancom Office
- CVE-2016-4296When opening a Hangul Hcell Document (.cell) and processing a record that uses the CSSValFormat object, Hancom Office 2014 will search for aHancom Office
- CVE-2016-4298When opening a Hangul HShow Document (.hpt) and processing a structure within the document, Hancom Office 2014 will attempt to allocate spacHancom
- CVE-2016-4304A denial of service vulnerability exists in the syscall filtering functionality of the Kaspersky Internet Security KLIF driver.Kaspersky Internet Security
- CVE-2016-4305A denial of service vulnerability exists in the syscall filtering functionality of Kaspersky Internet Security KLIF driver.Kaspersky Internet Security
- CVE-2016-4306Multiple information leaks exist in various IOCTL handlers of the Kaspersky Internet Security KLDISK driver.Kaspersky Total Security
- CVE-2016-4307A denial of service vulnerability exists in the IOCTL handling functionality of Kaspersky Internet Security KL1 driver.Kaspersky Internet Security
- CVE-2016-4323A directory traversal exists in the handling of the MXIT protocol in Pidgin.Pidgin
- CVE-2016-4329A local denial of service vulnerability exists in window broadcast message handling functionality of Kaspersky Anti-Virus software.Kaspersky Total Security
- CVE-2016-4335An exploitable buffer overflow exists in the XLS parsing of the Lexmark Perspective Document Filters conversion functionality.Lexmark Perceptive Document Filters
- CVE-2016-4336An exploitable out-of-bounds write exists in the Bzip2 parsing of the Lexmark Perspective Document Filters conversion functionality.Lexmark Perceptive Document Filters
- CVE-2016-5646An exploitable heap overflow vulnerability exists in the Compound Binary File Format (CBFF) parser functionality of Lexmark Perceptive DocumLexmark Perceptive Document Filters
- CVE-2016-5652An exploitable heap-based buffer overflow exists in the handling of TIFF images in LibTIFF's TIFF2PDF tool.LibTiff
- CVE-2016-5684An exploitable out-of-bounds write vulnerability exists in the XMP image handling functionality of the FreeImage library.FreeImage
- CVE-2016-8334A large out-of-bounds read on the heap vulnerability in Foxit PDF Reader can potentially be abused for information disclosure.Foxit Software Foxit Reader