# CVEs published 2017-01-06

53 CVEs were published on January 6, 2017: 2 critical, 1 high. Days are UTC.

- [CVE-2016-9867](https://cve.now/CVE-2016-9867.md): An issue was discovered in EMC ScaleIO versions before 2.0.1.1. (no CVSS, EMC ScaleIO versions before)
- [CVE-2016-9868](https://cve.now/CVE-2016-9868.md): An issue was discovered in EMC ScaleIO versions before 2.0.1.1. (no CVSS, EMC ScaleIO versions before)
- [CVE-2016-9869](https://cve.now/CVE-2016-9869.md): An issue was discovered in EMC ScaleIO versions before 2.0.1.1. (no CVSS, EMC ScaleIO versions before)
- [CVE-2016-9879](https://cve.now/CVE-2016-9879.md): An issue was discovered in Pivotal Spring Security before 3.2.10, 4.1.x before 4.1.4, and 4.2.x before 4.2.1. (no CVSS, Pivotal Spring Security before 3.2.10, 4.1.x before 4.1.4,…)
- [CVE-2016-9885](https://cve.now/CVE-2016-9885.md): An issue was discovered in Pivotal GemFire for PCF 1.6.x versions prior to 1.6.5 and 1.7.x versions prior to 1.7.1. (no CVSS, GemFire for PCF 1.6.x versions prior to 1.6.5 and 1.7.x ver…)
- [CVE-2015-2867](https://cve.now/CVE-2015-2867.md): A design flaw in the Trane ComfortLink II SCC firmware version 2.0.2 service allows remote attackers to take complete control of the system. (no CVSS, Trane ComfortLink II SCC firmware)
- [CVE-2015-2868](https://cve.now/CVE-2015-2868.md): An exploitable remote code execution vulnerability exists in the Trane ComfortLink II firmware version 2.0.2 in DSS service. (no CVSS, Trane ComfortLink II SCC firmware)
- [CVE-2015-7848](https://cve.now/CVE-2015-7848.md): An integer overflow can occur in NTP-dev.4.3.70 leading to an out-of-bounds memory copy operation when processing a specially crafted privat (no CVSS)
- [CVE-2016-1547](https://cve.now/CVE-2016-1547.md): An off-path attacker can cause a preemptible client association to be demobilized in NTP 4.2.8p4 and earlier and NTPSec a5fb34b9cc89b92a8fef (no CVSS, NTP Project NTP · NTPsec Project NTPSec)
- [CVE-2016-1548](https://cve.now/CVE-2016-1548.md): An attacker can spoof a packet from a legitimate ntpd server with an origin timestamp that matches the peer-\>dst timestamp recorded for that (no CVSS, NTP Project NTP · NTPsec Project NTPSec)
- [CVE-2016-1549](https://cve.now/CVE-2016-1549.md): A malicious authenticated peer can create arbitrarily-many ephemeral associations in order to win the clock selection algorithm in ntpd in N (no CVSS, NTP Project NTP · NTPsec Project NTPSec)
- [CVE-2016-1550](https://cve.now/CVE-2016-1550.md): An exploitable vulnerability exists in the message authentication functionality of libntp in ntp 4.2.8p4 and NTPSec a5fb34b9cc89b92a8fef2f45 (no CVSS, NTP Project NTP · NTPsec Project NTPSec)
- [CVE-2016-2336](https://cve.now/CVE-2016-2336.md): Type confusion exists in two methods of Ruby's WIN32OLE class, ole\_invoke and ole\_query\_interface. (no CVSS, Ruby)
- [CVE-2016-2337](https://cve.now/CVE-2016-2337.md): Type confusion exists in \_cancel\_eval Ruby's TclTkIp class method. (no CVSS, Ruby · Tcl/Tk)
- [CVE-2016-2339](https://cve.now/CVE-2016-2339.md): An exploitable heap overflow vulnerability exists in the Fiddle::Function.new "initialize" function functionality of Ruby. (no CVSS, Ruby)
- [CVE-2016-2365](https://cve.now/CVE-2016-2365.md): A denial of service vulnerability exists in the handling of the MXIT protocol in Pidgin. (no CVSS, Pidgin)
- [CVE-2016-2366](https://cve.now/CVE-2016-2366.md): A denial of service vulnerability exists in the handling of the MXIT protocol in Pidgin. (no CVSS, Pidgin)
- [CVE-2016-2367](https://cve.now/CVE-2016-2367.md): An information leak exists in the handling of the MXIT protocol in Pidgin. (no CVSS, Pidgin)
- [CVE-2016-2368](https://cve.now/CVE-2016-2368.md): Multiple memory corruption vulnerabilities exist in the handling of the MXIT protocol in Pidgin. (no CVSS, Pidgin)
- [CVE-2016-2369](https://cve.now/CVE-2016-2369.md): A NULL pointer dereference vulnerability exists in the handling of the MXIT protocol in Pidgin. (no CVSS, Pidgin)
- [CVE-2016-2370](https://cve.now/CVE-2016-2370.md): A denial of service vulnerability exists in the handling of the MXIT protocol in Pidgin. (no CVSS, Pidgin)
- [CVE-2016-2371](https://cve.now/CVE-2016-2371.md): An out-of-bounds write vulnerability exists in the handling of the MXIT protocol in Pidgin. (no CVSS, Pidgin)
- [CVE-2016-2372](https://cve.now/CVE-2016-2372.md): An information leak exists in the handling of the MXIT protocol in Pidgin. (no CVSS, Pidgin)
- [CVE-2016-2373](https://cve.now/CVE-2016-2373.md): A denial of service vulnerability exists in the handling of the MXIT protocol in Pidgin. (no CVSS, Pidgin)
- [CVE-2016-2374](https://cve.now/CVE-2016-2374.md): An exploitable memory corruption vulnerability exists in the handling of the MXIT protocol in Pidgin. (no CVSS, Pidgin)
- [CVE-2016-2375](https://cve.now/CVE-2016-2375.md): An exploitable out-of-bounds read exists in the handling of the MXIT protocol in Pidgin. (no CVSS, Pidgin)
- [CVE-2016-2376](https://cve.now/CVE-2016-2376.md): A buffer overflow vulnerability exists in the handling of the MXIT protocol in Pidgin. (no CVSS, Pidgin)
- [CVE-2016-2377](https://cve.now/CVE-2016-2377.md): A buffer overflow vulnerability exists in the handling of the MXIT protocol in Pidgin. (no CVSS, Pidgin)
- [CVE-2016-2378](https://cve.now/CVE-2016-2378.md): A buffer overflow vulnerability exists in the handling of the MXIT protocol Pidgin. (no CVSS, Pidgin)
- [CVE-2016-2380](https://cve.now/CVE-2016-2380.md): An information leak exists in the handling of the MXIT protocol in Pidgin. (no CVSS, Pidgin)
- [CVE-2016-4288](https://cve.now/CVE-2016-4288.md): A local privilege escalation vulnerability exists in BlueStacks App Player. (no CVSS, BlueStacks App Player)
- [CVE-2016-4290](https://cve.now/CVE-2016-4290.md): When opening a Hangul HShow Document (.hpt) and processing a structure within the document, Hancom Office 2014 will attempt to allocate spac (no CVSS, Hancom Office)
- [CVE-2016-4291](https://cve.now/CVE-2016-4291.md): When opening a Hangul HShow Document (.hpt) and processing a structure within the document, Hancom Office 2014 will use a field from the str (no CVSS, Hancom Office)
- [CVE-2016-4292](https://cve.now/CVE-2016-4292.md): When opening a Hangul HShow Document (.hpt) and processing a structure within the document, Hancom Office 2014 will use a static size to all (no CVSS, Hancom Office)
- [CVE-2016-4294](https://cve.now/CVE-2016-4294.md): When opening a Hangul Hcell Document (.cell) and processing a property record within the Workbook stream, Hancom Office 2014 will attempt to (no CVSS, Hancom Office)
- [CVE-2016-4295](https://cve.now/CVE-2016-4295.md): When opening a Hangul Hcell Document (.cell) and processing a particular record within the Workbook stream, an index miscalculation leading (no CVSS, Hancom Office)
- [CVE-2016-4296](https://cve.now/CVE-2016-4296.md): When opening a Hangul Hcell Document (.cell) and processing a record that uses the CSSValFormat object, Hancom Office 2014 will search for a (no CVSS, Hancom Office)
- [CVE-2016-4298](https://cve.now/CVE-2016-4298.md): When opening a Hangul HShow Document (.hpt) and processing a structure within the document, Hancom Office 2014 will attempt to allocate spac (no CVSS, Hancom)
- [CVE-2016-4304](https://cve.now/CVE-2016-4304.md): A denial of service vulnerability exists in the syscall filtering functionality of the Kaspersky Internet Security KLIF driver. (no CVSS, Kaspersky Internet Security)
- [CVE-2016-4305](https://cve.now/CVE-2016-4305.md): A denial of service vulnerability exists in the syscall filtering functionality of Kaspersky Internet Security KLIF driver. (no CVSS, Kaspersky Internet Security)
- [CVE-2016-4306](https://cve.now/CVE-2016-4306.md): Multiple information leaks exist in various IOCTL handlers of the Kaspersky Internet Security KLDISK driver. (no CVSS, Kaspersky Total Security)
- [CVE-2016-4307](https://cve.now/CVE-2016-4307.md): A denial of service vulnerability exists in the IOCTL handling functionality of Kaspersky Internet Security KL1 driver. (no CVSS, Kaspersky Internet Security)
- [CVE-2016-4323](https://cve.now/CVE-2016-4323.md): A directory traversal exists in the handling of the MXIT protocol in Pidgin. (no CVSS, Pidgin)
- [CVE-2016-4329](https://cve.now/CVE-2016-4329.md): A local denial of service vulnerability exists in window broadcast message handling functionality of Kaspersky Anti-Virus software. (no CVSS, Kaspersky Total Security)
- [CVE-2016-4335](https://cve.now/CVE-2016-4335.md): An exploitable buffer overflow exists in the XLS parsing of the Lexmark Perspective Document Filters conversion functionality. (no CVSS, Lexmark Perceptive Document Filters)
- [CVE-2016-4336](https://cve.now/CVE-2016-4336.md): An exploitable out-of-bounds write exists in the Bzip2 parsing of the Lexmark Perspective Document Filters conversion functionality. (no CVSS, Lexmark Perceptive Document Filters)
- [CVE-2016-5646](https://cve.now/CVE-2016-5646.md): An exploitable heap overflow vulnerability exists in the Compound Binary File Format (CBFF) parser functionality of Lexmark Perceptive Docum (no CVSS, Lexmark Perceptive Document Filters)
- [CVE-2016-5652](https://cve.now/CVE-2016-5652.md): An exploitable heap-based buffer overflow exists in the handling of TIFF images in LibTIFF's TIFF2PDF tool. (no CVSS, LibTiff)
- [CVE-2016-5684](https://cve.now/CVE-2016-5684.md): An exploitable out-of-bounds write vulnerability exists in the XMP image handling functionality of the FreeImage library. (no CVSS, FreeImage)
- [CVE-2016-8334](https://cve.now/CVE-2016-8334.md): A large out-of-bounds read on the heap vulnerability in Foxit PDF Reader can potentially be abused for information disclosure. (CVSS 6.8, Foxit Software Foxit Reader)
- [CVE-2016-8704](https://cve.now/CVE-2016-8704.md): An integer overflow in the process\_bin\_append\_prepend function in Memcached, which is responsible for processing multiple commands of Memcac (CVSS 9.8, Memcached)
- [CVE-2016-8705](https://cve.now/CVE-2016-8705.md): Multiple integer overflows in process\_bin\_update function in Memcached, which is responsible for processing multiple commands of Memcached b (CVSS 9.8, Memcached)
- [CVE-2016-8706](https://cve.now/CVE-2016-8706.md): An integer overflow in process\_bin\_sasl\_auth function in Memcached, which is responsible for authentication commands of Memcached binary pro (CVSS 8.1, Memcached)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2017-01-06
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.