# CVEs published 2017-01-24

10 CVEs were published on January 24, 2017: 0 critical, 0 high. Days are UTC.

- [CVE-2016-10158](https://cve.now/CVE-2016-10158.md): The exif\_convert\_any\_to\_int function in ext/exif/exif.c in PHP before 5.6.30, 7.0.x before 7.0.15, and 7.1.x before 7.1.1 allows remote atta (no CVSS)
- [CVE-2016-10159](https://cve.now/CVE-2016-10159.md): Integer overflow in the phar\_parse\_pharfile function in ext/phar/phar.c in PHP before 5.6.30 and 7.0.x before 7.0.15 allows remote attackers (no CVSS)
- [CVE-2016-10160](https://cve.now/CVE-2016-10160.md): Off-by-one error in the phar\_parse\_pharfile function in ext/phar/phar.c in PHP before 5.6.30 and 7.0.x before 7.0.15 allows remote attackers (no CVSS)
- [CVE-2016-10161](https://cve.now/CVE-2016-10161.md): The object\_common1 function in ext/standard/var\_unserializer.c in PHP before 5.6.30, 7.0.x before 7.0.15, and 7.1.x before 7.1.1 allows remo (no CVSS)
- [CVE-2016-10162](https://cve.now/CVE-2016-10162.md): The php\_wddx\_pop\_element function in ext/wddx/wddx.c in PHP 7.0.x before 7.0.15 and 7.1.x before 7.1.1 allows remote attackers to cause a de (no CVSS)
- [CVE-2017-2929](https://cve.now/CVE-2017-2929.md): Adobe Acrobat Chrome extension version 15.1.0.3 and earlier have a DOM-based cross-site scripting vulnerability. (no CVSS, Adobe Acrobat Extension for Chrome)
- [CVE-2017-2970](https://cve.now/CVE-2017-2970.md): Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable heap overflow vuln (no CVSS, Adobe Acrobat Reader 15.020.20042 and earlier, 15.006.30244…)
- [CVE-2017-2971](https://cve.now/CVE-2017-2971.md): Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable heap overflow vuln (no CVSS, Adobe Acrobat Reader 15.020.20042 and earlier, 15.006.30244…)
- [CVE-2017-2972](https://cve.now/CVE-2017-2972.md): Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable memory corruption (no CVSS, Adobe Acrobat Reader 15.020.20042 and earlier, 15.006.30244…)
- [CVE-2017-5495](https://cve.now/CVE-2017-5495.md): All versions of Quagga, 0.93 through 1.1.0, are vulnerable to an unbounded memory allocation in the telnet 'vty' CLI, leading to a Denial-of (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2017-01-24
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.