# CVEs published 2017-02-15

92 CVEs were published on February 15, 2017: 0 critical, 0 high. Days are UTC.

- [CVE-2017-0308](https://cve.now/CVE-2017-0308.md): All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape (no CVSS, Nvidia Windows GPU Display Driver)
- [CVE-2017-0309](https://cve.now/CVE-2017-0309.md): All versions of NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer handler where multiple integer overflows may caus (no CVSS, Nvidia GPU Display Driver)
- [CVE-2017-0310](https://cve.now/CVE-2017-0310.md): All versions of NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer handler where improper access controls allowing u (no CVSS, Nvidia GPU Display Driver)
- [CVE-2017-0311](https://cve.now/CVE-2017-0311.md): NVIDIA GPU Display Driver R378 contains a vulnerability in the kernel mode layer handler where improper access control may lead to denial of (no CVSS, Nvidia GPU Display Driver)
- [CVE-2017-0312](https://cve.now/CVE-2017-0312.md): All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscapeI (no CVSS, Nvidia Windows GPU Display Driver)
- [CVE-2017-0313](https://cve.now/CVE-2017-0313.md): All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) implementation of the Subm (no CVSS, Nvidia Windows GPU Display Driver)
- [CVE-2017-0314](https://cve.now/CVE-2017-0314.md): All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) implementation of the Subm (no CVSS, Nvidia Windows GPU Display Driver)
- [CVE-2017-0315](https://cve.now/CVE-2017-0315.md): All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape (no CVSS, Nvidia Windows GPU Display Driver)
- [CVE-2017-0317](https://cve.now/CVE-2017-0317.md): All versions of NVIDIA GPU and GeForce Experience installer contain a vulnerability where it fails to set proper permissions on the package (no CVSS, Nvidia Windows GPU Display Driver)
- [CVE-2017-0318](https://cve.now/CVE-2017-0318.md): All versions of NVIDIA Linux GPU Display Driver contain a vulnerability in the kernel mode layer handler where improper validation of an inp (no CVSS, Nvidia Linux GPU Display Driver)
- [CVE-2017-0319](https://cve.now/CVE-2017-0319.md): All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer handler where improper handling of values (no CVSS, Nvidia Windows GPU Display Driver)
- [CVE-2017-0320](https://cve.now/CVE-2017-0320.md): All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer handler where improper handling of values (no CVSS, Nvidia Windows GPU Display Driver)
- [CVE-2017-0321](https://cve.now/CVE-2017-0321.md): All versions of NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer handler where a NULL pointer dereference caused b (no CVSS, Nvidia GPU Display Driver)
- [CVE-2017-0322](https://cve.now/CVE-2017-0322.md): All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler where a value pass (no CVSS, Nvidia Windows GPU Display Driver)
- [CVE-2017-0323](https://cve.now/CVE-2017-0323.md): All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer handler where a NULL pointer dereference (no CVSS, Nvidia GPU Display Driver)
- [CVE-2017-0324](https://cve.now/CVE-2017-0324.md): All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape (no CVSS, Nvidia Windows GPU Display Driver)
- [CVE-2016-7392](https://cve.now/CVE-2016-7392.md): Heap-based buffer overflow in the pstoedit\_suffix\_table\_init function in output-pstoedit.c in AutoTrace 0.31.1 allows remote attackers to ca (no CVSS)
- [CVE-2016-7393](https://cve.now/CVE-2016-7393.md): Stack-based buffer overflow in the aac\_sync function in aac\_parser.c in Libav before 11.5 allows remote attackers to cause a denial of servi (no CVSS)
- [CVE-2016-7477](https://cve.now/CVE-2016-7477.md): The ff\_put\_pixels8\_xy2\_mmx function in rnd\_template.c in Libav 11.7 allows remote attackers to cause a denial of service (invalid memory acc (no CVSS)
- [CVE-2016-7499](https://cve.now/CVE-2016-7499.md): The sbr\_make\_f\_master function in aacsbr.c in Libav 11.7 allows remote attackers to cause a denial of service (divide-by-zero error and appl (no CVSS)
- [CVE-2016-8674](https://cve.now/CVE-2016-8674.md): The pdf\_to\_num function in pdf-object.c in MuPDF before 1.10 allows remote attackers to cause a denial of service (use-after-free and applic (no CVSS)
- [CVE-2016-8675](https://cve.now/CVE-2016-8675.md): The get\_vlc2 function in get\_bits.h in Libav before 11.9 allows remote attackers to cause a denial of service (NULL pointer dereference and (no CVSS)
- [CVE-2016-8676](https://cve.now/CVE-2016-8676.md): The get\_vlc2 function in get\_bits.h in Libav 11.9 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) (no CVSS)
- [CVE-2016-8677](https://cve.now/CVE-2016-8677.md): The AcquireQuantumPixels function in MagickCore/quantum.c in ImageMagick before 7.0.3-1 allows remote attackers to have unspecified impact v (no CVSS)
- [CVE-2016-8678](https://cve.now/CVE-2016-8678.md): The IsPixelMonochrome function in MagickCore/pixel-accessor.h in ImageMagick 7.0.3.0 allows remote attackers to cause a denial of service (o (no CVSS)
- [CVE-2016-8679](https://cve.now/CVE-2016-8679.md): The \_dwarf\_get\_size\_of\_val function in libdwarf/dwarf\_util.c in Libdwarf before 20161124 allows remote attackers to cause a denial of servic (no CVSS)
- [CVE-2016-8680](https://cve.now/CVE-2016-8680.md): The \_dwarf\_get\_abbrev\_for\_code function in dwarf\_util.c in libdwarf 20161001 and earlier allows remote attackers to cause a denial of servic (no CVSS)
- [CVE-2016-8681](https://cve.now/CVE-2016-8681.md): The \_dwarf\_get\_abbrev\_for\_code function in dwarf\_util.c in libdwarf 20161001 and earlier allows remote attackers to cause a denial of servic (no CVSS)
- [CVE-2017-3801](https://cve.now/CVE-2017-3801.md): A vulnerability in the web-based GUI of Cisco UCS Director 6.0.0.0 and 6.0.0.1 could allow an authenticated, local attacker to execute arbit (no CVSS, Cisco UCS Director versions 6.0.0.0 and)
- [CVE-2016-0360](https://cve.now/CVE-2016-0360.md): IBM Websphere MQ JMS 7.0.1, 7.1, 7.5, 8.0, and 9.0 client provides classes that deserialize objects from untrusted sources which could allow (no CVSS, IBM WebSphere MQ)
- [CVE-2016-3694](https://cve.now/CVE-2016-3694.md): Multiple SQL injection vulnerabilities in modified eCommerce Shopsoftware 2.0.0.0 revision 9678, when the easybill-module is not installed, (no CVSS)
- [CVE-2016-6033](https://cve.now/CVE-2016-6033.md): IBM Tivoli Storage Manager for Virtual Environments 7.1 (VMware) is vulnerable to cross-site request forgery which could allow an attacker t (no CVSS, IBM Tivoli Storage Manager for Virtual Environments)
- [CVE-2016-6060](https://cve.now/CVE-2016-6060.md): An undisclosed vulnerability in IBM Rational DOORS Next Generation 4.0, 5.0, and 6.0 could allow a JazzGuest user to see project names. (no CVSS, IBM Rational DOORS Next Generation)
- [CVE-2016-6077](https://cve.now/CVE-2016-6077.md): IBM Cognos Disclosure Management 10.2 could allow a malicious attacker to execute commands as a lower privileged user that opens a malicious (no CVSS, IBM Cognos Disclosure Management)
- [CVE-2016-6079](https://cve.now/CVE-2016-6079.md): IBM AIX 5.3, 6.1, 7.1, and 7.2 contains an unspecified vulnerability that would allow a locally authenticated user to obtain root level priv (no CVSS, IBM AIX)
- [CVE-2016-6832](https://cve.now/CVE-2016-6832.md): Heap-based buffer overflow in the ff\_audio\_resample function in resample.c in libav before 11.4 allows remote attackers to cause a denial of (no CVSS)
- [CVE-2016-6866](https://cve.now/CVE-2016-6866.md): slock allows attackers to bypass the screen lock via vectors involving an invalid password hash, which triggers a NULL pointer dereference a (no CVSS)
- [CVE-2016-8682](https://cve.now/CVE-2016-8682.md): The ReadSCTImage function in coders/sct.c in GraphicsMagick 1.3.25 allows remote attackers to cause a denial of service (out-of-bounds read) (no CVSS)
- [CVE-2016-8683](https://cve.now/CVE-2016-8683.md): The ReadPCXImage function in coders/pcx.c in GraphicsMagick 1.3.25 allows remote attackers to have unspecified impact via a crafted image, w (no CVSS)
- [CVE-2016-8684](https://cve.now/CVE-2016-8684.md): The MagickMalloc function in magick/memory.c in GraphicsMagick 1.3.25 allows remote attackers to have unspecified impact via a crafted image (no CVSS)
- [CVE-2016-8687](https://cve.now/CVE-2016-8687.md): Stack-based buffer overflow in the safe\_fprintf function in tar/util.c in libarchive 3.2.1 allows remote attackers to cause a denial of serv (no CVSS)
- [CVE-2016-8688](https://cve.now/CVE-2016-8688.md): The mtree bidder in libarchive 3.2.1 does not keep track of line sizes when extending the read-ahead, which allows remote attackers to cause (no CVSS)
- [CVE-2016-8689](https://cve.now/CVE-2016-8689.md): The read\_Header function in archive\_read\_support\_format\_7zip.c in libarchive 3.2.1 allows remote attackers to cause a denial of service (out (no CVSS)
- [CVE-2016-8690](https://cve.now/CVE-2016-8690.md): The bmp\_getdata function in libjasper/bmp/bmp\_dec.c in JasPer before 1.900.5 allows remote attackers to cause a denial of service (NULL poin (no CVSS)
- [CVE-2016-8691](https://cve.now/CVE-2016-8691.md): The jpc\_dec\_process\_siz function in libjasper/jpc/jpc\_dec.c in JasPer before 1.900.4 allows remote attackers to cause a denial of service (d (no CVSS)
- [CVE-2016-8692](https://cve.now/CVE-2016-8692.md): The jpc\_dec\_process\_siz function in libjasper/jpc/jpc\_dec.c in JasPer before 1.900.4 allows remote attackers to cause a denial of service (d (no CVSS)
- [CVE-2016-8693](https://cve.now/CVE-2016-8693.md): Double free vulnerability in the mem\_close function in jas\_stream.c in JasPer before 1.900.10 allows remote attackers to cause a denial of s (no CVSS)
- [CVE-2016-8862](https://cve.now/CVE-2016-8862.md): The AcquireMagickMemory function in MagickCore/memory.c in ImageMagick before 7.0.3.3 allows remote attackers to have unspecified impact via (no CVSS)
- [CVE-2016-8866](https://cve.now/CVE-2016-8866.md): The AcquireMagickMemory function in MagickCore/memory.c in ImageMagick 7.0.3.3 before 7.0.3.8 allows remote attackers to have unspecified im (no CVSS)
- [CVE-2016-8944](https://cve.now/CVE-2016-8944.md): IBM AIX 7.1 and 7.2 allows a local user to open a file with a specially crafted argument that would crash the system. (no CVSS, IBM AIX)
- [CVE-2016-8968](https://cve.now/CVE-2016-8968.md): IBM Jazz Foundation is vulnerable to cross-site scripting. (no CVSS, IBM Rational Collaborative Lifecycle Management)
- [CVE-2016-8972](https://cve.now/CVE-2016-8972.md): IBM AIX 6.1, 7.1, and 7.2 could allow a local user to gain root privileges using a specially crafted command within the bellmail client. (no CVSS, IBM AIX)
- [CVE-2016-9010](https://cve.now/CVE-2016-9010.md): IBM WebSphere Message Broker 9.0 and 10.0 could allow a remote attacker to hijack the clicking action of the victim. (no CVSS, IBM Integration Bus)
- [CVE-2016-9560](https://cve.now/CVE-2016-9560.md): Stack-based buffer overflow in the jpc\_tsfb\_getbands2 function in jpc\_tsfb.c in JasPer before 1.900.30 allows remote attackers to have unspe (no CVSS)
- [CVE-2016-9706](https://cve.now/CVE-2016-9706.md): IBM Integration Bus 9.0 and 10.0 and WebSphere Message Broker SOAP FLOWS is vulnerable to a denial of service, caused by an XML External Ent (no CVSS, IBM Integration Bus)
- [CVE-2017-5896](https://cve.now/CVE-2017-5896.md): Heap-based buffer overflow in the fz\_subsample\_pixmap function in fitz/pixmap.c in MuPDF 1.10a allows remote attackers to cause a denial of (no CVSS)
- [CVE-2017-5992](https://cve.now/CVE-2017-5992.md): Openpyxl 2.4.1 resolves external entities by default, which allows remote attackers to conduct XXE attacks via a crafted .xlsx document. (no CVSS, openpyxl)
- [CVE-2017-5997](https://cve.now/CVE-2017-5997.md): The SAP Message Server HTTP daemon in SAP KERNEL 7.21-7.49 allows remote attackers to cause a denial of service (memory consumption and proc (no CVSS)
- [CVE-2013-7459](https://cve.now/CVE-2013-7459.md): Heap-based buffer overflow in the ALGnew function in block\_templace.c in Python Cryptography Toolkit (aka pycrypto) allows remote attackers (no CVSS, pycrypto)
- [CVE-2015-8979](https://cve.now/CVE-2015-8979.md): Stack-based buffer overflow in the parsePresentationContext function in storescp in DICOM dcmtk-3.6.0 and earlier allows remote attackers to (no CVSS)
- [CVE-2016-10089](https://cve.now/CVE-2016-10089.md): Nagios 4.3.2 and earlier allows local users to gain root privileges via a hard link attack on the Nagios init script file, related to CVE-20 (no CVSS)
- [CVE-2016-1880](https://cve.now/CVE-2016-1880.md): The Linux compatibility layer in the kernel in FreeBSD 9.3, 10.1, and 10.2 allows local users to read portions of kernel memory and potentia (no CVSS)
- [CVE-2016-1881](https://cve.now/CVE-2016-1881.md): The kernel in FreeBSD 9.3, 10.1, and 10.2 allows local users to cause a denial of service (crash) or potentially gain privilege via a crafte (no CVSS)
- [CVE-2016-1883](https://cve.now/CVE-2016-1883.md): The issetugid system call in the Linux compatibility layer in FreeBSD 9.3, 10.1, and 10.2 allows local users to gain privilege via unspecifi (no CVSS)
- [CVE-2016-1888](https://cve.now/CVE-2016-1888.md): The telnetd service in FreeBSD 9.3, 10.1, 10.2, 10.3, and 11.0 allows remote attackers to inject arguments to login and bypass authenticatio (no CVSS)
- [CVE-2016-1889](https://cve.now/CVE-2016-1889.md): Integer overflow in the bhyve hypervisor in FreeBSD 10.1, 10.2, 10.3, and 11.0 when configured with a large amount of guest memory, allows l (no CVSS)
- [CVE-2017-2968](https://cve.now/CVE-2017-2968.md): Adobe Campaign versions 16.4 Build 8724 and earlier have a code injection vulnerability. (no CVSS, Adobe Campaign 16.4 Build 8724 and earlier.)
- [CVE-2017-2969](https://cve.now/CVE-2017-2969.md): Adobe Campaign versions 16.4 Build 8724 and earlier have a cross-site scripting (XSS) vulnerability. (no CVSS, Adobe Campaign 16.4 Build 8724 and earlier.)
- [CVE-2017-2973](https://cve.now/CVE-2017-2973.md): Adobe Digital Editions versions 4.5.3 and earlier have an exploitable heap overflow vulnerability. (no CVSS, Adobe Digital Editions 4.5.3 and earlier.)
- [CVE-2017-2974](https://cve.now/CVE-2017-2974.md): Adobe Digital Editions versions 4.5.3 and earlier have an exploitable buffer over-read vulnerability. (no CVSS, Adobe Digital Editions 4.5.3 and earlier.)
- [CVE-2017-2975](https://cve.now/CVE-2017-2975.md): Adobe Digital Editions versions 4.5.3 and earlier have an exploitable buffer over-read vulnerability. (no CVSS, Adobe Digital Editions 4.5.3 and earlier.)
- [CVE-2017-2976](https://cve.now/CVE-2017-2976.md): Adobe Digital Editions versions 4.5.3 and earlier have an exploitable buffer over-read vulnerability. (no CVSS, Adobe Digital Editions 4.5.3 and earlier.)
- [CVE-2017-2977](https://cve.now/CVE-2017-2977.md): Adobe Digital Editions versions 4.5.3 and earlier have an exploitable buffer over-read vulnerability. (no CVSS, Adobe Digital Editions 4.5.3 and earlier.)
- [CVE-2017-2978](https://cve.now/CVE-2017-2978.md): Adobe Digital Editions versions 4.5.3 and earlier have an exploitable buffer over-read vulnerability. (no CVSS, Adobe Digital Editions 4.5.3 and earlier.)
- [CVE-2017-2979](https://cve.now/CVE-2017-2979.md): Adobe Digital Editions versions 4.5.3 and earlier have an exploitable buffer over-read vulnerability. (no CVSS, Adobe Digital Editions 4.5.3 and earlier.)
- [CVE-2017-2980](https://cve.now/CVE-2017-2980.md): Adobe Digital Editions versions 4.5.3 and earlier have an exploitable buffer over-read vulnerability. (no CVSS, Adobe Digital Editions 4.5.3 and earlier.)
- [CVE-2017-2981](https://cve.now/CVE-2017-2981.md): Adobe Digital Editions versions 4.5.3 and earlier have an exploitable buffer over-read vulnerability. (no CVSS, Adobe Digital Editions 4.5.3 and earlier.)
- [CVE-2017-2982](https://cve.now/CVE-2017-2982.md): Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable use after free vulnerability in a routine related to player shutdown. (no CVSS, Adobe Flash Player 24.0.0.194 and earlier.)
- [CVE-2017-2984](https://cve.now/CVE-2017-2984.md): Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable heap overflow vulnerability in the h264 decoder routine. (no CVSS, Adobe Flash Player 24.0.0.194 and earlier.)
- [CVE-2017-2985](https://cve.now/CVE-2017-2985.md): Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable use after free vulnerability in the ActionScript 3 BitmapData class. (no CVSS, Adobe Flash Player 24.0.0.194 and earlier.)
- [CVE-2017-2986](https://cve.now/CVE-2017-2986.md): Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable heap overflow vulnerability in the Flash Video (FLV) codec. (no CVSS, Adobe Flash Player 24.0.0.194 and earlier.)
- [CVE-2017-2987](https://cve.now/CVE-2017-2987.md): Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable integer overflow vulnerability related to Flash Broker COM. (no CVSS, Adobe Flash Player 24.0.0.194 and earlier.)
- [CVE-2017-2988](https://cve.now/CVE-2017-2988.md): Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability when performing garbage collection. (no CVSS, Adobe Flash Player 24.0.0.194 and earlier.)
- [CVE-2017-2990](https://cve.now/CVE-2017-2990.md): Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability in the h264 decompression routine. (no CVSS, Adobe Flash Player 24.0.0.194 and earlier.)
- [CVE-2017-2991](https://cve.now/CVE-2017-2991.md): Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability in the h264 codec (related to decompr (no CVSS, Adobe Flash Player 24.0.0.194 and earlier.)
- [CVE-2017-2992](https://cve.now/CVE-2017-2992.md): Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable heap overflow vulnerability when parsing an MP4 header. (no CVSS, Adobe Flash Player 24.0.0.194 and earlier.)
- [CVE-2017-2993](https://cve.now/CVE-2017-2993.md): Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable use after free vulnerability related to event handlers. (no CVSS, Adobe Flash Player 24.0.0.194 and earlier.)
- [CVE-2017-2994](https://cve.now/CVE-2017-2994.md): Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable use after free vulnerability in Primetime SDK event dispatch. (no CVSS, Adobe Flash Player 24.0.0.194 and earlier.)
- [CVE-2017-2995](https://cve.now/CVE-2017-2995.md): Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable type confusion vulnerability related to the MessageChannel class. (no CVSS, Adobe Flash Player 24.0.0.194 and earlier.)
- [CVE-2017-2996](https://cve.now/CVE-2017-2996.md): Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability in Primetime SDK. (no CVSS, Adobe Flash Player 24.0.0.194 and earlier.)
- [CVE-2017-5990](https://cve.now/CVE-2017-5990.md): An issue was discovered in PhreeBooksERP before 2017-02-13. (no CVSS)
- [CVE-2017-5991](https://cve.now/CVE-2017-5991.md): An issue was discovered in Artifex MuPDF before 1912de5f08e90af1d9d0a9791f58ba3afdb9d465. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2017-02-15
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.