# CVEs published 2017-02-24 34 CVEs were published on February 24, 2017: 0 critical, 3 high. Days are UTC. - [CVE-2017-2789](https://cve.now/CVE-2017-2789.md): When copying filedata into a buffer, JustSystems Ichitaro Office 2016 Trial will calculate two values to determine how much data to copy fro (CVSS 8.8, JustSystems Ichitaro) - [CVE-2017-2790](https://cve.now/CVE-2017-2790.md): When processing a record type of 0x3c from a Workbook stream from an Excel file (.xls), JustSystems Ichitaro Office trusts that the size is (CVSS 8.8, JustSystems Ichitaro) - [CVE-2017-2791](https://cve.now/CVE-2017-2791.md): JustSystems Ichitaro 2016 Trial contains a vulnerability that exists when trying to open a specially crafted PowerPoint file. (CVSS 7.5, JustSystems Ichitaro) - [CVE-2016-2226](https://cve.now/CVE-2016-2226.md): Integer overflow in the string\_appends function in cplus-dem.c in libiberty allows remote attackers to execute arbitrary code via a crafted (no CVSS) - [CVE-2016-4041](https://cve.now/CVE-2016-4041.md): Plone 4.0 through 5.1a1 does not have security declarations for Dexterity content-related WebDAV requests, which allows remote attackers to (no CVSS, plone) - [CVE-2016-4042](https://cve.now/CVE-2016-4042.md): Plone 3.3 through 5.1a1 allows remote attackers to obtain information about the ID of sensitive content via unspecified vectors. (no CVSS, plone) - [CVE-2016-4043](https://cve.now/CVE-2016-4043.md): Chameleon (five.pt) in Plone 5.0rc1 through 5.1a1 allows remote authenticated users to bypass Restricted Python by leveraging permissions to (no CVSS, plone) - [CVE-2016-4487](https://cve.now/CVE-2016-4487.md): Use-after-free vulnerability in libiberty allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted (no CVSS) - [CVE-2016-4488](https://cve.now/CVE-2016-4488.md): Use-after-free vulnerability in libiberty allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted (no CVSS) - [CVE-2016-4489](https://cve.now/CVE-2016-4489.md): Integer overflow in the gnu\_special function in libiberty allows remote attackers to cause a denial of service (segmentation fault and crash (no CVSS) - [CVE-2016-4490](https://cve.now/CVE-2016-4490.md): Integer overflow in cp-demangle.c in libiberty allows remote attackers to cause a denial of service (segmentation fault and crash) via a cra (no CVSS) - [CVE-2016-4491](https://cve.now/CVE-2016-4491.md): The d\_print\_comp function in cp-demangle.c in libiberty allows remote attackers to cause a denial of service (segmentation fault and crash) (no CVSS) - [CVE-2016-4492](https://cve.now/CVE-2016-4492.md): Buffer overflow in the do\_type function in cplus-dem.c in libiberty allows remote attackers to cause a denial of service (segmentation fault (no CVSS) - [CVE-2016-4493](https://cve.now/CVE-2016-4493.md): The demangle\_template\_value\_parm and do\_hpacc\_template\_literal functions in cplus-dem.c in libiberty allow remote attackers to cause a denia (no CVSS) - [CVE-2016-5027](https://cve.now/CVE-2016-5027.md): dwarf\_form.c in libdwarf 20160115 allows remote attackers to cause a denial of service (crash) via a crafted elf file. (no CVSS) - [CVE-2016-8998](https://cve.now/CVE-2016-8998.md): IBM Tivoli Storage Manager Server 7.1 could allow an authenticated user with TSM administrator privileges to cause a buffer overflow using a (no CVSS, IBM Tivoli Storage Manager) - [CVE-2016-9009](https://cve.now/CVE-2016-9009.md): IBM WebSphere MQ 8.0 could allow an authenticated user with authority to create a cluster object to cause a denial of service to MQ clusteri (no CVSS, IBM WebSphere MQ) - [CVE-2016-9975](https://cve.now/CVE-2016-9975.md): IBM Jazz for Service Management 1.1.2.1 and 1.1.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malic (no CVSS, IBM Jazz for Service Management) - [CVE-2017-5669](https://cve.now/CVE-2017-5669.md): The do\_shmat function in ipc/shm.c in the Linux kernel through 4.9.12 does not restrict the address calculated by a certain rounding operati (no CVSS) - [CVE-2017-6196](https://cve.now/CVE-2017-6196.md): Multiple use-after-free vulnerabilities in the gx\_image\_enum\_begin function in base/gxipixel.c in Ghostscript before ecceafe3abba2714ef9b432 (no CVSS) - [CVE-2017-6197](https://cve.now/CVE-2017-6197.md): The r\_read\_\* functions in libr/include/r\_endian.h in radare2 1.2.1 allow remote attackers to cause a denial of service (NULL pointer derefer (no CVSS) - [CVE-2017-6298](https://cve.now/CVE-2017-6298.md): An issue was discovered in ytnef before 1.9.1. (no CVSS) - [CVE-2017-6299](https://cve.now/CVE-2017-6299.md): An issue was discovered in ytnef before 1.9.1. (no CVSS) - [CVE-2017-6300](https://cve.now/CVE-2017-6300.md): An issue was discovered in ytnef before 1.9.1. (no CVSS) - [CVE-2017-6301](https://cve.now/CVE-2017-6301.md): An issue was discovered in ytnef before 1.9.1. (no CVSS) - [CVE-2017-6302](https://cve.now/CVE-2017-6302.md): An issue was discovered in ytnef before 1.9.1. (no CVSS) - [CVE-2017-6303](https://cve.now/CVE-2017-6303.md): An issue was discovered in ytnef before 1.9.1. (no CVSS) - [CVE-2017-6304](https://cve.now/CVE-2017-6304.md): An issue was discovered in ytnef before 1.9.1. (no CVSS) - [CVE-2017-6305](https://cve.now/CVE-2017-6305.md): An issue was discovered in ytnef before 1.9.1. (no CVSS) - [CVE-2017-6306](https://cve.now/CVE-2017-6306.md): An issue was discovered in ytnef before 1.9.1. (no CVSS) - [CVE-2017-6307](https://cve.now/CVE-2017-6307.md): An issue was discovered in tnef before 1.4.13. (no CVSS) - [CVE-2017-6308](https://cve.now/CVE-2017-6308.md): An issue was discovered in tnef before 1.4.13. (no CVSS) - [CVE-2017-6309](https://cve.now/CVE-2017-6309.md): An issue was discovered in tnef before 1.4.13. (no CVSS) - [CVE-2017-6310](https://cve.now/CVE-2017-6310.md): An issue was discovered in tnef before 1.4.13. (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2017-02-24 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.