# CVEs published 2017-09-09

14 CVEs were published on September 9, 2017: 0 critical, 0 high. Days are UTC.

- [CVE-2017-14225](https://cve.now/CVE-2017-14225.md): The av\_color\_primaries\_name function in libavutil/pixdesc.c in FFmpeg 3.3.3 may return a NULL pointer depending on a value contained in a fi (no CVSS)
- [CVE-2017-14226](https://cve.now/CVE-2017-14226.md): WP1StylesListener.cpp, WP5StylesListener.cpp, and WP42StylesListener.cpp in libwpd 0.10.1 mishandle iterators, which allows remote attackers (no CVSS)
- [CVE-2017-14227](https://cve.now/CVE-2017-14227.md): In MongoDB libbson 1.7.0, the bson\_iter\_codewscope function in bson-iter.c miscalculates a bson\_utf8\_validate length argument, which allows (no CVSS)
- [CVE-2017-14228](https://cve.now/CVE-2017-14228.md): In Netwide Assembler (NASM) 2.14rc0, there is an illegal address access in the function paste\_tokens() in preproc.c, aka a NULL pointer dere (no CVSS)
- [CVE-2017-14229](https://cve.now/CVE-2017-14229.md): There is an infinite loop in the jpc\_dec\_tileinit function in jpc/jpc\_dec.c of Jasper 2.0.13. (no CVSS)
- [CVE-2017-12699](https://cve.now/CVE-2017-12699.md): An Incorrect Default Permissions issue was discovered in AzeoTech DAQFactory versions prior to 17.1. (no CVSS, AzeoTech DAQFactory)
- [CVE-2017-12731](https://cve.now/CVE-2017-12731.md): A SQL Injection issue was discovered in OPW Fuel Management Systems SiteSentinel Integra 100, SiteSentinel Integra 500, and SiteSentinel iSi (no CVSS, OPW Fuel Management Systems SiteSentinel Integra and SiteSe…)
- [CVE-2017-12733](https://cve.now/CVE-2017-12733.md): A Missing Authentication for Critical Function issue was discovered in OPW Fuel Management Systems SiteSentinel Integra 100, SiteSentinel In (no CVSS, OPW Fuel Management Systems SiteSentinel Integra and SiteSe…)
- [CVE-2017-14222](https://cve.now/CVE-2017-14222.md): In libavformat/mov.c in FFmpeg 3.3.3, a DoS in read\_tfra() due to lack of an EOF (End of File) check might cause huge CPU and memory consump (no CVSS)
- [CVE-2017-14223](https://cve.now/CVE-2017-14223.md): In libavformat/asfdec\_f.c in FFmpeg 3.3.3, a DoS in asf\_build\_simple\_index() due to lack of an EOF (End of File) check might cause huge CPU (no CVSS)
- [CVE-2017-14224](https://cve.now/CVE-2017-14224.md): A heap-based buffer overflow in WritePCXImage in coders/pcx.c in ImageMagick 7.0.6-8 Q16 allows remote attackers to cause a denial of servic (no CVSS)
- [CVE-2017-5147](https://cve.now/CVE-2017-5147.md): An Uncontrolled Search Path Element issue was discovered in AzeoTech DAQFactory versions prior to 17.1. (no CVSS, AzeoTech DAQFactory)
- [CVE-2017-8040](https://cve.now/CVE-2017-8040.md): In Single Sign-On for Pivotal Cloud Foundry (PCF) 1.3.x versions prior to 1.3.4 and 1.4.x versions prior to 1.4.3, an XXE (XML External Enti (no CVSS, PCF Single Sign-On for PCF:1.3.x versions prior to 1.3.4, 1…)
- [CVE-2017-8041](https://cve.now/CVE-2017-8041.md): In Single Sign-On for Pivotal Cloud Foundry (PCF) 1.3.x versions prior to 1.3.4 and 1.4.x versions prior to 1.4.3, a user can execute a XSS (no CVSS, PCF Single Sign-On for PCF:1.3.x versions prior to 1.3.4, 1…)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2017-09-09
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.