# CVEs published 2018-02-04

6 CVEs were published on February 4, 2018: 0 critical, 0 high. Days are UTC.

- [CVE-2018-6616](https://cve.now/CVE-2018-6616.md): In OpenJPEG 2.3.0, there is excessive iteration in the opj\_t1\_encode\_cblks function of openjp2/t1.c. (no CVSS)
- [CVE-2018-6612](https://cve.now/CVE-2018-6612.md): An integer underflow bug in the process\_EXIF function of the exif.c file of jhead 3.00 raises a heap-based buffer over-read when processing (no CVSS)
- [CVE-2018-6611](https://cve.now/CVE-2018-6611.md): soundlib/Load\_stp.cpp in OpenMPT through 1.27.04.00, and libopenmpt before 0.3.6, has an out-of-bounds read via a malformed STP file. (no CVSS)
- [CVE-2017-17703](https://cve.now/CVE-2017-17703.md): Synacor Zimbra Collaboration Suite (ZCS) before 8.8.3 has Persistent XSS. (no CVSS)
- [CVE-2017-8783](https://cve.now/CVE-2017-8783.md): Synacor Zimbra Collaboration Suite (ZCS) before 8.7.10 has Persistent XSS. (no CVSS)
- [CVE-2018-6606](https://cve.now/CVE-2018-6606.md): An issue was discovered in MalwareFox AntiMalware 2.74.0.150. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2018-02-04
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.