[Forgot Password]
Login  Register Subscribe

30430

 
 

423868

 
 

247862

 
 

909

 
 

194603

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2016-9085Date: (C)2017-02-07   (M)2023-12-22


Multiple integer overflows in libwebp allows attackers to have unspecified impact via unknown vectors.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V3 Severity:CVSS V2 Severity:
CVSS Score : 3.3CVSS Score : 2.1
Exploit Score: 1.8Exploit Score: 3.9
Impact Score: 1.4Impact Score: 2.9
 
CVSS V3 Metrics:CVSS V2 Metrics:
Attack Vector: LOCALAccess Vector: LOCAL
Attack Complexity: LOWAccess Complexity: LOW
Privileges Required: LOWAuthentication: NONE
User Interaction: NONEConfidentiality: NONE
Scope: UNCHANGEDIntegrity: NONE
Confidentiality: NONEAvailability: PARTIAL
Integrity: NONE 
Availability: LOW 
  
Reference:
BID-93928
FEDORA-2016-00d2f5c19f
FEDORA-2016-160ec6525e
FEDORA-2016-26ef59f03d
GLSA-201701-61
https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E
http://www.openwall.com/lists/oss-security/2016/10/27/3
https://bugzilla.redhat.com/show_bug.cgi?id=1389338
https://chromium.googlesource.com/webm/libwebp/+/e2affacc35f1df6cc3b1a9fa0ceff5ce2d0cce83

CPE    2
cpe:/o:fedoraproject:fedora:24
cpe:/a:webmproject:libwebp
CWE    1
CWE-190
OVAL    4
oval:org.secpod.oval:def:111566
oval:org.secpod.oval:def:111602
oval:org.secpod.oval:def:2000298
oval:org.secpod.oval:def:1901042
...

© SecPod Technologies