CVE 2017 document archive · 29
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
2,053 documents · Identifier year 2017 · 29 / 42
- CVE-2017-7882libreoffice: Heap-buffer-overflow in HWPFile::TagsRead
- CVE-2017-7870libreoffice: Heap-buffer-overflow in tools::Polygon::Insert
- CVE-2017-7869gnutls: Out-of-bounds write related to the cdk_pkt_read function (GNUTLS-SA-2017-3)
- CVE-2017-7868icu: Heap-buffer overflow in utext_moveIndex32 function
- CVE-2017-7867icu: Heap-buffer overflow in utext_setNativeIndex function
- CVE-2017-7864freetype: heap-based buffer overflow related to the tt_size_reset function
- CVE-2017-7858freetype: out-of-bounds write related to the TT_Get_MM_Var and sfnt_init_face functions
- CVE-2017-7857freetype: heap-based buffer overflow related to the TT_Get_MM_Var function
- CVE-2017-7856libreoffice: Heap-buffer-overflow in SVMConverter::ImplConvertFromSVM1
- CVE-2017-7848Mozilla: RSS Feed vulnerable to new line Injection
- CVE-2017-7847Mozilla: Local path string can be leaked from RSS feed
- CVE-2017-7846Mozilla: JavaScript Execution via RSS in mailbox:// origin
- CVE-2017-7843Mozilla: Web worker in Private Browsing mode can write IndexedDB data
- CVE-2017-7830Mozilla: Cross-origin URL information leak through Resource Timing API (MFSA 2017-25)
- CVE-2017-7829Mozilla: From address with encoded null character is cut off in message header display
- CVE-2017-7828Mozilla: Use-after-free of PressShell while restyling layout (MFSA 2017-25)
- CVE-2017-7826Mozilla: Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5 (MFSA 2017-25)
- CVE-2017-7825Mozilla: OS X fonts render some Tibetan and Arabic unicode characters as spaces (MFSA 2017-22)
- CVE-2017-7824Mozilla: Buffer overflow when drawing and validating elements with ANGLE (MFSA 2017-22)
- CVE-2017-7823Mozilla: CSP sandbox directive did not create a unique origin (MFSA 2017-22)
- CVE-2017-7819Mozilla: Use-after-free while resizing images in design mode (MFSA 2017-22)
- CVE-2017-7818Mozilla: Use-after-free during ARIA array manipulation (MFSA 2017-22)
- CVE-2017-7814Mozilla: Blob and data URLs bypass phishing and malware protection warnings (MFSA 2017-22)
- CVE-2017-7810Mozilla: Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4 (MFSA 2017-22)
- CVE-2017-7809Mozilla: Use-after-free while deleting attached editor DOM node (MFSA 2017-19)
- CVE-2017-7808Mozilla: CSP information leak with frame-ancestors containing paths (MFSA 2017-18)
- CVE-2017-7807Mozilla: Domain hijacking through appcache fallback (MFSA 2017-19)
- CVE-2017-7806Mozilla: Use-after-free in layer manager with SVG (MFSA 2017-18)
- CVE-2017-7805nss: Potential use-after-free in TLS 1.2 server when verifying client authentication
- CVE-2017-7803Mozilla: CSP directives improperly applied with sandbox flag in iframes (MFSA 2017-19)
- CVE-2017-7802Mozilla: Use-after-free resizing image elements (MFSA 2017-19)
- CVE-2017-7801Mozilla: Use-after-free with marquee during window resizing
- CVE-2017-7800Mozilla: Use-after-free in WebSockets during disconnection (MFSA 2017-19)
- CVE-2017-7799Mozilla: Self-XSS XUL injection in about:webrtc (MFSA 2017-18)
- CVE-2017-7798Mozilla: XUL injection in the style editor in devtools (MFSA 2017-19)
- CVE-2017-7797Mozilla: Response header name interning leaks across origins (MFSA 2017-18)
- CVE-2017-7794Mozilla: Linux file truncation via sandbox broker (MFSA 2017-18)
- CVE-2017-7793Mozilla: Use-after-free with Fetch API (MFSA 2017-22)
- CVE-2017-7792Mozilla: Buffer overflow viewing certificates with long OID (MFSA 2017-19)
- CVE-2017-7791Mozilla: Spoofing following page navigation with data: protocol and modal alerts (MFSA 2017-19)
- CVE-2017-7789Mozilla: Failure to enable HSTS when two STS headers are sent for a connection (MFSA 2017-18)
- CVE-2017-7788Mozilla: Sandboxed about:srcdoc frames do not inherit CSP directives (MFSA 2017-18)
- CVE-2017-7787Mozilla: Same-origin policy bypass with iframes through page reloads (MFSA 2017-19)
- CVE-2017-7786Mozilla: Buffer overflow while painting non-displayable SVG (MFSA 2017-19)
- CVE-2017-7785Mozilla: Buffer overflow manipulating ARIA elements in DOM (MFSA 2017-19)
- CVE-2017-7784Mozilla: Use-after-free with image observers (MFSA 2017-19)
- CVE-2017-7783Mozilla: DOS attack through long username in URL (MFSA 2017-18)
- CVE-2017-7781Mozilla: Elliptic curve point addition error when using mixed Jacobian-affine coordinates (MFSA 2017-18)
- CVE-2017-7780Mozilla: Memory safety bugs fixed in Firefox 55 (MFSA 2017-18)
- CVE-2017-7779Mozilla: Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3 (MFSA 2017-19)