CVE Vulnerability Advisory Database

[Affected Scope] Samba versions from 3.5.0 onwards and before 4.6.4, 4.5.10, and 4.4.14

[Impact] An unauthenticated remote attacker can upload a malicious shared library (.so) to a writable share and force the server to load and execute it with root privileges

[Mitigation] Upgrade Samba to the patched versions (4.6.4, 4.5.10, 4.4.14 or later) or add 'nt pipe support = no' to the smb.conf configuration file as a temporary workaround

[Affected Scope] Windows Client/Server and Exchange Server environments running Windows Defender or Forefront with active scanning

[Impact] Memory corruption leading to arbitrary code execution under Local System privileges when scanning a specially crafted file

[Mitigation] Immediately update the Microsoft Malware Protection Engine to version 1.1.13804.0 or higher

[Affected Scope] Adobe ColdFusion 2016 Update 3 and earlier, ColdFusion 11 Update 11 and earlier, and ColdFusion 10 Update 22 and earlier.

[Impact] Unauthenticated remote attackers can execute arbitrary code with system privileges by sending crafted Action Message Format (AMF) payloads.

[Mitigation] Apply the official Adobe security updates (APSB17-14) immediately and restrict external access to AMF gateway endpoints.

[Affected Scope] Artifex Ghostscript versions released through 2017-04-26, and image processing libraries (e.g., ImageMagick) relying on it

[Impact] Remote attackers can bypass the '-dSAFER' sandbox restriction and execute arbitrary system commands via a crafted EPS document

[Mitigation] Immediately upgrade Ghostscript to the patched version or disable PostScript/EPS processing in application policies

[Affected Scope] Google Chrome prior to 57.0.2987.98 for desktop (Windows, macOS, Linux) and prior to 57.0.2987.108 for Android

[Impact] Successful exploitation allows remote attackers to execute arbitrary code within the context of the browser renderer process or bypass sandbox boundaries via a crafted HTML page

[Mitigation] Immediately update Google Chrome to the latest stable channel release (57.0.2987.98 / 108 or higher)

[Affected Scope] Oracle WebLogic Server versions 10.3.6.0, 12.1.3.0, 12.2.1.0, 12.2.1.1, and 12.2.1.2

[Impact] Unauthenticated remote attackers can execute arbitrary OS commands via malicious HTTP POST requests, leading to complete compromise of the WebLogic server

[Mitigation] Apply the official Oracle Critical Patch Update (CPU) immediately, or restrict access to the vulnerable 'wls-wsat' web service context

[Affected Scope] Netgear WN604 (before 3.3.3) and WN802Tv2, WNAP210v2, WNAP320, WNDAP350, WNDAP360, WNDAP660 (before 3.5.5.0)

[Impact] Unauthenticated remote attackers can execute arbitrary system commands with root privileges by sending crafted HTTP requests

[Mitigation] Apply the official firmware updates immediately, or restrict access to the web management interface from untrusted networks

[Affected Scope] Microsoft Office 2007/2010/2013/2016, Windows Vista/7/8.1, and Windows Server 2008

[Impact] Remote attackers can execute arbitrary code with the logged-in user's privileges by enticing a user to open a specially crafted document

[Mitigation] Apply official Microsoft security patches immediately, restrict opening untrusted documents, and disable automatic OLE link updates via registry hardening

[Affected Scope] Apache Tomcat versions before 6.0.48, 7.x before 7.0.73, 8.x before 8.0.39, 8.5.x before 8.5.7, and 9.x before 9.0.0.M12, when JmxRemoteLifecycleListener is enabled

[Impact] Remote attackers with network access to JMX ports can trigger untrusted deserialization without authentication, leading to arbitrary Remote Code Execution (RCE) with system privileges

[Mitigation] Upgrade Apache Tomcat to the latest secure release, or disable JmxRemoteLifecycleListener in server.xml and restrict network access to JMX ports using firewalls

[Affected Scope] Microsoft Internet Information Services (IIS) 6.0 with WebDAV service enabled on Windows Server 2003 R2.

[Impact] Unauthenticated remote attackers can execute arbitrary code with system privileges and fully compromise the host by sending a specially crafted HTTP PROPFIND request.

[Mitigation] Since Windows Server 2003 is End-of-Life (EoL), immediately migrate to a supported OS version or disable the IIS WebDAV service.

[Affected Scope] Cisco IOS and IOS XE-based Catalyst switches and embedded service modules configured to accept Telnet connections and utilizing CMP

[Impact] Unauthenticated, remote attackers can execute arbitrary code with elevated privileges or cause a device reload by sending malformed CMP-specific Telnet options

[Mitigation] Apply official Cisco software updates immediately, or disable Telnet services and restrict VTY access using infrastructure ACLs

[Affected Scope] Microsoft Internet Explorer versions 9 through 11

[Impact] Remote attackers can execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site

[Mitigation] Apply official Microsoft security updates, disable Internet Explorer, and transition to modern browsers like Microsoft Edge

[Affected Scope] Legacy Windows operating systems including Windows Vista, 7, 8.1, 10, and Windows Server 2008, 2012, 2016 with SMBv1 enabled

[Impact] Unauthenticated remote attackers can execute arbitrary code with SYSTEM privileges by sending crafted packets, leading to complete system compromise

[Mitigation] Apply the MS17-010 security patch immediately and completely disable the legacy SMBv1 protocol across the enterprise network

[Affected Scope] Legacy Windows operating systems including Windows Vista, 7, 8.1, 10, and Windows Server 2008, 2012, 2016 with SMBv1 enabled

[Impact] Unauthenticated remote attackers can execute arbitrary code with SYSTEM/kernel privileges by sending specially crafted SMBv1 packets, leading to complete system compromise

[Mitigation] Immediately apply the Microsoft MS17-010 security patch and completely disable the legacy SMBv1 protocol across the enterprise network

[Affected Scope] Legacy and modern Windows operating systems including Windows Vista, 7, 8.1, 10, and Windows Server 2008, 2012, 2016 with SMBv1 enabled.

[Impact] Unauthenticated remote attackers can execute arbitrary code with SYSTEM privileges by sending specially crafted SMBv1 packets, leading to complete system compromise.

[Mitigation] Immediately apply the Microsoft MS17-010 security patch and completely disable the legacy SMBv1 protocol across the enterprise network.

[Affected Scope] Legacy Windows operating systems including Windows Vista, 7, 8.1, 10, and Windows Server 2008, 2012, 2016 with SMBv1 enabled

[Impact] Unauthenticated remote attackers can execute arbitrary code with SYSTEM privileges and gain full control of the target system by sending crafted SMBv1 packets

[Mitigation] Apply the Microsoft MS17-010 security patch immediately and completely disable the legacy SMBv1 protocol across the enterprise network

[Affected Scope] Web applications built on Apache Struts 2.3.x (before 2.3.32) and 2.5.x (before 2.5.10.1)

[Impact] Unauthenticated remote attackers can execute arbitrary OS commands with system privileges via crafted HTTP headers such as Content-Type

[Mitigation] Immediately upgrade Apache Struts to a secure version (2.3.32, 2.5.10.1, or higher) and apply WAF rules to block malicious OGNL payloads

[Affected Scope] All PHP web applications utilizing PHPMailer versions prior to 5.2.18

[Impact] Remote attackers can exploit the vulnerability to execute arbitrary code on the target server by manipulating the Sender (From) field

[Mitigation] Immediately upgrade the PHPMailer library to the latest stable version (5.2.18 or higher)

[Affected Scope] Multiple NETGEAR router models including R6250, R6400, R6700, R6900, R7000, R7100LG, R7300DST, R7900, R8000, D6220, D6400, and D7000

[Impact] Unauthenticated remote attackers can execute arbitrary system commands with root privileges by injecting shell metacharacters into the cgi-bin path info

[Mitigation] Apply the latest official firmware patches provided by the vendor, or temporarily disable the web server as a workaround

[Affected Scope] Adobe Flash Player before 23.0.0.205 on Windows and OS X, and before 11.2.202.643 on Linux

[Impact] Remote attackers can exploit memory corruption to execute arbitrary code with the privileges of the active user

[Mitigation] Since Adobe Flash Player has reached End-of-Life (EOL), it is highly recommended to completely uninstall the software or upgrade to the patched versions