Get Even More Visitors To Your Blog, Upgrade To A Business Listing >>

Vulnerabilities: CVEs, Hashes, Application Installers Report February 12-19, 2018

The OPSWAT Metadefender Vulnerability Engine identifies known application vulnerabilities and reports them by severity level. The Vulnerability Engine allows system administrators to identify vulnerabilities in files and data being brought into a secure network and on endpoints within a network, significantly expediting remediation of the issue.

Common Vulnerabilities and Exposures (CVE) is a catalog of publicly known cyber security vulnerabilities that's sponsored by the United States Department of Homeland Security. The first table below lists the new CVEs and product versions for which support was added to the Metadefender database during the week of February 12 - February 19, 2018. The second table lists the hashes and application installers for which support was added.

Newly Supported CVEs and Product Versions as of February 19, 2018

PRODUCT VENDOR VERSION CVE CVE DETAILS CVSS SCORE
Microsoft Edge Microsoft Corporation NONE and prior CVE-2018-0770 https://metadefender.opswat.com/vulnerabilities#!/CVE-2018-0770 7.6

Newly Supported Hashes as of February 19, 2018

HASH CVES
E541261D7F6BAAF03EB4C8EA8D967DCB18FD271F CVE-2017-5059, CVE-2017-5058, CVE-2017-5057, CVE-2017-5056, CVE-2017-5055, ...
5CC1B261AAD9F666CFBE357DC4FBFFC2C76FE9AE CVE-2017-5059, CVE-2017-5058, CVE-2017-5057, CVE-2017-5056, CVE-2017-5055, ...
510839229B6034A35791B5E3E6C1EF7DB9FFE8E3 CVE-2016-1949
79DB1DEABE53166694C359AD82ED335E2034AC12 CVE-2018-0845
4CC6F0E6BB0840F2C1E684BC3C0A342FD4DE26AE CVE-2018-0845
66369766ACAE6A5D80BCE9480D3FFEC5062D0859 CVE-2016-0012, CVE-2015-2503
80BF032A46F23EC5C2A6DBDBC579B4935AE7F217 CVE-2017-17670
D25741A1CDE74F8F1507AFEB38FA32062244071B CVE-2014-3443
334D86A42237BBF8E6CFD79816513E3DD54F1D29 CVE-2017-11930, CVE-2017-11919, CVE-2017-11913, CVE-2017-11912, CVE-2017-11907, ...
68B7C23204C6D49B16EBB970C4DBCCCF56361F1A CVE-2017-11930, CVE-2017-11919, CVE-2017-11913, CVE-2017-11912, CVE-2017-11907, ...
4BF1C4E0D8389FE9067A5735C71540508F218312 CVE-2017-11930, CVE-2017-11919, CVE-2017-11913, CVE-2017-11912, CVE-2017-11907, ...
8E9CBD8EDD1B979DC7B0FE3C7FE3B4967DFACA6F CVE-2011-1845, CVE-2011-1844, CVE-2010-1898, CVE-2010-0019
F3C6612821BE12CC793B61A7FA8A99A5FA500552 CVE-2018-0791, CVE-2017-11774, CVE-2017-0204, CVE-2017-0106, CVE-2016-3366, ...
99F2CB8EC8E66380834DB22BED4D5EB8C2043775 CVE-2015-8104, CVE-2015-5307, CVE-2015-4896, CVE-2015-4856, CVE-2015-4813, ...
D78829D0C4BEF9134B3F41D8948E65FBD4B78202 CVE-2015-8104, CVE-2015-5307, CVE-2015-4896, CVE-2015-4856, CVE-2015-4813, ...
1C6126F47979C0C56A7F848988163E6A52210EC7 CVE-2015-8104, CVE-2015-5307, CVE-2015-4896, CVE-2015-4856, CVE-2015-4813, ...
0736F3F7C45E88FBE096FF2AA477FC3E6713C8A5 CVE-2017-12608, CVE-2017-12607, CVE-2014-3575, CVE-2014-3524
36282E6C6AFB83798D84CF422431962DD0C8145A CVE-2018-0845
ADE47DDA833678CF7F0D6925903F7266F06FF7F3 CVE-2018-0845
6547DA9C02093224A9C097B0427F97AE1833C309 CVE-2018-0845
83723ECEC930EF13D9CC54809D477A481C997F06 CVE-2018-0845
2922DF1842F9820B303DE89322EF163830FDECCE CVE-2018-0845
50B782EB15333989C7E707C677373FF65FB63648 CVE-2018-0845
1B4E4711033016E4DBC125934B7AA03754823089 CVE-2018-0845
ED1BD7A5AEB9AE8B3EFAD5D7DC552BDEB6FF25E7 CVE-2018-0845
3C935715BF251C9A360897E145D16C04D74F39F6 CVE-2018-0845
85A5AF899A6ECB37E605626FF75888647AFEC214 CVE-2018-0845
C600239D27E3E7CE1719F80E508885C929781EC2 CVE-2018-0845
BCE16A01AA8E2C7456FF000669C8528B2AAFC2AE CVE-2018-0845
2B4C0976DDF25DC1242835286549308925806BC1 CVE-2018-0845
384F0A970CCA2473AF70D6501679F45EA54E3AE5 CVE-2018-0845
1D4D5DE2AE074D86EE405AE06AF32B8C3319973F CVE-2018-0845
C5C1692927EA2C1813FB82B6DCF1968ECF69DD37 CVE-2018-0845
E6DEFE0C830313EDE04BFE5DCE7BAF562244E07E CVE-2018-0845
B3344B093925B8080D13CE1BB5E525AEFC200158 CVE-2018-0845
CC26F3A65980465B883A574F8CA042FE2B4E90EA CVE-2018-0845
34622623DAA70767A440922922B68CF70E01A789 CVE-2018-0845
9867418BF3143CBC6D6476D77F3E025C6E0C7D7B CVE-2018-0845
585229209ECC5879136935394B92F57BEC5A976A CVE-2018-0845
7847A18D3195B1D4ACC1831D3CD5619DF3C234A1 CVE-2018-0845
C1CE4928A7DA7C72CBD7EDF25DA6900AA6C2008F CVE-2018-0845
19ECF54AFBCE2EBFDB3D9D9DEE69B4BE5AE4FD44 CVE-2018-0845
298C12907148592A624A0CDB42F52337E1522E2D CVE-2018-0845
B9221AAB55F6742C4310DCD69A44BCCEAD87F302 CVE-2018-0845
9BAAC73CD028E5A63EE83D9E20A13C062620DD64 CVE-2018-0845
8CB0263F5C15F75D5BDB336E4DE8493081A6B02B CVE-2018-0845
B82D74186B651CF000333479D0FAC9668AFADC29 CVE-2018-0845
4BD673F4FFF94ACAF5DEE98340BD48037F28082C CVE-2018-0845
CFE2DC1237BF4377CC635652164E895784CE9A30 CVE-2018-0845

Download full list

CVEs
Vulnerability Engine
Vulnerabilities
JS: 
var stIsIE = /*@cc_on!@*/false; sorttable = { init: function() { // quit if this function has already been called if (arguments.callee.done) return; // flag this function so we don't do the same thing twice arguments.callee.done = true; // kill the timer if (_timer) clearInterval(_timer); if (!document.createElement || !document.getElementsByTagName) return; sorttable.DATE_RE = /^(\d\d?)[\/\.-](\d\d?)[\/\.-]((\d\d)?\d\d)$/; forEach(document.getElementsByTagName('table'), function(table) { if (table.className.search(/\bsortable\b/) != -1) { sorttable.makeSortable(table); } }); }, makeSortable: function(table) { if (table.getElementsByTagName('thead').length == 0) { // table doesn't have a tHead. Since it should have, create one and // put the first table row in it. the = document.createElement('thead'); the.appendChild(table.rows[0]); table.insertBefore(the,table.firstChild); } // Safari doesn't support table.tHead, sigh if (table.tHead == null) table.tHead = table.getElementsByTagName('thead')[0]; if (table.tHead.rows.length != 1) return; // can't cope with two header rows // Sorttable v1 put rows with a class of "sortbottom" at the bottom (as // "total" rows, for example). This is B&R, since what you're supposed // to do is put them in a tfoot. So, if there are sortbottom rows, // for backwards compatibility, move them to tfoot (creating it if needed). sortbottomrows = []; for (var i=0; i5' : ' ▴'; this.appendChild(sortrevind); return; } if (this.className.search(/\bsorttable_sorted_reverse\b/) != -1) { // if we're already sorted by this column in reverse, just // re-reverse the table, which is quicker sorttable.reverse(this.sorttable_tbody); this.className = this.className.replace('sorttable_sorted_reverse', 'sorttable_sorted'); this.removeChild(document.getElementById('sorttable_sortrevind')); sortfwdind = document.createElement('span'); sortfwdind.id = "sorttable_sortfwdind"; sortfwdind.innerHTML = stIsIE ? '&nbsp6' : ' ▾'; this.appendChild(sortfwdind); return; } // remove sorttable_sorted classes theadrow = this.parentNode; forEach(theadrow.childNodes, function(cell) { if (cell.nodeType == 1) { // an element cell.className = cell.className.replace('sorttable_sorted_reverse',''); cell.className = cell.className.replace('sorttable_sorted',''); } }); sortfwdind = document.getElementById('sorttable_sortfwdind'); if (sortfwdind) { sortfwdind.parentNode.removeChild(sortfwdind); } sortrevind = document.getElementById('sorttable_sortrevind'); if (sortrevind) { sortrevind.parentNode.removeChild(sortrevind); } this.className += ' sorttable_sorted'; sortfwdind = document.createElement('span'); sortfwdind.id = "sorttable_sortfwdind"; sortfwdind.innerHTML = stIsIE ? '&nbsp6' : ' ▾'; this.appendChild(sortfwdind); // build an array to sort. This is a Schwartzian transform thing, // i.e., we "decorate" each row with the actual sort key, // sort based on the sort keys, and then put the rows back in order // which is a lot faster because you only do getInnerText once per row row_array = []; col = this.sorttable_columnindex; rows = this.sorttable_tbody.rows; for (var j=0; j 12) { // definitely dd/mm return sorttable.sort_ddmm; } else if (second > 12) { return sorttable.sort_mmdd; } else { // looks like a date, but we can't tell which, so assume // that it's dd/mm (English imperialism!) and keep looking sortfn = sorttable.sort_ddmm; } } } } return sortfn; }, getInnerText: function(node) { // gets the text we want to use for sorting for a cell. // strips leading and trailing whitespace. // this is *not* a generic getInnerText function; it's special to sorttable. // for example, you can override the cell text with a customkey attribute. // it also gets .value for fields. if (!node) return ""; hasInputs = (typeof node.getElementsByTagName == 'function') && node.getElementsByTagName('input').length; if (node.getAttribute("sorttable_customkey") != null) { return node.getAttribute("sorttable_customkey"); } else if (typeof node.textContent != 'undefined' && !hasInputs) { return node.textContent.replace(/^\s+|\s+$/g, ''); } else if (typeof node.innerText != 'undefined' && !hasInputs) { return node.innerText.replace(/^\s+|\s+$/g, ''); } else if (typeof node.text != 'undefined' && !hasInputs) { return node.text.replace(/^\s+|\s+$/g, ''); } else { switch (node.nodeType) { case 3: if (node.nodeName.toLowerCase() == 'input') { return node.value.replace(/^\s+|\s+$/g, ''); } case 4: return node.nodeValue.replace(/^\s+|\s+$/g, ''); break; case 1: case 11: var innerText = ''; for (var i = 0; i =0; i--) { tbody.appendChild(newrows[i]); } delete newrows; }, /* sort functions each sort function takes two parameters, a and b you are comparing a[0] and b[0] */ sort_numeric: function(a,b) { aa = parseFloat(a[0].replace(/[^0-9.-]/g,'')); if (isNaN(aa)) aa = 0; bb = parseFloat(b[0].replace(/[^0-9.-]/g,'')); if (isNaN(bb)) bb = 0; return aa-bb; }, sort_alpha: function(a,b) { if (a[0]==b[0]) return 0; if (a[0] 0 ) { var q = list[i]; list[i] = list[i+1]; list[i+1] = q; swap = true; } } // for t--; if (!swap) break; for(var i = t; i > b; --i) { if ( comp_func(list[i], list[i-1]) "); var script = document.getElementById("__ie_onload"); script.onreadystatechange = function() { if (this.readyState == "complete") { sorttable.init(); // call the onload handler } }; /*@end @*/ /* for Safari */ if (/WebKit/i.test(navigator.userAgent)) { // sniff var _timer = setInterval(function() { if (/loaded|complete/.test(document.readyState)) { sorttable.init(); // call the onload handler } }, 10); } /* for other browsers */ window.onload = sorttable.init; // written by Dean Edwards, 2005 // with input from Tino Zijdel, Matthias Miller, Diego Perini // http://dean.edwards.name/weblog/2005/10/add-event/ function dean_addEvent(element, type, handler) { if (element.addEventListener) { element.addEventListener(type, handler, false); } else { // assign each event handler a unique ID if (!handler.$$guid) handler.$$guid = dean_addEvent.guid++; // create a hash table of event types for the element if (!element.events) element.events = {}; // create a hash table of event handlers for each element/event pair var handlers = element.events[type]; if (!handlers) { handlers = element.events[type] = {}; // store the existing event handler (if there is one) if (element["on" + type]) { handlers[0] = element["on" + type]; } } // store the event handler in the hash table handlers[handler.$$guid] = handler; // assign a global event handler to do all the work element["on" + type] = handleEvent; } }; // a counter used to create unique IDs dean_addEvent.guid = 1; function removeEvent(element, type, handler) { if (element.removeEventListener) { element.removeEventListener(type, handler, false); } else { // delete the event handler from the hash table if (element.events && element.events[type]) { delete element.events[type][handler.$$guid]; } } }; function handleEvent(event) { var returnValue = true; // grab the event object (IE uses a global event object) event = event || fixEvent(((this.ownerDocument || this.document || this).parentWindow || window).event); // get a reference to the hash table of event handlers var handlers = this.events[event.type]; // execute each event handler for (var i in handlers) { this.$$handleEvent = handlers[i]; if (this.$$handleEvent(event) === false) { returnValue = false; } } return returnValue; }; function fixEvent(event) { // add W3C standard event methods event.preventDefault = fixEvent.preventDefault; event.stopPropagation = fixEvent.stopPropagation; return event; }; fixEvent.preventDefault = function() { this.returnValue = false; }; fixEvent.stopPropagation = function() { this.cancelBubble = true; } // Dean's forEach: http://dean.edwards.name/base/forEach.js /* forEach, version 1.0 Copyright 2006, Dean Edwards License: http://www.opensource.org/licenses/mit-license.php */ // array-like enumeration if (!Array.forEach) { // mozilla already supports this Array.forEach = function(array, block, context) { for (var i = 0; i


This post first appeared on OPSWAT, please read the originial post: here

Share the post

Vulnerabilities: CVEs, Hashes, Application Installers Report February 12-19, 2018

×

Subscribe to Opswat

Get updates delivered right to your inbox!

Thank you for your subscription

×