CVE-2017-1000164

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

Tine 2.0 version 2017.02.4 is vulnerable to XSS in the Addressbook resulting code execution and privilege escalation

Metrics

CVSS 3.0 5.4/10CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Nov 17, 2017
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2017

CVE-2017-10001686.5sodiumoxide 0.0.13 and older scalarmult() vulnerable to degenerate public keysCVE-2017-10001699.8QuickerBB version <= 0.7.2 is vulnerable to arbitrary file writes which can lead to remote code execution. This can lead to the complete takCVE-2017-10001707.5jqueryFileTree 2.1.5 and older Directory TraversalCVE-2017-10001719.8Mahara Mobile before 1.2.1 is vulnerable to passwords being sent to the Mahara access log in plain text.CVE-2017-10001729.8Creolabs Gravity Version: 1.0 Use-After-Free Possible code execution. An example of a Heap-Use-After-Free after the 'sublexer' pointer has bCVE-2017-10001739.8Creolabs Gravity Version: 1.0 Heap Overflow Potential Code Execution. By creating a large loop whiling pushing data to a buffer, we can breaCVE-2017-10001745.5In SWFTools, an address access exception was found in swfdump swf_GetBits().CVE-2017-10001765.5In SWFTools, a memcpy buffer overflow was found in swfc.CVE-2017-10001825.5In SWFTools, a memory leak was found in wav2swf.CVE-2017-10001855.5In SWFTools, a memcpy buffer overflow was found in gif2swf.CVE-2017-10001865.5In SWFTools, a stack overflow was found in pdf2swf.CVE-2017-10001877.8In SWFTools, an address access exception was found in pdf2swf. FoFiTrueType::writeTTF()
CVE-2017-1000164: Medium severity, CVSS 5.4 | Vulnix