Anusha64/LoanDataSet huggingface dataset:
Explain CVE-2011-1778
Buffer overflow in libarchive through 2.8.5 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted TAR archive.
Affected Products: n/a
References: [{'name': '48034', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48034'}, {'name': 'RHSA-2011:1507', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://rhn.redhat.com/errata/RHSA-2011-1507.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=705849'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/libarchive/source/detail?r=3160'}, {'name': 'DSA-2413', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2012/dsa-2413'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT5281'}, {'name': 'APPLE-SA-2012-05-09-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2012/May/msg00001.html'}]
CVE State: PUBLISHED
Explain CVE-2011-1779
Multiple use-after-free vulnerabilities in libarchive 2.8.4 and 2.8.5 allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted (1) TAR archive or (2) ISO9660 image.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/libarchive/source/detail?r=3038'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=705849'}]
CVE State: PUBLISHED
Explain CVE-2011-1780
The instruction emulation in Xen 3.0.3 allows local SMP guest users to cause a denial of service (host crash) by replacing the instruction that causes the VM to exit in one thread with a different instruction in a different thread.
Affected Products: n/a
References: [{'name': 'RHSA-2011:1065', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2011-1065.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=702657'}, {'name': '[oss-security] 20110707 CVE-2011-1780, CVE-2011-1936, kernel/xen issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2011/07/07/3'}, {'name': 'RHSA-2011:1163', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2011-1163.html'}]
CVE State: PUBLISHED
Explain CVE-2011-1781
SystemTap 1.4, when unprivileged (aka stapusr) mode is enabled, allows local users to cause a denial of service (divide-by-zero error and OOPS) via a crafted ELF program with DWARF expressions that are not properly handled by a stap script that performs stack unwinding (aka backtracing).
Affected Products: n/a
References: [{'name': '44802', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44802'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=702687'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceware.org/git/?p=systemtap.git%3Ba=commit%3Bh=fa2e3415185a28542d419a641ecd6cddd52e3cd9'}, {'name': '47934', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47934'}, {'name': 'MDVSA-2011:155', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2011:155'}, {'name': 'RHSA-2011:0842', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://rhn.redhat.com/errata/RHSA-2011-0842.html'}, {'name': '[oss-security] 20110520 systemtap divide-by-zero issues (CVE-2011-1769, CVE-2011-1781)', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/05/20/2'}]
CVE State: PUBLISHED
Explain CVE-2011-1782
Heap-based buffer overflow in the read_channel_data function in file-psp.c in the Paint Shop Pro (PSP) plugin in GIMP 2.6.11 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a PSP_COMP_RLE (aka RLE compression) image file that begins a long run count at the end of the image.  NOTE: some of these details are obtained from third party information.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-4543.
Affected Products: n/a
References: [{'name': 'DSA-2426', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2012/dsa-2426'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=704512'}, {'name': '48236', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48236'}, {'name': 'MDVSA-2011:103', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2011:103'}]
CVE State: PUBLISHED
Explain CVE-2011-1783
The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x and 1.6.x before 1.6.17, when the SVNPathAuthz short_circuit option is enabled, allows remote attackers to cause a denial of service (infinite loop and memory consumption) in opportunistic circumstances by requesting data.
Affected Products: n/a
References: [{'name': 'DSA-2251', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2011/dsa-2251'}, {'name': 'USN-1144-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1144-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT5130'}, {'name': 'MDVSA-2011:106', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2011:106'}, {'name': '44849', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44849'}, {'name': 'RHSA-2011:0862', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2011-0862.html'}, {'name': 'FEDORA-2011-8341', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062211.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://subversion.apache.org/security/CVE-2011-1783-advisory.txt'}, {'name': 'oval:org.mitre.oval:def:18889', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18889'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=709112'}, {'name': '44888', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44888'}, {'name': 'APPLE-SA-2012-02-01-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html'}, {'name': '45162', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/45162'}, {'name': '1025618', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025618'}, {'name': '44681', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44681'}, {'name': '48091', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/48091'}, {'name': 'FEDORA-2011-8352', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061913.html'}, {'name': '44633', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44633'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://svn.apache.org/repos/asf/subversion/tags/1.6.17/CHANGES'}]
CVE State: PUBLISHED
Explain CVE-2011-1784
The pidfile_write function in core/pidfile.c in keepalived 1.2.2 and earlier uses 0666 permissions for the (1) keepalived.pid, (2) checkers.pid, and (3) vrrp.pid files in /var/run/, which allows local users to kill arbitrary processes by writing a PID to one of these files.
Affected Products: n/a
References: [{'name': 'keepalived-pid-dos(67477)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/67477'}, {'name': '[debian-security] 20110511 Re: World writable pid and lock files.', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.debian.org/debian-security/2011/05/msg00018.html'}, {'name': '[debian-security] 20110510 World writable pid and lock files.', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.debian.org/debian-security/2011/05/msg00012.html'}, {'name': '[oss-security] 20110510 CVE request: keepalived pid file permissions issue', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/05/10/5'}, {'name': '47859', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47859'}, {'name': '72380', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/72380'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=626281'}, {'name': '44460', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44460'}, {'name': '[oss-security] 20110516 Re: CVE request: keepalived pid file permissions issue', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/05/16/7'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=704039'}, {'name': '[debian-security] 20110510 Re: World writable pid and lock files.', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.debian.org/debian-security/2011/05/msg00013.html'}]
CVE State: PUBLISHED
Explain CVE-2011-1785
VMware ESXi 4.0 and 4.1 and ESX 4.0 and 4.1 allow remote attackers to cause a denial of service (socket exhaustion) via unspecified network traffic.
Affected Products: n/a
References: [{'name': '1025452', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1025452'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://kb.vmware.com/kb/1035108'}, {'name': 'oval:org.mitre.oval:def:13242', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13242'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.vmware.com/security/advisories/VMSA-2011-0007.html'}, {'name': '47627', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47627'}, {'name': 'vmware-esxserver-socket-dos(67195)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/67195'}, {'name': '72118', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/72118'}, {'name': '[security-announce] 20110428 VMSA-2011-0007 VMware ESXi and ESX Denial of Service and third party updates for Likewise components and ESX Service Console', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.vmware.com/pipermail/security-announce/2011/000133.html'}, {'name': '20110428 VMSA-2011-0007 VMware ESXi and ESX Denial of Service and third party updates for Likewise components and ESX Service Console', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/517739/100/0/threaded'}, {'name': '8240', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/8240'}]
CVE State: PUBLISHED
Explain CVE-2011-1786
lsassd in Likewise Open /Enterprise 5.3 before build 7845, Open 6.0 before build 8325, and Enterprise 6.0 before build 178, as distributed in VMware ESXi 4.1 and ESX 4.1 and possibly other products, allows remote attackers to cause a denial of service (daemon crash) via an Active Directory login attempt that provides a username containing an invalid byte sequence.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.likewise.com/community/index.php/forums/viewannounce/1104_27/'}, {'name': '1025452', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1025452'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://kb.vmware.com/kb/1035108'}, {'name': '44349', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44349'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.vmware.com/security/advisories/VMSA-2011-0007.html'}, {'name': 'likewise-lsaad-dos(67194)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/67194'}, {'name': '[security-announce] 20110428 VMSA-2011-0007 VMware ESXi and ESX Denial of Service and third party updates for Likewise components and ESX Service Console', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.vmware.com/pipermail/security-announce/2011/000133.html'}, {'name': '47625', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47625'}, {'name': '20110428 VMSA-2011-0007 VMware ESXi and ESX Denial of Service and third party updates for Likewise components and ESX Service Console', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/517739/100/0/threaded'}, {'name': '8240', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/8240'}]
CVE State: PUBLISHED
Explain CVE-2011-1787
Race condition in mount.vmhgfs in the VMware Host Guest File System (HGFS) in VMware Workstation 7.1.x before 7.1.4, VMware Player 3.1.x before 3.1.4, VMware Fusion 3.1.x before 3.1.3, VMware ESXi 3.5 through 4.1, and VMware ESX 3.0.3 through 4.1 allows guest OS users to gain privileges on the guest OS by mounting a filesystem on top of an arbitrary directory.
Affected Products: n/a
References: [{'name': '44904', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44904'}, {'name': '48098', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/48098'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.vmware.com/security/advisories/VMSA-2011-0009.html'}, {'name': '44840', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44840'}, {'name': '1025601', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025601'}, {'name': 'openSUSE-SU-2011:0617', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'https://hermes.opensuse.org/messages/8711677'}]
CVE State: PUBLISHED
Explain CVE-2011-1788
vCenter Server in VMware vCenter 4.0 before Update 3 and 4.1 before Update 1 allows local users to discover the SOAP session ID via unspecified vectors.
Affected Products: n/a
References: [{'name': '47742', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47742'}, {'name': '[security-announce] 20110505 VMSA-2011-0008 VMware vCenter Server and vSphere Client security vulnerabilities', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.vmware.com/pipermail/security-announce/2011/000137.html'}, {'name': 'vcenter-soapid-info-disclosure(67304)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/67304'}, {'name': '72179', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/72179'}, {'name': '1025502', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1025502'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.vmware.com/security/advisories/VMSA-2011-0008.html'}]
CVE State: PUBLISHED
Explain CVE-2011-1789
The self-extracting installer in the vSphere Client Installer package in VMware vCenter 4.0 before Update 3 and 4.1 before Update 1, VMware ESXi 4.x before 4.1 Update 1, and VMware ESX 4.x before 4.1 Update 1 does not have a digital signature, which might make it easier for remote attackers to spoof the software distribution via a Trojan horse installer.
Affected Products: n/a
References: [{'name': '[security-announce] 20110505 VMSA-2011-0008 VMware vCenter Server and vSphere Client security vulnerabilities', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.vmware.com/pipermail/security-announce/2011/000137.html'}, {'name': '1025502', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1025502'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.vmware.com/security/advisories/VMSA-2011-0008.html'}]
CVE State: PUBLISHED
Explain CVE-2011-1793
rendering/svg/RenderSVGResourceFilter.cpp in WebCore in WebKit in Google Chrome before 11.0.696.65 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted SVG document that leads to a "stale pointer."
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://trac.webkit.org/changeset/85406'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://crbug.com/67923'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://launchpad.net/bugs/778822'}]
CVE State: PUBLISHED
Explain CVE-2011-1794
Integer overflow in the FilterEffect::copyImageBytes function in platform/graphics/filters/FilterEffect.cpp in the SVG filter implementation in WebCore in WebKit in Google Chrome before 11.0.696.65 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via crafted dimensions.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://crbug.com/78327'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://trac.webkit.org/changeset/84422'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://launchpad.net/bugs/778822'}]
CVE State: PUBLISHED
Explain CVE-2011-1795
Integer underflow in the HTMLFormElement::removeFormElement function in html/HTMLFormElement.cpp in WebCore in WebKit in Google Chrome before 11.0.696.65 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted HTML document containing a FORM element.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://trac.webkit.org/changeset/83690'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://crbug.com/78948'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://launchpad.net/bugs/778822'}]
CVE State: PUBLISHED
Explain CVE-2011-1796
Use-after-free vulnerability in the FrameView::calculateScrollbarModesForLayout function in page/FrameView.cpp in WebCore in WebKit in Google Chrome before 11.0.696.65 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via crafted JavaScript code that calls the removeChild method during interaction with a FRAME element.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://trac.webkit.org/changeset/84300'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://crbug.com/79055'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://launchpad.net/bugs/778822'}]
CVE State: PUBLISHED
Explain CVE-2011-1797
WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2011-07-20-1.
Affected Products: n/a
References: [{'name': 'DSA-2245', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2011/dsa-2245'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT4981'}, {'name': 'APPLE-SA-2011-10-12-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html'}, {'name': 'APPLE-SA-2011-10-11-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://trac.webkit.org/changeset/85355'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://crbug.com/79075'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT4999'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://trac.webkit.org/changeset/86781'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT4808'}, {'name': 'APPLE-SA-2011-07-20-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2011//Jul/msg00002.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://launchpad.net/bugs/778822'}]
CVE State: PUBLISHED
Explain CVE-2011-1798
rendering/svg/RenderSVGText.cpp in WebCore in WebKit in Google Chrome before 11.0.696.65 does not properly perform a cast of an unspecified variable during an attempt to handle a block child, which allows remote attackers to cause a denial of service (application crash) or possibly have unknown other impact via a crafted text element in an SVG document.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://crbug.com/79595'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://trac.webkit.org/changeset/84085'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://launchpad.net/bugs/778822'}]
CVE State: PUBLISHED
Explain CVE-2011-1799
Google Chrome before 11.0.696.68 does not properly perform casts of variables during interaction with the WebKit engine, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
Affected Products: n/a
References: [{'name': 'DSA-2245', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2011/dsa-2245'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2011/05/stable-channel-update.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/chromium/issues/detail?id=64046'}, {'name': 'oval:org.mitre.oval:def:14029', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14029'}]
CVE State: PUBLISHED
Explain CVE-2011-1800
Multiple integer overflows in the SVG Filters implementation in WebCore in WebKit in Google Chrome before 11.0.696.68 allow remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/chromium/issues/detail?id=80608'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://codereview.chromium.org/6949013'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://trac.webkit.org/changeset/85996'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2011/05/stable-channel-update.html'}, {'name': 'oval:org.mitre.oval:def:14187', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14187'}]
CVE State: PUBLISHED
Explain CVE-2011-1801
Unspecified vulnerability in Google Chrome before 11.0.696.71 allows remote attackers to bypass the pop-up blocker via unknown vectors.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/chromium/issues/detail?id=72189'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2011/05/stable-channel-update_24.html'}, {'name': 'oval:org.mitre.oval:def:14474', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14474'}, {'name': '47966', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47966'}]
CVE State: PUBLISHED
Explain CVE-2011-1802
WebKit in Google Chrome before Blink M11 and M12 does not properly handle counter nodes, which allows remote attackers to cause a denial of service (memory corruption).
Affected Products: Chrome
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://bugs.chromium.org/p/chromium/issues/detail?id=78572'}, {'tags': ['x_refsource_MISC'], 'url': 'http://trac.webkit.org/changeset/86358'}]
CVE State: PUBLISHED
Explain CVE-2011-1803
An issue exists in third_party/WebKit/Source/WebCore/svg/animation/SVGSMILElement.h in WebKit in Google Chrome before Blink M11 and M12 when trying to access a removed smil element.
Affected Products: Chrome
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://bugs.chromium.org/p/chromium/issues/detail?id=82516'}, {'tags': ['x_refsource_MISC'], 'url': 'http://trac.webkit.org/changeset/86748'}]
CVE State: PUBLISHED
Explain CVE-2011-1804
rendering/RenderBox.cpp in WebCore in WebKit before r86862, as used in Google Chrome before 11.0.696.71, does not properly render floats, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2011/05/stable-channel-update_24.html'}, {'name': 'oval:org.mitre.oval:def:13992', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13992'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://trac.webkit.org/changeset/86862'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/chromium/issues/detail?id=82546'}, {'name': '47965', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47965'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://codereview.chromium.org/7050016'}]
CVE State: PUBLISHED
Explain CVE-2011-1806
Google Chrome before 11.0.696.71 does not properly implement the GPU command buffer, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2011/05/stable-channel-update_24.html'}, {'name': '47964', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47964'}, {'name': 'oval:org.mitre.oval:def:14389', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14389'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/chromium/issues/detail?id=82873'}]
CVE State: PUBLISHED
Explain CVE-2011-1807
Google Chrome before 11.0.696.71 does not properly handle blobs, which allows remote attackers to execute arbitrary code via unspecified vectors that trigger an out-of-bounds write.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/chromium/issues/detail?id=82903'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2011/05/stable-channel-update_24.html'}, {'name': 'oval:org.mitre.oval:def:14471', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14471'}, {'name': '47963', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47963'}]
CVE State: PUBLISHED
Explain CVE-2011-1808
Use-after-free vulnerability in Google Chrome before 12.0.742.91 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to incorrect integer calculations during float handling.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/chromium/issues/detail?id=73962'}, {'name': '44829', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44829'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/chromium/issues/detail?id=79746'}, {'name': 'oval:org.mitre.oval:def:14659', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14659'}, {'name': 'chrome-float-handling-code-exec(67891)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/67891'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2011/06/chrome-stable-release.html'}, {'name': '72778', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/72778'}, {'name': '48129', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/48129'}]
CVE State: PUBLISHED
Explain CVE-2011-1809
Use-after-free vulnerability in the accessibility feature in Google Chrome before 12.0.742.91 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
Affected Products: n/a
References: [{'name': 'oval:org.mitre.oval:def:14692', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14692'}, {'name': '44829', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44829'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/chromium/issues/detail?id=75496'}, {'name': '72779', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/72779'}, {'name': 'chrome-support-code-execution(67892)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/67892'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2011/06/chrome-stable-release.html'}, {'name': '48129', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/48129'}]
CVE State: PUBLISHED
Explain CVE-2011-1810
The Cascading Style Sheets (CSS) implementation in Google Chrome before 12.0.742.91 does not properly restrict access to the visit history, which allows remote attackers to obtain sensitive information via unspecified vectors.
Affected Products: n/a
References: [{'name': '44829', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44829'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/chromium/issues/detail?id=75643'}, {'name': '72780', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/72780'}, {'name': 'oval:org.mitre.oval:def:14433', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14433'}, {'name': 'chrome-css-info-disclosure(67893)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/67893'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2011/06/chrome-stable-release.html'}, {'name': '48129', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/48129'}]
CVE State: PUBLISHED
Explain CVE-2011-1811
Google Chrome before 12.0.742.91 does not properly handle a large number of form submissions, which allows remote attackers to cause a denial of service (application crash) via unspecified vectors.
Affected Products: n/a
References: [{'name': 'oval:org.mitre.oval:def:14620', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14620'}, {'name': '44829', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44829'}, {'name': 'chrome-submissions-dos(67894)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/67894'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2011/06/chrome-stable-release.html'}, {'name': '72781', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/72781'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/chromium/issues/detail?id=76034'}, {'name': '48129', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/48129'}]
CVE State: PUBLISHED
Explain CVE-2011-1812
Google Chrome before 12.0.742.91 allows remote attackers to bypass intended access restrictions via vectors related to extensions.
Affected Products: n/a
References: [{'name': '44829', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44829'}, {'name': 'chrome-extensions-sec-bypas(67895)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/67895'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/chromium/issues/detail?id=77026'}, {'name': 'oval:org.mitre.oval:def:14546', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14546'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2011/06/chrome-stable-release.html'}, {'name': '48129', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/48129'}, {'name': '72782', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/72782'}]
CVE State: PUBLISHED
Explain CVE-2011-1813
Google Chrome before 12.0.742.91 does not properly implement the framework for extensions, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."
Affected Products: n/a
References: [{'name': '44829', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44829'}, {'name': 'chrome-extension-framenwork-ce(67896)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/67896'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/chromium/issues/detail?id=78516'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2011/06/chrome-stable-release.html'}, {'name': '72783', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/72783'}, {'name': 'oval:org.mitre.oval:def:14481', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14481'}, {'name': '48129', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/48129'}]
CVE State: PUBLISHED
Explain CVE-2011-1814
Google Chrome before 12.0.742.91 attempts to read data from an uninitialized pointer, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
Affected Products: n/a
References: [{'name': '44829', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44829'}, {'name': 'chrome-pointer-info-disclosure(67897)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/67897'}, {'name': '72784', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/72784'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2011/06/chrome-stable-release.html'}, {'name': '48129', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/48129'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/chromium/issues/detail?id=79362'}, {'name': 'oval:org.mitre.oval:def:14565', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14565'}]
CVE State: PUBLISHED
Explain CVE-2011-1815
Google Chrome before 12.0.742.91 allows remote attackers to inject script into a tab page via vectors related to extensions.
Affected Products: n/a
References: [{'name': '44829', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44829'}, {'name': 'oval:org.mitre.oval:def:14728', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14728'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/chromium/issues/detail?id=79862'}, {'name': '72785', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/72785'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2011/06/chrome-stable-release.html'}, {'name': '48129', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/48129'}, {'name': 'chrome-tab-page-xss(67898)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/67898'}]
CVE State: PUBLISHED
Explain CVE-2011-1816
Use-after-free vulnerability in the developer tools in Google Chrome before 12.0.742.91 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/chromium/issues/detail?id=80358'}, {'name': '44829', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44829'}, {'name': 'chrome-developer-tools-code-exec(67899)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/67899'}, {'name': 'oval:org.mitre.oval:def:13575', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13575'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2011/06/chrome-stable-release.html'}, {'name': '72786', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/72786'}, {'name': '48129', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/48129'}]
CVE State: PUBLISHED
Explain CVE-2011-1817
Google Chrome before 12.0.742.91 does not properly implement history deletion, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/chromium/issues/detail?id=81916'}, {'name': '72787', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/72787'}, {'name': '44829', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44829'}, {'name': 'chrome-history-deletion-code-exec(67900)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/67900'}, {'name': 'oval:org.mitre.oval:def:14128', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14128'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2011/06/chrome-stable-release.html'}, {'name': '48129', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/48129'}]
CVE State: PUBLISHED
Explain CVE-2011-1818
Use-after-free vulnerability in the image loader in Google Chrome before 12.0.742.91 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
Affected Products: n/a
References: [{'name': 'chrome-image-loader-code-execution(67901)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/67901'}, {'name': '44829', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44829'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/chromium/issues/detail?id=81949'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2011/06/chrome-stable-release.html'}, {'name': '72788', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/72788'}, {'name': 'oval:org.mitre.oval:def:14757', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14757'}, {'name': '48129', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/48129'}]
CVE State: PUBLISHED
Explain CVE-2011-1819
Google Chrome before 12.0.742.91 allows remote attackers to perform unspecified injection into a chrome:// page via vectors related to extensions.
Affected Products: n/a
References: [{'name': '44829', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44829'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/chromium/issues/detail?id=83010'}, {'name': 'oval:org.mitre.oval:def:14616', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14616'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2011/06/chrome-stable-release.html'}, {'name': 'chrome-chromepages-xss(67902)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/67902'}, {'name': '72789', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/72789'}, {'name': '48129', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/48129'}]
CVE State: PUBLISHED
Explain CVE-2011-1820
IBM Tivoli Directory Server (TDS) 5.2 before 5.2.0.5-TIV-ITDS-IF0010, 6.0 before 6.0.0.67 (aka 6.0.0.8-TIV-ITDS-IF0009), 6.1 before 6.1.0.40 (aka 6.1.0.5-TIV-ITDS-IF0003), 6.2 before 6.2.0.16 (aka 6.2.0.3-TIV-ITDS-IF0002), and 6.3 before 6.3.0.3 (aka 6.3.0.0-TIV-ITDS-IF0003) does not properly handle the ibm-auditAttributesOnGroupEvalOp setting for auditing of extended operations, which might allow attackers to obtain sensitive information by reading the audit log.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ibm.com/support/docview.wss?uid=swg24029659'}, {'name': '44184', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44184'}, {'name': 'IO14025', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www.ibm.com/support/docview.wss?uid=swg1IO14025'}, {'name': 'IO14044', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www.ibm.com/support/docview.wss?uid=swg1IO14044'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ibm.com/support/docview.wss?uid=swg24029660'}, {'name': 'IO14023', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www.ibm.com/support/docview.wss?uid=swg1IO14023'}, {'name': 'IO14043', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www.ibm.com/support/docview.wss?uid=swg1IO14043'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ibm.com/support/docview.wss?uid=swg24029672'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ibm.com/support/docview.wss?uid=swg24029661'}, {'name': 'IO14028', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www.ibm.com/support/docview.wss?uid=swg1IO14028'}, {'name': '1025358', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1025358'}, {'name': 'ibm-tds-proxyserver-info-disclosure(66712)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/66712'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ibm.com/support/docview.wss?uid=swg21496086'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ibm.com/support/docview.wss?uid=swg24029663'}]
CVE State: PUBLISHED
Explain CVE-2011-1821
IBM Tivoli Directory Server (TDS) 5.2 before 5.2.0.5-TIV-ITDS-IF0010 on Windows allows remote authenticated users to cause a denial of service (daemon hang) via a cn=changelog search.
Affected Products: n/a
References: [{'name': 'IO13000', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www.ibm.com/support/docview.wss?uid=swg1IO13000'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ibm.com/support/docview.wss?uid=swg24029663'}]
CVE State: PUBLISHED
Explain CVE-2011-1822
The LDAP_ADD implementation in IBM Tivoli Directory Server (TDS) 5.2 before 5.2.0.5-TIV-ITDS-IF0009 stores a cleartext SHA password in the change log, which might allow local users to obtain sensitive information by reading this log.
Affected Products: n/a
References: [{'name': 'IO11882', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www.ibm.com/support/docview.wss?uid=swg1IO11882'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ibm.com/support/docview.wss?uid=swg24029663'}]
CVE State: PUBLISHED
Explain CVE-2011-1823
The vold volume manager daemon on Android 3.0 and 2.x before 2.3.4 trusts messages that are received from a PF_NETLINK socket, which allows local users to execute arbitrary code and gain root privileges via a negative index that bypasses a maximum-only signed integer check in the DirectVolume::handlePartitionAdded method, which triggers memory corruption, as demonstrated by Gingerbreak.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://android.git.kernel.org/?p=platform/system/netd.git%3Ba=commit%3Bh=79b579c92afc08ab12c0a5788d61f2dd2934836f'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://android.git.kernel.org/?p=platform/system/core.git%3Ba=commit%3Bh=b620a0b1c7ae486e979826200e8e441605b0a5d6'}, {'tags': ['x_refsource_MISC'], 'url': 'http://c-skills.blogspot.com/2011/04/yummy-yummy-gingerbreak.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://androidcommunity.com/gingerbreak-root-for-gingerbread-app-20110421/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://android.git.kernel.org/?p=platform/system/vold.git%3Ba=commit%3Bh=c51920c82463b240e2be0430849837d6fdc5352e'}, {'tags': ['x_refsource_MISC'], 'url': 'http://xorl.wordpress.com/2011/04/28/android-vold-mpartminors-signedness-issue/'}, {'name': 'android-vold-priv-escalation(67977)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/67977'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.androidpolice.com/2011/05/03/google-patches-gingerbreak-exploit-but-dont-worry-we-still-have-root-for-now/'}, {'tags': ['x_refsource_MISC'], 'url': 'http://forum.xda-developers.com/showthread.php?t=1044765'}]
CVE State: PUBLISHED
Explain CVE-2011-1824
The VEGAOpBitmap::AddLine function in Opera before 10.61 does not properly initialize memory during processing of the SIZE attribute of a SELECT element, which allows remote attackers to trigger an invalid memory write operation, and consequently cause a denial of service (application crash) or possibly execute arbitrary code, via a large integer attribute value.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.toucan-system.com/advisories/tssa-2011-02.txt'}, {'name': 'VU#778396', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/778396'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.opera.com/docs/changelogs/mac/1061/'}, {'name': 'opera-select-dos(67338)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/67338'}, {'name': '47764', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47764'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.opera.com/docs/changelogs/windows/1061/'}, {'name': '20110509 TSSA-2011-02 - Opera : SELECT SIZE Arbitrary null write', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/517914/100/0/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.opera.com/docs/changelogs/unix/1061/'}, {'name': '8244', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/8244'}]
CVE State: PUBLISHED