Anusha64/LoanDataSet huggingface dataset:
Explain CVE-2011-1145
The SQLDriverConnect() function in unixODBC before 2.2.14p2 have a possible buffer overflow condition when specifying a large value for SAVEFILE parameter in the connection string.
Affected Products: unixodbc
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://security-tracker.debian.org/tracker/CVE-2011-1145'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-1145'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.suse.com/show_bug.cgi?id=CVE-2011-1145'}, {'tags': ['x_refsource_MISC'], 'url': 'https://access.redhat.com/security/cve/cve-2011-1145'}]
CVE State: PUBLISHED
Explain CVE-2011-1147
Multiple stack-based and heap-based buffer overflows in the (1) decode_open_type and (2) udptl_rx_packet functions in main/udptl.c in Asterisk Open Source 1.4.x before 1.4.39.2, 1.6.1.x before 1.6.1.22, 1.6.2.x before 1.6.2.16.2, and 1.8 before 1.8.2.4; Business Edition C.x.x before C.3.6.3; AsteriskNOW 1.5; and s800i (Asterisk Appliance), when T.38 support is enabled, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted UDPTL packet.
Affected Products: n/a
References: [{'name': '43702', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43702'}, {'name': '46474', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46474'}, {'name': 'DSA-2225', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2011/dsa-2225'}, {'name': '43429', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43429'}, {'name': 'FEDORA-2011-2438', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055421.html'}, {'name': 'ADV-2011-0635', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0635'}, {'name': '[oss-security] 20110311 CVE Request -- Asterisk AST-2011-002 / Multiple array overflow and crash vulnerabilities in UDPTL code', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2011/03/11/2'}, {'name': 'FEDORA-2011-2360', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055030.html'}, {'name': 'FEDORA-2011-2558', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055634.html'}, {'name': '1025101', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025101'}, {'name': '[oss-security] 20110311 Re: CVE Request -- Asterisk AST-2011-002 / Multiple array overflow and crash vulnerabilities in UDPTL code', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2011/03/11/8'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://downloads.asterisk.org/pub/security/AST-2011-002.html'}]
CVE State: PUBLISHED
Explain CVE-2011-1148
Use-after-free vulnerability in the substr_replace function in PHP 5.3.6 and earlier allows context-dependent attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact by using the same variable for multiple arguments.
Affected Products: n/a
References: [{'name': 'HPSBOV02763', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=133469208622507&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT5130'}, {'name': '49241', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/49241'}, {'name': '[oss-security] 20110313 CVE request: PHP substr_replace() use-after-free', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/13/2'}, {'name': 'MDVSA-2011:165', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2011:165'}, {'name': '[oss-security] 20110313 Re: CVE request: PHP substr_replace() use-after-free', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/13/9'}, {'name': 'APPLE-SA-2012-02-01-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html'}, {'name': '[oss-security] 20110313 Re: CVE request: PHP substr_replace() use-after-free', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/13/3'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugs.php.net/bug.php?id=54238'}, {'name': 'SSRT100826', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=133469208622507&w=2'}, {'name': 'RHSA-2011:1423', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2011-1423.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.php.net/ChangeLog-5.php#5.3.7'}, {'name': 'php-substrreplace-code-exec(66080)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/66080'}, {'name': '46843', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46843'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.php.net/archive/2011.php#id2011-08-18-1'}]
CVE State: PUBLISHED
Explain CVE-2011-1149
Android before 2.3 does not properly restrict access to the system property space, which allows local applications to bypass the application sandbox and gain privileges, as demonstrated by psneuter and KillingInTheNameOf, related to the use of Android shared memory (ashmem) and ASHMEM_SET_PROT_MASK.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://android.git.kernel.org/?p=platform/system/core.git%3Ba=commit%3Bh=25b15be9120bcdaa0aba622c67ad2c835d9e91ca'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://groups.google.com/group/android-security-discuss/browse_thread/thread/15f97658c88d6827/e86db04652651971?show_docid=e86db04652651971'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://android.git.kernel.org/?p=kernel/common.git%3Ba=commit%3Bh=c98a285075f26e2b17a5baa2cb3eb6356a75597e'}, {'tags': ['x_refsource_MISC'], 'url': 'http://c-skills.blogspot.com/2011/01/adb-trickery-again.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/tmzt/g2root-kmod/tree/scotty2/scotty2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://forum.xda-developers.com/wiki/index.php?title=HTC_Vision#Rooting_the_G2'}]
CVE State: PUBLISHED
Explain CVE-2011-1150
bbPress through 1.0.2 has XSS in /bb-login.php url via the re parameter.
Affected Products: bbPress
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://www.openwall.com/lists/oss-security/2011/03/14/20'}]
CVE State: PUBLISHED
Explain CVE-2011-1151
Joomla! 1.6.0 is vulnerable to SQL Injection via the filter_order and filer_order_Dir parameters.
Affected Products: Joomla!
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://www.openwall.com/lists/oss-security/2011/03/14/21'}, {'tags': ['x_refsource_MISC'], 'url': 'https://packetstormsecurity.com/files/101835/Joomla-1.6.0-SQL-Injection.html'}]
CVE State: PUBLISHED
Explain CVE-2011-1156
feedparser.py in Universal Feed Parser (aka feedparser or python-feedparser) before 5.0.1 allows remote attackers to cause a denial of service (application crash) via a malformed DOCTYPE declaration.
Affected Products: n/a
References: [{'name': '[oss-security] 20110314 CVE request for python-feedparser', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/14/18'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.novell.com/security/cve/CVE-2011-1156.html'}, {'name': '43730', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43730'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/feedparser/issues/detail?id=91'}, {'name': '46867', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46867'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=684877'}, {'name': '44074', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44074'}, {'name': '[oss-security] 20110315 Re: CVE request for python-feedparser', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/15/11'}, {'name': '[opensuse-updates] 20110408 openSUSE-SU-2011:0314-1 (moderate): python-feedparser security update', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.opensuse.org/opensuse-updates/2011-04/msg00026.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.novell.com/show_bug.cgi?id=680074'}, {'name': 'MDVSA-2011:082', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2011:082'}]
CVE State: PUBLISHED
Explain CVE-2011-1157
Cross-site scripting (XSS) vulnerability in feedparser.py in Universal Feed Parser (aka feedparser or python-feedparser) 5.x before 5.0.1 allows remote attackers to inject arbitrary web script or HTML via malformed XML comments.
Affected Products: n/a
References: [{'name': '[oss-security] 20110314 CVE request for python-feedparser', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/14/18'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/feedparser/issues/detail?id=254'}, {'name': '43730', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43730'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.novell.com/security/cve/CVE-2011-1157.html'}, {'name': '46867', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46867'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=684877'}, {'name': '44074', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44074'}, {'name': '[oss-security] 20110315 Re: CVE request for python-feedparser', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/15/11'}, {'name': '[opensuse-updates] 20110408 openSUSE-SU-2011:0314-1 (moderate): python-feedparser security update', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.opensuse.org/opensuse-updates/2011-04/msg00026.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.novell.com/show_bug.cgi?id=680074'}, {'name': 'MDVSA-2011:082', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2011:082'}]
CVE State: PUBLISHED
Explain CVE-2011-1158
Cross-site scripting (XSS) vulnerability in feedparser.py in Universal Feed Parser (aka feedparser or python-feedparser) 5.x before 5.0.1 allows remote attackers to inject arbitrary web script or HTML via an unexpected URI scheme, as demonstrated by a javascript: URI.
Affected Products: n/a
References: [{'name': '[oss-security] 20110314 CVE request for python-feedparser', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/14/18'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.novell.com/security/cve/CVE-2011-1158.html'}, {'name': '43730', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43730'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/feedparser/issues/detail?id=255'}, {'name': '46867', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46867'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=684877'}, {'name': '44074', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44074'}, {'name': '[oss-security] 20110315 Re: CVE request for python-feedparser', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/15/11'}, {'name': '[opensuse-updates] 20110408 openSUSE-SU-2011:0314-1 (moderate): python-feedparser security update', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.opensuse.org/opensuse-updates/2011-04/msg00026.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.novell.com/show_bug.cgi?id=680074'}, {'name': 'MDVSA-2011:082', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2011:082'}]
CVE State: PUBLISHED
Explain CVE-2011-1159
acpid.c in acpid before 2.0.9 does not properly handle a situation in which a process has connected to acpid.socket but is not reading any data, which allows local users to cause a denial of service (daemon hang) via a crafted application that performs a connect system call but no read system calls.
Affected Products: n/a
References: [{'name': '45915', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/45915'}, {'name': 'FEDORA-2011-6681', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2011-May/059880.html'}, {'name': '44621', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44621'}, {'name': '42947', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/42947'}, {'name': '[oss-security] 20110315 Re: 2 acpid flaws', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2011/03/15/7'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=688698'}, {'name': '[oss-security] 20110119 2 acpid flaws', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2011/01/19/4'}, {'name': '[oss-security] 20110315 Re: 2 acpid flaws', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2011/03/15/12'}, {'name': 'FEDORA-2011-6460', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2011-May/060053.html'}]
CVE State: PUBLISHED
Explain CVE-2011-1160
The tpm_open function in drivers/char/tpm/tpm.c in the Linux kernel before 2.6.39 does not initialize a certain buffer, which allows local users to obtain potentially sensitive information from kernel memory via unspecified vectors.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=1309d7afbed112f0e8e90be9af975550caa0076b'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=684671'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/torvalds/linux/commit/1309d7afbed112f0e8e90be9af975550caa0076b'}, {'name': '[oss-security] 20110315 Re: CVE requests - kernel: tpm infoleaks', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2011/03/15/13'}]
CVE State: PUBLISHED
Explain CVE-2011-1162
The tpm_read function in the Linux kernel 2.6 does not properly clear memory, which might allow local users to read the results of the previous TPM command.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=732629'}, {'name': '50764', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/50764'}]
CVE State: PUBLISHED
Explain CVE-2011-1163
The osf_partition function in fs/partitions/osf.c in the Linux kernel before 2.6.38 does not properly handle an invalid number of partitions, which might allow local users to obtain potentially sensitive information from kernel heap memory via vectors related to partition-table parsing.
Affected Products: n/a
References: [{'name': '[mm-commits] 20110314 + fs-partitions-osfc-corrupted-osf-partition-table-can-cause-information-disclosure.patch added to -mm tree', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.spinics.net/lists/mm-commits/msg82737.html'}, {'name': '46878', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46878'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=1eafbfeb7bdf59cfe173304c76188f3fd5f1fd05'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=688021'}, {'name': '8189', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/8189'}, {'name': '1025225', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1025225'}, {'name': '[oss-security] 20110315 Re: CVE Request: kernel: fs/partitions: Corrupted OSF partition table can cause information disclosure', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/15/14'}, {'name': 'RHSA-2011:0833', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2011-0833.html'}, {'name': '[oss-security] 20110315 CVE Request: kernel: fs/partitions: Corrupted OSF partition table can cause information disclosure', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/15/9'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.pre-cert.de/advisories/PRE-SA-2011-02.txt'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://downloads.avaya.com/css/P8/documents/100145416'}, {'name': '20110317 [PRE-SA-2011-02] Information disclosure vulnerability in the OSF partition handling code of the Linux kernel', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/517050'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.38'}, {'name': 'SUSE-SU-2015:0812', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html'}]
CVE State: PUBLISHED
Explain CVE-2011-1164
Vino before 2.99.4 can connect external networks contrary to the statement in the vino-preferences dialog box, which might make it easier for remote attackers to perform attacks.
Affected Products: n/a
References: [{'name': 'RHSA-2013:0169', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-0169.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.gnome.org/show_bug.cgi?id=596190'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=553477'}]
CVE State: PUBLISHED
Explain CVE-2011-1165
Vino, possibly before 3.2, does not properly document that it opens ports in UPnP routers when the "Configure network to automatically accept connections" setting is enabled, which might make it easier for remote attackers to perform further attacks.
Affected Products: n/a
References: [{'name': 'RHSA-2013:0169', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-0169.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.gnome.org/show_bug.cgi?id=594521'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=678846'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.gnome.org/browse/vino/commit/?id=410bbf8e284409bdef02322af4d4a3a388419566'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.dslreports.com/forum/r25446313-Ubuntu-computer-hijacked-by-hacker~start=40'}]
CVE State: PUBLISHED
Explain CVE-2011-1166
Xen, possibly before 4.0.2, allows local 64-bit PV guests to cause a denial of service (host crash) by specifying user mode execution without user-mode pagetables.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://wiki.xen.org/wiki/Security_Announcements#XSA-1_Host_crash_due_to_failure_to_correctly_validate_PV_kernel_execution_state.'}, {'name': 'RHSA-2011:0833', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2011-0833.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://downloads.avaya.com/css/P8/documents/100145416'}]
CVE State: PUBLISHED
Explain CVE-2011-1168
Cross-site scripting (XSS) vulnerability in the KHTMLPart::htmlError function in khtml/khtml_part.cpp in Konqueror in KDE SC 4.4.0 through 4.6.1 allows remote attackers to inject arbitrary web script or HTML via the URI in a URL corresponding to an unavailable web site.
Affected Products: n/a
References: [{'name': 'ADV-2011-0990', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0990'}, {'name': 'MDVSA-2011:075', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2011:075'}, {'name': 'SUSE-SR:2011:009', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html'}, {'name': '20110412 Re: [Full-disclosure] Medium severity flaw in Konqueror', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/517433/100/0/threaded'}, {'name': '44108', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44108'}, {'name': '47304', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47304'}, {'name': '20110411 Medium severity flaw in Konqueror', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/517432/100/0/threaded'}, {'name': 'USN-1110-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1110-1'}, {'name': 'ADV-2011-0928', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0928'}, {'name': '44065', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44065'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=695398'}, {'name': '8208', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/8208'}, {'name': 'konqueror-khtmlparthtmlerror-xss(66697)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/66697'}, {'name': 'ADV-2011-0927', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0927'}, {'name': 'SSA:2011-101-02', 'tags': ['vendor-advisory', 'x_refsource_SLACKWARE'], 'url': 'http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.329727'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kde.org/info/security/advisory-20110411-1.txt'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.nth-dimension.org.uk/pub/NDSA20110321.txt.asc'}, {'name': '1025322', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1025322'}]
CVE State: PUBLISHED
Explain CVE-2011-1169
Array index error in the asihpi_hpi_ioctl function in sound/pci/asihpi/hpioctl.c in the AudioScience HPI driver in the Linux kernel before 2.6.38.1 might allow local users to cause a denial of service (memory corruption) or possibly gain privileges via a crafted adapter index value that triggers access to an invalid kernel pointer.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=688898'}, {'name': '[oss-security] 20110318 CVE request: kernel: AudioScience HPI driver', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/18/1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.kernel.org/?p=linux/kernel/git/tiwai/sound-2.6.git%3Ba=commit%3Bh=4a122c10fbfe9020df469f0f669da129c5757671'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.38.1'}, {'name': '[oss-security] 20110318 Re: CVE request: kernel: AudioScience HPI driver', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/18/2'}]
CVE State: PUBLISHED
Explain CVE-2011-1170
net/ipv4/netfilter/arp_tables.c in the IPv4 implementation in the Linux kernel before 2.6.39 does not place the expected '\0' character at the end of string data in the values of certain structure members, which allows local users to obtain potentially sensitive information from kernel memory by leveraging the CAP_NET_ADMIN capability to issue a crafted request, and then reading the argument to the resulting modprobe process.
Affected Products: n/a
References: [{'name': '8282', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/8282'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=689321'}, {'name': '[oss-security] 20110318 CVE request: kernel: netfilter & econet infoleaks', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2011/03/18/15'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=42eab94fff18cb1091d3501cd284d6bd6cc9c143'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39'}, {'name': 'RHSA-2011:0833', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2011-0833.html'}, {'name': '[netfilter-devel] 20110310 [PATCH] ipv4: netfilter: arp_tables: fix infoleak to userspace', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://marc.info/?l=netfilter-devel&m=129978081009955&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://downloads.avaya.com/css/P8/documents/100145416'}, {'name': '[oss-security] 20110321 Re: CVE request: kernel: netfilter & econet infoleaks', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2011/03/21/4'}, {'name': '8278', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/8278'}, {'name': '[oss-security] 20110321 Re: CVE request: kernel: netfilter & econet infoleaks', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2011/03/21/1'}]
CVE State: PUBLISHED
Explain CVE-2011-1171
net/ipv4/netfilter/ip_tables.c in the IPv4 implementation in the Linux kernel before 2.6.39 does not place the expected '\0' character at the end of string data in the values of certain structure members, which allows local users to obtain potentially sensitive information from kernel memory by leveraging the CAP_NET_ADMIN capability to issue a crafted request, and then reading the argument to the resulting modprobe process.
Affected Products: n/a
References: [{'name': '8283', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/8283'}, {'name': '[oss-security] 20110318 CVE request: kernel: netfilter & econet infoleaks', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2011/03/18/15'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=689327'}, {'name': '[linux-kernel] 20110310 [PATCH] ipv4: netfilter: ip_tables: fix infoleak to userspace', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://marc.info/?l=linux-kernel&m=129978077609894&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39'}, {'name': 'RHSA-2011:0833', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2011-0833.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://downloads.avaya.com/css/P8/documents/100145416'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=78b79876761b86653df89c48a7010b5cbd41a84a'}, {'name': '[oss-security] 20110321 Re: CVE request: kernel: netfilter & econet infoleaks', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2011/03/21/4'}, {'name': '8278', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/8278'}, {'name': '[oss-security] 20110321 Re: CVE request: kernel: netfilter & econet infoleaks', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2011/03/21/1'}]
CVE State: PUBLISHED
Explain CVE-2011-1172
net/ipv6/netfilter/ip6_tables.c in the IPv6 implementation in the Linux kernel before 2.6.39 does not place the expected '\0' character at the end of string data in the values of certain structure members, which allows local users to obtain potentially sensitive information from kernel memory by leveraging the CAP_NET_ADMIN capability to issue a crafted request, and then reading the argument to the resulting modprobe process.
Affected Products: n/a
References: [{'name': '[oss-security] 20110318 CVE request: kernel: netfilter & econet infoleaks', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2011/03/18/15'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6a8ab060779779de8aea92ce3337ca348f973f54'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=689345'}, {'name': '[linux-kernel] 20110310 [PATCH] ipv6: netfilter: ip6_tables: fix infoleak to userspace', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://marc.info/?l=linux-kernel&m=129978086410061&w=2'}, {'name': 'RHSA-2011:0833', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2011-0833.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://downloads.avaya.com/css/P8/documents/100145416'}, {'name': '[oss-security] 20110321 Re: CVE request: kernel: netfilter & econet infoleaks', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2011/03/21/4'}, {'name': '8278', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/8278'}, {'name': '[oss-security] 20110321 Re: CVE request: kernel: netfilter & econet infoleaks', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2011/03/21/1'}]
CVE State: PUBLISHED
Explain CVE-2011-1173
The econet_sendmsg function in net/econet/af_econet.c in the Linux kernel before 2.6.39 on the x86_64 platform allows remote attackers to obtain potentially sensitive information from kernel stack memory by reading uninitialized data in the ah field of an Acorn Universal Networking (AUN) packet.
Affected Products: n/a
References: [{'name': '[netdev] 20110317 [PATCH] econet: 4 byte infoleak to the network', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://marc.info/?l=linux-netdev&m=130036203528021&w=2'}, {'name': '[oss-security] 20110318 CVE request: kernel: netfilter & econet infoleaks', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2011/03/18/15'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=67c5c6cb8129c595f21e88254a3fc6b3b841ae8e'}, {'name': '8279', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/8279'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=591815#c14'}, {'name': '[oss-security] 20110321 Re: CVE request: kernel: netfilter & econet infoleaks', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2011/03/21/4'}, {'name': '[oss-security] 20110321 Re: CVE request: kernel: netfilter & econet infoleaks', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2011/03/21/1'}]
CVE State: PUBLISHED
Explain CVE-2011-1174
manager.c in Asterisk Open Source 1.6.1.x before 1.6.1.24, 1.6.2.x before 1.6.2.17.2, and 1.8.x before 1.8.3.2 allows remote attackers to cause a denial of service (CPU and memory consumption) via a series of manager sessions involving invalid data.
Affected Products: n/a
References: [{'name': 'FEDORA-2011-3945', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2011-March/057156.html'}, {'name': 'DSA-2225', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2011/dsa-2225'}, {'name': 'FEDORA-2011-3942', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2011-March/057163.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=688675'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://downloads.asterisk.org/pub/security/AST-2011-003.html'}, {'name': '[oss-security] 20110317 CVE request for Asterisk flaws', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/17/5'}, {'name': '46897', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46897'}, {'name': 'asterisk-writes-dos(66139)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/66139'}, {'name': 'FEDORA-2011-3958', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056945.html'}, {'name': 'ADV-2011-0686', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0686'}, {'name': 'ADV-2011-0790', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0790'}, {'name': '1025223', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1025223'}, {'name': '[oss-security] 20110321 Re: CVE request for Asterisk flaws', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/21/12'}]
CVE State: PUBLISHED
Explain CVE-2011-1175
tcptls.c in the TCP/TLS server in Asterisk Open Source 1.6.1.x before 1.6.1.23, 1.6.2.x before 1.6.2.17.1, and 1.8.x before 1.8.3.1 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) by establishing many short TCP sessions to services that use a certain TLS API.
Affected Products: n/a
References: [{'name': 'FEDORA-2011-3945', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2011-March/057156.html'}, {'name': 'asterisk-handletcptlsconnection-dos(66140)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/66140'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://downloads.asterisk.org/pub/security/AST-2011-004.html'}, {'name': 'DSA-2225', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2011/dsa-2225'}, {'name': 'FEDORA-2011-3942', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2011-March/057163.html'}, {'name': '[oss-security] 20110317 CVE request for Asterisk flaws', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/17/5'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=688678'}, {'name': 'FEDORA-2011-3958', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056945.html'}, {'name': 'ADV-2011-0686', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0686'}, {'name': 'ADV-2011-0790', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0790'}, {'name': '1025224', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1025224'}, {'name': '46898', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46898'}, {'name': '[oss-security] 20110321 Re: CVE request for Asterisk flaws', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/21/12'}]
CVE State: PUBLISHED
Explain CVE-2011-1176
The configuration merger in itk.c in the Steinar H. Gunderson mpm-itk Multi-Processing Module 2.2.11-01 and 2.2.11-02 for the Apache HTTP Server does not properly handle certain configuration sections that specify NiceValue but not AssignUserID, which might allow remote attackers to gain privileges by leveraging the root uid and root gid of an mpm-itk process.
Affected Products: n/a
References: [{'name': '46953', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46953'}, {'name': 'MDVSA-2011:057', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2011:057'}, {'name': '[mpm-itk] 20110321 mpm-itk version 2.2.17-01 released', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.err.no/pipermail/mpm-itk/2011-March/000394.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=618857'}, {'name': 'apache-mtmitk-weak-security(66248)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/66248'}, {'name': 'ADV-2011-0824', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0824'}, {'name': 'ADV-2011-0748', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0748'}, {'name': 'DSA-2202', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2011/dsa-2202'}, {'name': 'ADV-2011-0749', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0749'}, {'name': '[oss-security] 20110321 Re: CVE request: MPM-ITK module for Apache HTTPD', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/21/13'}, {'name': '[oss-security] 20110320 CVE request: MPM-ITK module for Apache HTTPD', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/20/1'}, {'name': '[mpm-itk] 20110321 CVE 2011-1176: Sometimes runs as root instead of the default Apache user', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.err.no/pipermail/mpm-itk/2011-March/000393.html'}]
CVE State: PUBLISHED
Explain CVE-2011-1178
Multiple integer overflows in the load_image function in file-pcx.c in the Personal Computer Exchange (PCX) plugin in GIMP 2.6.x and earlier allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PCX image that triggers a heap-based buffer overflow.
Affected Products: n/a
References: [{'name': 'GLSA-201209-23', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-201209-23.xml'}, {'name': 'gimp-pcximage-bo(67787)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/67787'}, {'name': 'RHSA-2011:0837', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2011-0837.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.gnome.org/browse/gimp/commit/?id=a9671395f6573e90316a9d748588c5435216f6ce'}, {'name': 'RHSA-2011:0838', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2011-0838.html'}, {'name': 'MDVSA-2011:110', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2011:110'}, {'name': '1025586', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1025586'}, {'name': '48057', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/48057'}, {'name': '50737', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/50737'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=689831'}]
CVE State: PUBLISHED
Explain CVE-2011-1179
The SPICE Firefox plug-in (spice-xpi) 2.4, 2.3, 2.2, and possibly other versions allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to (1) plugin/nsScriptablePeer.cpp and (2) plugin/plugin.cpp, which trigger multiple uses of an uninitialized pointer.
Affected Products: n/a
References: [{'name': '1025304', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025304'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/attachment.cgi?id=487006&action=diff'}, {'name': 'RHSA-2011:0426', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2011-0426.html'}, {'name': 'RHSA-2011:0427', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2011-0427.html'}, {'name': 'spicexpi-pointer-privilege-escalation(66777)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/66777'}, {'name': 'ADV-2011-0899', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0899'}, {'name': '44060', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44060'}, {'name': '47269', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47269'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=689931'}]
CVE State: PUBLISHED
Explain CVE-2011-1180
Multiple stack-based buffer overflows in the iriap_getvaluebyclass_indication function in net/irda/iriap.c in the Linux kernel before 2.6.39 allow remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging connectivity to an IrDA infrared network and sending a large integer value for a (1) name length or (2) attribute length.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/torvalds/linux/commit/d370af0ef7951188daeb15bae75db7ba57c67846'}, {'name': '[oss-security] 20110322 Re: CVE requests - kernel: irda/decnet issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2011/03/22/11'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d370af0ef7951188daeb15bae75db7ba57c67846'}]
CVE State: PUBLISHED
Explain CVE-2011-1182
kernel/signal.c in the Linux kernel before 2.6.39 allows local users to spoof the uid and pid of a signal sender via a sigqueueinfo system call.
Affected Products: n/a
References: [{'name': '[oss-security] 20110323 Re: Linux kernel signal spoofing vulnerability (CVE request)', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2011/03/23/2'}, {'name': 'RHSA-2011:0927', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2011-0927.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/torvalds/linux/commit/da48524eb20662618854bb3df2db01fc65f3070c'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=da48524eb20662618854bb3df2db01fc65f3070c'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=690028'}]
CVE State: PUBLISHED
Explain CVE-2011-1183
Apache Tomcat 7.0.11, when web.xml has no login configuration, does not follow security constraints, which allows remote attackers to bypass intended access restrictions via HTTP requests to a meta-data complete web application.  NOTE: this vulnerability exists because of an incorrect fix for CVE-2011-1088 and CVE-2011-1419.
Affected Products: n/a
References: [{'name': 'oval:org.mitre.oval:def:12701', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12701'}, {'name': '47196', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47196'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://tomcat.apache.org/security-7.html'}, {'name': '8187', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/8187'}, {'name': '20110406 [SECURITY] CVE-2011-1183 Apache Tomcat security constraint bypass', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2011/Apr/96'}, {'name': '20110406 [SECURITY] CVE-2011-1183 Apache Tomcat security constraint bypass', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/517362/100/0/threaded'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://svn.apache.org/viewvc?view=revision&revision=1087643'}, {'name': 'tomcat-webxml-security-bypass(66675)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/66675'}]
CVE State: PUBLISHED
Explain CVE-2011-1185
Google Chrome before 10.0.648.127 does not prevent (1) navigation and (2) close operations on the top location of a sandboxed frame, which has unspecified impact and remote attack vectors.
Affected Products: n/a
References: [{'name': 'chrome-sandboxed-sec-bypass(65948)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/65948'}, {'name': '46785', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46785'}, {'name': 'oval:org.mitre.oval:def:14349', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14349'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2011/03/chrome-stable-release.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/chromium/issues/detail?id=42574'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/chromium/issues/detail?id=42765'}, {'name': 'ADV-2011-0628', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0628'}]
CVE State: PUBLISHED
Explain CVE-2011-1186
Google Chrome before 10.0.648.127 on Linux does not properly handle parallel execution of calls to the print method, which might allow remote attackers to cause a denial of service (application crash) via crafted JavaScript code.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/chromium/issues/detail?id=66962'}, {'name': '46785', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46785'}, {'name': 'google-parallel-dos(65950)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/65950'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2011/03/chrome-stable-release.html'}, {'name': 'oval:org.mitre.oval:def:14255', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14255'}, {'name': 'ADV-2011-0628', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0628'}]
CVE State: PUBLISHED