Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-3842 State: PUBLISHED Published: 2013-10-16T15:00:00 Last Updated: 2024-08-06T16:22:01.493Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability Oracle Solaris 10 allows local users to affect confidentiality via vectors related to Oracle Configuration Manager (OCM). Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19380 - http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html
CVE ID: CVE-2013-3843 State: PUBLISHED Published: 2014-06-13T14:00:00 Last Updated: 2024-08-06T16:22:01.284Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the mk_request_header_process function in mk_request.c in Monkey HTTP Daemon (monkeyd) before 1.2.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted HTTP header. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/53697 - https://github.com/monkey/monkey/issues/88 - http://monkey-project.com/Announcements/v1.2.1 - http://bugs.monkey-project.com/ticket/182 - https://exchange.xforce.ibmcloud.com
nkey-project.com/Announcements/v1.2.1 - http://bugs.monkey-project.com/ticket/182 - https://exchange.xforce.ibmcloud.com/vulnerabilities/84755 - http://archives.neohapsis.com/archives/bugtraq/2013-06/0015.html
CVE ID: CVE-2013-3844 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-3845 State: PUBLISHED Published: 2013-09-11T10:00:00 Last Updated: 2024-08-06T16:22:01.305Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-069 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18719 - http://www.us-cert.gov/ncas/alerts/TA13-253A
CVE ID: CVE-2013-3846 State: PUBLISHED Published: 2013-12-29T02:00:00 Last Updated: 2024-08-06T16:22:01.287Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted CSpliceTreeEngine::InsertSplice object in an HTML document, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3143 and CVE-2013-3161. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-055 - http://www.zerodayin
: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-055 - http://www.zerodayinitiative.com/advisories/ZDI-13-231/
CVE ID: CVE-2013-3847 State: PUBLISHED Published: 2013-09-11T10:00:00 Last Updated: 2024-08-06T16:22:01.444Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Word Automation Services in SharePoint Server 2010 SP1, Word Web App 2010 SP1 in Office Web Apps 2010, Word 2003 SP3, Word 2007 SP3, Word 2010 SP1, Office Compatibility Pack SP3, and Word Viewer allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Word Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3848, CVE-2013-3849, and CVE-2013-3858. Additional Analyst Notes: - CVE Program Container: References: - https://o
-2013-3848, CVE-2013-3849, and CVE-2013-3858. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18749 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18988 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-072 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-067 - http://www.us-cert.gov/ncas/alerts/TA13-253A
CVE ID: CVE-2013-3848 State: PUBLISHED Published: 2013-09-11T10:00:00 Last Updated: 2024-08-06T16:22:01.293Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Word Automation Services in SharePoint Server 2010 SP1, Word Web App 2010 SP1 in Office Web Apps 2010, Word 2003 SP3, Word 2007 SP3, Word 2010 SP1, Office Compatibility Pack SP3, and Word Viewer allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Word Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3847, CVE-2013-3849, and CVE-2013-3858. Additional Analyst Notes: - CVE Program Container: References: - https://o
-2013-3847, CVE-2013-3849, and CVE-2013-3858. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18281 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-072 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-067 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18800 - http://www.us-cert.gov/ncas/alerts/TA13-253A
CVE ID: CVE-2013-3849 State: PUBLISHED Published: 2013-09-11T10:00:00 Last Updated: 2024-08-06T16:22:01.322Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Word Automation Services in SharePoint Server 2010 SP1, Word Web App 2010 SP1 in Office Web Apps 2010, Word 2003 SP3, Word 2007 SP3, Word 2010 SP1, Office Compatibility Pack SP3, and Word Viewer allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Word Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3847, CVE-2013-3848, and CVE-2013-3858. Additional Analyst Notes: - CVE Program Container: References: - https://d
-2013-3847, CVE-2013-3848, and CVE-2013-3858. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-072 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19100 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18774 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-067 - http://www.us-cert.gov/ncas/alerts/TA13-253A
CVE ID: CVE-2013-3850 State: PUBLISHED Published: 2013-09-11T10:00:00 Last Updated: 2024-08-06T16:22:01.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Word 2003 SP3, 2007 SP3, and 2010 SP1 and SP2; Office Compatibility Pack SP3; and Word Viewer allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Word Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-072 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18753 - http://www.
13/ms13-072 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18753 - http://www.us-cert.gov/ncas/alerts/TA13-253A
CVE ID: CVE-2013-3851 State: PUBLISHED Published: 2013-09-11T10:00:00 Last Updated: 2024-08-06T16:22:01.488Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Office 2003 SP3 and 2007 SP3, Word 2003 SP3 and 2007 SP3, Office Compatibility Pack SP3, and Word Viewer allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Word Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18246 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-072 -
al%3Aorg.mitre.oval%3Adef%3A18246 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-072 - http://www.us-cert.gov/ncas/alerts/TA13-253A
CVE ID: CVE-2013-3852 State: PUBLISHED Published: 2013-09-11T10:00:00 Last Updated: 2024-08-06T16:22:01.479Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Word 2003 SP3, 2007 SP3, and 2010 SP1; Office Compatibility Pack SP3; and Word Viewer allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Word Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18635 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-072 - http://www.us-cert.
%3Adef%3A18635 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-072 - http://www.us-cert.gov/ncas/alerts/TA13-253A
CVE ID: CVE-2013-3853 State: PUBLISHED Published: 2013-09-11T10:00:00 Last Updated: 2024-08-06T16:22:01.294Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Office 2007 SP3 and Word 2007 SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Word Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3854. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18464 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-072 - http://www.us-cert.gov/nc
%3A18464 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-072 - http://www.us-cert.gov/ncas/alerts/TA13-253A
CVE ID: CVE-2013-3854 State: PUBLISHED Published: 2013-09-11T10:00:00 Last Updated: 2024-08-06T16:22:01.455Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Office 2007 SP3 and Word 2007 SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Word Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3853. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-072 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19009 - http://www.us-cert.gov/nc
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19009 - http://www.us-cert.gov/ncas/alerts/TA13-253A
CVE ID: CVE-2013-3855 State: PUBLISHED Published: 2013-09-11T10:00:00 Last Updated: 2024-08-06T16:22:01.337Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Word 2003 SP3 and 2007 SP3, Office Compatibility Pack SP3, and Word Viewer allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Word Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18065 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-072 - http://www.us-cert.gov/ncas/al
065 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-072 - http://www.us-cert.gov/ncas/alerts/TA13-253A
CVE ID: CVE-2013-3856 State: PUBLISHED Published: 2013-09-11T10:00:00 Last Updated: 2024-08-06T16:22:01.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Word 2003 SP3 and Word Viewer allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Word Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-072 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18797 - http://www.us-cert.gov/ncas/alerts/TA13-253A
CVE ID: CVE-2013-3857 State: PUBLISHED Published: 2013-09-11T10:00:00 Last Updated: 2024-08-06T16:22:01.493Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Word Automation Services in SharePoint Server 2010 SP1 and SP2, Word Web App 2010 SP1 and SP2 in Office Web Apps 2010, Word 2003 SP3, Word 2007 SP3, Word 2010 SP1 and SP2, Office Compatibility Pack SP3, and Word Viewer allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Word Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Ao
Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18741 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18942 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-072 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-067 - http://www.us-cert.gov/ncas/alerts/TA13-253A
CVE ID: CVE-2013-3858 State: PUBLISHED Published: 2013-09-11T10:00:00 Last Updated: 2024-08-06T16:22:01.318Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Word Automation Services in SharePoint Server 2010 SP1, Word Web App 2010 SP1 in Office Web Apps 2010, Word 2003 SP3, Word 2007 SP3, Word 2010 SP1, Office Compatibility Pack SP3, and Word Viewer allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Word Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3847, CVE-2013-3848, and CVE-2013-3849. Additional Analyst Notes: - CVE Program Container: References: - https://o
-2013-3847, CVE-2013-3848, and CVE-2013-3849. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18801 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18709 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-072 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-067 - http://www.us-cert.gov/ncas/alerts/TA13-253A
CVE ID: CVE-2013-3859 State: PUBLISHED Published: 2013-09-11T10:00:00 Last Updated: 2024-08-06T16:22:01.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Pinyin IME 2010, when used in conjunction with Microsoft Office 2010 SP1, does not properly restrict configuration options, which allows local users to gain privileges by starting Internet Explorer from the IME toolbar, aka "Chinese IME Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-075 - http://www.us-cert.gov/ncas/alerts/TA13-253A
CVE ID: CVE-2013-3860 State: PUBLISHED Published: 2013-10-09T14:44:00 Last Updated: 2024-08-06T16:22:01.310Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft .NET Framework 2.0 SP2, 3.5, 3.5 SP1, 3.5.1, 4, and 4.5 does not properly parse a DTD during XML digital-signature validation, which allows remote attackers to cause a denial of service (application crash or hang) via a crafted signed XML document, aka "Entity Expansion Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-082 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3
securitybulletins/2013/ms13-082 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18517 - http://www.us-cert.gov/ncas/alerts/TA13-288A
CVE ID: CVE-2013-3861 State: PUBLISHED Published: 2013-10-09T14:44:00 Last Updated: 2024-08-06T16:22:01.320Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft .NET Framework 2.0 SP2, 3.5, 3.5 SP1, 3.5.1, 4, and 4.5 allows remote attackers to cause a denial of service (application crash or hang) via crafted character sequences in JSON data, aka "JSON Parsing Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-082 - http://www.us-cert.gov/ncas/alerts/TA13-288A - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18842
CVE ID: CVE-2013-3862 State: PUBLISHED Published: 2013-09-11T10:00:00 Last Updated: 2024-08-06T16:22:01.280Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in Microsoft Windows 7 and Server 2008 R2 SP1 allows local users to gain privileges via a crafted service description that is not properly handled by services.exe in the Service Control Manager (SCM), aka "Service Control Manager Double Free Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-077 - http://www.us-cert.gov/ncas/alerts/TA13-253A
CVE ID: CVE-2013-3863 State: PUBLISHED Published: 2013-09-11T10:00:00 Last Updated: 2024-08-06T16:22:01.511Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allow remote attackers to execute arbitrary code via a crafted OLE object in a file, aka "OLE Property Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18759 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-070 - http://www.us-cert.gov/ncas/alerts/TA13-253A
CVE ID: CVE-2013-3864 State: PUBLISHED Published: 2013-09-11T10:00:00 Last Updated: 2024-08-06T16:22:01.488Z Vendors: n/a Products: n/a Problem Types: n/a Description: win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT allows local users to gain privileges via a crafted application, aka "Win32k Multiple Fetch Vulnerability," a different vulnerability than CVE-2013-1342, CVE-2013-1343, CVE-2013-1344, and CVE-2013-3865. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/d
3-3865. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18553 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-076 - http://www.us-cert.gov/ncas/alerts/TA13-253A
CVE ID: CVE-2013-3865 State: PUBLISHED Published: 2013-09-11T10:00:00 Last Updated: 2024-08-06T16:22:01.329Z Vendors: n/a Products: n/a Problem Types: n/a Description: win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT allows local users to gain privileges via a crafted application, aka "Win32k Multiple Fetch Vulnerability," a different vulnerability than CVE-2013-1342, CVE-2013-1343, CVE-2013-1344, and CVE-2013-3864. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/d
3-3864. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18813 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-076 - http://www.us-cert.gov/ncas/alerts/TA13-253A
CVE ID: CVE-2013-3866 State: PUBLISHED Published: 2013-09-11T10:00:00 Last Updated: 2024-08-06T16:22:01.486Z Vendors: n/a Products: n/a Problem Types: n/a Description: win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT allows local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-076 - https://oval.cisecurity.org/repository/search/defi
icrosoft.com/en-us/security-updates/securitybulletins/2013/ms13-076 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18951 - http://www.us-cert.gov/ncas/alerts/TA13-253A
CVE ID: CVE-2013-3867 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-3868 State: PUBLISHED Published: 2013-09-11T10:00:00 Last Updated: 2024-08-06T16:22:01.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Active Directory Lightweight Directory Service (AD LDS) on Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, and Windows 8 and Active Directory Services on Windows Server 2008 SP2 and R2 SP1 and Server 2012 allow remote attackers to cause a denial of service (LDAP directory-service outage) via a crafted LDAP query, aka "Remote Anonymous DoS Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-
s: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-079 - http://www.us-cert.gov/ncas/alerts/TA13-253A
CVE ID: CVE-2013-3869 State: PUBLISHED Published: 2013-11-13T00:00:00 Last Updated: 2024-08-06T16:22:01.324Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow remote attackers to cause a denial of service (daemon hang) via a web-service request containing a crafted X.509 certificate that is not properly handled during validation, aka "Digital Signatures Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/reposi
ures Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19112 - http://www.us-cert.gov/ncas/alerts/TA13-317A - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-095
CVE ID: CVE-2013-3870 State: PUBLISHED Published: 2013-09-11T10:00:00 Last Updated: 2024-08-06T16:22:01.329Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in Microsoft Outlook 2007 SP3 and 2010 SP1 and SP2 allows remote attackers to execute arbitrary code by including many nested S/MIME certificates in an e-mail message, aka "Message Certificate Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://blogs.technet.com/b/srd/archive/2013/09/10/assessing-risk-for-the-september-2013-security-updates.aspx - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18857 - https://docs.microsoft.co
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18857 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-068 - http://blogs.technet.com/b/srd/archive/2013/09/10/ms13-068-a-difficult-to-exploit-double-free-in-outlook.aspx - http://www.us-cert.gov/ncas/alerts/TA13-253A