Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-1107 State: PUBLISHED Published: 2009-03-25T23:00:00 Last Updated: 2024-08-07T05:04:48.666Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12 and earlier, and 5.0 Update 17 and earlier, allows remote attackers to trick a user into trusting a signed applet via unknown vectors that misrepresent the security warning dialog, related to a "Swing JLabel HTML parsing vulnerability," aka CR 6782871. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00001.html - http://sunsolve.sun.com/search/document.
- http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00001.html - http://sunsolve.sun.com/search/document.do?assetkey=1-21-125139-14-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49460 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6585 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133 - http://secunia.com/advisories/35156 - http://support.avaya.com/elmodocs2/security/ASA-2009-109.htm - http://secunia.com/advisories/37460 - http://security.gentoo.org/glsa/glsa-200911-02.xml - http://www.redhat.com/support/errata/RHSA-2009-1038.html - https://rhn.redhat.com/errata/RHSA-2009-1198.h
00911-02.xml - http://www.redhat.com/support/errata/RHSA-2009-1038.html - https://rhn.redhat.com/errata/RHSA-2009-1198.html - http://www.vmware.com/security/advisories/VMSA-2009-0016.html - http://marc.info/?l=bugtraq&m=124344236532162&w=2 - http://www.redhat.com/support/errata/RHSA-2009-0394.html - http://secunia.com/advisories/34495 - http://secunia.com/advisories/36185 - http://secunia.com/advisories/35255 - http://www.vupen.com/english/advisories/2009/1426 - http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html - http://www.securityfocus.com/archive/1/507985/100/0/threaded - http://www.redhat.com/support/errata/RHSA-2009-0392.html - http://www.securityfocus.com/bid/3
/1/507985/100/0/threaded - http://www.redhat.com/support/errata/RHSA-2009-0392.html - http://www.securityfocus.com/bid/34240 - http://secunia.com/advisories/34496 - http://www.securitytracker.com/id?1021920 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-254611-1 - http://secunia.com/advisories/35416 - http://support.avaya.com/elmodocs2/security/ASA-2009-108.htm - http://secunia.com/advisories/37386 - http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html - http://www.vupen.com/english/advisories/2009/3316
CVE ID: CVE-2009-1119 State: PUBLISHED Published: 2009-04-15T19:00:00 Last Updated: 2024-08-07T05:04:47.923Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple heap-based buffer overflows in EMC RepliStor 6.2 before SP5 and 6.3 before SP2 allow remote attackers to execute arbitrary code via a crafted message to (1) ctrlservice.exe or (2) rep_srv.exe, possibly related to an integer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.fortiguardcenter.com/advisory/FGA-2009-13.html - http://www.securityfocus.com/bid/34449 - http://www.vupen.com/english/advisories/2009/1018 - http://www.securitytracker.com/id?1022026 - http://www.securityfocus.co
p://www.vupen.com/english/advisories/2009/1018 - http://www.securitytracker.com/id?1022026 - http://www.securityfocus.com/archive/1/502575/100/0/threaded - http://secunia.com/advisories/34699
CVE ID: CVE-2009-1120 State: PUBLISHED Published: 2020-01-15T17:19:19 Last Updated: 2024-08-07T05:04:48.237Z Vendors: EMC Products: RepliStor Problem Types: Other Description: EMC RepliStor Server Service before ESA-09-003 has a DoASOCommand Remote Code Execution Vulnerability. The flaw exists within the DoRcvRpcCall RPC function -exposed via the rep_srv.exe process- where the vulnerability is caused by an error when the rep_srv.exe handles a specially crafted packet sent by an unauthenticated attacker. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-09-068/ - https://fortiguard.com/encyclopedia/ips/17967/emc-replistor-server-s
/www.zerodayinitiative.com/advisories/ZDI-09-068/ - https://fortiguard.com/encyclopedia/ips/17967/emc-replistor-server-service-doasocommand-code-execution
CVE ID: CVE-2009-1122 State: PUBLISHED Published: 2009-06-10T18:00:00 Last Updated: 2024-08-07T05:04:48.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WebDAV extension in Microsoft Internet Information Services (IIS) 5.0 on Windows 2000 SP4 does not properly decode URLs, which allows remote attackers to bypass authentication, and possibly read or create files, via a crafted HTTP request, aka "IIS 5.0 WebDAV Authentication Bypass Vulnerability," a different vulnerability than CVE-2009-1535. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5861 - http://www.securitytracke
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5861 - http://www.securitytracker.com/id?1022358 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-020 - http://www.securityfocus.com/bid/35232 - http://www.us-cert.gov/cas/techalerts/TA09-160A.html - http://www.vupen.com/english/advisories/2009/1539 - http://www.attrition.org/pipermail/vim/2009-June/002192.html
CVE ID: CVE-2009-1123 State: PUBLISHED Published: 2009-06-10T18:00:00.000Z Last Updated: 2025-10-22T00:05:54.609Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 does not properly validate changes to unspecified kernel objects, which allows local users to gain privileges via a crafted application, aka "Windows Kernel Desktop Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://secunia.com/advisories/35372 - http://osvdb.org/54940 - http://www.vupen.com/english/advisories/2009/1544 - https://docs.microso
com/advisories/35372 - http://osvdb.org/54940 - http://www.vupen.com/english/advisories/2009/1544 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-025 - http://www.securitytracker.com/id?1022359 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6206 - http://www.us-cert.gov/cas/techalerts/TA09-160A.html
CVE ID: CVE-2009-1124 State: PUBLISHED Published: 2009-06-10T18:00:00 Last Updated: 2024-08-07T05:04:47.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 does not properly validate user-mode pointers in unspecified error conditions, which allows local users to gain privileges via a crafted application, aka "Windows Kernel Pointer Validation Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35372 - http://www.securityfocus.com/bid/35238 - http://www.vupen.com/english/advisories/2009/1544 - https://do
visories/35372 - http://www.securityfocus.com/bid/35238 - http://www.vupen.com/english/advisories/2009/1544 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-025 - http://www.securitytracker.com/id?1022359 - http://www.us-cert.gov/cas/techalerts/TA09-160A.html - http://osvdb.org/54941 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6231
CVE ID: CVE-2009-1125 State: PUBLISHED Published: 2009-06-10T18:00:00 Last Updated: 2024-08-07T05:04:48.669Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 does not properly validate an argument to an unspecified system call, which allows local users to gain privileges via a crafted application, aka "Windows Driver Class Registration Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35372 - http://www.securityfocus.com/bid/35240 - http://www.vupen.com/english/advisories/2009/1544 - https://docs.micros
35372 - http://www.securityfocus.com/bid/35240 - http://www.vupen.com/english/advisories/2009/1544 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-025 - http://www.securitytracker.com/id?1022359 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5912 - http://www.us-cert.gov/cas/techalerts/TA09-160A.html - http://osvdb.org/54942
CVE ID: CVE-2009-1126 State: PUBLISHED Published: 2009-06-10T18:00:00 Last Updated: 2024-08-07T05:04:48.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not properly validate the user-mode input associated with the editing of an unspecified desktop parameter, which allows local users to gain privileges via a crafted application, aka "Windows Desktop Parameter Edit Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35372 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6016 - http://www.vupen.com/e
2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6016 - http://www.vupen.com/english/advisories/2009/1544 - http://osvdb.org/54943 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-025 - http://www.securitytracker.com/id?1022359 - http://www.us-cert.gov/cas/techalerts/TA09-160A.html
CVE ID: CVE-2009-1127 State: PUBLISHED Published: 2009-11-11T19:00:00 Last Updated: 2024-08-07T05:04:47.950Z Vendors: n/a Products: n/a Problem Types: n/a Description: win32k.sys in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 does not correctly validate an argument to an unspecified system call, which allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference, aka "Win32k NULL Pointer Dereferencing Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%
E Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5588 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-065 - http://www.us-cert.gov/cas/techalerts/TA09-314A.html
CVE ID: CVE-2009-1128 State: PUBLISHED Published: 2009-05-12T22:00:00 Last Updated: 2024-08-07T05:04:47.965Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via crafted sound data in a file that uses a PowerPoint 95 native file format, leading to memory corruption, aka "PP7 Memory Corruption Vulnerability," a different vulnerability than CVE-2009-1129. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32428 - http://www.vupen.com/english/advisories/2009/1290 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/
http://www.vupen.com/english/advisories/2009/1290 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-017 - http://www.securitytracker.com/id?1022205 - http://www.us-cert.gov/cas/techalerts/TA09-132A.html - http://www.securityfocus.com/bid/34837 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5416
CVE ID: CVE-2009-1129 State: PUBLISHED Published: 2009-05-12T22:00:00 Last Updated: 2024-08-07T05:04:48.049Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in the PowerPoint 95 importer (PP7X32.DLL) in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allow remote attackers to execute arbitrary code via an inconsistent record length in sound data in a file that uses a PowerPoint 95 (PPT95) native file format, aka "PP7 Memory Corruption Vulnerability," a different vulnerability than CVE-2009-1128. Additional Analyst Notes: - CVE Program Container: References: - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=791
t Notes: - CVE Program Container: References: - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=791 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6176 - http://secunia.com/advisories/32428 - http://www.vupen.com/english/advisories/2009/1290 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-017 - http://www.securitytracker.com/id?1022205 - http://www.us-cert.gov/cas/techalerts/TA09-132A.html - http://www.securityfocus.com/bid/34839 - http://osvdb.org/54387
CVE ID: CVE-2009-1130 State: PUBLISHED Published: 2009-05-12T22:00:00 Last Updated: 2024-08-07T05:04:47.970Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Microsoft Office PowerPoint 2002 SP3 and 2003 SP3, and PowerPoint in Microsoft Office 2004 for Mac, allows remote attackers to execute arbitrary code via a crafted structure in a Notes container in a PowerPoint file that causes PowerPoint to read more data than was allocated when creating a C++ object, leading to an overwrite of a function pointer, aka "Heap Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/def
ity." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5961 - http://secunia.com/advisories/32428 - http://www.vupen.com/english/advisories/2009/1290 - http://www.securityfocus.com/archive/1/503454 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-017 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=794 - http://www.securitytracker.com/id?1022205 - http://www.zerodayinitiative.com/advisories/ZDI-09-020/ - http://www.us-cert.gov/cas/techalerts/TA09-132A.html - http://www.securityfocus.com/bid/34840
CVE ID: CVE-2009-1131 State: PUBLISHED Published: 2009-05-12T22:00:00 Last Updated: 2024-08-07T05:04:47.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in Microsoft Office PowerPoint 2000 SP3 allow remote attackers to execute arbitrary code via a large amount of data associated with unspecified atoms in a PowerPoint file that triggers memory corruption, aka "Data Out of Bounds Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32428 - http://www.vupen.com/english/advisories/2009/1290 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-017 - https://ova
h/advisories/2009/1290 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-017 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5351 - http://www.securitytracker.com/id?1022205 - http://secunia.com/secunia_research/2008-46/ - http://www.us-cert.gov/cas/techalerts/TA09-132A.html - http://osvdb.org/54393 - http://www.securityfocus.com/archive/1/503451 - http://www.securityfocus.com/bid/34841
CVE ID: CVE-2009-1132 State: PUBLISHED Published: 2009-09-08T22:00:00 Last Updated: 2024-08-07T05:04:48.238Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the Wireless LAN AutoConfig Service (aka Wlansvc) in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via a malformed wireless frame, aka "Wireless Frame Parsing Remote Code Execution Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6389 - http://www.us-cert.gov/cas/techalerts/TA09-251A.html - https://docs.mi
h/definition/oval%3Aorg.mitre.oval%3Adef%3A6389 - http://www.us-cert.gov/cas/techalerts/TA09-251A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-049
CVE ID: CVE-2009-1133 State: PUBLISHED Published: 2009-08-12T17:00:00 Last Updated: 2024-08-07T05:04:48.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Microsoft Remote Desktop Connection (formerly Terminal Services Client) running RDP 5.0 through 6.1 on Windows, and Remote Desktop Connection Client for Mac 2.0, allows remote attackers to execute arbitrary code via unspecified parameters, aka "Remote Desktop Connection Heap Overflow Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1022709 - http://www.us-cert.gov/cas/techalerts/TA09-223A.html - https://oval.cisecurity.org/repositor
itytracker.com/id?1022709 - http://www.us-cert.gov/cas/techalerts/TA09-223A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5693 - http://www.vupen.com/english/advisories/2009/2238 - http://secunia.com/advisories/36229 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-044
CVE ID: CVE-2009-1134 State: PUBLISHED Published: 2009-06-10T18:00:00 Last Updated: 2024-08-07T05:04:48.015Z Vendors: n/a Products: n/a Problem Types: n/a Description: Excel in 2007 Microsoft Office System SP1 and SP2; Microsoft Office Excel Viewer; and Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allow remote attackers to execute arbitrary code via a BIFF file with a malformed Qsir (0x806) record object, aka "Record Pointer Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35246 - http://www.securityfocus.com/archive/1/504213/100/0/threaded - http://www.vupen.com/e
/www.securityfocus.com/bid/35246 - http://www.securityfocus.com/archive/1/504213/100/0/threaded - http://www.vupen.com/english/advisories/2009/1540 - http://www.securitytracker.com/id?1022351 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-021 - http://osvdb.org/54958 - http://www.us-cert.gov/cas/techalerts/TA09-160A.html - http://www.zerodayinitiative.com/advisories/ZDI-09-040/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5922
CVE ID: CVE-2009-1135 State: PUBLISHED Published: 2009-07-15T15:00:00 Last Updated: 2024-08-07T05:04:48.291Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Security and Acceleration (ISA) Server 2006 Gold and SP1, when Radius OTP is enabled, uses the HTTP-Basic authentication method, which allows remote attackers to gain the privileges of an arbitrary account, and access published web pages, via vectors involving attempted access to a network resource behind the ISA Server, aka "Radius OTP Bypass Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1022547 - https://oval.cisecurity.org/repository/sea
Program Container: References: - http://www.securitytracker.com/id?1022547 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5649 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-031 - http://www.vupen.com/english/advisories/2009/1889 - http://www.us-cert.gov/cas/techalerts/TA09-195A.html - http://secunia.com/advisories/35784
CVE ID: CVE-2009-1136 State: PUBLISHED Published: 2009-07-15T15:00:00 Last Updated: 2024-08-07T05:04:47.977Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Microsoft Office Web Components Spreadsheet ActiveX control (aka OWC10 or OWC11), as distributed in Office XP SP3 and Office 2003 SP3, Office XP Web Components SP3, Office 2003 Web Components SP3, Office 2003 Web Components SP1 for the 2007 Microsoft Office System, Internet Security and Acceleration (ISA) Server 2004 SP3 and 2006 Gold and SP1, and Office Small Business Accounting 2006, when used in Internet Explorer, allows remote attackers to execute arbitrary code via a crafted call to the msDataSourceObject method, as e
et Explorer, allows remote attackers to execute arbitrary code via a crafted call to the msDataSourceObject method, as exploited in the wild in July and August 2009, aka "Office Web Components HTML Script Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5809 - http://isc.sans.org/diary.html?storyid=6778 - http://www.us-cert.gov/cas/techalerts/TA09-223A.html - http://www.microsoft.com/technet/security/advisory/973472.mspx - http://blogs.technet.com/srd/archive/2009/07/13/more-information-about-the-office-web-components-activex-vulnerability.aspx - http://blogs.technet.com/msr
ve/2009/07/13/more-information-about-the-office-web-components-activex-vulnerability.aspx - http://blogs.technet.com/msrc/archive/2009/07/13/microsoft-security-advisory-973472-released.aspx - http://xeye.us/blog/2009/07/one-0day/ - http://trac.metasploit.com/browser/framework3/trunk/modules/exploits/windows/browser/owc_spreadsheet_msdso.rb - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-043
CVE ID: CVE-2009-1137 State: PUBLISHED Published: 2009-05-12T22:00:00 Last Updated: 2024-08-07T05:04:48.035Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via crafted sound data in a file that uses a PowerPoint 4.0 native file format, leading to memory corruption, aka "Legacy File Format Vulnerability," a different vulnerability than CVE-2009-0222, CVE-2009-0223, CVE-2009-0226, and CVE-2009-0227. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32428 - http://www.vupen.com/english/advisories/2009/1290 - https://docs.microsof
ences: - http://secunia.com/advisories/32428 - http://www.vupen.com/english/advisories/2009/1290 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-017 - http://www.securityfocus.com/bid/34876 - http://osvdb.org/54381 - http://www.securitytracker.com/id?1022205 - http://www.us-cert.gov/cas/techalerts/TA09-132A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5946 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50425
CVE ID: CVE-2009-1138 State: PUBLISHED Published: 2009-06-10T17:37:00 Last Updated: 2024-08-07T05:04:47.970Z Vendors: n/a Products: n/a Problem Types: n/a Description: The LDAP service in Active Directory on Microsoft Windows 2000 SP4 does not properly free memory for LDAP and LDAPS requests, which allows remote attackers to execute arbitrary code via a request that uses hexadecimal encoding, whose associated memory is not released, related to a "DN AttributeValue," aka "Active Directory Invalid Free Vulnerability." NOTE: this issue is probably a memory leak. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35226 - http://labs.idefense.com/int
lyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35226 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=804 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6180 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-018 - http://support.avaya.com/elmodocs2/security/ASA-2009-214.htm - http://www.securitytracker.com/id?1022349 - http://www.vupen.com/english/advisories/2009/1537 - http://www.us-cert.gov/cas/techalerts/TA09-160A.html - http://secunia.com/advisories/35355 - http://osvdb.org/54937