Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ditional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-017 - http://www.us-cert.gov/cas/techalerts/TA10-068A.html - http://www.securitytracker.com/id?1023698 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7862 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=862
CVE ID: CVE-2010-0261 State: PUBLISHED Published: 2010-03-10T22:00:00 Last Updated: 2024-08-07T00:45:11.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Microsoft Office Excel 2007 SP1 and SP2 and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted spreadsheet in which "a MDXSET record is broken up into several records," aka "Microsoft Office Excel MDXSET Record Heap Overflow Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=861 - https://oval.cisecur
Container: References: - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=861 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8479 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-017 - http://www.us-cert.gov/cas/techalerts/TA10-068A.html - http://www.securitytracker.com/id?1023698
CVE ID: CVE-2010-0262 State: PUBLISHED Published: 2010-03-10T22:00:00 Last Updated: 2024-08-07T00:45:11.568Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Office Excel 2007 SP1 and SP2 and Office 2004 for Mac do not properly parse the Excel file format, which allows remote attackers to execute arbitrary code via a crafted spreadsheet that triggers access of an uninitialized stack variable, aka "Microsoft Office Excel FNGROUPNAME Record Uninitialized Memory Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=860 - https://docs.microsoft.com/en-us/security-updates/securitybu
fense.com/intelligence/vulnerabilities/display.php?id=860 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-017 - http://www.us-cert.gov/cas/techalerts/TA10-068A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8562 - http://www.securitytracker.com/id?1023698
CVE ID: CVE-2010-0263 State: PUBLISHED Published: 2010-03-10T22:00:00 Last Updated: 2024-08-07T00:45:11.572Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Office Excel 2007 SP1 and SP2; Office 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer SP1 and SP2; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2; and Office SharePoint Server 2007 SP1 and SP2 do not validate ZIP headers during decompression of Open XML (.XLSX) documents, which allows remote attackers to execute arbitrary code via a crafted document that triggers access to uninitialized memory locations, aka "Microsoft Office Excel XLSX File Parsing C
crafted document that triggers access to uninitialized memory locations, aka "Microsoft Office Excel XLSX File Parsing Code Execution Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8407 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-017 - http://www.us-cert.gov/cas/techalerts/TA10-068A.html - http://www.securityfocus.com/archive/1/509979/100/0/threaded - http://www.zerodayinitiative.com/advisories/ZDI-10-025/ - http://www.securitytracker.com/id?1023698
CVE ID: CVE-2010-0264 State: PUBLISHED Published: 2010-03-10T22:00:00 Last Updated: 2024-08-07T00:45:11.165Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Office Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly parse the Excel file format, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Microsoft Office Excel DbOrParamQry Record Parsing Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-017 - http://www.us-cert.gov/cas/techalerts/TA10-068A.html - http://www.securitytra
-updates/securitybulletins/2010/ms10-017 - http://www.us-cert.gov/cas/techalerts/TA10-068A.html - http://www.securitytracker.com/id?1023698 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7888
CVE ID: CVE-2010-0265 State: PUBLISHED Published: 2010-03-10T22:00:00 Last Updated: 2024-08-07T00:45:11.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Microsoft Windows Movie Maker 2.1, 2.6, and 6.0, and Microsoft Producer 2003, allows remote attackers to execute arbitrary code via a crafted project (.MSWMM) file, aka "Movie Maker and Producer Buffer Overflow Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-016 - http://www.us-cert.gov/cas/techalerts/TA10-068A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Ad
t.gov/cas/techalerts/TA10-068A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8595
CVE ID: CVE-2010-0266 State: PUBLISHED Published: 2010-07-14T18:31:00 Last Updated: 2024-08-07T00:45:11.374Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Office Outlook 2002 SP3, 2003 SP3, and 2007 SP1 and SP2 does not properly verify e-mail attachments with a PR_ATTACH_METHOD property value of ATTACH_BY_REFERENCE, which allows user-assisted remote attackers to execute arbitrary code via a crafted message, aka "Microsoft Outlook SMB Attachment Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11623 - http://www.us-cert.gov/cas/techalerts/TA10-194A.html
/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11623 - http://www.us-cert.gov/cas/techalerts/TA10-194A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-045
CVE ID: CVE-2010-0267 State: PUBLISHED Published: 2010-03-31T19:00:00 Last Updated: 2024-08-07T00:45:11.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6, 6 SP1, and 7 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "Uninitialized Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA10-089A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8554 - http://www.
10-089A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8554 - http://www.us-cert.gov/cas/techalerts/TA10-068A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-018 - http://www.vupen.com/english/advisories/2010/0744 - http://securitytracker.com/id?1023773 - http://www.securityfocus.com/bid/39023
CVE ID: CVE-2010-0268 State: PUBLISHED Published: 2010-04-14T15:44:00 Last Updated: 2024-08-07T00:45:11.743Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Windows Media Player ActiveX control in Windows Media Player (WMP) 9 on Microsoft Windows 2000 SP4 and XP SP2 and SP3 allows remote attackers to execute arbitrary code via crafted media content, aka "Media Player Remote Code Execution Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA10-103A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7281 - https://docs.microsoft.com/en-us/s
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7281 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-027
CVE ID: CVE-2010-0269 State: PUBLISHED Published: 2010-04-14T15:44:00 Last Updated: 2024-08-07T00:45:11.616Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SMB client in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly allocate memory for SMB responses, which allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code via a crafted (1) SMBv1 or (2) SMBv2 response, aka "SMB Client Memory Allocation Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39372 - https:/
ability." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39372 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-020 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7129 - http://www.us-cert.gov/cas/techalerts/TA10-103A.html
CVE ID: CVE-2010-0270 State: PUBLISHED Published: 2010-04-14T15:44:00 Last Updated: 2024-08-07T00:45:11.653Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SMB client in Microsoft Windows Server 2008 R2 and Windows 7 does not properly validate fields in SMB transaction responses, which allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and reboot) via a crafted (1) SMBv1 or (2) SMBv2 response, aka "SMB Client Transaction Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7164 - htt
ntainer: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7164 - http://secunia.com/advisories/39372 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-020 - http://www.us-cert.gov/cas/techalerts/TA10-103A.html
CVE ID: CVE-2010-0271 State: PUBLISHED Published: 2010-01-08T17:00:00 Last Updated: 2024-08-07T00:45:11.658Z Vendors: n/a Products: n/a Problem Types: n/a Description: hald in Sun OpenSolaris snv_51 through snv_130 does not have the proc_audit privilege during unspecified attempts to write to the auditing log, which makes it easier for physically proximate attackers to avoid detection of changes to the set of connected hardware devices supporting the Hardware Abstraction Layer (HAL) specification. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/0076 - https://exchange.xforce.ibmcloud.com/vulnerabilities/55461 - http://www.security
upen.com/english/advisories/2010/0076 - https://exchange.xforce.ibmcloud.com/vulnerabilities/55461 - http://www.securitytracker.com/id?1023416 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-274830-1 - http://www.securityfocus.com/bid/37656
CVE ID: CVE-2010-0272 State: PUBLISHED Published: 2010-01-08T17:00:00 Last Updated: 2024-08-07T00:45:11.677Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Sun Java System Web Server 7.0 Update 6 on Linux allows remote attackers to discover process memory locations via crafted data to TCP port 80, as demonstrated by the vd_sjws2 module in VulnDisco. NOTE: as of 20100106, this disclosure has no actionable information. However, because the VulnDisco author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes. Additional Analyst Notes: - CVE Program Container: References: - http://intevydis.com/sjws_demo.html - ht
king purposes. Additional Analyst Notes: - CVE Program Container: References: - http://intevydis.com/sjws_demo.html - http://www.intevydis.com/blog/?p=102 - https://exchange.xforce.ibmcloud.com/vulnerabilities/55527
CVE ID: CVE-2010-0273 State: PUBLISHED Published: 2010-01-08T17:00:00Z Last Updated: 2024-09-16T23:20:56.071Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Sun Java System Web Server 7.0 Update 6 on Linux allows remote attackers to execute arbitrary code by sending a process memory address and crafted data to TCP port 80, as demonstrated by the vd_sjws2 module in VulnDisco. NOTE: as of 20100106, this disclosure has no actionable information. However, because the VulnDisco author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes. Additional Analyst Notes: - CVE Program Container: References: - http://intevydi
a CVE identifier for tracking purposes. Additional Analyst Notes: - CVE Program Container: References: - http://intevydis.com/sjws_demo.html - http://www.intevydis.com/blog/?p=102
CVE ID: CVE-2010-0274 State: PUBLISHED Published: 2010-01-09T18:00:00 Last Updated: 2024-08-07T00:45:11.364Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Edit Contact scene in Ultra-light Mode in IBM Lotus iNotes (aka Domino Web Access or DWA) before 229.241 for Domino 8.0.2 FP3 has unknown impact and attack vectors, aka SPR LSHR7TBLY5. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38026 - http://www.vupen.com/english/advisories/2010/0077 - https://exchange.xforce.ibmcloud.com/vulnerabilities/55470 - http://www.securityfocus.com/bid/37675 - http://www-01.ibm.com/support/docview.wss?uid=swg27017776
CVE ID: CVE-2010-0275 State: PUBLISHED Published: 2010-01-09T18:00:00 Last Updated: 2024-08-07T00:45:11.763Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ultra-light Mode in IBM Lotus iNotes (aka Domino Web Access or DWA) before 229.241 for Domino 8.0.2 FP3 does not properly handle script commands in the status-alerts URL, which has unspecified impact and attack vectors, aka SPR LSHR7TBM58. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38026 - http://www.vupen.com/english/advisories/2010/0077 - https://exchange.xforce.ibmcloud.com/vulnerabilities/55471 - http://www.securityfocus.com/bid/37675 - http://www-01.ibm.com/support/docvi
xforce.ibmcloud.com/vulnerabilities/55471 - http://www.securityfocus.com/bid/37675 - http://www-01.ibm.com/support/docview.wss?uid=swg27017776
CVE ID: CVE-2010-0276 State: PUBLISHED Published: 2010-01-09T18:00:00 Last Updated: 2024-08-07T00:45:11.421Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Lotus iNotes (aka Domino Web Access or DWA) before 229.241 for Domino 8.0.2 FP3 does not properly handle navigation of the "Try Lotus iNotes anyway" link from the page that reports use of an unsupported browser, which has unspecified impact and attack vectors, aka SPR LSHR7TBMQU. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38026 - https://exchange.xforce.ibmcloud.com/vulnerabilities/55473 - http://www.vupen.com/english/advisories/2010/0077 - http://www.securityfocus.com/bi
ibmcloud.com/vulnerabilities/55473 - http://www.vupen.com/english/advisories/2010/0077 - http://www.securityfocus.com/bid/37675 - http://www-01.ibm.com/support/docview.wss?uid=swg27017776
CVE ID: CVE-2010-0277 State: PUBLISHED Published: 2010-01-09T18:00:00 Last Updated: 2024-08-07T00:45:11.716Z Vendors: n/a Products: n/a Problem Types: n/a Description: slp.c in the MSN protocol plugin in libpurple in Pidgin before 2.6.6, including 2.6.4, and Adium 1.3.8 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via a malformed MSNSLP INVITE request in an SLP message, a different issue than CVE-2010-0013. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035332.html - http://www.securityfocus.com/bid/38294 - https
.fedoraproject.org/pipermail/package-announce/2010-February/035332.html - http://www.securityfocus.com/bid/38294 - https://rhn.redhat.com/errata/RHSA-2010-0115.html - http://www.vupen.com/english/advisories/2010/0413 - http://secunia.com/advisories/38563 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:085 - http://www.ubuntu.com/usn/USN-902-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9421 - http://secunia.com/advisories/38640 - http://secunia.com/advisories/38658 - http://secunia.com/advisories/41868 - https://bugzilla.redhat.com/show_bug.cgi?id=554335 - http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035347
zilla.redhat.com/show_bug.cgi?id=554335 - http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035347.html - http://www.vupen.com/english/advisories/2010/1020 - http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035409.html - http://secunia.com/advisories/38712 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18348 - http://www.vupen.com/english/advisories/2010/2693 - http://events.ccc.de/congress/2009/Fahrplan/events/3596.en.html - http://pidgin.im/news/security/?id=43 - http://blogs.sun.com/security/entry/cve_2010_0277_malformed_msn -
596.en.html - http://pidgin.im/news/security/?id=43 - http://blogs.sun.com/security/entry/cve_2010_0277_malformed_msn - http://www.openwall.com/lists/oss-security/2010/01/07/2 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:041 - http://secunia.com/advisories/38915 - http://developer.pidgin.im/wiki/ChangeLog
CVE ID: CVE-2010-0278 State: PUBLISHED Published: 2010-01-12T17:00:00 Last Updated: 2024-08-07T00:45:12.125Z Vendors: n/a Products: n/a Problem Types: n/a Description: A certain ActiveX control in msgsc.14.0.8089.726.dll in Microsoft Windows Live Messenger 2009 build 14.0.8089.726 on Windows Vista and Windows 7 allows remote attackers to cause a denial of service (msnmsgr.exe crash) by calling the ViewProfile method with a crafted argument during an MSN Messenger session. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/37680 - http://www.securityfocus.com/archive/1/508811/100/0/threaded
CVE ID: CVE-2010-0279 State: PUBLISHED Published: 2010-01-13T01:00:00 Last Updated: 2024-08-07T00:45:11.972Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in upload.php in BTS-GI Read excel 1.1 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an unspecified directory. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/55462 - http://osvdb.org/61579 - http://secunia.com/advisories/38083 - http://www.exp
force.ibmcloud.com/vulnerabilities/55462 - http://osvdb.org/61579 - http://secunia.com/advisories/38083 - http://www.exploit-db.com/exploits/11057
CVE ID: CVE-2010-0280 State: PUBLISHED Published: 2010-01-15T17:00:00 Last Updated: 2024-08-07T00:45:11.980Z Vendors: n/a Products: n/a Problem Types: n/a Description: Array index error in Jan Eric Kyprianidis lib3ds 1.x, as used in Google SketchUp 7.x before 7.1 M2, allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via crafted structures in a 3DS file, probably related to mesh.c. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38185 - http://www.securityfocus.com/archive/1/508913/100/0/threaded - http://www.coresecurity.com/content/google-sketchup-vulnerability - http://sketchup.google.c
e/1/508913/100/0/threaded - http://www.coresecurity.com/content/google-sketchup-vulnerability - http://sketchup.google.com/support/bin/answer.py?hl=en&answer=141303 - http://secunia.com/advisories/38187 - http://www.vupen.com/english/advisories/2010/0133 - http://www.securityfocus.com/bid/37708
CVE ID: CVE-2010-0283 State: PUBLISHED Published: 2010-02-21T22:00:00 Last Updated: 2024-08-07T00:45:12.015Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.7 before 1.7.2, and 1.8 alpha, allows remote attackers to cause a denial of service (assertion failure and daemon crash) via an invalid (1) AS-REQ or (2) TGS-REQ request. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html - http://www.securityfocus.com/bid/38260 - http://www.ubuntu.com/usn/USN-916-1 - http://www.vupen.com/english/advisories/2010/1481 - http://web.mit.edu/kerbe
260 - http://www.ubuntu.com/usn/USN-916-1 - http://www.vupen.com/english/advisories/2010/1481 - http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2010-001.txt - http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035222.html - http://securitytracker.com/id?1023593 - http://support.apple.com/kb/HT4188 - http://secunia.com/advisories/40220 - http://secunia.com/advisories/39023 - http://www.securityfocus.com/archive/1/509553/100/0/threaded - http://secunia.com/advisories/38598
CVE ID: CVE-2010-0284 State: PUBLISHED Published: 2010-06-18T16:00:00 Last Updated: 2024-08-07T00:45:11.744Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the getEntry method in the PortalModuleInstallManager component in a servlet in nps.jar in the Administration Console (aka Access Management Console) in Novell Access Manager 3.1 before 3.1.2-281 on Windows allows remote attackers to create arbitrary files with any contents, and consequently execute arbitrary code, via a .. (dot dot) in a parameter, aka ZDI-CAN-678. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/59528 -
onal Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/59528 - http://www.securitytracker.com/id?1024132 - http://secunia.com/advisories/40198 - http://www.novell.com/support/viewContent.do?externalId=7006255&sliceId=1 - http://www.vupen.com/english/advisories/2010/1516 - http://www.securityfocus.com/bid/40931
CVE ID: CVE-2010-0285 State: PUBLISHED Published: 2010-02-24T18:00:00 Last Updated: 2024-08-07T00:45:11.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: gnome-screensaver 2.14.3, 2.22.2, 2.27.x, 2.28.0, and 2.28.3, when the X configuration enables the extend screen option, allows physically proximate attackers to bypass screen locking, access an unattended workstation, and view half of the GNOME desktop by attaching an external monitor. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.gnome.org/show_bug.cgi?id=593616 - https://bugzilla.redhat.com/show_bug.cgi?id=557525 - http://git.gnome.org/browse/gnome-screensaver/commit/?id=2f597ea9f1f363277
/bugzilla.redhat.com/show_bug.cgi?id=557525 - http://git.gnome.org/browse/gnome-screensaver/commit/?id=2f597ea9f1f363277fd4dfc109fa41bbc6225aca - http://security-tracker.debian.org/tracker/CVE-2010-0285 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56366 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:093 - http://www.securityfocus.com/bid/38254