Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ry/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6000 - https://www.exploit-db.com/exploits/8082 - http://www.zerodayinitiative.com/advisories/ZDI-09-011/ - http://www.securityfocus.com/bid/33627 - http://www.vupen.com/english/advisories/2009/0389 - http://osvdb.org/51839 - https://www.exploit-db.com/exploits/8079 - https://www.exploit-db.com/exploits/8080 - https://www.exploit-db.com/exploits/8077 - http://www.us-cert.gov/cas/techalerts/TA09-041A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-002
CVE ID: CVE-2009-0076 State: PUBLISHED Published: 2009-02-10T22:13:00 Last Updated: 2024-08-07T04:24:17.087Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 7, when XHTML strict mode is used, allows remote attackers to execute arbitrary code via the zoom style directive in conjunction with unspecified other directives in a malformed Cascading Style Sheets (CSS) stylesheet in a crafted HTML document, aka "CSS Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6081 - http://www.vupen.com/english/advisories/2009/0389 - http
pository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6081 - http://www.vupen.com/english/advisories/2009/0389 - http://www.zerodayinitiative.com/advisories/ZDI-09-012/ - http://www.us-cert.gov/cas/techalerts/TA09-041A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-002
CVE ID: CVE-2009-0077 State: PUBLISHED Published: 2009-04-15T03:49:00 Last Updated: 2024-08-07T04:24:16.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: The firewall engine in Microsoft Forefront Threat Management Gateway, Medium Business Edition (TMG MBE); and Internet Security and Acceleration (ISA) Server 2004 SP3, 2006, 2006 Supportability Update, and 2006 SP1; does not properly manage the session state of web listeners, which allows remote attackers to cause a denial of service (many stale sessions) via crafted packets, aka "Web Proxy TCP State Limited Denial of Service Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytra
enial of Service Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1022045 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-016 - http://osvdb.org/53636 - http://www.us-cert.gov/cas/techalerts/TA09-104A.html - http://www.vupen.com/english/advisories/2009/1030 - http://secunia.com/advisories/34687 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6068
CVE ID: CVE-2009-0078 State: PUBLISHED Published: 2009-04-15T03:49:00 Last Updated: 2024-08-07T04:24:17.452Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Windows Management Instrumentation (WMI) provider in Microsoft Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does not properly implement isolation among a set of distinct processes that (1) all run under the NetworkService account or (2) all run under the LocalService account, which allows local users to gain privileges by accessing the resources of one of the processes, aka "Windows WMI Service Isolation Vulnerability." Additional Analyst Notes: - CVE Program Container: References: -
ses, aka "Windows WMI Service Isolation Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6193 - http://osvdb.org/53666 - http://www.securitytracker.com/id?1022044 - http://www.us-cert.gov/cas/techalerts/TA09-104A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-012 - http://www.vupen.com/english/advisories/2009/1026
CVE ID: CVE-2009-0079 State: PUBLISHED Published: 2009-04-15T03:49:00 Last Updated: 2024-08-07T04:24:17.086Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RPCSS service in Microsoft Windows XP SP2 and SP3 and Server 2003 SP1 and SP2 does not properly implement isolation among a set of distinct processes that (1) all run under the NetworkService account or (2) all run under the LocalService account, which allows local users to gain privileges by accessing the resources of one of the processes, aka "Windows RPCSS Service Isolation Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/53667 - http://www.securitytracker.com/id?1022044
nalyst Notes: - CVE Program Container: References: - http://osvdb.org/53667 - http://www.securitytracker.com/id?1022044 - http://www.us-cert.gov/cas/techalerts/TA09-104A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-012 - http://www.vupen.com/english/advisories/2009/1026 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6147
CVE ID: CVE-2009-0080 State: PUBLISHED Published: 2009-04-15T03:49:00 Last Updated: 2024-08-07T04:24:17.096Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ThreadPool class in Windows Vista Gold and SP1, and Server 2008, does not properly implement isolation among a set of distinct processes that (1) all run under the NetworkService account or (2) all run under the LocalService account, which allows local users to gain privileges by leveraging incorrect thread ACLs to access the resources of one of the processes, aka "Windows Thread Pool ACL Weakness Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1022044 - ht
bility." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1022044 - http://www.us-cert.gov/cas/techalerts/TA09-104A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-012 - http://www.vupen.com/english/advisories/2009/1026 - http://osvdb.org/53668 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6177
CVE ID: CVE-2009-0081 State: PUBLISHED Published: 2009-03-10T20:00:00 Last Updated: 2024-08-07T04:24:16.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: The graphics device interface (GDI) implementation in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does not properly validate input received from user mode, which allows remote attackers to execute arbitrary code via a crafted (1) Windows Metafile (aka WMF) or (2) Enhanced Metafile (aka EMF) image file, aka "Windows Kernel Input Validation Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1
ion Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1021826 - http://www.us-cert.gov/cas/techalerts/TA09-069A.html - http://osvdb.org/52522 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-006 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6202 - http://secunia.com/advisories/34117 - http://www.vupen.com/english/advisories/2009/0659 - http://support.avaya.com/elmodocs2/security/ASA-2009-079.htm - http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=842987&poid= - http://www.securityfocus.com/bid/34012
CVE ID: CVE-2009-0082 State: PUBLISHED Published: 2009-03-10T20:00:00 Last Updated: 2025-01-21T15:19:17.114Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does not properly validate handles, which allows local users to gain privileges via a crafted application that triggers unspecified "actions," aka "Windows Kernel Handle Validation Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/34027 - http://www.us-cert.gov/cas/techalerts/TA09-069A.html - https://docs.microsoft.com/en-
/www.securityfocus.com/bid/34027 - http://www.us-cert.gov/cas/techalerts/TA09-069A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-006 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6036 - http://www.securitytracker.com/id?1021827 - http://secunia.com/advisories/34117 - http://osvdb.org/52523 - http://www.vupen.com/english/advisories/2009/0659 - http://support.avaya.com/elmodocs2/security/ASA-2009-079.htm - http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=842987&poid=
CVE ID: CVE-2009-0083 State: PUBLISHED Published: 2009-03-10T20:00:00 Last Updated: 2024-08-07T04:24:17.087Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 does not properly handle invalid pointers, which allows local users to gain privileges via an application that triggers use of a crafted pointer, aka "Windows Kernel Invalid Pointer Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA09-069A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-006 - http://www.securityfocus.com/bid/34025 - http://www.
rosoft.com/en-us/security-updates/securitybulletins/2009/ms09-006 - http://www.securityfocus.com/bid/34025 - http://www.securitytracker.com/id?1021827 - http://secunia.com/advisories/34117 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5440 - http://osvdb.org/52524 - http://www.vupen.com/english/advisories/2009/0659 - http://support.avaya.com/elmodocs2/security/ASA-2009-079.htm - http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=842987&poid=
CVE ID: CVE-2009-0084 State: PUBLISHED Published: 2009-04-15T03:49:00 Last Updated: 2024-08-07T04:24:17.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in DirectShow in Microsoft DirectX 8.1 and 9.0 allows remote attackers to execute arbitrary code via an MJPEG file or video stream with a malformed Huffman table, which triggers an exception that frees heap memory that is later accessed, aka "MJPEG Decompression Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA09-104A.html - http://osvdb.org/53632 - http://secunia.com/advisories/34665 - http://www.securitytracker.com/id?1022040
A09-104A.html - http://osvdb.org/53632 - http://secunia.com/advisories/34665 - http://www.securitytracker.com/id?1022040 - http://www.vupen.com/english/advisories/2009/1025 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5618 - http://support.avaya.com/elmodocs2/security/ASA-2009-132.htm - http://www.securityfocus.com/bid/34460 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-011 - http://www.piotrbania.com/all/adv/ms-directx-mjpeg-adv.txt
CVE ID: CVE-2009-0085 State: PUBLISHED Published: 2009-03-10T20:00:00 Last Updated: 2024-08-07T04:24:17.098Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Secure Channel (aka SChannel) authentication component in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008, when certificate authentication is used, does not properly validate the client's key exchange data in Transport Layer Security (TLS) handshake messages, which allows remote attackers to spoof authentication by crafting a TLS packet based on knowledge of the certificate but not the private key, aka "SChannel Spoofing Vulnerability." Additional Analyst Notes: - CV
wledge of the certificate but not the private key, aka "SChannel Spoofing Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-007 - http://www.securitytracker.com/id?1021828 - http://www.us-cert.gov/cas/techalerts/TA09-069A.html - http://www.vupen.com/english/advisories/2009/0660 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6011 - http://secunia.com/advisories/34215 - http://osvdb.org/52521
CVE ID: CVE-2009-0086 State: PUBLISHED Published: 2009-04-15T03:49:00 Last Updated: 2024-08-07T04:24:17.063Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer underflow in Windows HTTP Services (aka WinHTTP) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote HTTP servers to execute arbitrary code via crafted parameter values in a response, related to error handling, aka "Windows HTTP Services Integer Underflow Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6149 - http://www.securityfocu
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6149 - http://www.securityfocus.com/bid/34435 - http://secunia.com/advisories/34677 - http://www.us-cert.gov/cas/techalerts/TA09-104A.html - http://www.securitytracker.com/id?1022041 - http://osvdb.org/53620 - http://www.vupen.com/english/advisories/2009/1027 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-013
CVE ID: CVE-2009-0087 State: PUBLISHED Published: 2009-04-15T03:49:00 Last Updated: 2024-08-07T04:24:17.070Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Word 6 text converter in WordPad in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2; and the Word 6 text converter in Microsoft Office Word 2000 SP3 and 2002 SP3; allows remote attackers to execute arbitrary code via a crafted Word 6 file that contains malformed data, aka "WordPad and Office Text Converter Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1022043 - http://www.us-cert.gov/c
alyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1022043 - http://www.us-cert.gov/cas/techalerts/TA09-104A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5799 - http://osvdb.org/53662 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-010 - http://www.vupen.com/english/advisories/2009/1024
CVE ID: CVE-2009-0088 State: PUBLISHED Published: 2009-04-15T03:49:00 Last Updated: 2024-08-07T04:24:17.084Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WordPerfect 6.x Converter (WPFT632.CNV, 1998.1.27.0) in Microsoft Office Word 2000 SP3 and Microsoft Office Converter Pack does not properly validate the length of an unspecified string, which allows remote attackers to execute arbitrary code via a crafted WordPerfect 6.x file, related to an unspecified counter and control structures on the stack, aka "Word 2000 WordPerfect 6.x Converter Stack Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?10220
Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1022043 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=782 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5736 - http://www.us-cert.gov/cas/techalerts/TA09-104A.html - http://osvdb.org/53663 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-010 - http://www.vupen.com/english/advisories/2009/1024
CVE ID: CVE-2009-0089 State: PUBLISHED Published: 2009-04-15T03:49:00 Last Updated: 2024-08-07T04:24:17.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: Windows HTTP Services (aka WinHTTP) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, and Vista Gold allows remote web servers to impersonate arbitrary https web sites by using DNS spoofing to "forward a connection" to a different https web site that has a valid certificate matching its own domain name, but not a certificate matching the domain name of the host requested by the user, aka "Windows HTTP Services Certificate Name Mismatch Vulnerability." Additional Analyst Notes: - CVE Program Container: Ref
"Windows HTTP Services Certificate Name Mismatch Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34437 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6027 - http://secunia.com/advisories/34677 - http://www.us-cert.gov/cas/techalerts/TA09-104A.html - http://www.securitytracker.com/id?1022041 - http://www.vupen.com/english/advisories/2009/1027 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-013
CVE ID: CVE-2009-0090 State: PUBLISHED Published: 2009-10-14T10:00:00 Last Updated: 2024-08-07T04:24:17.086Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft .NET Framework 1.0 SP3, 1.1 SP1, and 2.0 SP1 does not properly validate .NET verifiable code, which allows remote attackers to obtain unintended access to stack memory, and execute arbitrary code, via (1) a crafted XAML browser application (XBAP), (2) a crafted ASP.NET application, or (3) a crafted .NET Framework application, aka "Microsoft .NET Framework Pointer Verification Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA09-286A.html - https:/
nal Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA09-286A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5716 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-061
CVE ID: CVE-2009-0091 State: PUBLISHED Published: 2009-10-14T10:00:00 Last Updated: 2024-08-07T04:24:17.083Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft .NET Framework 2.0, 2.0 SP1, and 3.5 does not properly enforce a certain type-equality constraint in .NET verifiable code, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (XBAP), (2) a crafted ASP.NET application, or (3) a crafted .NET Framework application, aka "Microsoft .NET Framework Type Verification Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA09-286A.html - https://oval.cisecurity.org/
CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA09-286A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6451 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-061
CVE ID: CVE-2009-0092 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2009-0093 State: PUBLISHED Published: 2009-03-11T14:00:00 Last Updated: 2024-08-07T04:24:17.647Z Vendors: n/a Products: n/a Problem Types: n/a Description: Windows DNS Server in Microsoft Windows 2000 SP4, Server 2003 SP1 and SP2, and Server 2008, when dynamic updates are enabled, does not restrict registration of the "wpad" hostname, which allows remote authenticated users to hijack the Web Proxy Auto-Discovery (WPAD) feature, and conduct man-in-the-middle attacks by spoofing a proxy server, via a Dynamic Update request for this hostname, aka "DNS Server Vulnerability in WPAD Registration Vulnerability," a related issue to CVE-2007-1692. Additional Analyst Notes: - CVE Program C
ability in WPAD Registration Vulnerability," a related issue to CVE-2007-1692. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6138 - http://www.us-cert.gov/cas/techalerts/TA09-069A.html - http://blog.ncircle.com/blogs/vert/archives/2009/03/successful_exploit_renders_mic.html - http://www.vupen.com/english/advisories/2009/0661 - http://secunia.com/advisories/34217 - http://osvdb.org/52519 - http://www.securityfocus.com/bid/33989 - http://support.avaya.com/elmodocs2/security/ASA-2009-083.htm - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-008 - http://www.sec
ty/ASA-2009-083.htm - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-008 - http://www.securitytracker.com/id?1021830 - http://blogs.technet.com/srd/archive/2009/03/13/ms09-008-dns-and-wins-server-security-update-in-more-detail.aspx
CVE ID: CVE-2009-0094 State: PUBLISHED Published: 2009-03-11T14:00:00 Last Updated: 2024-08-07T04:24:17.595Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WINS server in Microsoft Windows 2000 SP4 and Server 2003 SP1 and SP2 does not restrict registration of the (1) "wpad" and (2) "isatap" NetBIOS names, which allows remote authenticated users to hijack the Web Proxy Auto-Discovery (WPAD) and Intra-Site Automatic Tunnel Addressing Protocol (ISATAP) features, and conduct man-in-the-middle attacks by spoofing a proxy server or ISATAP route, by registering one of these names in the WINS database, aka "WPAD WINS Server Registration Vulnerability," a related issue to CVE-2007-169
of these names in the WINS database, aka "WPAD WINS Server Registration Vulnerability," a related issue to CVE-2007-1692. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA09-069A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6117 - http://www.vupen.com/english/advisories/2009/0661 - http://secunia.com/advisories/34217 - http://osvdb.org/52520 - http://www.securityfocus.com/bid/34013 - http://www.securitytracker.com/id?1021829 - http://support.avaya.com/elmodocs2/security/ASA-2009-083.htm - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-008 - http://blogs.tec
/ASA-2009-083.htm - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-008 - http://blogs.technet.com/srd/archive/2009/03/13/ms09-008-dns-and-wins-server-security-update-in-more-detail.aspx
CVE ID: CVE-2009-0095 State: PUBLISHED Published: 2009-02-10T22:13:00 Last Updated: 2024-08-07T04:24:18.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Office Visio 2002 SP2, 2003 SP3, and 2007 SP1 does not properly validate object data in Visio files, which allows remote attackers to execute arbitrary code via a crafted file, aka "Memory Validation Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/0391 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6179 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-005 - http://www.
itre.oval%3Adef%3A6179 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-005 - http://www.us-cert.gov/cas/techalerts/TA09-041A.html
CVE ID: CVE-2009-0096 State: PUBLISHED Published: 2009-02-10T22:13:00 Last Updated: 2024-08-07T04:24:17.848Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Office Visio 2002 SP2, 2003 SP3, and 2007 SP1 does not properly perform memory copy operations for object data, which allows remote attackers to execute arbitrary code via a crafted Visio document, aka "Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/0391 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6172 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/m
finition/oval%3Aorg.mitre.oval%3Adef%3A6172 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-005 - http://www.us-cert.gov/cas/techalerts/TA09-041A.html