Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-2780 State: PUBLISHED Published: 2009-08-17T16:00:00 Last Updated: 2024-08-07T05:59:57.152Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in 68 Classifieds 4.1 allow remote attackers to inject arbitrary web script or HTML via the (1) cat parameter to category.php, view parameter to (2) login.php and (3) viewlisting.php, page parameter to (4) searchresults.php and (5) toplistings.php, and (6) member parameter to viewmember.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/56565 - http://packetstormsecurity.org/0907-exploits/68classifieds-xss.txt - http://www.osvdb.org/565
tp://www.osvdb.org/56565 - http://packetstormsecurity.org/0907-exploits/68classifieds-xss.txt - http://www.osvdb.org/56568 - http://www.osvdb.org/56564 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52071 - http://www.osvdb.org/56566 - http://www.osvdb.org/56569 - http://secunia.com/advisories/36034 - http://www.osvdb.org/56567
CVE ID: CVE-2009-2781 State: PUBLISHED Published: 2009-08-17T16:00:00 Last Updated: 2024-08-07T05:59:57.158Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in forum.php in Arab Portal 2.x, when magic_quotes_gpc is disabled, allows remote authenticated users to execute arbitrary SQL commands via the qc parameter in an addcomment action, a different vector than CVE-2006-1666. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9320 - http://www.securityfocus.com/bid/35914
CVE ID: CVE-2009-2782 State: PUBLISHED Published: 2009-08-17T16:00:00 Last Updated: 2024-08-07T05:59:57.161Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the JFusion (com_jfusion) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9324 - http://www.securityfocus.com/bid/35912
CVE ID: CVE-2009-2783 State: PUBLISHED Published: 2009-08-17T16:00:00Z Last Updated: 2024-09-16T19:16:00.288Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in XOOPS 2.3.3 allow remote attackers to inject arbitrary web script or HTML via the (1) op parameter to modules/pm/viewpmsg.php and (2) query string to modules/profile/user.php. Additional Analyst Notes: - CVE Program Container: References: - http://xoops.svn.sourceforge.net/viewvc/xoops/XoopsCore/trunk/htdocs/modules/pm/viewpmsg.php?view=log#rev3292 - http://www.securityfocus.com/bid/35895 - http://secunia.com/advisories/36109 - http://xoops.svn.sourceforge.net/viewvc/xoop
p://www.securityfocus.com/bid/35895 - http://secunia.com/advisories/36109 - http://xoops.svn.sourceforge.net/viewvc/xoops/XoopsCore/trunk/htdocs/modules/pm/viewpmsg.php?r1=2621&r2=3292 - http://www.senseofsecurity.com.au/advisories/SOS-09-005.pdf - http://osvdb.org/56638 - http://marc.info/?l=bugtraq&m=124905075425380&w=2 - http://www.securitytracker.com/id?1022641
CVE ID: CVE-2009-2784 State: PUBLISHED Published: 2009-08-17T16:00:00 Last Updated: 2024-08-07T05:59:57.168Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in dit.cms 1.3, when register_globals is enabled, allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the path parameter to index.php in (1) install/, (2) menus/left_rightslideopen/, (3) menus/side_pullout/, (4) menus/side_slideopen/, (5) menus/simple/, (6) menus/top_dropdown/, and (7) menus/topside/; the sitemap parameter to index.php in (8) menus/left_rightslideopen/, (9) menus/side_pullout/, (10) menus/side_slideopen/, (11) menus/top_dropdown
ndex.php in (8) menus/left_rightslideopen/, (9) menus/side_pullout/, (10) menus/side_slideopen/, (11) menus/top_dropdown/, and (12) menus/topside/; and the (13) relPath parameter to index/index.php. NOTE: PHP remote file inclusion vulnerabilities reportedly also exist for some of these vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9310 - http://secunia.com/advisories/36076
CVE ID: CVE-2009-2785 State: PUBLISHED Published: 2009-08-17T16:00:00 Last Updated: 2024-08-07T05:59:57.163Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in PHP Open Classifieds Script allow remote attackers to inject arbitrary web script or HTML via the (1) page parameter to buy.php and the id parameter to (2) contact.php and (3) tellafriend.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/52123 - http://osvdb.org/56657 - http://packetstormsecurity.org/0907-exploits/openclassifieds-xss.txt - http://osvdb.org/56659 - http://osvdb.org/56658 - http://secun
stormsecurity.org/0907-exploits/openclassifieds-xss.txt - http://osvdb.org/56659 - http://osvdb.org/56658 - http://secunia.com/advisories/35929
CVE ID: CVE-2009-2786 State: PUBLISHED Published: 2009-08-17T16:00:00 Last Updated: 2024-08-07T05:59:57.102Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in reputation.php in the Reputation plugin 2.2.4, 2.2.3, 2.0.4, and earlier for PunBB allows remote attackers to execute arbitrary SQL commands via the poster parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/56612 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52088 - http://secunia.com/advisories/36020 - http://www.exploit-db.com/exploits/9289
CVE ID: CVE-2009-2787 State: PUBLISHED Published: 2009-08-17T16:00:00 Last Updated: 2024-08-07T05:59:57.071Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in include/reputation/rep_profile.php in the Reputation plugin 2.2.4, 2.2.3, 2.0.4, and earlier for PunBB, when register_globals is enabled and magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the pun_user[language] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/56613 - http://www.exploit-db.com/exploits/9315 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52138 - http:/
rg/56613 - http://www.exploit-db.com/exploits/9315 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52138 - http://secunia.com/advisories/36020 - http://packetstormsecurity.org/0907-exploits/punbbrep-lfi.txt
CVE ID: CVE-2009-2788 State: PUBLISHED Published: 2009-08-17T16:00:00 Last Updated: 2024-08-07T05:59:57.161Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Mobilelib GOLD 3 allow remote attackers to execute arbitrary SQL commands via the (1) adminName parameter to cp/auth.php, (2) cid parameter to artcat.php, and (3) catid parameter to show.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35910 - http://www.exploit-db.com/exploits/9327
CVE ID: CVE-2009-2789 State: PUBLISHED Published: 2009-08-17T16:00:00 Last Updated: 2024-08-07T05:59:57.154Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Permis (com_groups) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a list action to index.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/52142 - http://www.securityfocus.com/bid/35849
CVE ID: CVE-2009-2790 State: PUBLISHED Published: 2009-08-17T16:00:00 Last Updated: 2024-08-07T05:59:57.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in cat_products.php in SoftBiz Dating Script allows remote attackers to execute arbitrary SQL commands via the cid parameter. NOTE: this might overlap CVE-2006-3271.4. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/52158 - http://packetstormsecurity.org/0907-exploits/softbizdating-sql.txt - http://www.securityfocus.com/bid/35896
CVE ID: CVE-2009-2791 State: PUBLISHED Published: 2009-08-17T16:00:00 Last Updated: 2024-08-07T05:59:57.161Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in pda_projects.php in WebDynamite ProjectButler 1.5.0 allows remote attackers to execute arbitrary PHP code via a URL in the offset parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35919 - http://www.exploit-db.com/exploits/9331
CVE ID: CVE-2009-2792 State: PUBLISHED Published: 2009-08-17T16:00:00 Last Updated: 2024-08-07T05:59:57.038Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in plugings/pagecontent.php in Really Simple CMS (RSCMS) 0.3a allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the PT parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/52159 - http://www.exploit-db.com/exploits/9313
CVE ID: CVE-2009-2793 State: PUBLISHED Published: 2009-09-18T22:00:00 Last Updated: 2024-08-07T06:07:35.917Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel in NetBSD, probably 5.0.1 and earlier, on x86 platforms does not properly handle a pre-commit failure of the iret instruction, which might allow local users to gain privileges via vectors related to a tempEIP pseudocode variable that is outside of the code-segment limits. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/506531/100/0/threaded
CVE ID: CVE-2009-2794 State: PUBLISHED Published: 2009-09-10T21:00:00 Last Updated: 2024-08-07T06:07:35.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Exchange Support component in Apple iPhone OS before 3.1, and iPhone OS before 3.1.1 for iPod touch, does not properly implement the "Maximum inactivity time lock" functionality, which allows local users to bypass intended Microsoft Exchange restrictions by choosing a large Require Passcode time value. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/53181 - http://www.securityfocus.com/bid/36342 - http://lists.apple.com/archives/security-announce/2009/Se
lnerabilities/53181 - http://www.securityfocus.com/bid/36342 - http://lists.apple.com/archives/security-announce/2009/Sep/msg00001.html - http://secunia.com/advisories/36677 - http://support.apple.com/kb/HT3860
CVE ID: CVE-2009-2795 State: PUBLISHED Published: 2009-09-10T21:00:00 Last Updated: 2024-08-07T06:07:35.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the Recovery Mode component in Apple iPhone OS before 3.1, and iPhone OS before 3.1.1 for iPod touch, allows local users to bypass the passcode requirement and access arbitrary data via vectors related to "command parsing." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/53183 - http://www.securityfocus.com/bid/36341 - http://lists.apple.com/archives/security-announce/2009/Sep/msg00001.html - http://secunia.com/advisories/36677
/36341 - http://lists.apple.com/archives/security-announce/2009/Sep/msg00001.html - http://secunia.com/advisories/36677 - http://support.apple.com/kb/HT3860
CVE ID: CVE-2009-2796 State: PUBLISHED Published: 2009-09-10T21:00:00 Last Updated: 2024-08-07T06:07:35.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: The UIKit component in Apple iPhone OS 3.0, and iPhone OS 3.0.1 for iPod touch, allows physically proximate attackers to discover a password by watching a user undo deletions of characters in the password. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/53185 - http://www.securityfocus.com/bid/36335 - http://lists.apple.com/archives/security-announce/2009/Sep/msg00001.html - http://secunia.com/advisories/36677 - http://support.apple.com/kb/HT3860
CVE ID: CVE-2009-2797 State: PUBLISHED Published: 2009-09-10T21:00:00 Last Updated: 2024-08-07T06:07:35.913Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WebKit component in Safari in Apple iPhone OS before 3.1, and iPhone OS before 3.1.1 for iPod touch, does not remove usernames and passwords from URLs sent in Referer headers, which allows remote attackers to obtain sensitive information by reading Referer logs on a web server. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2011:039 - http://www.vupen.com/english/advisories/2010/2722 - http://secunia.com/advisories/43068 - http://www.ubuntu.com/usn/US
- http://www.vupen.com/english/advisories/2010/2722 - http://secunia.com/advisories/43068 - http://www.ubuntu.com/usn/USN-1006-1 - http://secunia.com/advisories/41856 - http://www.vupen.com/english/advisories/2011/0212 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53187 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - http://www.vupen.com/english/advisories/2011/0552 - http://www.securityfocus.com/bid/36339 - http://lists.apple.com/archives/security-announce/2009/Sep/msg00001.html - http://secunia.com/advisories/36677 - http://support.apple.com/kb/HT3860
CVE ID: CVE-2009-2798 State: PUBLISHED Published: 2009-09-10T21:00:00 Last Updated: 2024-08-07T06:07:35.940Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Apple QuickTime before 7.6.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted FlashPix file. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT3859 - http://www.securityfocus.com/bid/36328 - http://lists.apple.com/archives/security-announce/2009/Sep/msg00002.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6258 - http://www.vupen.com/english/advi
/oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6258 - http://www.vupen.com/english/advisories/2009/3184 - http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html - http://support.apple.com/kb/HT3937
CVE ID: CVE-2009-2799 State: PUBLISHED Published: 2009-09-10T21:00:00 Last Updated: 2024-08-07T06:07:35.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Apple QuickTime before 7.6.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted H.264 movie file. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT3859 - http://www.securityfocus.com/bid/36328 - http://lists.apple.com/archives/security-announce/2009/Sep/msg00002.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6405 - http://www.vupen.com/english/a
s://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6405 - http://www.vupen.com/english/advisories/2009/3184 - http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html - http://support.apple.com/kb/HT3937
CVE ID: CVE-2009-2800 State: PUBLISHED Published: 2009-09-11T18:00:00 Last Updated: 2024-08-07T06:07:35.957Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Alias Manager in Apple Mac OS X 10.4.11 and 10.5.8 allows attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted alias file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/53164 - http://www.securityfocus.com/bid/36354 - http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html - http://support.apple.com/kb/HT3865 - http://secunia.com/advisories/36701 - http://osvdb.org/57947
CVE ID: CVE-2009-2801 State: PUBLISHED Published: 2010-03-30T17:00:00Z Last Updated: 2024-09-17T02:06:53.040Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Application Firewall in Apple Mac OS X 10.5.8 drops unspecified firewall rules after a reboot, which might allow remote attackers to bypass intended access restrictions via packet data, related to a "timing issue." Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html
CVE ID: CVE-2009-2802 State: PUBLISHED Published: 2019-11-09T02:12:21 Last Updated: 2024-08-07T06:07:35.953Z Vendors: n/a Products: n/a Problem Types: n/a Description: MantisBT 1.2.x before 1.2.2 insecurely handles attachments and MIME types. Arbitrary inline attachment rendering could lead to cross-domain scripting or other browser attacks. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2009-2802 - https://mantisbt.org/blog/archives/mantisbt/113 - https://mantisbt.org/bugs/view.php?id=11952
CVE ID: CVE-2009-2803 State: PUBLISHED Published: 2009-09-14T16:00:00 Last Updated: 2024-08-07T06:07:35.950Z Vendors: n/a Products: n/a Problem Types: n/a Description: CarbonCore in Apple Mac OS X 10.4.11 and 10.5.8 allows attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a file with a crafted resource fork. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/57948 - http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/53165 - http://www.securityfocus.com/bid/36355 - http://support.apple.com/kb/HT3865 - http://secunia.com/adviso
bilities/53165 - http://www.securityfocus.com/bid/36355 - http://support.apple.com/kb/HT3865 - http://secunia.com/advisories/36701
CVE ID: CVE-2009-2804 State: PUBLISHED Published: 2009-09-14T16:00:00 Last Updated: 2024-08-07T06:07:35.946Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in ColorSync in Apple Mac OS X 10.4.11 and 10.5.8, and Safari before 4.0.4 on Windows, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted ColorSync profile embedded in an image, leading to a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2009/Nov/msg00001.html - http://www.vupen.com/english/advisories/2009/3217 - http://www.securityfocus.com/bid/36357 - h
/2009/Nov/msg00001.html - http://www.vupen.com/english/advisories/2009/3217 - http://www.securityfocus.com/bid/36357 - http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html - http://support.apple.com/kb/HT3949 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53166 - http://support.apple.com/kb/HT3865 - http://secunia.com/advisories/36701 - http://osvdb.org/57949 - http://secunia.com/advisories/37346
CVE ID: CVE-2009-2805 State: PUBLISHED Published: 2009-09-14T16:00:00 Last Updated: 2024-08-07T06:07:35.946Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in CoreGraphics in Apple Mac OS X 10.4.11 and 10.5.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted JBIG2 stream in a PDF file, leading to a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/57950 - http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html - http://www.securityfocus.com/bid/36358 - http://support.apple.com/kb/HT3865 - http://secunia.com/advisories/36701 -
ml - http://www.securityfocus.com/bid/36358 - http://support.apple.com/kb/HT3865 - http://secunia.com/advisories/36701 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53167
CVE ID: CVE-2009-2807 State: PUBLISHED Published: 2009-09-14T16:00:00 Last Updated: 2024-08-07T06:07:36.130Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the USB backend in CUPS in Apple Mac OS X 10.5.8 allows local users to gain privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36350 - http://www.cups.org/articles.php?L588 - http://osvdb.org/57951 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53168 - http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html - http://www.securitytracker.com/id?1022898 - http://support.apple.com/kb/HT3865 - ht
ty-announce/2009/Sep/msg00004.html - http://www.securitytracker.com/id?1022898 - http://support.apple.com/kb/HT3865 - http://secunia.com/advisories/36701
CVE ID: CVE-2009-2808 State: PUBLISHED Published: 2009-11-10T19:00:00 Last Updated: 2024-08-07T06:07:35.945Z Vendors: n/a Products: n/a Problem Types: n/a Description: Help Viewer in Apple Mac OS X before 10.6.2 does not use an HTTPS connection to retrieve Apple Help content from a web site, which allows man-in-the-middle attackers to send a crafted help:runscript link, and thereby execute arbitrary code, via a spoofed response. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36956 - http://www.vupen.com/english/advisories/2009/3184 - http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html - http://support.apple.com/kb/HT3937
CVE ID: CVE-2009-2809 State: PUBLISHED Published: 2009-09-14T16:00:00 Last Updated: 2024-08-07T06:07:35.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: ImageIO in Apple Mac OS X 10.4.11 and 10.5.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PixarFilm encoded TIFF image, related to "multiple memory corruption issues." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36359 - http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/53170 - http://support.apple.com/kb/HT3865 - http://secunia.co
ml - https://exchange.xforce.ibmcloud.com/vulnerabilities/53170 - http://support.apple.com/kb/HT3865 - http://secunia.com/advisories/36701 - http://osvdb.org/57952
CVE ID: CVE-2009-2810 State: PUBLISHED Published: 2009-11-10T19:00:00 Last Updated: 2024-08-07T06:07:36.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: Launch Services in Apple Mac OS X 10.6.x before 10.6.2 recursively clears quarantine information upon opening a quarantined folder, which allows user-assisted remote attackers to execute arbitrary code via a quarantined application that does not trigger a "potentially unsafe" warning message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36956 - http://www.vupen.com/english/advisories/2009/3184 - http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html - http:
upen.com/english/advisories/2009/3184 - http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html - http://support.apple.com/kb/HT3937
CVE ID: CVE-2009-2811 State: PUBLISHED Published: 2009-09-14T16:00:00 Last Updated: 2024-08-07T06:07:36.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incomplete blacklist vulnerability in Launch Services in Apple Mac OS X 10.5.8 allows user-assisted remote attackers to execute arbitrary code via a .fileloc file, which does not trigger a "potentially unsafe" warning message in the Quarantine feature. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html - http://osvdb.org/57953 - http://support.apple.com/kb/HT3865 - http://secunia.com/advisories/36701 - http://www.securityfocus.com/bid/36360