Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-3949 State: PUBLISHED Published: 2010-12-16T19:00:00 Last Updated: 2024-08-07T03:26:12.245Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the TIFF image converter in the graphics filters in Microsoft Office XP SP3 and Office Converter Pack allows remote attackers to execute arbitrary code via a crafted TIFF image in an Office document, aka "TIFF Image Converter Buffer Overflow Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA10-348A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12387 - http://www.securitytracker.com/id?102488
security.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12387 - http://www.securitytracker.com/id?1024887 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-105
CVE ID: CVE-2010-3950 State: PUBLISHED Published: 2010-12-16T19:00:00 Last Updated: 2024-08-07T03:26:12.151Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TIFF image converter in the graphics filters in Microsoft Office XP SP3, Office Converter Pack, and Works 9 does not properly convert data, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted TIFF image in an Office document, aka "TIFF Image Converter Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA10-348A.html - http://www.securitytracker.com/id?1024887 - https://ova
rences: - http://www.us-cert.gov/cas/techalerts/TA10-348A.html - http://www.securitytracker.com/id?1024887 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12289 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-105
CVE ID: CVE-2010-3951 State: PUBLISHED Published: 2010-12-16T19:00:00 Last Updated: 2024-08-07T03:26:12.203Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the FlashPix image converter in the graphics filters in Microsoft Office XP SP3 and Office Converter Pack allows remote attackers to execute arbitrary code via a crafted FlashPix image in an Office document, aka "FlashPix Image Converter Buffer Overflow Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA10-348A.html - http://www.securitytracker.com/id?1024887 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%
p://www.securitytracker.com/id?1024887 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12350 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-105
CVE ID: CVE-2010-3952 State: PUBLISHED Published: 2010-12-16T19:00:00 Last Updated: 2024-08-07T03:26:12.169Z Vendors: n/a Products: n/a Problem Types: n/a Description: The FlashPix image converter in the graphics filters in Microsoft Office XP SP3 and Office Converter Pack allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted FlashPix image in an Office document, aka "FlashPix Image Converter Heap Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA10-348A.html - http://www.securitytracker.com/id?1024887 - https://oval.cisecurity.org/repository/searc
cas/techalerts/TA10-348A.html - http://www.securitytracker.com/id?1024887 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12150 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-105
CVE ID: CVE-2010-3953 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2010-3954 State: PUBLISHED Published: 2010-12-16T19:00:00 Last Updated: 2024-08-07T03:26:12.234Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Publisher 2002 SP3, 2003 SP3, and 2010 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Publisher file, aka "Microsoft Publisher Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12381 - http://www.us-cert.gov/cas/techalerts/TA10-348A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-10
ert.gov/cas/techalerts/TA10-348A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-103 - http://www.securitytracker.com/id?1024885
CVE ID: CVE-2010-3955 State: PUBLISHED Published: 2010-12-16T19:00:00 Last Updated: 2024-08-07T03:26:12.277Z Vendors: n/a Products: n/a Problem Types: n/a Description: pubconv.dll (aka the Publisher Converter DLL) in Microsoft Publisher 2002 SP3 does not properly perform array indexing, which allows remote attackers to execute arbitrary code via a crafted Publisher file that uses an old file format, aka "Array Indexing Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA10-348A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-103 - https://oval.cisecurity.org/repository/
ps://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-103 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12277 - http://www.securitytracker.com/id?1024885
CVE ID: CVE-2010-3956 State: PUBLISHED Published: 2010-12-16T19:00:00 Last Updated: 2024-08-07T03:26:12.180Z Vendors: n/a Products: n/a Problem Types: n/a Description: The OpenType Font (OTF) driver in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly perform array indexing, which allows local users to gain privileges via a crafted OpenType font, aka "OpenType Font Index Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA10-348A.html - http://www.securitytracker.com/id?1024873 - https://oval.cisecurity.org/repository/
.gov/cas/techalerts/TA10-348A.html - http://www.securitytracker.com/id?1024873 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12357 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-091
CVE ID: CVE-2010-3957 State: PUBLISHED Published: 2010-12-16T19:00:00 Last Updated: 2025-01-21T17:35:32.880Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in the OpenType Font (OTF) driver in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows local users to gain privileges via a crafted OpenType font, aka "OpenType Font Double Free Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.us-cert.gov/cas/techalerts/TA10-348A.html - http://www.securitytracker.com/id?1024873 - https://oval.cisecurity.org
/www.us-cert.gov/cas/techalerts/TA10-348A.html - http://www.securitytracker.com/id?1024873 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12329 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-091
CVE ID: CVE-2010-3958 State: PUBLISHED Published: 2011-04-13T18:00:00 Last Updated: 2024-08-07T03:26:12.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: The x86 JIT compiler in Microsoft .NET Framework 2.0 SP2, 3.5 SP1, 3.5.1, and 4.0 does not properly compile function calls, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET application, or (3) a crafted .NET Framework application, aka ".NET Framework Stack Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA11-102A.html - https://oval.cisecurity.org/repository/searc
ainer: References: - http://www.us-cert.gov/cas/techalerts/TA11-102A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12406 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-028
CVE ID: CVE-2010-3959 State: PUBLISHED Published: 2010-12-16T19:00:00 Last Updated: 2024-08-07T03:26:12.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: The OpenType Font (OTF) driver in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows local users to gain privileges via a crafted CMAP table in an OpenType font, aka "OpenType CMAP Table Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA10-348A.html - http://www.securitytracker.com/id?1024873 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mi
tml - http://www.securitytracker.com/id?1024873 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12280 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-091
CVE ID: CVE-2010-3960 State: PUBLISHED Published: 2010-12-16T19:00:00 Last Updated: 2024-08-07T03:26:12.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hyper-V in Microsoft Windows Server 2008 Gold, SP2, and R2 allows guest OS users to cause a denial of service (host OS hang) by sending a crafted encapsulated packet over the VMBus, aka "Hyper-V VMBus Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA10-348A.html - http://www.vupen.com/english/advisories/2010/3224 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12359 - https://docs.microsoft.com/en-us/security-update
.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12359 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-102 - http://osvdb.org/69818 - http://www.securityfocus.com/bid/45293 - http://secunia.com/advisories/42617 - http://www.securitytracker.com/id?1024884
CVE ID: CVE-2010-3961 State: PUBLISHED Published: 2010-12-16T19:00:00 Last Updated: 2024-08-07T03:26:12.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Consent User Interface (UI) in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly handle an unspecified registry-key value, which allows local users with SeImpersonatePrivilege rights to gain privileges via a crafted application, aka "Consent UI Impersonation Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/42614 - http://www.us-cert.gov/cas/techalerts/TA10-348A.html - https://oval.cisecurity.org/repositor
unia.com/advisories/42614 - http://www.us-cert.gov/cas/techalerts/TA10-348A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12323 - http://www.vupen.com/english/advisories/2010/3222 - http://www.securitytracker.com/id?1024882 - http://www.securityfocus.com/bid/45318 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-100 - http://osvdb.org/69824
CVE ID: CVE-2010-3962 State: PUBLISHED Published: 2010-11-05T16:28:00.000Z Last Updated: 2025-10-22T00:05:51.096Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Microsoft Internet Explorer 6, 7, and 8 allows remote attackers to execute arbitrary code via vectors related to Cascading Style Sheets (CSS) token sequences and the clip attribute, aka an "invalid flag reference" issue or "Uninitialized Memory Corruption Vulnerability," as exploited in the wild in November 2010. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/44536 - http://www.us-cert.gov/cas/techalerts/TA10-348A.h
P Vulnrichment: References: - http://www.securityfocus.com/bid/44536 - http://www.us-cert.gov/cas/techalerts/TA10-348A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-090 - http://www.kb.cert.org/vuls/id/899748 - http://secunia.com/advisories/42091 - http://www.vupen.com/english/advisories/2010/2880 - http://www.microsoft.com/technet/security/advisory/2458511.mspx - http://www.securitytracker.com/id?1024676 - http://www.exploit-db.com/exploits/15421 - http://www.symantec.com/connect/blogs/new-ie-0-day-used-targeted-attacks - https://exchange.xforce.ibmcloud.com/vulnerabilities/62962 - http://blogs.technet.com/b/msrc/archive/2010/11/02/microsoft-releases-s
ange.xforce.ibmcloud.com/vulnerabilities/62962 - http://blogs.technet.com/b/msrc/archive/2010/11/02/microsoft-releases-security-advisory-2458511.aspx - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12279 - http://www.exploit-db.com/exploits/15418
CVE ID: CVE-2010-3963 State: PUBLISHED Published: 2010-12-16T19:00:00 Last Updated: 2024-08-07T03:26:12.168Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Routing and Remote Access NDProxy component in the kernel in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a crafted application, related to the Routing and Remote Access service (RRAS) and improper copying from user mode to the kernel, aka "Kernel NDProxy Buffer Overflow Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA10-348A.html - http://www.securitytracker.com/id?1024881 - http://
References: - http://www.us-cert.gov/cas/techalerts/TA10-348A.html - http://www.securitytracker.com/id?1024881 - http://www.securityfocus.com/bid/45269 - http://osvdb.org/69823 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12461 - http://www.vupen.com/english/advisories/2010/3221 - http://secunia.com/advisories/42613 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-099
CVE ID: CVE-2010-3964 State: PUBLISHED Published: 2010-12-16T19:00:00 Last Updated: 2024-08-07T03:26:12.274Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in the Document Conversions Launcher Service in Microsoft Office SharePoint Server 2007 SP2, when the Document Conversions Load Balancer Service is enabled, allows remote attackers to execute arbitrary code via a crafted SOAP request to TCP port 8082, aka "Malformed Request Code Execution Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/69817 - http://www.us-cert.gov/cas/techalerts/TA10-348A.html - https://docs.microsoft.com/en-us/security-
tp://osvdb.org/69817 - http://www.us-cert.gov/cas/techalerts/TA10-348A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-104 - http://www.vupen.com/english/advisories/2010/3226 - http://www.securitytracker.com/id?1024886 - http://www.zerodayinitiative.com/advisories/ZDI-10-287/ - http://www.securityfocus.com/bid/45264 - http://secunia.com/advisories/42631 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11737
CVE ID: CVE-2010-3965 State: PUBLISHED Published: 2010-12-16T19:00:00 Last Updated: 2024-08-07T03:26:12.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in Windows Media Encoder 9 on Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, and Windows Server 2008 Gold and SP2 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a Windows Media Profile (PRX) file, aka "Insecure Library Loading Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA10-348A.html - h
dditional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA10-348A.html - http://www.vupen.com/english/advisories/2010/3217 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12235 - http://www.securityfocus.com/bid/42855 - http://www.securitytracker.com/id?1024876 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-094
CVE ID: CVE-2010-3966 State: PUBLISHED Published: 2010-12-16T19:00:00 Last Updated: 2024-08-07T03:26:12.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in Microsoft Windows Server 2008 R2 and Windows 7, when BranchCache is supported, allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains an EML file, an RSS file, or a WPOST file, aka "BranchCache Insecure Library Loading Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA10-348A.html - http://osvdb.org/69816 - https://docs.microsoft.com/e
ferences: - http://www.us-cert.gov/cas/techalerts/TA10-348A.html - http://osvdb.org/69816 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-095 - http://www.securitytracker.com/id?1024877 - http://www.vupen.com/english/advisories/2010/3218 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12163 - http://www.securityfocus.com/bid/45295 - http://secunia.com/advisories/42609
CVE ID: CVE-2010-3967 State: PUBLISHED Published: 2010-12-16T19:00:00 Last Updated: 2024-08-07T03:26:12.279Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in Microsoft Windows Movie Maker (WMM) 2.6 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a Movie Maker (MSWMM) file, aka "Insecure Library Loading Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA10-348A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12250 - http://secunia.com/advis
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12250 - http://secunia.com/advisories/42607 - http://www.securitytracker.com/id?1024875 - http://www.vupen.com/english/advisories/2010/3216 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-093
CVE ID: CVE-2010-3968 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2010-3969 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2010-3970 State: PUBLISHED Published: 2010-12-22T20:00:00 Last Updated: 2024-08-07T03:26:12.253Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the CreateSizedDIBSECTION function in shimgvw.dll in the Windows Shell graphics processor (aka graphics rendering engine) in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via a crafted .MIC or unspecified Office document containing a thumbnail bitmap with a negative biClrUsed value, as reported by Moti and Xu Hao, aka "Windows Shell Graphics Processing Overrun Vulnerability." Additional Analyst
alue, as reported by Moti and Xu Hao, aka "Windows Shell Graphics Processing Overrun Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/106516 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-006 - http://blogs.technet.com/b/srd/archive/2011/01/07/assessing-the-risk-of-public-issues-currently-being-tracked-by-the-msrc.aspx - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11671 - http://www.powerofcommunity.net/speaker.html - http://www.metasploit.com/redmine/projects/framework/repository/revisions/11466/entry/modules/exploits/windows/fileformat/ms11_xxx_createsi
it.com/redmine/projects/framework/repository/revisions/11466/entry/modules/exploits/windows/fileformat/ms11_xxx_createsizeddibsection.rb - http://www.microsoft.com/technet/security/advisory/2490606.mspx - http://www.vupen.com/english/advisories/2011/0018 - http://secunia.com/advisories/42779 - http://www.securityfocus.com/bid/45662 - http://www.securitytracker.com/id?1024932
CVE ID: CVE-2010-3971 State: PUBLISHED Published: 2010-12-22T20:00:00 Last Updated: 2024-08-07T03:26:12.333Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the CSharedStyleSheet::Notify function in the Cascading Style Sheets (CSS) parser in mshtml.dll, as used in Microsoft Internet Explorer 6 through 8 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a self-referential @import rule in a stylesheet, aka "CSS Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/634956 - http://www.microsoft.com/technet
t Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/634956 - http://www.microsoft.com/technet/security/advisory/2488013.mspx - http://www.exploit-db.com/exploits/15746 - http://blogs.technet.com/b/srd/archive/2011/01/07/assessing-the-risk-of-public-issues-currently-being-tracked-by-the-msrc.aspx - http://www.breakingpointsystems.com/community/blog/ie-vulnerability/ - http://support.avaya.com/css/P8/documents/100127294 - http://www.vupen.com/english/advisories/2011/0318 - http://www.exploit-db.com/exploits/15708 - http://www.vupen.com/english/advisories/2010/3156 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-003 - http://www.securit
ories/2010/3156 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-003 - http://www.securitytracker.com/id?1024922 - http://www.wooyun.org/bugs/wooyun-2010-0885 - http://seclists.org/fulldisclosure/2010/Dec/110 - http://www.securityfocus.com/bid/45246 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12382 - http://secunia.com/advisories/42510
CVE ID: CVE-2010-3972 State: PUBLISHED Published: 2010-12-23T17:00:00 Last Updated: 2024-08-07T03:26:12.229Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the TELNET_STREAM_CONTEXT::OnSendData function in ftpsvc.dll in Microsoft FTP Service 7.0 and 7.5 for Internet Information Services (IIS) 7.0, and IIS 7.5, allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via a crafted FTP command, aka "IIS FTP Service Heap Buffer Overrun Vulnerability." NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid
ird party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/45542 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-004 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64248 - http://blogs.technet.com/b/srd/archive/2011/01/07/assessing-the-risk-of-public-issues-currently-being-tracked-by-the-msrc.aspx - http://www.kb.cert.org/vuls/id/842372 - http://www.securitytracker.com/id?1024921 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12370 - http://www.vupen.com/english/advisories/2010/3305 - http://www.exploit-db.com/exploits/15803 - http://secunia.com/advi
- http://www.vupen.com/english/advisories/2010/3305 - http://www.exploit-db.com/exploits/15803 - http://secunia.com/advisories/42713