Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2011-0075 State: PUBLISHED Published: 2011-05-07T18:00:00 Last Updated: 2024-08-06T21:43:14.228Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.19 and 3.6.x before 3.6.17, Thunderbird before 3.1.10, and SeaMonkey before 2.0.14 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors, a different vulnerability than CVE-2011-0072, CVE-2011-0074, CVE-2011-0077, and CVE-2011-0078. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/47647 - http://www.de
Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/47647 - http://www.debian.org/security/2011/dsa-2228 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:079 - https://bugzilla.mozilla.org/show_bug.cgi?id=635977 - http://www.debian.org/security/2011/dsa-2235 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14086 - http://downloads.avaya.com/css/P8/documents/100134543 - http://www.mozilla.org/security/announce/2011/mfsa2011-12.html - http://www.mandriva.com/security/advisories?name=MDVSA-2011:080 - http://www.debian.org/security/2011/dsa-2227 - http://downloads.avaya.com/css/P8/documents/100144
?name=MDVSA-2011:080 - http://www.debian.org/security/2011/dsa-2227 - http://downloads.avaya.com/css/P8/documents/100144158
CVE ID: CVE-2011-0076 State: PUBLISHED Published: 2011-05-07T18:00:00 Last Updated: 2024-08-06T21:43:14.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Java Embedding Plugin (JEP) in Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, and SeaMonkey before 2.0.14, on Mac OS X allows remote attackers to bypass intended access restrictions via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2011:079 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14498 - https://bugzilla.mozilla.org/show_bug.cgi?id=644682 - http://w
y/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14498 - https://bugzilla.mozilla.org/show_bug.cgi?id=644682 - http://www.mozilla.org/security/announce/2011/mfsa2011-15.html - https://bugzilla.mozilla.org/show_bug.cgi?id=634724
CVE ID: CVE-2011-0077 State: PUBLISHED Published: 2011-05-07T18:00:00 Last Updated: 2024-08-06T21:43:14.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.19 and 3.6.x before 3.6.17, Thunderbird before 3.1.10, and SeaMonkey before 2.0.14 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors, a different vulnerability than CVE-2011-0072, CVE-2011-0074, CVE-2011-0075, and CVE-2011-0078. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2011/dsa-2228 - http://
Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2011/dsa-2228 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:079 - http://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_thunderbird - http://www.securityfocus.com/bid/47648 - http://www.debian.org/security/2011/dsa-2235 - http://downloads.avaya.com/css/P8/documents/100134543 - http://www.mozilla.org/security/announce/2011/mfsa2011-12.html - https://bugzilla.mozilla.org/show_bug.cgi?id=623998 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14193 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:080 - http://www.de
on/oval%3Aorg.mitre.oval%3Adef%3A14193 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:080 - http://www.debian.org/security/2011/dsa-2227 - http://downloads.avaya.com/css/P8/documents/100144158
CVE ID: CVE-2011-0078 State: PUBLISHED Published: 2011-05-07T18:00:00 Last Updated: 2024-08-06T21:43:14.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.19 and 3.6.x before 3.6.17, Thunderbird before 3.1.10, and SeaMonkey before 2.0.14 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors, a different vulnerability than CVE-2011-0072, CVE-2011-0074, CVE-2011-0075, and CVE-2011-0077. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2011/dsa-2228 - http://
Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2011/dsa-2228 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:079 - https://bugzilla.mozilla.org/show_bug.cgi?id=635705 - http://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_thunderbird - http://www.debian.org/security/2011/dsa-2235 - http://downloads.avaya.com/css/P8/documents/100134543 - http://www.mozilla.org/security/announce/2011/mfsa2011-12.html - http://www.securityfocus.com/bid/47651 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:080 - http://www.debian.org/security/2011/dsa-2227 - https://oval.cisecurity.org/repository/search/definition/oval
-2011:080 - http://www.debian.org/security/2011/dsa-2227 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14246 - http://downloads.avaya.com/css/P8/documents/100144158
CVE ID: CVE-2011-0079 State: PUBLISHED Published: 2011-05-07T18:00:00 Last Updated: 2024-08-06T21:43:14.023Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x before 4.0.1 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to gfx/layers/d3d10/ReadbackManagerD3D10.cpp and unknown other vectors. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=639885 - https://bugzilla.mozilla.org/show_bug.cgi?id=639728 - https://bugzilla.mozilla.org/show_bug.cgi?i
ow_bug.cgi?id=639885 - https://bugzilla.mozilla.org/show_bug.cgi?id=639728 - https://bugzilla.mozilla.org/show_bug.cgi?id=643649 - https://bugzilla.mozilla.org/show_bug.cgi?id=601102 - https://bugzilla.mozilla.org/show_bug.cgi?id=642717 - https://bugzilla.mozilla.org/show_bug.cgi?id=639343 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14232 - http://www.mozilla.org/security/announce/2011/mfsa2011-12.html - https://bugzilla.mozilla.org/show_bug.cgi?id=641388
CVE ID: CVE-2011-0080 State: PUBLISHED Published: 2011-05-07T18:00:00 Last Updated: 2024-08-06T21:43:14.496Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.19 and 3.6.x before 3.6.17, Thunderbird before 3.1.10, and SeaMonkey before 2.0.14 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=637621 - http://www.debian.org/security/2011/dsa-2228 - http://www.securityfocus.com/bid/47641
zilla.org/show_bug.cgi?id=637621 - http://www.debian.org/security/2011/dsa-2228 - http://www.securityfocus.com/bid/47641 - https://bugzilla.mozilla.org/show_bug.cgi?id=637957 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:079 - https://bugzilla.mozilla.org/show_bug.cgi?id=634257 - http://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_thunderbird - http://www.debian.org/security/2011/dsa-2235 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13866 - https://bugzilla.mozilla.org/show_bug.cgi?id=638236 - http://downloads.avaya.com/css/P8/documents/100134543 - http://www.mozilla.org/security/announce/2011/mfsa2011-12.html - ht
p://downloads.avaya.com/css/P8/documents/100134543 - http://www.mozilla.org/security/announce/2011/mfsa2011-12.html - http://www.mandriva.com/security/advisories?name=MDVSA-2011:080 - https://bugzilla.mozilla.org/show_bug.cgi?id=615147 - http://www.debian.org/security/2011/dsa-2227 - http://downloads.avaya.com/css/P8/documents/100144158
CVE ID: CVE-2011-0081 State: PUBLISHED Published: 2011-05-07T18:00:00 Last Updated: 2024-08-06T21:43:14.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the browser engine in Mozilla Firefox 3.6.x before 3.6.17 and 4.x before 4.0.1, and Thunderbird 3.1.x before 3.1.10, allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/47653 - http://www.debian.org/security/2011/dsa-2228 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:079 - https://oval.cis
w.debian.org/security/2011/dsa-2228 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:079 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13993 - http://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_thunderbird - http://www.debian.org/security/2011/dsa-2235 - https://bugzilla.mozilla.org/show_bug.cgi?id=645289 - http://www.mozilla.org/security/announce/2011/mfsa2011-12.html - http://www.mandriva.com/security/advisories?name=MDVSA-2011:080 - http://www.debian.org/security/2011/dsa-2227 - http://downloads.avaya.com/css/P8/documents/100144158
CVE ID: CVE-2011-0082 State: PUBLISHED Published: 2011-06-06T19:00:00 Last Updated: 2024-08-06T21:43:14.263Z Vendors: n/a Products: n/a Problem Types: n/a Description: The X.509 certificate validation functionality in Mozilla Firefox 4.0.x through 4.0.1 does not properly implement single-session security exceptions, which might make it easier for user-assisted remote attackers to spoof an SSL server via an untrusted certificate that triggers potentially unwanted local caching of documents from that server. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/48064 - https://bugzilla.redhat.com/show_bug.cgi?id=709165 - http://bugs.debian.org/cgi-bi
p://www.securityfocus.com/bid/48064 - https://bugzilla.redhat.com/show_bug.cgi?id=709165 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=627552 - https://bugzilla.mozilla.org/show_bug.cgi?id=660749 - http://openwall.com/lists/oss-security/2011/05/31/18 - http://openwall.com/lists/oss-security/2011/05/31/4 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14145 - http://openwall.com/lists/oss-security/2011/05/31/14 - http://openwall.com/lists/oss-security/2011/05/31/9
CVE ID: CVE-2011-0083 State: PUBLISHED Published: 2011-06-30T16:00:00 Last Updated: 2024-08-06T21:43:13.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the nsSVGPathSegList::ReplaceItem function in the implementation of SVG element lists in Mozilla Firefox before 3.6.18, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors involving a user-supplied callback. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13543 - http://w
r: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13543 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:111 - https://bugzilla.mozilla.org/show_bug.cgi?id=648090 - http://secunia.com/advisories/45002 - http://support.avaya.com/css/P8/documents/100145333 - http://www.ubuntu.com/usn/USN-1149-1 - http://support.avaya.com/css/P8/documents/100144854 - http://www.redhat.com/support/errata/RHSA-2011-0887.html - http://www.redhat.com/support/errata/RHSA-2011-0885.html - http://www.debian.org/security/2011/dsa-2268 - http://www.redhat.com/support/errata/RHSA-2011-0888.html - http://www.debian.org/security/2011/dsa-2269 - http://lists
- http://www.redhat.com/support/errata/RHSA-2011-0888.html - http://www.debian.org/security/2011/dsa-2269 - http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00001.html - http://www.redhat.com/support/errata/RHSA-2011-0886.html - http://www.debian.org/security/2011/dsa-2273 - http://www.mozilla.org/security/announce/2011/mfsa2011-23.html
CVE ID: CVE-2011-0084 State: PUBLISHED Published: 2011-08-18T18:00:00 Last Updated: 2024-08-06T21:43:14.393Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SVGTextElement.getCharNumAtPosition function in Mozilla Firefox before 3.6.20, and 4.x through 5; Thunderbird 3.x before 3.1.12 and other versions before 6; SeaMonkey 2.x before 2.3; and possibly other products does not properly handle SVG text, which allows remote attackers to execute arbitrary code via unspecified vectors that lead to a "dangling pointer." Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2011:127 - http://www.mozilla.org/security/anno
er: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2011:127 - http://www.mozilla.org/security/announce/2011/mfsa2011-31.html - http://www.mozilla.org/security/announce/2011/mfsa2011-30.html - http://www.debian.org/security/2011/dsa-2297 - http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00027.html - http://www.debian.org/security/2011/dsa-2296 - http://www.mozilla.org/security/announce/2011/mfsa2011-33.html - http://www.redhat.com/support/errata/RHSA-2011-1166.html - http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00023.html - http://www.redhat.com/support/errata/RHSA-2011-1164.html - https://oval.cisecurity.org/repository/search/definitio
tml - http://www.redhat.com/support/errata/RHSA-2011-1164.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14502 - http://www.debian.org/security/2011/dsa-2295 - http://www.mozilla.org/security/announce/2011/mfsa2011-29.html - https://bugzilla.mozilla.org/show_bug.cgi?id=648094
CVE ID: CVE-2011-0085 State: PUBLISHED Published: 2011-06-30T16:00:00 Last Updated: 2024-08-06T21:43:14.188Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the nsXULCommandDispatcher function in Mozilla Firefox before 3.6.18, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14 allows remote attackers to execute arbitrary code via a crafted XUL document that dequeues the current command updater. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2011:111 - http://secunia.com/advisories/45002 - http://support.avaya.com/css/P8/documents/100145333 - http://www.ubuntu.com/usn/USN-1
p://secunia.com/advisories/45002 - http://support.avaya.com/css/P8/documents/100145333 - http://www.ubuntu.com/usn/USN-1149-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=648100 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14432 - http://support.avaya.com/css/P8/documents/100144854 - http://www.redhat.com/support/errata/RHSA-2011-0887.html - http://www.redhat.com/support/errata/RHSA-2011-0885.html - http://www.debian.org/security/2011/dsa-2268 - http://www.redhat.com/support/errata/RHSA-2011-0888.html - http://www.debian.org/security/2011/dsa-2269 - http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00001.html - http://www.redhat.com
urity/2011/dsa-2269 - http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00001.html - http://www.redhat.com/support/errata/RHSA-2011-0886.html - http://www.debian.org/security/2011/dsa-2273 - http://www.mozilla.org/security/announce/2011/mfsa2011-23.html
CVE ID: CVE-2011-0086 State: PUBLISHED Published: 2011-02-09T00:00:00 Last Updated: 2024-08-06T21:43:14.085Z Vendors: n/a Products: n/a Problem Types: n/a Description: win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate user-mode input, which allows local users to gain privileges via a crafted application, aka "Win32k Improper User Input Validation Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43255 - http://www.vupen.com/english/advisories/2011/0325 - http://www.securityfocu
ces: - http://secunia.com/advisories/43255 - http://www.vupen.com/english/advisories/2011/0325 - http://www.securityfocus.com/bid/46141 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-012 - http://osvdb.org/70818 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12070
CVE ID: CVE-2011-0087 State: PUBLISHED Published: 2011-02-09T00:00:00 Last Updated: 2024-08-06T21:43:14.235Z Vendors: n/a Products: n/a Problem Types: n/a Description: win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, and Server 2008 Gold and SP2 does not properly validate user-mode input, which allows local users to gain privileges via a crafted application, aka "Win32k Insufficient User Input Validation Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43255 - http://www.securityfocus.com/bid/46148 - http://www.vupen.com/english/advisories/2011/0325 - https://oval.cisec
/43255 - http://www.securityfocus.com/bid/46148 - http://www.vupen.com/english/advisories/2011/0325 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12312 - http://osvdb.org/70819 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-012
CVE ID: CVE-2011-0088 State: PUBLISHED Published: 2011-02-09T00:00:00 Last Updated: 2024-08-06T21:43:14.740Z Vendors: n/a Products: n/a Problem Types: n/a Description: win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate user-mode input, which allows local users to gain privileges via a crafted application, aka "Win32k Window Class Pointer Confusion Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12553 - http://osvdb.org/7
ces: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12553 - http://osvdb.org/70816 - http://secunia.com/advisories/43255 - http://www.vupen.com/english/advisories/2011/0325 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-012 - http://www.securityfocus.com/bid/46147
CVE ID: CVE-2011-0089 State: PUBLISHED Published: 2011-02-09T00:00:00 Last Updated: 2024-08-06T21:43:14.277Z Vendors: n/a Products: n/a Problem Types: n/a Description: win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate user-mode input, which allows local users to gain privileges via a crafted application, aka "Win32k Window Class Improper Pointer Validation Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43255 - http://www.vupen.com/english/advisories/2011/0325 - https://oval.
r: References: - http://secunia.com/advisories/43255 - http://www.vupen.com/english/advisories/2011/0325 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11638 - http://www.securityfocus.com/bid/46149 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-012 - http://osvdb.org/70817
CVE ID: CVE-2011-0090 State: PUBLISHED Published: 2011-02-09T00:00:00 Last Updated: 2024-08-06T21:43:14.502Z Vendors: n/a Products: n/a Problem Types: n/a Description: win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate user-mode input, which allows local users to gain privileges via a crafted application, aka "Win32k Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/46150 - http://secunia.com/advisories/43255 - http://www.vupen.com/english/advisories/2011/03
/www.securityfocus.com/bid/46150 - http://secunia.com/advisories/43255 - http://www.vupen.com/english/advisories/2011/0325 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12455 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-012 - http://osvdb.org/70814
CVE ID: CVE-2011-0091 State: PUBLISHED Published: 2011-02-10T15:00:00 Last Updated: 2024-08-06T21:43:14.614Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kerberos in Microsoft Windows Server 2008 R2 and Windows 7 does not prevent a session from changing from strong encryption to DES encryption, which allows man-in-the-middle attackers to spoof network traffic and obtain sensitive information via a DES downgrade, aka "Kerberos Spoofing Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/46140 - http://osvdb.org/70835 - http://support.avaya.com/css/P8/documents/100127250 - http://secunia.com/advisories/43257 - https://
//osvdb.org/70835 - http://support.avaya.com/css/P8/documents/100127250 - http://secunia.com/advisories/43257 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64901 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-013 - http://www.vupen.com/english/advisories/2011/0326 - http://www.securitytracker.com/id?1025048 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12498
CVE ID: CVE-2011-0092 State: PUBLISHED Published: 2011-02-10T15:00:00 Last Updated: 2024-08-06T21:43:14.586Z Vendors: n/a Products: n/a Problem Types: n/a Description: The LZW stream decompression functionality in ORMELEMS.DLL in Microsoft Visio 2002 SP2, 2003 SP3, and 2007 SP2 allows remote attackers to execute arbitrary code via a Visio file with a malformed VisioDocument stream that triggers an exception handler that accesses an object that has not been fully initialized, which triggers memory corruption, aka "Visio Object Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/64923 - http://w
lyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/64923 - http://www.vupen.com/english/advisories/2011/0321 - http://www.securityfocus.com/archive/1/516274/100/0/threaded - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-008 - http://www.securityfocus.com/bid/46137 - http://www.securitytracker.com/id?1025043 - http://osvdb.org/70828 - http://secunia.com/advisories/43254 - http://www.zerodayinitiative.com/advisories/ZDI-11-063/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12403