Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ontainer: References: - http://www.zerodayinitiative.com/advisories/ZDI-09-034/ - http://secunia.com/advisories/43068 - http://www.vupen.com/english/advisories/2011/0212 - http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html - http://www.securityfocus.com/bid/35260 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10162 - http://www.redhat.com/support/errata/RHSA-2009-1130.html - http://secunia.com/advisories/35576 - http://www.vupen.com/english/advisories/2009/1522 - http://securitytracker.com/id?1022345 - http://www.securityfocus.com/bid/35334 - http://osvdb.org/55013 - http://secunia.com/advisories/36461 - https://usn.ubuntu.com/8
ww.securityfocus.com/bid/35334 - http://osvdb.org/55013 - http://secunia.com/advisories/36461 - https://usn.ubuntu.com/823-1/ - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - http://secunia.com/advisories/35379 - http://support.apple.com/kb/HT3613 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:182
CVE ID: CVE-2009-1710 State: PUBLISHED Published: 2009-06-10T17:37:00 Last Updated: 2024-08-07T05:20:35.193Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit in Apple Safari before 4.0 allows remote attackers to spoof the browser's display of (1) the host name, (2) security indicators, and unspecified other UI elements via a custom cursor in conjunction with a modified CSS3 hotspot property. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43068 - http://www.vupen.com/english/advisories/2011/0212 - http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/51263
apple.com/archives/security-announce/2009/jun/msg00002.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/51263 - http://www.securityfocus.com/bid/35340 - http://www.securityfocus.com/bid/35260 - http://www.vupen.com/english/advisories/2009/1522 - http://secunia.com/advisories/37746 - http://www.debian.org/security/2009/dsa-1950 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - http://secunia.com/advisories/35379 - http://osvdb.org/55014 - http://support.apple.com/kb/HT3613
CVE ID: CVE-2009-1711 State: PUBLISHED Published: 2009-06-10T17:37:00 Last Updated: 2024-08-07T05:20:35.230Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit in Apple Safari before 4.0 does not properly initialize memory for Attr DOM objects, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted HTML document. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43068 - http://www.securityfocus.com/bid/35310 - http://www.vupen.com/english/advisories/2011/0212 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51265 - http://lists.apple.com/archives/security-announce
11/0212 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51265 - http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html - http://www.securityfocus.com/bid/35260 - http://www.vupen.com/english/advisories/2009/1522 - http://secunia.com/advisories/37746 - http://securitytracker.com/id?1022345 - http://osvdb.org/55015 - http://secunia.com/advisories/36790 - http://www.debian.org/security/2009/dsa-1950 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - http://secunia.com/advisories/35379 - http://www.ubuntu.com/usn/USN-857-1 - http://support.apple.com/kb/HT3613 - http://www.ubuntu.com/usn/USN-836-1
CVE ID: CVE-2009-1712 State: PUBLISHED Published: 2009-06-10T17:37:00 Last Updated: 2024-08-07T05:20:35.211Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit in Apple Safari before 4.0 does not prevent remote loading of local Java applets, which allows remote attackers to execute arbitrary code, gain privileges, or obtain sensitive information via an APPLET or OBJECT element. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43068 - http://www.vupen.com/english/advisories/2011/0212 - http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html - http://www.securityfocus.com/bid/35260 - http://www.vupen.com/english/advi
es/security-announce/2009/jun/msg00002.html - http://www.securityfocus.com/bid/35260 - http://www.vupen.com/english/advisories/2009/1522 - http://secunia.com/advisories/37746 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51266 - http://securitytracker.com/id?1022345 - http://secunia.com/advisories/36790 - http://www.securityfocus.com/bid/35350 - http://www.debian.org/security/2009/dsa-1950 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - http://secunia.com/advisories/35379 - http://www.ubuntu.com/usn/USN-857-1 - http://support.apple.com/kb/HT3613 - http://www.ubuntu.com/usn/USN-836-1 - http://osvdb.org/55022
CVE ID: CVE-2009-1713 State: PUBLISHED Published: 2009-06-10T17:37:00 Last Updated: 2024-08-07T05:20:35.186Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XSLT functionality in WebKit in Apple Safari before 4.0 does not properly implement the document function, which allows remote attackers to read (1) arbitrary local files and (2) files from different security zones via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43068 - http://www.vupen.com/english/advisories/2011/0212 - http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/51267
apple.com/archives/security-announce/2009/jun/msg00002.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/51267 - http://www.securityfocus.com/bid/35260 - http://osvdb.org/54975 - http://www.vupen.com/english/advisories/2009/1522 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - http://secunia.com/advisories/35379 - http://www.ubuntu.com/usn/USN-857-1 - http://support.apple.com/kb/HT3613
CVE ID: CVE-2009-1714 State: PUBLISHED Published: 2009-06-10T17:37:00 Last Updated: 2024-08-07T05:20:35.163Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Web Inspector in WebKit in Apple Safari before 4.0 allows user-assisted remote attackers to inject arbitrary web script or HTML, and read local files, via vectors related to the improper escaping of HTML attributes. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35348 - http://securitytracker.com/id?1022344 - http://secunia.com/advisories/43068 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51268 - http://www.vupen.com/englis
/secunia.com/advisories/43068 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51268 - http://www.vupen.com/english/advisories/2011/0212 - http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html - http://www.securityfocus.com/bid/35260 - http://www.vupen.com/english/advisories/2009/1522 - http://secunia.com/advisories/37746 - http://www.debian.org/security/2009/dsa-1950 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - http://secunia.com/advisories/35379 - http://osvdb.org/55023 - http://support.apple.com/kb/HT3613
CVE ID: CVE-2009-1715 State: PUBLISHED Published: 2009-06-10T17:37:00 Last Updated: 2024-08-07T05:20:35.176Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Web Inspector in WebKit in Apple Safari before 4.0 allows user-assisted remote attackers to inject arbitrary web script or HTML, and read local files, via vectors related to script execution with incorrect privileges. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/54996 - http://securitytracker.com/id?1022344 - http://secunia.com/advisories/43068 - http://www.vupen.com/english/advisories/2011/0212 - http://www.securityfocus.com/bid/35349 - http://li
dvisories/43068 - http://www.vupen.com/english/advisories/2011/0212 - http://www.securityfocus.com/bid/35349 - http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html - http://www.securityfocus.com/bid/35260 - http://www.vupen.com/english/advisories/2009/1522 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - http://secunia.com/advisories/35379 - http://support.apple.com/kb/HT3613
CVE ID: CVE-2009-1716 State: PUBLISHED Published: 2009-06-10T17:37:00 Last Updated: 2024-08-07T05:20:35.236Z Vendors: n/a Products: n/a Problem Types: n/a Description: CFNetwork in Apple Safari before 4.0 on Windows does not properly protect the temporary files created for downloads, which allows local users to obtain sensitive information by reading these files. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html - http://www.securityfocus.com/bid/35260 - http://www.vupen.com/english/advisories/2009/1522 - http://secunia.com/advisories/35379 - http://support.apple.com/kb/HT3613 - http://securitytracker.com
sories/2009/1522 - http://secunia.com/advisories/35379 - http://support.apple.com/kb/HT3613 - http://securitytracker.com/id?1022342 - http://www.securityfocus.com/bid/35347
CVE ID: CVE-2009-1717 State: PUBLISHED Published: 2009-06-05T15:25:00 Last Updated: 2024-08-07T05:20:35.201Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in Terminal in Apple Mac OS X 10.5 before 10.5.7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted size value in a CSI[4 xterm resize escape sequence that triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT3549 - http://www.securityfocus.com/bid/35182 - http://securitytracker.com/id?1022322 - https://exchange.xforce.ibmcloud.com/vulnerabilities/
urityfocus.com/bid/35182 - http://securitytracker.com/id?1022322 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50982 - http://www.securityfocus.com/archive/1/504031/100/0/threaded - http://dvlabs.tippingpoint.com/advisory/TPTI-09-04
CVE ID: CVE-2009-1718 State: PUBLISHED Published: 2009-06-10T17:37:00 Last Updated: 2024-08-07T05:20:35.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit in Apple Safari before 4.0 allows user-assisted remote attackers to obtain sensitive information via vectors involving drag events and the dragging of content over a crafted web page. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43068 - http://www.vupen.com/english/advisories/2011/0212 - http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html - http://www.securityfocus.com/bid/35260 - http://www.vupen.com/english/advisories/2009/1522 - http://lists.opens
2.html - http://www.securityfocus.com/bid/35260 - http://www.vupen.com/english/advisories/2009/1522 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - http://secunia.com/advisories/35379 - http://support.apple.com/kb/HT3613
CVE ID: CVE-2009-1719 State: PUBLISHED Published: 2009-06-16T23:00:00 Last Updated: 2024-08-07T05:20:35.334Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Aqua Look and Feel for Java implementation in Java 1.5 on Mac OS X 10.5 allows remote attackers to execute arbitrary code via a call to the undocumented apple.laf.CColourUIResource constructor with a crafted value in the first argument, which is dereferenced as a pointer. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2009/Jun/msg00003.html - http://www.securityfocus.com/bid/35401 - http://www.zerodayinitiative.com/advisories/ZDI-09-043 - http://www.securi
ml - http://www.securityfocus.com/bid/35401 - http://www.zerodayinitiative.com/advisories/ZDI-09-043 - http://www.securityfocus.com/archive/1/504364/100/0/threaded - http://www.securityfocus.com/bid/35381 - http://support.apple.com/kb/HT3632 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51185
CVE ID: CVE-2009-1720 State: PUBLISHED Published: 2009-07-31T18:29:00 Last Updated: 2024-08-07T05:20:35.092Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in OpenEXR 1.2.2 and 1.6.1 allow context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors that trigger heap-based buffer overflows, related to (1) the Imf::PreviewImage::PreviewImage function and (2) compressor constructors. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://www.redhat.com/archives/fedora-package-announce/2009-July
Analyst Notes: - CVE Program Container: References: - https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01286.html - http://support.apple.com/kb/HT3757 - http://secunia.com/advisories/36123 - https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01290.html - http://www.mandriva.com/security/advisories?name=MDVSA-2009:191 - http://security.debian.org/pool/updates/main/o/openexr/openexr_1.2.2-4.3+etch2.diff.gz - http://secunia.com/advisories/36753 - http://www.vupen.com/english/advisories/2009/2035 - http://secunia.com/advisories/36096 - http://www.debian.org/security/2009/dsa-1842 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:190 - http://sec
p://www.debian.org/security/2009/dsa-1842 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:190 - http://secunia.com/advisories/36030 - http://secunia.com/advisories/36032 - http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html - http://security.debian.org/pool/updates/main/o/openexr/openexr_1.6.1-3+lenny3.diff.gz - http://release.debian.org/proposed-updates/stable_diffs/openexr_1.6.1-3%2Blenny3.debdiff - http://www.securityfocus.com/bid/35838 - http://www.securitytracker.com/id?1022674 - http://www.ubuntu.com/usn/USN-831-1 - http://www.vupen.com/english/advisories/2009/2172 - http://www.us-cert.gov/cas/techalerts/TA09-218A.html - http://lists.opensuse.org/open
com/english/advisories/2009/2172 - http://www.us-cert.gov/cas/techalerts/TA09-218A.html - http://lists.opensuse.org/opensuse-security-announce/2009-09/msg00000.html - https://github.com/openexr/openexr/blob/master/CHANGES.md#version-170-july-23-2010
CVE ID: CVE-2009-1721 State: PUBLISHED Published: 2009-07-31T18:29:00 Last Updated: 2024-08-07T05:20:35.076Z Vendors: n/a Products: n/a Problem Types: n/a Description: The decompression implementation in the Imf::hufUncompress function in OpenEXR 1.2.2 and 1.6.1 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors that trigger a free of an uninitialized pointer. Additional Analyst Notes: - CVE Program Container: References: - https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01286.html - http://support.apple.com/kb/HT3757 - http://secunia.com/advisories/36123 - https://www.redhat.com/archives/fed
86.html - http://support.apple.com/kb/HT3757 - http://secunia.com/advisories/36123 - https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01290.html - http://www.mandriva.com/security/advisories?name=MDVSA-2009:191 - http://security.debian.org/pool/updates/main/o/openexr/openexr_1.2.2-4.3+etch2.diff.gz - http://secunia.com/advisories/36753 - http://www.vupen.com/english/advisories/2009/2035 - http://secunia.com/advisories/36096 - http://www.debian.org/security/2009/dsa-1842 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:190 - http://secunia.com/advisories/36030 - http://secunia.com/advisories/36032 - http://lists.apple.com/archives/security-announce/2009/Aug/ms
m/advisories/36030 - http://secunia.com/advisories/36032 - http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html - http://security.debian.org/pool/updates/main/o/openexr/openexr_1.6.1-3+lenny3.diff.gz - http://release.debian.org/proposed-updates/stable_diffs/openexr_1.6.1-3%2Blenny3.debdiff - http://www.securityfocus.com/bid/35838 - http://www.securitytracker.com/id?1022674 - http://www.ubuntu.com/usn/USN-831-1 - http://www.vupen.com/english/advisories/2009/2172 - http://www.us-cert.gov/cas/techalerts/TA09-218A.html - http://lists.opensuse.org/opensuse-security-announce/2009-09/msg00000.html
CVE ID: CVE-2009-1722 State: PUBLISHED Published: 2009-07-31T18:29:00 Last Updated: 2024-08-07T05:20:35.419Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the compression implementation in OpenEXR 1.2.2 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT3757 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:191 - http://security.debian.org/pool/updates/main/o/openexr/openexr_1.2.2-4.3+etch2.diff.gz - http://secunia.com/advisories/36753 - http://www.vupe
.org/pool/updates/main/o/openexr/openexr_1.2.2-4.3+etch2.diff.gz - http://secunia.com/advisories/36753 - http://www.vupen.com/english/advisories/2009/2035 - http://secunia.com/advisories/36096 - http://www.debian.org/security/2009/dsa-1842 - http://secunia.com/advisories/36032 - http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html - http://www.securityfocus.com/bid/35838 - http://www.securitytracker.com/id?1022674 - http://www.ubuntu.com/usn/USN-831-1 - http://www.vupen.com/english/advisories/2009/2172 - http://www.us-cert.gov/cas/techalerts/TA09-218A.html - https://github.com/openexr/openexr/blob/master/CHANGES.md#version-170-july-23-2010
CVE ID: CVE-2009-1723 State: PUBLISHED Published: 2009-08-06T15:00:00 Last Updated: 2024-08-07T05:20:35.152Z Vendors: n/a Products: n/a Problem Types: n/a Description: CFNetwork in Apple Mac OS X 10.5 before 10.5.8 places an incorrect URL in a certificate warning in certain 302 redirection scenarios, which makes it easier for remote attackers to trick a user into visiting an arbitrary https web site by leveraging an open redirect vulnerability, a different issue than CVE-2009-2062. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT3757 - http://support.apple.com/kb/HT4225 - http://secunia.com/advisories/36096 - https://exchange.xforce.ibmcloud.com
HT3757 - http://support.apple.com/kb/HT4225 - http://secunia.com/advisories/36096 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52418 - http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html - http://www.securityfocus.com/bid/35954 - http://osvdb.org/56846 - http://www.vupen.com/english/advisories/2009/2172 - http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html - http://www.us-cert.gov/cas/techalerts/TA09-218A.html
CVE ID: CVE-2009-1724 State: PUBLISHED Published: 2009-07-09T17:00:00 Last Updated: 2024-08-07T05:20:35.201Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0.2, as used on iPhone OS before 3.1, iPhone OS before 3.1.1 for iPod touch, and other platforms, allows remote attackers to inject arbitrary web script or HTML via vectors related to parent and top objects. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43068 - http://support.apple.com/kb/HT3666 - http://www.vupen.com/english/advisories/2011/0212 - http://lists.apple.com/archives/security-announce/2009/J
kb/HT3666 - http://www.vupen.com/english/advisories/2011/0212 - http://lists.apple.com/archives/security-announce/2009/Jul/msg00000.html - http://www.securityfocus.com/bid/35441 - http://www.vupen.com/english/advisories/2009/1827 - http://osvdb.org/55738 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6208 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - http://www.securitytracker.com/id?1022525 - http://lists.apple.com/archives/security-announce/2009/Sep/msg00001.html - http://secunia.com/advisories/36677 - http://support.apple.com/kb/HT3860 - http://secunia.com/advisories/35758
CVE ID: CVE-2009-1725 State: PUBLISHED Published: 2009-07-09T17:00:00 Last Updated: 2024-08-07T05:20:35.334Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit in Apple Safari before 4.0.2, as used on iPhone OS before 3.1, iPhone OS before 3.1.1 for iPod touch, and other platforms; KHTML in kdelibs in KDE; QtWebKit (aka Qt toolkit); and possibly other products do not properly handle numeric character references, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted HTML document. Additional Analyst Notes: - CVE Program Container: References: - http://websvn.kde.org/?view=rev&revision=1002164
ument. Additional Analyst Notes: - CVE Program Container: References: - http://websvn.kde.org/?view=rev&revision=1002164 - http://websvn.kde.org/?view=rev&revision=1002163 - http://secunia.com/advisories/43068 - https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01177.html - http://www.mandriva.com/security/advisories?name=MDVSA-2009:330 - http://support.apple.com/kb/HT3666 - http://www.vupen.com/english/advisories/2011/0212 - http://lists.apple.com/archives/security-announce/2009/Jul/msg00000.html - http://websvn.kde.org/?view=rev&revision=1002162 - https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01199.html - http://www.securityfocus.com/bid/35607 - ht
://www.redhat.com/archives/fedora-package-announce/2009-July/msg01199.html - http://www.securityfocus.com/bid/35607 - http://www.vupen.com/english/advisories/2009/1827 - http://secunia.com/advisories/37746 - http://osvdb.org/55739 - http://secunia.com/advisories/36790 - http://secunia.com/advisories/36347 - http://www.debian.org/security/2009/dsa-1950 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - http://secunia.com/advisories/36062 - http://www.ubuntu.com/usn/USN-857-1 - http://secunia.com/advisories/36057 - https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00933.html - http://www.securitytracker.com/id?1022526 - https://oval.cisecurity.o
edora-package-announce/2009-August/msg00933.html - http://www.securitytracker.com/id?1022526 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5777 - https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01196.html - https://bugzilla.redhat.com/show_bug.cgi?id=513813 - http://www.ubuntu.com/usn/USN-836-1 - https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00931.html - http://lists.apple.com/archives/security-announce/2009/Sep/msg00001.html - http://secunia.com/advisories/36677 - http://support.apple.com/kb/HT3860 - http://secunia.com/advisories/35758 - https://www.redhat.com/archives/fedora-package-announce/2009-July/
com/kb/HT3860 - http://secunia.com/advisories/35758 - https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01200.html
CVE ID: CVE-2009-1726 State: PUBLISHED Published: 2009-08-06T16:00:00 Last Updated: 2024-08-07T05:20:35.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in ColorSync in Apple Mac OS X 10.4.11 and 10.5 before 10.5.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted image containing an embedded ColorSync profile. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT4220 - http://support.apple.com/kb/HT3757 - http://lists.apple.com/archives/security-announce/2010/Jun/msg00000.html - http://secunia.com/advisories/36096 - http://secunia.com/advisories/