Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2011-1683 State: PUBLISHED Published: 2011-04-13T14:00:00Z Last Updated: 2024-09-17T00:16:19.461Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Application Server (WAS) 6.0.x through 6.0.2.43, 6.1.x before 6.1.0.37, and 7.0.x before 7.0.0.17 on z/OS, when a Local OS user registry or Federated Repository with RACF adapter is used, allows remote attackers to obtain unspecified application access via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21473989 - http://www.ibm.com/support/docview.wss?uid=swg1PM35611 - http://www.ibm.com/support/docview.wss?uid=swg1PM35609 - http
- http://www.ibm.com/support/docview.wss?uid=swg1PM35611 - http://www.ibm.com/support/docview.wss?uid=swg1PM35609 - http://secunia.com/advisories/43965 - http://www.ibm.com/support/docview.wss?uid=swg1PM35545 - http://www.ibm.com/support/docview.wss?uid=swg1PM35480 - http://www.ibm.com/support/docview.wss?uid=swg1PM35478 - http://www.securityfocus.com/bid/47122 - http://www.vupen.com/english/advisories/2011/0833
CVE ID: CVE-2011-1684 State: PUBLISHED Published: 2011-05-03T20:00:00 Last Updated: 2024-08-06T22:37:25.317Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the MP4_ReadBox_skcr function in libmp4.c in the MP4 demultiplexer in VideoLAN VLC media player 1.x before 1.1.9 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted MP4 file. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14741 - http://www.vupen.com/english/advisories/2011/0954 - http://secunia.com/advisories/43890 - http://
e.oval%3Adef%3A14741 - http://www.vupen.com/english/advisories/2011/0954 - http://secunia.com/advisories/43890 - http://openwall.com/lists/oss-security/2011/04/11/17 - http://secunia.com/advisories/44022 - http://git.videolan.org/?p=vlc.git%3Ba=commit%3Bh=5637ca8141bf39f263ecdb62035d2cb45c740821 - http://www.vupen.com/english/advisories/2011/0916 - http://www.debian.org/security/2011/dsa-2218 - http://openwall.com/lists/oss-security/2011/04/13/17 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66664 - http://www.securityfocus.com/bid/47293 - http://securitytracker.com/id?1025373 - http://openwall.com/lists/oss-security/2011/04/13/14 - http://www.videolan.org/security/sa1103.html
CVE ID: CVE-2011-1685 State: PUBLISHED Published: 2011-04-22T10:00:00 Last Updated: 2024-08-06T22:37:24.581Z Vendors: n/a Products: n/a Problem Types: n/a Description: Best Practical Solutions RT 3.8.0 through 3.8.9 and 4.0.0rc through 4.0.0rc7, when the CustomFieldValuesSources (aka external custom field) option is enabled, allows remote authenticated users to execute arbitrary code via unspecified vectors, as demonstrated by a cross-site request forgery (CSRF) attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/1071 - http://lists.bestpractical.com/pipermail/rt-announce/2011-April/000188.html - https://bugzilla.redhat.com/sh
2011/1071 - http://lists.bestpractical.com/pipermail/rt-announce/2011-April/000188.html - https://bugzilla.redhat.com/show_bug.cgi?id=696795 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66791 - http://blog.bestpractical.com/2011/04/security-vulnerabilities-in-rt.html - http://www.securityfocus.com/bid/47383 - http://lists.bestpractical.com/pipermail/rt-announce/2011-April/000187.html - http://www.debian.org/security/2011/dsa-2220 - http://secunia.com/advisories/44189
CVE ID: CVE-2011-1686 State: PUBLISHED Published: 2011-04-22T10:00:00 Last Updated: 2024-08-06T22:37:25.461Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Best Practical Solutions RT 2.0.0 through 3.6.10, 3.8.0 through 3.8.9, and 4.0.0rc through 4.0.0rc7 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors, as demonstrated by reading data. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/1071 - http://lists.bestpractical.com/pipermail/rt-announce/2011-April/000188.html - https://bugzilla.redhat.com/show_bug.cgi?id=696795 - http://blog.bestp
om/pipermail/rt-announce/2011-April/000188.html - https://bugzilla.redhat.com/show_bug.cgi?id=696795 - http://blog.bestpractical.com/2011/04/security-vulnerabilities-in-rt.html - http://www.securityfocus.com/bid/47383 - http://lists.bestpractical.com/pipermail/rt-announce/2011-April/000187.html - http://lists.bestpractical.com/pipermail/rt-announce/2011-April/000189.html - http://www.debian.org/security/2011/dsa-2220 - http://secunia.com/advisories/44189 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66792
CVE ID: CVE-2011-1687 State: PUBLISHED Published: 2011-04-22T10:00:00 Last Updated: 2024-08-06T22:37:25.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: Best Practical Solutions RT 3.0.0 through 3.6.10, 3.8.0 through 3.8.9, and 4.0.0rc through 4.0.0rc7 allows remote authenticated users to obtain sensitive information by using the search interface, as demonstrated by retrieving encrypted passwords. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/1071 - http://lists.bestpractical.com/pipermail/rt-announce/2011-April/000188.html - https://bugzilla.redhat.com/show_bug.cgi?id=696795 - https://exchange.xforce.ibmcloud.com
ounce/2011-April/000188.html - https://bugzilla.redhat.com/show_bug.cgi?id=696795 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66793 - http://blog.bestpractical.com/2011/04/security-vulnerabilities-in-rt.html - http://www.securityfocus.com/bid/47383 - http://lists.bestpractical.com/pipermail/rt-announce/2011-April/000187.html - http://lists.bestpractical.com/pipermail/rt-announce/2011-April/000189.html - http://www.debian.org/security/2011/dsa-2220 - http://secunia.com/advisories/44189
CVE ID: CVE-2011-1688 State: PUBLISHED Published: 2011-04-22T10:00:00 Last Updated: 2024-08-06T22:37:24.622Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Best Practical Solutions RT 3.2.0 through 3.6.10, 3.8.0 through 3.8.9, and 4.0.0rc through 4.0.0rc7 allows remote attackers to read arbitrary files via a crafted HTTP request. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/66795 - http://www.vupen.com/english/advisories/2011/1071 - http://lists.bestpractical.com/pipermail/rt-announce/2011-April/000188.html - https://bugzilla.redhat.com/show_bug.cgi?id=696795 - http://blo
tical.com/pipermail/rt-announce/2011-April/000188.html - https://bugzilla.redhat.com/show_bug.cgi?id=696795 - http://blog.bestpractical.com/2011/04/security-vulnerabilities-in-rt.html - http://www.securityfocus.com/bid/47383 - http://lists.bestpractical.com/pipermail/rt-announce/2011-April/000187.html - http://lists.bestpractical.com/pipermail/rt-announce/2011-April/000189.html - http://www.debian.org/security/2011/dsa-2220 - http://secunia.com/advisories/44189
CVE ID: CVE-2011-1689 State: PUBLISHED Published: 2011-04-22T10:00:00 Last Updated: 2024-08-06T22:37:25.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Best Practical Solutions RT 2.0.0 through 3.6.10, 3.8.0 through 3.8.9, and 4.0.0rc through 4.0.0rc7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/1071 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66796 - http://lists.bestpractical.com/pipermail/rt-announce/2011-April/000188.html - https://bugzilla.redhat.com/show_b
66796 - http://lists.bestpractical.com/pipermail/rt-announce/2011-April/000188.html - https://bugzilla.redhat.com/show_bug.cgi?id=696795 - http://blog.bestpractical.com/2011/04/security-vulnerabilities-in-rt.html - http://www.securityfocus.com/bid/47383 - http://lists.bestpractical.com/pipermail/rt-announce/2011-April/000187.html - http://lists.bestpractical.com/pipermail/rt-announce/2011-April/000189.html - http://www.debian.org/security/2011/dsa-2220 - http://secunia.com/advisories/44189
CVE ID: CVE-2011-1690 State: PUBLISHED Published: 2011-04-22T10:00:00 Last Updated: 2024-08-06T22:37:24.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: Best Practical Solutions RT 3.6.0 through 3.6.10 and 3.8.0 through 3.8.8 allows remote attackers to trick users into sending credentials to an arbitrary server via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/1071 - http://lists.bestpractical.com/pipermail/rt-announce/2011-April/000188.html - https://bugzilla.redhat.com/show_bug.cgi?id=696795 - http://blog.bestpractical.com/2011/04/security-vulnerabilities-in-rt.html - https://exchange.xforce
_bug.cgi?id=696795 - http://blog.bestpractical.com/2011/04/security-vulnerabilities-in-rt.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/66794 - http://www.securityfocus.com/bid/47383 - http://lists.bestpractical.com/pipermail/rt-announce/2011-April/000187.html - http://lists.bestpractical.com/pipermail/rt-announce/2011-April/000189.html - http://www.debian.org/security/2011/dsa-2220 - http://secunia.com/advisories/44189
CVE ID: CVE-2011-1691 State: PUBLISHED Published: 2011-04-15T00:00:00 Last Updated: 2024-08-06T22:37:25.752Z Vendors: n/a Products: n/a Problem Types: n/a Description: The counterToCSSValue function in CSSComputedStyleDeclaration.cpp in the Cascading Style Sheets (CSS) implementation in WebCore in WebKit before r82222, as used in Google Chrome before 11.0.696.43 and other products, does not properly handle access to the (1) counterIncrement and (2) counterReset attributes of CSSStyleDeclaration data provided by a getComputedStyle method call, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via crafted JavaScript code. Additional Ana
o cause a denial of service (NULL pointer dereference and application crash) via crafted JavaScript code. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.webkit.org/show_bug.cgi?id=57266 - http://code.google.com/p/chromium/issues/detail?id=77665 - http://trac.webkit.org/changeset/82222 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14365 - http://googlechromereleases.blogspot.com/2011/04/beta-channel-update_12.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/66818
CVE ID: CVE-2011-1696 State: PUBLISHED Published: 2011-10-08T01:00:00 Last Updated: 2024-08-06T22:37:25.337Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Novell Identity Manager (aka IDM) User Application 3.5.0, 3.5.1, 3.6.0, 3.6.1, 3.7.0, and 4.0.0, and Identity Manager Roles Based Provisioning Module 3.6.0, 3.6.1, 3.7.0, and 4.0.0, allows remote attackers to inject arbitrary web script or HTML via the apwaDetail (aka apwaDetailId) parameter, aka Bug 692972. Additional Analyst Notes: - CVE Program Container: References: - http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5111710.html - http://support.novell.com/
ces: - http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5111710.html - http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5112271.html - https://bugzilla.novell.com/show_bug.cgi?id=692972 - http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5112230.html - http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5111711.html - http://www.securitytracker.com/id?1026138 - http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5112250.html - http://www.securityfocus.com/bid/49935 - http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5112270.html
CVE ID: CVE-2011-1699 State: PUBLISHED Published: 2011-06-09T19:00:00 Last Updated: 2024-08-06T22:37:25.689Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafted uri parameter in a printer-url. Additional Analyst Notes: - CVE Program Container: References: - http://zerodayinitiative.com/advisories/ZDI-11-172/ - http://www.securitytracker.com/id?1025606 - http://download.novell.com/Download?buildid=6_bNby38ERg~ - http://www.securityfocus.com/archive/1/518266/100/0/threaded - http://secunia.com/advisories/44811 - http://www.securityfocus.com/bid/48
ityfocus.com/archive/1/518266/100/0/threaded - http://secunia.com/advisories/44811 - http://www.securityfocus.com/bid/48124 - http://www.novell.com/support/php/search.do?cmd=displayKC&docType=kc&externalId=7008720
CVE ID: CVE-2011-1700 State: PUBLISHED Published: 2011-06-09T19:00:00 Last Updated: 2024-08-06T22:37:25.337Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafted profile-time parameter in a printer-url. Additional Analyst Notes: - CVE Program Container: References: - http://zerodayinitiative.com/advisories/ZDI-11-173/ - http://www.securitytracker.com/id?1025606 - http://www.securityfocus.com/archive/1/518267/100/0/threaded - http://download.novell.com/Download?buildid=6_bNby38ERg~ - http://www.novell.com/support/php/search.do?cmd=displayKC&docTyp
p://download.novell.com/Download?buildid=6_bNby38ERg~ - http://www.novell.com/support/php/search.do?cmd=displayKC&docType=kc&externalId=7008722 - http://secunia.com/advisories/44811 - http://www.securityfocus.com/bid/48124
CVE ID: CVE-2011-1701 State: PUBLISHED Published: 2011-06-09T19:00:00 Last Updated: 2024-08-06T22:37:25.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafted profile-name parameter in a printer-url. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1025606 - http://download.novell.com/Download?buildid=6_bNby38ERg~ - http://secunia.com/advisories/44811 - http://www.securityfocus.com/bid/48124 - https://exchange.xforce.ibmcloud.com/vulnerabilities/67876 - http://www.novell.com/support/php/search.
s.com/bid/48124 - https://exchange.xforce.ibmcloud.com/vulnerabilities/67876 - http://www.novell.com/support/php/search.do?cmd=displayKC&docType=kc&externalId=7008723 - http://zerodayinitiative.com/advisories/ZDI-11-174/ - http://www.securityfocus.com/archive/1/518269/100/0/threaded
CVE ID: CVE-2011-1702 State: PUBLISHED Published: 2011-06-09T19:00:00 Last Updated: 2024-08-06T22:37:25.655Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafted file-date-time parameter in a printer-url. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/518270/100/0/threaded - http://www.securitytracker.com/id?1025606 - https://exchange.xforce.ibmcloud.com/vulnerabilities/67877 - http://download.novell.com/Download?buildid=6_bNby38ERg~ - http://zerodayinitiative.com/advisories/ZDI-11-175/ - h
877 - http://download.novell.com/Download?buildid=6_bNby38ERg~ - http://zerodayinitiative.com/advisories/ZDI-11-175/ - http://secunia.com/advisories/44811 - http://www.securityfocus.com/bid/48124 - http://www.novell.com/support/php/search.do?cmd=displayKC&docType=kc&externalId=7008724
CVE ID: CVE-2011-1703 State: PUBLISHED Published: 2011-06-09T19:00:00 Last Updated: 2024-08-06T22:37:24.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafted driver-version parameter in a printer-url. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1025606 - http://www.novell.com/support/php/search.do?cmd=displayKC&docType=kc&externalId=7008727 - http://download.novell.com/Download?buildid=6_bNby38ERg~ - https://exchange.xforce.ibmcloud.com/vulnerabilities/67878 - http://zerodayinitiative.com
ownload?buildid=6_bNby38ERg~ - https://exchange.xforce.ibmcloud.com/vulnerabilities/67878 - http://zerodayinitiative.com/advisories/ZDI-11-176/ - http://secunia.com/advisories/44811 - http://www.securityfocus.com/bid/48124 - http://www.securityfocus.com/archive/1/518271/100/0/threaded
CVE ID: CVE-2011-1704 State: PUBLISHED Published: 2011-06-09T19:00:00 Last Updated: 2024-08-06T22:37:25.404Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafted core-package parameter in a printer-url. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1025606 - http://download.novell.com/Download?buildid=6_bNby38ERg~ - http://www.novell.com/support/php/search.do?cmd=displayKC&docType=kc&externalId=7008728 - http://zerodayinitiative.com/advisories/ZDI-11-177/ - http://secunia.com/advisories/44811 -
Type=kc&externalId=7008728 - http://zerodayinitiative.com/advisories/ZDI-11-177/ - http://secunia.com/advisories/44811 - http://www.securityfocus.com/bid/48124 - http://www.securityfocus.com/archive/1/518268/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/67879
CVE ID: CVE-2011-1705 State: PUBLISHED Published: 2011-06-09T19:00:00 Last Updated: 2024-08-06T22:37:25.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafted client-file-name parameter in a printer-url. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1025606 - http://download.novell.com/Download?buildid=6_bNby38ERg~ - http://zerodayinitiative.com/advisories/ZDI-11-178/ - http://www.novell.com/support/php/search.do?cmd=displayKC&docType=kc&externalId=7008729 - http://secunia.com/advisories/448
p://www.novell.com/support/php/search.do?cmd=displayKC&docType=kc&externalId=7008729 - http://secunia.com/advisories/44811 - http://www.securityfocus.com/bid/48124 - http://www.securityfocus.com/archive/1/518272/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/67880
CVE ID: CVE-2011-1706 State: PUBLISHED Published: 2011-06-09T19:00:00 Last Updated: 2024-08-06T22:37:25.657Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafted iprint-client-config-info parameter in a printer-url. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1025606 - https://exchange.xforce.ibmcloud.com/vulnerabilities/67881 - http://www.novell.com/support/php/search.do?cmd=displayKC&docType=kc&externalId=7008730 - http://download.novell.com/Download?buildid=6_bNby38ERg~ - http://zerodayin
md=displayKC&docType=kc&externalId=7008730 - http://download.novell.com/Download?buildid=6_bNby38ERg~ - http://zerodayinitiative.com/advisories/ZDI-11-179/ - http://www.securityfocus.com/archive/1/518273/100/0/threaded - http://secunia.com/advisories/44811 - http://www.securityfocus.com/bid/48124
CVE ID: CVE-2011-1707 State: PUBLISHED Published: 2011-06-09T19:00:00 Last Updated: 2024-08-06T22:37:25.916Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafted op-printer-list-all-jobs parameter in a printer-url. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/67883 - http://www.securitytracker.com/id?1025606 - http://zerodayinitiative.com/advisories/ZDI-11-181/ - http://download.novell.com/Download?buildid=6_bNby38ERg~ - http://secunia.com/advisories/44811 - http://www.secu
-181/ - http://download.novell.com/Download?buildid=6_bNby38ERg~ - http://secunia.com/advisories/44811 - http://www.securityfocus.com/bid/48124 - http://www.securityfocus.com/archive/1/518275/100/0/threaded
CVE ID: CVE-2011-1708 State: PUBLISHED Published: 2011-06-09T21:00:00 Last Updated: 2024-08-06T22:37:25.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafted op-printer-list-all-jobs cookie. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1025606 - http://zerodayinitiative.com/advisories/ZDI-11-180/ - http://download.novell.com/Download?buildid=6_bNby38ERg~ - https://exchange.xforce.ibmcloud.com/vulnerabilities/67882 - http://secunia.com/advisories/44811 - http://www.securityfocus.com/bid/48
ge.xforce.ibmcloud.com/vulnerabilities/67882 - http://secunia.com/advisories/44811 - http://www.securityfocus.com/bid/48124 - http://www.novell.com/support/php/search.do?cmd=displayKC&docType=kc&externalId=7008731 - http://www.securityfocus.com/archive/1/518274/100/0/threaded
CVE ID: CVE-2011-1709 State: PUBLISHED Published: 2011-06-14T17:00:00 Last Updated: 2024-08-06T22:37:25.814Z Vendors: n/a Products: n/a Problem Types: n/a Description: GNOME Display Manager (gdm) before 2.32.2, when glib 2.28 is used, enables execution of a web browser with the uid of the gdm account, which allows local users to gain privileges via vectors involving the x-scheme-handler/http MIME type. Additional Analyst Notes: - CVE Program Container: References: - http://ftp.gnome.org/pub/GNOME/sources/gdm/2.32/gdm-2.32.2.news - http://git.gnome.org/browse/gdm/commit/?id=d13dd72531599ab7e4c747db3b58a8c17753e08d - http://secunia.com/advisories/44797 - http://lists.fedoraproject.org/pipermai
d13dd72531599ab7e4c747db3b58a8c17753e08d - http://secunia.com/advisories/44797 - http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061264.html - http://www.ubuntu.com/usn/USN-1142-1 - http://www.securityfocus.com/bid/48084 - https://hermes.opensuse.org/messages/8643655 - http://secunia.com/advisories/44808 - https://bugzilla.redhat.com/show_bug.cgi?id=709139
CVE ID: CVE-2011-1710 State: PUBLISHED Published: 2011-12-31T01:00:00Z Last Updated: 2024-09-17T04:19:40.251Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in the HTTP server in the Novell XTier framework 3.1.8 allow remote attackers to cause a denial of service (service crash) or possibly execute arbitrary code via crafted header length variables. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2011-10/msg00012.html - http://support.novell.com/security/cve/CVE-2011-1710.html - http://download.novell.com/patch/finder/?keywords=b8833ce91ca8c8d2a478a8a32a2e2efb - https://bugzilla.novel
-1710.html - http://download.novell.com/patch/finder/?keywords=b8833ce91ca8c8d2a478a8a32a2e2efb - https://bugzilla.novell.com/585440