Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-3695 State: PUBLISHED Published: 2011-03-31T22:00:00 Last Updated: 2024-08-07T03:18:52.953Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in fetchmailprefs.php in Horde IMP before 4.3.8, and Horde Groupware Webmail Edition before 1.2.7, allows remote attackers to inject arbitrary web script or HTML via the fm_id parameter in a fetchmail_prefs_save action, related to the Fetchmail configuration. Additional Analyst Notes: - CVE Program Container: References: - http://lists.horde.org/archives/announce/2010/000568.html - http://www.securityfocus.com/bid/43515 - http://www.debian.org/security/2011/dsa-2204 - http://git.horde.o
000568.html - http://www.securityfocus.com/bid/43515 - http://www.debian.org/security/2011/dsa-2204 - http://git.horde.org/diff.php/imp/fetchmailprefs.php?rt=horde&r1=1.39.4.10&r2=1.39.4.11 - http://openwall.com/lists/oss-security/2010/10/01/6 - http://cvs.horde.org/diff.php/imp/docs/CHANGES?rt=horde&r1=1.699.2.424&r2=1.699.2.430&ty=h - http://www.securityfocus.com/archive/1/513992/100/0/threaded - http://archives.neohapsis.com/archives/fulldisclosure/2010-09/0379.html - http://lists.horde.org/archives/announce/2010/000558.html - http://git.horde.org/diff.php/groupware/docs/webmail/CHANGES?rt=horde&r1=1.35.2.11&r2=1.35.2.13&ty=h - http://www.vupen.com/english/advisories/2011/0769 - http://se
/webmail/CHANGES?rt=horde&r1=1.35.2.11&r2=1.35.2.13&ty=h - http://www.vupen.com/english/advisories/2011/0769 - http://securityreason.com/securityalert/8170 - http://secunia.com/advisories/41627 - https://bugzilla.redhat.com/show_bug.cgi?id=641069 - http://www.vupen.com/english/advisories/2010/2513 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=598584 - http://openwall.com/lists/oss-security/2010/09/30/8 - http://openwall.com/lists/oss-security/2010/09/30/7 - http://secunia.com/advisories/43896
CVE ID: CVE-2010-3696 State: PUBLISHED Published: 2010-10-07T20:21:00Z Last Updated: 2024-08-07T03:18:52.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: The fr_dhcp_decode function in lib/dhcp.c in FreeRADIUS 2.1.9, in certain non-default builds, does not properly handle the DHCP Relay Agent Information option, which allows remote attackers to cause a denial of service (infinite loop and daemon outage) via a packet that has more than one sub-option. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://github.com/alandekok/freeradius-server/commit/4dc7800b866f889a1247685bbaa6dd4238a56279
Container: References: - http://github.com/alandekok/freeradius-server/commit/4dc7800b866f889a1247685bbaa6dd4238a56279 - http://secunia.com/advisories/41621 - http://www.openwall.com/lists/oss-security/2010/10/01/3 - http://freeradius.org/press/index.html#2.1.10 - http://www.openwall.com/lists/oss-security/2010/10/01/8 - https://bugs.freeradius.org/bugzilla/show_bug.cgi?id=77 - https://bugzilla.redhat.com/show_bug.cgi?id=639390
CVE ID: CVE-2010-3697 State: PUBLISHED Published: 2010-10-07T20:21:00Z Last Updated: 2024-08-07T03:18:52.656Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wait_for_child_to_die function in main/event.c in FreeRADIUS 2.1.x before 2.1.10, in certain circumstances involving long-term database outages, does not properly handle long queue times for requests, which allows remote attackers to cause a denial of service (daemon crash) by sending many requests. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/41621 - http://github.com/alandekok/freeradius-server/commit/ff94dd35673bba1476594299d31ce8293b8bd223 - https://bugs.freeradius.org
p://github.com/alandekok/freeradius-server/commit/ff94dd35673bba1476594299d31ce8293b8bd223 - https://bugs.freeradius.org/bugzilla/show_bug.cgi?id=35 - http://www.openwall.com/lists/oss-security/2010/10/01/3 - http://freeradius.org/press/index.html#2.1.10 - https://bugzilla.redhat.com/show_bug.cgi?id=639397 - http://www.openwall.com/lists/oss-security/2010/10/01/8
CVE ID: CVE-2010-3698 State: PUBLISHED Published: 2010-11-26T18:23:00 Last Updated: 2024-08-07T03:18:52.934Z Vendors: n/a Products: n/a Problem Types: n/a Description: The KVM implementation in the Linux kernel before 2.6.36 does not properly reload the FS and GS segment registers, which allows host OS users to cause a denial of service (host OS crash) via a KVM_RUN ioctl call in conjunction with a modified Local Descriptor Table (LDT). Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2010-0898.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052513.html - http://www.vupen.com/english/advisories/2010/3123
doraproject.org/pipermail/package-announce/2010-December/052513.html - http://www.vupen.com/english/advisories/2010/3123 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=9581d442b9058d3699b4be568b6e5eae38a41493 - http://www.vupen.com/english/advisories/2010/3321 - http://www.redhat.com/support/errata/RHSA-2010-0842.html - http://www.securityfocus.com/bid/44500 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.36 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:029 - http://secunia.com/advisories/42745 - https://bugzilla.redhat.com/show_bug.cgi?id=639879
CVE ID: CVE-2010-3699 State: PUBLISHED Published: 2010-12-08T19:00:00 Last Updated: 2024-08-07T03:18:53.085Z Vendors: n/a Products: n/a Problem Types: n/a Description: The backend driver in Xen 3.x allows guest OS users to cause a denial of service via a kernel thread leak, which prevents the device and guest OS from being shut down or create a zombie domain, causes a hang in zenwatch, or prevents unspecified xm commands from working properly, related to (1) netback, (2) blkback, or (3) blktap. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/42789 - http://secunia.com/advisories/43056 - http://www.vupen.com/english/advisories/2011/0024 - http://
com/advisories/42789 - http://secunia.com/advisories/43056 - http://www.vupen.com/english/advisories/2011/0024 - http://www.redhat.com/support/errata/RHSA-2011-0004.html - http://www.securityfocus.com/archive/1/520102/100/0/threaded - http://secunia.com/advisories/46397 - http://www.securitytracker.com/id?1024786 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00007.html - http://secunia.com/advisories/42372 - http://www.vmware.com/security/advisories/VMSA-2011-0012.html - http://xenbits.xensource.com/linux-2.6.18-xen.hg?rev/59f097ef181b - http://www.securityfocus.com/bid/45039 - http://www.vupen.com/english/advisories/2011/0213
CVE ID: CVE-2010-3700 State: PUBLISHED Published: 2010-10-29T18:00:00 Last Updated: 2024-08-07T03:18:52.920Z Vendors: n/a Products: n/a Problem Types: n/a Description: VMware SpringSource Spring Security 2.x before 2.0.6 and 3.x before 3.0.4, and Acegi Security 1.0.0 through 1.0.7, as used in IBM WebSphere Application Server (WAS) 6.1 and 7.0, allows remote attackers to bypass security constraints via a path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/44496 - http://secunia.com/advisories/42024 - https://issues.apache.org/bugzilla/show_bug.cgi?id=25015 - http://www.springsource.com/security/cve-2010-3700 - http://osvdb.org/6893
s.apache.org/bugzilla/show_bug.cgi?id=25015 - http://www.springsource.com/security/cve-2010-3700 - http://osvdb.org/68931 - http://www.securityfocus.com/archive/1/514517/100/0/threaded
CVE ID: CVE-2010-3701 State: PUBLISHED Published: 2010-10-12T20:00:00Z Last Updated: 2024-08-07T03:18:53.001Z Vendors: n/a Products: n/a Problem Types: n/a Description: lib/MessageStoreImpl.cpp in Red Hat Enterprise MRG before 1.2.2 allows remote authenticated users to cause a denial of service (stack memory exhaustion and broker crash) via a large persistent message. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2010-0756.html - https://bugzilla.redhat.com/show_bug.cgi?id=634014 - https://bugzilla.redhat.com/show_bug.cgi?id=640006 - http://www.redhat.com/support/errata/RHSA-2010-0757.html
CVE ID: CVE-2010-3702 State: PUBLISHED Published: 2010-11-05T17:00:00 Last Updated: 2024-08-07T03:18:52.995Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Gfx::getPos function in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up to 0.15.1, CUPS, kdegraphics, and possibly other products allows context-dependent attackers to cause a denial of service (crash) via unknown vectors that trigger an uninitialized pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050285.html - http://www.openwall.com/lists/oss-security/2010/10/04/6 - http://lis
ermail/package-announce/2010-November/050285.html - http://www.openwall.com/lists/oss-security/2010/10/04/6 - http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049392.html - http://cgit.freedesktop.org/poppler/poppler/commit/?id=e853106b58d6b4b0467dbd6436c9bb1cfbd372cf - http://www.redhat.com/support/errata/RHSA-2010-0859.html - http://secunia.com/advisories/42357 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:228 - http://www.vupen.com/english/advisories/2011/0230 - http://www.redhat.com/support/errata/RHSA-2010-0752.html - http://www.openoffice.org/security/cves/CVE-2010-3702_CVE-2010-3704.html - http://lists.opensuse.org/opensuse-security-announce/2010-
enoffice.org/security/cves/CVE-2010-3702_CVE-2010-3704.html - http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00000.html - http://www.mandriva.com/security/advisories?name=MDVSA-2010:230 - http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00006.html - ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl5.patch - http://rhn.redhat.com/errata/RHSA-2012-1201.html - http://www.securityfocus.com/bid/43845 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:231 - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050390.html - http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.571720 - http://www.redhat.com/s
tp://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.571720 - http://www.redhat.com/support/errata/RHSA-2010-0751.html - http://secunia.com/advisories/42397 - http://secunia.com/advisories/42141 - http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049523.html - http://www.mandriva.com/security/advisories?name=MDVSA-2012:144 - http://www.vupen.com/english/advisories/2010/3097 - http://www.ubuntu.com/usn/USN-1005-1 - http://www.redhat.com/support/errata/RHSA-2010-0749.html - http://www.redhat.com/support/errata/RHSA-2010-0754.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049545.html - http://lists.fedoraproj
0754.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049545.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050268.html - https://bugzilla.redhat.com/show_bug.cgi?id=595245 - http://www.vupen.com/english/advisories/2010/2897 - http://secunia.com/advisories/42691 - http://www.debian.org/security/2010/dsa-2119 - http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html - http://www.mandriva.com/security/advisories?name=MDVSA-2010:229 - http://www.debian.org/security/2010/dsa-2135 - http://www.redhat.com/support/errata/RHSA-2010-0750.html - http://www.redhat.com/support/errata/RHSA-2010-0755.html - http://www.redhat.c
.com/support/errata/RHSA-2010-0750.html - http://www.redhat.com/support/errata/RHSA-2010-0755.html - http://www.redhat.com/support/errata/RHSA-2010-0753.html - http://secunia.com/advisories/43079
CVE ID: CVE-2010-3703 State: PUBLISHED Published: 2010-11-05T17:00:00 Last Updated: 2024-08-07T03:18:52.924Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PostScriptFunction::PostScriptFunction function in poppler/Function.cc in the PDF parser in poppler 0.8.7 and possibly other versions up to 0.15.1, and possibly other products, allows context-dependent attackers to cause a denial of service (crash) via a PDF file that triggers an uninitialized pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2010/10/04/6 - http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049392.html - http
ts/oss-security/2010/10/04/6 - http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049392.html - http://www.redhat.com/support/errata/RHSA-2010-0859.html - http://secunia.com/advisories/42357 - https://bugzilla.redhat.com/show_bug.cgi?id=639356 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:231 - http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.571720 - http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049523.html - http://www.ubuntu.com/usn/USN-1005-1 - http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049545.html - http://lists.opensuse.org/opensuse-security-announce/2010-12
t.org/pipermail/package-announce/2010-October/049545.html - http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html - http://cgit.freedesktop.org/poppler/poppler/commit/?id=bf2055088a3a2d3bb3d3c37d464954ec1a25771f
CVE ID: CVE-2010-3704 State: PUBLISHED Published: 2010-11-05T17:00:00 Last Updated: 2024-08-07T03:18:53.042Z Vendors: n/a Products: n/a Problem Types: n/a Description: The FoFiType1::parse function in fofi/FoFiType1.cc in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up to 0.15.1, kdegraphics, and possibly other products allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a PDF file with a crafted PostScript Type1 font that contains a negative array index, which bypasses input validation and triggers memory corruption. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fe
idation and triggers memory corruption. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050285.html - http://www.openwall.com/lists/oss-security/2010/10/04/6 - http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049392.html - http://www.redhat.com/support/errata/RHSA-2010-0859.html - http://secunia.com/advisories/42357 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:228 - http://www.vupen.com/english/advisories/2011/0230 - http://www.redhat.com/support/errata/RHSA-2010-0752.html - http://www.openoffice.org/security/cves/CVE-2010-3702_CVE-2010-3704.html - https://bugzilla.
rrata/RHSA-2010-0752.html - http://www.openoffice.org/security/cves/CVE-2010-3702_CVE-2010-3704.html - https://bugzilla.redhat.com/show_bug.cgi?id=638960 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:230 - http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00006.html - http://cgit.freedesktop.org/poppler/poppler/commit/?id=39d140bfc0b8239bdd96d6a55842034ae5c05473 - ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl5.patch - http://rhn.redhat.com/errata/RHSA-2012-1201.html - http://www.mandriva.com/security/advisories?name=MDVSA-2010:231 - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050390.html - http://slackware.com/security/viewer.php?l=slack
edoraproject.org/pipermail/package-announce/2010-November/050390.html - http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.571720 - http://www.redhat.com/support/errata/RHSA-2010-0751.html - http://secunia.com/advisories/42397 - http://secunia.com/advisories/42141 - http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049523.html - http://www.mandriva.com/security/advisories?name=MDVSA-2012:144 - http://www.vupen.com/english/advisories/2010/3097 - http://www.ubuntu.com/usn/USN-1005-1 - http://www.redhat.com/support/errata/RHSA-2010-0749.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049545.html - http://l
rata/RHSA-2010-0749.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049545.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050268.html - http://www.vupen.com/english/advisories/2010/2897 - http://secunia.com/advisories/42691 - http://www.debian.org/security/2010/dsa-2119 - http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html - http://www.mandriva.com/security/advisories?name=MDVSA-2010:229 - http://www.securityfocus.com/bid/43841 - http://www.debian.org/security/2010/dsa-2135 - http://www.redhat.com/support/errata/RHSA-2010-0753.html - http://secunia.com/advisories/43079
CVE ID: CVE-2010-3705 State: PUBLISHED Published: 2010-11-26T19:00:00 Last Updated: 2024-08-07T03:18:53.067Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sctp_auth_asoc_get_hmac function in net/sctp/auth.c in the Linux kernel before 2.6.36 does not properly validate the hmac_ids array of an SCTP peer, which allows remote attackers to cause a denial of service (memory corruption and panic) via a crafted value in the last element of this array. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1000-1 - https://bugzilla.redhat.com/show_bug.cgi?id=640036 - http://www.openwall.com/lists/oss-security/2010/10/04/2 - http://lists.fedorap
zilla.redhat.com/show_bug.cgi?id=640036 - http://www.openwall.com/lists/oss-security/2010/10/04/2 - http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052513.html - http://git.kernel.org/?p=linux/kernel/git/davem/net-2.6.git%3Ba=commit%3Bh=51e97a12bef19b7e43199fc153cf9bd5f2140362 - http://www.vupen.com/english/advisories/2010/3321 - http://www.redhat.com/support/errata/RHSA-2010-0842.html - http://www.redhat.com/support/errata/RHSA-2010-0958.html - http://www.openwall.com/lists/oss-security/2010/10/04/7 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.36 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:029 - http://marc.info/?l=linux-kernel&m=1285
geLog-2.6.36 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:029 - http://marc.info/?l=linux-kernel&m=128596992418814&w=2 - http://secunia.com/advisories/42745 - http://www.debian.org/security/2010/dsa-2126
CVE ID: CVE-2010-3706 State: PUBLISHED Published: 2010-10-06T16:00:00 Last Updated: 2024-08-07T03:18:52.956Z Vendors: n/a Products: n/a Problem Types: n/a Description: plugins/acl/acl-backend-vfile.c in Dovecot 1.2.x before 1.2.15 and 2.0.x before 2.0.5 interprets an ACL entry as a directive to add to the permissions granted by another ACL entry, instead of a directive to replace the permissions granted by another ACL entry, in certain circumstances involving the private namespace of a user, which allows remote authenticated users to bypass intended access restrictions via a request to read or modify a mailbox. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info
a request to read or modify a mailbox. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=oss-security&m=128622064325688&w=2 - http://www.ubuntu.com/usn/USN-1059-1 - http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00001.html - http://www.vupen.com/english/advisories/2010/2572 - http://marc.info/?l=oss-security&m=128620520732377&w=2 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:217 - http://secunia.com/advisories/43220 - http://www.vupen.com/english/advisories/2011/0301 - http://www.dovecot.org/list/dovecot/2010-October/053450.html - http://www.dovecot.org/list/dovecot/2010-October/053452.html - http://www.vupen.com/english/adv
10-October/053450.html - http://www.dovecot.org/list/dovecot/2010-October/053452.html - http://www.vupen.com/english/advisories/2010/2840 - http://www.dovecot.org/list/dovecot/2010-October/053451.html
CVE ID: CVE-2010-3707 State: PUBLISHED Published: 2010-10-06T16:00:00 Last Updated: 2024-08-07T03:18:52.913Z Vendors: n/a Products: n/a Problem Types: n/a Description: plugins/acl/acl-backend-vfile.c in Dovecot 1.2.x before 1.2.15 and 2.0.x before 2.0.5 interprets an ACL entry as a directive to add to the permissions granted by another ACL entry, instead of a directive to replace the permissions granted by another ACL entry, in certain circumstances involving more specific entries that occur after less specific entries, which allows remote authenticated users to bypass intended access restrictions via a request to read or modify a mailbox. Additional Analyst Notes: - CVE Program Container: R
nded access restrictions via a request to read or modify a mailbox. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=oss-security&m=128622064325688&w=2 - http://www.ubuntu.com/usn/USN-1059-1 - http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00001.html - http://www.vupen.com/english/advisories/2010/2572 - http://marc.info/?l=oss-security&m=128620520732377&w=2 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:217 - http://secunia.com/advisories/43220 - http://www.vupen.com/english/advisories/2011/0301 - http://www.dovecot.org/list/dovecot/2010-October/053450.html - http://www.dovecot.org/list/dovecot/2010-October/053452.html - htt
w.dovecot.org/list/dovecot/2010-October/053450.html - http://www.dovecot.org/list/dovecot/2010-October/053452.html - http://www.redhat.com/support/errata/RHSA-2011-0600.html - http://www.vupen.com/english/advisories/2010/2840 - http://www.dovecot.org/list/dovecot/2010-October/053451.html
CVE ID: CVE-2010-3708 State: PUBLISHED Published: 2010-12-30T20:00:00Z Last Updated: 2024-08-07T03:18:53.023Z Vendors: n/a Products: n/a Problem Types: n/a Description: The serialization implementation in JBoss Drools in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3 before 4.3.0.CP09 and JBoss Enterprise SOA Platform 4.2 and 4.3 supports the embedding of class files, which allows remote attackers to execute arbitrary code via a crafted static initializer. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2010-0940.html - http://www.redhat.com/support/errata/RHSA-2010-0938.html - https://bugzilla.redhat.com/
ort/errata/RHSA-2010-0940.html - http://www.redhat.com/support/errata/RHSA-2010-0938.html - https://bugzilla.redhat.com/show_bug.cgi?id=633859 - http://www.redhat.com/support/errata/RHSA-2010-0937.html - http://www.redhat.com/support/errata/RHSA-2010-0939.html - https://issues.jboss.org/browse/SOA-2319 - http://securitytracker.com/id?1024813
CVE ID: CVE-2010-3709 State: PUBLISHED Published: 2010-11-08T23:00:00 Last Updated: 2024-08-07T03:18:52.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ZipArchive::getArchiveComment function in PHP 5.2.x through 5.2.14 and 5.3.x through 5.3.3 allows context-dependent attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted ZIP archive. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/0077 - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052836.html - http://secunia.com/advisories/42812 - http://marc.info/?l=bugtraq&m=133469208622507&w=2 - http: