Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-1521 State: PUBLISHED Published: 2009-05-05T17:00:00 Last Updated: 2024-08-07T05:13:25.658Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Java GUI in the IBM Tivoli Storage Manager (TSM) client 5.2.0.0 through 5.2.5.3, 5.3.0.0 through 5.3.6.5, 5.4.0.0 through 5.4.2.6, and 5.5.0.0 through 5.5.1.17, and the TSM Express client 5.3.3.0 through 5.3.6.5, allows attackers to read or modify arbitrary files via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21384389 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50329 - http://www.vupen.com/english
/docview.wss?uid=swg21384389 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50329 - http://www.vupen.com/english/advisories/2009/1235 - http://secunia.com/advisories/32604 - http://www-1.ibm.com/support/docview.wss?uid=swg1IC59779
CVE ID: CVE-2009-1522 State: PUBLISHED Published: 2009-05-05T17:00:00 Last Updated: 2024-08-07T05:13:25.598Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IBM Tivoli Storage Manager (TSM) client 5.5.0.0 through 5.5.1.17 on AIX and Windows, when SSL is used, allows remote attackers to conduct unspecified man-in-the-middle attacks and read arbitrary files via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21384389 - http://www.vupen.com/english/advisories/2009/1235 - http://osvdb.org/54235 - http://secunia.com/advisories/32604 - http://www-1.ibm.com/support/docview.wss?uid=swg1IC59781 - https:/
vdb.org/54235 - http://secunia.com/advisories/32604 - http://www-1.ibm.com/support/docview.wss?uid=swg1IC59781 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50330
CVE ID: CVE-2009-1523 State: PUBLISHED Published: 2009-05-05T17:00:00 Last Updated: 2024-08-07T05:13:25.642Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the HTTP server in Mort Bay Jetty 5.1.14, 6.x before 6.1.17, and 7.x through 7.0.0.M2 allows remote attackers to access arbitrary files via directory traversal sequences in the URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34800 - http://jira.codehaus.org/browse/JETTY-1004 - http://www.vupen.com/english/advisories/2010/1792 - http://secunia.com/advisories/35776 - https://www.redhat.com/archives/fedora-package-announce/2009-May/msg0126
10/1792 - http://secunia.com/advisories/35776 - https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01262.html - http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02282388 - http://www.securitytracker.com/id?1022563 - http://www.vupen.com/english/advisories/2009/1900 - https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01257.html - https://bugzilla.redhat.com/show_bug.cgi?id=499867 - http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html - http://secunia.com/advisories/34975 - http://www.securityfocus.com/bid/35675 - http://www.kb.cert.org/vuls/id/CRDY-7RKQCY - http://secunia.com/advisories/35225 - http://secunia.com/advisories/3514
- http://www.kb.cert.org/vuls/id/CRDY-7RKQCY - http://secunia.com/advisories/35225 - http://secunia.com/advisories/35143 - http://secunia.com/advisories/40553 - http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02282388 - http://www.kb.cert.org/vuls/id/402580 - https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01259.html
CVE ID: CVE-2009-1524 State: PUBLISHED Published: 2009-05-05T17:00:00 Last Updated: 2024-08-07T05:13:25.748Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Mort Bay Jetty before 6.1.17 allows remote attackers to inject arbitrary web script or HTML via a directory listing request containing a ; (semicolon) character. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34800 - http://www.vupen.com/english/advisories/2010/1792 - http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02282388 - https://bugzilla.redhat.com/show_bug.cgi?id=499867 - http://secunia.com/advisories/34975 - http://
Id=emr_na-c02282388 - https://bugzilla.redhat.com/show_bug.cgi?id=499867 - http://secunia.com/advisories/34975 - http://secunia.com/advisories/40553 - http://jira.codehaus.org/browse/JETTY-980 - http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02282388
CVE ID: CVE-2009-1525 State: PUBLISHED Published: 2009-05-05T20:00:00 Last Updated: 2024-08-07T05:13:25.646Z Vendors: n/a Products: n/a Problem Types: n/a Description: CMD_DB in JBMC Software DirectAdmin before 1.334 allows remote authenticated users to gain privileges via shell metacharacters in the name parameter during a restore action. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/54015 - http://archives.neohapsis.com/archives/fulldisclosure/2009-04/0228.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/50167 - http://secunia.com/advisories/34861 - http://www.directadmin.com/features.php?id=968
CVE ID: CVE-2009-1526 State: PUBLISHED Published: 2009-05-05T20:00:00Z Last Updated: 2024-09-16T20:17:02.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: JBMC Software DirectAdmin before 1.334 allows local users to create or overwrite any file via a symlink attack on an arbitrary file in a certain temporary directory, related to a request for this temporary file in the PATH_INFO to the CMD_DB script during a backup action. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2009-04/0228.html - http://osvdb.org/54014 - http://secunia.com/advisories/34861 - http://www.directadmin.com/features.php?id=968
CVE ID: CVE-2009-1527 State: PUBLISHED Published: 2009-05-05T20:00:00 Last Updated: 2024-08-07T05:13:25.585Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the ptrace_attach function in kernel/ptrace.c in the Linux kernel before 2.6.30-rc4 allows local users to gain privileges via a PTRACE_ATTACH ptrace call during an exec system call that is launching a setuid application, related to locking an incorrect cred_exec_mutex object. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/50293 - http://www.securityfocus.com/archive/1/503610/100/0/threaded - http://www.osvdb.org/54188 - http://www.kernel.o
/50293 - http://www.securityfocus.com/archive/1/503610/100/0/threaded - http://www.osvdb.org/54188 - http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.30-rc4 - http://secunia.com/advisories/35120 - http://www.openwall.com/lists/oss-security/2009/05/04/2 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=cad81bc2529ab8c62b6fdc83a1c0c7f4a87209eb - http://www.vupen.com/english/advisories/2009/1236 - http://www.securityfocus.com/bid/34799 - http://wiki.rpath.com/Advisories:rPSA-2009-0084 - http://secunia.com/advisories/34977
CVE ID: CVE-2009-1528 State: PUBLISHED Published: 2009-06-10T18:00:00 Last Updated: 2024-08-07T05:13:25.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 and 7 for Windows XP SP2 and SP3; 6 and 7 for Server 2003 SP2; 7 for Vista Gold, SP1, and SP2; and 7 for Server 2008 SP2 does not properly synchronize AJAX requests, which allows allows remote attackers to execute arbitrary code via a large number of concurrent, asynchronous XMLHttpRequest calls, aka "HTML Object Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6
rogram Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6260 - http://www.vupen.com/english/advisories/2009/1538 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-019 - http://osvdb.org/54947 - http://www.us-cert.gov/cas/techalerts/TA09-160A.html - http://www.securitytracker.com/id?1022350 - http://www.zerodayinitiative.com/advisories/ZDI-09-037 - http://www.securityfocus.com/archive/1/504206/100/0/threaded - http://www.securityfocus.com/bid/35222
CVE ID: CVE-2009-1529 State: PUBLISHED Published: 2009-06-10T18:00:00 Last Updated: 2024-10-21T16:31:00.075Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 7 for Windows XP SP2 and SP3; 7 for Server 2003 SP2; 7 for Vista Gold, SP1, and SP2; and 7 for Server 2008 SP2 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by calling the setCapture method on a collection of crafted objects, aka "Uninitialized Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.vupen.com/english/advisories/2009/1538 - http://www.securityfocus.com/
- CISA ADP Vulnrichment: References: - http://www.vupen.com/english/advisories/2009/1538 - http://www.securityfocus.com/archive/1/504205/100/0/threaded - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-019 - http://www.zerodayinitiative.com/advisories/ZDI-09-036 - http://www.securityfocus.com/bid/35223 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6295 - http://osvdb.org/54948 - http://www.us-cert.gov/cas/techalerts/TA09-160A.html - http://www.securitytracker.com/id?1022350
CVE ID: CVE-2009-1530 State: PUBLISHED Published: 2009-06-10T18:00:00 Last Updated: 2024-08-07T05:13:25.880Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Microsoft Internet Explorer 7 for Windows XP SP2 and SP3; 7 for Server 2003 SP2; 7 for Vista Gold, SP1, and SP2; and 7 for Server 2008 SP2 allows remote attackers to execute arbitrary code by repeatedly adding HTML document nodes and calling event handlers, which triggers an access of an object that (1) was not properly initialized or (2) is deleted, aka "HTML Objects Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/a
rruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/504209/100/0/threaded - http://www.vupen.com/english/advisories/2009/1538 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-019 - http://www.zerodayinitiative.com/advisories/ZDI-09-038 - http://www.us-cert.gov/cas/techalerts/TA09-160A.html - http://www.securitytracker.com/id?1022350 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6294 - http://osvdb.org/54949
CVE ID: CVE-2009-1531 State: PUBLISHED Published: 2009-06-10T18:00:00 Last Updated: 2024-08-07T05:13:25.729Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 7 for Windows XP SP2 and SP3; 7 for Server 2003 SP2; 7 for Vista Gold, SP1, and SP2; and 7 for Server 2008 SP2 allows remote attackers to execute arbitrary code via frequent calls to the getElementsByTagName function combined with the creation of an object during reordering of elements, followed by an onreadystatechange event, which triggers an access of an object that (1) was not properly initialized or (2) is deleted, aka "HTML Object Memory Corruption Vulnerability." Additional Analyst Notes: - C
properly initialized or (2) is deleted, aka "HTML Object Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/1538 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-019 - http://www.securityfocus.com/archive/1/504216/100/0/threaded - http://www.zerodayinitiative.com/advisories/ZDI-09-039 - http://www.securityfocus.com/bid/35234 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6308 - http://osvdb.org/54950 - http://www.us-cert.gov/cas/techalerts/TA09-160A.html - http://www.securitytracker.com/id?1022350
CVE ID: CVE-2009-1532 State: PUBLISHED Published: 2009-06-10T18:00:00 Last Updated: 2025-01-21T15:27:34.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 8 for Windows XP SP2 and SP3; 8 for Server 2003 SP2; 8 for Vista Gold, SP1, and SP2; and 8 for Server 2008 SP2 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code via "malformed row property references" that trigger an access of an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "HTML Objects Memory Corruption Vulnerability" or "HTML Object Memory Corruption Vulnerability." Additional Analyst Notes: - C
Objects Memory Corruption Vulnerability" or "HTML Object Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://osvdb.org/54951 - http://www.securityfocus.com/archive/1/504208/100/0/threaded - http://www.vupen.com/english/advisories/2009/1538 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-019 - http://www.zerodayinitiative.com/advisories/ZDI-09-041 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6244 - http://www.us-cert.gov/cas/techalerts/TA09-160A.html - http://www.securitytracker.com/id?1022350
CVE ID: CVE-2009-1533 State: PUBLISHED Published: 2009-06-10T17:37:00 Last Updated: 2024-08-07T05:13:25.653Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Works for Windows document converters in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, Office 2007 SP1, and Works 8.5 and 9 allows remote attackers to execute arbitrary code via a crafted Works .wps file that triggers memory corruption, aka "File Converter Buffer Overflow Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/1543 - http://secunia.com/advisories/35371 - http://www.securityfocus.com/bid/35184 - http://osvd
nglish/advisories/2009/1543 - http://secunia.com/advisories/35371 - http://www.securityfocus.com/bid/35184 - http://osvdb.org/54939 - http://www.securitytracker.com/id?1022355 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-024 - http://www.us-cert.gov/cas/techalerts/TA09-160A.html - http://www.securitytracker.com/id?1022354 - http://jvn.jp/en/jp/JVN70858401/index.html - http://blogs.technet.com/srd/archive/2009/06/09/ms09-024.aspx - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6292
CVE ID: CVE-2009-1534 State: PUBLISHED Published: 2009-08-12T17:00:00 Last Updated: 2024-08-07T05:13:25.643Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Office Web Components ActiveX Control in Microsoft Office XP SP3, Office 2000 Web Components SP3, Office XP Web Components SP3, BizTalk Server 2002, and Visual Studio .NET 2003 SP1 allows remote attackers to execute arbitrary code via crafted property values, aka "Office Web Components Buffer Overflow Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/56916 - http://www.us-cert.gov/cas/techalerts/TA09-223A.html - https://oval.cisecurity.org/repository/search
//osvdb.org/56916 - http://www.us-cert.gov/cas/techalerts/TA09-223A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6326 - http://www.securityfocus.com/bid/35992 - http://www.securitytracker.com/id?1022708 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-043
CVE ID: CVE-2009-1535 State: PUBLISHED Published: 2009-06-10T14:00:00 Last Updated: 2024-08-07T05:13:25.766Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WebDAV extension in Microsoft Internet Information Services (IIS) 5.1 and 6.0 allows remote attackers to bypass URI-based protection mechanisms, and list folders or read, create, or modify files, via a %c0%af (Unicode / character) at an arbitrary position in the URI, as demonstrated by inserting %c0%af into a "/protected/" initial pathname component to bypass the password protection on the protected\ folder, aka "IIS 5.1 and 6.0 WebDAV Authentication Bypass Vulnerability," a different vulnerability than CVE-2009-1122. Addi
er, aka "IIS 5.1 and 6.0 WebDAV Authentication Bypass Vulnerability," a different vulnerability than CVE-2009-1122. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6029 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-020 - http://view.samurajdata.se/psview.php?id=023287d6&page=1 - http://isc.sans.org/diary.html?n&storyid=6397 - http://archives.neohapsis.com/archives/fulldisclosure/2009-05/0135.html - http://archives.neohapsis.com/archives/fulldisclosure/2009-05/0139.html - http://blog.zoller.lu/2009/05/iis-6-webdac-auth-bypass-and-data.html - http://www.us-c
ulldisclosure/2009-05/0139.html - http://blog.zoller.lu/2009/05/iis-6-webdac-auth-bypass-and-data.html - http://www.us-cert.gov/cas/techalerts/TA09-160A.html - http://archives.neohapsis.com/archives/fulldisclosure/2009-05/att-0135/IIS_Advisory.pdf - http://archives.neohapsis.com/archives/fulldisclosure/2009-05/0144.html - http://www.attrition.org/pipermail/vim/2009-June/002192.html
CVE ID: CVE-2009-1536 State: PUBLISHED Published: 2009-08-12T17:00:00 Last Updated: 2024-08-07T05:13:25.653Z Vendors: n/a Products: n/a Problem Types: n/a Description: ASP.NET in Microsoft .NET Framework 2.0 SP1 and SP2 and 3.5 Gold and SP1, when ASP 2.0 is used in integrated mode on IIS 7.0, does not properly manage request scheduling, which allows remote attackers to cause a denial of service (daemon outage) via a series of crafted HTTP requests, aka "Remote Unauthenticated Denial of Service in ASP.NET Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6393 - http://www.us-c
erences: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6393 - http://www.us-cert.gov/cas/techalerts/TA09-223A.html - http://www.vupen.com/english/advisories/2009/2231 - http://secunia.com/advisories/36127 - http://blogs.technet.com/srd/archive/2009/08/11/ms09-035-asp-net-denial-of-service-vulnerability.aspx - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-036 - http://www.securitytracker.com/id?1022715 - http://osvdb.org/56905 - http://www.securityfocus.com/bid/35985
CVE ID: CVE-2009-1537 State: PUBLISHED Published: 2009-05-29T18:00:00 Last Updated: 2024-08-07T05:13:25.834Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted QuickTime media file, as exploited in the wild in May 2009, aka "DirectX NULL Byte Overwrite Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-028 - http://b
am Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-028 - http://blogs.technet.com/srd/archive/2009/05/28/new-vulnerability-in-quicktime-parsing.aspx - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6237 - http://secunia.com/advisories/35268 - http://www.securitytracker.com/id?1022299 - http://www.vupen.com/english/advisories/2009/1886 - http://www.vupen.com/english/advisories/2009/1445 - http://osvdb.org/54797 - http://www.securityfocus.com/bid/35139 - http://www.us-cert.gov/cas/techalerts/TA09-195A.html - http://isc.sans.org/diary.html?storyid=6481 - http://www.microsoft.com/technet/security/advis
echalerts/TA09-195A.html - http://isc.sans.org/diary.html?storyid=6481 - http://www.microsoft.com/technet/security/advisory/971778.mspx - http://blogs.technet.com/msrc/archive/2009/05/28/microsoft-security-advisory-971778-vulnerability-in-microsoft-directshow-released.aspx
CVE ID: CVE-2009-1538 State: PUBLISHED Published: 2009-07-15T15:00:00 Last Updated: 2024-08-07T05:20:33.434Z Vendors: n/a Products: n/a Problem Types: n/a Description: The QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2 performs updates to pointers without properly validating unspecified data values, which allows remote attackers to execute arbitrary code via a crafted QuickTime media file, aka "DirectX Pointer Validation Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009
t Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-028 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5963 - http://osvdb.org/55844 - http://www.vupen.com/english/advisories/2009/1886 - http://www.securityfocus.com/bid/35600 - http://www.us-cert.gov/cas/techalerts/TA09-195A.html
CVE ID: CVE-2009-1539 State: PUBLISHED Published: 2009-07-15T15:00:00 Last Updated: 2024-08-07T05:20:33.447Z Vendors: n/a Products: n/a Problem Types: n/a Description: The QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2 does not properly validate unspecified size fields in QuickTime media files, which allows remote attackers to execute arbitrary code via a crafted file, aka "DirectX Size Validation Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-028 - http://osvdb
ontainer: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-028 - http://osvdb.org/55845 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6341 - http://www.vupen.com/english/advisories/2009/1886 - http://www.us-cert.gov/cas/techalerts/TA09-195A.html
CVE ID: CVE-2009-1540 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2009-1541 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2009-1542 State: PUBLISHED Published: 2009-07-15T15:00:00 Last Updated: 2024-08-07T05:20:33.430Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Virtual Machine Monitor (VMM) in Microsoft Virtual PC 2004 SP1, 2007, and 2007 SP1, and Microsoft Virtual Server 2005 R2 SP1, does not enforce CPU privilege-level requirements for all machine instructions, which allows guest OS users to execute arbitrary kernel-mode code and gain privileges within the guest OS via a crafted application, aka "Virtual PC and Virtual Server Privileged Instruction Decoding Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2
lnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/1890 - http://secunia.com/advisories/35808 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-033 - http://www.securitytracker.com/id?1022544 - http://www.us-cert.gov/cas/techalerts/TA09-195A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6166
CVE ID: CVE-2009-1543 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.