Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
://secunia.com/advisories/34419 - http://marc.info/?l=bugtraq&m=123792744311063&w=2 - http://www.vupen.com/english/advisories/2009/0823 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49403 - http://www.securitytracker.com/id?1021891 - http://marc.info/?l=bugtraq&m=123792744311063&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6352
CVE ID: CVE-2009-0208 State: PUBLISHED Published: 2009-02-26T23:00:00Z Last Updated: 2024-09-16T16:18:56.929Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP Virtual Rooms Client before 7.0.1, when running on Windows, allows remote attackers to execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=123567121722181&w=2 - http://marc.info/?l=bugtraq&m=123567121722181&w=2
CVE ID: CVE-2009-0209 State: PUBLISHED Published: 2009-10-01T15:00:00 Last Updated: 2024-08-07T04:24:18.236Z Vendors: n/a Products: n/a Problem Types: n/a Description: PI Server in OSIsoft PI System before 3.4.380.x does not properly use encryption in the default authentication process, which allows remote attackers to read or modify information in databases via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/506826/100/0/threaded
CVE ID: CVE-2009-0210 State: PUBLISHED Published: 2009-02-08T22:00:00 Last Updated: 2024-08-07T04:24:18.324Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the MLF application in AREVA e-terrahabitat 5.7 and earlier allows remote attackers to execute arbitrary commands or cause a denial of service (system crash) via unspecified vectors, aka PD28578. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/500689/100/0/threaded - http://secunia.com/advisories/33837 - http://www.securityfocus.com/bid/33637 - http://www.kb.cert.org/vuls/id/337569 - http://www.scada-security.com/vulnerabilities/areva1.html
CVE ID: CVE-2009-0211 State: PUBLISHED Published: 2009-02-08T22:00:00 Last Updated: 2024-08-07T04:24:18.183Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the WebFGServer application in AREVA e-terrahabitat 5.7 and earlier allows remote attackers to cause a denial of service (system crash) via unknown vectors, aka PD32018. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/500689/100/0/threaded - http://secunia.com/advisories/33837 - http://www.securityfocus.com/bid/33637 - http://www.kb.cert.org/vuls/id/337569 - http://www.scada-security.com/vulnerabilities/areva1.html
CVE ID: CVE-2009-0212 State: PUBLISHED Published: 2009-02-08T22:00:00 Last Updated: 2024-08-07T04:24:18.184Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the WebFGServer application in AREVA e-terrahabitat 5.7 and earlier allows remote attackers to cause a denial of service (system crash) via unknown vectors, aka PD32020. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/500689/100/0/threaded - http://secunia.com/advisories/33837 - http://www.securityfocus.com/bid/33637 - http://www.kb.cert.org/vuls/id/337569 - http://www.scada-security.com/vulnerabilities/areva1.html
CVE ID: CVE-2009-0213 State: PUBLISHED Published: 2009-02-08T22:00:00 Last Updated: 2024-08-07T04:24:18.247Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the NETIO application in AREVA e-terrahabitat 5.7 and earlier allows remote attackers to cause a denial of service (system crash) via unknown vectors, aka PD32021. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/500689/100/0/threaded - http://secunia.com/advisories/33837 - http://www.securityfocus.com/bid/33637 - http://www.kb.cert.org/vuls/id/337569 - http://www.scada-security.com/vulnerabilities/areva1.html
CVE ID: CVE-2009-0214 State: PUBLISHED Published: 2009-02-08T22:00:00 Last Updated: 2024-08-07T04:24:18.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the WebFGServer application in AREVA e-terrahabitat 5.7 and earlier allows remote authenticated users to gain privileges via unknown vectors, aka PD32022. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/500689/100/0/threaded - http://secunia.com/advisories/33837 - http://www.securityfocus.com/bid/33637 - http://www.kb.cert.org/vuls/id/337569 - http://www.scada-security.com/vulnerabilities/areva1.html
CVE ID: CVE-2009-0215 State: PUBLISHED Published: 2009-03-25T15:00:00 Last Updated: 2024-08-07T04:24:18.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the GetXMLValue method in the IBM Access Support ActiveX control in IbmEgath.dll, as distributed on IBM and Lenovo computers, allows remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/52958 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49409 - http://secunia.com/advisories/34470 - http://www.vupen.com/english/advisories/2009/0824 - http://www.securityfocus.com/bid/34228 - http://www.kb.cert
/34470 - http://www.vupen.com/english/advisories/2009/0824 - http://www.securityfocus.com/bid/34228 - http://www.kb.cert.org/vuls/id/340420
CVE ID: CVE-2009-0216 State: PUBLISHED Published: 2009-02-13T17:00:00 Last Updated: 2024-08-07T04:24:18.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: GE Fanuc iFIX 5.0 and earlier relies on client-side authentication involving a weakly encrypted local password file, which allows remote attackers to bypass intended access restrictions and start privileged server login sessions by recovering a password or by using a modified program module. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33739 - http://www.kb.cert.org/vuls/id/310355 - http://www.mcgrewsecurity.com/2009/02/10/ge-fanuc-releases-info-on-ifix-vulnerabilities-vu-31
.cert.org/vuls/id/310355 - http://www.mcgrewsecurity.com/2009/02/10/ge-fanuc-releases-info-on-ifix-vulnerabilities-vu-310355/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/48691 - http://support.gefanuc.com/support/index?page=kbchannel&id=S:KB13253&actp=search
CVE ID: CVE-2009-0217 State: PUBLISHED Published: 2009-07-14T23:00:00 Last Updated: 2024-08-07T04:24:18.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: The design of the W3C XML Signature Syntax and Processing (XMLDsig) recommendation, as implemented in products including (1) the Oracle Security Developer Tools component in Oracle Application Server 10.1.2.3, 10.1.3.4, and 10.1.4.3IM; (2) the WebLogic Server component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, and 8.1 SP6; (3) Mono before 2.4.2.2; (4) XML Security Library before 1.2.12; (5) IBM WebSphere Application Server Versions 6.0 through 6.0.2.33, 6.1 through 6.1.0.23, and 7.0 through 7.0.0.1; (6) Sun JDK a
WebSphere Application Server Versions 6.0 through 6.0.2.33, 6.1 through 6.1.0.23, and 7.0 through 7.0.0.1; (6) Sun JDK and JRE Update 14 and earlier; (7) Microsoft .NET Framework 3.0 through 3.0 SP2, 3.5, and 4.0; and other products uses a parameter that defines an HMAC truncation length (HMACOutputLength) but does not require a minimum for this length, which allows attackers to spoof HMAC-based signatures and bypass authentication by specifying a truncation length with a small number of bits. Additional Analyst Notes: - CVE Program Container: References: - https://rhn.redhat.com/errata/RHSA-2009-1428.html - http://www.vupen.com/english/advisories/2009/3122 - http://www.openoffice.org/securi
at.com/errata/RHSA-2009-1428.html - http://www.vupen.com/english/advisories/2009/3122 - http://www.openoffice.org/security/cves/CVE-2009-0217.html - https://issues.apache.org/bugzilla/show_bug.cgi?id=47526 - http://secunia.com/advisories/60799 - http://www.gentoo.org/security/en/glsa/glsa-201408-19.xml - http://www-01.ibm.com/support/docview.wss?rs=180&context=SSEQTP&dc=D400&uid=swg24023545&loc=en_US&cs=UTF-8&lang=en&rss=ct180websphere - https://rhn.redhat.com/errata/RHSA-2009-1200.html - http://secunia.com/advisories/35776 - http://secunia.com/advisories/36162 - http://secunia.com/advisories/36494 - http://www.vupen.com/english/advisories/2009/2543 - http://secunia.com/advisories/35858 - ht
unia.com/advisories/36494 - http://www.vupen.com/english/advisories/2009/2543 - http://secunia.com/advisories/35858 - http://secunia.com/advisories/38695 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-269208-1 - http://www.debian.org/security/2010/dsa-1995 - http://marc.info/?l=bugtraq&m=125787273209737&w=2 - http://secunia.com/advisories/35853 - https://rhn.redhat.com/errata/RHSA-2009-1637.html - http://www.redhat.com/support/errata/RHSA-2009-1694.html - http://secunia.com/advisories/35852 - http://secunia.com/advisories/35854 - http://secunia.com/advisories/34461 - http://www.kb.cert.org/vuls/id/WDON-7TY529 - http://www.mono-project.com/Vulnerabilities - http://sunsolve.sun.com
461 - http://www.kb.cert.org/vuls/id/WDON-7TY529 - http://www.mono-project.com/Vulnerabilities - http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020710.1-1 - http://www.ubuntu.com/usn/USN-903-1 - http://www.securityfocus.com/bid/35671 - https://issues.apache.org/bugzilla/show_bug.cgi?id=47527 - http://www.vupen.com/english/advisories/2010/0366 - http://osvdb.org/55907 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:209 - http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00005.html - http://secunia.com/advisories/38567 - https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00310.html - http://sunsolve.sun.com/search/document.do?assetkey=
at.com/archives/fedora-package-announce/2009-August/msg00310.html - http://sunsolve.sun.com/search/document.do?assetkey=1-66-263429-1 - http://blogs.sun.com/security/entry/cert_vulnerability_note_vu_466161 - http://marc.info/?l=bugtraq&m=125787273209737&w=2 - http://www.vupen.com/english/advisories/2009/1900 - http://www.securitytracker.com/id?1022561 - http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html - http://secunia.com/advisories/37671 - http://www.kb.cert.org/vuls/id/466161 - http://www.securitytracker.com/id?1022567 - https://rhn.redhat.com/errata/RHSA-2009-1636.html - http://www-01.ibm.com/support/docview.wss?rs=180&context=SSEQTP&dc=D400&uid=swg24023723&loc=en_
ta/RHSA-2009-1636.html - http://www-01.ibm.com/support/docview.wss?rs=180&context=SSEQTP&dc=D400&uid=swg24023723&loc=en_US&cs=UTF-8&lang=en&rss=ct180websphere - https://rhn.redhat.com/errata/RHSA-2009-1649.html - http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html - http://www.us-cert.gov/cas/techalerts/TA09-294A.html - http://www.vupen.com/english/advisories/2009/1909 - http://www.vupen.com/english/advisories/2010/0635 - http://svn.apache.org/viewvc?revision=794013&view=revision - http://secunia.com/advisories/38568 - http://secunia.com/advisories/36180 - https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00494.html - http://www.w3.org/2008/06/xmldsi
0 - https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00494.html - http://www.w3.org/2008/06/xmldsigcore-errata.html#e03 - https://usn.ubuntu.com/826-1/ - http://secunia.com/advisories/37841 - http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html - http://sunsolve.sun.com/search/document.do?assetkey=1-21-125136-16-1 - http://secunia.com/advisories/35855 - https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00505.html - http://secunia.com/advisories/36176 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7158 - http://www.w3.org/QA/2009/07/hmac_truncation_in_xml_signatu.html - http://www.vupen.co
l%3Aorg.mitre.oval%3Adef%3A7158 - http://www.w3.org/QA/2009/07/hmac_truncation_in_xml_signatu.html - http://www.vupen.com/english/advisories/2009/1908 - https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00325.html - http://git.gnome.org/cgit/xmlsec/commit/?id=34b349675af9f72eb822837a8772cc1ead7115c7 - http://www-01.ibm.com/support/docview.wss?rs=180&uid=swg21384925 - http://secunia.com/advisories/41818 - http://www.securitytracker.com/id?1022661 - http://secunia.com/advisories/37300 - http://www.vupen.com/english/advisories/2009/1911 - http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html - http://lists.opensuse.org/opensuse-security-announce/2009-11/m
e.com/archives/security-announce/2009/Sep/msg00000.html - http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00002.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8717 - https://rhn.redhat.com/errata/RHSA-2009-1201.html - http://git.gnome.org/cgit/xmlsec/patch/?id=34b349675af9f72eb822837a8772cc1ead7115c7 - http://www.kb.cert.org/vuls/id/MAPG-7TSKXQ - http://www.us-cert.gov/cas/techalerts/TA10-159B.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10186 - http://osvdb.org/55895 - http://www.aleksey.com/xmlsec/ - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-04
5895 - http://www.aleksey.com/xmlsec/ - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-041 - http://secunia.com/advisories/38921 - https://rhn.redhat.com/errata/RHSA-2009-1650.html - https://bugzilla.redhat.com/show_bug.cgi?id=511915
CVE ID: CVE-2009-0218 State: PUBLISHED Published: 2009-04-13T16:00:00 Last Updated: 2024-08-07T04:24:18.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure method vulnerability in Particle Software IntraLaunch Application Launcher ActiveX control in IntraLaunch.ocx, as used in LDRA TBbrowse and possibly other products, allows remote attackers to execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34395 - http://www.kb.cert.org/vuls/id/WDON-7Q4RZN - http://www.kb.cert.org/vuls/id/MAPG-7PYRP4 - http://www.kb.cert.org/vuls/id/908801 - https://exchange.xforce.ibmcloud.com/vulnerabilitie
rt.org/vuls/id/MAPG-7PYRP4 - http://www.kb.cert.org/vuls/id/908801 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49684
CVE ID: CVE-2009-0219 State: PUBLISHED Published: 2009-01-21T01:00:00 Last Updated: 2024-08-07T04:24:18.429Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PDF distiller in the Attachment Service in Research in Motion (RIM) BlackBerry Enterprise Server (BES) 4.1.3 through 4.1.6, BlackBerry Professional Software 4.1.4, and BlackBerry Unite! before 1.0.3 bundle 28 performs delete operations on uninitialized pointers, which allows user-assisted remote attackers to execute arbitrary code via a crafted data stream in a .pdf file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33250 - http://www.blackberry.com/btsc/search.do?cmd=di
rogram Container: References: - http://www.securityfocus.com/bid/33250 - http://www.blackberry.com/btsc/search.do?cmd=displayKC&docType=kc&externalId=KB17118 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=766 - http://www.securitytracker.com/id?1021559 - http://www.blackberry.com/btsc/search.do?cmd=displayKC&docType=kc&externalId=KB17119 - http://secunia.com/advisories/33534
CVE ID: CVE-2009-0220 State: PUBLISHED Published: 2009-05-12T22:00:00 Last Updated: 2024-08-07T04:24:18.199Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in the PowerPoint 4.0 importer (PP4X32.DLL) in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allow remote attackers to execute arbitrary code via crafted formatting data for paragraphs in a file that uses a PowerPoint 4.0 native file format, related to (1) an incorrect calculation from a record header, or (2) an interget that is used to specify the number of bytes to copy, aka "Legacy File Format Vulnerability." Additional Analyst Notes: - CVE Program Container: References:
f bytes to copy, aka "Legacy File Format Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34833 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5610 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=790 - http://secunia.com/advisories/32428 - http://www.vupen.com/english/advisories/2009/1290 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-017 - http://www.securitytracker.com/id?1022205 - http://www.us-cert.gov/cas/techalerts/TA09-132A.html - http://osvdb.org/54386
CVE ID: CVE-2009-0221 State: PUBLISHED Published: 2009-05-12T22:00:00 Last Updated: 2024-08-07T04:24:18.250Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in Microsoft Office PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a PowerPoint file containing a crafted record type for "collaboration information for different slides" that contains a field that specifies a large number of records, which triggers an under-allocated buffer and a heap-based buffer overflow, aka "Integer Overflow Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34835 - https://oval.cisecuri
nal Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34835 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6127 - http://osvdb.org/54394 - http://secunia.com/advisories/32428 - http://www.vupen.com/english/advisories/2009/1290 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-017 - http://www.securitytracker.com/id?1022205 - http://www.us-cert.gov/cas/techalerts/TA09-132A.html - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=796
CVE ID: CVE-2009-0222 State: PUBLISHED Published: 2009-05-12T22:00:00 Last Updated: 2024-08-07T04:24:18.268Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via crafted sound data in a file that uses a PowerPoint 4.0 native file format, leading to a "pointer overwrite" and memory corruption, aka "Legacy File Format Vulnerability," a different vulnerability than CVE-2009-0223, CVE-2009-0226, CVE-2009-0227, and CVE-2009-1137. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/exploits/Microsoft_PowerPoint_Pointer_Overwrite_Code_Execution_E
E Program Container: References: - http://www.vupen.com/exploits/Microsoft_PowerPoint_Pointer_Overwrite_Code_Execution_Exploit_MS09_017_1290123.php - http://www.securityfocus.com/bid/34831 - http://secunia.com/advisories/32428 - http://www.vupen.com/english/advisories/2009/1290 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-017 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6143 - http://www.securitytracker.com/id?1022205 - http://www.us-cert.gov/cas/techalerts/TA09-132A.html - http://osvdb.org/54382 - http://www.vupen.com/exploits/Microsoft_PowerPoint_Memory_Corruption_Code_Execution_Exploit_MS09_017_1290124.php
CVE ID: CVE-2009-0223 State: PUBLISHED Published: 2009-05-12T22:00:00 Last Updated: 2024-08-07T04:24:18.398Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via crafted sound data in a file that uses a PowerPoint 4.0 native file format, leading to memory corruption, aka "Legacy File Format Vulnerability," a different vulnerability than CVE-2009-0222, CVE-2009-0226, CVE-2009-0227, and CVE-2009-1137. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32428 - http://www.vupen.com/english/advisories/2009/1290 - https://docs.microsof
ences: - http://secunia.com/advisories/32428 - http://www.vupen.com/english/advisories/2009/1290 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-017 - http://www.securityfocus.com/bid/34834 - http://www.securitytracker.com/id?1022205 - http://www.us-cert.gov/cas/techalerts/TA09-132A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6269
CVE ID: CVE-2009-0224 State: PUBLISHED Published: 2009-05-12T22:00:00 Last Updated: 2024-08-07T04:24:18.396Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Office PowerPoint 2000 SP3, 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; PowerPoint Viewer 2003 and 2007 SP1 and SP2; PowerPoint in Microsoft Office 2004 for Mac and 2008 for Mac; Open XML File Format Converter for Mac; Microsoft Works 8.5 and 9.0; and Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 do not properly validate PowerPoint files, which allows remote attackers to execute arbitrary code via multiple crafted BuildList records that include ChartBuild containers,
s remote attackers to execute arbitrary code via multiple crafted BuildList records that include ChartBuild containers, which triggers memory corruption, aka "Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6023 - http://secunia.com/advisories/32428 - http://www.vupen.com/english/advisories/2009/1290 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-017 - http://www.securityfocus.com/bid/34879 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=793 - http://www.securitytracker.com/id?1022205 - http://www.us-
defense.com/intelligence/vulnerabilities/display.php?id=793 - http://www.securitytracker.com/id?1022205 - http://www.us-cert.gov/cas/techalerts/TA09-132A.html
CVE ID: CVE-2009-0225 State: PUBLISHED Published: 2009-05-12T22:00:00 Last Updated: 2024-08-07T04:24:18.209Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Office PowerPoint 2002 SP3 allows remote attackers to execute arbitrary code via crafted sound data in a file that uses a PowerPoint 95 native file format, leading to improper "array indexing" and memory corruption, aka "PP7 Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5526 - http://www.vupen.com/exploits/Microsoft_PowerPoint_Array_Indexing_Code_Execution_Exploit_MS09_017_129012
%3Adef%3A5526 - http://www.vupen.com/exploits/Microsoft_PowerPoint_Array_Indexing_Code_Execution_Exploit_MS09_017_1290125.php - http://secunia.com/advisories/32428 - http://www.vupen.com/english/advisories/2009/1290 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-017 - http://osvdb.org/54388 - http://www.securitytracker.com/id?1022205 - http://www.us-cert.gov/cas/techalerts/TA09-132A.html - http://www.securityfocus.com/bid/34880
CVE ID: CVE-2009-0226 State: PUBLISHED Published: 2009-05-12T22:00:00 Last Updated: 2024-08-07T04:24:18.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the PowerPoint 4.2 conversion filter in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via a long string in sound data in a file that uses a PowerPoint 4.0 native file format, leading to memory corruption, aka "Legacy File Format Vulnerability," a different vulnerability than CVE-2009-0222, CVE-2009-0223, CVE-2009-0227, and CVE-2009-1137. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bi