Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-1256 State: PUBLISHED Published: 2010-06-08T20:00:00 Last Updated: 2024-08-07T01:21:17.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Microsoft IIS 6.0, 7.0, and 7.5, when Extended Protection for Authentication is enabled, allows remote authenticated users to execute arbitrary code via unknown vectors related to "token checking" that trigger memory corruption, aka "IIS Authentication Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7149 - https://docs.microsoft.com/en-us/security-updates/securit
ository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7149 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-040 - http://www.securityfocus.com/bid/40573 - https://exchange.xforce.ibmcloud.com/vulnerabilities/58864 - http://www.us-cert.gov/cas/techalerts/TA10-159B.html
CVE ID: CVE-2010-1257 State: PUBLISHED Published: 2010-06-08T20:00:00 Last Updated: 2024-08-07T01:21:17.161Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the toStaticHTML API, as used in Microsoft Office InfoPath 2003 SP3, 2007 SP1, and 2007 SP2; Office SharePoint Server 2007 SP1 and SP2; SharePoint Services 3.0 SP1 and SP2; and Internet Explorer 8 allows remote attackers to inject arbitrary web script or HTML via vectors related to sanitization. Additional Analyst Notes: - CVE Program Container: References: - http://support.avaya.com/css/P8/documents/100089747 - https://exchange.xforce.ibmcloud.com/vulnerabilities/58866 - https://doc
/support.avaya.com/css/P8/documents/100089747 - https://exchange.xforce.ibmcloud.com/vulnerabilities/58866 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-039 - http://www.securityfocus.com/bid/40409 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6677 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-035 - http://www.us-cert.gov/cas/techalerts/TA10-159B.html
CVE ID: CVE-2010-1258 State: PUBLISHED Published: 2010-08-11T18:00:00 Last Updated: 2024-08-07T01:21:17.581Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6, 7, and 8 does not properly determine the origin of script code, which allows remote attackers to execute script in an unintended domain or security zone, and obtain sensitive information, via unspecified vectors, aka "Event Handler Cross-Domain Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11954 - http://www.us-cert.gov/cas/techalerts/TA10-222A.html - https://docs.microsoft.co
n/oval%3Aorg.mitre.oval%3Adef%3A11954 - http://www.us-cert.gov/cas/techalerts/TA10-222A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-053
CVE ID: CVE-2010-1259 State: PUBLISHED Published: 2010-06-08T22:00:00 Last Updated: 2024-08-07T01:21:17.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 SP1 and SP2, 7, and 8 allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "Uninitialized Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://support.avaya.com/css/P8/documents/100089747 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-035 - https://oval.cisecurity.org/repository/search/definition/oval%3A
n-us/security-updates/securitybulletins/2010/ms10-035 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7324 - http://www.us-cert.gov/cas/techalerts/TA10-159B.html - http://osvdb.org/65215
CVE ID: CVE-2010-1260 State: PUBLISHED Published: 2010-06-08T22:00:00 Last Updated: 2024-10-21T16:47:01.657Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IE8 Developer Toolbar in Microsoft Internet Explorer 8 SP1, SP2, and SP3 allows user-assisted remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "HTML Element Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6686 - http://support.avaya.com/css/P8/documents/100
rity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6686 - http://support.avaya.com/css/P8/documents/100089747 - http://osvdb.org/65213 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-035 - http://www.us-cert.gov/cas/techalerts/TA10-159B.html
CVE ID: CVE-2010-1261 State: PUBLISHED Published: 2010-06-08T22:00:00 Last Updated: 2024-08-07T01:21:17.590Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IE8 Developer Toolbar in Microsoft Internet Explorer 8 SP1, SP2, and SP3 allows user-assisted remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "Uninitialized Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://support.avaya.com/css/P8/documents/100089747 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7124 - http://osvdb.or
00089747 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7124 - http://osvdb.org/65214 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-035 - http://www.us-cert.gov/cas/techalerts/TA10-159B.html
CVE ID: CVE-2010-1262 State: PUBLISHED Published: 2010-06-08T22:00:00 Last Updated: 2024-08-07T01:21:17.136Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 SP1 and SP2, 7, and 8 allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, related to the CStyleSheet object and a free of the root container, aka "Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://support.avaya.com/css/P8/documents/100089747 - http://www.zerodayinitiative.com/advisories/ZDI-10-102/ - http://www.securityfocus.com/bid/404
/P8/documents/100089747 - http://www.zerodayinitiative.com/advisories/ZDI-10-102/ - http://www.securityfocus.com/bid/40417 - http://www.securityfocus.com/archive/1/511727/100/0/threaded - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-035 - http://www.us-cert.gov/cas/techalerts/TA10-159B.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7406
CVE ID: CVE-2010-1263 State: PUBLISHED Published: 2010-06-08T20:00:00 Last Updated: 2024-08-07T01:21:17.648Z Vendors: n/a Products: n/a Problem Types: n/a Description: Windows Shell and WordPad in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7; Microsoft Office XP SP3; Office 2003 SP3; and Office System 2007 SP1 and SP2 do not properly validate COM objects during instantiation, which allows remote attackers to execute arbitrary code via a crafted file, aka "COM Validation Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/
ty." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-083 - http://www.securityfocus.com/bid/40574 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-036 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7286 - http://www.us-cert.gov/cas/techalerts/TA10-159B.html - http://www.us-cert.gov/cas/techalerts/TA10-285A.html - http://www.securitytracker.com/id?1024555
CVE ID: CVE-2010-1264 State: PUBLISHED Published: 2010-06-08T20:00:00 Last Updated: 2024-08-07T01:21:17.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Microsoft Windows SharePoint Services 3.0 SP1 and SP2 allows remote attackers to cause a denial of service (hang) via crafted requests to the Help page that cause repeated restarts of the application pool, aka "Sharepoint Help Page Denial of Service Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-039 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7
curitybulletins/2010/ms10-039 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7241 - http://www.securityfocus.com/bid/40559 - http://www.us-cert.gov/cas/techalerts/TA10-159B.html
CVE ID: CVE-2010-1265 State: PUBLISHED Published: 2010-04-06T15:00:00 Last Updated: 2024-08-07T01:21:17.686Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Adam Corley dcsFlashGames (com_dcs_flashgames) allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39161 - http://www.exploit-db.com/exploits/11884 - http://www.securityfocus.com/bid/38981 - http://packetstormsecurity.org/1003-exploits/joomladcsflashgames-sql.txt
CVE ID: CVE-2010-1266 State: PUBLISHED Published: 2010-04-06T15:00:00 Last Updated: 2024-08-07T01:21:17.627Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in WebMaid CMS 0.2-6 Beta and earlier allow remote attackers to execute arbitrary PHP code via a URL in the (1) template, (2) menu, (3) events, and (4) SITEROOT parameters to template/babyweb/index.php; the (5) modules and (6) copyright parameters to template/calm/footer.php; the (7) menu parameter to template/calm/top.php; and the (8) modules, (9) copyright, and (10) menu parameters to template/wm025/footer.php. Additional Analyst Notes: - CVE Program Container: References: -
and (10) menu parameters to template/wm025/footer.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/0674 - https://exchange.xforce.ibmcloud.com/vulnerabilities/57059 - http://www.exploit-db.com/exploits/11831 - http://www.securityfocus.com/bid/38993 - http://inj3ct0r.com/exploits/11394 - http://packetstormsecurity.org/1003-exploits/webmaid-rfilfi.txt
CVE ID: CVE-2010-1267 State: PUBLISHED Published: 2010-04-06T15:00:00 Last Updated: 2024-08-07T01:21:17.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in WebMaid CMS 0.2-6 Beta and earlier allow remote attackers to read arbitrary files via directory traversal sequences in the com parameter to (1) cContactus.php, (2) cGuestbook.php, and (3) cArticle.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/0674 - http://www.exploit-db.com/exploits/11831 - http://www.securityfocus.com/bid/38993 - http://inj3ct0r.com/exploits/11394 - http://packetstormsecurity.org/1003-exploits
tp://www.securityfocus.com/bid/38993 - http://inj3ct0r.com/exploits/11394 - http://packetstormsecurity.org/1003-exploits/webmaid-rfilfi.txt
CVE ID: CVE-2010-1268 State: PUBLISHED Published: 2010-04-06T15:00:00 Last Updated: 2024-08-07T01:21:17.690Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in justVisual CMS 2.0, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files directory traversal sequences in the p parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1003-exploits/justvisual-lfi.txt - http://www.exploit-db.com/exploits/11876 - http://www.securityfocus.com/bid/38970 - http://secunia.com/adv
ual-lfi.txt - http://www.exploit-db.com/exploits/11876 - http://www.securityfocus.com/bid/38970 - http://secunia.com/advisories/39093 - http://osvdb.org/63156 - https://exchange.xforce.ibmcloud.com/vulnerabilities/57174
CVE ID: CVE-2010-1269 State: PUBLISHED Published: 2010-04-06T15:00:00 Last Updated: 2024-08-07T01:21:17.606Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in auktion.php in phpscripte24 Niedrig Gebote Pro Auktions System II allows remote attackers to execute arbitrary SQL commands via the id_auk parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/57020 - http://4004securityproject.wordpress.com/2010/03/18/phpscripte24-niedrig-gebote-pro-auktions-system-ii-blind-sql-injection-auktion-php/ - http://www.exploit-db.com/exploits/11805 - http://packetstormsecurity.org/1003-exploits
ind-sql-injection-auktion-php/ - http://www.exploit-db.com/exploits/11805 - http://packetstormsecurity.org/1003-exploits/phpscripte24-sql.txt - http://secunia.com/advisories/38971
CVE ID: CVE-2010-1270 State: PUBLISHED Published: 2010-04-06T15:00:00 Last Updated: 2024-08-07T01:21:17.142Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in auktion.php in Multi Auktions Komplett System 2 allows remote attackers to execute arbitrary SQL commands via the id_auk parameter. Additional Analyst Notes: - CVE Program Container: References: - http://4004securityproject.wordpress.com/2010/03/16/phpscripte24-auktionshaus-community-standart-system/ - http://packetstormsecurity.org/1003-exploits/multiauktions-sql.txt - http://www.exploit-db.com/exploits/11776 - http://www.osvdb.org/63048 - https://exchange.xforce.ibmcloud.com/vulnerabilities/569
ww.exploit-db.com/exploits/11776 - http://www.osvdb.org/63048 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56935 - http://secunia.com/advisories/38971 - http://www.securityfocus.com/bid/38793
CVE ID: CVE-2010-1271 State: PUBLISHED Published: 2010-04-06T16:00:00 Last Updated: 2024-08-07T01:21:17.590Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in showplugs.php in smartplugs 1.3 allows remote attackers to execute arbitrary SQL commands via the domain parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38819 - http://www.exploit-db.com/exploits/11623 - http://www.securityfocus.com/bid/38529 - http://packetstormsecurity.org/1003-exploits/smartplugs-sql.txt - http://4004securityproject.wordpress.com/2010/03/03/smartplugs-1-3-sql-injection-showplugs-php - https://exchange.xforce.ibmcloud.co
ecurityproject.wordpress.com/2010/03/03/smartplugs-1-3-sql-injection-showplugs-php - https://exchange.xforce.ibmcloud.com/vulnerabilities/56676
CVE ID: CVE-2010-1272 State: PUBLISHED Published: 2010-04-06T16:00:00 Last Updated: 2024-08-07T01:21:17.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in includes/tgpinc.php in Gnat-TGP 1.2.20 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the DOCUMENT_ROOT parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/11621 - http://www.securityfocus.com/bid/38522 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56675 - http://packetstormsecurity.org/1003-exploits/gnattgp-rfi.txt
CVE ID: CVE-2010-1273 State: PUBLISHED Published: 2010-04-06T16:00:00Z Last Updated: 2024-09-16T22:01:54.078Z Vendors: n/a Products: n/a Problem Types: n/a Description: Emweb Wt before 3.1.1 does not validate the UTF-8 encoding of (1) form values and (2) JSignal arguments, which has unspecified impact and remote attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.webtoolkit.eu/wt/doc/reference/html/Releasenotes.html - http://www.osvdb.org/62717 - http://secunia.com/advisories/38759 - http://www.securityfocus.com/bid/38541
CVE ID: CVE-2010-1274 State: PUBLISHED Published: 2010-04-06T16:00:00 Last Updated: 2024-08-07T01:21:17.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Emweb Wt before 3.1.1 allows remote attackers to inject arbitrary web script or HTML via vectors related to "insertions of the URL" that occur during a redirection. Additional Analyst Notes: - CVE Program Container: References: - http://www.webtoolkit.eu/wt/doc/reference/html/Releasenotes.html - http://www.osvdb.org/62716 - http://secunia.com/advisories/38759 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56681 - http://www.securityfocus.com/bid/38541
CVE ID: CVE-2010-1275 State: PUBLISHED Published: 2010-04-06T16:00:00 Last Updated: 2024-08-07T01:21:17.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in ShowPost.asp in BBSXP 2008 allows remote attackers to inject arbitrary web script or HTML via the ThreadID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38855 - http://www.securityfocus.com/archive/1/509860/100/0/threaded - http://www.securityfocus.com/bid/38542
CVE ID: CVE-2010-1276 State: PUBLISHED Published: 2010-04-06T16:00:00Z Last Updated: 2024-09-16T17:48:18.025Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in BBSXP 2008 SP2 allow remote attackers to inject arbitrary web script or HTML via the URI in a request to (1) AddPost.asp, (2) AddTopic.asp, (3) Admin_Default.asp, (4) Bank.asp, (5) Manage.asp, and (6) ShowPost.asp. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38855
CVE ID: CVE-2010-1277 State: PUBLISHED Published: 2010-04-06T16:00:00 Last Updated: 2024-08-07T01:21:17.601Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the user.authenticate method in the API in Zabbix 1.8 before 1.8.2 allows remote attackers to execute arbitrary SQL commands via the user parameter in JSON data to api_jsonrpc.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/0799 - http://legalhackers.com/advisories/zabbix181api-sql.txt - http://www.osvdb.org/63456 - http://www.zabbix.com/rn1.8.2.php - http://www.securityfocus.com/archive/1/510480/100/0/threaded - http://www.securi
6 - http://www.zabbix.com/rn1.8.2.php - http://www.securityfocus.com/archive/1/510480/100/0/threaded - http://www.securityfocus.com/bid/39148 - http://archives.neohapsis.com/archives/fulldisclosure/2010-04/0001.html - http://legalhackers.com/poc/zabbix181api.pl-poc - http://secunia.com/advisories/39119
CVE ID: CVE-2010-1278 State: PUBLISHED Published: 2010-04-22T14:00:00 Last Updated: 2024-08-07T01:21:17.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Atlcom.get_atlcom ActiveX control in gp.ocx in Adobe Download Manager, as used in Adobe Reader and Acrobat 8.x before 8.2 and 9.x before 9.3, allows remote attackers to execute arbitrary code via unspecified parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-10-077/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7500 - http://www.securityfocus.com/archive/1/510868/100/0/threaded - http://ww
definition/oval%3Aorg.mitre.oval%3Adef%3A7500 - http://www.securityfocus.com/archive/1/510868/100/0/threaded - http://www.adobe.com/support/security/bulletins/apsb10-02.html - http://www.securitytracker.com/id?1023908
CVE ID: CVE-2010-1279 State: PUBLISHED Published: 2010-05-04T18:00:00Z Last Updated: 2024-09-16T23:40:27.510Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Adobe Photoshop CS4 11.x before 11.0.1 allow user-assisted remote attackers to execute arbitrary code via a crafted TIFF file. Additional Analyst Notes: - CVE Program Container: References: - http://www.adobe.com/support/security/bulletins/apsb10-10.html - http://www.securityfocus.com/bid/39849 - http://secunia.com/advisories/39711 - http://www.vupen.com/english/advisories/2010/1049
CVE ID: CVE-2010-1280 State: PUBLISHED Published: 2010-05-13T17:00:00 Last Updated: 2024-08-07T01:21:17.662Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Shockwave Player before 11.5.7.609 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted .dir (aka Director) file, related to (1) an erroneous dereference and (2) a certain Shock.dir file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38751 - http://archives.neohapsis.com/archives/fulldisclosure/2010-05/0139.html - http://www.adobe.com/support/security/bulletins/apsb10-12.html - http://www.securityfocus.com/archive
010-05/0139.html - http://www.adobe.com/support/security/bulletins/apsb10-12.html - http://www.securityfocus.com/archive/1/511257/100/0/threaded - http://www.zeroscience.mk/codes/shockwave_mem.txt - http://www.zeroscience.mk/en/vulnerabilities/ZSL-2010-4937.php - http://www.vupen.com/english/advisories/2010/1128 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7184
CVE ID: CVE-2010-1281 State: PUBLISHED Published: 2010-05-13T17:00:00 Last Updated: 2024-08-07T01:21:17.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: iml32.dll in Adobe Shockwave Player before 11.5.7.609 does not validate a certain value from a file before using it in file-pointer calculations, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted .dir (aka Director) file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38751 - http://www.zerodayinitiative.com/advisories/ZDI-10-087/ - http://www.adobe.com/support/security/bulletins/apsb10-12.html - http://www.vupe
initiative.com/advisories/ZDI-10-087/ - http://www.adobe.com/support/security/bulletins/apsb10-12.html - http://www.vupen.com/english/advisories/2010/1128 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7268 - http://www.securityfocus.com/archive/1/511252/100/0/threaded
CVE ID: CVE-2010-1282 State: PUBLISHED Published: 2010-05-13T17:00:00 Last Updated: 2024-08-07T01:21:17.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Shockwave Player before 11.5.7.609 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted ATOM size in a .dir (aka Director) file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/40088 - http://www.securityfocus.com/archive/1/511254/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7388 - http://archives.neohapsis.com/archives/fulldisclosure/2010-05/0137.html - http://www
val%3Aorg.mitre.oval%3Adef%3A7388 - http://archives.neohapsis.com/archives/fulldisclosure/2010-05/0137.html - http://www.adobe.com/support/security/bulletins/apsb10-12.html - http://www.vupen.com/english/advisories/2010/1128 - http://hi.baidu.com/fs_fx/blog/item/f8de1d18ba8c9b76dbb4bd56.html