Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-1371 State: PUBLISHED Published: 2009-04-23T15:00:00 Last Updated: 2024-08-07T05:13:25.469Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CLI_ISCONTAINED macro in libclamav/others.h in ClamAV before 0.95.1 allows remote attackers to cause a denial of service (application crash) via a malformed file with UPack encoding. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/53602 - http://www.securitytracker.com/id?1022028 - http://secunia.com/advisories/34716 - http://svn.clamav.net/websvn/filedetails.php?repname=clamav-devel&path=%2Ftrunk%2FChangeLog&rev=5032 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:097 - http
clamav-devel&path=%2Ftrunk%2FChangeLog&rev=5032 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:097 - http://secunia.com/advisories/34612 - http://www.ubuntu.com/usn/usn-756-1 - http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html - http://www.vupen.com/english/advisories/2009/0985 - http://www.debian.org/security/2009/dsa-1771 - http://secunia.com/advisories/34654 - http://www.securityfocus.com/bid/34446 - http://support.apple.com/kb/HT3865 - http://secunia.com/advisories/36701 - https://launchpad.net/bugs/360502 - https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1552
CVE ID: CVE-2009-1372 State: PUBLISHED Published: 2009-04-23T15:00:00 Last Updated: 2024-08-07T05:13:25.163Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the cli_url_canon function in libclamav/phishcheck.c in ClamAV before 0.95.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1022028 - http://svn.clamav.net/websvn/filedetails.php?repname=clamav-devel&path=%2Ftrunk%2FChangeLog&rev=5032 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:097 - http://secunia.com
ath=%2Ftrunk%2FChangeLog&rev=5032 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:097 - http://secunia.com/advisories/34612 - http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html - http://www.vupen.com/english/advisories/2009/0985 - http://www.securityfocus.com/bid/34446 - http://support.apple.com/kb/HT3865 - http://secunia.com/advisories/36701 - http://osvdb.org/53603 - https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1553
CVE ID: CVE-2009-1373 State: PUBLISHED Published: 2009-05-26T15:16:00 Last Updated: 2024-08-07T05:13:25.178Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the XMPP SOCKS5 bytestream server in Pidgin (formerly Gaim) before 2.5.6 allows remote authenticated users to execute arbitrary code via vectors involving an outbound XMPP file transfer. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00075.html - http://www.redhat.com/support/errata/RHSA-2009-1060.html - http://www.ubuntu.com/usn/USN-781-2 - http://www.
0075.html - http://www.redhat.com/support/errata/RHSA-2009-1060.html - http://www.ubuntu.com/usn/USN-781-2 - http://www.redhat.com/support/errata/RHSA-2009-1059.html - http://www.gentoo.org/security/en/glsa/glsa-200905-07.xml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9005 - http://www.securityfocus.com/bid/35067 - https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00051.html - http://secunia.com/advisories/35329 - http://www.ubuntu.com/usn/USN-781-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17722 - http://debian.org/security/2009/dsa-1805 - http://www.mandriva.com/security/advisori
al%3Aorg.mitre.oval%3Adef%3A17722 - http://debian.org/security/2009/dsa-1805 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:140 - http://secunia.com/advisories/35294 - https://bugzilla.redhat.com/show_bug.cgi?id=500488 - http://secunia.com/advisories/35188 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50682 - http://secunia.com/advisories/35194 - https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00033.html - http://secunia.com/advisories/35202 - http://www.pidgin.im/news/security/?id=29 - http://secunia.com/advisories/35215 - http://www.vupen.com/english/advisories/2009/1396 - http://secunia.com/advisories/35330 - http://www.mandriva.com/security/ad
//www.vupen.com/english/advisories/2009/1396 - http://secunia.com/advisories/35330 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:173
CVE ID: CVE-2009-1374 State: PUBLISHED Published: 2009-05-26T15:16:00 Last Updated: 2024-08-07T05:13:25.177Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the decrypt_out function in Pidgin (formerly Gaim) before 2.5.6 allows remote attackers to cause a denial of service (application crash) via a QQ packet. Additional Analyst Notes: - CVE Program Container: References: - https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00075.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/50684 - http://www.redhat.com/support/errata/RHSA-2009-1060.html - http://www.gentoo.org/security/en/glsa/glsa-200905-07.xml - http://www.securityfocus.com/bid
rrata/RHSA-2009-1060.html - http://www.gentoo.org/security/en/glsa/glsa-200905-07.xml - http://www.securityfocus.com/bid/35067 - https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00051.html - http://secunia.com/advisories/35329 - http://www.pidgin.im/news/security/?id=30 - http://www.ubuntu.com/usn/USN-781-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11654 - http://secunia.com/advisories/35294 - http://secunia.com/advisories/35188 - http://secunia.com/advisories/35194 - https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00033.html - http://secunia.com/advisories/35202 - http://www.vupen.com/english/advisories/
ackage-announce/2009-June/msg00033.html - http://secunia.com/advisories/35202 - http://www.vupen.com/english/advisories/2009/1396 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18201 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:173 - https://bugzilla.redhat.com/show_bug.cgi?id=500490
CVE ID: CVE-2009-1375 State: PUBLISHED Published: 2009-05-26T15:16:00 Last Updated: 2024-08-07T05:13:25.426Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PurpleCircBuffer implementation in Pidgin (formerly Gaim) before 2.5.6 does not properly maintain a certain buffer, which allows remote attackers to cause a denial of service (memory corruption and application crash) via vectors involving the (1) XMPP or (2) Sametime protocol. Additional Analyst Notes: - CVE Program Container: References: - https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00075.html - http://www.redhat.com/support/errata/RHSA-2009-1060.html - https://bugzilla.redhat.com/show_bug.cgi?id=
/msg00075.html - http://www.redhat.com/support/errata/RHSA-2009-1060.html - https://bugzilla.redhat.com/show_bug.cgi?id=500491 - http://www.gentoo.org/security/en/glsa/glsa-200905-07.xml - http://www.securityfocus.com/bid/35067 - https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00051.html - http://secunia.com/advisories/35329 - http://www.ubuntu.com/usn/USN-781-1 - http://osvdb.org/54649 - http://debian.org/security/2009/dsa-1805 - http://secunia.com/advisories/35294 - http://secunia.com/advisories/35188 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10829 - http://secunia.com/advisories/35194 - https://www.redhat.com/archives/fed
finition/oval%3Aorg.mitre.oval%3Adef%3A10829 - http://secunia.com/advisories/35194 - https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00033.html - http://secunia.com/advisories/35202 - http://secunia.com/advisories/35215 - http://www.vupen.com/english/advisories/2009/1396 - http://www.pidgin.im/news/security/?id=31 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50683 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:173
CVE ID: CVE-2009-1376 State: PUBLISHED Published: 2009-05-26T15:16:00 Last Updated: 2024-08-07T05:13:25.437Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in the msn_slplink_process_msg functions in the MSN protocol handler in (1) libpurple/protocols/msn/slplink.c and (2) libpurple/protocols/msnp9/slplink.c in Pidgin (formerly Gaim) before 2.5.6 on 32-bit platforms allow remote attackers to execute arbitrary code via a malformed SLP message with a crafted offset value, leading to buffer overflows. NOTE: this issue exists because of an incomplete fix for CVE-2008-2927. Additional Analyst Notes: - CVE Program Container: References: - https://www.redhat.c
incomplete fix for CVE-2008-2927. Additional Analyst Notes: - CVE Program Container: References: - https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00075.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10476 - http://www.pidgin.im/news/security/?id=32 - http://www.redhat.com/support/errata/RHSA-2009-1060.html - http://www.ubuntu.com/usn/USN-781-2 - http://www.redhat.com/support/errata/RHSA-2009-1059.html - http://www.gentoo.org/security/en/glsa/glsa-200905-07.xml - http://www.securityfocus.com/bid/35067 - https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00051.html - http://secunia.com/advisories/35329 - ht
tps://www.redhat.com/archives/fedora-package-announce/2009-June/msg00051.html - http://secunia.com/advisories/35329 - http://www.ubuntu.com/usn/USN-781-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18432 - http://secunia.com/advisories/37071 - https://bugzilla.redhat.com/show_bug.cgi?id=500493 - http://debian.org/security/2009/dsa-1805 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:140 - http://secunia.com/advisories/35294 - http://secunia.com/advisories/35188 - http://secunia.com/advisories/35194 - https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00033.html - http://secunia.com/advisories/35202 - https://exchang
hat.com/archives/fedora-package-announce/2009-June/msg00033.html - http://secunia.com/advisories/35202 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50680 - http://secunia.com/advisories/35215 - http://www.vupen.com/english/advisories/2009/1396 - http://secunia.com/advisories/35330 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:173
CVE ID: CVE-2009-1377 State: PUBLISHED Published: 2009-05-19T19:00:00 Last Updated: 2024-08-07T05:13:25.060Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dtls1_buffer_record function in ssl/d1_pkt.c in OpenSSL 0.9.8k and earlier 0.9.8 versions allows remote attackers to cause a denial of service (memory consumption) via a large series of "future epoch" DTLS records that are buffered in a queue, aka "DTLS record buffer limitation bug." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/42724 - http://rt.openssl.org/Ticket/Display.html?id=1930&user=guest&pass=guest - http://slackware.com/security/viewer.php?l=slackware-security&y=20
g/Ticket/Display.html?id=1930&user=guest&pass=guest - http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.663049 - http://secunia.com/advisories/38794 - http://lists.vmware.com/pipermail/security-announce/2010/000082.html - http://www.vupen.com/english/advisories/2009/1377 - http://secunia.com/advisories/35729 - http://security.gentoo.org/glsa/glsa-200912-01.xml - http://www.redhat.com/support/errata/RHSA-2009-1335.html - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444 - http://secunia.com/advisories/38761 - http://secunia.com/advisories/37003 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ova
61 - http://secunia.com/advisories/37003 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9663 - https://launchpad.net/bugs/cve/2009-1377 - http://secunia.com/advisories/36533 - http://www.securitytracker.com/id?1022241 - http://www.ubuntu.com/usn/USN-792-1 - http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html - http://voodoo-circle.sourceforge.net/sa/sa-20091012-01.html - http://www.openwall.com/lists/oss-security/2009/05/18/1 - http://marc.info/?l=openssl-dev&m=124247675613888&w=2 - ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-009.txt.asc - http://www.securityfocus.com/bid/35001 - https://oval.cisecurity.or
tBSD/security/advisories/NetBSD-SA2009-009.txt.asc - http://www.securityfocus.com/bid/35001 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6683 - http://secunia.com/advisories/38834 - http://cvs.openssl.org/chngview?cn=18187 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:120 - http://secunia.com/advisories/35461 - http://secunia.com/advisories/35128 - http://secunia.com/advisories/35571 - http://secunia.com/advisories/35416 - http://sourceforge.net/mailarchive/message.php?msg_name=4AD43807.7080105%40users.sourceforge.net - https://kb.bluecoat.com/index?page=content&id=SA50 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp
net - https://kb.bluecoat.com/index?page=content&id=SA50 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444 - http://secunia.com/advisories/42733 - http://www.vupen.com/english/advisories/2010/0528
CVE ID: CVE-2009-1378 State: PUBLISHED Published: 2009-05-19T19:00:00 Last Updated: 2024-08-07T05:13:25.511Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple memory leaks in the dtls1_process_out_of_seq_message function in ssl/d1_both.c in OpenSSL 0.9.8k and earlier 0.9.8 versions allow remote attackers to cause a denial of service (memory consumption) via DTLS records that (1) are duplicates or (2) have sequence numbers much greater than current sequence numbers, aka "DTLS fragment handling memory leak." Additional Analyst Notes: - CVE Program Container: References: - http://rt.openssl.org/Ticket/Display.html?id=1931&user=guest&pass=guest - http://secunia.com/advisories/4
References: - http://rt.openssl.org/Ticket/Display.html?id=1931&user=guest&pass=guest - http://secunia.com/advisories/42724 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7229 - http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.663049 - http://secunia.com/advisories/38794 - http://lists.vmware.com/pipermail/security-announce/2010/000082.html - https://www.exploit-db.com/exploits/8720 - http://www.vupen.com/english/advisories/2009/1377 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11309 - http://secunia.com/advisories/35729 - http://security.gentoo.org/glsa/glsa-200912
/oval%3Aorg.mitre.oval%3Adef%3A11309 - http://secunia.com/advisories/35729 - http://security.gentoo.org/glsa/glsa-200912-01.xml - http://www.redhat.com/support/errata/RHSA-2009-1335.html - http://cvs.openssl.org/chngview?cn=18188 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444 - http://secunia.com/advisories/38761 - http://secunia.com/advisories/37003 - http://marc.info/?l=openssl-dev&m=124263491424212&w=2 - http://secunia.com/advisories/36533 - http://www.securitytracker.com/id?1022241 - http://www.ubuntu.com/usn/USN-792-1 - http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html - http://voodoo-circle.sourceforge.net/sa/sa-20091012-01.h
opensuse.org/opensuse-security-announce/2009-06/msg00003.html - http://voodoo-circle.sourceforge.net/sa/sa-20091012-01.html - http://www.openwall.com/lists/oss-security/2009/05/18/1 - https://launchpad.net/bugs/cve/2009-1378 - ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-009.txt.asc - http://www.securityfocus.com/bid/35001 - http://secunia.com/advisories/38834 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:120 - http://secunia.com/advisories/35461 - http://secunia.com/advisories/35128 - http://secunia.com/advisories/35571 - http://secunia.com/advisories/35416 - http://sourceforge.net/mailarchive/message.php?msg_name=4AD43807.7080105%40users.sourceforge.net
.com/advisories/35416 - http://sourceforge.net/mailarchive/message.php?msg_name=4AD43807.7080105%40users.sourceforge.net - https://kb.bluecoat.com/index?page=content&id=SA50 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444 - http://marc.info/?l=openssl-dev&m=124247679213944&w=2 - http://secunia.com/advisories/42733 - http://www.vupen.com/english/advisories/2010/0528
CVE ID: CVE-2009-1379 State: PUBLISHED Published: 2009-05-19T19:00:00 Last Updated: 2024-08-07T05:13:25.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the dtls1_retrieve_buffered_fragment function in ssl/d1_both.c in OpenSSL 1.0.0 Beta 2 allows remote attackers to cause a denial of service (openssl s_client crash) and possibly have unspecified other impact via a DTLS packet, as demonstrated by a packet from a server that uses a crafted server certificate. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/42724 - https://launchpad.net/bugs/cve/2009-1379 - http://slackware.com/security/viewer.php?l=sl
/secunia.com/advisories/42724 - https://launchpad.net/bugs/cve/2009-1379 - http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.663049 - http://secunia.com/advisories/38794 - http://lists.vmware.com/pipermail/security-announce/2010/000082.html - http://www.vupen.com/english/advisories/2009/1377 - http://secunia.com/advisories/35729 - http://security.gentoo.org/glsa/glsa-200912-01.xml - http://www.redhat.com/support/errata/RHSA-2009-1335.html - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444 - http://secunia.com/advisories/38761 - http://secunia.com/advisories/37003 - http://secunia.com/advisories/36533 - http://www.securit
ia.com/advisories/38761 - http://secunia.com/advisories/37003 - http://secunia.com/advisories/36533 - http://www.securitytracker.com/id?1022241 - http://www.ubuntu.com/usn/USN-792-1 - http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9744 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50661 - http://voodoo-circle.sourceforge.net/sa/sa-20091012-01.html - http://www.securityfocus.com/bid/35138 - http://www.openwall.com/lists/oss-security/2009/05/18/4 - ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-009.txt.asc - http://secunia.com/advisories/38834 - http:
://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-009.txt.asc - http://secunia.com/advisories/38834 - http://secunia.com/advisories/35461 - http://secunia.com/advisories/35571 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6848 - http://secunia.com/advisories/35416 - http://sourceforge.net/mailarchive/message.php?msg_name=4AD43807.7080105%40users.sourceforge.net - https://kb.bluecoat.com/index?page=content&id=SA50 - http://rt.openssl.org/Ticket/Display.html?id=1923&user=guest&pass=guest - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444 - http://secunia.com/advisories/42733 - http://www.vupen.com/english/a
pport/TechSupport/Document.jsp?objectID=c02029444 - http://secunia.com/advisories/42733 - http://www.vupen.com/english/advisories/2010/0528
CVE ID: CVE-2009-1380 State: PUBLISHED Published: 2009-12-15T18:00:00 Last Updated: 2024-08-07T05:13:25.535Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in JMX-Console in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP08 and 4.3 before 4.3.0.CP07 allows remote attackers to inject arbitrary web script or HTML via the filter parameter, related to the key property and the position of quote and colon characters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/37276 - http://securitytracker.com/id?1023315 - https://rhn.redhat.com/errata/RH
ces: - http://www.securityfocus.com/bid/37276 - http://securitytracker.com/id?1023315 - https://rhn.redhat.com/errata/RHSA-2009-1637.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/54698 - http://secunia.com/advisories/37671 - https://rhn.redhat.com/errata/RHSA-2009-1636.html - https://rhn.redhat.com/errata/RHSA-2009-1649.html - https://jira.jboss.org/jira/browse/JBPAPP-1983 - https://bugzilla.redhat.com/show_bug.cgi?id=511224 - https://rhn.redhat.com/errata/RHSA-2009-1650.html
CVE ID: CVE-2009-1381 State: PUBLISHED Published: 2009-05-22T20:00:00 Last Updated: 2024-08-07T05:13:25.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: The map_yp_alias function in functions/imap_general.php in SquirrelMail before 1.4.19-1 on Debian GNU/Linux, and possibly other operating systems and versions, allows remote attackers to execute arbitrary commands via shell metacharacters in a username string that is used by the ypmatch program. NOTE: this issue exists because of an incomplete fix for CVE-2009-1579. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35140 - https://www.redhat.com/archives/fedora-package-announce/2009
tainer: References: - http://secunia.com/advisories/35140 - https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01202.html - http://www.securityfocus.com/archive/1/503718/100/0/threaded - http://www.mandriva.com/security/advisories?name=MDVSA-2009:122 - http://release.debian.org/proposed-updates/stable_diffs/squirrelmail_1.4.15-4+lenny2.debdiff - https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01195.html - http://www.debian.org/security/2009/dsa-1802
CVE ID: CVE-2009-1382 State: PUBLISHED Published: 2009-07-14T20:16:00 Last Updated: 2024-08-07T05:13:25.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in mimetex.cgi in mimeTeX, when downloaded before 20090713, allow remote attackers to execute arbitrary code via a TeX file with long (1) picture, (2) circle, or (3) input tags. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/1875 - http://secunia.com/advisories/35752 - http://www.vupen.com/english/advisories/2010/0877 - http://www.securityfocus.com/archive/1/504919/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabi
010/0877 - http://www.securityfocus.com/archive/1/504919/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/51794 - http://secunia.com/advisories/35816 - http://scary.beasts.org/security/CESA-2009-009.html - http://www.ocert.org/advisories/ocert-2009-010.html - http://groups.google.com/group/comp.text.tex/browse_thread/thread/5d56d3d744351578 - http://lists.fedoraproject.org/pipermail/package-announce/2010-April/039314.html
CVE ID: CVE-2009-1383 State: PUBLISHED Published: 2009-07-14T20:16:00 Last Updated: 2024-08-07T05:13:25.458Z Vendors: n/a Products: n/a Problem Types: n/a Description: The getdirective function in mathtex.cgi in mathTeX, when downloaded before 20090713, allows remote attackers to execute arbitrary commands via shell metacharacters in the dpi tag. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/1875 - http://www.securityfocus.com/archive/1/504919/100/0/threaded - http://secunia.com/advisories/35816 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51795 - http://www.ocert.org/advisories/ocert-2009-010.html - http://groups.goog
nge.xforce.ibmcloud.com/vulnerabilities/51795 - http://www.ocert.org/advisories/ocert-2009-010.html - http://groups.google.com/group/comp.text.tex/browse_thread/thread/5d56d3d744351578