Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-0048 State: PUBLISHED Published: 2009-01-07T18:00:00 Last Updated: 2024-08-07T04:17:10.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenEvidence 1.0.6 and earlier does not properly check the return value from the OpenSSL EVP_VerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA keys, a similar vulnerability to CVE-2008-5077. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/499827/100/0/threaded - http://www.vupen.com/english/advisories/2009/0047 - http://www.ocert.org/advisories/ocert-2008-016.html
CVE ID: CVE-2009-0049 State: PUBLISHED Published: 2009-01-07T18:00:00 Last Updated: 2024-08-07T04:17:10.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: Belgian eID middleware (eidlib) 2.6.0 and earlier does not properly check the return value from the OpenSSL EVP_VerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA keys, a similar vulnerability to CVE-2008-5077. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/499827/100/0/threaded - http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00000.html - http://www.ocert.
1/499827/100/0/threaded - http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00000.html - http://www.ocert.org/advisories/ocert-2008-016.html - http://secunia.com/advisories/34029
CVE ID: CVE-2009-0050 State: PUBLISHED Published: 2009-01-07T18:00:00 Last Updated: 2024-08-07T04:17:10.472Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lasso 2.2.1 and earlier does not properly check the return value from the OpenSSL DSA_verify function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47837 - http://www.securityfocus.com/archive/1/499827/100/0/threaded - http://www.ocert.org/advisories/ocert-2008-016.html
CVE ID: CVE-2009-0051 State: PUBLISHED Published: 2009-01-07T18:00:00 Last Updated: 2024-08-07T04:17:10.428Z Vendors: n/a Products: n/a Problem Types: n/a Description: ZXID 0.29 and earlier does not properly check the return value from the OpenSSL DSA_verify function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47837 - http://www.securityfocus.com/archive/1/499827/100/0/threaded - http://www.ocert.org/advisories/ocert-2008-016.html
CVE ID: CVE-2009-0052 State: PUBLISHED Published: 2009-11-12T23:00:00 Last Updated: 2024-08-07T04:17:10.370Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Atheros wireless driver, as used in Netgear WNDAP330 Wi-Fi access point with firmware 2.1.11 and other versions before 3.0.3 on the Atheros AR9160-BC1A chipset, and other products, allows remote authenticated users to cause a denial of service (device reboot or hang) and possibly execute arbitrary code via a truncated reserved management frame. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36991 - http://www.securityfocus.com/archive/1/507777/100/0/threaded - http://www.v
: - http://www.securityfocus.com/bid/36991 - http://www.securityfocus.com/archive/1/507777/100/0/threaded - http://www.vupen.com/english/advisories/2009/3212 - http://secunia.com/advisories/37344 - http://www.osvdb.org/59880 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54216
CVE ID: CVE-2009-0053 State: PUBLISHED Published: 2009-01-16T21:00:00 Last Updated: 2024-08-07T04:17:10.421Z Vendors: n/a Products: n/a Problem Types: n/a Description: PXE Encryption in Cisco IronPort Encryption Appliance 6.2.4 before 6.2.4.1.1, 6.2.5, 6.2.6, 6.2.7 before 6.2.7.7, 6.3 before 6.3.0.4, and 6.5 before 6.5.0.2; and Cisco IronPort PostX 6.2.1 before 6.2.1.1 and 6.2.2 before 6.2.2.3; allows remote attackers to obtain the decryption key via unspecified vectors, related to a "logic error." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33268 - http://osvdb.org/51395 - http://www.cisco.com/en/US/products/products_security_advisory091
securityfocus.com/bid/33268 - http://osvdb.org/51395 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080a5c4f7.shtml - http://www.vupen.com/english/advisories/2009/0140 - http://secunia.com/advisories/33479 - http://securitytracker.com/id?1021593
CVE ID: CVE-2009-0054 State: PUBLISHED Published: 2009-01-16T21:00:00 Last Updated: 2024-08-07T04:17:10.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: PXE Encryption in Cisco IronPort Encryption Appliance 6.2.4 before 6.2.4.1.1, 6.2.5, 6.2.6, 6.2.7 before 6.2.7.7, 6.3 before 6.3.0.4, and 6.5 before 6.5.0.2; and Cisco IronPort PostX 6.2.1 before 6.2.1.1 and 6.2.2 before 6.2.2.3; allows remote attackers to capture credentials by tricking a user into reading a modified or crafted e-mail message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33268 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080a5c4f7.
http://www.securityfocus.com/bid/33268 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080a5c4f7.shtml - http://osvdb.org/51396 - http://www.vupen.com/english/advisories/2009/0140 - http://secunia.com/advisories/33479 - http://securitytracker.com/id?1021593
CVE ID: CVE-2009-0055 State: PUBLISHED Published: 2009-01-16T21:00:00 Last Updated: 2024-08-07T04:17:10.437Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the administration interface in Cisco IronPort Encryption Appliance 6.2.4 before 6.2.4.1.1, 6.2.5, 6.2.6, 6.2.7 before 6.2.7.7, 6.3 before 6.3.0.4, and 6.5 before 6.5.0.2; and Cisco IronPort PostX 6.2.1 before 6.2.1.1 and 6.2.2 before 6.2.2.3; allows remote attackers to modify appliance preferences as arbitrary users via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33268 - http://www.cisco.com/en/US/prod
t Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33268 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080a5c4f7.shtml - http://osvdb.org/51397 - http://www.vupen.com/english/advisories/2009/0140 - http://secunia.com/advisories/33479 - http://securitytracker.com/id?1021594
CVE ID: CVE-2009-0056 State: PUBLISHED Published: 2009-01-16T21:00:00 Last Updated: 2024-08-07T04:17:10.515Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the administration interface in Cisco IronPort Encryption Appliance 6.2.4 before 6.2.4.1.1, 6.2.5, 6.2.6, 6.2.7 before 6.2.7.7, 6.3 before 6.3.0.4, and 6.5 before 6.5.0.2; and Cisco IronPort PostX 6.2.1 before 6.2.1.1 and 6.2.2 before 6.2.2.3; allows remote attackers to execute commands and modify appliance preferences as arbitrary users via a logout action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33268 - http://www.cis
Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33268 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080a5c4f7.shtml - http://osvdb.org/51398 - http://www.vupen.com/english/advisories/2009/0140 - http://secunia.com/advisories/33479 - http://securitytracker.com/id?1021594
CVE ID: CVE-2009-0057 State: PUBLISHED Published: 2009-01-22T18:00:00 Last Updated: 2024-08-07T04:17:10.469Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Certificate Authority Proxy Function (CAPF) service in Cisco Unified Communications Manager 5.x before 5.1(3e) and 6.x before 6.1(3) allows remote attackers to cause a denial of service (voice service outage) by sending malformed input over a TCP session in which the "client terminates prematurely." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33379 - http://www.securitytracker.com/id?1021620 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48139 - http://www.vupen
ttp://www.securitytracker.com/id?1021620 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48139 - http://www.vupen.com/english/advisories/2009/0213 - http://secunia.com/advisories/33588 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080a61928.shtml
CVE ID: CVE-2009-0058 State: PUBLISHED Published: 2009-02-05T00:00:00 Last Updated: 2024-08-07T04:17:10.538Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Cisco Wireless LAN Controller (WLC), Cisco Catalyst 6500 Wireless Services Module (WiSM), and Cisco Catalyst 3750 Integrated Wireless LAN Controller with software 4.x before 4.2.176.0 and 5.x before 5.2 allow remote attackers to cause a denial of service (web authentication outage or device reload) via unspecified network traffic, as demonstrated by a vulnerability scanner. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/products/products_security_advisory09186a0080a6c1dd.shtml -
Program Container: References: - http://www.cisco.com/en/US/products/products_security_advisory09186a0080a6c1dd.shtml - http://www.securityfocus.com/bid/33608 - http://secunia.com/advisories/33749 - http://www.securitytracker.com/id?1021679
CVE ID: CVE-2009-0059 State: PUBLISHED Published: 2009-02-05T00:00:00 Last Updated: 2024-08-07T04:17:10.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Cisco Wireless LAN Controller (WLC), Cisco Catalyst 6500 Wireless Services Module (WiSM), and Cisco Catalyst 3750 Integrated Wireless LAN Controller with software 4.x before 4.2.176.0 and 5.2.x before 5.2.157.0 allow remote attackers to cause a denial of service (device reload) via a web authentication (aka WebAuth) session that includes a malformed POST request to login.html. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/products/products_security_advisory09186a0080a6c1dd.shtm
CVE Program Container: References: - http://www.cisco.com/en/US/products/products_security_advisory09186a0080a6c1dd.shtml - http://www.securityfocus.com/bid/33608 - http://secunia.com/advisories/33749 - http://www.securitytracker.com/id?1021679
CVE ID: CVE-2009-0061 State: PUBLISHED Published: 2009-02-05T00:00:00 Last Updated: 2024-08-07T04:17:10.473Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Wireless LAN Controller (WLC) TSEC driver in the Cisco 4400 WLC, Cisco Catalyst 6500 and 7600 Wireless Services Module (WiSM), and Cisco Catalyst 3750 Integrated Wireless LAN Controller with software 4.x before 4.2.176.0 and 5.x before 5.1 allows remote attackers to cause a denial of service (device crash or hang) via unknown IP packets. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/products/products_security_advisory09186a0080a6c1dd.shtml - http://
Container: References: - http://www.cisco.com/en/US/products/products_security_advisory09186a0080a6c1dd.shtml - http://www.securityfocus.com/bid/33608 - http://secunia.com/advisories/33749 - http://www.securitytracker.com/id?1021679
CVE ID: CVE-2009-0062 State: PUBLISHED Published: 2009-02-05T00:00:00 Last Updated: 2024-08-07T04:24:17.028Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Cisco Wireless LAN Controller (WLC), Cisco Catalyst 6500 Wireless Services Module (WiSM), and Cisco Catalyst 3750 Integrated Wireless LAN Controller with software 4.2.173.0 allows remote authenticated users to gain privileges via unknown vectors, as demonstrated by escalation from the (1) Lobby Admin and (2) Local Management User privilege levels. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/products/products_security_advisory09186a0080a6c1dd.shtml
VE Program Container: References: - http://www.cisco.com/en/US/products/products_security_advisory09186a0080a6c1dd.shtml - http://www.securityfocus.com/bid/33608 - http://secunia.com/advisories/33749 - http://www.securitytracker.com/id?1021678
CVE ID: CVE-2009-0063 State: PUBLISHED Published: 2009-04-24T15:00:00 Last Updated: 2024-08-07T04:24:16.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Control Center in Symantec Brightmail Gateway Appliance before 8.0.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/1155 - http://secunia.com/advisories/34885 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50074 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=secur
rabilities/50074 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090423_01 - http://securitytracker.com/id?1022116 - http://www.securityfocus.com/bid/34641 - http://osvdb.org/53944
CVE ID: CVE-2009-0064 State: PUBLISHED Published: 2009-04-24T15:00:00 Last Updated: 2024-08-07T04:24:17.008Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the Control Center in Symantec Brightmail Gateway Appliance before 8.0.1 allow remote authenticated users to gain privileges, and possibly obtain sensitive information or hijack sessions of arbitrary users, via vectors involving (1) administrative scripts or (2) console functions. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/50075 - http://securitytracker.com/id?1022117 - http://www.vupen.com/english/advisories/2009
bmcloud.com/vulnerabilities/50075 - http://securitytracker.com/id?1022117 - http://www.vupen.com/english/advisories/2009/1155 - http://osvdb.org/53945 - http://secunia.com/advisories/34885 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090423_01 - http://www.securityfocus.com/bid/34639
CVE ID: CVE-2009-0065 State: PUBLISHED Published: 2009-01-07T19:00:00 Last Updated: 2024-08-07T04:24:16.891Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in net/sctp/sm_statefuns.c in the Stream Control Transmission Protocol (sctp) implementation in the Linux kernel before 2.6.28-git8 allows remote attackers to have an unknown impact via an FWD-TSN (aka FORWARD-TSN) chunk with a large stream ID. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35390 - http://www.redhat.com/support/errata/RHSA-2009-1055.html - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01832118 - http://patchwork.ozlabs.or
055.html - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01832118 - http://patchwork.ozlabs.org/patch/15024/ - http://www.redhat.com/support/errata/RHSA-2009-0331.html - http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00003.html - http://www.securityfocus.com/bid/33113 - http://www.redhat.com/support/errata/RHSA-2009-0053.html - http://secunia.com/advisories/35174 - http://www.debian.org/security/2009/dsa-1749 - http://www.debian.org/security/2009/dsa-1794 - http://secunia.com/advisories/33674 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=9fcb95a105758b81ef0131cd18e2db5149f13e95 - http://support.avaya.com/elmodocs2
/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=9fcb95a105758b81ef0131cd18e2db5149f13e95 - http://support.avaya.com/elmodocs2/security/ASA-2009-114.htm - http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html - http://www.ubuntu.com/usn/usn-751-1 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01832118 - http://secunia.com/advisories/36191 - http://secunia.com/advisories/34252 - http://secunia.com/advisories/35011 - https://bugzilla.redhat.com/show_bug.cgi?id=478800 - http://www.vupen.com/english/advisories/2009/0029 - http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html - http://rhn.redhat.com/errata/RHSA-2009-0264.html - https:
pensuse.org/opensuse-security-announce/2009-06/msg00001.html - http://rhn.redhat.com/errata/RHSA-2009-0264.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10872 - http://secunia.com/advisories/33858 - http://secunia.com/advisories/34981 - http://www.vupen.com/english/advisories/2009/2193 - http://secunia.com/advisories/34394 - http://www.debian.org/security/2009/dsa-1787 - http://secunia.com/advisories/33854 - https://www.redhat.com/archives/fedora-package-announce/2009-January/msg01045.html - http://www.openwall.com/lists/oss-security/2009/01/05/1 - http://www.securitytracker.com/id?1022698 - http://secunia.com/advisories/34680 - http://secunia.
ecurity/2009/01/05/1 - http://www.securitytracker.com/id?1022698 - http://secunia.com/advisories/34680 - http://secunia.com/advisories/34762 - http://secunia.com/advisories/35394
CVE ID: CVE-2009-0066 State: PUBLISHED Published: 2009-01-07T19:00:00Z Last Updated: 2024-09-17T02:05:38.139Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Intel system software for Trusted Execution Technology (TXT) allow attackers to bypass intended loader integrity protections, as demonstrated by exploitation of tboot. NOTE: as of 20090107, the only disclosure is a vague pre-advisory with no actionable information. However, because it is from a well-known researcher, it is being assigned a CVE identifier for tracking purposes. Additional Analyst Notes: - CVE Program Container: References: - http://invisiblethingslab.com/press/itl-press-
urposes. Additional Analyst Notes: - CVE Program Container: References: - http://invisiblethingslab.com/press/itl-press-2009-01.pdf - http://www.securityfocus.com/bid/33119 - http://theinvisiblethings.blogspot.com/2009/01/attacking-intel-trusted-execution.html - http://blackhat.com/html/bh-dc-09/bh-dc-09-speakers.html#Wojtczuk
CVE ID: CVE-2009-0068 State: PUBLISHED Published: 2009-01-07T19:00:00 Last Updated: 2024-08-07T04:24:16.893Z Vendors: n/a Products: n/a Problem Types: n/a Description: Interaction error in xdg-open allows remote attackers to execute arbitrary code by sending a file with a dangerous MIME type but using a safe type that Firefox sends to xdg-open, which causes xdg-open to process the dangerous file type through automatic type detection, as demonstrated by overwriting the .desktop file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33137 - http://www.openwall.com/lists/oss-security/2009/01/06/1 - https://bugs.freedesktop.org/show_bug.cgi?id=193
m/bid/33137 - http://www.openwall.com/lists/oss-security/2009/01/06/1 - https://bugs.freedesktop.org/show_bug.cgi?id=19377
CVE ID: CVE-2009-0069 State: PUBLISHED Published: 2009-01-07T20:00:00 Last Updated: 2024-08-07T04:24:17.085Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the nfs4rename_persistent_fh function in the NFS 4 (aka NFSv4) client in the kernel in Sun Solaris 10 and OpenSolaris before snv_102 allows local users to cause a denial of service (recursive mutex_enter and panic) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://mail.opensolaris.org/pipermail/onnv-notify/2008-October/015342.html - http://secunia.com/advisories/33361 - http://www.securitytracker.com/id?1021519 - http://www.securityfocus.com/bid/33128
ttp://secunia.com/advisories/33361 - http://www.securitytracker.com/id?1021519 - http://www.securityfocus.com/bid/33128 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-248566-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-139466-02-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47750 - http://www.vupen.com/english/advisories/2009/0030
CVE ID: CVE-2009-0070 State: PUBLISHED Published: 2009-01-08T19:00:00 Last Updated: 2024-08-07T04:24:16.980Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in Apple Safari allows remote attackers to read the contents of arbitrary memory locations, cause a denial of service (application crash), and probably have unspecified other impact via the array index of the arguments array in a JavaScript function, possibly a related issue to CVE-2008-2307. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/48214 - https://www.exploit-db.com/exploits/7673
CVE ID: CVE-2009-0071 State: PUBLISHED Published: 2009-01-08T19:00:00 Last Updated: 2024-08-07T04:24:17.076Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox 3.0.5 and earlier 3.0.x versions, when designMode is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a certain (a) replaceChild or (b) removeChild call, followed by a (1) queryCommandValue, (2) queryCommandState, or (3) queryCommandIndeterm call. NOTE: it was later reported that 3.0.6 and 3.0.7 are also affected. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8219 - http://archives.neohapsis.
lyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8219 - http://archives.neohapsis.com/archives/fulldisclosure/2009-01/0220.html - https://bugzilla.mozilla.org/show_bug.cgi?id=456727 - https://bugzilla.mozilla.org/show_bug.cgi?id=448329 - https://www.exploit-db.com/exploits/8091 - http://www.securityfocus.com/bid/33154 - https://bugzilla.mozilla.org/show_bug.cgi?id=472507 - http://archives.neohapsis.com/archives/fulldisclosure/2009-01/0223.html - http://archives.neohapsis.com/archives/fulldisclosure/2009-01/0224.html
CVE ID: CVE-2009-0072 State: PUBLISHED Published: 2009-01-08T19:00:00 Last Updated: 2024-08-07T04:24:17.133Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6.0 through 8.0 beta2 allows remote attackers to cause a denial of service (application crash) via an onload=screen[""] attribute value in a BODY element. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47788 - http://skypher.com/index.php/2009/01/07/msie-screen-null-ptr-dos-details/ - http://www.securityfocus.com/bid/33149
CVE ID: CVE-2009-0073 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2009-0074 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2009-0075 State: PUBLISHED Published: 2009-02-10T22:13:00 Last Updated: 2024-08-07T04:24:17.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 7 does not properly handle errors during attempted access to deleted objects, which allows remote attackers to execute arbitrary code via a crafted HTML document, related to CFunctionPointer and the appending of document objects, aka "Uninitialized Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6000 - https://www.exploit-db.com/exploits/8082 - http://www.zerodayi