Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
s/packet-reload.c?r1=47805&r2=47804&pathrev=47805 - http://anonsvn.wireshark.org/viewvc?view=revision&revision=47805 - http://lists.opensuse.org/opensuse-updates/2013-06/msg00083.html
CVE ID: CVE-2013-2487 State: PUBLISHED Published: 2013-03-07T15:00:00 Last Updated: 2024-08-06T15:36:46.673Z Vendors: n/a Products: n/a Problem Types: n/a Description: epan/dissectors/packet-reload.c in the REsource LOcation And Discovery (aka RELOAD) dissector in Wireshark 1.8.x before 1.8.6 uses incorrect integer data types, which allows remote attackers to cause a denial of service (infinite loop) via crafted integer values in a packet, related to the (1) dissect_icecandidates, (2) dissect_kinddata, (3) dissect_nodeid_list, (4) dissect_storeans, (5) dissect_storereq, (6) dissect_storeddataspecifier, (7) dissect_fetchreq, (8) dissect_findans, (9) dissect_diagnosticinfo, (10) dissect_diagno
dissect_storeddataspecifier, (7) dissect_fetchreq, (8) dissect_findans, (9) dissect_diagnosticinfo, (10) dissect_diagnosticresponse, (11) dissect_reload_messagecontents, and (12) dissect_reload_message functions, a different vulnerability than CVE-2013-2486. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2013-03/msg00065.html - http://secunia.com/advisories/53425 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8364 - http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-reload.c?r1=47808&r2=47807&pathrev=47808 - http://lists.opensuse.org/opensuse-updates/2013-06/msg00048.html - http://www.wireshark.org/security/wn
&pathrev=47808 - http://lists.opensuse.org/opensuse-updates/2013-06/msg00048.html - http://www.wireshark.org/security/wnpa-sec-2013-21.html - http://secunia.com/advisories/52471 - http://www.wireshark.org/docs/relnotes/wireshark-1.8.6.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16593 - http://lists.opensuse.org/opensuse-updates/2013-03/msg00077.html - http://anonsvn.wireshark.org/viewvc?view=revision&revision=47808 - http://lists.opensuse.org/opensuse-updates/2013-06/msg00083.html
CVE ID: CVE-2013-2488 State: PUBLISHED Published: 2013-03-07T15:00:00 Last Updated: 2024-08-06T15:36:46.681Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DTLS dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 does not validate the fragment offset before invoking the reassembly state machine, which allows remote attackers to cause a denial of service (application crash) via a large offset value that triggers write access to an invalid memory location. Additional Analyst Notes: - CVE Program Container: References: - http://www.wireshark.org/security/wnpa-sec-2013-22.html - http://www.wireshark.org/docs/relnotes/wireshark-1.6.14.html - http://lists.opensuse.org
ecurity/wnpa-sec-2013-22.html - http://www.wireshark.org/docs/relnotes/wireshark-1.6.14.html - http://lists.opensuse.org/opensuse-updates/2013-03/msg00065.html - http://anonsvn.wireshark.org/viewvc?view=revision&revision=48011 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16672 - http://secunia.com/advisories/52471 - http://www.wireshark.org/docs/relnotes/wireshark-1.8.6.html - http://lists.opensuse.org/opensuse-updates/2013-03/msg00077.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8380 - http://www.debian.org/security/2013/dsa-2644
CVE ID: CVE-2013-2492 State: PUBLISHED Published: 2013-03-15T14:00:00 Last Updated: 2024-08-06T15:36:46.823Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Firebird 2.1.3 through 2.1.5 before 18514, and 2.5.1 through 2.5.3 before 26623, on Windows allows remote attackers to execute arbitrary code via a crafted packet to TCP port 3050, related to a missing size check during extraction of a group number from CNCT information. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201512-11 - https://gist.github.com/zeroSteiner/85daef257831d904479c - http://lists.opensuse.org/opensuse-security-announce/2013-03
https://gist.github.com/zeroSteiner/85daef257831d904479c - http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00036.html - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/fb_cnct_group.rb - http://www.securityfocus.com/bid/58393 - http://www.debian.org/security/2013/dsa-2648 - http://tracker.firebirdsql.org/browse/CORE-4058 - http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00039.html - http://www.debian.org/security/2013/dsa-2647
CVE ID: CVE-2013-2493 State: PUBLISHED Published: 2013-03-07T16:00:00Z Last Updated: 2024-09-16T17:43:15.371Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Hook_Terminate function in chrome_frame/protocol_sink_wrap.cc in the Google Chrome Frame plugin before 26.0.1410.28 for Internet Explorer does not properly handle attach tab requests, which allows user-assisted remote attackers to cause a denial of service (application crash) via an _blank value for the target attribute of an A element. Additional Analyst Notes: - CVE Program Container: References: - http://src.chromium.org/viewvc/chrome/trunk/src/chrome_frame/protocol_sink_wrap.cc?r1=185956&r2=185955&pathrev=185956 - htt
p://src.chromium.org/viewvc/chrome/trunk/src/chrome_frame/protocol_sink_wrap.cc?r1=185956&r2=185955&pathrev=185956 - https://chromiumcodereview.appspot.com/12395021 - http://googlechromereleases.blogspot.com/2013/03/beta-channel-update.html - http://src.chromium.org/viewvc/chrome?view=rev&revision=185956 - https://code.google.com/p/chromium/issues/detail?id=178415
CVE ID: CVE-2013-2494 State: PUBLISHED Published: 2013-03-28T16:00:00Z Last Updated: 2024-09-16T19:52:30.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: libdns in ISC DHCP 4.2.x before 4.2.5-P1 allows remote name servers to cause a denial of service (memory consumption) via vectors involving a regular expression, as demonstrated by a memory-exhaustion attack against a machine running a dhcpd process, a related issue to CVE-2013-2266. Additional Analyst Notes: - CVE Program Container: References: - https://kb.isc.org/article/AA-00880/
CVE ID: CVE-2013-2495 State: PUBLISHED Published: 2013-03-09T11:01:00 Last Updated: 2024-08-06T15:44:32.093Z Vendors: n/a Products: n/a Problem Types: n/a Description: The iff_read_header function in iff.c in libavformat in FFmpeg through 1.1.3 does not properly handle data sizes for Interchange File Format (IFF) data during operations involving a CMAP chunk or a video codec, which allows remote attackers to cause a denial of service (integer overflow, out-of-bounds array access, and application crash) or possibly have unspecified other impact via a crafted header. Additional Analyst Notes: - CVE Program Container: References: - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=3dbc0ff9c3
al Analyst Notes: - CVE Program Container: References: - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=3dbc0ff9c3e6f6e0d08ea3d42cb33761bae084ba - http://www.ubuntu.com/usn/USN-1790-1
CVE ID: CVE-2013-2496 State: PUBLISHED Published: 2013-03-09T11:01:00 Last Updated: 2024-08-06T15:44:32.287Z Vendors: n/a Products: n/a Problem Types: n/a Description: The msrle_decode_8_16_24_32 function in msrledec.c in libavcodec in FFmpeg through 1.1.3 does not properly determine certain end pointers, which allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) or possibly have unspecified other impact via crafted Microsoft RLE data. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1790-1 - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=e398990eb87785e20e065cd3f14d1dbb69df4392
CVE ID: CVE-2013-2498 State: PUBLISHED Published: 2014-02-28T17:00:00 Last Updated: 2024-08-06T15:44:32.098Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the login page in flexycms/modules/user/user_manager.php in SimpleHRM 2.3, 2.2, and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter to index.php/user/setLogin. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/04/17/1 - http://osvdb.org/92538 - https://exchange.xforce.ibmcloud.com/vulnerabilities/83628
CVE ID: CVE-2013-2499 State: PUBLISHED Published: 2020-01-27T21:51:20 Last Updated: 2024-08-06T15:44:31.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: SimpleHRM 2.3 and earlier could allow remote attackers to bypass the authentication process in 'user_manager.php' via spoofing a cookie. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/59255 - http://www.openwall.com/lists/oss-security/2013/04/17/1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/83629
CVE ID: CVE-2013-2501 State: PUBLISHED Published: 2013-03-22T21:00:00 Last Updated: 2024-08-06T15:44:31.990Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Terillion Reviews plugin before 1.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the ProfileId field. Additional Analyst Notes: - CVE Program Container: References: - http://wordpress.org/extend/plugins/terillion-reviews/changelog/ - http://packetstormsecurity.com/files/120730/WordPress-Terillion-Reviews-Cross-Site-Scripting.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/82727 - http://archives.neohapsis.com/archives/bugtraq/2013-0
tml - https://exchange.xforce.ibmcloud.com/vulnerabilities/82727 - http://archives.neohapsis.com/archives/bugtraq/2013-03/0055.html - http://osvdb.org/91123 - http://www.securityfocus.com/bid/58415 - http://plugins.trac.wordpress.org/changeset/683838/terillion-reviews
CVE ID: CVE-2013-2503 State: PUBLISHED Published: 2013-03-11T17:00:00 Last Updated: 2024-08-06T15:44:32.095Z Vendors: n/a Products: n/a Problem Types: n/a Description: Privoxy before 3.0.21 does not properly handle Proxy-Authenticate and Proxy-Authorization headers in the client-server data stream, which makes it easier for remote HTTP servers to spoof the intended proxy service via a 407 (aka Proxy Authentication Required) HTTP status code. Additional Analyst Notes: - CVE Program Container: References: - http://blog.c22.cc/2013/03/11/privoxy-proxy-authentication-credential-exposure-cve-2013-2503/ - http://ijbswa.cvs.sourceforge.net/viewvc/ijbswa/current/ChangeLog?revision=1.188&view=markup
-exposure-cve-2013-2503/ - http://ijbswa.cvs.sourceforge.net/viewvc/ijbswa/current/ChangeLog?revision=1.188&view=markup - http://lists.opensuse.org/opensuse-updates/2013-03/msg00118.html
CVE ID: CVE-2013-2504 State: PUBLISHED Published: 2013-12-29T02:00:00 Last Updated: 2024-08-06T15:44:31.996Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in SPS/Portal/default.aspx in Service Desk in Matrix42 Service Store 5.3 SP3 (aka 5.33.946.0) allows remote attackers to inject arbitrary web script or HTML via the query string. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2013/Apr/153 - http://archives.neohapsis.com/archives/bugtraq/2013-04/0196.html
CVE ID: CVE-2013-2506 State: PUBLISHED Published: 2013-03-08T18:00:00 Last Updated: 2024-08-06T15:44:32.097Z Vendors: n/a Products: n/a Problem Types: n/a Description: app/models/spree/user.rb in spree_auth_devise in Spree 1.1.x before 1.1.6, 1.2.x, and 1.3.x does not perform mass assignment safely when updating a user, which allows remote authenticated users to assign arbitrary roles to themselves. Additional Analyst Notes: - CVE Program Container: References: - http://spreecommerce.com/blog/multiple-security-vulnerabilities-fixed - https://github.com/spree/spree_auth_devise/commit/038d74771d3b5c13d13b738b73dfda1033a99f65
CVE ID: CVE-2013-2507 State: PUBLISHED Published: 2014-03-14T14:00:00 Last Updated: 2024-08-06T15:44:32.092Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Brother MFC-9970CDW printer with firmware G (1.03) allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to admin/log_to_net.html or (2) kind parameter to fax/copy_settings.html, a different vulnerability than CVE-2013-2670 and CVE-2013-2671. Additional Analyst Notes: - CVE Program Container: References: - http://www.cloudscan.me/2013/05/xss-javascript-injection-brother-mfc.html - http://packetstormsecurity.com/files/121553/Brother-MFC-
loudscan.me/2013/05/xss-javascript-injection-brother-mfc.html - http://packetstormsecurity.com/files/121553/Brother-MFC-9970CDW-Firmware-0D-Cross-Site-Scripting.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/84096 - http://osvdb.org/ref/93/brother-mfc-9970cdw-firmware-g-v103-by-hoyt-03072013.html - http://osvdb.org/93067 - http://osvdb.org/93066
CVE ID: CVE-2013-2512 State: PUBLISHED Published: 2021-01-26T22:56:13 Last Updated: 2024-08-06T15:44:31.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ftpd gem 0.2.1 for Ruby allows remote attackers to execute arbitrary OS commands via shell metacharacters in a LIST or NLST command argument within FTP protocol traffic. Additional Analyst Notes: - CVE Program Container: References: - http://vapidlabs.com/advisory.php?v=34
CVE ID: CVE-2013-2513 State: PUBLISHED Published: 2023-12-12T00:00:00 Last Updated: 2024-08-06T15:44:32.040Z Vendors: n/a Products: n/a Problem Types: n/a Description: The flash_tool gem through 0.6.0 for Ruby allows command execution via shell metacharacters in the name of a downloaded file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/advisories/GHSA-6325-6g32-7p35 - https://github.com/rubysec/ruby-advisory-db/blob/master/gems/flash_tool/CVE-2013-2513.yml
CVE ID: CVE-2013-2516 State: PUBLISHED Published: 2019-02-15T21:00:00 Last Updated: 2024-08-06T15:44:31.990Z Vendors: Stefaan Colman Products: FileUtils Problem Types: Fileutils 0.7 Ruby Gem remote command execution and insecure file handling in /tmp Description: Vulnerability in FileUtils v0.7, Ruby Gem Fileutils <= v0.7 Command Injection vulnerability in user supplied url variable that is passed to the shell. Additional Analyst Notes: - CVE Program Container: References: - http://www.vapidlabs.com/advisory.php?v=36 - http://rubygems.org/gems/fileutils
CVE ID: CVE-2013-2517 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-2518 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-2546 State: PUBLISHED Published: 2013-03-14T20:00:00 Last Updated: 2024-08-06T15:44:32.334Z Vendors: n/a Products: n/a Problem Types: n/a Description: The report API in the crypto user configuration API in the Linux kernel through 3.8.2 uses an incorrect C library function for copying strings, which allows local users to obtain sensitive information from kernel stack memory by leveraging the CAP_NET_ADMIN capability. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1796-1 - https://github.com/torvalds/linux/commit/9a5467bf7b6e9e02ec9c3da4e23747c05faeaac6 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commi
it/9a5467bf7b6e9e02ec9c3da4e23747c05faeaac6 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=9a5467bf7b6e9e02ec9c3da4e23747c05faeaac6 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:176 - http://www.ubuntu.com/usn/USN-1797-1 - http://www.openwall.com/lists/oss-security/2013/03/05/13 - http://www.ubuntu.com/usn/USN-1793-1 - http://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html - http://www.ubuntu.com/usn/USN-1794-1 - http://www.ubuntu.com/usn/USN-1795-1
CVE ID: CVE-2013-2547 State: PUBLISHED Published: 2013-03-14T20:00:00 Last Updated: 2024-08-06T15:44:32.059Z Vendors: n/a Products: n/a Problem Types: n/a Description: The crypto_report_one function in crypto/crypto_user.c in the report API in the crypto user configuration API in the Linux kernel through 3.8.2 does not initialize certain structure members, which allows local users to obtain sensitive information from kernel heap memory by leveraging the CAP_NET_ADMIN capability. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1796-1 - https://github.com/torvalds/linux/commit/9a5467bf7b6e9e02ec9c3da4e23747c05faeaac6 - http://git.kernel.org/?p=lin
796-1 - https://github.com/torvalds/linux/commit/9a5467bf7b6e9e02ec9c3da4e23747c05faeaac6 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=9a5467bf7b6e9e02ec9c3da4e23747c05faeaac6 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:176 - http://www.ubuntu.com/usn/USN-1797-1 - http://www.openwall.com/lists/oss-security/2013/03/05/13 - http://www.ubuntu.com/usn/USN-1793-1 - http://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html - http://www.ubuntu.com/usn/USN-1794-1 - http://www.ubuntu.com/usn/USN-1795-1
CVE ID: CVE-2013-2548 State: PUBLISHED Published: 2013-03-14T20:00:00 Last Updated: 2024-08-06T15:44:32.184Z Vendors: n/a Products: n/a Problem Types: n/a Description: The crypto_report_one function in crypto/crypto_user.c in the report API in the crypto user configuration API in the Linux kernel through 3.8.2 uses an incorrect length value during a copy operation, which allows local users to obtain sensitive information from kernel memory by leveraging the CAP_NET_ADMIN capability. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1796-1 - https://github.com/torvalds/linux/commit/9a5467bf7b6e9e02ec9c3da4e23747c05faeaac6 - http://git.kernel.org/?p
SN-1796-1 - https://github.com/torvalds/linux/commit/9a5467bf7b6e9e02ec9c3da4e23747c05faeaac6 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=9a5467bf7b6e9e02ec9c3da4e23747c05faeaac6 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:176 - http://www.ubuntu.com/usn/USN-1797-1 - http://www.openwall.com/lists/oss-security/2013/03/05/13 - http://www.ubuntu.com/usn/USN-1793-1 - http://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html - http://www.ubuntu.com/usn/USN-1794-1 - http://www.ubuntu.com/usn/USN-1795-1
CVE ID: CVE-2013-2549 State: PUBLISHED Published: 2013-03-11T10:00:00 Last Updated: 2024-08-06T15:44:32.104Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Adobe Reader 11.0.02 allows remote attackers to execute arbitrary code via vectors related to a "break into the sandbox," as demonstrated by George Hotz during a Pwn2Own competition at CanSecWest 2013. Additional Analyst Notes: - CVE Program Container: References: - http://twitter.com/thezdi/statuses/309771882612281344 - http://www.adobe.com/support/security/bulletins/apsb13-15.html - http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00004.html - http://rhn.redhat.com/errata/RHSA-2013
ml - http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00004.html - http://rhn.redhat.com/errata/RHSA-2013-0826.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16809 - http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/Pwn2Own-2013/ba-p/5981157 - http://security.gentoo.org/glsa/glsa-201308-03.xml
CVE ID: CVE-2013-2550 State: PUBLISHED Published: 2013-03-11T10:00:00 Last Updated: 2024-08-06T15:44:31.997Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Adobe Reader 11.0.02 allows attackers to bypass the sandbox protection mechanism via unknown vectors, as demonstrated by George Hotz during a Pwn2Own competition at CanSecWest 2013. Additional Analyst Notes: - CVE Program Container: References: - http://twitter.com/thezdi/statuses/309771882612281344 - http://www.adobe.com/support/security/bulletins/apsb13-15.html - http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00004.html - https://oval.cisecurity.org/repository/search/definition/o
ensuse.org/opensuse-security-announce/2013-05/msg00004.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15992 - http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/Pwn2Own-2013/ba-p/5981157 - http://security.gentoo.org/glsa/glsa-201308-03.xml
CVE ID: CVE-2013-2551 State: PUBLISHED Published: 2013-03-11T10:00:00.000Z Last Updated: 2025-10-22T00:05:43.584Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2013, aka "Internet Explorer Use After Free Vulnerability," a different vulnerability than CVE-2013-1308 and CVE-2013-1309. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.microsoft.com/en-us/security-updates/securit
CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-037 - http://www.us-cert.gov/ncas/alerts/TA13-134A - http://twitter.com/VUPEN/statuses/309479075385327617 - http://twitter.com/thezdi/statuses/309452625173176320 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16317 - http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/Pwn2Own-2013/ba-p/5981157
CVE ID: CVE-2013-2552 State: PUBLISHED Published: 2013-03-11T10:00:00Z Last Updated: 2024-09-17T01:41:48.157Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Microsoft Internet Explorer 10 on Windows 8 allows remote attackers to bypass the sandbox protection mechanism by leveraging access to a Medium integrity process, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2013. Additional Analyst Notes: - CVE Program Container: References: - http://twitter.com/VUPEN/statuses/309479075385327617 - http://twitter.com/thezdi/statuses/309452625173176320 - http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/Pwn2Own-2013/ba-p/5981157
CVE ID: CVE-2013-2553 State: PUBLISHED Published: 2013-03-11T10:00:00Z Last Updated: 2024-09-16T17:38:30.373Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the kernel in Microsoft Windows 7 allows local users to gain privileges via unknown vectors, as demonstrated by Nils and Jon of MWR Labs during a Pwn2Own competition at CanSecWest 2013, a different vulnerability than CVE-2013-0912. Additional Analyst Notes: - CVE Program Container: References: - http://labs.mwrinfosecurity.com/blog/2013/03/06/pwn2own-at-cansecwest-2013/ - http://twitter.com/thezdi/statuses/309460019131346944 - http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/Pwn2Own-2013/ba-
twitter.com/thezdi/statuses/309460019131346944 - http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/Pwn2Own-2013/ba-p/5981157
CVE ID: CVE-2013-2554 State: PUBLISHED Published: 2013-03-11T10:00:00Z Last Updated: 2024-09-16T20:21:25.990Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Microsoft Windows 7 allows attackers to bypass the ASLR and DEP protection mechanisms via unknown vectors, as demonstrated against Firefox by VUPEN during a Pwn2Own competition at CanSecWest 2013, a different vulnerability than CVE-2013-0787. Additional Analyst Notes: - CVE Program Container: References: - http://twitter.com/thezdi/statuses/309484730506698752 - http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/Pwn2Own-2013/ba-p/5981157