Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-2523 State: PUBLISHED Published: 2009-11-11T19:00:00 Last Updated: 2024-08-07T05:52:14.833Z Vendors: n/a Products: n/a Problem Types: n/a Description: The License Logging Server (llssrv.exe) in Microsoft Windows 2000 SP4 allows remote attackers to execute arbitrary code via an RPC message containing a string without a null terminator, which triggers a heap-based buffer overflow in the LlsrLicenseRequestW method, aka "License Logging Server Heap Overflow Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA09-314A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A63
as/techalerts/TA09-314A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6300 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-064
CVE ID: CVE-2009-2524 State: PUBLISHED Published: 2009-10-14T10:00:00 Last Updated: 2024-08-07T05:52:14.954Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer underflow in the NTLM authentication feature in the Local Security Authority Subsystem Service (LSASS) in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows remote attackers to cause a denial of service (reboot) via a malformed packet, aka "Local Security Authority Subsystem Service Integer Overflow Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA
ulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA09-286A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-059 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6263
CVE ID: CVE-2009-2525 State: PUBLISHED Published: 2009-10-14T10:00:00 Last Updated: 2024-08-07T05:52:14.950Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows Media Runtime, as used in DirectShow WMA Voice Codec, Windows Media Audio Voice Decoder, and Audio Compression Manager (ACM), does not properly initialize unspecified functions within compressed audio files, which allows remote attackers to execute arbitrary code via (1) a crafted media file or (2) crafted streaming content, aka "Windows Media Runtime Heap Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA09-286A.html - https://
al Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA09-286A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6484 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-051
CVE ID: CVE-2009-2526 State: PUBLISHED Published: 2009-10-14T10:00:00 Last Updated: 2024-08-07T05:52:14.833Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 do not properly validate fields in SMBv2 packets, which allows remote attackers to cause a denial of service (infinite loop and system hang) via a crafted packet to the Server service, aka "SMBv2 Infinite Loop Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-050 - http://www.us-cert.gov/cas/techalerts/TA09-286A.html - https://oval.cisecurity.org/re
/securitybulletins/2009/ms09-050 - http://www.us-cert.gov/cas/techalerts/TA09-286A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5595
CVE ID: CVE-2009-2527 State: PUBLISHED Published: 2009-10-14T10:00:00 Last Updated: 2024-08-07T05:52:14.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Microsoft Windows Media Player 6.4 allows remote attackers to execute arbitrary code via (1) a crafted ASF file or (2) crafted streaming content, aka "WMP Heap Overflow Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA09-286A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6184 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-052
CVE ID: CVE-2009-2528 State: PUBLISHED Published: 2009-10-14T10:00:00 Last Updated: 2024-08-07T05:52:15.196Z Vendors: n/a Products: n/a Problem Types: n/a Description: GDI+ in Microsoft Office XP SP3 does not properly handle malformed objects in Office Art Property Tables, which allows remote attackers to execute arbitrary code via a crafted Office document that triggers memory corruption, aka "Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA09-286A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6426 - https://docs.microsoft.com/en-us/security-updates/secu
repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6426 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-062
CVE ID: CVE-2009-2529 State: PUBLISHED Published: 2009-10-14T10:00:00 Last Updated: 2024-10-21T16:40:02.227Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, 7, and 8 does not properly handle argument validation for unspecified variables, which allows remote attackers to execute arbitrary code via a crafted HTML document, aka "HTML Component Handling Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-054 - http://www.us-cert.gov/cas/techalerts/TA09-286A.html - https://oval.cisecurity.org/repository/searc
tins/2009/ms09-054 - http://www.us-cert.gov/cas/techalerts/TA09-286A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6419
CVE ID: CVE-2009-2530 State: PUBLISHED Published: 2009-10-14T10:00:00 Last Updated: 2024-08-07T05:52:15.198Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6, 6 SP1, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "Uninitialized Memory Corruption Vulnerability," a different vulnerability than CVE-2009-2531. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-054 - http://www.us-cert.gov/cas/
ences: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-054 - http://www.us-cert.gov/cas/techalerts/TA09-286A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6190
CVE ID: CVE-2009-2531 State: PUBLISHED Published: 2009-10-14T10:00:00 Last Updated: 2024-08-07T05:52:14.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6, 6 SP1, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "Uninitialized Memory Corruption Vulnerability," a different vulnerability than CVE-2009-2530. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-054 - http://www.us-cert.gov/cas/
ences: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-054 - http://www.us-cert.gov/cas/techalerts/TA09-286A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5766
CVE ID: CVE-2009-2532 State: PUBLISHED Published: 2009-10-14T10:00:00 Last Updated: 2024-08-07T05:52:14.839Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold and SP2, and Windows 7 RC do not properly process the command value in an SMB Multi-Protocol Negotiate Request packet, which allows remote attackers to execute arbitrary code via a crafted SMBv2 packet to the Server service, aka "SMBv2 Command Value Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-050 - http://www.us-cert.gov/cas/techalerts/TA09-286A.
.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-050 - http://www.us-cert.gov/cas/techalerts/TA09-286A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6336
CVE ID: CVE-2009-2533 State: PUBLISHED Published: 2009-07-20T17:00:00 Last Updated: 2024-08-07T05:52:14.831Z Vendors: n/a Products: n/a Problem Types: n/a Description: rmserver in RealNetworks Helix Server and Helix Mobile Server before 13.0.0 allows remote attackers to cause a denial of service (daemon exit) via multiple RTSP SET_PARAMETER requests with empty DataConvertBuffer headers. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/505083/100/0/threaded - http://www.coresecurity.com/content/real-helix-dna - http://osvdb.org/55981 - http://www.securityfocus.com/bid/35731 - http://www.vupen.com/english/advisories/2009/1947 - http://docs
vdb.org/55981 - http://www.securityfocus.com/bid/35731 - http://www.vupen.com/english/advisories/2009/1947 - http://docs.real.com/docs/security/SecurityUpdate071409HS.pdf - http://www.exploit-db.com/exploits/9198
CVE ID: CVE-2009-2534 State: PUBLISHED Published: 2009-07-20T17:00:00 Last Updated: 2024-08-07T05:52:15.225Z Vendors: n/a Products: n/a Problem Types: n/a Description: RealNetworks Helix Server and Helix Mobile Server before 13.0.0 allow remote attackers to cause a denial of service (daemon crash) via an RTSP SETUP request that (1) specifies the / URI or (2) lacks a / character in the URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35732 - http://www.securityfocus.com/archive/1/505083/100/0/threaded - http://www.coresecurity.com/content/real-helix-dna - http://osvdb.org/55982 - http://www.vupen.com/english/advisories/2009/1947 - http://d
urity.com/content/real-helix-dna - http://osvdb.org/55982 - http://www.vupen.com/english/advisories/2009/1947 - http://docs.real.com/docs/security/SecurityUpdate071409HS.pdf - http://www.exploit-db.com/exploits/9198
CVE ID: CVE-2009-2535 State: PUBLISHED Published: 2009-07-20T18:00:00 Last Updated: 2024-08-07T05:52:15.240Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 2.0.0.19 and 3.x before 3.0.5, SeaMonkey, and Thunderbird allow remote attackers to cause a denial of service (memory consumption and application crash) via a large integer value for the length property of a Select object, a related issue to CVE-2009-1692. Additional Analyst Notes: - CVE Program Container: References: - http://www.g-sec.lu/one-bug-to-rule-them-all.html - http://www.securityfocus.com/archive/1/504988/100/0/threaded - http://www.securityfocus.com/archive/1/505006/100/0/threaded - http://ww
rityfocus.com/archive/1/504988/100/0/threaded - http://www.securityfocus.com/archive/1/505006/100/0/threaded - http://www.exploit-db.com/exploits/9160 - http://www.securityfocus.com/archive/1/504969/100/0/threaded - http://www.securityfocus.com/archive/1/504989/100/0/threaded - https://bugzilla.mozilla.org/show_bug.cgi?id=460713
CVE ID: CVE-2009-2536 State: PUBLISHED Published: 2009-07-20T18:00:00 Last Updated: 2024-08-07T05:52:15.244Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 5 through 8 allows remote attackers to cause a denial of service (memory consumption and application crash) via a large integer value for the length property of a Select object, a related issue to CVE-2009-1692. Additional Analyst Notes: - CVE Program Container: References: - http://www.g-sec.lu/one-bug-to-rule-them-all.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/52870 - http://www.securityfocus.com/archive/1/504988/100/0/threaded - http://www.securityfocus.com/archive/1/505006/100/0
870 - http://www.securityfocus.com/archive/1/504988/100/0/threaded - http://www.securityfocus.com/archive/1/505006/100/0/threaded - http://www.exploit-db.com/exploits/9160 - http://www.securityfocus.com/archive/1/504969/100/0/threaded - http://www.securityfocus.com/archive/1/504989/100/0/threaded
CVE ID: CVE-2009-2537 State: PUBLISHED Published: 2009-07-20T18:00:00 Last Updated: 2024-08-07T05:52:15.290Z Vendors: n/a Products: n/a Problem Types: n/a Description: KDE Konqueror allows remote attackers to cause a denial of service (memory consumption) via a large integer value for the length property of a Select object, a related issue to CVE-2009-1692. Additional Analyst Notes: - CVE Program Container: References: - http://www.g-sec.lu/one-bug-to-rule-them-all.html - https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01177.html - http://www.mandriva.com/security/advisories?name=MDVSA-2009:330 - https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01199.
om/security/advisories?name=MDVSA-2009:330 - https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01199.html - http://www.securityfocus.com/archive/1/504988/100/0/threaded - http://secunia.com/advisories/36062 - http://secunia.com/advisories/36057 - http://www.securityfocus.com/archive/1/505006/100/0/threaded - http://www.exploit-db.com/exploits/9160 - https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01196.html - http://www.securityfocus.com/archive/1/504969/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/52871 - http://www.securityfocus.com/archive/1/504989/100/0/threaded - https://www.redhat.com/archives/fedora-package-announce/2009
p://www.securityfocus.com/archive/1/504989/100/0/threaded - https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01200.html
CVE ID: CVE-2009-2538 State: PUBLISHED Published: 2009-07-20T18:00:00 Last Updated: 2024-08-07T05:52:15.253Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Nokia N95 running Symbian OS 9.2, N82, and N810 Internet Tablet allow remote attackers to cause a denial of service (memory consumption) via a large integer value for the length property of a Select object, a related issue to CVE-2009-1692. Additional Analyst Notes: - CVE Program Container: References: - http://www.g-sec.lu/one-bug-to-rule-them-all.html - http://www.securityfocus.com/archive/1/504988/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/52872 - http://www.securityfocus.com/archive/1/505006/
0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/52872 - http://www.securityfocus.com/archive/1/505006/100/0/threaded - http://www.exploit-db.com/exploits/9160 - http://www.securityfocus.com/archive/1/504969/100/0/threaded - http://www.securityfocus.com/archive/1/504989/100/0/threaded
CVE ID: CVE-2009-2539 State: PUBLISHED Published: 2009-07-20T18:00:00 Last Updated: 2024-08-07T05:52:15.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Aigo P8860 allows remote attackers to cause a denial of service (memory consumption and browser hang) via a large integer value for the length property of a Select object, a related issue to CVE-2009-1692. Additional Analyst Notes: - CVE Program Container: References: - http://www.g-sec.lu/one-bug-to-rule-them-all.html - http://www.securityfocus.com/archive/1/504988/100/0/threaded - http://www.securityfocus.com/archive/1/505006/100/0/threaded - http://www.exploit-db.com/exploits/9160 - http://www.securityfocus.com/archive/
us.com/archive/1/505006/100/0/threaded - http://www.exploit-db.com/exploits/9160 - http://www.securityfocus.com/archive/1/504969/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/52873 - http://www.securityfocus.com/archive/1/504989/100/0/threaded
CVE ID: CVE-2009-2540 State: PUBLISHED Published: 2009-07-20T18:00:00 Last Updated: 2024-08-07T05:52:15.251Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera, possibly 9.64 and earlier, allows remote attackers to cause a denial of service (memory consumption) via a large integer value for the length property of a Select object, a related issue to CVE-2009-1692. Additional Analyst Notes: - CVE Program Container: References: - http://www.g-sec.lu/one-bug-to-rule-them-all.html - http://www.securityfocus.com/archive/1/504988/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5957 - https://exchange.xforce.ibmcloud.com/vulnerabi
ity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5957 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52874 - http://www.securityfocus.com/archive/1/505006/100/0/threaded - http://www.exploit-db.com/exploits/9160 - http://www.securityfocus.com/archive/1/504969/100/0/threaded - http://www.securityfocus.com/archive/1/504989/100/0/threaded
CVE ID: CVE-2009-2541 State: PUBLISHED Published: 2009-07-20T18:00:00.000Z Last Updated: 2025-04-23T15:36:43.363Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web browser on the Sony PLAYSTATION 3 (PS3) allows remote attackers to cause a denial of service (memory consumption and console hang) via a large integer value for the length property of a Select object, a related issue to CVE-2009-1692. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.g-sec.lu/one-bug-to-rule-them-all.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/52875 - http://www.securityfocus.com/archive/1/504988/100/0/threaded - http://www.securit
e.ibmcloud.com/vulnerabilities/52875 - http://www.securityfocus.com/archive/1/504988/100/0/threaded - http://www.securityfocus.com/archive/1/505006/100/0/threaded - http://www.exploit-db.com/exploits/9160 - http://www.securityfocus.com/archive/1/504969/100/0/threaded - http://www.securityfocus.com/archive/1/504989/100/0/threaded
CVE ID: CVE-2009-2542 State: PUBLISHED Published: 2009-07-20T18:00:00 Last Updated: 2024-08-07T05:52:15.242Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netscape 6 and 8 allows remote attackers to cause a denial of service (memory consumption) via a large integer value for the length property of a Select object, a related issue to CVE-2009-1692. Additional Analyst Notes: - CVE Program Container: References: - http://www.g-sec.lu/one-bug-to-rule-them-all.html - http://www.securityfocus.com/archive/1/504988/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/52876 - http://www.securityfocus.com/archive/1/505006/100/0/threaded - http://www.exploit-db.com/exploit
vulnerabilities/52876 - http://www.securityfocus.com/archive/1/505006/100/0/threaded - http://www.exploit-db.com/exploits/9160 - http://www.securityfocus.com/archive/1/504969/100/0/threaded - http://www.securityfocus.com/archive/1/504989/100/0/threaded
CVE ID: CVE-2009-2543 State: PUBLISHED Published: 2009-07-20T18:00:00 Last Updated: 2024-08-07T05:52:15.256Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the IBM Proventia engine 4.9.0.0.44 20081231, as used in IBM Proventia Network Mail Security System, Network Mail Security System Virtual Appliance, Desktop Endpoint Security, Network Multi-Function Security (MFS), and possibly other products, allow remote attackers to bypass detection of malware via a modified (1) ZIP or (2) CAB archive, a related issue to CVE-2009-1240. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/504995/100/0/
0. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/504995/100/0/threaded - http://iss.custhelp.com/cgi-bin/iss.cfg/php/enduser/std_adp.php?p_faqid=5417 - http://www.securityfocus.com/archive/1/504987/100/0/threaded - http://www.securityfocus.com/archive/1/504992/100/0/threaded
CVE ID: CVE-2009-2544 State: PUBLISHED Published: 2009-07-20T18:00:00 Last Updated: 2024-08-07T05:52:15.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Marcelo Costa FileServer component 1.0 for Microsoft Windows Live Messenger and Messenger Plus! Live (MPL) allows remote authenticated users to list arbitrary directories and read arbitrary files via a .. (dot dot) in a pathname. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9093
CVE ID: CVE-2009-2545 State: PUBLISHED Published: 2009-07-20T19:25:00 Last Updated: 2024-08-07T05:52:15.208Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Advanced Electron Forum (AEF) 1.x, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the filename in an uploaded attachment. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/55925 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51775 - http://secunia.com/advisories/35646
CVE ID: CVE-2009-2546 State: PUBLISHED Published: 2009-07-20T19:25:00 Last Updated: 2024-08-07T05:52:15.228Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Advanced Electron Forum (AEF) 1.x allows remote attackers to determine the existence of arbitrary files via the avatargalfile parameter when changing an avatar, which leaks the existence of the file in an error message. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/51776 - http://secunia.com/advisories/3564
Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/51776 - http://secunia.com/advisories/35646 - http://osvdb.org/55926
CVE ID: CVE-2009-2547 State: PUBLISHED Published: 2009-07-20T19:25:00 Last Updated: 2024-08-07T05:52:15.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer underflow in Armed Assault (aka ArmA) 1.14 and earlier, and 1.16 beta, and Armed Assault II 1.02 and earlier allows remote attackers to cause a denial of service (crash) via a VoIP over Network (VON) packet to port 2305 with a negative packet_size value, which triggers a buffer over-read. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/1951 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51820 - http://secunia.com/advisories/35900 - http://aluigi.alte
- https://exchange.xforce.ibmcloud.com/vulnerabilities/51820 - http://secunia.com/advisories/35900 - http://aluigi.altervista.org/adv/armadioz-adv.txt
CVE ID: CVE-2009-2548 State: PUBLISHED Published: 2009-07-20T19:25:00Z Last Updated: 2024-09-16T17:23:39.299Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in Armed Assault (aka ArmA) 1.14 and earlier, and 1.16 beta, and Armed Assault II 1.02 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in the (1) nickname and (2) datafile fields in a join request, which is not properly handled when logging an error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/1951 - http://aluigi.altervista.org/adv/arma
ogram Container: References: - http://www.vupen.com/english/advisories/2009/1951 - http://aluigi.altervista.org/adv/armazzofs-adv.txt