Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ecurityalert/8261 - http://www.vupen.com/english/advisories/2011/0308 - http://marc.info/?l=bugtraq&m=130391284726795&w=2 - http://securityreason.com/securityalert/8323 - http://zerodayinitiative.com/advisories/ZDI-11-055/ - http://securityreason.com/securityalert/8329 - http://www.securityfocus.com/bid/46234
CVE ID: CVE-2011-0924 State: PUBLISHED Published: 2011-02-09T00:00:00 Last Updated: 2024-08-06T22:05:54.812Z Vendors: n/a Products: n/a Problem Types: n/a Description: The client in HP Data Protector does not verify the contents of files associated with the EXEC_CMD command, which allows remote attackers to execute arbitrary script code by providing this code with a trusted filename, as demonstrated by omni_chk_ds.sh. Additional Analyst Notes: - CVE Program Container: References: - http://dvlabs.tippingpoint.com/blog/2011/02/07/zdi-disclosure-hp - http://marc.info/?l=bugtraq&m=130391284726795&w=2 - http://www.vupen.com/english/advisories/2011/0308 - http://www.securityfocus.com/archive/1/516
q&m=130391284726795&w=2 - http://www.vupen.com/english/advisories/2011/0308 - http://www.securityfocus.com/archive/1/516258/100/0/threaded - http://marc.info/?l=bugtraq&m=130391284726795&w=2 - http://zerodayinitiative.com/advisories/ZDI-11-054/ - http://www.securityfocus.com/bid/46234
CVE ID: CVE-2011-0925 State: PUBLISHED Published: 2011-02-28T15:00:00 Last Updated: 2024-08-06T22:05:54.658Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CSDWebInstallerCtrl ActiveX control in CSDWebInstaller.ocx in Cisco Secure Desktop (CSD) allows remote attackers to download an unintended Cisco program onto a client machine, and execute this program, by identifying a Cisco program with a Cisco digital signature and then renaming this program to inst.exe, a different vulnerability than CVE-2010-0589 and CVE-2011-0926. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/0513 - http://www.securityfocus.com/bid/46538
ram Container: References: - http://www.vupen.com/english/advisories/2011/0513 - http://www.securityfocus.com/bid/46538 - http://www.securitytracker.com/id?1025118 - http://www.securityfocus.com/archive/1/516648/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/65754 - http://securityreason.com/securityalert/8108 - http://zerodayinitiative.com/advisories/ZDI-11-092/
CVE ID: CVE-2011-0926 State: PUBLISHED Published: 2011-02-25T17:00:00 Last Updated: 2024-08-06T22:14:26.442Z Vendors: n/a Products: n/a Problem Types: n/a Description: A certain ActiveX control in CSDWebInstaller.ocx in Cisco Secure Desktop (CSD) does not properly verify the signature of an unspecified downloaded program, which allows remote attackers to execute arbitrary code by spoofing the CSD installation process, a different vulnerability than CVE-2010-0589. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/0513 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65755 - http://www.securityfocus.com/archive/1/516647/100/0/th
13 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65755 - http://www.securityfocus.com/archive/1/516647/100/0/threaded - http://securityreason.com/securityalert/8105 - http://www.securitytracker.com/id?1025118 - http://www.zerodayinitiative.com/advisories/ZDI-11-091/ - http://www.securityfocus.com/bid/46536
CVE ID: CVE-2011-0935 State: PUBLISHED Published: 2011-04-14T16:00:00 Last Updated: 2024-08-06T22:14:26.521Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PKI functionality in Cisco IOS 15.0 and 15.1 does not prevent permanent caching of certain public keys, which allows remote attackers to bypass authentication and have unspecified other impact by leveraging an IKE peer relationship in which a key was previously valid but later revoked, aka Bug ID CSCth82164, a different vulnerability than CVE-2010-4685. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/docs/ios/15_1/release/notes/151-2TCAVS.html - http://www.cisco.com/en/US/docs/io
eferences: - http://www.cisco.com/en/US/docs/ios/15_1/release/notes/151-2TCAVS.html - http://www.cisco.com/en/US/docs/ios/15_1s/release/notes/15_1s_caveats_15_1_1s.html - http://www.securityfocus.com/bid/47407
CVE ID: CVE-2011-0939 State: PUBLISHED Published: 2011-10-03T23:00:00Z Last Updated: 2024-09-16T22:31:12.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Cisco IOS 12.4, 15.0, and 15.1, and IOS XE 2.5.x through 3.2.x, allows remote attackers to cause a denial of service (device reload) via a crafted SIP message, aka Bug ID CSCth03022. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b95d5a.shtml - http://tools.cisco.com/security/center/viewAlert.x?alertId=24127
CVE ID: CVE-2011-0941 State: PUBLISHED Published: 2011-11-01T19:00:00 Last Updated: 2024-08-06T22:14:26.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in Cisco Unified Communications Manager (CUCM) 6.x before 6.1(5)su2, 7.x before 7.1(5b)su3, 8.x before 8.0(3a)su1, and 8.5 before 8.5(1), and Cisco IOS 12.4 and 15.1, allows remote attackers to cause a denial of service (memory consumption and process failure or device reload) via a malformed SIP message, aka Bug IDs CSCti75128 and CSCtj09179. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=24525 - http://tools.cisco.com/security/center/con
erences: - http://tools.cisco.com/security/center/viewAlert.x?alertId=24525 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20110928-cucm
CVE ID: CVE-2011-0943 State: PUBLISHED Published: 2011-05-31T20:00:00Z Last Updated: 2024-09-16T20:11:25.922Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS XR 3.8.3, 3.8.4, and 3.9.1 allows remote attackers to cause a denial of service (NetIO process restart or device reload) via a crafted IPv4 packet, aka Bug ID CSCth44147. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b7f18e.shtml
CVE ID: CVE-2011-0944 State: PUBLISHED Published: 2011-10-03T23:00:00Z Last Updated: 2024-09-16T17:58:55.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS 12.4, 15.0, and 15.1 allows remote attackers to cause a denial of service (device reload) via malformed IPv6 packets, aka Bug ID CSCtj41194. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=24131 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b95d59.shtml
CVE ID: CVE-2011-0945 State: PUBLISHED Published: 2011-10-03T23:00:00Z Last Updated: 2024-09-17T02:36:37.440Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the Data-link switching (aka DLSw) feature in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1, and IOS XE 3.1.xS before 3.1.3S and 3.2.xS before 3.2.1S, when implemented over Fast Sequence Transport (FST), allows remote attackers to cause a denial of service (memory consumption and device reload or hang) via a crafted IP protocol 91 packet, aka Bug ID CSCth69364. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b95d4e.shtm
CVE Program Container: References: - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b95d4e.shtml - http://tools.cisco.com/security/center/viewAlert.x?alertId=24116
CVE ID: CVE-2011-0946 State: PUBLISHED Published: 2011-10-03T23:00:00Z Last Updated: 2024-09-16T18:08:26.260Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NAT implementation in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1, and IOS XE 3.1.xSG, allows remote attackers to cause a denial of service (device reload or hang) via malformed NetMeeting Directory (aka Internet Locator Service or ILS) LDAP traffic, aka Bug ID CSCtd10712. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=24117 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b95d4d.shtml
CVE ID: CVE-2011-0949 State: PUBLISHED Published: 2011-05-31T20:00:00Z Last Updated: 2024-09-17T03:27:44.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS XR 3.6.x, 3.8.x before 3.8.3, and 3.9.x before 3.9.1 does not properly remove sshd_lock files from /tmp/, which allows remote attackers to cause a denial of service (disk consumption) by making many SSHv1 connections, aka Bug ID CSCtd64417. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b7f18f.shtml
CVE ID: CVE-2011-0951 State: PUBLISHED Published: 2011-04-01T21:00:00 Last Updated: 2024-08-06T22:14:26.613Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web-based management interface in Cisco Secure Access Control System (ACS) 5.1 before 5.1.0.44.6 and 5.2 before 5.2.0.26.3 allows remote attackers to change arbitrary user passwords via unspecified vectors, aka Bug ID CSCtl77440. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43924 - http://securitytracker.com/id?1025271 - http://www.vupen.com/english/advisories/2011/0821 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b74117.shtml - https://exchange
ries/2011/0821 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b74117.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/66471 - http://www.securityfocus.com/bid/47093
CVE ID: CVE-2011-0959 State: PUBLISHED Published: 2011-05-20T22:00:00 Last Updated: 2024-08-06T22:14:26.542Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Cisco Unified Operations Manager (CUOM) before 8.6 allow remote attackers to inject arbitrary web script or HTML via (1) the extn parameter to iptm/advancedfind.do, (2) the deviceInstanceName parameter to iptm/ddv.do, the (3) cmd or (4) group parameter to iptm/eventmon, the (5) clusterName or (6) deviceName parameter to iptm/faultmon/ui/dojo/Main/eventmon_wrapper.jsp, or the (7) ccmName or (8) clusterName parameter to iptm/logicalTopo.do, aka Bug ID CSCtn61716. Additional
_wrapper.jsp, or the (7) ccmName or (8) clusterName parameter to iptm/logicalTopo.do, aka Bug ID CSCtn61716. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=23085 - http://www.senseofsecurity.com.au/advisories/SOS-11-006.pdf - http://archives.neohapsis.com/archives/fulldisclosure/2011-05/0371.html - http://www.exploit-db.com/exploits/17304 - https://exchange.xforce.ibmcloud.com/vulnerabilities/67521
CVE ID: CVE-2011-0960 State: PUBLISHED Published: 2011-05-20T22:00:00 Last Updated: 2024-08-06T22:14:26.483Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Cisco Unified Operations Manager (CUOM) before 8.6 allow remote attackers to execute arbitrary SQL commands via (1) the CCMs parameter to iptm/PRTestCreation.do or (2) the ccm parameter to iptm/TelePresenceReportAction.do, aka Bug ID CSCtn61716. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/47898 - http://tools.cisco.com/security/center/viewAlert.x?alertId=23086 - http://www.senseofsecurity.com.au/advisories/SOS-11-006.pdf - http://ar
.com/security/center/viewAlert.x?alertId=23086 - http://www.senseofsecurity.com.au/advisories/SOS-11-006.pdf - http://archives.neohapsis.com/archives/fulldisclosure/2011-05/0371.html - http://www.exploit-db.com/exploits/17304 - https://exchange.xforce.ibmcloud.com/vulnerabilities/67522
CVE ID: CVE-2011-0961 State: PUBLISHED Published: 2011-05-20T22:00:00 Last Updated: 2024-08-06T22:14:26.477Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in cwhp/device.center.do in the Help servlet in Cisco CiscoWorks Common Services 3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the device parameter, aka Bug ID CSCto12704. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/47902 - http://tools.cisco.com/security/center/viewAlert.x?alertId=23088 - https://exchange.xforce.ibmcloud.com/vulnerabilities/67523 - http://www.senseofsecurity.com.au/advisories/SOS
Id=23088 - https://exchange.xforce.ibmcloud.com/vulnerabilities/67523 - http://www.senseofsecurity.com.au/advisories/SOS-11-006.pdf - http://archives.neohapsis.com/archives/fulldisclosure/2011-05/0371.html - http://www.exploit-db.com/exploits/17304
CVE ID: CVE-2011-0962 State: PUBLISHED Published: 2011-05-20T22:00:00 Last Updated: 2024-08-06T22:14:26.588Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in CSCOnm/servlet/com.cisco.nm.help.ServerHelpEngine in the Common Services Device Center in Cisco Unified Operations Manager (CUOM) before 8.6 allows remote attackers to inject arbitrary web script or HTML via the tag parameter, aka Bug ID CSCto12712. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=23087 - http://www.senseofsecurity.com.au/advisories/SOS-11-006.pdf - http://archives.neohapsis.com/archives/fulld
ertId=23087 - http://www.senseofsecurity.com.au/advisories/SOS-11-006.pdf - http://archives.neohapsis.com/archives/fulldisclosure/2011-05/0371.html - http://www.exploit-db.com/exploits/17304 - https://exchange.xforce.ibmcloud.com/vulnerabilities/67524
CVE ID: CVE-2011-0963 State: PUBLISHED Published: 2011-03-31T22:00:00 Last Updated: 2024-08-06T22:14:26.455Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of the RADIUS authentication feature on the Cisco Network Admission Control (NAC) Guest Server with software before 2.0.3 allows remote attackers to bypass intended access restrictions and obtain network connectivity via unspecified vectors, aka Bug ID CSCtj66922. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1025272 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b74114.shtml
CVE ID: CVE-2011-0966 State: PUBLISHED Published: 2011-05-20T22:00:00 Last Updated: 2024-08-06T22:14:26.470Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in cwhp/auditLog.do in the Homepage Auditing component in Cisco CiscoWorks Common Services 3.3 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter, aka Bug ID CSCto35577. Additional Analyst Notes: - CVE Program Container: References: - http://www.senseofsecurity.com.au/advisories/SOS-11-006.pdf - http://archives.neohapsis.com/archives/fulldisclosure/2011-05/0371.html - http://www.exploit-db.com/exploits/17304 - https://exchange.xforce.ibmcloud.c
rchives/fulldisclosure/2011-05/0371.html - http://www.exploit-db.com/exploits/17304 - https://exchange.xforce.ibmcloud.com/vulnerabilities/67525 - http://tools.cisco.com/security/center/viewAlert.x?alertId=23089
CVE ID: CVE-2011-0975 State: PUBLISHED Published: 2011-02-10T17:00:00 Last Updated: 2024-08-06T22:14:26.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in BMC PATROL Agent Service Daemon for in Performance Analysis for Servers, Performance Assurance for Servers, and Performance Assurance for Virtual Servers 7.4.00 through 7.5.10; Performance Analyzer and Performance Predictor for Servers 7.4.00 through 7.5.10; and Capacity Management Essentials 1.2.00 (7.4.15) allows remote attackers to execute arbitrary code via a crafted length value in a BGS_MULTIPLE_READS command to TCP port 6768. Additional Analyst Notes: - CVE Program Container: References: -
value in a BGS_MULTIPLE_READS command to TCP port 6768. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/8076 - http://www.vupen.com/english/advisories/2011/0286 - http://osvdb.org/70788 - http://www.zerodayinitiative.com/advisories/ZDI-11-039 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65135 - http://www.securityfocus.com/bid/46151 - http://secunia.com/advisories/43177 - http://www.securityfocus.com/archive/1/516188/100/0/threaded
CVE ID: CVE-2011-0976 State: PUBLISHED Published: 2011-02-10T18:00:00 Last Updated: 2024-08-06T22:14:26.490Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft PowerPoint 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2; and PowerPoint Viewer 2007 SP2 do not properly handle Office Art containers that have invalid records, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a PowerPoint document with a container that triggers certain access to an uninitialized object, aka "OfficeArt Ato
) via a PowerPoint document with a container that triggers certain access to an uninitialized object, aka "OfficeArt Atom RCE Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-022 - http://www.us-cert.gov/cas/techalerts/TA11-102A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11978 - http://www.securitytracker.com/id?1025340 - http://www.securityfocus.com/archive/1/516233/100/0/threaded - http://dvlabs.tippingpoint.com/blog/2011/02/07/zdi-disclosure-microsoft - http://zerodayinitiative.com/advisories/ZDI-11-044/ - http://www.vupen.com/eng
log/2011/02/07/zdi-disclosure-microsoft - http://zerodayinitiative.com/advisories/ZDI-11-044/ - http://www.vupen.com/english/advisories/2011/0941 - http://secunia.com/advisories/43213
CVE ID: CVE-2011-0977 State: PUBLISHED Published: 2011-02-10T18:00:00 Last Updated: 2024-08-06T22:14:26.457Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via malformed shape data in the Office drawing file format, aka "Microsoft Office Graphic Object Dereferencing Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA11-102A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/201
/www.us-cert.gov/cas/techalerts/TA11-102A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-023 - http://secunia.com/advisories/43216 - http://www.vupen.com/english/advisories/2011/0942 - http://zerodayinitiative.com/advisories/ZDI-11-043/ - http://dvlabs.tippingpoint.com/blog/2011/02/07/zdi-disclosure-microsoft - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12339 - http://secunia.com/advisories/44015 - http://www.securitytracker.com/id?1025343
CVE ID: CVE-2011-0978 State: PUBLISHED Published: 2011-02-10T18:00:00 Last Updated: 2024-08-06T22:14:26.632Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Microsoft Excel 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 allows remote attackers to execute arbitrary code via vectors related to an axis properties record, and improper incrementing of an array index, aka "Excel Array Indexing Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ov
tes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12439 - http://www.us-cert.gov/cas/techalerts/TA11-102A.html - http://secunia.com/advisories/39122 - http://dvlabs.tippingpoint.com/blog/2011/02/07/zdi-disclosure-microsoft - http://secunia.com/advisories/43232 - http://zerodayinitiative.com/advisories/ZDI-11-042/ - http://www.securitytracker.com/id?1025337 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-021 - http://securityreason.com/securityalert/8231 - http://www.vupen.com/english/advisories/2011/0940
CVE ID: CVE-2011-0979 State: PUBLISHED Published: 2011-02-10T18:00:00 Last Updated: 2024-08-06T22:14:26.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Excel 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004, 2008, and 2011 for Mac; Open XML File Format Converter for Mac; and Excel Viewer SP2 do not properly handle errors during the parsing of Office Art records in Excel spreadsheets, which allows remote attackers to execute arbitrary code via a malformed object record, related to a "stray reference," aka "Excel Linked List Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA11-102A.ht
ty." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA11-102A.html - http://secunia.com/advisories/39122 - http://secunia.com/advisories/43231 - http://dvlabs.tippingpoint.com/blog/2011/02/07/zdi-disclosure-microsoft - http://zerodayinitiative.com/advisories/ZDI-11-041/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12595 - http://www.securitytracker.com/id?1025337 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-021 - http://osvdb.org/70904 - http://www.vupen.com/english/advisories/2011/0940
CVE ID: CVE-2011-0980 State: PUBLISHED Published: 2011-02-10T18:00:00 Last Updated: 2024-08-06T22:14:26.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly parse Office Art objects, which allows remote attackers to execute arbitrary code via vectors related to a function pointer, aka "Excel Dangling Pointer Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://zerodayinitiative.com/advisories/ZDI-11-040/ - http://www.us-cert.gov/cas/techalerts/TA11-102A.html - http://secunia.com/advisories/39122 - http://dvlabs.tippingpo
/ - http://www.us-cert.gov/cas/techalerts/TA11-102A.html - http://secunia.com/advisories/39122 - http://dvlabs.tippingpoint.com/blog/2011/02/07/zdi-disclosure-microsoft - http://www.securitytracker.com/id?1025337 - http://secunia.com/advisories/43210 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-021 - http://www.vupen.com/english/advisories/2011/0940 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12018
CVE ID: CVE-2011-0981 State: PUBLISHED Published: 2011-02-10T18:00:00 Last Updated: 2024-08-06T22:14:26.851Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 9.0.597.94 does not properly perform event handling for animations, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43368 - http://support.apple.com/kb/HT4981 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html