Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2012-1167 State: PUBLISHED Published: 2012-11-23T20:00:00 Last Updated: 2024-08-06T18:53:35.669Z Vendors: n/a Products: n/a Problem Types: n/a Description: The JBoss Server in JBoss Enterprise Application Platform 5.1.x before 5.1.2 and 5.2.x before 5.2.2, Web Platform before 5.1.2, BRMS Platform before 5.3.0, and SOA Platform before 5.3.0, when the server is configured to use the JaccAuthorizationRealm and the ignoreBaseDecision property is set to true on the JBossWebRealm, does not properly check the permissions created by the WebPermissionMapping class, which allows remote authenticated users to access arbitrary applications. Additional Analyst Notes: - CVE Program Container:
allows remote authenticated users to access arbitrary applications. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=802622 - http://rhn.redhat.com/errata/RHSA-2012-1028.html - http://secunia.com/advisories/49658 - http://secunia.com/advisories/49635 - http://rhn.redhat.com/errata/RHSA-2012-1027.html - http://rhn.redhat.com/errata/RHSA-2012-1013.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/76680 - http://rhn.redhat.com/errata/RHSA-2012-1026.html - http://secunia.com/advisories/50549 - http://rhn.redhat.com/errata/RHSA-2012-1014.html - http://www.securityfocus.com/bid/54089 - http://securitytracker.com/id?1027501 - ht
hat.com/errata/RHSA-2012-1014.html - http://www.securityfocus.com/bid/54089 - http://securitytracker.com/id?1027501 - http://rhn.redhat.com/errata/RHSA-2012-1232.html - http://rhn.redhat.com/errata/RHSA-2012-1125.html
CVE ID: CVE-2012-1168 State: PUBLISHED Published: 2019-11-14T15:56:53 Last Updated: 2024-08-06T18:53:35.678Z Vendors: Moodle Products: Moodle Problem Types: UNKNOWN_TYPE Description: Moodle before 2.2.2 has a password and web services issue where when the user profile is updated the user password is reset if not specified. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078209.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-May/081047.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078210.html - https://security-tracker.debian.org/tracker/CVE-2012-1168 - htt
.org/pipermail/package-announce/2012-April/078210.html - https://security-tracker.debian.org/tracker/CVE-2012-1168 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-1168 - https://access.redhat.com/security/cve/cve-2012-1168 - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077635.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080712.html - https://moodle.org/mod/forum/discuss.php?d=198622
CVE ID: CVE-2012-1169 State: PUBLISHED Published: 2019-11-14T16:26:14 Last Updated: 2024-08-06T18:53:35.717Z Vendors: Moodle Products: Moodle Problem Types: UNKNOWN_TYPE Description: Moodle before 2.2.2 has Personal information disclosure, when administrative setting users name display is set to first name only full names are shown in page breadcrumbs. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078209.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-May/081047.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078210.html - https://security-tracker.debian.o
l - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078210.html - https://security-tracker.debian.org/tracker/CVE-2012-1169 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-1169 - https://access.redhat.com/security/cve/cve-2012-1169 - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077635.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080712.html - https://moodle.org/mod/forum/discuss.php?d=198625
CVE ID: CVE-2012-1170 State: PUBLISHED Published: 2019-11-14T16:29:28 Last Updated: 2024-08-06T18:53:36.290Z Vendors: Moodle Products: Moodle Problem Types: multiple security fixes in 2.2.2, 2.1.5, 2.0.8, 1.9.17 Description: Moodle before 2.2.2 has an external enrolment plugin context check issue where capability checks are not thorough Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078209.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-May/081047.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078210.html - https://security-tracker.debian.org/tracker/CVE-2
.fedoraproject.org/pipermail/package-announce/2012-April/078210.html - https://security-tracker.debian.org/tracker/CVE-2012-1170 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-1170 - https://access.redhat.com/security/cve/cve-2012-1170 - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077635.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080712.html - https://moodle.org/mod/forum/discuss.php?d=198632
CVE ID: CVE-2012-1171 State: PUBLISHED Published: 2014-02-15T11:00:00 Last Updated: 2024-08-06T18:53:35.647Z Vendors: n/a Products: n/a Problem Types: n/a Description: The libxml RSHUTDOWN function in PHP 5.x allows remote attackers to bypass the open_basedir protection mechanism and read arbitrary files via vectors involving a stream_close method call during use of a custom stream wrapper. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=802591 - https://github.com/php/php-src/blob/master/ext/libxml/tests/bug61367-write.phpt - https://bugs.php.net/bug.php?id=61367 - https://github.com/php/php-src/blob/master/ext/libxml/tests/bug613
-write.phpt - https://bugs.php.net/bug.php?id=61367 - https://github.com/php/php-src/blob/master/ext/libxml/tests/bug61367-read.phpt
CVE ID: CVE-2012-1172 State: PUBLISHED Published: 2012-05-24T00:00:00 Last Updated: 2024-08-06T18:53:35.660Z Vendors: n/a Products: n/a Problem Types: n/a Description: The file-upload implementation in rfc1867.c in PHP before 5.4.0 does not properly handle invalid [ (open square bracket) characters in name values, which makes it easier for remote attackers to cause a denial of service (malformed $_FILES indexes) or conduct directory traversal attacks during multi-file uploads by leveraging a script that lacks its own filename restrictions. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=134012830914727&w=2 - http://svn.php.net/viewvc/php/php-src
ogram Container: References: - http://marc.info/?l=bugtraq&m=134012830914727&w=2 - http://svn.php.net/viewvc/php/php-src/branches/PHP_5_4/main/rfc1867.c?r1=321664&r2=321663&pathrev=321664 - http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080070.html - https://bugs.php.net/bug.php?id=54374 - http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00011.html - https://bugs.php.net/bug.php?id=49683 - https://nealpoole.com/blog/2011/10/directory-traversal-via-php-multi-file-uploads/ - http://svn.php.net/viewvc?view=revision&revision=321664 - http://openwall.com/lists/oss-security/2012/03/13/4 - https://bugs.php.net/bug.php?id=48597 - http://lists.opensuse.org/opensuse-
enwall.com/lists/oss-security/2012/03/13/4 - https://bugs.php.net/bug.php?id=48597 - http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00007.html - http://isisblogs.poly.edu/2011/08/11/php-not-properly-checking-params/ - http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.html - http://support.apple.com/kb/HT5501 - https://students.mimuw.edu.pl/~ai292615/php_multipleupload_overwrite.pdf - http://www.php.net/ChangeLog-5.php#5.4.0 - http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080041.html - http://marc.info/?l=bugtraq&m=134012830914727&w=2 - http://www.debian.org/security/2012/dsa-2465 - http://lists.fedoraproject.org/pipermail/package-announ
12830914727&w=2 - http://www.debian.org/security/2012/dsa-2465 - http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080037.html - https://bugs.php.net/bug.php?id=55500
CVE ID: CVE-2012-1173 State: PUBLISHED Published: 2012-06-04T20:00:00 Last Updated: 2024-08-06T18:53:35.683Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in tiff_getimage.c in LibTIFF 3.9.4 allow remote attackers to execute arbitrary code via a crafted tile size in a TIFF file, which is not properly handled by the (1) gtTileSeparate or (2) gtStripSeparate function, leading to a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078835.html - http://bugzilla.maptools.org/attachment.cgi?id=477&action=diff - https://hermes.opensuse.org/messages/
ril/078835.html - http://bugzilla.maptools.org/attachment.cgi?id=477&action=diff - https://hermes.opensuse.org/messages/14302713 - http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html - http://secunia.com/advisories/48722 - http://support.apple.com/kb/HT5503 - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077463.html - http://www.osvdb.org/81025 - http://rhn.redhat.com/errata/RHSA-2012-0468.html - http://secunia.com/advisories/48893 - http://www.securitytracker.com/id?1026895 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74656 - http://secunia.com/advisories/48757 - http://home.gdal.org/private/zdi-can-1221/zdi-can-1221.txt - http://lists.f
4656 - http://secunia.com/advisories/48757 - http://home.gdal.org/private/zdi-can-1221/zdi-can-1221.txt - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078403.html - http://www.securityfocus.com/bid/52891 - http://security.gentoo.org/glsa/glsa-201209-02.xml - http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.html - http://www.mandriva.com/security/advisories?name=MDVSA-2012:054 - http://support.apple.com/kb/HT5501 - http://ubuntu.com/usn/usn-1416-1 - http://bugzilla.maptools.org/show_bug.cgi?id=2369 - http://www.debian.org/security/2012/dsa-2447 - http://secunia.com/advisories/48735 - https://downloads.avaya.com/css/P8/documents/100161772 - http://sec
012/dsa-2447 - http://secunia.com/advisories/48735 - https://downloads.avaya.com/css/P8/documents/100161772 - http://secunia.com/advisories/48684 - http://secunia.com/advisories/50726
CVE ID: CVE-2012-1174 State: PUBLISHED Published: 2012-07-12T20:00:00 Last Updated: 2024-08-06T18:53:35.751Z Vendors: n/a Products: n/a Problem Types: n/a Description: The rm_rf_children function in util.c in the systemd-logind login manager in systemd before 44, when logging out, allows local users to delete arbitrary files via a symlink attack on unspecified files, related to "particular records related with user session." Additional Analyst Notes: - CVE Program Container: References: - http://cgit.freedesktop.org/systemd/systemd/commit/?id=5ebff5337594d690b322078c512eb222d34aaa82 - https://bugzilla.redhat.com/show_bug.cgi?id=803358 - http://lists.fedoraproject.org/pipermail/package-announ
2d34aaa82 - https://bugzilla.redhat.com/show_bug.cgi?id=803358 - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/079075.html - http://www.openwall.com/lists/oss-security/2012/03/16/21 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:030
CVE ID: CVE-2012-1175 State: PUBLISHED Published: 2012-08-26T20:00:00Z Last Updated: 2024-08-06T18:53:36.429Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the GnashImage::size method in libbase/GnashImage.h in GNU Gnash 0.8.10 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted SWF file, which triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/03/14/5 - http://git.savannah.gnu.org/cgit/gnash.git/commit/?id=bb4dc77eecb6ed1b967e3ecbce3dac6c5e6f1527 - http://secunia.com/advisories/47183 - http://www.secu
it/gnash.git/commit/?id=bb4dc77eecb6ed1b967e3ecbce3dac6c5e6f1527 - http://secunia.com/advisories/47183 - http://www.securityfocus.com/bid/52446 - http://www.debian.org/security/2012/dsa-2435 - https://bugzilla.redhat.com/show_bug.cgi?id=803443 - http://www.openwall.com/lists/oss-security/2012/03/14/6 - http://secunia.com/advisories/48466
CVE ID: CVE-2012-1176 State: PUBLISHED Published: 2012-08-26T20:00:00 Last Updated: 2024-08-06T18:53:35.747Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the fribidi_utf8_to_unicode function in PyFriBidi before 0.11.0 allows remote attackers to cause a denial of service (application crash) via a 4-byte utf-8 sequence. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/03/14/9 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74001 - https://github.com/pediapress/pyfribidi/commit/d2860c655357975e7b32d84e6b45e98f0dcecd7a - http://groups.google.com/group/linux.debian.bugs.dist/browse_thread/threa
mit/d2860c655357975e7b32d84e6b45e98f0dcecd7a - http://groups.google.com/group/linux.debian.bugs.dist/browse_thread/thread/aacd036037217998/8d095f85f3665bff?lnk=raot - http://lists.fedoraproject.org/pipermail/package-announce/2012-March/076038.html - http://www.openwall.com/lists/oss-security/2012/03/14/4 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=663189 - https://bugzilla.redhat.com/show_bug.cgi?id=801896 - https://bugzilla.wikimedia.org/show_bug.cgi?id=35055 - http://www.securityfocus.com/bid/52451 - http://lists.fedoraproject.org/pipermail/package-announce/2012-March/075293.html - https://github.com/pediapress/pyfribidi/issues/2%29: - http://lists.fedoraproject.org/pipermail/packag
rch/075293.html - https://github.com/pediapress/pyfribidi/issues/2%29: - http://lists.fedoraproject.org/pipermail/package-announce/2012-March/076053.html
CVE ID: CVE-2012-1177 State: PUBLISHED Published: 2012-08-26T20:00:00 Last Updated: 2024-08-06T18:53:35.665Z Vendors: n/a Products: n/a Problem Types: n/a Description: libgdata before 0.10.2 and 0.11.x before 0.11.1 does not validate SSL certificates, which allows remote attackers to obtain user names and passwords via a man-in-the-middle (MITM) attack with a spoofed certificate. Additional Analyst Notes: - CVE Program Container: References: - http://git.gnome.org/browse/libgdata/commit/?h=libgdata-0-10&id=8eff8fa9138859e03e58c2aa76600ab63eb5c29c - https://bugzilla.novell.com/show_bug.cgi?id=752088 - http://www.openwall.com/lists/oss-security/2012/03/14/8 - http://www.openwall.com/lists/oss-
om/show_bug.cgi?id=752088 - http://www.openwall.com/lists/oss-security/2012/03/14/8 - http://www.openwall.com/lists/oss-security/2012/03/14/1 - http://www.debian.org/security/2012/dsa-2482 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:111 - https://bugs.launchpad.net/ubuntu/+source/libgdata/+bug/938812 - https://bugzilla.gnome.org/show_bug.cgi?id=671535 - http://git.gnome.org/browse/libgdata/commit/?id=6799f2c525a584dc998821a6ce897e463dad7840 - http://www.openwall.com/lists/oss-security/2012/03/14/3 - http://secunia.com/advisories/50432 - http://www.ubuntu.com/usn/USN-1547-1
CVE ID: CVE-2012-1178 State: PUBLISHED Published: 2012-03-15T10:00:00 Last Updated: 2024-08-06T18:53:36.060Z Vendors: n/a Products: n/a Problem Types: n/a Description: The msn_oim_report_to_user function in oim.c in the MSN protocol plugin in libpurple in Pidgin before 2.10.2 allows remote servers to cause a denial of service (application crash) via an OIM message that lacks UTF-8 encoding. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18019 - http://developer.pidgin.im/ticket/14884 - http://pidgin.im/news/security/?id=61 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:029
/ticket/14884 - http://pidgin.im/news/security/?id=61 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:029 - http://www.securityfocus.com/bid/52475 - http://developer.pidgin.im/viewmtn/revision/info/3053d6a37cc6d8774aba7607b992a4408216adcd - http://secunia.com/advisories/50005 - http://rhn.redhat.com/errata/RHSA-2012-1102.html - http://developer.pidgin.im/viewmtn/revision/diff/60f8379d0a610538cf42e0dd9ab1436c8b9308cd/with/3053d6a37cc6d8774aba7607b992a4408216adcd/libpurple/protocols/msn/oim.c
CVE ID: CVE-2012-1179 State: PUBLISHED Published: 2012-05-17T10:00:00 Last Updated: 2024-08-06T18:53:35.691Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Linux kernel before 3.3.1, when KVM is used, allows guest OS users to cause a denial of service (host OS crash) by leveraging administrative access to the guest OS, related to the pmd_none_or_clear_bad function and page faults for huge pages. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2012-0743.html - http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00021.html - http://www.securitytracker.com/id?1027084 - http://secunia.com/advisories/48898 - http://www
nce/2012-04/msg00021.html - http://www.securitytracker.com/id?1027084 - http://secunia.com/advisories/48898 - http://www.openwall.com/lists/oss-security/2012/03/15/7 - https://github.com/torvalds/linux/commit/4a1d704194a441bf83c636004a479e01360ec850 - https://bugzilla.redhat.com/show_bug.cgi?id=803793 - http://secunia.com/advisories/48404 - http://lists.fedoraproject.org/pipermail/package-announce/2012-March/075781.html - http://marc.info/?l=bugtraq&m=139447903326211&w=2 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.3.1
CVE ID: CVE-2012-1180 State: PUBLISHED Published: 2012-04-17T21:00:00 Last Updated: 2024-08-06T18:53:35.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in nginx before 1.0.14 and 1.1.x before 1.1.17 allows remote HTTP servers to obtain sensitive information from process memory via a crafted backend response, in conjunction with a client request. Additional Analyst Notes: - CVE Program Container: References: - https://hermes.opensuse.org/messages/14173096 - http://trac.nginx.org/nginx/changeset/4531/nginx - http://osvdb.org/80124 - http://www.debian.org/security/2012/dsa-2434 - http://lists.fedoraproject.org/pipermail/package-announce/2012-March/07
- http://www.debian.org/security/2012/dsa-2434 - http://lists.fedoraproject.org/pipermail/package-announce/2012-March/076671.html - http://www.openwall.com/lists/oss-security/2012/03/15/5 - http://secunia.com/advisories/48465 - http://nginx.org/en/security_advisories.html - http://www.openwall.com/lists/oss-security/2012/03/15/9 - http://nginx.org/download/patch.2012.memory.txt - http://secunia.com/advisories/48577 - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077966.html - http://trac.nginx.org/nginx/changeset/4530/nginx - http://lists.fedoraproject.org/pipermail/package-announce/2012-March/076646.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/74191 - h
t.org/pipermail/package-announce/2012-March/076646.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/74191 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:043 - https://bugzilla.redhat.com/show_bug.cgi?id=803856 - http://security.gentoo.org/glsa/glsa-201203-22.xml - http://seclists.org/bugtraq/2012/Mar/65 - http://www.securitytracker.com/id?1026827 - http://www.securityfocus.com/bid/52578
CVE ID: CVE-2012-1181 State: PUBLISHED Published: 2012-03-19T21:00:00 Last Updated: 2024-08-06T18:53:35.665Z Vendors: n/a Products: n/a Problem Types: n/a Description: fcgid_spawn_ctl.c in the mod_fcgid module 2.3.6 for the Apache HTTP Server does not recognize the FcgidMaxProcessesPerClass directive for a virtual host, which makes it easier for remote attackers to cause a denial of service (memory consumption) via a series of HTTP requests that triggers a process count higher than the intended limit. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/03/16/2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74181 - http://ww
ww.openwall.com/lists/oss-security/2012/03/16/2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74181 - http://www.debian.org/security/2012/dsa-2436 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=615814 - http://www.securityfocus.com/bid/52565 - https://issues.apache.org/bugzilla/show_bug.cgi?id=49902 - http://www.openwall.com/lists/oss-security/2012/03/15/10
CVE ID: CVE-2012-1182 State: PUBLISHED Published: 2012-04-10T21:00:00 Last Updated: 2024-08-06T18:53:36.132Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RPC code generator in Samba 3.x before 3.4.16, 3.5.x before 3.5.14, and 3.6.x before 3.6.4 does not implement validation of an array length in a manner consistent with validation of array memory allocation, which allows remote attackers to execute arbitrary code via a crafted RPC call. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2012:055 - http://www.samba.org/samba/history/samba-3.6.4.html - http://lists.opensuse.org/opensuse-security-announce/201
012:055 - http://www.samba.org/samba/history/samba-3.6.4.html - http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00007.html - https://www.samba.org/samba/security/CVE-2012-1182 - http://secunia.com/advisories/48751 - http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00014.html - http://www.debian.org/security/2012/dsa-2450 - http://marc.info/?l=bugtraq&m=134323086902585&w=2 - http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00008.html - http://secunia.com/advisories/48844 - http://www.ubuntu.com/usn/USN-1423-1 - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078726.html - http://lists.fedoraproject.org/pipermail/package-announ
aproject.org/pipermail/package-announce/2012-April/078726.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078836.html - http://secunia.com/advisories/48816 - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078258.html - http://marc.info/?l=bugtraq&m=133951282306605&w=2 - http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00009.html - http://secunia.com/advisories/48879 - http://secunia.com/advisories/48754 - http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080567.html - http://www.securitytracker.com/id?1026913 - http://secunia.com/advisories/48818 - http://www.collax.com/produkte/AllinOne-server-for-small-busine
r.com/id?1026913 - http://secunia.com/advisories/48818 - http://www.collax.com/produkte/AllinOne-server-for-small-businesses#id2565578 - http://secunia.com/advisories/48999 - http://marc.info/?l=bugtraq&m=133951282306605&w=2 - http://support.apple.com/kb/HT5281 - http://lists.apple.com/archives/security-announce/2012/May/msg00001.html - http://marc.info/?l=bugtraq&m=134323086902585&w=2 - http://secunia.com/advisories/48873
CVE ID: CVE-2012-1183 State: PUBLISHED Published: 2012-09-18T18:00:00 Last Updated: 2024-08-06T18:53:35.794Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the milliwatt_generate function in the Miliwatt application in Asterisk 1.4.x before 1.4.44, 1.6.x before 1.6.2.23, 1.8.x before 1.8.10.1, and 10.x before 10.2.1, when the o option is used and the internal_timing option is off, allows remote attackers to cause a denial of service (application crash) via a large number of samples in an audio packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2012/dsa-2460 - http://www.openwall.com/lists/oss-secu