Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-2787 State: PUBLISHED Published: 2011-04-27T00:00:00 Last Updated: 2024-08-07T02:46:48.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: api.php in MediaWiki before 1.15.5 does not prevent use of public caching headers for private data, which allows remote attackers to bypass intended access restrictions and obtain sensitive information by retrieving documents from an HTTP proxy cache that has been used by a victim. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058588.html - https://bugzilla.redhat.com/show_bug.cgi?id=620226 - http://lists.fedoraproject.org/pipermail/package
pril/058588.html - https://bugzilla.redhat.com/show_bug.cgi?id=620226 - http://lists.fedoraproject.org/pipermail/package-announce/2011-April/059235.html - http://openwall.com/lists/oss-security/2010/07/29/4 - http://svn.wikimedia.org/viewvc/mediawiki?view=revision&revision=69776 - https://bugzilla.wikimedia.org/show_bug.cgi?id=24565 - http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058910.html - http://lists.wikimedia.org/pipermail/mediawiki-announce/2010-July/000092.html - http://www.securityfocus.com/bid/42019 - http://lists.fedoraproject.org/pipermail/package-announce/2011-April/059232.html - https://bugzilla.redhat.com/show_bug.cgi?id=620224
CVE ID: CVE-2010-2788 State: PUBLISHED Published: 2011-04-27T00:00:00 Last Updated: 2024-08-07T02:46:48.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in profileinfo.php in MediaWiki before 1.15.5, when wgEnableProfileInfo is enabled, allows remote attackers to inject arbitrary web script or HTML via the filter parameter. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=620225 - http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058588.html - https://bugzilla.redhat.com/show_bug.cgi?id=620226 - http://lists.fedoraproject.org/pipermail/package-announce/2011-A
- https://bugzilla.redhat.com/show_bug.cgi?id=620226 - http://lists.fedoraproject.org/pipermail/package-announce/2011-April/059235.html - http://openwall.com/lists/oss-security/2010/07/29/4 - http://www.securityfocus.com/bid/42024 - http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058910.html - http://lists.wikimedia.org/pipermail/mediawiki-announce/2010-July/000092.html - http://svn.wikimedia.org/viewvc/mediawiki?view=revision&revision=69952 - http://lists.fedoraproject.org/pipermail/package-announce/2011-April/059232.html - http://svn.wikimedia.org/viewvc/mediawiki?view=revision&revision=69984
CVE ID: CVE-2010-2789 State: PUBLISHED Published: 2011-04-27T00:00:00Z Last Updated: 2024-09-17T02:52:03.664Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in MediaWikiParserTest.php in MediaWiki 1.16 beta, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2010/07/29/4 - http://lists.wikimedia.org/pipermail/mediawiki-announce/2010-July/000092.html
CVE ID: CVE-2010-2790 State: PUBLISHED Published: 2010-08-04T19:00:00 Last Updated: 2024-08-07T02:46:48.224Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the formatQuery function in frontends/php/include/classes/class.curl.php in Zabbix before 1.8.3rc1 allow remote attackers to inject arbitrary web script or HTML via the (1) filter_set, (2) show_details, (3) filter_rst, or (4) txt_select parameters to the triggers page (tr_status.php). NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.zabbix.com/forum/showthread.php?p=68770 - ht
Additional Analyst Notes: - CVE Program Container: References: - http://www.zabbix.com/forum/showthread.php?p=68770 - https://exchange.xforce.ibmcloud.com/vulnerabilities/60772 - http://www.vupen.com/english/advisories/2010/1908 - http://secunia.com/advisories/40679 - https://support.zabbix.com/browse/ZBX-2326 - http://www.securityfocus.com/bid/42017
CVE ID: CVE-2010-2791 State: PUBLISHED Published: 2010-08-05T18:00:00 Last Updated: 2024-08-07T02:46:47.753Z Vendors: n/a Products: n/a Problem Types: n/a Description: mod_proxy in httpd in Apache HTTP Server 2.2.9, when running on Unix, does not close the backend connection if a timeout occurs when reading a response from a persistent connection, which allows remote attackers to obtain a potentially sensitive response intended for a different client in opportunistic circumstances via a normal HTTP request. NOTE: this is the same issue as CVE-2010-2068, but for a different OS and set of affected versions. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforc
OS and set of affected versions. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/60883 - http://www.redhat.com/support/errata/RHSA-2010-0659.html - http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html - http://www.securityfocus.com/bid/42102 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:150 - http://www.openwall.com/lists/oss-security/2010/07/30/1 - https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.
E - https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r688df6f16f141e966a0a47f817e55
f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r688df6f16f141e966a0a47f817e559312b3da27886f59116a94b273d%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/re2e23465bbdb17ffe109d21b4f192e6b58221cd7aa8797d530b4cd75%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r1d201e3da31a2c8aa870c8314623caef7debd74a13d0f25205e26f15%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apa
g/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r064df0985779b7ee044d3120d71ba59750427cf53f57ba3384e3773f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2010-2792 State: PUBLISHED Published: 2010-08-30T19:00:00 Last Updated: 2024-08-07T02:46:48.454Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the SPICE (aka spice-xpi) plug-in 2.2 for Firefox allows local users to obtain sensitive information, and conduct man-in-the-middle attacks, by providing a UNIX socket for communication between this plug-in and the client (aka qspice-client) in qspice 0.3.0, and then accessing this socket. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/67619 - http://www.redhat.com/support/errata/RHSA-2010-0651.html - http://secunia.com/advisories/41120 - https://bugzilla.redhat.com/show_bug
dhat.com/support/errata/RHSA-2010-0651.html - http://secunia.com/advisories/41120 - https://bugzilla.redhat.com/show_bug.cgi?id=620350 - http://www.vupen.com/english/advisories/2010/2181 - http://www.redhat.com/support/errata/RHSA-2010-0632.html - http://www.securityfocus.com/bid/42711
CVE ID: CVE-2010-2793 State: PUBLISHED Published: 2010-12-08T17:00:00Z Last Updated: 2024-08-07T02:46:48.219Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the SPICE (aka spice-activex) plug-in for Internet Explorer in Red Hat Enterprise Virtualization (RHEV) Manager before 2.2.4 allows local users to create a certain named pipe, and consequently gain privileges, via vectors involving knowledge of the name of this named pipe, in conjunction with use of the ImpersonateNamedPipeClient function. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1024825 - https://bugzilla.redhat.com/show_bug.cgi?id=620355 - http://www.se
References: - http://securitytracker.com/id?1024825 - https://bugzilla.redhat.com/show_bug.cgi?id=620355 - http://www.securityfocus.com/bid/45213 - https://rhn.redhat.com/errata/RHSA-2010-0818.html
CVE ID: CVE-2010-2794 State: PUBLISHED Published: 2010-08-30T19:00:00 Last Updated: 2024-08-07T02:46:48.184Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SPICE (aka spice-xpi) plug-in 2.2 for Firefox allows local users to overwrite arbitrary files via a symlink attack on an unspecified log file. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2010-0651.html - https://bugzilla.redhat.com/show_bug.cgi?id=620356 - http://secunia.com/advisories/41120 - http://www.vupen.com/english/advisories/2010/2181 - http://osvdb.org/67620
CVE ID: CVE-2010-2795 State: PUBLISHED Published: 2010-08-05T18:00:00 Last Updated: 2024-08-07T02:46:48.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpCAS before 1.1.2 allows remote authenticated users to hijack sessions via a query string containing a crafted ticket value. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2011/dsa-2172 - http://www.vupen.com/english/advisories/2011/0456 - http://secunia.com/advisories/41240 - http://secunia.com/advisories/40845 - http://lists.fedoraproject.org/pipermail/package-announce/2010-August/046576.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/60894 - https://issues.jasig
age-announce/2010-August/046576.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/60894 - https://issues.jasig.org/browse/PHPCAS-61 - http://www.vupen.com/english/advisories/2010/2909 - https://wiki.jasig.org/display/CASC/phpCAS+ChangeLog - http://www.vupen.com/english/advisories/2010/2261 - http://secunia.com/advisories/42149 - https://forge.indepnet.net/projects/glpi/repository/revisions/12601 - http://lists.fedoraproject.org/pipermail/package-announce/2010-August/046584.html - http://secunia.com/advisories/43427 - http://www.securityfocus.com/bid/42162 - http://www.vupen.com/english/advisories/2010/2234 - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/05
/www.vupen.com/english/advisories/2010/2234 - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050428.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050415.html - http://secunia.com/advisories/42184
CVE ID: CVE-2010-2796 State: PUBLISHED Published: 2010-08-05T18:00:00 Last Updated: 2024-08-07T02:46:48.033Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in phpCAS before 1.1.2, when proxy mode is enabled, allows remote attackers to inject arbitrary web script or HTML via a callback URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2011/dsa-2172 - http://www.vupen.com/english/advisories/2011/0456 - https://issues.jasig.org/browse/PHPCAS-67 - http://secunia.com/advisories/41240 - http://secunia.com/advisories/40845 - http://lists.fedoraproject.org/pipermail/package-announce/2010-August/04
s/41240 - http://secunia.com/advisories/40845 - http://lists.fedoraproject.org/pipermail/package-announce/2010-August/046576.html - http://www.securityfocus.com/bid/42160 - http://www.vupen.com/english/advisories/2010/2909 - https://wiki.jasig.org/display/CASC/phpCAS+ChangeLog - http://www.vupen.com/english/advisories/2010/2261 - http://secunia.com/advisories/42149 - https://forge.indepnet.net/projects/glpi/repository/revisions/12601 - http://lists.fedoraproject.org/pipermail/package-announce/2010-August/046584.html - http://secunia.com/advisories/43427 - https://exchange.xforce.ibmcloud.com/vulnerabilities/60895 - http://www.vupen.com/english/advisories/2010/2234 - http://lists.fedoraprojec
force.ibmcloud.com/vulnerabilities/60895 - http://www.vupen.com/english/advisories/2010/2234 - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050428.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050415.html - http://secunia.com/advisories/42184
CVE ID: CVE-2010-2797 State: PUBLISHED Published: 2010-10-08T20:00:00Z Last Updated: 2024-09-17T02:53:33.918Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in lib/translation.functions.php in CMS Made Simple before 1.8.1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the default_cms_lang parameter to an admin script, as demonstrated by admin/addbookmark.php, a different vulnerability than CVE-2008-5642. Additional Analyst Notes: - CVE Program Container: References: - http://www.cmsmadesimple.org/2010/07/3/announcing-cms-made-simple-1-8-1-mankara/ - http://www.openwall.com/lists/oss-security/2010/08/01/
esimple.org/2010/07/3/announcing-cms-made-simple-1-8-1-mankara/ - http://www.openwall.com/lists/oss-security/2010/08/01/2 - http://secunia.com/advisories/40031 - http://cross-site-scripting.blogspot.com/2010/07/cms-made-simple-18-local-file-inclusion.html - http://www.openwall.com/lists/oss-security/2010/08/02/8
CVE ID: CVE-2010-2798 State: PUBLISHED Published: 2010-09-08T19:00:00 Last Updated: 2024-08-07T02:46:48.446Z Vendors: n/a Products: n/a Problem Types: n/a Description: The gfs2_dirent_find_space function in fs/gfs2/dir.c in the Linux kernel before 2.6.35 uses an incorrect size value in calculations associated with sentinel directory entries, which allows local users to cause a denial of service (NULL pointer dereference and panic) and possibly have unspecified other impact by renaming a file in a GFS2 filesystem, related to the gfs2_rename function in fs/gfs2/ops_inode.c. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2010/08/02/10
dditional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2010/08/02/10 - http://www.redhat.com/support/errata/RHSA-2010-0723.html - http://www.ubuntu.com/usn/USN-1000-1 - http://www.securityfocus.com/archive/1/520102/100/0/threaded - http://secunia.com/advisories/46397 - http://www.securityfocus.com/bid/42124 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:198 - http://www.redhat.com/support/errata/RHSA-2010-0670.html - http://www.redhat.com/support/errata/RHSA-2010-0660.html - http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00004.html - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.35 - https://bugzi
e-security-announce/2010-09/msg00004.html - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.35 - https://bugzilla.redhat.com/show_bug.cgi?id=620300 - http://securitytracker.com/id?1024386 - http://www.openwall.com/lists/oss-security/2010/08/02/1 - http://www.vmware.com/security/advisories/VMSA-2011-0012.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=728a756b8fcd22d80e2dbba8117a8a3aafd3f203 - http://support.avaya.com/css/P8/documents/100113326 - http://www.debian.org/security/2010/dsa-2094 - http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00000.html
CVE ID: CVE-2010-2799 State: PUBLISHED Published: 2010-09-14T20:03:00Z Last Updated: 2024-09-25T22:46:51.804Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the nestlex function in nestlex.c in Socat 1.5.0.0 through 1.7.1.2 and 2.0.0-b1 through 2.0.0-b3, when bidirectional data relay is enabled, allows context-dependent attackers to execute arbitrary code via long command-line arguments. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=620426 - http://www.dest-unreach.org/socat/download/socat-1.7.1.3.patch - http://www.dest-unreach.org/socat/contrib/socat-secadv2.html - http://bugs.gentoo.o
socat/download/socat-1.7.1.3.patch - http://www.dest-unreach.org/socat/contrib/socat-secadv2.html - http://bugs.gentoo.org/show_bug.cgi?id=330785 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=591443 - http://www.debian.org/security/2010/dsa-2090
CVE ID: CVE-2010-2800 State: PUBLISHED Published: 2010-08-06T19:31:00Z Last Updated: 2024-08-07T02:46:48.617Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MS-ZIP decompressor in cabextract before 1.3 allows remote attackers to cause a denial of service (infinite loop) via a malformed MSZIP archive in a .cab file during a (1) test or (2) extract action, related to the libmspack library. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/1903 - http://marc.info/?l=oss-security&m=128076168623266&w=2 - http://libmspack.svn.sourceforge.net/viewvc/libmspack?view=revision&revision=95 - http://libmspack.svn.sourceforge.net/
http://libmspack.svn.sourceforge.net/viewvc/libmspack?view=revision&revision=95 - http://libmspack.svn.sourceforge.net/viewvc/libmspack?view=revision&revision=90 - http://marc.info/?l=oss-security&m=128077976522470&w=2 - http://www.cabextract.org.uk/#changes - http://bugs.gentoo.org/show_bug.cgi?id=329891 - https://bugzilla.redhat.com/show_bug.cgi?id=620450
CVE ID: CVE-2010-2801 State: PUBLISHED Published: 2010-08-06T19:31:00 Last Updated: 2024-08-07T02:46:48.441Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in the Quantum decompressor in cabextract before 1.3, when archive test mode is used, allows user-assisted remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted Quantum archive in a .cab file, related to the libmspack library. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/1903 - http://libmspack.svn.sourceforge.net/viewvc/libmspack?view=revision&revision=118 - http://marc.info/?l
ories/2010/1903 - http://libmspack.svn.sourceforge.net/viewvc/libmspack?view=revision&revision=118 - http://marc.info/?l=oss-security&m=128076168623266&w=2 - http://libmspack.svn.sourceforge.net/viewvc/libmspack/libmspack/trunk/mspack/qtmd.c?r1=114&r2=113 - http://marc.info/?l=oss-security&m=128077976522470&w=2 - http://www.cabextract.org.uk/#changes - http://www.debian.org/security/2010/dsa-2087 - http://bugs.gentoo.org/show_bug.cgi?id=329891 - https://bugzilla.redhat.com/show_bug.cgi?id=620454 - http://www.vupen.com/english/advisories/2010/1997 - https://exchange.xforce.ibmcloud.com/vulnerabilities/60891 - http://www.securityfocus.com/bid/42173
CVE ID: CVE-2010-2802 State: PUBLISHED Published: 2010-09-07T16:30:00Z Last Updated: 2024-08-07T02:46:48.451Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in MantisBT before 1.2.2 allows remote authenticated users to inject arbitrary web script or HTML via an HTML document with a .gif filename extension, related to inline attachments. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2010/08/03/7 - http://www.mantisbt.org/bugs/view.php?id=11952 - http://www.mantisbt.org/blog/?p=113 - https://bugzilla.redhat.com/show_bug.cgi?id=620992 - http://www.openwall.com/lists/oss-security/20
sbt.org/blog/?p=113 - https://bugzilla.redhat.com/show_bug.cgi?id=620992 - http://www.openwall.com/lists/oss-security/2010/08/02/16
CVE ID: CVE-2010-2803 State: PUBLISHED Published: 2010-09-08T19:00:00 Last Updated: 2024-08-07T02:46:48.000Z Vendors: n/a Products: n/a Problem Types: n/a Description: The drm_ioctl function in drivers/gpu/drm/drm_drv.c in the Direct Rendering Manager (DRM) subsystem in the Linux kernel before 2.6.27.53, 2.6.32.x before 2.6.32.21, 2.6.34.x before 2.6.34.6, and 2.6.35.x before 2.6.35.4 allows local users to obtain potentially sensitive information from kernel memory by requesting a large memory-allocation amount. Additional Analyst Notes: - CVE Program Container: References: - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b9f0aee83335db1f3915f4e42a5e21b351740
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b9f0aee83335db1f3915f4e42a5e21b351740afd - http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00005.html - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.34.6 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:198 - http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00004.html - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27.53 - http://www.vupen.com/english/advisories/2010/2430 - http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html - http://www.redhat.com/support/errata/RHSA-2010-0842.html - http://www.vupen.com/english/adviso
e/2011-02/msg00000.html - http://www.redhat.com/support/errata/RHSA-2010-0842.html - http://www.vupen.com/english/advisories/2011/0298 - http://git.kernel.org/?p=linux/kernel/git/airlied/drm-2.6.git%3Ba=commit%3Bh=1b2f1489633888d4a06028315dc19d65768a1c05 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.35.4 - http://www.debian.org/security/2010/dsa-2094 - https://bugzilla.redhat.com/show_bug.cgi?id=621435 - http://git.kernel.org/?p=linux/kernel/git/airlied/drm-2.6.git%3Ba=commit%3Bh=b9f0aee83335db1f3915f4e42a5e21b351740afd - http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00000.html - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.32.21 - http://secunia.
urity-announce/2010-11/msg00000.html - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.32.21 - http://secunia.com/advisories/41512
CVE ID: CVE-2010-2804 State: REJECTED Published: 2021-06-22T11:49:36 Last Updated: 2021-06-22T11:49:36 Description: No description available.
CVE ID: CVE-2010-2805 State: PUBLISHED Published: 2010-08-19T17:43:00 Last Updated: 2024-08-07T02:46:48.055Z Vendors: n/a Products: n/a Problem Types: n/a Description: The FT_Stream_EnterFrame function in base/ftstream.c in FreeType before 2.4.2 does not properly validate certain position values, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/3045 - http://support.apple.com/kb/HT4435 - https://bugs.launchpad.net/ubuntu/maverick/+source/freetype/+bug/617019 - http://support.apple.com/kb/HT4457