Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2012-4882 State: PUBLISHED Published: 2012-09-07T10:00:00Z Last Updated: 2024-09-16T22:56:21.862Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple untrusted search path vulnerabilities in 3D XML Player 6.212.13.12076 allow local users to gain privileges via a Trojan horse (1) dwmapi.dll or (2) JT0DevPhase.dll file in the current working directory, as demonstrated by a directory that contains a .3dx file. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/48923
CVE ID: CVE-2012-4883 State: PUBLISHED Published: 2012-09-07T10:00:00Z Last Updated: 2024-09-16T19:01:45.593Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple untrusted search path vulnerabilities in 3DVIA Composer V6R2012 HF1 Build 6.8.1.1652 allow local users to gain privileges via a Trojan horse (1) dwmapi.dll or (2) ibfs32.dll file in the current working directory, as demonstrated by a directory that contains a .smg file. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/48924
CVE ID: CVE-2012-4884 State: PUBLISHED Published: 2012-11-11T11:00:00Z Last Updated: 2024-09-16T16:58:55.030Z Vendors: n/a Products: n/a Problem Types: n/a Description: Argument injection vulnerability in Request Tracker (RT) 3.8.x before 3.8.15 and 4.0.x before 4.0.8 allows remote attackers to create arbitrary files via unspecified vectors related to the GnuPG client. Additional Analyst Notes: - CVE Program Container: References: - http://lists.bestpractical.com/pipermail/rt-announce/2012-October/000212.html - http://www.debian.org/security/2012/dsa-2567
CVE ID: CVE-2012-4885 State: PUBLISHED Published: 2012-09-09T21:00:00Z Last Updated: 2024-09-16T23:51:59.586Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wikitext parser in MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 allows remote attackers to cause a denial of service (infinite loop) via certain input, as demonstrated by the padleft function. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/03/24/1 - http://lists.wikimedia.org/pipermail/mediawiki-announce/2012-March/000110.html - http://secunia.com/advisories/48504 - https://bugzilla.wikimedia.org/show_bug.cgi?id=35315 - https://bugzilla.wikimedia
http://secunia.com/advisories/48504 - https://bugzilla.wikimedia.org/show_bug.cgi?id=35315 - https://bugzilla.wikimedia.org/show_bug.cgi?id=22555 - http://lists.wikimedia.org/pipermail/mediawiki-announce/2012-March/000109.html - http://www.openwall.com/lists/oss-security/2012/03/22/9 - http://www.securityfocus.com/bid/52689
CVE ID: CVE-2012-4886 State: PUBLISHED Published: 2014-03-24T14:00:00 Last Updated: 2024-08-06T20:50:17.969Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in wpsio.dll in Kingsoft WPS Office 2012 possibly 8.1.0.3238 allows remote attackers to execute arbitrary code via a long BSTR string. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/121431/WPS-Office-Stack-Buffer-Overflow.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/83862 - http://osvdb.org/92847 - http://www.securityfocus.com/bid/59529 - http://seclists.org/fulldisclosure/2013/Apr/247 - http://www.exploit-db.com/exploits/25140
CVE ID: CVE-2012-4889 State: PUBLISHED Published: 2012-09-10T22:00:00 Last Updated: 2024-08-06T20:50:17.521Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine Firewall Analyzer 7.2 allow remote attackers to inject arbitrary web script or HTML via the (1) subTab or (2) tab parameter to createAnomaly.do; (3) url, (4) subTab, or (5) tab parameter to mindex.do; (6) tab parameter to index2.do; or (7) port parameter to syslogViewer.do. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/74538 - http://secunia.com/advisories/48657 - http://osvdb.org/80874 -
s://exchange.xforce.ibmcloud.com/vulnerabilities/74538 - http://secunia.com/advisories/48657 - http://osvdb.org/80874 - http://osvdb.org/80875 - http://www.securityfocus.com/bid/52841 - http://www.vulnerability-lab.com/get_content.php?id=437 - http://packetstormsecurity.org/files/111474/VL-437.txt - http://osvdb.org/80873 - http://osvdb.org/80872
CVE ID: CVE-2012-4890 State: PUBLISHED Published: 2012-09-10T22:00:00 Last Updated: 2024-08-06T20:50:17.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in FlatnuX CMS 2011 08.09.2 and earlier allow remote attackers to inject arbitrary web script or HTML via a (1) comment to the news, (2) title to the news, or (3) the folder names in a gallery. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/files/111473/Flatnux-CMS-2011-08.09.2-CSRF-XSS-Directory-Traversal.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/74566 - http://www.osvdb.org/80877 - http://secunia.com/advisor
l - https://exchange.xforce.ibmcloud.com/vulnerabilities/74566 - http://www.osvdb.org/80877 - http://secunia.com/advisories/48656 - http://secunia.com/advisories/48676 - http://www.securityfocus.com/bid/52846 - http://www.vulnerability-lab.com/get_content.php?id=487
CVE ID: CVE-2012-4891 State: PUBLISHED Published: 2012-09-10T22:00:00 Last Updated: 2024-08-06T20:50:17.844Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in fw/index2.do in ManageEngine Firewall Analyzer 7.2 allows remote attackers to inject arbitrary web script or HTML via the url parameter, a different vector than CVE-2012-4889. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/100551 - http://secunia.com/advisories/48657 - http://osvdb.org/80874 - http://
ange.xforce.ibmcloud.com/vulnerabilities/100551 - http://secunia.com/advisories/48657 - http://osvdb.org/80874 - http://packetstormsecurity.com/files/130169/ManageEngine-Firewall-Analyzer-8.0-Directory-Traversal-XSS.html - http://www.exploit-db.com/exploits/35933
CVE ID: CVE-2012-4892 State: PUBLISHED Published: 2012-09-10T22:00:00 Last Updated: 2024-08-06T20:50:17.924Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in FlatnuX CMS 2012-03.08 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) title_en, (2) summary_en, or (3) body_en parameter in a submitnews action to the news module, a different vulnerability than CVE-2012-4890. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabili
ation. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/74566 - http://www.osvdb.org/80877 - http://secunia.com/advisories/48656
CVE ID: CVE-2012-4893 State: PUBLISHED Published: 2012-09-11T19:00:00Z Last Updated: 2024-09-16T17:53:18.089Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in file/show.cgi in Webmin 1.590 and earlier allow remote attackers to hijack the authentication of privileged users for requests that (1) read files or execute (2) tar, (3) zip, or (4) gzip commands, a different issue than CVE-2012-2982. Additional Analyst Notes: - CVE Program Container: References: - http://www.americaninfosec.com/research/dossiers/AISG-12-001.pdf - http://www.kb.cert.org/vuls/id/788478 - http://americaninfosec.com/research/index.html
CVE ID: CVE-2012-4894 State: PUBLISHED Published: 2012-10-05T10:00:00 Last Updated: 2024-08-06T20:50:18.128Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google SketchUp before 8.0.14346 (aka 8 Maintenance 3) allows user-assisted remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted SKP file. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/85570 - http://technet.microsoft.com/security/msvr/msvr12-015 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78676 - http://support.google.com/sketchup/bin/static.py?page=release_notes.cs - http://www.securityfocus.com/bid/55598
CVE ID: CVE-2012-4895 State: PUBLISHED Published: 2012-10-05T10:00:00 Last Updated: 2024-08-06T20:50:17.817Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in SumatraPDF before 2.1 allows remote attackers to execute arbitrary code via a crafted PDF document, a different vulnerability than CVE-2012-4896. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/50656 - http://code.google.com/p/sumatrapdf/source/browse/trunk/docs/releasenotes.txt - http://technet.microsoft.com/security/msvr/msvr12-014
CVE ID: CVE-2012-4896 State: PUBLISHED Published: 2012-10-05T10:00:00 Last Updated: 2024-08-06T20:50:17.690Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in SumatraPDF before 2.1 allows remote attackers to execute arbitrary code via a crafted PDF document, a different vulnerability than CVE-2012-4895. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/50656 - http://code.google.com/p/sumatrapdf/source/browse/trunk/docs/releasenotes.txt - http://technet.microsoft.com/security/msvr/msvr12-014
CVE ID: CVE-2012-4897 State: PUBLISHED Published: 2012-10-05T17:00:00 Last Updated: 2024-08-06T20:50:17.744Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in the installer in VMware Movie Decoder before 9.0 allows local users to gain privileges via a Trojan horse executable file in the installer directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.vmware.com/security/advisories/VMSA-2012-0014.html - http://www.securityfocus.com/bid/55802 - https://exchange.xforce.ibmcloud.com/vulnerabilities/79046 - http://osvdb.org/85957 - http://archives.neohapsis.com/archives/bugtraq/2012-10/0069.html
CVE ID: CVE-2012-4898 State: PUBLISHED Published: 2012-12-18T11:00:00Z Last Updated: 2025-07-09T16:22:48.905Z Severity: N/A (CVSS 6.1 AV:N/AC:H/Au:N/C:C/I:P/A:N) Vendors: Tropos Products: Mesh OS Problem Types: CWE 331 Description: Mesh OS before 7.9.1.1 on Tropos wireless mesh routers does not use a sufficient source of entropy for SSH keys, which makes it easier for man-in-the-middle attackers to spoof a device or modify a client-server data stream by leveraging knowledge of a key from a product installation elsewhere. Additional Analyst Notes: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-12-297-01
CVE ID: CVE-2012-4899 State: PUBLISHED Published: 2012-10-10T18:00:00Z Last Updated: 2024-09-16T22:19:42.129Z Vendors: n/a Products: n/a Problem Types: n/a Description: WellinTech KingView 6.5.3 and earlier uses a weak password-hashing algorithm, which makes it easier for local users to discover credentials by reading an unspecified file. Additional Analyst Notes: - CVE Program Container: References: - http://www.wellintech.com/index.php/news/33-patch-for-kingview653 - http://www.us-cert.gov/control_systems/pdf/ICSA-12-283-02.pdf
CVE ID: CVE-2012-4900 State: PUBLISHED Published: 2020-01-23T14:03:19 Last Updated: 2024-08-06T20:50:17.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: Corel WordPerfect Office X6 16.0.0.388 has a DoS Vulnerability via untrusted pointer dereference Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/58384 - http://www.securitytracker.com/id/1028257 - https://exchange.xforce.ibmcloud.com/vulnerabilities/82674
CVE ID: CVE-2012-4901 State: PUBLISHED Published: 2015-05-20T19:00:00 Last Updated: 2024-08-06T20:50:17.978Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Template CMS 2.1.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the themes_editor parameter in an add_template action to admin/index.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/85895 - http://www.securityfocus.com/bid/55766 - https://www.htbridge.com/advisory/HTB23115 - https://www.exploit-db.com/exploits/21742/
CVE ID: CVE-2012-4902 State: PUBLISHED Published: 2015-05-20T19:00:00 Last Updated: 2024-08-06T20:50:17.900Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Template CMS 2.1.1 and earlier allow remote attackers to hijack the authentication of administrators for requests that (1) create an administrator user via an add action to admin/index.php or (2) conduct static PHP code injection attacks via the themes_editor parameter in an edit_template action to admin/index.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/85896 - http://www.securityfocus.com/bid/55766 - https://www.htbridge.c
rogram Container: References: - http://osvdb.org/85896 - http://www.securityfocus.com/bid/55766 - https://www.htbridge.com/advisory/HTB23115 - https://www.exploit-db.com/exploits/21742/
CVE ID: CVE-2012-4903 State: PUBLISHED Published: 2012-09-13T20:00:00Z Last Updated: 2024-09-16T17:53:41.848Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 18.0.1025308 on Android does not properly restrict access to file: URLs, which allows remote attackers to obtain sensitive information via unspecified vectors, as demonstrated by obtaining credential data, a different vulnerability than CVE-2012-4906. Additional Analyst Notes: - CVE Program Container: References: - https://code.google.com/p/chromium/issues/detail?id=138210 - http://googlechromereleases.blogspot.com/2012/09/chrome-for-android-update.html
CVE ID: CVE-2012-4904 State: PUBLISHED Published: 2012-09-13T20:00:00Z Last Updated: 2024-09-16T23:35:25.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-application scripting vulnerability in Google Chrome before 18.0.1025308 on Android allows remote attackers to inject arbitrary web script via unspecified vectors, as demonstrated by "Universal XSS (UXSS)" attacks against the current tab. Additional Analyst Notes: - CVE Program Container: References: - https://code.google.com/p/chromium/issues/detail?id=138035 - http://googlechromereleases.blogspot.com/2012/09/chrome-for-android-update.html
CVE ID: CVE-2012-4905 State: PUBLISHED Published: 2012-09-13T20:00:00Z Last Updated: 2024-09-17T04:04:13.824Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Google Chrome before 18.0.1025308 on Android allows remote attackers to inject arbitrary web script or HTML via an extra in an Intent object, aka "Universal XSS (UXSS)." Additional Analyst Notes: - CVE Program Container: References: - https://code.google.com/p/chromium/issues/detail?id=144813 - http://googlechromereleases.blogspot.com/2012/09/chrome-for-android-update.html
CVE ID: CVE-2012-4906 State: PUBLISHED Published: 2012-09-13T20:00:00Z Last Updated: 2024-09-17T02:05:39.757Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 18.0.1025308 on Android does not properly restrict access to file: URLs, which allows remote attackers to obtain sensitive information via unspecified vectors, as demonstrated by obtaining credential data, a different vulnerability than CVE-2012-4903. Additional Analyst Notes: - CVE Program Container: References: - https://code.google.com/p/chromium/issues/detail?id=144820 - http://googlechromereleases.blogspot.com/2012/09/chrome-for-android-update.html
CVE ID: CVE-2012-4907 State: PUBLISHED Published: 2012-09-13T20:00:00Z Last Updated: 2024-09-16T18:43:35.246Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 18.0.1025308 on Android does not properly restrict access from JavaScript code to Android APIs, which allows remote attackers to have an unspecified impact via a crafted web page. Additional Analyst Notes: - CVE Program Container: References: - https://code.google.com/p/chromium/issues/detail?id=137532 - http://googlechromereleases.blogspot.com/2012/09/chrome-for-android-update.html
CVE ID: CVE-2012-4908 State: PUBLISHED Published: 2012-09-13T20:00:00Z Last Updated: 2024-09-16T22:51:14.997Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 18.0.1025308 on Android allows remote attackers to bypass the Same Origin Policy and obtain access to local files via vectors involving a symlink. Additional Analyst Notes: - CVE Program Container: References: - https://code.google.com/p/chromium/issues/detail?id=144866 - http://googlechromereleases.blogspot.com/2012/09/chrome-for-android-update.html
CVE ID: CVE-2012-4909 State: PUBLISHED Published: 2012-09-13T20:00:00Z Last Updated: 2024-09-16T23:32:08.397Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 18.0.1025308 on Android allows remote attackers to obtain cookie information via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - https://code.google.com/p/chromium/issues/detail?id=141889 - http://googlechromereleases.blogspot.com/2012/09/chrome-for-android-update.html
CVE ID: CVE-2012-4910 State: REJECTED Published: 2017-03-15T18:00:00 Last Updated: 2017-03-15T17:57:01 Description: No description available.
CVE ID: CVE-2012-4911 State: REJECTED Published: 2017-03-15T18:00:00 Last Updated: 2017-03-15T17:57:01 Description: No description available.
CVE ID: CVE-2012-4912 State: PUBLISHED Published: 2012-09-28T10:00:00 Last Updated: 2024-08-06T20:50:17.867Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the WebAccess component in Novell GroupWise 8.0 before Support Pack 3 and 2012 before Support Pack 1 allows remote attackers to inject arbitrary web script or HTML via a crafted signature in an HTML e-mail message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1027614 - http://www.novell.com/support/kb/doc.php?id=7010768 - http://www.securityfocus.com/bid/55814 - https://bugzilla.novell.com/show_bug.cgi?id=745425 - http://secunia.c
7010768 - http://www.securityfocus.com/bid/55814 - https://bugzilla.novell.com/show_bug.cgi?id=745425 - http://secunia.com/advisories/50622 - https://bugzilla.novell.com/show_bug.cgi?id=702788 - http://download.novell.com/Download?buildid=O5hTjIiMdMo~
CVE ID: CVE-2012-4914 State: PUBLISHED Published: 2013-01-26T23:00:00Z Last Updated: 2024-09-16T22:20:01.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the reader in CoolPDF 3.0.2.256 allows remote attackers to execute arbitrary code via a PDF document with a crafted stream. Additional Analyst Notes: - CVE Program Container: References: - http://www.protekresearchlab.com/index.php?option=com_content&view=article&id=70&Itemid=70 - http://secunia.com/advisories/51602
CVE ID: CVE-2012-4915 State: PUBLISHED Published: 2014-05-29T14:00:00 Last Updated: 2024-08-06T20:50:18.197Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Google Doc Embedder plugin before 2.5.4 for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter to libs/pdf.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/57133 - https://exchange.xforce.ibmcloud.com/vulnerabilities/80930 - http://osvdb.org/88891 - http://secunia.com/advisories/50832
CVE ID: CVE-2012-4917 State: PUBLISHED Published: 2013-01-26T23:00:00 Last Updated: 2024-08-06T20:50:17.813Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TripAdvisor app 6.6 for iOS sends cleartext credentials, which allows remote attackers to obtain sensitive information by sniffing the network. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/57535 - http://secunia.com/advisories/51410
CVE ID: CVE-2012-4918 State: PUBLISHED Published: 2013-01-22T23:00:00 Last Updated: 2024-08-06T20:50:17.673Z Vendors: n/a Products: n/a Problem Types: n/a Description: Call of Duty Elite for iOS 2.0.1 does not properly validate the server SSL certificate, which allows remote attackers to obtain sensitive information via a Man-in-the-Middle (MITM) attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/57225 - http://osvdb.org/89070 - http://secunia.com/advisories/51366 - https://exchange.xforce.ibmcloud.com/vulnerabilities/81116
CVE ID: CVE-2012-4919 State: PUBLISHED Published: 2020-01-22T18:03:01 Last Updated: 2024-08-06T20:50:18.008Z Vendors: Gallery Plugin authors Products: Gallery Problem Types: Remote File Include Description: Gallery Plugin1.4 for WordPress has a Remote File Include Vulnerability Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/57650 - https://exchange.xforce.ibmcloud.com/vulnerabilities/81713
CVE ID: CVE-2012-4920 State: PUBLISHED Published: 2014-04-04T14:00:00 Last Updated: 2024-08-06T20:50:17.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the zing_forum_output function in forum.php in the Zingiri Forum (aka Forums) plugin before 1.4.4 for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the url parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/50833 - http://wordpress.org/plugins/zingiri-forum/changelog - http://osvdb.org/89069 - https://exchange.xforce.ibmcloud.com/vulnerabilities/81156
CVE ID: CVE-2012-4921 State: PUBLISHED Published: 2014-04-10T14:00:00 Last Updated: 2024-08-06T20:50:18.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the DVS Custom Notification plugin 1.0.1 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that (1) change application settings or (2) conduct cross-site scripting (XSS) attacks. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/51531 - http://osvdb.org/89441
CVE ID: CVE-2012-4922 State: PUBLISHED Published: 2012-09-14T18:00:00 Last Updated: 2024-08-06T20:50:18.010Z Vendors: n/a Products: n/a Problem Types: n/a Description: The tor_timegm function in common/util.c in Tor before 0.2.2.39, and 0.2.3.x before 0.2.3.22-rc, does not properly validate time values, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a malformed directory object, a different vulnerability than CVE-2012-4419. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-201301-03.xml - https://gitweb.torproject.org/tor.git/blob/release-0.2.2:/ReleaseNotes - https://trac.torproject.org/p
a-201301-03.xml - https://gitweb.torproject.org/tor.git/blob/release-0.2.2:/ReleaseNotes - https://trac.torproject.org/projects/tor/ticket/6811 - http://openwall.com/lists/oss-security/2012/09/12/5 - http://lists.fedoraproject.org/pipermail/package-announce/2012-September/088006.html - https://gitweb.torproject.org/tor.git/commit/973c18bf0e84d14d8006a9ae97fde7f7fb97e404 - https://lists.torproject.org/pipermail/tor-talk/2012-September/025501.html - http://lists.opensuse.org/opensuse-updates/2012-10/msg00005.html