Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2012-4413 State: PUBLISHED Published: 2012-09-18T17:00:00 Last Updated: 2024-08-06T20:35:09.517Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenStack Keystone 2012.1.3 does not invalidate existing tokens when granting or revoking roles, which allows remote authenticated users to retain the privileges of the revoked roles. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/85484 - http://secunia.com/advisories/50531 - http://www.openwall.com/lists/oss-security/2012/09/12/7 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78478 - http://www.ubuntu.com/usn/USN-1564-1 - http://www.securityfocus.com/bid/55524 - http://secunia.com/ad
rabilities/78478 - http://www.ubuntu.com/usn/USN-1564-1 - http://www.securityfocus.com/bid/55524 - http://secunia.com/advisories/50590
CVE ID: CVE-2012-4414 State: PUBLISHED Published: 2013-01-22T23:00:00 Last Updated: 2024-08-06T20:35:09.480Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the replication code in Oracle MySQL possibly before 5.5.29, and MariaDB 5.1.x through 5.1.62, 5.2.x through 5.2.12, 5.3.x through 5.3.7, and 5.5.x through 5.5.25, allow remote authenticated users to execute arbitrary SQL commands via vectors related to the binary log. NOTE: as of 20130116, Oracle has not commented on claims from a downstream vendor that the fix in MySQL 5.5.29 is incomplete. Additional Analyst Notes: - CVE Program Container: References: - https://mariadb.atlassian.net
SQL 5.5.29 is incomplete. Additional Analyst Notes: - CVE Program Container: References: - https://mariadb.atlassian.net/browse/MDEV-382 - http://www.mysqlperformanceblog.com/2013/01/13/cve-2012-4414-in-mysql-5-5-29-and-percona-server-5-5-29/ - http://www.mandriva.com/security/advisories?name=MDVSA-2013:102 - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00020.html - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00013.html - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00000.html - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00002.html - http://www.openwall.com/lists/oss-security/2012/09/11/4 - https://bugzilla.redhat
urity-announce/2013-01/msg00002.html - http://www.openwall.com/lists/oss-security/2012/09/11/4 - https://bugzilla.redhat.com/show_bug.cgi?id=852144 - http://bugs.mysql.com/bug.php?id=66550 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:150 - http://www.securityfocus.com/bid/55498
CVE ID: CVE-2012-4415 State: PUBLISHED Published: 2012-10-01T01:00:00Z Last Updated: 2024-08-06T20:35:09.848Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the guac_client_plugin_open function in libguac in Guacamole before 0.6.3 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a long protocol name. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/55497 - https://bugzilla.redhat.com/show_bug.cgi?id=856743 - http://www.openwall.com/lists/oss-security/2012/09/11/7 - http://lists.fedoraproject.org/pipermail/package-announce/2012-September/088272.html - http://gu
security/2012/09/11/7 - http://lists.fedoraproject.org/pipermail/package-announce/2012-September/088272.html - http://guac-dev.org/trac/changeset/7dcefa744b4a38825619c00ae8b47e5bae6e38c0/libguac - http://www.openwall.com/lists/oss-security/2012/09/11/3 - http://lists.fedoraproject.org/pipermail/package-announce/2012-September/088031.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-September/088218.html - http://archives.neohapsis.com/archives/bugtraq/2012-09/0107.html
CVE ID: CVE-2012-4416 State: PUBLISHED Published: 2012-10-16T21:29:00 Last Updated: 2024-08-06T20:35:09.518Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, and 6 Update 35 and earlier, allows remote attackers to affect confidentiality and integrity via unknown vectors related to Hotspot. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00016.html - http://security.gentoo.org/glsa/glsa-201406-32.xml - http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS12-023/index.html -
o.org/glsa/glsa-201406-32.xml - http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS12-023/index.html - http://rhn.redhat.com/errata/RHSA-2012-1386.html - http://secunia.com/advisories/51141 - http://marc.info/?l=bugtraq&m=135758563611658&w=2 - http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00023.html - http://rhn.redhat.com/errata/RHSA-2012-1391.html - http://secunia.com/advisories/51029 - http://marc.info/?l=bugtraq&m=135758563611658&w=2 - http://secunia.com/advisories/51166 - http://rhn.redhat.com/errata/RHSA-2012-1392.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16623 - http://www.securityfocus.com/bid/555
l.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16623 - http://www.securityfocus.com/bid/55501 - http://marc.info/?l=bugtraq&m=135542848327757&w=2 - http://secunia.com/advisories/51028 - http://www.oracle.com/technetwork/topics/security/javacpuoct2012-1515924.html - http://rhn.redhat.com/errata/RHSA-2012-1385.html - http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf - http://marc.info/?l=bugtraq&m=135542848327757&w=2
CVE ID: CVE-2012-4417 State: PUBLISHED Published: 2012-11-18T23:00:00 Last Updated: 2024-08-06T20:35:09.394Z Vendors: n/a Products: n/a Problem Types: n/a Description: GlusterFS 3.3.0, as used in Red Hat Storage server 2.0, allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable names. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2012-1456.html - https://bugzilla.redhat.com/show_bug.cgi?id=856341 - http://www.securitytracker.com/id?1027756 - https://exchange.xforce.ibmcloud.com/vulnerabilities/80074 - http://www.securityfocus.com/bid/56522
CVE ID: CVE-2012-4418 State: PUBLISHED Published: 2012-10-09T23:00:00 Last Updated: 2024-08-06T20:35:09.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache Axis2 allows remote attackers to forge messages and bypass authentication via an "XML Signature wrapping attack." Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/09/13/1 - http://www.openwall.com/lists/oss-security/2012/09/12/1 - https://bugzilla.redhat.com/show_bug.cgi?id=856755 - http://www.nds.rub.de/media/nds/veroeffentlichungen/2012/08/22/BreakingSAML_3.pdf - http://www.securityfocus.com/bid/55508
CVE ID: CVE-2012-4419 State: PUBLISHED Published: 2012-09-14T18:00:00 Last Updated: 2024-08-06T20:35:09.606Z Vendors: n/a Products: n/a Problem Types: n/a Description: The compare_tor_addr_to_addr_policy function in or/policies.c in Tor before 0.2.2.39, and 0.2.3.x before 0.2.3.21-rc, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a zero-valued port field that is not properly handled during policy comparison. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-201301-03.xml - https://trac.torproject.org/projects/tor/ticket/6690 - http://openwall.com/lists/oss-security/2012/09/13/2 - http://secunia
ps://trac.torproject.org/projects/tor/ticket/6690 - http://openwall.com/lists/oss-security/2012/09/13/2 - http://secunia.com/advisories/50583 - https://lists.torproject.org/pipermail/tor-talk/2012-September/025434.html - https://gitweb.torproject.org/tor.git/blob/release-0.2.2:/ReleaseNotes - http://lists.fedoraproject.org/pipermail/package-announce/2012-September/088006.html - https://gitweb.torproject.org/tor.git/commit/62d96284f7e0f81c40d5df7e53dd7b4dfe7e56a5 - http://lists.opensuse.org/opensuse-updates/2012-10/msg00005.html
CVE ID: CVE-2012-4420 State: PUBLISHED Published: 2019-12-26T20:46:04 Last Updated: 2024-08-06T20:35:09.464Z Vendors: java-1.7.0-openjdk Products: java-1.7.0-openjdk Problem Types: Other Description: An information disclosure flaw was found in the way the Java Virtual Machine (JVM) implementation of Java SE 7 as provided by OpenJDK 7 incorrectly initialized integer arrays after memory allocation (in certain circumstances they had nonzero elements right after the allocation). A remote attacker could use this flaw to obtain potentially sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-4420 - https://acce
t Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-4420 - https://access.redhat.com/security/cve/cve-2012-4420 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78693 - http://www.openwall.com/lists/oss-security/2012/09/13/3 - http://www.securityfocus.com/bid/55538 - https://www.openwall.com/lists/oss-security/2012/09/12/4 - https://bugs.java.com/bugdatabase/view_bug.do?bug_id=7196857
CVE ID: CVE-2012-4421 State: PUBLISHED Published: 2012-09-14T19:00:00Z Last Updated: 2024-09-17T03:59:31.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: The create_post function in wp-includes/class-wp-atom-server.php in WordPress before 3.4.2 does not perform a capability check, which allows remote authenticated users to bypass intended access restrictions and publish new posts by leveraging the Contributor role and using the Atom Publishing Protocol (aka AtomPub) feature. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2012/09/13/4 - http://core.trac.wordpress.org/changeset?old_path=%2Ftags%2F3.4.1&old=21780&new_path=%
lists/oss-security/2012/09/13/4 - http://core.trac.wordpress.org/changeset?old_path=%2Ftags%2F3.4.1&old=21780&new_path=%2Ftags%2F3.4.2&new=21780#file2 - http://codex.wordpress.org/Version_3.4.2
CVE ID: CVE-2012-4422 State: PUBLISHED Published: 2012-09-14T19:00:00Z Last Updated: 2024-09-16T21:02:26.279Z Vendors: n/a Products: n/a Problem Types: n/a Description: wp-admin/plugins.php in WordPress before 3.4.2, when the multisite feature is enabled, does not check for network-administrator privileges before performing a network-wide activation of an installed plugin, which might allow remote authenticated users to make unintended plugin changes by leveraging the Administrator role. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2012/09/13/4 - http://core.trac.wordpress.org/changeset?old_path=%2Ftags%2F3.4.1&old=21780&new_path=%2F
sts/oss-security/2012/09/13/4 - http://core.trac.wordpress.org/changeset?old_path=%2Ftags%2F3.4.1&old=21780&new_path=%2Ftags%2F3.4.2&new=21780#file42 - http://codex.wordpress.org/Version_3.4.2
CVE ID: CVE-2012-4423 State: PUBLISHED Published: 2012-11-19T11:00:00 Last Updated: 2024-08-06T20:35:09.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: The virNetServerProgramDispatchCall function in libvirt before 0.10.2 allows remote attackers to cause a denial of service (NULL pointer dereference and segmentation fault) via an RPC call with (1) an event as the RPC number or (2) an RPC number whose value is in a "gap" in the RPC dispatch table. Additional Analyst Notes: - CVE Program Container: References: - http://libvirt.org/git/?p=libvirt.git%3Ba=commitdiff%3Bh=f8fbeb50d52520a109d71c8566fed2ea600650ec - http://libvirt.org/git/?p=libvirt.git%3Ba=commit%3Bh=b7ff9e696063189
diff%3Bh=f8fbeb50d52520a109d71c8566fed2ea600650ec - http://libvirt.org/git/?p=libvirt.git%3Ba=commit%3Bh=b7ff9e696063189a715802d081d55a398663c15a - http://lists.fedoraproject.org/pipermail/package-announce/2012-October/090121.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-October/089976.html - http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00001.html - http://www.securitytracker.com/id?1027649 - https://bugzilla.redhat.com/show_bug.cgi?id=857133 - https://www.redhat.com/archives/libvir-list/2012-September/msg00843.html - http://www.securityfocus.com/bid/55541 - http://rhn.redhat.com/errata/RHSA-2012-1359.html - http://www.ubuntu.com/usn/USN-1708-1 - ht
curityfocus.com/bid/55541 - http://rhn.redhat.com/errata/RHSA-2012-1359.html - http://www.ubuntu.com/usn/USN-1708-1 - http://www.openwall.com/lists/oss-security/2012/09/13/14
CVE ID: CVE-2012-4424 State: PUBLISHED Published: 2013-10-09T22:00:00 Last Updated: 2024-08-06T20:35:09.734Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in string/strcoll_l.c in the GNU C Library (aka glibc or libc6) 2.17 and earlier allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long string that triggers a malloc failure and use of the alloca function. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1991-1 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:284 - https://bugzilla.redhat.com/show_bug.cgi?id=858238 - http://sourc
mandriva.com/security/advisories?name=MDVSA-2013:284 - https://bugzilla.redhat.com/show_bug.cgi?id=858238 - http://sourceware.org/bugzilla/show_bug.cgi?id=14547 - http://www.openwall.com/lists/oss-security/2012/09/13/16 - https://security.gentoo.org/glsa/201503-04 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:283
CVE ID: CVE-2012-4425 State: PUBLISHED Published: 2012-09-18T17:00:00 Last Updated: 2024-08-06T20:35:09.731Z Vendors: n/a Products: n/a Problem Types: n/a Description: libgio, when used in setuid or other privileged programs in spice-gtk and possibly other products, allows local users to gain privileges and execute arbitrary code via the DBUS_SYSTEM_BUS_ADDRESS environment variable. NOTE: it could be argued that this is a vulnerability in the applications that do not cleanse environment variables, not in libgio itself. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2012-1284.html - http://www.openwall.com/lists/oss-security/2012/09/12/6 - h
rences: - http://rhn.redhat.com/errata/RHSA-2012-1284.html - http://www.openwall.com/lists/oss-security/2012/09/12/6 - http://www.spinics.net/lists/spice-devel/msg01940.html - http://www.openwall.com/lists/oss-security/2012/09/17/2 - http://permalink.gmane.org/gmane.linux.redhat.fedora.extras.cvs/853051 - http://www.exploit-db.com/exploits/21323 - https://bugzilla.redhat.com/show_bug.cgi?id=857283 - http://www.openwall.com/lists/oss-security/2012/09/14/2 - http://www.securityfocus.com/bid/55555
CVE ID: CVE-2012-4426 State: PUBLISHED Published: 2012-11-21T23:00:00 Last Updated: 2024-08-06T20:35:09.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple format string vulnerabilities in mcrypt 2.6.8 and earlier might allow user-assisted remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via vectors involving (1) errors.c or (2) mcrypt.c. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/09/10/5 - http://www.openwall.com/lists/oss-security/2012/09/06/9 - http://www.openwall.com/lists/oss-security/2012/09/13/22 - http://www.securityfocus.com/bid/55557 - http://www.openwa
- http://www.openwall.com/lists/oss-security/2012/09/13/22 - http://www.securityfocus.com/bid/55557 - http://www.openwall.com/lists/oss-security/2012/09/06/8
CVE ID: CVE-2012-4427 State: PUBLISHED Published: 2012-10-01T01:00:00Z Last Updated: 2024-08-06T20:35:09.478Z Vendors: n/a Products: n/a Problem Types: n/a Description: The gnome-shell plugin 3.4.1 in GNOME allows remote attackers to force the download and installation of arbitrary extensions from extensions.gnome.org via a crafted web page. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.novell.com/show_bug.cgi?id=779473 - https://bugzilla.gnome.org/show_bug.cgi?id=684215 - http://www.openwall.com/lists/oss-security/2012/09/13/19 - http://www.openwall.com/lists/oss-security/2012/09/08/1 - http://www.openwall.com/lists/oss-security/2012/09/18/3 - http://www.
www.openwall.com/lists/oss-security/2012/09/08/1 - http://www.openwall.com/lists/oss-security/2012/09/18/3 - http://www.openwall.com/lists/oss-security/2012/09/13/26 - http://www.securityfocus.com/bid/55556
CVE ID: CVE-2012-4428 State: PUBLISHED Published: 2019-12-02T17:41:11 Last Updated: 2024-08-06T20:35:09.519Z Vendors: openslp-dfsg Products: openslp-dfsg Problem Types: out-of-bounds read in SLPIntersectStringList() can cause DoS Description: openslp: SLPIntersectStringList()' Function has a DoS vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2012-4428 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-4428 - https://bugzilla.suse.com/show_bug.cgi?id=CVE-2012-4428 - https://access.redhat.com/security/cve/cve-2012-4428 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78732 - http://lists.fedoraproject.org
security/cve/cve-2012-4428 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78732 - http://lists.fedoraproject.org/pipermail/package-announce/2015-May/159059.html - http://www.openwall.com/lists/oss-security/2012/09/13/27 - http://www.securityfocus.com/bid/55540 - http://www.ubuntu.com/usn/USN-2730-1 - https://security.gentoo.org/glsa/201707-05
CVE ID: CVE-2012-4429 State: PUBLISHED Published: 2012-10-01T00:00:00 Last Updated: 2024-08-06T20:35:09.525Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vino 2.28, 2.32, 3.4.2, and earlier allows remote attackers to read clipboard activity by listening on TCP port 5900. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2013-0169.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/78602 - http://www.openwall.com/lists/oss-security/2012/09/14/1 - http://www.ubuntu.com/usn/USN-1701-1 - http://www.securityfocus.com/bid/55548 - http://www.openwall.com/lists/oss-security/2012/09/13/25 - http://secunia.com/advisories/50527
CVE ID: CVE-2012-4430 State: PUBLISHED Published: 2012-10-10T18:00:00 Last Updated: 2024-08-06T20:35:09.743Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dump_resource function in dird/dird_conf.c in Bacula before 5.2.11 does not properly enforce ACL rules, which allows remote authenticated users to obtain resource dump information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/projects/bacula/files/bacula/5.2.12/ReleaseNotes/view - http://www.debian.org/security/2012/dsa-2558 - http://www.openwall.com/lists/oss-security/2012/09/15/2 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:166 - http://w
penwall.com/lists/oss-security/2012/09/15/2 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:166 - http://www.bacula.org/en/?page=news - http://www.securityfocus.com/bid/55505 - http://secunia.com/advisories/50535 - http://www.bacula.org/git/cgit.cgi/bacula/commit/?id=67debcecd3d530c429e817e1d778e79dcd1db905 - http://secunia.com/advisories/50808 - http://www.openwall.com/lists/oss-security/2012/09/14/12 - http://www.openwall.com/lists/oss-security/2012/09/14/11
CVE ID: CVE-2012-4431 State: PUBLISHED Published: 2012-12-19T11:00:00 Last Updated: 2024-08-06T20:35:09.577Z Vendors: n/a Products: n/a Problem Types: n/a Description: org/apache/catalina/filters/CsrfPreventionFilter.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.32 allows remote attackers to bypass the cross-site request forgery (CSRF) protection mechanism via a request that lacks a session identifier. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18541 - http://marc.info/?l=bugtraq&m=136612293908376&w=2 - http://archives.neohapsis.com/archives/bugtraq/2012-12/0045.html - ht
ttp://marc.info/?l=bugtraq&m=136612293908376&w=2 - http://archives.neohapsis.com/archives/bugtraq/2012-12/0045.html - http://lists.opensuse.org/opensuse-updates/2013-01/msg00051.html - http://www.ubuntu.com/usn/USN-1685-1 - http://lists.opensuse.org/opensuse-updates/2012-12/msg00089.html - http://www.securityfocus.com/bid/56814 - http://lists.opensuse.org/opensuse-updates/2013-01/msg00080.html - https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03748878 - http://rhn.redhat.com/errata/RHSA-2013-0268.html - http://tomcat.apache.org/security-7.html - http://rhn.redhat.com/errata/RHSA-2013-0648.html - http://www.securitytracker.com/id?1027834 - http://rhn.redhat.com/
- http://rhn.redhat.com/errata/RHSA-2013-0648.html - http://www.securitytracker.com/id?1027834 - http://rhn.redhat.com/errata/RHSA-2013-1437.html - https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03748878 - http://svn.apache.org/viewvc/tomcat/tc7.0.x/trunk/java/org/apache/catalina/filters/CsrfPreventionFilter.java?r1=1393088&r2=1393087&pathrev=1393088 - http://rhn.redhat.com/errata/RHSA-2013-0647.html - http://tomcat.apache.org/security-6.html - http://secunia.com/advisories/57126 - http://rhn.redhat.com/errata/RHSA-2013-1853.html - http://lists.opensuse.org/opensuse-updates/2013-01/msg00037.html - http://svn.apache.org/viewvc/tomcat/tc7.0.x/trunk/webapps/docs
sts.opensuse.org/opensuse-updates/2013-01/msg00037.html - http://svn.apache.org/viewvc/tomcat/tc7.0.x/trunk/webapps/docs/changelog.xml?r1=1393088&r2=1393087&pathrev=1393088 - http://rhn.redhat.com/errata/RHSA-2013-0267.html - http://svn.apache.org/viewvc?view=revision&revision=1393088 - http://marc.info/?l=bugtraq&m=136612293908376&w=2 - http://marc.info/?l=bugtraq&m=139344343412337&w=2 - http://lists.opensuse.org/opensuse-updates/2012-12/msg00090.html
CVE ID: CVE-2012-4432 State: PUBLISHED Published: 2012-10-01T01:00:00 Last Updated: 2024-08-06T20:35:09.700Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in opngreduc.c in OptiPNG Hg and 0.7.x before 0.7.3 might allow remote attackers to execute arbitrary code via unspecified vectors related to "palette reduction." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/55566 - http://optipng.sourceforge.net/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/78743 - http://www.openwall.com/lists/oss-security/2012/09/17/5 - http://optipng.hg.sourceforge.net/hgweb/optipng/optipng/rev/f1d5d44670a2 - http:/
.com/lists/oss-security/2012/09/17/5 - http://optipng.hg.sourceforge.net/hgweb/optipng/optipng/rev/f1d5d44670a2 - http://secunia.com/advisories/50654 - http://sourceforge.net/news/?group_id=151404 - http://www.openwall.com/lists/oss-security/2012/09/18/2
CVE ID: CVE-2012-4433 State: PUBLISHED Published: 2012-11-18T23:00:00 Last Updated: 2024-08-06T20:35:09.801Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in operations/external/ppm-load.c in GEGL (Generic Graphics Library) 0.2.0 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a large (1) width or (2) height value in a Portable Pixel Map (ppm) image, which triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=856300 - http://git.gnome.org/browse/gegl/commit/?id=4757cdf73d3675478d645a3ec8250ba02168a