Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-3227 State: PUBLISHED Published: 2009-09-16T19:00:00Z Last Updated: 2024-09-17T01:16:28.251Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in AlmondSoft Almond Classifieds Ads Enterprise and Almond Affiliate Network Classifieds allows remote attackers to inject arbitrary web script or HTML via the city parameter in a search action. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36003 - http://www.securityfocus.com/bid/35816 - http://packetstormsecurity.org/0907-exploits/almondclassifiedsads-b
ies/36003 - http://www.securityfocus.com/bid/35816 - http://packetstormsecurity.org/0907-exploits/almondclassifiedsads-bsqlxss.txt
CVE ID: CVE-2009-3228 State: PUBLISHED Published: 2009-10-19T19:27:00 Last Updated: 2024-08-07T06:22:23.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: The tc_fill_tclass function in net/sched/sch_api.c in the tc subsystem in the Linux kernel 2.4.x before 2.4.37.6 and 2.6.x before 2.6.31-rc9 does not initialize certain (1) tcm__pad1 and (2) tcm__pad2 structure members, which might allow local users to obtain sensitive information from kernel memory via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2009/09/17/9 - http://www.openwall.com/lists/oss-security/2009/09/17/1 - https://rhn.redhat.com/er
om/lists/oss-security/2009/09/17/9 - http://www.openwall.com/lists/oss-security/2009/09/17/1 - https://rhn.redhat.com/errata/RHSA-2009-1540.html - http://www.ubuntu.com/usn/usn-864-1 - http://secunia.com/advisories/38794 - http://lists.vmware.com/pipermail/security-announce/2010/000082.html - http://www.mandriva.com/security/advisories?name=MDVSA-2010:198 - http://www.openwall.com/lists/oss-security/2009/09/03/1 - https://bugzilla.redhat.com/show_bug.cgi?id=520990 - http://secunia.com/advisories/37084 - http://www.redhat.com/support/errata/RHSA-2009-1522.html - http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.37.6 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg
ernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.37.6 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9409 - http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.4.37.y.git%3Ba=commit%3Bh=096ed17f20affc2db0e307658c69b67433992a7a - https://rhn.redhat.com/errata/RHSA-2009-1548.html - http://www.kernel.org/pub/linux/kernel/v2.6/testing/v2.6.31/ChangeLog-2.6.31-rc9 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=16ebb5e0b36ceadc8186f71d68b0c4fa4b6e781b - http://secunia.com/advisories/38834 - http://www.openwall.com/lists/oss-security/2009/09/06/2 - http://www.openwall.com/lists/oss-security/2009/09/07/2 - http://www.open
openwall.com/lists/oss-security/2009/09/06/2 - http://www.openwall.com/lists/oss-security/2009/09/07/2 - http://www.openwall.com/lists/oss-security/2009/09/05/2 - http://www.securitytracker.com/id?1023073 - http://patchwork.ozlabs.org/patch/32830/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6757 - http://www.vupen.com/english/advisories/2010/0528
CVE ID: CVE-2009-3229 State: PUBLISHED Published: 2009-09-17T10:00:00 Last Updated: 2024-08-07T06:22:23.535Z Vendors: n/a Products: n/a Problem Types: n/a Description: The core server component in PostgreSQL 8.4 before 8.4.1, 8.3 before 8.3.8, and 8.2 before 8.2.14 allows remote authenticated users to cause a denial of service (backend shutdown) by "re-LOAD-ing" libraries from a certain plugins directory. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=522092 - https://www.redhat.com/archives/fedora-package-announce/2009-September/msg00307.html - http://www.postgresql.org/docs/8.3/static/release-8-3-8.html - http://www.securityfocu
ce/2009-September/msg00307.html - http://www.postgresql.org/docs/8.3/static/release-8-3-8.html - http://www.securityfocus.com/bid/36314 - http://marc.info/?l=bugtraq&m=134124585221119&w=2 - http://secunia.com/advisories/36837 - http://www.postgresql.org/support/security.html - http://secunia.com/advisories/36660 - http://www.securityfocus.com/archive/1/509917/100/0/threaded - http://secunia.com/advisories/36800 - http://www.us.debian.org/security/2009/dsa-1900 - https://www.redhat.com/archives/fedora-package-announce/2009-September/msg00305.html - http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html - http://sunsolve.sun.com/search/document.do?assetkey=1-66-270408-1 - h
opensuse-security-announce/2009-10/msg00001.html - http://sunsolve.sun.com/search/document.do?assetkey=1-66-270408-1 - http://secunia.com/advisories/36727 - http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html - http://www.ubuntu.com/usn/usn-834-1 - http://marc.info/?l=bugtraq&m=134124585221119&w=2 - http://wiki.rpath.com/wiki/Advisories:rPSA-2010-0012
CVE ID: CVE-2009-3230 State: PUBLISHED Published: 2009-09-17T10:00:00 Last Updated: 2024-08-07T06:22:23.280Z Vendors: n/a Products: n/a Problem Types: n/a Description: The core server component in PostgreSQL 8.4 before 8.4.1, 8.3 before 8.3.8, 8.2 before 8.2.14, 8.1 before 8.1.18, 8.0 before 8.0.22, and 7.4 before 7.4.26 does not use the appropriate privileges for the (1) RESET ROLE and (2) RESET SESSION AUTHORIZATION operations, which allows remote authenticated users to gain privileges. NOTE: this is due to an incomplete fix for CVE-2007-6600. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/2602 - https://www.redhat.com/archives
CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/2602 - https://www.redhat.com/archives/fedora-package-announce/2009-September/msg00307.html - http://www.postgresql.org/docs/8.3/static/release-8-3-8.html - http://www.securityfocus.com/bid/36314 - http://marc.info/?l=bugtraq&m=134124585221119&w=2 - http://secunia.com/advisories/36837 - http://archives.postgresql.org/pgsql-www/2009-09/msg00024.php - http://www.postgresql.org/support/security.html - https://bugzilla.redhat.com/show_bug.cgi?id=522085 - http://secunia.com/advisories/36660 - http://www.securityfocus.com/archive/1/509917/100/0/threaded - http://secunia.com/advisories/36800 - https://oval.cisecurity.
//www.securityfocus.com/archive/1/509917/100/0/threaded - http://secunia.com/advisories/36800 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10166 - http://www.us.debian.org/security/2009/dsa-1900 - https://www.redhat.com/archives/fedora-package-announce/2009-September/msg00305.html - http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html - http://sunsolve.sun.com/search/document.do?assetkey=1-66-270408-1 - http://secunia.com/advisories/36727 - http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html - http://www.ubuntu.com/usn/usn-834-1 - http://marc.info/?l=bugtraq&m=134124585221119&w=2 - http://wiki.rpath.com/
.html - http://www.ubuntu.com/usn/usn-834-1 - http://marc.info/?l=bugtraq&m=134124585221119&w=2 - http://wiki.rpath.com/wiki/Advisories:rPSA-2010-0012 - http://secunia.com/advisories/36695
CVE ID: CVE-2009-3231 State: PUBLISHED Published: 2009-09-17T10:00:00 Last Updated: 2024-08-07T06:22:23.182Z Vendors: n/a Products: n/a Problem Types: n/a Description: The core server component in PostgreSQL 8.3 before 8.3.8 and 8.2 before 8.2.14, when using LDAP authentication with anonymous binds, allows remote attackers to bypass authentication via an empty password. Additional Analyst Notes: - CVE Program Container: References: - https://www.redhat.com/archives/fedora-package-announce/2009-September/msg00307.html - http://www.postgresql.org/docs/8.3/static/release-8-3-8.html - http://www.securityfocus.com/bid/36314 - http://marc.info/?l=bugtraq&m=134124585221119&w=2 - http://secunia.com/
.html - http://www.securityfocus.com/bid/36314 - http://marc.info/?l=bugtraq&m=134124585221119&w=2 - http://secunia.com/advisories/36837 - http://www.postgresql.org/support/security.html - http://secunia.com/advisories/36660 - http://www.securityfocus.com/archive/1/509917/100/0/threaded - http://secunia.com/advisories/36800 - http://www.us.debian.org/security/2009/dsa-1900 - https://bugzilla.redhat.com/show_bug.cgi?id=522084 - https://www.redhat.com/archives/fedora-package-announce/2009-September/msg00305.html - http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html - http://secunia.com/advisories/36727 - http://lists.opensuse.org/opensuse-security-announce/2009-10/msg000
sg00001.html - http://secunia.com/advisories/36727 - http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html - http://www.ubuntu.com/usn/usn-834-1 - http://marc.info/?l=bugtraq&m=134124585221119&w=2 - http://wiki.rpath.com/wiki/Advisories:rPSA-2010-0012
CVE ID: CVE-2009-3232 State: PUBLISHED Published: 2009-09-17T10:00:00 Last Updated: 2024-08-07T06:22:23.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: pam-auth-update for PAM, as used in Ubuntu 8.10 and 9.4, and Debian GNU/Linux, does not properly handle an "empty selection" for system authentication modules in certain rare configurations, which causes any attempt to be successful and allows remote attackers to bypass authentication. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=519927 - https://launchpad.net/bugs/410171 - http://secunia.com/advisories/36620 - http://www.openwall.com/lists/oss-security/2009/
tps://launchpad.net/bugs/410171 - http://secunia.com/advisories/36620 - http://www.openwall.com/lists/oss-security/2009/09/08/7 - http://www.securityfocus.com/bid/36306 - https://usn.ubuntu.com/828-1/
CVE ID: CVE-2009-3233 State: PUBLISHED Published: 2009-09-17T10:00:00Z Last Updated: 2024-09-17T01:51:03.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: changetrack 4.3 allows local users to execute arbitrary commands via CRLF sequences and shell metacharacters in a filename in a directory that is checked by changetrack. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2009/09/16/3 - http://www.securityfocus.com/bid/36420 - http://bugs.debian.org/546791 - http://secunia.com/advisories/36756
CVE ID: CVE-2009-3234 State: PUBLISHED Published: 2009-09-17T10:00:00 Last Updated: 2024-08-07T06:22:23.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the perf_copy_attr function in kernel/perf_counter.c in the Linux kernel 2.6.31-rc1 allows local users to cause a denial of service (crash) and execute arbitrary code via a "big size data" to the perf_counter_open system call. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36423 - http://article.gmane.org/gmane.linux.kernel/890654 - http://www.openwall.com/lists/oss-security/2009/09/17/13 - http://www.openwall.com/lists/oss-security/2009/09/16/1
CVE ID: CVE-2009-3235 State: PUBLISHED Published: 2009-09-17T10:00:00 Last Updated: 2024-08-07T06:22:23.176Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in the Sieve plugin in Dovecot 1.0 before 1.0.4 and 1.1 before 1.1.7, as derived from Cyrus libsieve, allow context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted SIEVE script, as demonstrated by forwarding an e-mail message to a large number of recipients, a different vulnerability than CVE-2009-2632. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36377 - https://exchange.xforce.
Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36377 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53248 - http://secunia.com/advisories/36713 - http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html - http://dovecot.org/list/dovecot-news/2009-September/000135.html - http://www.ubuntu.com/usn/USN-838-1 - http://www.osvdb.org/58103 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10515 - http://www.vupen.com/english/advisories/2009/3184 - http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html - http://secunia.com/advisories/36904 - http://secunia.com/advisories/366
ensuse-security-announce/2009-10/msg00001.html - http://secunia.com/advisories/36904 - http://secunia.com/advisories/36698 - http://www.vupen.com/english/advisories/2009/2641 - http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html - https://www.redhat.com/archives/fedora-package-announce/2009-September/msg00491.html - http://www.openwall.com/lists/oss-security/2009/09/14/3 - http://support.apple.com/kb/HT3937
CVE ID: CVE-2009-3236 State: PUBLISHED Published: 2009-09-17T10:00:00 Last Updated: 2024-08-07T06:22:23.949Z Vendors: n/a Products: n/a Problem Types: n/a Description: The form library in Horde Application Framework 3.2 before 3.2.5 and 3.3 before 3.3.5; Groupware 1.1 before 1.1.6 and 1.2 before 1.2.4; and Groupware Webmail Edition 1.1 before 1.1.6 and 1.2 before 1.2.4; reuses temporary filenames during the upload process which allows remote attackers, with privileges to write to the address book, to overwrite arbitrary files and execute PHP code via crafted Horde_Form_Type_image form field elements. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/58107
_image form field elements. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/58107 - http://secunia.com/advisories/36882 - http://marc.info/?l=horde-announce&m=125294558611682&w=2 - http://secunia.com/advisories/36665 - http://www.debian.org/security/2009/dsa-1897 - http://marc.info/?l=horde-announce&m=125292314007049&w=2 - http://marc.info/?l=horde-announce&m=125295852706029&w=2 - http://marc.info/?l=horde-announce&m=125291625030436&w=2 - http://marc.info/?l=horde-announce&m=125292339907481&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53202 - http://marc.info/?l=horde-announce&m=125292088004087&w=2
CVE ID: CVE-2009-3237 State: PUBLISHED Published: 2009-09-17T10:00:00 Last Updated: 2024-08-07T06:22:23.290Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Horde Application Framework 3.2 before 3.2.5 and 3.3 before 3.3.5; Groupware 1.1 before 1.1.6 and 1.2 before 1.2.4; and Groupware Webmail Edition 1.1 before 1.1.6 and 1.2 before 1.2.4; allow remote attackers to inject arbitrary web script or HTML via the (1) crafted number preferences that are not properly handled in the preference system (services/prefs.php), as demonstrated by the sidebar_width parameter; or (2) crafted unknown MIME "text parts" that are not properly han
php), as demonstrated by the sidebar_width parameter; or (2) crafted unknown MIME "text parts" that are not properly handled in the MIME viewer library (config/mime_drivers.php). Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=horde-announce&m=125294558611682&w=2 - http://secunia.com/advisories/36665 - http://bugs.horde.org/ticket/?id=8311 - http://bugs.horde.org/ticket/?id=8399 - http://marc.info/?l=horde-announce&m=125292314007049&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53202 - http://www.osvdb.org/58109 - http://marc.info/?l=horde-announce&m=125295852706029&w=2 - http://www.osvdb.org/58108 - http://marc.info/?l=horde-announce&m=12529
c.info/?l=horde-announce&m=125295852706029&w=2 - http://www.osvdb.org/58108 - http://marc.info/?l=horde-announce&m=125291625030436&w=2 - http://marc.info/?l=horde-announce&m=125292339907481&w=2 - http://marc.info/?l=horde-announce&m=125292088004087&w=2
CVE ID: CVE-2009-3238 State: PUBLISHED Published: 2009-09-18T10:00:00 Last Updated: 2024-08-07T06:22:24.084Z Vendors: n/a Products: n/a Problem Types: n/a Description: The get_random_int function in drivers/char/random.c in the Linux kernel before 2.6.30 produces insufficiently random numbers, which allows attackers to predict the return value, and possibly defeat protection mechanisms based on randomization, via vectors that leverage the function's tendency to "return the same value over and over again for long stretches of time." Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03836en_us -
ntainer: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03836en_us - http://www.ubuntu.com/usn/USN-852-1 - http://patchwork.kernel.org/patch/21766/ - https://bugzilla.redhat.com/show_bug.cgi?id=519692 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.30 - http://secunia.com/advisories/37351 - https://bugzilla.redhat.com/show_bug.cgi?id=499785 - http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11168 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8a0a9bd4db63bc45e3017bedeafbd88d0eb84d02
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8a0a9bd4db63bc45e3017bedeafbd88d0eb84d02 - http://www.redhat.com/support/errata/RHSA-2009-1438.html - http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00005.html - http://secunia.com/advisories/37105
CVE ID: CVE-2009-3239 State: REJECTED Published: 2009-09-18T10:00:00 Last Updated: 2009-12-15T10:00:00 Description: No description available.
CVE ID: CVE-2009-3240 State: PUBLISHED Published: 2009-09-18T10:00:00Z Last Updated: 2024-09-16T17:23:24.142Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Happy Linux XF-Section module 1.12a for XOOPS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN00425482/index.html - http://linux.ohwada.jp/modules/smartsection/item.php?itemid=458 - http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000062.html
CVE ID: CVE-2009-3241 State: PUBLISHED Published: 2009-09-18T10:00:00 Last Updated: 2024-08-07T06:22:23.293Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the OpcUa (OPC UA) dissector in Wireshark 0.99.6 through 1.0.8 and 1.2.0 through 1.2.1 allows remote attackers to cause a denial of service (memory and CPU consumption) via malformed OPCUA Service CallRequest packets. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36408 - http://secunia.com/advisories/37477 - http://www.wireshark.org/security/wnpa-sec-2009-05.html - http://www.wireshark.org/security/wnpa-sec-2009-06.html - http://secunia.com/adviso
org/security/wnpa-sec-2009-05.html - http://www.wireshark.org/security/wnpa-sec-2009-06.html - http://secunia.com/advisories/36754 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6162 - http://secunia.com/advisories/37409 - http://www.wireshark.org/docs/relnotes/wireshark-1.2.2.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3986 - http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html - http://www.debian.org/security/2009/dsa-1942 - http://www.wireshark.org/docs/relnotes/wireshark-1.0.9.html
CVE ID: CVE-2009-3242 State: PUBLISHED Published: 2009-09-18T10:00:00 Last Updated: 2024-08-07T06:22:23.305Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in packet.c in the GSM A RR dissector in Wireshark 1.2.0 and 1.2.1 allows remote attackers to cause a denial of service (application crash) via unknown vectors related to "an uninitialized dissector handle," which triggers an assertion failure. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36408 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3893 - http://www.wireshark.org/security/wnpa-sec-2009-06.html - http://secunia.com/advisories/36754 -
/show_bug.cgi?id=3893 - http://www.wireshark.org/security/wnpa-sec-2009-06.html - http://secunia.com/advisories/36754 - http://secunia.com/advisories/37409 - http://www.wireshark.org/docs/relnotes/wireshark-1.2.2.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5423
CVE ID: CVE-2009-3243 State: PUBLISHED Published: 2009-09-18T10:00:00 Last Updated: 2024-08-07T06:22:23.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the TLS dissector in Wireshark 1.2.0 and 1.2.1, when running on Windows, allows remote attackers to cause a denial of service (application crash) via unknown vectors related to TLS 1.2 conversations. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36408 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4008 - http://www.wireshark.org/security/wnpa-sec-2009-06.html - http://secunia.com/advisories/36754 - http://secunia.com/advisories/37409 - http
rk.org/security/wnpa-sec-2009-06.html - http://secunia.com/advisories/36754 - http://secunia.com/advisories/37409 - http://www.wireshark.org/docs/relnotes/wireshark-1.2.2.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6413
CVE ID: CVE-2009-3244 State: PUBLISHED Published: 2009-09-18T10:00:00 Last Updated: 2024-08-07T06:22:24.010Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the SwDir.dll ActiveX control in Adobe Shockwave Player 11.5.1.601 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long PlayerVersion property value. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36905 - http://www.exploit-db.com/exploits/9682 - http://www.adobe.com/support/security/bulletins/apsb09-16.html - http://www.vupen.com/english/advisories/2009/3134 - https://oval.cisecurity.org/
ort/security/bulletins/apsb09-16.html - http://www.vupen.com/english/advisories/2009/3134 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6530 - http://securitytracker.com/id?1023123
CVE ID: CVE-2009-3245 State: PUBLISHED Published: 2010-03-05T19:00:00 Last Updated: 2024-08-07T06:22:24.020Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenSSL before 0.9.8m does not check for a NULL return value from bn_wexpand function calls in (1) crypto/bn/bn_div.c, (2) crypto/bn/bn_gf2m.c, (3) crypto/ec/ec2_smpl.c, and (4) engines/e_ubsec.c, which has unspecified impact and context-dependent attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/0916 - http://secunia.com/advisories/42724 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11738 - http://secunia.com
2724 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11738 - http://secunia.com/advisories/39461 - http://marc.info/?l=openssl-cvs&m=126692159706582&w=2 - http://support.apple.com/kb/HT4723 - http://lists.fedoraproject.org/pipermail/package-announce/2010-April/039561.html - http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.663049 - http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6640 - http://marc.info/?l=bugtraq&m=127678688104458&w=2 - http://marc.info/?l=openssl-cvs&m=126692170906712&w=2 - http://