Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-4526 State: PUBLISHED Published: 2011-01-11T01:00:00 Last Updated: 2024-08-07T03:51:17.185Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the sctp_icmp_proto_unreachable function in net/sctp/input.c in Linux kernel 2.6.11-rc2 through 2.6.33 allows remote attackers to cause a denial of service (panic) via an ICMP unreachable message to a socket that is already locked by a user, which causes the socket to be freed and triggers list corruption, related to the sctp_wait_for_connect function. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2011-0163.html - http://www.openwall.com/lists/oss-s
Container: References: - http://www.redhat.com/support/errata/RHSA-2011-0163.html - http://www.openwall.com/lists/oss-security/2011/01/04/13 - http://www.securityfocus.com/archive/1/520102/100/0/threaded - http://secunia.com/advisories/46397 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-4526 - http://www.vmware.com/security/advisories/VMSA-2011-0012.html - http://www.openwall.com/lists/oss-security/2011/01/04/3 - http://www.securityfocus.com/bid/45661 - http://www.vupen.com/english/advisories/2011/0169 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=50b5d6ad63821cea324a5a7a19854d4de1a0a819 - https://exchange.xforce.ibmcloud.com/vulnerabilities/
.git%3Ba=commitdiff%3Bh=50b5d6ad63821cea324a5a7a19854d4de1a0a819 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64616 - http://secunia.com/advisories/42964
CVE ID: CVE-2010-4527 State: PUBLISHED Published: 2011-01-13T18:35:00 Last Updated: 2024-08-07T03:51:17.231Z Vendors: n/a Products: n/a Problem Types: n/a Description: The load_mixer_volumes function in sound/oss/soundcard.c in the OSS sound subsystem in the Linux kernel before 2.6.37 incorrectly expects that a certain name field ends with a '\0' character, which allows local users to conduct buffer overflow attacks and gain privileges, or possibly obtain sensitive information from kernel memory, via a SOUND_MIXER_SETLEVELS ioctl call. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2010/12/31/4 - https://bugzilla.redhat.com/show_bug.cg
m Container: References: - http://openwall.com/lists/oss-security/2010/12/31/4 - https://bugzilla.redhat.com/show_bug.cgi?id=667615 - http://xorl.wordpress.com/2011/01/09/cve-2010-4527-linux-kernel-oss-sound-card-driver-buffer-overflow/ - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.37 - http://www.securityfocus.com/bid/45629 - http://openwall.com/lists/oss-security/2010/12/31/1 - http://secunia.com/advisories/42765 - http://www.vupen.com/english/advisories/2011/0375 - http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00002.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d81a12bc29ae4038770e05dce4ab7f26fd5880fb - http://secuni
l.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d81a12bc29ae4038770e05dce4ab7f26fd5880fb - http://secunia.com/advisories/43291
CVE ID: CVE-2010-4528 State: PUBLISHED Published: 2011-01-07T11:00:00 Last Updated: 2024-08-07T03:51:17.019Z Vendors: n/a Products: n/a Problem Types: n/a Description: directconn.c in the MSN protocol plugin in libpurple 2.7.6 through 2.7.8 in Pidgin before 2.7.9 allows remote authenticated users to cause a denial of service (NULL pointer dereference and application crash) via a short p2pv2 packet in a DirectConnect (aka direct connection) session. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=665421 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00003.html - http://www.openwall.com/lists/oss-security/2010/12/2
sts.opensuse.org/opensuse-security-announce/2011-01/msg00003.html - http://www.openwall.com/lists/oss-security/2010/12/27/1 - http://developer.pidgin.im/viewmtn/revision/diff/e76f4ad4ef2f10588195a0eedc7a08f82062f79c/with/aaa07bde3c51d3684391ae6ed86b6dbaeab5d031/libpurple/protocols/msn/directconn.c - http://www.openwall.com/lists/oss-security/2010/12/31/5 - http://www.pidgin.im/news/security/?id=49 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:259 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18461 - http://developer.pidgin.im/viewmtn/revision/info/aaa07bde3c51d3684391ae6ed86b6dbaeab5d031 - http://www.securityfocus.com/bid/45581 - htt
.pidgin.im/viewmtn/revision/info/aaa07bde3c51d3684391ae6ed86b6dbaeab5d031 - http://www.securityfocus.com/bid/45581 - http://secunia.com/advisories/42877 - http://www.vupen.com/english/advisories/2011/0028 - http://pidgin.im/pipermail/support/2010-December/009251.html - http://secunia.com/advisories/42732 - http://www.vupen.com/english/advisories/2011/0076 - http://www.vupen.com/english/advisories/2011/0054 - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052862.html - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052905.html - http://secunia.com/advisories/42824
CVE ID: CVE-2010-4529 State: PUBLISHED Published: 2011-01-13T18:35:00 Last Updated: 2024-08-07T03:51:17.171Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer underflow in the irda_getsockopt function in net/irda/af_irda.c in the Linux kernel before 2.6.37 on platforms other than x86 allows local users to obtain potentially sensitive information from kernel heap memory via an IRLMP_ENUMDEVICES getsockopt call. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/45556 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.37 - http://www.spinics.net/lists/netdev/msg150842.html - http://secunia.com/advisories/42684 - http://gi
/ChangeLog-2.6.37 - http://www.spinics.net/lists/netdev/msg150842.html - http://secunia.com/advisories/42684 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=fdac1e0697356ac212259f2147aa60c72e334861 - http://www.vupen.com/english/advisories/2011/0375 - http://openwall.com/lists/oss-security/2010/12/23/1 - http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00002.html - http://openwall.com/lists/oss-security/2011/01/03/1 - http://secunia.com/advisories/43291
CVE ID: CVE-2010-4530 State: PUBLISHED Published: 2011-01-18T17:00:00 Last Updated: 2024-08-07T03:51:17.242Z Vendors: n/a Products: n/a Problem Types: n/a Description: Signedness error in ccid_serial.c in libccid in the USB Chip/Smart Card Interface Devices (CCID) driver, as used in pcscd in PCSC-Lite 1.5.3 and possibly other products, allows physically proximate attackers to execute arbitrary code via a smart card with a crafted serial number that causes a negative value to be used in a memcpy operation, which triggers a buffer overflow. NOTE: some sources refer to this issue as an integer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lis
sue as an integer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2010/12/22/7 - http://rhn.redhat.com/errata/RHSA-2013-1323.html - http://www.securityfocus.com/bid/45806 - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053097.html - http://www.vupen.com/english/advisories/2011/0100 - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053076.html - http://www.vupen.com/english/advisories/2011/0179 - http://labs.mwrinfosecurity.com/files/Advisories/mwri_pcsc-libccid-buffer-overflow_2010-12-13.pdf - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 - http://www.mandri
cid-buffer-overflow_2010-12-13.pdf - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:014 - https://bugzilla.redhat.com/show_bug.cgi?id=664986 - http://www.openwall.com/lists/oss-security/2011/01/03/3 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64961
CVE ID: CVE-2010-4531 State: PUBLISHED Published: 2011-01-18T17:00:00 Last Updated: 2024-08-07T03:51:17.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the ATRDecodeAtr function in the Answer-to-Reset (ATR) Handler (atrhandler.c) for pcscd in PCSC-Lite 1.5.3, and possibly other 1.5.x and 1.6.x versions, allows physically proximate attackers to cause a denial of service (crash) and possibly execute arbitrary code via a smart card with an ATR message containing a long attribute value. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053095.html - http://www.vupe
iner: References: - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053095.html - http://www.vupen.com/english/advisories/2011/0180 - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053079.html - http://labs.mwrinfosecurity.com/files/Advisories/mwri_pcsc-atr-handler-buffer-overflow_2010-12-13.pdf - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=607781 - http://www.openwall.com/lists/oss-security/2010/12/22/7 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-4531 - http://secunia.com/advisories/42912 - http://www.vupen.com/english/advisories/2011/0256 - http://www.vupen.com/english/advisories/2011/0101 - http://www.vupen.com/english/advisor
/english/advisories/2011/0256 - http://www.vupen.com/english/advisories/2011/0101 - http://www.vupen.com/english/advisories/2010/3264 - http://lists.alioth.debian.org/pipermail/pcsclite-cvs-commit/2010-November/004923.html - http://secunia.com/advisories/43112 - http://www.securityfocus.com/bid/45450 - http://www.openwall.com/lists/oss-security/2011/01/03/3 - http://www.debian.org/security/2011/dsa-2156 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:015
CVE ID: CVE-2010-4532 State: PUBLISHED Published: 2019-11-13T17:19:53 Last Updated: 2024-08-07T03:51:17.811Z Vendors: offlineimap Products: offlineimap Problem Types: Other Description: offlineimap before 6.3.2 does not check for SSL server certificate validation when "ssl = yes" option is specified which can allow man-in-the-middle attacks. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2010-4532 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-4532 - https://access.redhat.com/security/cve/cve-2010-4532 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=603450 - https://www.openwall.com/lists/oss-security/2010/12/23/2
CVE ID: CVE-2010-4533 State: PUBLISHED Published: 2019-11-13T18:30:49 Last Updated: 2024-08-07T03:51:17.696Z Vendors: offlineimap Products: offlineimap Problem Types: Other Description: offlineimap before 6.3.4 added support for SSL server certificate validation but it is still possible to use SSL v2 protocol, which is a flawed protocol with multiple security deficiencies. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2010-4533 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-4533 - https://access.redhat.com/security/cve/cve-2010-4533 - https://www.openwall.com/lists/oss-security/2010/12/23/2 - https://bugs.debian.org/c
at.com/security/cve/cve-2010-4533 - https://www.openwall.com/lists/oss-security/2010/12/23/2 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=606962
CVE ID: CVE-2010-4534 State: PUBLISHED Published: 2011-01-10T19:18:00 Last Updated: 2024-08-07T03:51:17.373Z Vendors: n/a Products: n/a Problem Types: n/a Description: The administrative interface in django.contrib.admin in Django before 1.1.3, 1.2.x before 1.2.4, and 1.3.x before 1.3 beta 1 does not properly restrict use of the query string to perform certain object filtering, which allows remote authenticated users to obtain sensitive information via a series of requests containing regular expressions, as demonstrated by a created_by__password__regex parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/45562 - http://ngenuity-is.com/a
Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/45562 - http://ngenuity-is.com/advisories/2010/dec/22/information-leakage-in-django-administrative-inter/ - http://www.openwall.com/lists/oss-security/2010/12/23/4 - http://www.securityfocus.com/archive/1/515446 - http://www.ubuntu.com/usn/USN-1040-1 - http://www.openwall.com/lists/oss-security/2011/01/03/5 - http://secunia.com/advisories/42913 - http://evilpacket.net/2010/dec/22/information-leakage-django-administrative-interfac/ - http://code.djangoproject.com/changeset/15031 - http://www.vupen.com/english/advisories/2011/0048 - http://www.vupen.com/english/advisories/2011/0098 - http://www.djangoprojec
www.vupen.com/english/advisories/2011/0048 - http://www.vupen.com/english/advisories/2011/0098 - http://www.djangoproject.com/weblog/2010/dec/22/security/ - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053041.html - https://bugzilla.redhat.com/show_bug.cgi?id=665373 - http://archives.neohapsis.com/archives/fulldisclosure/2010-12/0580.html - http://secunia.com/advisories/42715 - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053072.html - http://secunia.com/advisories/42827
CVE ID: CVE-2010-4535 State: PUBLISHED Published: 2011-01-10T19:18:00 Last Updated: 2024-08-07T03:51:17.300Z Vendors: n/a Products: n/a Problem Types: n/a Description: The password reset functionality in django.contrib.auth in Django before 1.1.3, 1.2.x before 1.2.4, and 1.3.x before 1.3 beta 1 does not validate the length of a string representing a base36 timestamp, which allows remote attackers to cause a denial of service (resource consumption) via a URL that specifies a large base36 integer. Additional Analyst Notes: - CVE Program Container: References: - http://code.djangoproject.com/changeset/15032 - http://www.openwall.com/lists/oss-security/2010/12/23/4 - http://www.ubuntu.com/usn/US
angoproject.com/changeset/15032 - http://www.openwall.com/lists/oss-security/2010/12/23/4 - http://www.ubuntu.com/usn/USN-1040-1 - http://www.securityfocus.com/bid/45563 - http://www.openwall.com/lists/oss-security/2011/01/03/5 - http://secunia.com/advisories/42913 - http://www.vupen.com/english/advisories/2011/0048 - http://www.vupen.com/english/advisories/2011/0098 - http://www.djangoproject.com/weblog/2010/dec/22/security/ - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053041.html - https://bugzilla.redhat.com/show_bug.cgi?id=665373 - http://secunia.com/advisories/42715 - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053072.html - http://
unia.com/advisories/42715 - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053072.html - http://secunia.com/advisories/42827
CVE ID: CVE-2010-4536 State: PUBLISHED Published: 2011-01-03T19:26:00 Last Updated: 2024-08-07T03:51:17.234Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in KSES, as used in WordPress before 3.0.4, allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) the & (ampersand) character, (2) the case of an attribute name, (3) a padded entity, and (4) an entity that is not in normalized form. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/42755 - http://www.openwall.com/lists/oss-security/2010/12/30/1 - http://lists.fedoraproject.org/pipermail/package-an
es/42755 - http://www.openwall.com/lists/oss-security/2010/12/30/1 - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053293.html - http://core.trac.wordpress.org/changeset/17172/branches/3.0 - http://wordpress.org/news/2010/12/3-0-4-update/ - http://www.vupen.com/english/advisories/2011/0167 - http://www.vupen.com/english/advisories/2010/3335 - http://www.securityfocus.com/bid/45620 - http://secunia.com/advisories/43000 - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053289.html
CVE ID: CVE-2010-4537 State: PUBLISHED Published: 2011-01-13T18:35:00Z Last Updated: 2024-09-16T16:48:36.296Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in CrawlTrack before 3.2.7, when a public stats page is provided, allows remote attackers to execute arbitrary PHP code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2011/01/03/7 - http://openwall.com/lists/oss-security/2010/12/31/3 - http://www.crawltrack.net/changelog.php
CVE ID: CVE-2010-4538 State: PUBLISHED Published: 2011-01-07T18:00:00 Last Updated: 2024-08-07T03:51:17.220Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the sect_enttec_dmx_da function in epan/dissectors/packet-enttec.c in Wireshark 1.4.2 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted ENTTEC DMX packet with Run Length Encoding (RLE) compression. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/0053 - http://openwall.com/lists/oss-security/2010/12/31/7 - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/0
/openwall.com/lists/oss-security/2010/12/31/7 - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053061.html - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053042.html - http://www.vupen.com/english/advisories/2011/0110 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:002 - http://www.securitytracker.com/id?1024930 - http://secunia.com/advisories/42853 - http://secunia.com/advisories/42910 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5539 - http://www.vupen.com/english/advisories/2011/0008 - http://openwall.com/lists/oss-security/2011/01/03/8 - http://www.securityfocus.com/bid/45634 - http://osvdb.org/70244 - https://oval.
ll.com/lists/oss-security/2011/01/03/8 - http://www.securityfocus.com/bid/45634 - http://osvdb.org/70244 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14937 - http://secunia.com/advisories/42767 - http://www.vupen.com/english/advisories/2011/0079 - http://www.redhat.com/support/errata/RHSA-2011-0013.html - http://www.vupen.com/english/advisories/2011/0069 - http://www.debian.org/security/2011/dsa-2144 - http://www.vupen.com/english/advisories/2011/0099 - http://secunia.com/advisories/42914
CVE ID: CVE-2010-4539 State: PUBLISHED Published: 2011-01-07T18:00:00 Last Updated: 2024-08-07T03:51:17.173Z Vendors: n/a Products: n/a Problem Types: n/a Description: The walk function in repos.c in the mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.15, allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via vectors that trigger the walking of SVNParentPath collections. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/64472 - http://openwall.com/lists/oss-security/2011/01/04/8 - http://www.vupen.com/english/advisories/2011
lnerabilities/64472 - http://openwall.com/lists/oss-security/2011/01/04/8 - http://www.vupen.com/english/advisories/2011/0103 - http://secunia.com/advisories/42969 - http://www.vupen.com/english/advisories/2011/0264 - http://secunia.com/advisories/42780 - http://svn.apache.org/repos/asf/subversion/tags/1.6.15/CHANGES - http://openwall.com/lists/oss-security/2011/01/05/4 - http://openwall.com/lists/oss-security/2011/01/03/9 - http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html - http://secunia.com/advisories/43346 - http://www.securitytracker.com/id?1024934 - http://secunia.com/advisories/43115 - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053
24934 - http://secunia.com/advisories/43115 - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053230.html - http://www.vupen.com/english/advisories/2011/0015 - http://openwall.com/lists/oss-security/2011/01/02/1 - http://mail-archives.apache.org/mod_mbox/www-announce/201011.mbox/%3CAANLkTi=5+NOi-Cp=fKCx6mAW-TofFVW=ikEQkXgQB8Bt%40mail.gmail.com%3E - http://www.redhat.com/support/errata/RHSA-2011-0258.html - http://www.redhat.com/support/errata/RHSA-2011-0257.html - http://www.mandriva.com/security/advisories?name=MDVSA-2011:006 - http://openwall.com/lists/oss-security/2011/01/04/10 - http://www.ubuntu.com/usn/USN-1053-1 - http://svn.apache.org/viewvc?view=revision&revis
sts/oss-security/2011/01/04/10 - http://www.ubuntu.com/usn/USN-1053-1 - http://svn.apache.org/viewvc?view=revision&revision=1033166 - http://www.securityfocus.com/bid/45655 - https://bugzilla.redhat.com/show_bug.cgi?id=667407 - http://secunia.com/advisories/43139 - http://mail-archives.apache.org/mod_mbox/subversion-users/201011.mbox/%3C3923B919-C2BE-41AD-84ED-7207837FAD1A%40ncsa.illinois.edu%3E - http://www.vupen.com/english/advisories/2011/0162
CVE ID: CVE-2010-4540 State: PUBLISHED Published: 2011-01-07T19:00:00 Last Updated: 2024-08-07T03:51:17.657Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the load_preset_response function in plug-ins/lighting/lighting-ui.c in the "LIGHTING EFFECTS > LIGHT" plugin in GIMP 2.6.11 allows user-assisted remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long Position field in a plugin configuration file. NOTE: it may be uncommon to obtain a GIMP plugin configuration file from an untrusted source that is separate from the distribution of the plugin itself. NOTE: some of these details are obtained f
untrusted source that is separate from the distribution of the plugin itself. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2012/dsa-2426 - http://security.gentoo.org/glsa/glsa-201209-23.xml - https://bugzilla.redhat.com/show_bug.cgi?id=666793 - http://www.vupen.com/english/advisories/2011/0016 - http://www.redhat.com/support/errata/RHSA-2011-0839.html - http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html - http://www.redhat.com/support/errata/RHSA-2011-0838.html - http://openwall.com/lists/oss-security/2011/01/04/7 - http://secunia.com/advisories/44
port/errata/RHSA-2011-0838.html - http://openwall.com/lists/oss-security/2011/01/04/7 - http://secunia.com/advisories/44750 - http://secunia.com/advisories/42771 - http://osvdb.org/70282 - http://secunia.com/advisories/50737 - http://openwall.com/lists/oss-security/2011/01/03/2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64582 - http://secunia.com/advisories/48236 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=608497 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:103
CVE ID: CVE-2010-4541 State: PUBLISHED Published: 2011-01-07T19:00:00 Last Updated: 2024-08-07T03:51:16.959Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the loadit function in plug-ins/common/sphere-designer.c in the SPHERE DESIGNER plugin in GIMP 2.6.11 allows user-assisted remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long "Number of lights" field in a plugin configuration file. NOTE: it may be uncommon to obtain a GIMP plugin configuration file from an untrusted source that is separate from the distribution of the plugin itself. Additional Analyst Notes: - CVE Program Container: Refe