Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-4007 State: PUBLISHED Published: 2010-10-20T17:00:00Z Last Updated: 2024-09-16T16:39:13.684Z Vendors: n/a Products: n/a Problem Types: n/a Description: Oracle Mojarra uses an encrypted View State without a Message Authentication Code (MAC), which makes it easier for remote attackers to perform successful modifications of the View State via a padding oracle attack, a related issue to CVE-2010-2057. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=623799 - https://issues.apache.org/jira/browse/MYFACES-2749
CVE ID: CVE-2010-4008 State: PUBLISHED Published: 2010-11-16T23:00:00 Last Updated: 2024-08-07T03:26:12.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: libxml2 before 2.7.8, as used in Google Chrome before 7.0.517.44, Apple Safari 5.0.2 and earlier, and other products, reads from invalid memory locations during processing of malformed XPath expressions, which allows context-dependent attackers to cause a denial of service (application crash) via a crafted XML document. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/40775 - http://secunia.com/advisories/42175 - http://mail.gnome.org/archives/xml/2010-November/msg00015.html - http
ries/40775 - http://secunia.com/advisories/42175 - http://mail.gnome.org/archives/xml/2010-November/msg00015.html - http://googlechromereleases.blogspot.com/2010/11/stable-channel-update.html - http://marc.info/?l=bugtraq&m=130331363227777&w=2 - http://www.securityfocus.com/bid/44779 - http://www.vupen.com/english/advisories/2011/0230 - http://www.vupen.com/english/advisories/2010/3046 - http://rhn.redhat.com/errata/RHSA-2013-0217.html - http://www.ubuntu.com/usn/USN-1016-1 - http://blog.bkis.com/en/libxml2-vulnerability-in-google-chrome-and-apple-safari/ - http://secunia.com/advisories/42109 - http://support.apple.com/kb/HT4566 - http://lists.opensuse.org/opensuse-security-announce/2010-12/
om/advisories/42109 - http://support.apple.com/kb/HT4566 - http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00000.html - http://www.redhat.com/support/errata/RHSA-2011-1749.html - http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html - http://lists.apple.com/archives/security-announce/2011/Mar/msg00000.html - http://www.openoffice.org/security/cves/CVE-2010-4008_CVE-2010-4494.html - http://www.vupen.com/english/advisories/2010/3100 - http://secunia.com/advisories/42314 - http://support.apple.com/kb/HT4554 - http://www.debian.org/security/2010/dsa-2128 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:243 - http://lists.apple.com/archives/security
10/dsa-2128 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:243 - http://lists.apple.com/archives/security-announce/2011//Mar/msg00004.html - http://marc.info/?l=bugtraq&m=130331363227777&w=2 - http://www.vupen.com/english/advisories/2010/3076 - http://support.apple.com/kb/HT4456 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12148 - http://code.google.com/p/chromium/issues/detail?id=58731 - http://marc.info/?l=bugtraq&m=139447903326211&w=2 - http://secunia.com/advisories/42429 - http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html - http://support.apple.com/kb/HT4581
CVE ID: CVE-2010-4009 State: PUBLISHED Published: 2010-12-09T19:00:00 Last Updated: 2024-08-07T03:26:12.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in Apple QuickTime before 7.6.9 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2010//Dec/msg00000.html - http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16218 - http://support.apple.com/kb/HT4447 - http://www
y.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16218 - http://support.apple.com/kb/HT4447 - http://www.securitytracker.com/id?1024830 - http://support.apple.com/kb/HT4581
CVE ID: CVE-2010-4010 State: PUBLISHED Published: 2010-11-16T22:00:00 Last Updated: 2024-08-07T03:26:12.330Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in Apple Type Services (ATS) in Apple Mac OS X 10.5.8 allows remote attackers to execute arbitrary code via a crafted embedded Compact Font Format (CFF) font in a document. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/63170 - http://support.apple.com/kb/HT4435 - http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html
CVE ID: CVE-2010-4011 State: PUBLISHED Published: 2010-11-16T23:00:00Z Last Updated: 2024-09-17T00:45:30.684Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dovecot in Apple Mac OS X 10.6.5 10H574 does not properly manage memory for user names, which allows remote authenticated users to read the private e-mail of other persons in opportunistic circumstances via standard e-mail clients accessing a user's own mailbox, related to a "memory aliasing issue." Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT4452 - http://lists.apple.com/archives/security-announce/2010//Nov/msg00001.html
CVE ID: CVE-2010-4012 State: PUBLISHED Published: 2010-12-08T19:00:00Z Last Updated: 2024-09-16T20:46:41.908Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in Apple iOS 4.0 through 4.1 for iPhone 3G and later allows physically proximate attackers to bypass the passcode lock by making a call from the Emergency Call screen, then quickly pressing the Sleep/Wake button. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT4456
CVE ID: CVE-2010-4013 State: PUBLISHED Published: 2011-01-10T19:18:00 Last Updated: 2024-08-07T03:26:12.333Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in PackageKit in Apple Mac OS X 10.6.x before 10.6.6 allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (application crash) via vectors related to interaction between Software Update and distribution scripts. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1024938 - http://lists.apple.com/archives/security-announce/2011//Jan/msg00000.html - http://www.vupen.com/english/advisories/2011/0050 - http://support.appl
ives/security-announce/2011//Jan/msg00000.html - http://www.vupen.com/english/advisories/2011/0050 - http://support.apple.com/kb/HT4498 - http://secunia.com/advisories/42841 - http://osvdb.org/70309
CVE ID: CVE-2010-4014 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:06.169Z Description: No description available.
CVE ID: CVE-2010-4015 State: PUBLISHED Published: 2011-02-02T00:00:00 Last Updated: 2024-08-07T03:26:12.220Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the gettoken function in contrib/intarray/_int_bool.c in the intarray array module in PostgreSQL 9.0.x before 9.0.3, 8.4.x before 8.4.7, 8.3.x before 8.3.14, and 8.2.x before 8.2.20 allows remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via integers with a large number of digits to unspecified functions. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/0283 - http://osvdb.org/70740 - http://secuni
gram Container: References: - http://www.vupen.com/english/advisories/2011/0283 - http://osvdb.org/70740 - http://secunia.com/advisories/43144 - http://marc.info/?l=bugtraq&m=134124585221119&w=2 - http://www.redhat.com/support/errata/RHSA-2011-0198.html - http://lists.fedoraproject.org/pipermail/package-announce/2011-February/053817.html - http://www.redhat.com/support/errata/RHSA-2011-0197.html - http://www.postgresql.org/about/news.1289 - http://www.vupen.com/english/advisories/2011/0349 - http://secunia.com/advisories/43187 - http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html - http://www.ubuntu.com/usn/USN-1058-1 - http://www.mandriva.com/security/advisories?name=
nnounce/2011-04/msg00000.html - http://www.ubuntu.com/usn/USN-1058-1 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:021 - http://www.vupen.com/english/advisories/2011/0262 - http://www.vupen.com/english/advisories/2011/0303 - http://www.debian.org/security/2011/dsa-2157 - http://www.vupen.com/english/advisories/2011/0287 - http://secunia.com/advisories/43155 - http://secunia.com/advisories/43154 - http://secunia.com/advisories/43188 - http://www.postgresql.org/support/security - http://www.securityfocus.com/bid/46084 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65060 - http://secunia.com/advisories/43240 - http://git.postgresql.org/gitweb?p=postgresql.git%3Ba=commitd
nerabilities/65060 - http://secunia.com/advisories/43240 - http://git.postgresql.org/gitweb?p=postgresql.git%3Ba=commitdiff%3Bh=7ccb6dc2d3e266a551827bb99179708580f72431 - http://lists.fedoraproject.org/pipermail/package-announce/2011-February/053888.html - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 - http://www.vupen.com/english/advisories/2011/0278 - http://www.vupen.com/english/advisories/2011/0299 - http://marc.info/?l=bugtraq&m=134124585221119&w=2
CVE ID: CVE-2010-4016 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:06.567Z Description: No description available.
CVE ID: CVE-2010-4017 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:06.934Z Description: No description available.
CVE ID: CVE-2010-4020 State: PUBLISHED Published: 2010-12-02T16:00:00 Last Updated: 2024-08-07T03:26:12.249Z Vendors: n/a Products: n/a Problem Types: n/a Description: MIT Kerberos 5 (aka krb5) 1.8.x through 1.8.3 does not reject RC4 key-derivation checksums, which might allow remote authenticated users to forge a (1) AD-SIGNEDPATH or (2) AD-KDC-ISSUED signature, and possibly gain privileges, by leveraging the small key space that results from certain one-byte stream-cipher operations. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/3094 - http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html - http://www.mandr
lish/advisories/2010/3094 - http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html - http://www.mandriva.com/security/advisories?name=MDVSA-2010:246 - http://lists.fedoraproject.org/pipermail/package-announce/2010-December/051999.html - http://kb.vmware.com/kb/1035108 - http://www.vupen.com/english/advisories/2010/3118 - http://www.securityfocus.com/archive/1/514953/100/0/threaded - http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00000.html - http://www.vmware.com/security/advisories/VMSA-2011-0007.html - http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html - http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2010-007.txt - http://www.vup
curity-announce/2011/Mar/msg00006.html - http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2010-007.txt - http://www.vupen.com/english/advisories/2010/3095 - http://secunia.com/advisories/42399 - http://lists.vmware.com/pipermail/security-announce/2011/000133.html - http://www.securitytracker.com/id?1024803 - http://www.securityfocus.com/archive/1/517739/100/0/threaded - http://lists.fedoraproject.org/pipermail/package-announce/2010-December/051976.html - http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html - http://www.redhat.com/support/errata/RHSA-2010-0925.html - http://www.ubuntu.com/usn/USN-1030-1 - http://osvdb.org/69608 - http://www.securityfocus.com/bid/45117 -
010-0925.html - http://www.ubuntu.com/usn/USN-1030-1 - http://osvdb.org/69608 - http://www.securityfocus.com/bid/45117 - http://support.apple.com/kb/HT4581
CVE ID: CVE-2010-4021 State: PUBLISHED Published: 2010-12-02T16:00:00 Last Updated: 2024-08-07T03:26:12.376Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.7 does not properly restrict the use of TGT credentials for armoring TGS requests, which might allow remote authenticated users to impersonate a client by rewriting an inner request, aka a "KrbFastReq forgery issue." Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/3094 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:246 - http://kb.vmware.com/kb/1035108 - http://www.vupen.com/english/advi
ndriva.com/security/advisories?name=MDVSA-2010:246 - http://kb.vmware.com/kb/1035108 - http://www.vupen.com/english/advisories/2010/3118 - http://www.securityfocus.com/archive/1/514953/100/0/threaded - http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00000.html - http://osvdb.org/69607 - http://www.vmware.com/security/advisories/VMSA-2011-0007.html - http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html - http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2010-007.txt - http://www.securityfocus.com/bid/45122 - http://lists.vmware.com/pipermail/security-announce/2011/000133.html - http://www.securitytracker.com/id?1024803 - http://www.securityfocus.com/archive
il/security-announce/2011/000133.html - http://www.securitytracker.com/id?1024803 - http://www.securityfocus.com/archive/1/517739/100/0/threaded - http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html - http://www.ubuntu.com/usn/USN-1030-1 - http://support.apple.com/kb/HT4581
CVE ID: CVE-2010-4022 State: PUBLISHED Published: 2011-02-10T17:00:00 Last Updated: 2024-08-07T03:26:12.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: The do_standalone function in the MIT krb5 KDC database propagation daemon (kpropd) in Kerberos 1.7, 1.8, and 1.9, when running in standalone mode, does not properly handle when a worker child process "exits abnormally," which allows remote attackers to cause a denial of service (listening process termination, no new connections, and lack of updates in slave KVC) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/516286/100/0/threaded - http://www.ma
tes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/516286/100/0/threaded - http://www.mandriva.com/security/advisories?name=MDVSA-2011:025 - http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2011-001.txt - http://www.securitytracker.com/id?1025035 - http://www.vupen.com/english/advisories/2011/0347 - http://secunia.com/advisories/43260 - http://www.vupen.com/english/advisories/2011/0333 - http://www.vupen.com/english/advisories/2011/0329 - http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00004.html - http://www.vupen.com/english/advisories/2011/0464 - http://www.securityfocus.com/bid/46269 - http://securityreason.com/securityalert/8070 - http://
h/advisories/2011/0464 - http://www.securityfocus.com/bid/46269 - http://securityreason.com/securityalert/8070 - http://secunia.com/advisories/43275 - http://www.redhat.com/support/errata/RHSA-2011-0200.html
CVE ID: CVE-2010-4023 State: PUBLISHED Published: 2010-10-28T19:00:00 Last Updated: 2024-08-07T03:34:36.234Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in HP Insight Control Power Management before 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=128811282526943&w=2 - http://www.securitytracker.com/id?1024642 - http://marc.info/?l=bugtraq&m=128811282526943&w=2
CVE ID: CVE-2010-4024 State: PUBLISHED Published: 2010-10-28T19:00:00 Last Updated: 2024-08-07T03:34:36.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in HP Insight Control Power Management before 6.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=128811282526943&w=2 - http://www.securitytracker.com/id?1024642 - http://marc.info/?l=bugtraq&m=128811282526943&w=2
CVE ID: CVE-2010-4025 State: PUBLISHED Published: 2010-10-28T19:00:00 Last Updated: 2024-08-07T03:34:36.334Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Doc Viewer in HP Palm webOS 1.4.1 allows remote attackers to execute arbitrary code via a crafted document, as demonstrated by a Word document. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=128821239031677&w=2 - http://marc.info/?l=bugtraq&m=128821239031677&w=2 - http://www.securitytracker.com/id?1024656 - http://secunia.com/advisories/42023
CVE ID: CVE-2010-4026 State: PUBLISHED Published: 2010-10-28T19:00:00 Last Updated: 2024-08-07T03:34:36.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the service API in HP Palm webOS 1.4.1 allows local users to gain privileges by leveraging the ability to perform certain service calls. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1024647 - http://marc.info/?l=bugtraq&m=128820663424237&w=2 - http://secunia.com/advisories/42023 - http://marc.info/?l=bugtraq&m=128820663424237&w=2
CVE ID: CVE-2010-4027 State: PUBLISHED Published: 2010-10-28T19:00:00 Last Updated: 2024-08-07T03:34:36.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the camera application in HP Palm webOS 1.4.1 allows local users to overwrite arbitrary files via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=128820226417721&w=2 - http://www.securitytracker.com/id?1024658 - http://marc.info/?l=bugtraq&m=128820226417721&w=2 - http://secunia.com/advisories/42023
CVE ID: CVE-2010-4028 State: PUBLISHED Published: 2010-10-28T19:00:00 Last Updated: 2024-08-07T03:34:36.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in LoadRunner Web Tours 9.10 in HP LoadRunner 9.1 and earlier allows remote attackers to cause a denial of service, and possibly obtain sensitive information or modify data, via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=128821242731749&w=2 - http://marc.info/?l=bugtraq&m=128821242731749&w=2 - http://www.securitytracker.com/id?1024657
CVE ID: CVE-2010-4029 State: PUBLISHED Published: 2010-10-28T19:00:00 Last Updated: 2024-08-07T03:34:36.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP Storage Essentials before 6.3.0, when LDAP authentication is enabled, allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1024649 - http://osvdb.org/68923 - http://marc.info/?l=bugtraq&m=128821178730873&w=2 - http://secunia.com/advisories/42022 - http://marc.info/?l=bugtraq&m=128821178730873&w=2
CVE ID: CVE-2010-4030 State: PUBLISHED Published: 2010-11-01T19:00:00 Last Updated: 2024-08-07T03:34:36.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in HP Insight Control Performance Management before 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/2832 - http://www.securitytracker.com/id?1024672 - http://www.securityfocus.com/bid/44585 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02563642 - https://exchange.xforce.ibmcloud.com/vulnerabilities/62884 - h
/bizsupport/TechSupport/Document.jsp?objectID=c02563642 - https://exchange.xforce.ibmcloud.com/vulnerabilities/62884 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02563642
CVE ID: CVE-2010-4031 State: PUBLISHED Published: 2010-11-01T19:00:00 Last Updated: 2024-08-07T03:34:36.280Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP Insight Control Performance Management before 6.2 allows remote authenticated users to gain privileges via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/2832 - https://exchange.xforce.ibmcloud.com/vulnerabilities/62886 - http://www.securitytracker.com/id?1024672 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02563642 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=
rt/TechSupport/Document.jsp?objectID=c02563642 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02563642 - http://www.securityfocus.com/bid/44582
CVE ID: CVE-2010-4032 State: PUBLISHED Published: 2010-11-01T19:00:00 Last Updated: 2024-08-07T03:34:36.211Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in HP Insight Control Performance Management before 6.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/2832 - http://www.securitytracker.com/id?1024672 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02563642 - https://exchange.xforce.ibmcloud.com/vulnerabilities/62885 - http://h20000.www2.hp.com/
ocument.jsp?objectID=c02563642 - https://exchange.xforce.ibmcloud.com/vulnerabilities/62885 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02563642 - http://www.securityfocus.com/bid/44584
CVE ID: CVE-2010-4033 State: PUBLISHED Published: 2010-10-21T18:12:00 Last Updated: 2024-08-07T03:34:36.334Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 7.0.517.41 does not properly implement the autofill and autocomplete functionality, which allows remote attackers to conduct "profile spamming" attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/chromium/issues/detail?id=48225 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7159 - http://www.vupen.com/english/advisories/2010/2731 - http://code.google.com/p/chromium/issues/detail?id=51727 - http:
9 - http://www.vupen.com/english/advisories/2010/2731 - http://code.google.com/p/chromium/issues/detail?id=51727 - http://secunia.com/advisories/41888 - http://www.securityfocus.com/bid/44241 - http://googlechromereleases.blogspot.com/2010/10/stable-channel-update.html
CVE ID: CVE-2010-4034 State: PUBLISHED Published: 2010-10-21T18:12:00 Last Updated: 2024-08-07T03:34:36.868Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 7.0.517.41 does not properly handle forms, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted HTML document. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/2731 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6775 - http://secunia.com/advisories/41888 - http://www.securityfocus.com/bid/44241 - http://googlechromereleases.
def%3A6775 - http://secunia.com/advisories/41888 - http://www.securityfocus.com/bid/44241 - http://googlechromereleases.blogspot.com/2010/10/stable-channel-update.html - http://code.google.com/p/chromium/issues/detail?id=48857