Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
sitory/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12878 - http://www.vupen.com/english/advisories/2011/0376 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19269 - http://secunia.com/advisories/45022 - http://www.redhat.com/support/errata/RHSA-2011-1845.html - http://www.securityfocus.com/bid/46174 - http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html - http://marc.info/?l=bugtraq&m=132215163318824&w=2 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html - http://www.mandriva.com/security/advisories?name=MDVSA-2011:030 - http://www.securityfocus.com/archive/1/516209/30/90/threaded - http://www.redhat.
urity/advisories?name=MDVSA-2011:030 - http://www.securityfocus.com/archive/1/516209/30/90/threaded - http://www.redhat.com/support/errata/RHSA-2011-0897.html - http://secunia.com/advisories/57126 - http://tomcat.apache.org/security-5.html#Fixed_in_Apache_Tomcat_5.5.32 - http://www.redhat.com/support/errata/RHSA-2011-0791.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14945 - https://bugzilla.redhat.com/show_bug.cgi?id=675786 - http://secunia.com/advisories/43192 - http://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.6_%28released_14_Jan_2011%29 - http://www.securitytracker.com/id?1025026 - http://www.redhat.com/support/errata/RHS
_7.0.6_%28released_14_Jan_2011%29 - http://www.securitytracker.com/id?1025026 - http://www.redhat.com/support/errata/RHSA-2011-0896.html - http://www.debian.org/security/2011/dsa-2160 - http://support.apple.com/kb/HT5002 - http://marc.info/?l=bugtraq&m=132215163318824&w=2 - http://marc.info/?l=bugtraq&m=136485229118404&w=2 - http://securityreason.com/securityalert/8093 - http://tomcat.apache.org/security-6.html#Fixed_in_Apache_Tomcat_6.0.30 - http://marc.info/?l=bugtraq&m=130168502603566&w=2 - http://marc.info/?l=bugtraq&m=139344343412337&w=2 - http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5098550.html - https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f
s/Readmes/InfoDocument/patchbuilder/readme_5098550.html - https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E
CVE ID: CVE-2011-0014 State: PUBLISHED Published: 2011-02-18T23:00:00 Last Updated: 2024-08-06T21:36:02.316Z Vendors: n/a Products: n/a Problem Types: n/a Description: ssl/t1_lib.c in OpenSSL 0.9.8h through 0.9.8q and 1.0.0 through 1.0.0c allows remote attackers to cause a denial of service (crash), and possibly obtain sensitive information in applications that use OpenSSL, via a malformed ClientHello handshake message that triggers an out-of-bounds memory access, aka "OCSP stapling vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/0361 - http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackwar
vupen.com/english/advisories/2011/0361 - http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.668823 - http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564 - http://osvdb.org/70847 - http://support.apple.com/kb/HT4723 - http://www.vupen.com/english/advisories/2011/0399 - http://www.redhat.com/support/errata/RHSA-2011-0677.html - http://secunia.com/advisories/43301 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18985 - http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html - http://www.vupen.com/english/advisories/2011/0387 - http://secunia.com/advisories/43286 - http://lists.opensuse.org/o
- http://www.vupen.com/english/advisories/2011/0387 - http://secunia.com/advisories/43286 - http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html - http://www.debian.org/security/2011/dsa-2162 - http://www.vupen.com/english/advisories/2011/0395 - http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2011-002.txt.asc - http://www.ubuntu.com/usn/USN-1064-1 - http://marc.info/?l=bugtraq&m=130497251507577&w=2 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02794777 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02794777 - http://secunia.com/advisories/43227 - http://www.vupen.com/english/advisories/2011/0389 - htt
t.jsp?objectID=c02794777 - http://secunia.com/advisories/43227 - http://www.vupen.com/english/advisories/2011/0389 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:028 - http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054007.html - http://www.securityfocus.com/bid/46264 - http://secunia.com/advisories/57353 - http://marc.info/?l=bugtraq&m=131042179515633&w=2 - http://www.openssl.org/news/secadv_20110208.txt - http://secunia.com/advisories/44269 - http://marc.info/?l=bugtraq&m=130497251507577&w=2 - http://secunia.com/advisories/43339 - http://marc.info/?l=bugtraq&m=131042179515633&w=2 - http://www.vupen.com/english/advisories/2011/0603 - http://www.securit
tp://marc.info/?l=bugtraq&m=131042179515633&w=2 - http://www.vupen.com/english/advisories/2011/0603 - http://www.securitytracker.com/id?1025050 - https://support.f5.com/csp/article/K10534046
CVE ID: CVE-2011-0015 State: PUBLISHED Published: 2011-01-19T11:00:00 Last Updated: 2024-08-06T21:36:02.354Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha does not properly check the amount of compression in zlib-compressed data, which allows remote attackers to cause a denial of service via a large compression factor. Additional Analyst Notes: - CVE Program Container: References: - http://archives.seul.org/or/announce/Jan-2011/msg00000.html - http://www.vupen.com/english/advisories/2011/0131 - https://gitweb.torproject.org/tor.git/blob/refs/heads/release-0.2.2:/ChangeLog - https://trac.torproject.org/projects/tor/ticket/2324
b.torproject.org/tor.git/blob/refs/heads/release-0.2.2:/ChangeLog - https://trac.torproject.org/projects/tor/ticket/2324 - http://secunia.com/advisories/42907 - http://blog.torproject.org/blog/tor-02129-released-security-patches - http://www.securitytracker.com/id?1024980 - http://www.vupen.com/english/advisories/2011/0132 - http://www.debian.org/security/2011/dsa-2148 - http://secunia.com/advisories/42905 - http://www.openwall.com/lists/oss-security/2011/01/18/7 - http://www.securityfocus.com/bid/45832
CVE ID: CVE-2011-0016 State: PUBLISHED Published: 2011-01-19T11:00:00 Last Updated: 2024-08-06T21:36:02.377Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha does not properly manage key data in memory, which might allow local users to obtain sensitive information by leveraging the ability to read memory that was previously used by a different process. Additional Analyst Notes: - CVE Program Container: References: - http://archives.seul.org/or/announce/Jan-2011/msg00000.html - http://www.vupen.com/english/advisories/2011/0131 - https://gitweb.torproject.org/tor.git/blob/refs/heads/release-0.2.2:/ChangeLog - http://secunia.com/ad
ories/2011/0131 - https://gitweb.torproject.org/tor.git/blob/refs/heads/release-0.2.2:/ChangeLog - http://secunia.com/advisories/42907 - http://blog.torproject.org/blog/tor-02129-released-security-patches - http://www.securitytracker.com/id?1024980 - http://www.vupen.com/english/advisories/2011/0132 - https://trac.torproject.org/projects/tor/ticket/2385 - http://www.debian.org/security/2011/dsa-2148 - http://secunia.com/advisories/42905 - http://www.openwall.com/lists/oss-security/2011/01/18/7 - https://trac.torproject.org/projects/tor/ticket/2384 - http://www.securityfocus.com/bid/45832
CVE ID: CVE-2011-0017 State: PUBLISHED Published: 2011-02-02T00:00:00 Last Updated: 2024-08-06T21:36:02.265Z Vendors: n/a Products: n/a Problem Types: n/a Description: The open_log function in log.c in Exim 4.72 and earlier does not check the return value from (1) setuid or (2) setgid system calls, which allows local users to append log data to arbitrary files via a symlink attack. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43128 - http://osvdb.org/70696 - ftp://ftp.exim.org/pub/exim/ChangeLogs/ChangeLog-4.74 - http://www.vupen.com/english/advisories/2011/0364 - http://www.securityfocus.com/bid/46065 - http://secunia.com/advisories/43243 -
vupen.com/english/advisories/2011/0364 - http://www.securityfocus.com/bid/46065 - http://secunia.com/advisories/43243 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65028 - http://lists.exim.org/lurker/message/20110126.034702.4d69c278.en.html - http://www.vupen.com/english/advisories/2011/0224 - http://www.debian.org/security/2011/dsa-2154 - http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00004.html - http://www.vupen.com/english/advisories/2011/0464 - http://secunia.com/advisories/43101 - http://www.vupen.com/english/advisories/2011/0245 - http://www.ubuntu.com/usn/USN-1060-1
CVE ID: CVE-2011-0018 State: PUBLISHED Published: 2011-01-28T15:00:00 Last Updated: 2024-08-06T21:36:02.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: The email function in manage_sql.c in OpenVAS Manager 1.0.x through 1.0.3 and 2.0.x through 2.0rc2 allows remote authenticated users to execute arbitrary commands via the (1) To or (2) From e-mail address in an OMP request to the Greenbone Security Assistant (GSA). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/515971/100/0/threaded - http://secunia.com/advisories/43037 - http://www.securityfocus.com/bid/45987 - http://www.openvas.org/OVSA20110118.html - http://www.vupen
/advisories/43037 - http://www.securityfocus.com/bid/45987 - http://www.openvas.org/OVSA20110118.html - http://www.vupen.com/english/advisories/2011/0208 - http://osvdb.org/70639 - http://www.exploit-db.com/exploits/16086 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65011
CVE ID: CVE-2011-0019 State: PUBLISHED Published: 2011-02-23T18:00:00 Last Updated: 2024-08-06T21:36:02.300Z Vendors: n/a Products: n/a Problem Types: n/a Description: slapd (aka ns-slapd) in 389 Directory Server 1.2.7.5 (aka Red Hat Directory Server 8.2.x or dirsrv) does not properly handle simple paged result searches, which allows remote attackers to cause a denial of service (daemon crash) or possibly have unspecified other impact via multiple search requests. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1025102 - https://bugzilla.redhat.com/show_bug.cgi?id=666076 - https://bugzilla.redhat.com/show_bug.cgi?id=670914 - http://www.redha
tps://bugzilla.redhat.com/show_bug.cgi?id=666076 - https://bugzilla.redhat.com/show_bug.cgi?id=670914 - http://www.redhat.com/support/errata/RHSA-2011-0293.html - http://www.securityfocus.com/bid/46489
CVE ID: CVE-2011-0020 State: PUBLISHED Published: 2011-01-24T17:00:00 Last Updated: 2024-08-06T21:43:14.022Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the pango_ft2_font_render_box_glyph function in pango/pangoft2-render.c in libpango in Pango 1.28.3 and earlier, when the FreeType2 backend is enabled, allows user-assisted remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file, related to the glyph box for an FT_Bitmap object. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=671122 - https://bugzilla.gnome.org/show_bug
rogram Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=671122 - https://bugzilla.gnome.org/show_bug.cgi?id=639882 - https://bugs.launchpad.net/ubuntu/+source/pango1.0/+bug/696616 - http://www.securitytracker.com/id?1024994 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64832 - http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html - http://openwall.com/lists/oss-security/2011/01/18/6 - http://osvdb.org/70596 - http://secunia.com/advisories/43100 - http://www.redhat.com/support/errata/RHSA-2011-0180.html - http://openwall.com/lists/oss-security/2011/01/20/2 - http://www.vupen.com/english/advisories/2011/0186 - http://secunia.com/advisories/4293
lists/oss-security/2011/01/20/2 - http://www.vupen.com/english/advisories/2011/0186 - http://secunia.com/advisories/42934 - http://www.securityfocus.com/bid/45842 - http://www.vupen.com/english/advisories/2011/0238
CVE ID: CVE-2011-0021 State: PUBLISHED Published: 2011-01-25T18:00:00 Last Updated: 2024-08-06T21:43:14.106Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple heap-based buffer overflows in cdg.c in the CDG decoder in VideoLAN VLC Media Player before 1.1.6 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted CDG video. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/64879 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12460 - http://www.vupen.com/english/advisories/2011/0185 - http://openwall.com/
efinition/oval%3Aorg.mitre.oval%3Adef%3A12460 - http://www.vupen.com/english/advisories/2011/0185 - http://openwall.com/lists/oss-security/2011/01/20/3 - http://openwall.com/lists/oss-security/2011/01/19/6 - http://www.securityfocus.com/bid/45927 - http://download.videolan.org/pub/videolan/vlc/1.1.6/vlc-1.1.6.tar.bz2 - http://git.videolan.org/?p=vlc.git%3Ba=commit%3Bh=f9b664eac0e1a7bceed9d7b5854fd9fc351b4aab
CVE ID: CVE-2011-0022 State: PUBLISHED Published: 2011-02-23T18:00:00 Last Updated: 2024-08-06T21:43:13.719Z Vendors: n/a Products: n/a Problem Types: n/a Description: The setup scripts in 389 Directory Server 1.2.x (aka Red Hat Directory Server 8.2.x), when multiple unprivileged instances are configured, use 0777 permissions for the /var/run/dirsrv directory, which allows local users to cause a denial of service (daemon outage or arbitrary process termination) by replacing PID files contained in this directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1025102 - http://www.redhat.com/support/errata/RHSA-2011-0293.html - https://bugzil
- http://www.securitytracker.com/id?1025102 - http://www.redhat.com/support/errata/RHSA-2011-0293.html - https://bugzilla.redhat.com/show_bug.cgi?id=671199 - http://www.securityfocus.com/bid/46489
CVE ID: CVE-2011-0023 State: REJECTED Published: 2021-06-23T13:59:14 Last Updated: 2021-06-23T13:59:14 Description: No description available.
CVE ID: CVE-2011-0024 State: PUBLISHED Published: 2011-03-28T16:00:00Z Last Updated: 2024-08-06T21:43:13.857Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in wiretap/pcapng.c in Wireshark before 1.2 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted capture file. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2011-0370.html - http://www.vupen.com/english/advisories/2011/0719 - https://bugzilla.redhat.com/show_bug.cgi?id=671331 - http://secunia.com/advisories/43821
CVE ID: CVE-2011-0025 State: PUBLISHED Published: 2011-02-04T19:00:00 Last Updated: 2024-08-06T21:43:13.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: IcedTea 1.7 before 1.7.8, 1.8 before 1.8.5, and 1.9 before 1.9.5 does not properly verify signatures for JAR files that (1) are "partially signed" or (2) signed by multiple entities, which allows remote attackers to trick users into executing code that appears to come from a trusted source. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/46110 - http://www.ubuntu.com/usn/USN-1055-1 - http://security.gentoo.org/glsa/glsa-201406-32.xml - https://exchange.xforce.ibmcloud.com/vulne
ntu.com/usn/USN-1055-1 - http://security.gentoo.org/glsa/glsa-201406-32.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/65151 - http://www.debian.org/security/2011/dsa-2224 - http://secunia.com/advisories/43135 - http://icedtea.classpath.org/hg/release/icedtea-web-1.0?cmd=changeset%3Bnode=3bd328e4b515 - http://blog.fuseyism.com/index.php/2011/02/01/security-icedtea6-178-185-195-released/ - http://www.mandriva.com/security/advisories?name=MDVSA-2011:054
CVE ID: CVE-2011-0026 State: PUBLISHED Published: 2011-01-12T00:00:00 Last Updated: 2024-08-06T21:43:14.678Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in the SQLConnectW function in an ODBC API (odbc32.dll) in Microsoft Data Access Components (MDAC) 2.8 SP1 and SP2, and Windows Data Access Components (WDAC) 6.0, allows remote attackers to execute arbitrary code via a long string in the Data Source Name (DSN) and a crafted szDSN argument, which bypasses a signed comparison and leads to a buffer overflow, aka "DSN Overflow Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/0075
ty." Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/0075 - http://www.securityfocus.com/bid/45695 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-002 - http://osvdb.org/70443 - http://www.securitytracker.com/id?1024947 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12333 - http://www.zerodayinitiative.com/advisories/ZDI-11-001/ - http://secunia.com/advisories/42804 - http://www.us-cert.gov/cas/techalerts/TA11-011A.html - http://support.avaya.com/css/P8/documents/100124846
CVE ID: CVE-2011-0027 State: PUBLISHED Published: 2011-01-12T00:00:00 Last Updated: 2024-08-06T21:43:13.832Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Data Access Components (MDAC) 2.8 SP1 and SP2, and Windows Data Access Components (WDAC) 6.0, does not properly validate memory allocation for internal data structures, which allows remote attackers to execute arbitrary code, possibly via a large CacheSize property that triggers an integer wrap and a buffer overflow, aka "ADO Record Memory Vulnerability." NOTE: this might be a duplicate of CVE-2010-1117 or CVE-2010-1118. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/adv
1117 or CVE-2010-1118. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/0075 - http://osvdb.org/70444 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-002 - http://www.securitytracker.com/id?1024947 - http://vreugdenhilresearch.nl/ms11-002-pwn2own-heap-overflow/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12411 - http://secunia.com/advisories/42804 - http://www.securityfocus.com/bid/45698 - http://www.us-cert.gov/cas/techalerts/TA11-011A.html - http://www.zerodayinitiative.com/advisories/ZDI-11-002/ - http://support.avaya.com/css/P8/documents/100124846
CVE ID: CVE-2011-0028 State: PUBLISHED Published: 2011-04-13T18:00:00 Last Updated: 2024-08-06T21:43:14.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: WordPad in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly parse fields in Word documents, which allows remote attackers to execute arbitrary code via a crafted .doc file, aka "WordPad Converter Parsing Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA11-102A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-033 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3
securitybulletins/2011/ms11-033 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12301
CVE ID: CVE-2011-0029 State: PUBLISHED Published: 2011-03-09T22:00:00 Last Updated: 2024-10-17T20:13:22.986Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in the client in Microsoft Remote Desktop Connection 5.2, 6.0, 6.1, and 7.0 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .rdp file, aka "Remote Desktop Insecure Library Loading Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-017 - https://oval.cisecurity.org/repo
: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-017 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12480 - http://osvdb.org/71014 - http://www.vupen.com/english/advisories/2011/0616 - http://www.us-cert.gov/cas/techalerts/TA11-067A.html - http://secunia.com/advisories/43628 - http://www.securitytracker.com/id?1025172
CVE ID: CVE-2011-0030 State: PUBLISHED Published: 2011-02-09T00:00:00 Last Updated: 2024-08-06T21:43:14.020Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Client/Server Run-time Subsystem (CSRSS) in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly kill processes after a logout, which allows local users to obtain sensitive information or gain privileges via a crafted application that continues to execute throughout the logout of one user and the login session of the next user, aka "CSRSS Elevation of Privilege Vulnerability," a different vulnerability than CVE-2010-0023. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/
t vulnerability than CVE-2010-0023. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43250 - http://www.securitytracker.com/id?1025045 - http://www.vupen.com/english/advisories/2011/0323 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-010 - http://osvdb.org/70826 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64917 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12476
CVE ID: CVE-2011-0031 State: PUBLISHED Published: 2011-02-09T00:00:00 Last Updated: 2024-08-06T21:43:13.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) JScript 5.8 and (2) VBScript 5.8 scripting engines in Microsoft Windows Server 2008 R2 and Windows 7 do not properly load decoded scripts obtained from web pages, which allows remote attackers to trigger memory corruption and consequently obtain sensitive information via a crafted web site, aka "Scripting Engines Information Disclosure Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-009 - http://www.securityfo
References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-009 - http://www.securityfocus.com/bid/46139 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64919 - http://www.securitytracker.com/id?1025044 - http://secunia.com/advisories/43249 - http://osvdb.org/70827 - http://www.vupen.com/english/advisories/2011/0322 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12313