Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
05.html - http://secunia.com/advisories/34445 - https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00507.html - https://bugzilla.redhat.com/show_bug.cgi?id=492136 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=520920 - http://www.ubuntu.com/usn/USN-937-1
CVE ID: CVE-2009-1285 State: PUBLISHED Published: 2009-04-16T15:00:00 Last Updated: 2024-08-07T05:04:49.533Z Vendors: n/a Products: n/a Problem Types: n/a Description: Static code injection vulnerability in the getConfigFile function in setup/lib/ConfigFile.class.php in phpMyAdmin 3.x before 3.1.3.2 allows remote attackers to inject arbitrary PHP code into configuration files. Additional Analyst Notes: - CVE Program Container: References: - http://www.phpmyadmin.net/home_page/security/PMASA-2009-4.php - http://www.vupen.com/english/advisories/2009/1045 - http://secunia.com/advisories/34741 - http://secunia.com/advisories/34727 - http://phpmyadmin.svn.sourceforge.net/viewvc/phpmyadmin/branche
advisories/34741 - http://secunia.com/advisories/34727 - http://phpmyadmin.svn.sourceforge.net/viewvc/phpmyadmin/branches/MAINT_3_1_3/phpMyAdmin/setup/lib/ConfigFile.class.php?r1=12248&r2=12301&pathrev=12342 - http://www.securityfocus.com/bid/34526 - https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00452.html - https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00442.html
CVE ID: CVE-2009-1286 State: PUBLISHED Published: 2009-04-13T16:00:00Z Last Updated: 2024-09-16T20:52:50.000Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IMAP task in the server in IBM Lotus Domino 8.0.2 before FP1 IF1 and 8.5 before IF3 allows remote attackers to cause a denial of service (daemon crash) via a MIME e-mail message with RFC822 attachments (aka blobs) containing malformed root entities. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/0986 - http://www.securityfocus.com/bid/34441 - http://www-01.ibm.com/support/docview.wss?uid=swg21381566 - http://www-01.ibm.com/support/docview.wss?uid=swg21379894 -
http://www-01.ibm.com/support/docview.wss?uid=swg21381566 - http://www-01.ibm.com/support/docview.wss?uid=swg21379894 - http://securitytracker.com/id?1022024 - http://secunia.com/advisories/34657 - http://www-01.ibm.com/support/docview.wss?uid=swg21379915 - http://www-01.ibm.com/support/docview.wss?uid=swg21381562
CVE ID: CVE-2009-1287 State: PUBLISHED Published: 2009-04-13T16:00:00 Last Updated: 2024-08-07T05:04:49.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Cisco Subscriber Edge Services Manager (SESM) allows remote attackers to inject arbitrary web script or HTML via the URI. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1022030 - http://www.securityfocus.com/bid/34454 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50349 - http://www.xc0re.net/index.php?p=1_17_Cisco-Subscriber-Edge-Services-Manager-Multiple-Vu
oud.com/vulnerabilities/50349 - http://www.xc0re.net/index.php?p=1_17_Cisco-Subscriber-Edge-Services-Manager-Multiple-Vulnerabilities
CVE ID: CVE-2009-1288 State: PUBLISHED Published: 2009-04-13T16:00:00 Last Updated: 2024-08-07T05:04:49.393Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Advanced Management Module (AMM) on the IBM BladeCenter, including the BladeCenter H with BPET36H 54, allow remote attackers to inject arbitrary web script or HTML via (1) the username in a login action or (2) the PATH parameter to private/file_management.ssi in the File manager. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/502582/100/0/threaded - http://osvdb.org/53658 - http://www.securityfocus.com/bid/34447
www.securityfocus.com/archive/1/502582/100/0/threaded - http://osvdb.org/53658 - http://www.securityfocus.com/bid/34447 - http://securitytracker.com/id?1022025 - http://osvdb.org/53657 - http://www.louhinetworks.fi/advisory/ibm_090409.txt
CVE ID: CVE-2009-1289 State: PUBLISHED Published: 2009-04-13T16:00:00 Last Updated: 2024-08-07T05:04:49.533Z Vendors: n/a Products: n/a Problem Types: n/a Description: private/login.ssi in the Advanced Management Module (AMM) on the IBM BladeCenter, including the BladeCenter H with BPET36H 54, allows remote attackers to discover the access roles and scopes of arbitrary user accounts via a modified WEBINDEX parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/502582/100/0/threaded - http://osvdb.org/53659 - http://www.securityfocus.com/bid/34447 - http://securitytracker.com/id?1022025 - http://www.louhinetworks.fi/advisory/ibm_0904
/www.securityfocus.com/bid/34447 - http://securitytracker.com/id?1022025 - http://www.louhinetworks.fi/advisory/ibm_090409.txt
CVE ID: CVE-2009-1290 State: PUBLISHED Published: 2009-04-13T16:00:00 Last Updated: 2024-08-07T05:04:49.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the web administration interface in the Advanced Management Module (AMM) on the IBM BladeCenter, including the BladeCenter H with BPET36H 54, allow remote attackers to hijack the authentication of administrators, as demonstrated by a power-off request to the private/blade_power_action script. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/502582/100/0/threaded - http://www.securityfocus.com/bid/34447 - http://
ences: - http://www.securityfocus.com/archive/1/502582/100/0/threaded - http://www.securityfocus.com/bid/34447 - http://securitytracker.com/id?1022025 - http://osvdb.org/53660 - http://www.louhinetworks.fi/advisory/ibm_090409.txt
CVE ID: CVE-2009-1291 State: PUBLISHED Published: 2009-04-30T20:00:00 Last Updated: 2024-08-07T05:04:49.479Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in TIBCO SmartSockets before 6.8.2, SmartSockets Product Family (aka RTworks) before 4.0.5, and Enterprise Message Service (EMS) 4.0.0 through 5.1.1, as used in SmartSockets Server and RTworks Server (aka RTserver), SmartSockets client libraries and add-on products, RTworks libraries and components, EMS Server (aka tibemsd), SmartMQ, iProcess Engine, ActiveMatrix products, and CA Enterprise Communicator, allows remote attackers to execute arbitrary code via "inbound data," as demonstrated by request
nterprise Communicator, allows remote attackers to execute arbitrary code via "inbound data," as demonstrated by requests to the UDP interface of the RTserver component, and data injection into the TCP stream to tibemsd. Additional Analyst Notes: - CVE Program Container: References: - http://www.tibco.com/multimedia/security_advisory_rtworks_tcm8-7559.txt - http://www.tibco.com/services/support/advisories/default.jsp - http://securitytracker.com/id?1022129 - http://www.securityfocus.com/bid/34754 - http://www.tibco.com/multimedia/security_advisory_smartsockets_tcm8-7560.txt - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=785 - https://exchange.xforce.ibmcloud.com/vulne
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=785 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50214 - http://www.vupen.com/english/advisories/2009/1198 - http://www.harmonysecurity.com/blog/2009/04/tibco-smartsockets-stack-buffer.html - http://www.tibco.com/services/support/advisories/smartsockets-sspfm-ems_advisory_20090428.jsp - http://secunia.com/advisories/34911 - http://www.tibco.com/multimedia/security_advisory_ems_tcm8-7558.txt
CVE ID: CVE-2009-1292 State: PUBLISHED Published: 2009-04-14T16:00:00 Last Updated: 2024-08-07T05:04:49.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: UCM-CQ in IBM Rational ClearCase 7.0.0.x before 7.0.0.5, 7.0.1.x before 7.0.1.4, and 7.1.x before 7.1.0.1 on Linux and AIX places a username and password on the command line, which allows local users to obtain credentials by listing the process. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34483 - http://www-01.ibm.com/support/docview.wss?uid=swg1PK75832 - http://secunia.com/advisories/34689 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49836 - http://www.vupen.com/
http://secunia.com/advisories/34689 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49836 - http://www.vupen.com/english/advisories/2009/1017 - http://www.securitytracker.com/id?1022035
CVE ID: CVE-2009-1293 State: PUBLISHED Published: 2009-04-16T15:00:00 Last Updated: 2024-08-07T05:04:49.414Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web login functionality (c/portal/login) in Novell Teaming 1.0 through SP3 (1.0.3) generates different error messages depending on whether the username is valid or invalid, which makes it easier for remote attackers to enumerate usernames. Additional Analyst Notes: - CVE Program Container: References: - https://www.sec-consult.com/files/20090415-0-novell-teaming.txt - http://www.vupen.com/english/advisories/2009/1048 - http://secunia.com/advisories/34714 - http://www.novell.com/support/php/search.do?cmd=displayKC&docType=k
es/2009/1048 - http://secunia.com/advisories/34714 - http://www.novell.com/support/php/search.do?cmd=displayKC&docType=kc&externalId=7002997&sliceId=1&docTypeID=DT_TID_1_1&dialogID=33090060&stateId=1%200%2033084737 - http://www.securityfocus.com/archive/1/502704/100/0/threaded - http://www.securitytracker.com/id?1022063 - http://www.securityfocus.com/bid/34531
CVE ID: CVE-2009-1294 State: PUBLISHED Published: 2009-04-16T15:00:00 Last Updated: 2024-08-07T05:04:49.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in web/guest/home in the Liferay 4.3.0 portal in Novell Teaming 1.0 through SP3 (1.0.3) allow remote attackers to inject arbitrary web script or HTML via the (1) p_p_state or (2) p_p_mode parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/support/php/search.do?cmd=displayKC&docType=kc&externalId=7002999&sliceId=1&docTypeID=DT_TID_1_1&dialogID=33090060&stateId=1%200%2033084737 - https://www.sec-consult.com/files/20090415-0-novell
=1&docTypeID=DT_TID_1_1&dialogID=33090060&stateId=1%200%2033084737 - https://www.sec-consult.com/files/20090415-0-novell-teaming.txt - http://www.vupen.com/english/advisories/2009/1048 - http://secunia.com/advisories/34714 - http://www.securityfocus.com/archive/1/502704/100/0/threaded - http://www.securitytracker.com/id?1022063 - http://www.securityfocus.com/bid/34531
CVE ID: CVE-2009-1295 State: PUBLISHED Published: 2009-04-30T20:00:00 Last Updated: 2024-08-07T05:04:49.485Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apport before 0.108.4 on Ubuntu 8.04 LTS, before 0.119.2 on Ubuntu 8.10, and before 1.0-0ubuntu5.2 on Ubuntu 9.04 does not properly remove files from the application's crash-report directory, which allows local users to delete arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/usn-768-1 - http://secunia.com/advisories/34947 - https://launchpad.net/bugs/cve/2009-1295 - http://www.securityfocus.com/bid/34776 - http://secunia.com/advisories/35065 - h
ps://launchpad.net/bugs/cve/2009-1295 - http://www.securityfocus.com/bid/34776 - http://secunia.com/advisories/35065 - https://bugs.launchpad.net/bugs/357024 - http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html - http://secunia.com/advisories/34952
CVE ID: CVE-2009-1296 State: PUBLISHED Published: 2009-06-09T20:00:00 Last Updated: 2024-08-07T05:04:49.427Z Vendors: n/a Products: n/a Problem Types: n/a Description: The eCryptfs support utilities (ecryptfs-utils) 73-0ubuntu6.1 on Ubuntu 9.04 stores the mount passphrase in installation logs, which might allow local users to obtain access to the filesystem by reading the log files from disk. NOTE: the log files are only readable by root. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35383 - http://www.ubuntu.com/usn/usn-783-1 - http://www.securitytracker.com/id?1022347 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51191
CVE ID: CVE-2009-1297 State: PUBLISHED Published: 2009-10-23T18:00:00 Last Updated: 2024-08-07T05:04:49.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: iscsi_discovery in open-iscsi in SUSE openSUSE 10.3 through 11.1 and SUSE Linux Enterprise (SLE) 10 SP2 and 11, and other operating systems, allows local users to overwrite arbitrary files via a symlink attack on an unspecified temporary file that has a predictable name. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2013:109 - https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0241 - http://lists.opensuse.org/opensuse-security-announce/2009-10/msg0
iki.mageia.org/en/Support/Advisories/MGASA-2012-0241 - http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html
CVE ID: CVE-2009-1298 State: PUBLISHED Published: 2009-12-08T23:00:00 Last Updated: 2024-08-07T05:04:49.537Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ip_frag_reasm function in net/ipv4/ip_fragment.c in the Linux kernel 2.6.32-rc8, and 2.6.29 and later versions before 2.6.32, calls IP_INC_STATS_BH with an incorrect argument, which allows remote attackers to cause a denial of service (NULL pointer dereference and hang) via long IP packets, possibly related to the ip_defrag function. Additional Analyst Notes: - CVE Program Container: References: - http://twitter.com/spendergrsec/statuses/6339560349 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=comm
twitter.com/spendergrsec/statuses/6339560349 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=bbf31bf18d34caa87dd01f08bf713635593697f2 - http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html - http://www.mandriva.com/security/advisories?name=MDVSA-2009:329 - http://www.ubuntu.com/usn/USN-869-1 - https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00453.html - http://wiki.rpath.com/Advisories:rPSA-2009-0161 - http://www.securityfocus.com/archive/1/508517/100/0/threaded - http://www.theregister.co.uk/2009/12/11/linux_kernel_bugs_patched/ - http://secunia.com/advisories/37624 - https://www.redhat.com/archives/fedora-
uk/2009/12/11/linux_kernel_bugs_patched/ - http://secunia.com/advisories/37624 - https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00496.html - http://www.osvdb.org/60788 - https://bugzilla.redhat.com/show_bug.cgi?id=544144 - http://secunia.com/advisories/38017 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.32
CVE ID: CVE-2009-1299 State: PUBLISHED Published: 2010-03-18T17:12:00 Last Updated: 2024-08-07T05:04:49.479Z Vendors: n/a Products: n/a Problem Types: n/a Description: The pa_make_secure_dir function in core-util.c in PulseAudio 0.9.10 and 0.9.19 allows local users to change the ownership and permissions of arbitrary files via a symlink attack on a /tmp/.esd-##### temporary file. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.edge.launchpad.net/ubuntu/+source/pulseaudio/+bug/509008 - http://git.0pointer.de/?p=pulseaudio.git%3Ba=patch%3Bh=d3efa43d85ac132c6a5a416a2b6f2115f5d577ee - http://www.mandriva.com/security/advisories?name=MDVSA-2010:124 - http://www.vupen
43d85ac132c6a5a416a2b6f2115f5d577ee - http://www.mandriva.com/security/advisories?name=MDVSA-2010:124 - http://www.vupen.com/english/advisories/2010/1570 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=573615 - http://www.debian.org/security/2010/dsa-2017
CVE ID: CVE-2009-1300 State: PUBLISHED Published: 2009-04-16T15:00:00 Last Updated: 2024-08-07T05:04:49.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: apt 0.7.20 does not check when the date command returns an "invalid date" error, which can prevent apt from loading security updates in time zones for which DST occurs at midnight. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/34874 - https://bugs.launchpad.net/ubuntu/+source/coreutils/+bug/354793 - http://www.debian.org/security/2009/dsa-1779 - http://secunia.com/advisories/34829 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=523213 - http://www.openwall.com/lists/oss-secur
com/advisories/34829 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=523213 - http://www.openwall.com/lists/oss-security/2009/04/08/11 - http://secunia.com/advisories/34832 - https://usn.ubuntu.com/762-1/
CVE ID: CVE-2009-1301 State: PUBLISHED Published: 2009-04-16T15:00:00 Last Updated: 2024-08-07T05:04:49.529Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in the store_id3_text function in the ID3v2 code in mpg123 before 1.7.2 allows remote attackers to cause a denial of service (out-of-bounds memory access) and possibly execute arbitrary code via an ID3 tag with a negative encoding value. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.gentoo.org/show_bug.cgi?id=265342 - http://sourceforge.net/project/shownotes.php?release_id=673696 - http://www.mandriva.
entoo.org/show_bug.cgi?id=265342 - http://sourceforge.net/project/shownotes.php?release_id=673696 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:093 - http://secunia.com/advisories/34748 - http://secunia.com/advisories/34587 - http://www.securityfocus.com/bid/34381 - http://www.vupen.com/english/advisories/2009/0936 - http://www.gentoo.org/security/en/glsa/glsa-200904-15.xml - http://sourceforge.net/mailarchive/message.php?msg_name=20090405211856.41696433%40sunscreen.local
CVE ID: CVE-2009-1302 State: PUBLISHED Published: 2009-04-22T18:00:00 Last Updated: 2024-08-07T05:04:49.478Z Vendors: n/a Products: n/a Problem Types: n/a Description: The browser engine in Mozilla Firefox 3.x before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service (application crash) and possibly trigger memory corruption via vectors related to (1) nsAsyncInstantiateEvent::Run, (2) nsStyleContext::Destroy, (3) nsComputedDOMStyle::GetWidth, (4) the xslt_attributeset_ImportSameName.html test case for the XSLT stylesheet compiler, (5) nsXULDocument::SynchronizeBroadcastListener, (6) IsBindingAncestor, (7) PL_DHashTableOperate
T stylesheet compiler, (5) nsXULDocument::SynchronizeBroadcastListener, (6) IsBindingAncestor, (7) PL_DHashTableOperate and nsEditor::EndUpdateViewBatch, and (8) gfxSkipCharsIterator::SetOffsets, and other vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2009:111 - https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00683.html - http://secunia.com/advisories/34894 - http://www.vupen.com/english/advisories/2009/1125 - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.454275 - http://www.debian.org/security/2009/dsa-1830 - http://secunia.com/advisories/3
rity&y=2009&m=slackware-security.454275 - http://www.debian.org/security/2009/dsa-1830 - http://secunia.com/advisories/34758 - https://bugzilla.mozilla.org/show_bug.cgi?id=461053 - http://secunia.com/advisories/35602 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5527 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6070 - https://bugzilla.mozilla.org/show_bug.cgi?id=454276 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10106 - https://bugzilla.mozilla.org/show_bug.cgi?id=483444 - https://bugzilla.mozilla.org/show_bug.cgi?id=432114 - https://oval.cisecurity.org/reposito
.org/show_bug.cgi?id=483444 - https://bugzilla.mozilla.org/show_bug.cgi?id=432114 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6170 - http://secunia.com/advisories/35065 - https://bugzilla.mozilla.org/show_bug.cgi?id=477775 - https://bugzilla.mozilla.org/show_bug.cgi?id=431260 - https://usn.ubuntu.com/764-1/ - http://www.mandriva.com/security/advisories?name=MDVSA-2009:141 - http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html - http://secunia.com/advisories/35042 - http://www.securityfocus.com/bid/34656 - https://bugzilla.mozilla.org/show_bug.cgi?id=467881 - https://bugzilla.mozilla.org/show_bug.cgi?id=462517 - https://oval.c
tps://bugzilla.mozilla.org/show_bug.cgi?id=467881 - https://bugzilla.mozilla.org/show_bug.cgi?id=462517 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7030 - http://secunia.com/advisories/34843 - http://www.debian.org/security/2009/dsa-1797 - http://www.redhat.com/support/errata/RHSA-2009-0436.html - http://secunia.com/advisories/34780 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=428113 - http://www.mozilla.org/security/announce/2009/mfsa2009-14.html - http://www.securitytracker.com/id?1022090
CVE ID: CVE-2009-1303 State: PUBLISHED Published: 2009-04-22T18:00:00 Last Updated: 2024-08-07T05:04:49.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: The browser engine in Mozilla Firefox before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service (application crash) and possibly trigger memory corruption via vectors related to nsSVGElement::BindToTree. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2009:111 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9455 - https://www.redhat.com/archives/fedor
l.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9455 - https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00683.html - http://secunia.com/advisories/34894 - http://www.vupen.com/english/advisories/2009/1125 - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.454275 - http://www.debian.org/security/2009/dsa-1830 - http://secunia.com/advisories/34758 - https://bugzilla.mozilla.org/show_bug.cgi?id=453736 - http://secunia.com/advisories/35536 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6151 - http://secunia.com/advisories/35602 - https://oval.cisecurity.org/repo
h/definition/oval%3Aorg.mitre.oval%3Adef%3A6151 - http://secunia.com/advisories/35602 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5992 - http://www.redhat.com/support/errata/RHSA-2009-1125.html - http://secunia.com/advisories/34844 - http://www.ubuntu.com/usn/usn-782-1 - http://secunia.com/advisories/35065 - https://usn.ubuntu.com/764-1/ - http://www.mandriva.com/security/advisories?name=MDVSA-2009:141 - http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html - http://secunia.com/advisories/35042 - http://www.securityfocus.com/bid/34656 - http://secunia.com/advisories/34843 - http://www.debian.org/security/2009/dsa-1797 - https:
ecurityfocus.com/bid/34656 - http://secunia.com/advisories/34843 - http://www.debian.org/security/2009/dsa-1797 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6646 - http://rhn.redhat.com/errata/RHSA-2009-0437.html - http://www.redhat.com/support/errata/RHSA-2009-0436.html - http://www.redhat.com/support/errata/RHSA-2009-1126.html - http://secunia.com/advisories/34780 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5810 - http://www.mozilla.org/security/announce/2009/mfsa2009-14.html - http://www.securitytracker.com/id?1022090