Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-1876 State: PUBLISHED Published: 2010-05-11T20:00:00 Last Updated: 2024-08-07T01:35:53.774Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in AJ Shopping Cart 1.0 allows remote attackers to execute arbitrary SQL commands via the maincatid parameter in a showmaincatlanding action. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39551 - http://www.exploit-db.com/exploits/12349 - https://exchange.xforce.ibmcloud.com/vulnerabilities/58049 - http://packetstormsecurity.org/1004-exploits/ajshoppingcart-sql.txt
CVE ID: CVE-2010-1877 State: PUBLISHED Published: 2010-05-11T20:00:00 Last Updated: 2024-08-07T01:35:54.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the JTM Reseller (com_jtm) component 1.9 Beta for Joomla! allows remote attackers to execute arbitrary SQL commands via the author parameter in a search action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/39584 - https://exchange.xforce.ibmcloud.com/vulnerabilities/57977 - http://packetstormsecurity.org/1004-exploits/joomlajtmreseller-sql.txt - http://www.exploit-db.com/exploits/12306
CVE ID: CVE-2010-1878 State: PUBLISHED Published: 2010-05-11T20:00:00 Last Updated: 2024-08-07T01:35:53.743Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the OrgChart (com_orgchart) component 1.0.0 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/58031 - http://www.securityfocus.com/bid/39606 - http://www.exploit-db.com/exploits/12317 - http://packetstormsecurity.org/1004-exploits/joomlaorgchart-lfi.txt
CVE ID: CVE-2010-1879 State: PUBLISHED Published: 2010-06-08T22:00:00 Last Updated: 2024-08-07T01:35:53.791Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Quartz.dll for DirectShow; Windows Media Format Runtime 9, 9.5, and 11; Media Encoder 9; and the Asycfilt.dll COM component allows remote attackers to execute arbitrary code via a media file with crafted compression data, aka "Media Decompression Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7517 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-033
n/oval%3Aorg.mitre.oval%3Adef%3A7517 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-033 - http://www.us-cert.gov/cas/techalerts/TA10-159B.html
CVE ID: CVE-2010-1880 State: PUBLISHED Published: 2010-06-08T22:00:00 Last Updated: 2024-08-07T01:35:53.959Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Quartz.dll for DirectShow on Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista SP1, and Server 2008 allows remote attackers to execute arbitrary code via a media file with crafted compression data, aka "MJPEG Media Decompression Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6641 - http://osvdb.org/65222 - https://docs.microsoft.com/en-us/security-updates/securit
/oval%3Aorg.mitre.oval%3Adef%3A6641 - http://osvdb.org/65222 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-033 - http://www.us-cert.gov/cas/techalerts/TA10-159B.html
CVE ID: CVE-2010-1881 State: PUBLISHED Published: 2010-07-14T18:31:00 Last Updated: 2024-08-07T01:35:54.161Z Vendors: n/a Products: n/a Problem Types: n/a Description: The FieldList ActiveX control in the Microsoft Access Wizard Controls in ACCWIZ.dll in Microsoft Office Access 2003 SP3 does not properly interact with the memory-access approach used by Internet Explorer and Office during instantiation, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via an HTML document that references this control along with crafted persistent storage data, aka "ACCWIZ.dll Uninitialized Variable Vulnerability." Additional Analyst Notes: - CVE Program
persistent storage data, aka "ACCWIZ.dll Uninitialized Variable Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-044 - http://www.us-cert.gov/cas/techalerts/TA10-194A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11756
CVE ID: CVE-2010-1882 State: PUBLISHED Published: 2010-08-11T18:00:00 Last Updated: 2024-08-07T01:35:53.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the MPEG Layer-3 Audio Codec for Microsoft DirectShow in l3codecx.ax in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allow remote attackers to execute arbitrary code via an MPEG Layer-3 audio stream in (1) a crafted media file or (2) crafted streaming content, aka "MPEG Layer-3 Audio Decoder Buffer Overflow Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA10-222A.html - https://oval.cisecurity.org/repository/search/defi
References: - http://www.us-cert.gov/cas/techalerts/TA10-222A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11585 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-052
CVE ID: CVE-2010-1883 State: PUBLISHED Published: 2010-10-13T18:00:00 Last Updated: 2025-01-21T17:26:56.278Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the Embedded OpenType (EOT) Font Engine in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows remote attackers to execute arbitrary code via a crafted table in an embedded font, aka "Embedded OpenType Font Integer Overflow Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-076 - http
ADP Vulnrichment: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-076 - http://www.us-cert.gov/cas/techalerts/TA10-285A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6881
CVE ID: CVE-2010-1884 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2010-1885 State: PUBLISHED Published: 2010-06-14T18:00:00 Last Updated: 2024-08-07T01:35:53.750Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MPC::HexToNum function in helpctr.exe in Microsoft Windows Help and Support Center in Windows XP and Windows Server 2003 does not properly handle malformed escape sequences, which allows remote attackers to bypass the trusted documents whitelist (fromHCP option) and execute arbitrary commands via a crafted hcp:// URL, aka "Help Center URL Validation Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/578319 - http://www.securityfocus.com/archive/1/511774/100/0/thr
Container: References: - http://www.kb.cert.org/vuls/id/578319 - http://www.securityfocus.com/archive/1/511774/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/59267 - http://www.securityfocus.com/archive/1/511783/100/0/threaded - http://blogs.technet.com/b/srd/archive/2010/06/10/help-and-support-center-vulnerability-full-disclosure-posting.aspx - http://www.securityfocus.com/bid/40725 - http://archives.neohapsis.com/archives/fulldisclosure/2010-06/0197.html - http://www.securitytracker.com/id?1024084 - http://www.exploit-db.com/exploits/13808 - http://blogs.technet.com/b/msrc/archive/2010/06/10/windows-help-vulnerability-disclosure.aspx - http://www.microsoft.com/techne
blogs.technet.com/b/msrc/archive/2010/06/10/windows-help-vulnerability-disclosure.aspx - http://www.microsoft.com/technet/security/advisory/2219475.mspx - http://www.us-cert.gov/cas/techalerts/TA10-194A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11733 - http://www.vupen.com/english/advisories/2010/1417 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-042 - http://secunia.com/advisories/40076
CVE ID: CVE-2010-1886 State: PUBLISHED Published: 2010-08-16T18:25:00Z Last Updated: 2024-09-16T20:36:20.103Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 SP2 and R2, and Windows 7 allow local users to gain privileges by leveraging access to a process with NetworkService credentials, as demonstrated by TAPI Server, SQL Server, and IIS processes, and related to the Windows Service Isolation feature. NOTE: the vendor states that privilege escalation from NetworkService to LocalSystem does not cross a "security boundary." Additional Analyst Notes: - CVE Program Container: Refe
workService to LocalSystem does not cross a "security boundary." Additional Analyst Notes: - CVE Program Container: References: - http://support.microsoft.com/kb/2264072 - http://support.microsoft.com/kb/982316 - http://www.microsoft.com/technet/security/advisory/2264072.mspx
CVE ID: CVE-2010-1887 State: PUBLISHED Published: 2010-08-11T18:00:00 Last Updated: 2024-08-07T01:35:53.858Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Windows kernel-mode drivers in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 do not properly validate an unspecified system-call argument, which allows local users to cause a denial of service (system hang) via a crafted application, aka "Win32k Bounds Checking Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval
s: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11020 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-048
CVE ID: CVE-2010-1888 State: PUBLISHED Published: 2010-08-11T18:00:00 Last Updated: 2024-08-07T01:35:53.807Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the kernel in Microsoft Windows XP SP3 allows local users to gain privileges via vectors involving thread creation, aka "Windows Kernel Data Initialization Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA10-222A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11825 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-047
CVE ID: CVE-2010-1889 State: PUBLISHED Published: 2010-08-11T18:00:00 Last Updated: 2025-01-21T17:22:53.213Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in the kernel in Microsoft Windows Vista SP1 and SP2, and Windows Server 2008 Gold and SP2, allows local users to gain privileges via a crafted application, related to object initialization during error handling, aka "Windows Kernel Double Free Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.us-cert.gov/cas/techalerts/TA10-222A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11044 - https
ts/TA10-222A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11044 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-047
CVE ID: CVE-2010-1890 State: PUBLISHED Published: 2010-08-11T18:00:00 Last Updated: 2024-08-07T01:35:54.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate ACLs on kernel objects, which allows local users to cause a denial of service (reboot) via a crafted application, aka "Windows Kernel Improper Validation Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-047 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Ad
tes/securitybulletins/2010/ms10-047 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11789
CVE ID: CVE-2010-1891 State: PUBLISHED Published: 2010-09-15T18:00:00 Last Updated: 2024-08-07T01:35:53.796Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Client/Server Runtime Subsystem (aka CSRSS) in the Win32 subsystem in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2, when a Chinese, Japanese, or Korean locale is enabled, does not properly allocate memory for transactions, which allows local users to gain privileges via a crafted application, aka "CSRSS Local Elevation of Privilege Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7536 - https://doc
References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7536 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-069
CVE ID: CVE-2010-1892 State: PUBLISHED Published: 2010-08-11T18:00:00 Last Updated: 2024-08-07T01:35:53.875Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TCP/IP stack in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly handle malformed IPv6 packets, which allows remote attackers to cause a denial of service (system hang) via multiple crafted packets, aka "IPv6 Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA10-222A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-058 - https://oval.cisecurit
0-222A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-058 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11845
CVE ID: CVE-2010-1893 State: PUBLISHED Published: 2010-08-11T18:00:00 Last Updated: 2024-08-07T02:17:12.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the TCP/IP stack in Microsoft Windows Vista SP1, Windows Server 2008 Gold and R2, and Windows 7 allows local users to gain privileges via a buffer of user-mode data that is copied to kernel mode, aka "Integer Overflow in Windows Networking Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA10-222A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12087 - https://docs.microsoft.com/en-us/security
ecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12087 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-058
CVE ID: CVE-2010-1894 State: PUBLISHED Published: 2010-08-11T18:00:00 Last Updated: 2024-08-07T02:17:12.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Windows kernel-mode drivers in win32k.sys in Microsoft Windows XP SP2 and SP3, and Windows Server 2003 SP2, do not properly handle unspecified exceptions, which allows local users to gain privileges via a crafted application, aka "Win32k Exception Handling Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA10-222A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-048 - https://oval.cisecurity.org/repository/search/defin
crosoft.com/en-us/security-updates/securitybulletins/2010/ms10-048 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11769
CVE ID: CVE-2010-1895 State: PUBLISHED Published: 2010-08-11T18:00:00 Last Updated: 2024-08-07T02:17:13.274Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Windows kernel-mode drivers in win32k.sys in Microsoft Windows XP SP2 and SP3, and Windows Server 2003 SP2, do not properly perform memory allocation before copying user-mode data to kernel mode, which allows local users to gain privileges via a crafted application, aka "Win32k Pool Overflow Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA10-222A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11844 - http
rts/TA10-222A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11844 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-048
CVE ID: CVE-2010-1896 State: PUBLISHED Published: 2010-08-11T18:00:00 Last Updated: 2024-10-17T20:20:11.772Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Windows kernel-mode drivers in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, and Windows Server 2008 Gold and SP2 do not properly validate user-mode input passed to kernel mode, which allows local users to gain privileges via a crafted application, aka "Win32k User Input Validation Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.us-cert.gov/cas/techalerts/TA10-222A.html - https://oval.cisecurity.org/re
SA ADP Vulnrichment: References: - http://www.us-cert.gov/cas/techalerts/TA10-222A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12006 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-048
CVE ID: CVE-2010-1897 State: PUBLISHED Published: 2010-08-11T18:00:00 Last Updated: 2024-08-07T02:17:12.617Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Windows kernel-mode drivers in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 do not properly validate pseudo-handle values in callback parameters during window creation, which allows local users to gain privileges via a crafted application, aka "Win32k Window Creation Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA10-222A.html - https://docs.mic
st Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA10-222A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-048 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11663
CVE ID: CVE-2010-1898 State: PUBLISHED Published: 2010-08-11T18:00:00 Last Updated: 2024-08-07T02:17:12.829Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Common Language Runtime (CLR) in Microsoft .NET Framework 2.0 SP1, 2.0 SP2, 3.5, 3.5 SP1, and 3.5.1, and Microsoft Silverlight 2 and 3 before 3.0.50611.0 on Windows and before 3.0.41130.0 on Mac OS X, does not properly handle interfaces and delegations to virtual methods, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET application, or (3) a crafted .NET Framework application, aka "Microsoft Silverlight and Microsoft .NET Framework CLR Virt
plication, or (3) a crafted .NET Framework application, aka "Microsoft Silverlight and Microsoft .NET Framework CLR Virtual Method Delegate Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA10-222A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-060 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12033
CVE ID: CVE-2010-1899 State: PUBLISHED Published: 2010-09-15T18:00:00 Last Updated: 2024-08-07T02:17:12.153Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack consumption vulnerability in the ASP implementation in Microsoft Internet Information Services (IIS) 5.1, 6.0, 7.0, and 7.5 allows remote attackers to cause a denial of service (daemon outage) via a crafted request, related to asp.dll, aka "IIS Repeated Parameter Request Denial of Service Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-065 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mit
curity-updates/securitybulletins/2010/ms10-065 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7127
CVE ID: CVE-2010-1900 State: PUBLISHED Published: 2010-08-11T18:00:00 Last Updated: 2024-08-07T02:17:12.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP2; Microsoft Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Word Viewer; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2; and Works 9 do not properly handle malformed records in a Word file, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted file, aka "Word Record Parsing Vulnerability." Additional Analyst Notes: - CVE Program Container: Reference
ia a crafted file, aka "Word Record Parsing Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA10-222A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11490 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-056
CVE ID: CVE-2010-1901 State: PUBLISHED Published: 2010-08-11T18:00:00 Last Updated: 2024-08-07T02:17:13.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP2; Microsoft Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Word Viewer; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 do not properly handle unspecified properties in rich text data, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted RTF document, aka "Word RTF Parsing Engine Memory Corruption Vulnerability." Additional Analyst Notes: - CVE
a a crafted RTF document, aka "Word RTF Parsing Engine Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA10-222A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-056 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11612
CVE ID: CVE-2010-1902 State: PUBLISHED Published: 2010-08-11T18:00:00 Last Updated: 2024-08-07T02:17:12.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP2; Microsoft Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Word Viewer; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 allows remote attackers to execute arbitrary code via unspecified properties in the data in a crafted RTF document, aka "Word RTF Parsing Buffer Overflow Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/