Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-1207 State: PUBLISHED Published: 2014-01-17T19:00:00 Last Updated: 2024-08-06T09:34:40.737Z Vendors: n/a Products: n/a Problem Types: n/a Description: VMware ESXi 4.0 through 5.1 and ESX 4.0 and 4.1 allow remote attackers to cause a denial of service (NULL pointer dereference) by intercepting and modifying Network File Copy (NFC) traffic. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/64995 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90559 - http://secunia.com/advisories/56499 - http://www.vmware.com/security/advisories/VMSA-2014-0001.html - http://osvdb.org/102196 - http://www.securitytracker.com/id/1029643
CVE ID: CVE-2014-1208 State: PUBLISHED Published: 2014-01-17T19:00:00 Last Updated: 2024-08-06T09:34:41.040Z Vendors: n/a Products: n/a Problem Types: n/a Description: VMware Workstation 9.x before 9.0.1, VMware Player 5.x before 5.0.1, VMware Fusion 5.x before 5.0.1, VMware ESXi 4.0 through 5.1, and VMware ESX 4.0 and 4.1 allow guest OS users to cause a denial of service (VMX process disruption) by using an invalid port. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/56499 - http://www.vmware.com/security/advisories/VMSA-2014-0001.html - http://www.securityfocus.com/bid/64994 - http://www.securitytracker.com/id/1029644 - http://osvdb.org/10219
-0001.html - http://www.securityfocus.com/bid/64994 - http://www.securitytracker.com/id/1029644 - http://osvdb.org/102197 - http://www.securitytracker.com/id/1029643 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90558
CVE ID: CVE-2014-1209 State: PUBLISHED Published: 2014-04-11T19:00:00 Last Updated: 2024-08-06T09:34:40.408Z Vendors: n/a Products: n/a Problem Types: n/a Description: VMware vSphere Client 4.0, 4.1, 5.0 before Update 3, and 5.1 before Update 2 does not properly validate updates to Client files, which allows remote attackers to trigger the downloading and execution of an arbitrary program via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vmware.com/security/advisories/VMSA-2014-0003.html
CVE ID: CVE-2014-1210 State: PUBLISHED Published: 2014-04-11T19:00:00 Last Updated: 2024-08-06T09:34:40.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: VMware vSphere Client 5.0 before Update 3 and 5.1 before Update 2 does not properly validate X.509 certificates, which allows man-in-the-middle attackers to spoof SSL servers via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.vmware.com/security/advisories/VMSA-2014-0003.html
CVE ID: CVE-2014-1211 State: PUBLISHED Published: 2014-01-17T19:00:00 Last Updated: 2024-08-06T09:34:40.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in VMware vCloud Director 5.1.x before 5.1.3 allows remote attackers to hijack the authentication of arbitrary users for requests that trigger a logout. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/102198 - http://www.vmware.com/security/advisories/VMSA-2014-0001.html - http://www.securityfocus.com/bid/64993 - http://www.securitytracker.com/id/1029645 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90560
CVE ID: CVE-2014-1213 State: PUBLISHED Published: 2014-02-10T23:00:00 Last Updated: 2024-08-06T09:34:40.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sophos Anti-Virus engine (SAVi) before 3.50.1, as used in VDL 4.97G 9.7.x before 9.7.9, 10.0.x before 10.0.11, and 10.3.x before 10.3.1 does not set an ACL for certain global and session objects, which allows local users to bypass anti-virus protection, cause a denial of service (resource consumption, CPU consumption, and eventual crash) or spoof "ready for update" messages by performing certain operations on mutexes or events including (1) DataUpdateRequest, (2) MmfMutexSAV-****, (3) MmfMutexSAV-Info, (4) ReadyForUpdateSAV-**
mutexes or events including (1) DataUpdateRequest, (2) MmfMutexSAV-****, (3) MmfMutexSAV-Info, (4) ReadyForUpdateSAV-****, (5) ReadyForUpdateSAV-Info, (6) SAV-****, (7) SAV-Info, (8) StateChange, (9) SuspendedSAV-****, (10) SuspendedSAV-Info, (11) UpdateComplete, (12) UpdateMutex, (13) UpdateRequest, or (14) SophosALMonSessionInstance, as demonstrated by triggering a ReadyForUpdateSAV event and modifying the UpdateComplete, UpdateMutex, and UpdateRequest objects. Additional Analyst Notes: - CVE Program Container: References: - http://www.sophos.com/en-us/support/knowledgebase/2300/7200/1031/120401.aspx - http://packetstormsecurity.com/files/125024/Sophos-Anti-Virus-Denial-Of-Service.html -
ase/2300/7200/1031/120401.aspx - http://packetstormsecurity.com/files/125024/Sophos-Anti-Virus-Denial-Of-Service.html - http://www.securityfocus.com/archive/1/530915/100/0/threaded - http://seclists.org/fulldisclosure/2014/Feb/1 - http://osvdb.org/102762 - http://www.securitytracker.com/id/1029713 - http://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-1213/ - http://www.securityfocus.com/bid/65286
CVE ID: CVE-2014-1214 State: PUBLISHED Published: 2019-11-13T20:36:15 Last Updated: 2024-08-06T09:34:40.408Z Vendors: n/a Products: n/a Problem Types: n/a Description: views/upload.php in the ProJoom Smart Flash Header (NovaSFH) component 3.0.2 and earlier for Joomla! allows remote attackers to upload and execute arbitrary files via a crafted (1) dest parameter and (2) arbitrary extension in the Filename parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-1214/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/91020
CVE ID: CVE-2014-1215 State: PUBLISHED Published: 2018-03-20T21:00:00 Last Updated: 2024-08-06T09:34:40.490Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in Core FTP Server before 1.2 build 508 allow local users to gain privileges via vectors related to reading data from config.dat and Windows Registry. Additional Analyst Notes: - CVE Program Container: References: - https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-1215/ - http://www.securityfocus.com/archive/1/531144/100/0/threaded
CVE ID: CVE-2014-1216 State: PUBLISHED Published: 2014-04-21T14:00:00 Last Updated: 2024-08-06T09:34:40.633Z Vendors: n/a Products: n/a Problem Types: n/a Description: FitNesse Wiki 20131110, 20140201, and earlier allows remote attackers to execute arbitrary commands by defining a COMMAND_PATTERN and TEST_RUNNER in the pageContent parameter when editing a page. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/32568 - https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-1216/ - http://secpod.org/blog/?p=2311
CVE ID: CVE-2014-1217 State: PUBLISHED Published: 2014-04-28T14:00:00 Last Updated: 2024-08-06T09:34:40.365Z Vendors: n/a Products: n/a Problem Types: n/a Description: Livetecs Timelive before 6.2.8 does not properly restrict access to systemsetting.aspx, which allows remote attackers to change configurations and obtain the database connection string and credentials via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-1217/ - http://www.securityfocus.com/archive/1/531911/100/0/threaded - http://www.securityfocus.com/bid/67043 - http://seclists.org/fulldisclosu
ityfocus.com/archive/1/531911/100/0/threaded - http://www.securityfocus.com/bid/67043 - http://seclists.org/fulldisclosure/2014/Apr/259
CVE ID: CVE-2014-1219 State: PUBLISHED Published: 2014-02-13T22:00:00 Last Updated: 2024-08-06T09:34:40.484Z Vendors: n/a Products: n/a Problem Types: n/a Description: CA 2E Web Option r8.1.2 accepts a predictable substring of a W2E_SSNID session token in place of the entire token, which allows remote attackers to hijack sessions by changing characters at the end of this substring, as demonstrated by terminating a session via a modified SSNID parameter to web2edoc/close.htm. Additional Analyst Notes: - CVE Program Container: References: - http://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-1219/ - http://www.securityfocus.com/bid/65537
CVE ID: CVE-2014-1222 State: PUBLISHED Published: 2014-08-12T23:00:00 Last Updated: 2024-08-06T09:34:40.889Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in kcfinder/browse.php in Vtiger CRM before 6.0.0 Security patch 1 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the file parameter in a download action. NOTE: it is likely that this issue is actually in the KCFinder third-party component, and it affects additional products besides Vtiger CRM. Additional Analyst Notes: - CVE Program Container: References: - https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-1222/ -
: References: - https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-1222/ - http://www.securityfocus.com/archive/1/531423/100/0/threaded - http://sourceforge.net/projects/vtigercrm/files/vtiger%20CRM%206.0.0/Add-ons/vtigercrm-600-security-patch1.zip/download
CVE ID: CVE-2014-1223 State: PUBLISHED Published: 2014-02-27T15:00:00 Last Updated: 2024-08-06T09:34:40.385Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in controlpanel/loading.aspx in Telligent Evolution before 6.1.19.36103, 7.x before 7.1.12.36162, 7.5.x, and 7.6.x before 7.6.7.36651 allows remote attackers to inject arbitrary web script or HTML via the msg parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/56779 - http://www.securityfocus.com/bid/65739 - https://www.portcullis-security.com/security-research-an
com/advisories/56779 - http://www.securityfocus.com/bid/65739 - https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-1223 - http://www.securityfocus.com/archive/1/531223/100/0/threaded
CVE ID: CVE-2014-1224 State: PUBLISHED Published: 2014-10-06T23:00:00 Last Updated: 2024-08-06T09:34:41.000Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incomplete blacklist vulnerability in the user registration feature in rexx Recruitment R6.1 and R7 without "fixes from 2014-01-15" allows remote attackers to conduct cross-site scripting (XSS) attacks via the oninput event handler in the fname parameter to the default URI in /reg. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/56310 - https://www.redteam-pentesting.de/en/advisories/rt-sa-2014-002/-rexx-recruitment-cross-site-scripting-in-user-registration - http://www.securityfo
ting.de/en/advisories/rt-sa-2014-002/-rexx-recruitment-cross-site-scripting-in-user-registration - http://www.securityfocus.com/archive/1/531654/100/0/threaded - http://seclists.org/fulldisclosure/2014/Mar/389
CVE ID: CVE-2014-1226 State: PUBLISHED Published: 2018-04-06T17:00:00 Last Updated: 2024-08-06T09:34:40.964Z Vendors: n/a Products: n/a Problem Types: n/a Description: The pipe_init_terminal function in main.c in s3dvt allows local users to gain privileges by leveraging setuid permissions and usage of bash 4.3 and earlier. NOTE: This vulnerability exists because of an incomplete fix for CVE-2013-6876. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/532278/100/0/threaded - http://seclists.org/fulldisclosure/2014/Jun/12 - http://www.openwall.com/lists/oss-security/2014/06/03/13 - http://hmarco.org/bugs/CVE-2014-1226-s3dvt_0.2.2-root-shell
- http://www.openwall.com/lists/oss-security/2014/06/03/13 - http://hmarco.org/bugs/CVE-2014-1226-s3dvt_0.2.2-root-shell.html
CVE ID: CVE-2014-1232 State: PUBLISHED Published: 2014-01-08T15:00:00 Last Updated: 2024-08-06T09:34:40.585Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Foliopress WYSIWYG plugin before 2.6.8.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/64666 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90102 - http://secunia.com/advisories/56261 - http://wordpress.org/plugins/foliopress-wysiwyg/changelog
CVE ID: CVE-2014-1233 State: PUBLISHED Published: 2014-01-10T11:00:00 Last Updated: 2024-08-06T09:34:41.099Z Vendors: n/a Products: n/a Problem Types: n/a Description: The paratrooper-pingdom gem 1.0.0 for Ruby allows local users to obtain the App-Key, username, and password values by listing the curl process. Additional Analyst Notes: - CVE Program Container: References: - http://www.vapid.dhs.org/advisories/paratrooper-api-key-pingdom.html - http://openwall.com/lists/oss-security/2014/01/08/1
CVE ID: CVE-2014-1234 State: PUBLISHED Published: 2014-01-10T11:00:00 Last Updated: 2024-08-06T09:34:40.464Z Vendors: n/a Products: n/a Problem Types: n/a Description: The paratrooper-newrelic gem 1.0.1 for Ruby allows local users to obtain the X-Api-Key value by listing the curl process. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2014/01/08/2 - http://www.vapid.dhs.org/advisories/paratrooper-newrelic-api.html
CVE ID: CVE-2014-1235 State: PUBLISHED Published: 2017-08-07T20:00:00 Last Updated: 2024-08-06T09:34:41.123Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the "yyerror" function in Graphviz 2.34.0 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted file. NOTE: This vulnerability exists due to an incomplete fix for CVE-2014-0978. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201702-06 - http://seclists.org/oss-sec/2014/q1/54 - https://github.com/ellson/graphviz/commit/d266bb2b4154d11c27252b56d86963aef4434750 - https://exchange.xforce.ibmc
1/54 - https://github.com/ellson/graphviz/commit/d266bb2b4154d11c27252b56d86963aef4434750 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90198 - http://www.securityfocus.com/bid/64736 - https://bugzilla.redhat.com/show_bug.cgi?id=1050871
CVE ID: CVE-2014-1236 State: PUBLISHED Published: 2014-01-10T15:00:00 Last Updated: 2024-08-06T09:34:41.148Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the chkNum function in lib/cgraph/scan.l in Graphviz 2.34.0 allows remote attackers to have unspecified impact via vectors related to a "badly formed number" and a "long digit list." Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2014/q1/51 - http://osvdb.org/101851 - http://www.mandriva.com/security/advisories?name=MDVSA-2014:024 - https://security.gentoo.org/glsa/201702-06 - http://seclists.org/oss-sec/2014/q1/54 - https://github.com/ellson/graphviz
https://security.gentoo.org/glsa/201702-06 - http://seclists.org/oss-sec/2014/q1/54 - https://github.com/ellson/graphviz/commit/1d1bdec6318746f6f19f245db589eddc887ae8ff - http://www.debian.org/security/2014/dsa-2843 - http://seclists.org/oss-sec/2014/q1/46 - https://bugzilla.redhat.com/show_bug.cgi?id=1050872 - http://www.securityfocus.com/bid/64737 - http://secunia.com/advisories/55666 - http://secunia.com/advisories/56244
CVE ID: CVE-2014-1237 State: PUBLISHED Published: 2014-02-11T17:00:00 Last Updated: 2024-08-06T09:34:41.078Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in synetics i-doit pro before 1.2.4 allows remote attackers to inject arbitrary web script or HTML via the call parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/56802 - http://www.securityfocus.com/bid/65353 - http://www.i-doit.com/en/company/news/single-news/?tx_ttnews%5Btt_news%5D=136 - http://secunia.com/advisories/56834 - http://seclists.org/fulldisclosure/2014/Feb/26 - http://www.csnc.ch/misc/files/advisories/CVE-2014-1237_i-
ories/56834 - http://seclists.org/fulldisclosure/2014/Feb/26 - http://www.csnc.ch/misc/files/advisories/CVE-2014-1237_i-doit_Cross-site_Scripting_-_XSS.txt - http://osvdb.org/102910 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90969 - http://packetstormsecurity.com/files/125062
CVE ID: CVE-2014-1238 State: PUBLISHED Published: 2019-11-22T18:25:51 Last Updated: 2024-08-06T09:34:40.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in ui/common/managedlistdialog.aspx in Gael Q-Pulse 0.6 and earlier. Additional Analyst Notes: - CVE Program Container: References: - https://seclists.org/bugtraq/2014/Jan/41
CVE ID: CVE-2014-1242 State: PUBLISHED Published: 2014-01-23T19:00:00 Last Updated: 2024-08-06T09:34:41.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple iTunes before 11.1.4 uses HTTP for the iTunes Tutorials window, which allows man-in-the-middle attackers to spoof content by gaining control over the client-server data stream. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/65088 - http://www.securitytracker.com/id/1029671 - http://osvdb.org/102410 - http://support.apple.com/kb/HT6001 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90653
CVE ID: CVE-2014-1243 State: PUBLISHED Published: 2014-02-27T01:00:00 Last Updated: 2024-08-06T09:34:41.095Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple QuickTime before 7.7.5 does not initialize an unspecified pointer, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted track list in a movie file. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT6151
CVE ID: CVE-2014-1244 State: PUBLISHED Published: 2014-02-27T01:00:00 Last Updated: 2024-08-06T09:34:41.075Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with H.264 encoding. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/65786 - http://support.apple.com/kb/HT6151
CVE ID: CVE-2014-1245 State: PUBLISHED Published: 2014-02-27T01:00:00 Last Updated: 2024-08-06T09:34:41.031Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted stsz atom in a movie file. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT6150 - http://support.apple.com/kb/HT6151
CVE ID: CVE-2014-1246 State: PUBLISHED Published: 2014-02-27T01:00:00 Last Updated: 2024-08-06T09:34:41.128Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted ftab atom in a movie file. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT6150 - http://support.apple.com/kb/HT6151
CVE ID: CVE-2014-1247 State: PUBLISHED Published: 2014-02-27T01:00:00 Last Updated: 2024-08-06T09:34:41.151Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted dref atom in a movie file. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT6150 - http://support.apple.com/kb/HT6151
CVE ID: CVE-2014-1248 State: PUBLISHED Published: 2014-02-27T01:00:00 Last Updated: 2024-08-06T09:34:41.084Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted ldat atom in a movie file. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT6150 - http://support.apple.com/kb/HT6151
CVE ID: CVE-2014-1249 State: PUBLISHED Published: 2014-02-27T01:00:00 Last Updated: 2024-08-06T09:34:41.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PSD image. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT6150 - http://support.apple.com/kb/HT6151
CVE ID: CVE-2014-1250 State: PUBLISHED Published: 2014-02-27T01:00:00 Last Updated: 2024-08-06T09:34:41.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple QuickTime before 7.7.5 does not properly perform a byte-swapping operation, which allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds memory access and application crash) via a crafted ttfo element in a movie file. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT6150 - http://support.apple.com/kb/HT6151
CVE ID: CVE-2014-1251 State: PUBLISHED Published: 2014-02-27T01:00:00 Last Updated: 2024-08-06T09:34:41.069Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted clef atom in a movie file. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT6151 - http://www.securityfocus.com/bid/65787
CVE ID: CVE-2014-1252 State: PUBLISHED Published: 2014-01-24T15:00:00 Last Updated: 2024-08-06T09:34:41.075Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in Apple Pages 2.x before 2.1 and 5.x before 5.1 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted Microsoft Word file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/90672 - http://www.securitytracker.com/id/1029683 - http://support.apple.com/kb/HT6150 - http://secunia.com/advisories/56630 - http://secunia.com/advisories/56615 - http://www.securityfocus.com/bid/65113 -
0 - http://secunia.com/advisories/56630 - http://secunia.com/advisories/56615 - http://www.securityfocus.com/bid/65113 - http://support.apple.com/kb/HT6162 - http://osvdb.org/102460 - http://support.apple.com/kb/HT6117
CVE ID: CVE-2014-1253 State: PUBLISHED Published: 2014-02-13T22:00:00 Last Updated: 2024-08-06T09:34:41.106Z Vendors: n/a Products: n/a Problem Types: n/a Description: AppleMNT.sys in Apple Boot Camp 5 before 5.1 allows local users to cause a denial of service (kernel memory corruption) or possibly have unspecified other impact via a malformed header in a Portable Executable (PE) file. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/103267 - http://support.apple.com/kb/HT6126 - http://seclists.org/bugtraq/2014/Feb/47
CVE ID: CVE-2014-1254 State: PUBLISHED Published: 2014-02-27T01:00:00 Last Updated: 2024-08-06T09:34:41.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple Type Services (ATS) in Apple OS X before 10.9.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Type 1 font that is embedded in a document. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT6150