Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2011-10023 State: PUBLISHED Published: 2025-08-20T15:37:52.354Z Last Updated: 2025-08-22T16:13:23.600Z Vendors: MJM Software Products: QuickPlayer Problem Types: CWE-121 Description: MJM QuickPlayer (likely now referred to as MJM Player) version 2010 contains a stack-based buffer overflow vulnerability triggered by opening a malicious .s3m music file. The flaw occurs due to improper bounds checking in the file parser, allowing an attacker to overwrite memory and execute arbitrary code. Exploitation is achieved via a crafted payload that bypasses DEP and ASLR protections using ROP techniques, and requires user interaction to open the file. Additional Analyst Notes: - CISA ADP Vuln
tections using ROP techniques, and requires user interaction to open the file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://mjm-software.com - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/fileformat/mjm_quickplayer_s3m.rb - https://www.exploit-db.com/exploits/17229 - https://web.archive.org/web/20111016194042/https://www.corelan.be/index.php/forum/security-advisories/corelan-11-003-mjm-quickplayer-2-3-2010-stack-buffer-overflow-s3m/ - https://www.vulncheck.com/advisories/mjm-quickplayer-s3m-stack-based-buffer-overflow
CVE ID: CVE-2011-10024 State: PUBLISHED Published: 2025-08-20T15:37:02.878Z Last Updated: 2025-08-22T16:14:13.107Z Vendors: MJM Software Products: Core Player Problem Types: CWE-121 Description: MJM Core Player (likely now referred to as MJM Player) 2011 is vulnerable to a stack-based buffer overflow when parsing specially crafted .s3m music files. The vulnerability arises from improper bounds checking in the file parser, allowing an attacker to overwrite memory on the stack and execute arbitrary code. Exploitation is triggered when a user opens a malicious .s3m file, and the exploit bypasses DEP and ASLR protections using a ROP chain. Additional Analyst Notes: - CISA ADP Vulnrichment: Refer
he exploit bypasses DEP and ASLR protections using a ROP chain. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://web.archive.org/web/20111016195816/https://www.corelan.be/index.php/forum/security-advisories/corelan-11-004-mjm-core-multimedia-suite-2011-2-4-stack-buffer-overflow-s3m/ - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/fileformat/mjm_coreplayer2011_s3m.rb - https://www.exploit-db.com/exploits/17230 - https://mjm-software.com - https://www.vulncheck.com/advisories/mjm-core-player-file-stack-based-buffer-overflow
CVE ID: CVE-2011-10025 State: PUBLISHED Published: 2025-08-20T15:42:19.122Z Last Updated: 2025-08-20T18:44:47.635Z Vendors: Subtitle Processor Products: Subtitle Processor Problem Types: CWE-120 Description: Subtitle Processor 7.7.1 contains a buffer overflow vulnerability in its .m3u file parser. When a crafted playlist file is opened, the application converts input to Unicode and copies it to a fixed-size stack buffer without proper bounds checking. This allows an attacker to overwrite the Structured Exception Handler (SEH) and execute arbitrary code. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.fortiguard.com/encyclopedia/ips/26849 - https://raw.githubuserc
otes: - CISA ADP Vulnrichment: References: - https://www.fortiguard.com/encyclopedia/ips/26849 - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/fileformat/subtitle_processor_m3u_bof.rb - https://www.exploit-db.com/exploits/17217 - https://www.exploit-db.com/exploits/17225 - https://sourceforge.net/projects/subtitleproc/ - https://www.vulncheck.com/advisories/subtitle-processor-m3u-seh-unicode-buffer-overflow
CVE ID: CVE-2011-10026 State: PUBLISHED Published: 2025-08-20T15:41:40.151Z Last Updated: 2025-11-20T02:01:10.488Z Vendors: Spreecommerce Products: Spreecommerce Problem Types: CWE-94 Description: Spreecommerce versions prior to 0.50.x contain a remote command execution vulnerability in the API's search functionality. Improper input sanitation allows attackers to inject arbitrary shell commands via the search[instance_eval] parameter, which is dynamically invoked using Ruby’s send method. This flaw enables unauthenticated attackers to execute commands on the server. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/
nal Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/multi/http/spree_searchlogic_exec.rb - https://www.exploit-db.com/exploits/17199 - https://web.archive.org/web/20111120023342/http://spreecommerce.com/blog/2011/04/19/security-fixes - https://github.com/spree - https://www.vulncheck.com/advisories/spreecommerce-api-rce
CVE ID: CVE-2011-10027 State: PUBLISHED Published: 2025-08-20T15:31:26.655Z Last Updated: 2025-08-20T19:25:59.323Z Vendors: AOL Inc. Products: AOL Desktop Problem Types: CWE-121 Description: AOL Desktop 9.6 contains a buffer overflow vulnerability in its Tool\rich.rct component when parsing .rtx files. By embedding an overly long string in a hyperlink tag, an attacker can trigger a stack-based buffer overflow due to the use of unsafe strcpy operations. This allows remote attackers to execute arbitrary code when a victim opens a malicious .rtx file. AOL Desktop is end-of-life and no longer supported. Users are encouraged to migrate to AOL Desktop Gold or alternative platforms. Additional Anal
e and no longer supported. Users are encouraged to migrate to AOL Desktop Gold or alternative platforms. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/fileformat/aol_desktop_linktag.rb - https://www.exploit-db.com/exploits/16085 - https://www.exploit-db.com/exploits/16107 - https://www.exploit-db.com/exploits/17150 - https://www.fortiguard.com/encyclopedia/ips/26516 - https://www.vulncheck.com/advisories/aol-desktop-rtx-stack-based-buffer-overflow
CVE ID: CVE-2011-10028 State: PUBLISHED Published: 2025-08-20T15:39:11.898Z Last Updated: 2025-11-20T02:01:10.695Z Vendors: RealNetworks Products: RealArcade ActiveX Problem Types: CWE-623 Description: The RealNetworks RealArcade platform includes an ActiveX control (InstallerDlg.dll, version 2.6.0.445) that exposes a method named Exec via the StubbyUtil.ProcessMgr COM object. This method allows remote attackers to execute arbitrary commands on a victim's Windows machine without proper validation or restrictions. This platform was sometimes referred to or otherwise known as RealArcade or Arcade Games and has since consolidated with RealNetworks' platform, GameHouse. Additional Analyst Notes:
RealArcade or Arcade Games and has since consolidated with RealNetworks' platform, GameHouse. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/17105 - https://www.exploit-db.com/exploits/17149 - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/browser/real_arcade_installerdlg.rb - https://advisories.checkpoint.com/defense/advisories/public/2011/cpai-2011-347.html - https://www.gamehouse.com/ - https://archive.org/details/com.real.arcade - https://www.vulncheck.com/advisories/real-networks-arcade-games-activex-arbitrary-code-execution
CVE ID: CVE-2011-10029 State: PUBLISHED Published: 2025-08-20T15:40:31.746Z Last Updated: 2025-11-20T02:01:10.862Z Vendors: Flexbyte Software Products: Solar FTP Server Problem Types: CWE-134 Description: Solar FTP Server fails to properly handle format strings passed to the USER command. When a specially crafted string containing format specifiers is sent, the server crashes due to a read access violation in the __output_1() function of sfsservice.exe. This results in a denial of service (DoS) condition. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/auxiliary/dos/windows/ftp/solarftp_user.rb - ht
s://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/auxiliary/dos/windows/ftp/solarftp_user.rb - https://www.exploit-db.com/exploits/16204 - https://web.archive.org/web/20111102141514/https://solarftp.com/ - https://web.archive.org/web/20111009122553/http://solarftp.com/blog/news/solar-ftp-server-2-1-2.html - https://www.vulncheck.com/advisories/solar-ftp-server-malformed-user-dos
CVE ID: CVE-2011-10030 State: PUBLISHED Published: 2025-08-20T15:33:20.083Z Last Updated: 2025-11-20T02:01:11.019Z Vendors: Foxit Software Products: Foxit PDF Reader Problem Types: CWE-73 Description: Foxit PDF Reader < 4.3.1.0218 exposes a JavaScript API function, createDataObject(), that allows untrusted PDF content to write arbitrary files anywhere on disk. By embedding a malicious PDF that calls this API, an attacker can drop executables or scripts into privileged folders, leading to code execution the next time the system boots or the user logs in. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/module
otes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/fileformat/foxit_reader_filewrite.rb - https://www.exploit-db.com/exploits/16978 - http://scarybeastsecurity.blogspot.com/2011/03/dangerous-file-write-bug-in-foxit-pdf.html - https://www.foxit.com/pdf-reader/version-history.html - https://www.vulncheck.com/advisories/foxit-pdf-reader-javascript-file-write
CVE ID: CVE-2011-10032 State: PUBLISHED Published: 2025-08-30T13:48:28.964Z Last Updated: 2025-09-02T20:40:40.256Z Vendors: Sunway Products: ForceControl Problem Types: CWE-121 Description: Sunway ForceControl version 6.1 SP3 and earlier contains a stack-based buffer overflow vulnerability in the SNMP NetDBServer service, which listens on TCP port 2001. The flaw is triggered when the service receives a specially crafted packet using opcode 0x57 with an overly long payload. Due to improper bounds checking during packet parsing, attacker-controlled data overwrites the Structured Exception Handler (SEH), allowing arbitrary code execution in the context of the service. This vulnerability can be
red Exception Handler (SEH), allowing arbitrary code execution in the context of the service. This vulnerability can be exploited remotely without authentication and may lead to full system compromise on affected Windows hosts. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/scada/sunway_force_control_netdbsrv.rb - https://www.exploit-db.com/exploits/18448 - https://www.fortiguard.com/encyclopedia/ips/29449 - http://aluigi.altervista.org/adv/forcecontrol_1-adv.txt - http://www.sunwayland.com/ - https://web.archive.org/web/20110611043512/http://www.sunwayland.com.cn/pro.asp - https:/
- http://www.sunwayland.com/ - https://web.archive.org/web/20110611043512/http://www.sunwayland.com.cn/pro.asp - https://www.vulncheck.com/advisories/sunway-forcecontrol-snmp-netdbserver-opcode
CVE ID: CVE-2011-10033 State: PUBLISHED Published: 2025-10-15T01:23:46.757Z Last Updated: 2025-11-22T16:31:07.971Z Vendors: is-human WordPress Plugin Products: is-human WordPress Plugin Problem Types: CWE-95 Description: The WordPress plugin is-human <= v1.4.2 contains an eval injection vulnerability in /is-human/engine.php that can be triggered via the 'type' parameter when the 'action' parameter is set to 'log-reset'. The root cause is unsafe use of eval() on user-controlled input, which can lead to execution of attacker-supplied PHP and OS commands. This may result in arbitrary code execution as the webserver user, site compromise, or data exfiltration. The is-human plugin was made defunc
bitrary code execution as the webserver user, site compromise, or data exfiltration. The is-human plugin was made defunct in June 2008 and is no longer available for download. This vulnerability was exploited in the wild in March 2012. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/is-human/ - https://www.exploit-db.com/exploits/17299 - https://web.archive.org/web/20120115212202/http://blog.spiderlabs.com/2012/01/honeypot-alert-is-human-wordpress-plugin-remote-command-execution-attack-detected.html - https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/honeypot-alert-more-wordpress-is_human-plugin-remote-command-injection-attack-dete
en-us/resources/blogs/spiderlabs-blog/honeypot-alert-more-wordpress-is_human-plugin-remote-command-injection-attack-detected/ - https://www.vulncheck.com/advisories/wordpress-plugin-is-human-eval-injection-rce
CVE ID: CVE-2011-10034 State: PUBLISHED Published: 2025-11-12T22:08:59.474Z Last Updated: 2025-11-13T14:35:52.113Z Vendors: IRAI Products: AUTOMGEN Problem Types: CWE-416 Description: AUTOMGEN versions up to and including 8.0.0.7 (also referenced as 8.022) contain a vulnerability in that project file handling frees an object and subsequently dereferences the stale pointer when processing certain malformed fields. The dangling-pointer use enables an attacker to influence an indirect call through attacker-controlled memory, resulting in denial-of-service. In some conditions, remote code execution may be possible. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.expl
remote code execution may be possible. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/17964 - https://en.iraifrance.com/automgen - https://www.vulncheck.com/advisories/irai-automgen-use-after-free-remote-dos
CVE ID: CVE-2011-10035 State: PUBLISHED Published: 2025-10-30T21:41:36.116Z Last Updated: 2025-11-17T18:21:35.708Z Vendors: Nagios Products: XI Problem Types: CWE-367 Description: Nagios XI versions prior to 2011R1.9 contain privilege escalation vulnerabilities in the scripts that install or update system crontab entries. Due to time-of-check/time-of-use race conditions and missing synchronization or final-path validation, a local low-privileged user could manipulate filesystem state during crontab installation to influence the files or commands executed with elevated privileges, resulting in execution with higher privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - h
leges, resulting in execution with higher privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nagios.com/changelog/nagios-xi/ - https://www.vulncheck.com/advisories/nagios-xi-race-conditions-in-crontab-install-script-lpe
CVE ID: CVE-2011-10036 State: PUBLISHED Published: 2025-10-30T21:49:05.959Z Last Updated: 2025-11-17T18:21:35.913Z Vendors: Nagios Products: XI Problem Types: CWE-79 Description: Nagios XI versions prior to 2011R1.9 are vulnerable to cross-site scripting (XSS) via the handling of the "backend_url" JavaScript link. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nagios.com/changelog/nagios-xi/ - https://www.vulncheck.com/advisories/nagios-xi-xss-via-backend-url-javascript-link-handler
CVE ID: CVE-2011-10037 State: PUBLISHED Published: 2025-10-30T21:57:27.150Z Last Updated: 2025-11-17T18:21:36.228Z Vendors: Nagios Products: XI Problem Types: CWE-79 Description: Nagios XI versions prior to 2011R1.9 are vulnerable to cross-site scripting (XSS) via the handling of xiwindow variables used to build permalinks in the web interface. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nagios.com/changelog/nagios-xi/ - https://www.vulncheck.com/advisories/nagios-xi-xss-via-xiwindow-variables-affecting-
w.nagios.com/changelog/nagios-xi/ - https://www.vulncheck.com/advisories/nagios-xi-xss-via-xiwindow-variables-affecting-permalinks - http://0a29.blogspot.com/2011/12/0a29-11-3-cross-site-scripting.html
CVE ID: CVE-2011-10038 State: PUBLISHED Published: 2025-10-30T21:55:10.682Z Last Updated: 2025-11-17T18:21:36.418Z Vendors: Nagios Products: XI Problem Types: CWE-79 Description: Nagios XI versions prior to 2011R1.9 are vulnerable to cross-site scripting (XSS) via the recurring downtime script of the web interface. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nagios.com/changelog/nagios-xi/ - https://www.vulncheck.com/advisories/nagios-xi-xss-via-recurring-downtime-scripts
CVE ID: CVE-2011-10039 State: PUBLISHED Published: 2025-10-30T21:48:44.152Z Last Updated: 2025-11-17T18:21:36.590Z Vendors: Nagios Products: XI Problem Types: CWE-79 Description: Nagios XI versions prior to 2011R1.9 are vulnerable to cross-site scripting (XSS) via the Alert Heatmap report and the “My Reports” listing of the web interface. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nagios.com/changelog/nagios-xi/ - https://www.vulncheck.com/advisories/nagios-xi-xss-via-alert-heatmap-report-and-my-reports
os.com/changelog/nagios-xi/ - https://www.vulncheck.com/advisories/nagios-xi-xss-via-alert-heatmap-report-and-my-reports-listing
CVE ID: CVE-2011-10040 State: PUBLISHED Published: 2025-10-30T21:55:55.168Z Last Updated: 2025-11-17T18:21:36.760Z Vendors: Nagios Products: XI Problem Types: CWE-79 Description: Nagios XI versions prior to 2011R1.9 are vulnerable to cross-site scripting (XSS) via the link-handling functions used by status and report pages. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nagios.com/changelog/nagios-xi/ - https://www.vulncheck.com/advisories/nagios-xi-xss-via-status-report-page-link-functions
CVE ID: CVE-2011-1000 State: PUBLISHED Published: 2011-02-18T23:00:00 Last Updated: 2024-08-06T22:14:27.147Z Vendors: n/a Products: n/a Problem Types: n/a Description: jingle-factory.c in Telepathy Gabble 0.11 before 0.11.7, 0.10 before 0.10.5, and 0.8 before 0.8.15 allows remote attackers to sniff audio and video calls via a crafted google:jingleinfo stanza that specifies an alternate server for streamed media. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/0901 - http://secunia.com/advisories/43316 - https://bugs.freedesktop.org/show_bug.cgi?id=34048 - http://secunia.com/advisories/44023 - https://exchange.xforce.ibmcloud.com/v
ugs.freedesktop.org/show_bug.cgi?id=34048 - http://secunia.com/advisories/44023 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65523 - http://www.vupen.com/english/advisories/2011/0537 - http://www.openwall.com/lists/oss-security/2011/02/17/4 - http://www.ubuntu.com/usn/USN-1067-1 - http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054324.html - http://secunia.com/advisories/43369 - http://lists.fedoraproject.org/pipermail/package-announce/2011-March/054575.html - http://secunia.com/advisories/43485 - https://hermes.opensuse.org/messages/7848248 - http://lists.fedoraproject.org/pipermail/package-announce/2011-March/054409.html - http://www.vupen.com/english/advi
8 - http://lists.fedoraproject.org/pipermail/package-announce/2011-March/054409.html - http://www.vupen.com/english/advisories/2011/0572 - http://www.openwall.com/lists/oss-security/2011/02/17/7 - http://www.debian.org/security/2011/dsa-2169 - http://www.vupen.com/english/advisories/2011/0428 - http://secunia.com/advisories/43545 - http://www.securityfocus.com/bid/46440 - http://www.vupen.com/english/advisories/2011/0412 - http://secunia.com/advisories/43404
CVE ID: CVE-2011-1001 State: PUBLISHED Published: 2011-07-08T17:00:00 Last Updated: 2024-08-06T22:14:26.957Z Vendors: n/a Products: n/a Problem Types: n/a Description: dexdump in Android SDK before 2.3 does not properly perform structural verification, which allows user-assisted remote attackers to cause a denial of service (dexdump crash) and possibly execute arbitrary code via a malformed APK or dex file that calls a method using more arguments than the number of register that have been declared for that method. Additional Analyst Notes: - CVE Program Container: References: - http://android.git.kernel.org/?p=platform/dalvik.git%3Ba=commit%3Bh=4b0750e8df91220690bb417f45d7ae8b7851b220 - http
s: - http://android.git.kernel.org/?p=platform/dalvik.git%3Ba=commit%3Bh=4b0750e8df91220690bb417f45d7ae8b7851b220 - http://seclists.org/fulldisclosure/2011/Mar/329
CVE ID: CVE-2011-1002 State: PUBLISHED Published: 2011-02-22T18:00:00 Last Updated: 2024-08-06T22:14:26.817Z Vendors: n/a Products: n/a Problem Types: n/a Description: avahi-core/socket.c in avahi-daemon in Avahi before 0.6.29 allows remote attackers to cause a denial of service (infinite loop) via an empty mDNS (1) IPv4 or (2) IPv6 UDP packet to port 5353. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-2244. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2011-0779.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/65525 - http://www.openwall.com/lists/oss-security/2011/02/22/9 - http://www.redhat.
xforce.ibmcloud.com/vulnerabilities/65525 - http://www.openwall.com/lists/oss-security/2011/02/22/9 - http://www.redhat.com/support/errata/RHSA-2011-0436.html - http://www.vupen.com/english/advisories/2011/0511 - http://openwall.com/lists/oss-security/2011/02/18/1 - http://secunia.com/advisories/43605 - http://secunia.com/advisories/43465 - http://secunia.com/advisories/43673 - http://www.vupen.com/english/advisories/2011/0601 - https://bugzilla.redhat.com/show_bug.cgi?id=667187 - http://www.vupen.com/english/advisories/2011/0969 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65524 - http://secunia.com/advisories/44131 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:040
rabilities/65524 - http://secunia.com/advisories/44131 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:040 - http://www.securityfocus.com/bid/46446 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:037 - http://www.vupen.com/english/advisories/2011/0448 - http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html - http://www.debian.org/security/2011/dsa-2174 - http://www.vupen.com/english/advisories/2011/0499 - http://osvdb.org/70948 - http://secunia.com/advisories/43361 - http://www.vupen.com/english/advisories/2011/0670 - http://xorl.wordpress.com/2011/02/20/cve-2011-1002-avahi-daemon-remote-denial-of-service/ - http://avahi.org/ticket/325 - http:
xorl.wordpress.com/2011/02/20/cve-2011-1002-avahi-daemon-remote-denial-of-service/ - http://avahi.org/ticket/325 - http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055858.html - http://www.vupen.com/english/advisories/2011/0565 - http://git.0pointer.de/?p=avahi.git%3Ba=commit%3Bh=46109dfec75534fe270c0ab902576f685d5ab3a6 - http://ubuntu.com/usn/usn-1084-1 - http://openwall.com/lists/oss-security/2011/02/18/4