Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
72971.html - http://lists.opensuse.org/opensuse-updates/2014-01/msg00009.html - http://lists.opensuse.org/opensuse-updates/2014-01/msg00031.html - http://www.ubuntu.com/usn/USN-2079-1 - http://lists.fedoraproject.org/pipermail/package-announce/2013-December/124833.html - http://rt.openssl.org/Ticket/Display.html?id=3200&user=guest&pass=guest - http://lists.fedoraproject.org/pipermail/package-announce/2013-December/124854.html - http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html - http://rhn.redhat.com/errata/RHSA-2014-0015.html - http://seclists.org/fulldisclosure/2014/Dec/23 - https://issues.apache.org/jira/browse/TS-2355 - http://www.securitytracker.com/id/1029548 -
ulldisclosure/2014/Dec/23 - https://issues.apache.org/jira/browse/TS-2355 - http://www.securitytracker.com/id/1029548 - http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136470.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-December/124858.html - http://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=ca989269a2876bae79393bd54c3e72d49975fc75 - https://bugzilla.redhat.com/show_bug.cgi?id=1045363 - http://rhn.redhat.com/errata/RHSA-2014-0041.html
CVE ID: CVE-2013-6450 State: PUBLISHED Published: 2014-01-01T15:00:00 Last Updated: 2024-08-06T17:39:01.167Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DTLS retransmission implementation in OpenSSL 1.0.0 before 1.0.0l and 1.0.1 before 1.0.1f does not properly maintain data structures for digest and encryption contexts, which might allow man-in-the-middle attackers to trigger the use of a different context and cause a denial of service (application crash) by interfering with packet delivery, related to ssl/d1_both.c and ssl/t1_enc.c. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2014-01/msg00032.html - http://ww
tes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2014-01/msg00032.html - http://www.vmware.com/security/advisories/VMSA-2014-0012.html - http://www.securitytracker.com/id/1031594 - http://www-01.ibm.com/support/docview.wss?uid=isg400001843 - http://www.securitytracker.com/id/1029549 - http://security.gentoo.org/glsa/glsa-201412-39.xml - http://www.debian.org/security/2014/dsa-2833 - https://puppet.com/security/cve/cve-2013-6450 - http://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=34628967f1e65dc8f34e000f0f5518e21afbfc7b - http://www.securityfocus.com/archive/1/534161/100/0/threaded - http://lists.fedoraproject.org/pipermail/package-announce/2014
//www.securityfocus.com/archive/1/534161/100/0/threaded - http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.html - http://www-01.ibm.com/support/docview.wss?uid=isg400001841 - http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html - http://lists.opensuse.org/opensuse-updates/2014-01/msg00031.html - http://www.ubuntu.com/usn/USN-2079-1 - https://security-tracker.debian.org/tracker/CVE-2013-6450 - http://www.securityfocus.com/bid/64618 - http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html - http://rhn.redhat.com/errata/RHSA-2014-0015.html - http://seclists.org/fulldisclosure/2014/Dec/23 - http://lists.fedoraproject.org/piperma
com/errata/RHSA-2014-0015.html - http://seclists.org/fulldisclosure/2014/Dec/23 - http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136470.html - http://www.openssl.org/news/vulnerabilities.html
CVE ID: CVE-2013-6451 State: PUBLISHED Published: 2020-01-28T14:56:22 Last Updated: 2024-08-06T17:39:01.483Z Vendors: Wikimedia Foundation Products: MediaWiki Problem Types: Cross-Site Scripting Description: Cross-site scripting (XSS) vulnerability in MediaWiki 1.19.9 before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 allows remote attackers to inject arbitrary web script or HTML via unspecified CSS values. Additional Analyst Notes: - CVE Program Container: References: - http://lists.wikimedia.org/pipermail/mediawiki-announce/2014-January/000138.html
CVE ID: CVE-2013-6452 State: PUBLISHED Published: 2014-05-12T14:00:00 Last Updated: 2024-08-06T17:39:01.306Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 allows remote attackers to inject arbitrary web script or HTML via crafted XSL in an SVG file. Additional Analyst Notes: - CVE Program Container: References: - http://lists.wikimedia.org/pipermail/mediawiki-announce/2014-January/000138.html
CVE ID: CVE-2013-6453 State: PUBLISHED Published: 2014-05-12T14:00:00 Last Updated: 2024-08-06T17:39:01.310Z Vendors: n/a Products: n/a Problem Types: n/a Description: MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 does not properly sanitize SVG files, which allows remote attackers to have unspecified impact via invalid XML. Additional Analyst Notes: - CVE Program Container: References: - http://lists.wikimedia.org/pipermail/mediawiki-announce/2014-January/000138.html
CVE ID: CVE-2013-6454 State: PUBLISHED Published: 2014-05-12T14:00:00 Last Updated: 2024-08-06T17:39:01.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 allows remote attackers to inject arbitrary web script or HTML via a -o-link attribute. Additional Analyst Notes: - CVE Program Container: References: - http://lists.wikimedia.org/pipermail/mediawiki-announce/2014-January/000138.html
CVE ID: CVE-2013-6455 State: PUBLISHED Published: 2020-01-28T14:54:22 Last Updated: 2024-08-06T17:39:01.461Z Vendors: Wikimedia Foundation Products: MediaWiki Problem Types: Path Disclosure Description: The CentralAuth extension for MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 allows remote attackers to obtain usernames via vectors related to writing the names to the DOM of a page. Additional Analyst Notes: - CVE Program Container: References: - http://lists.wikimedia.org/pipermail/mediawiki-announce/2014-January/000138.html
CVE ID: CVE-2013-6456 State: PUBLISHED Published: 2014-04-15T18:00:00 Last Updated: 2024-08-06T17:39:01.476Z Vendors: n/a Products: n/a Problem Types: n/a Description: The LXC driver (lxc/lxc_driver.c) in libvirt 1.0.1 through 1.2.1 allows local users to (1) delete arbitrary host devices via the virDomainDeviceDettach API and a symlink attack on /dev in the container; (2) create arbitrary nodes (mknod) via the virDomainDeviceAttach API and a symlink attack on /dev in the container; and cause a denial of service (shutdown or reboot host OS) via the (3) virDomainShutdown or (4) virDomainReboot API and a symlink attack on /dev/initctl in the container, related to "paths under /proc/$PID/root" a
4) virDomainReboot API and a symlink attack on /dev/initctl in the container, related to "paths under /proc/$PID/root" and the virInitctlSetRunLevel function. Additional Analyst Notes: - CVE Program Container: References: - http://libvirt.org/news.html - http://secunia.com/advisories/56187 - http://secunia.com/advisories/60895 - http://security.gentoo.org/glsa/glsa-201412-04.xml - http://libvirt.org/git/?p=libvirt.git%3Ba=commit%3Bh=5fc590ad9f4 - http://lists.opensuse.org/opensuse-updates/2014-05/msg00004.html - http://security.libvirt.org/2013/0018.html - https://bugzilla.redhat.com/show_bug.cgi?id=1045643 - http://lists.fedoraproject.org/pipermail/package-announce/2014-February/129199.html
redhat.com/show_bug.cgi?id=1045643 - http://lists.fedoraproject.org/pipermail/package-announce/2014-February/129199.html - http://www.securityfocus.com/bid/65743 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=732394 - http://secunia.com/advisories/56215
CVE ID: CVE-2013-6457 State: PUBLISHED Published: 2014-01-24T18:00:00 Last Updated: 2024-08-06T17:39:01.627Z Vendors: n/a Products: n/a Problem Types: n/a Description: The libxlDomainGetNumaParameters function in the libxl driver (libxl/libxl_driver.c) in libvirt before 1.2.1 does not properly initialize the nodemap, which allows local users to cause a denial of service (invalid free operation and crash) or possibly execute arbitrary code via an inactive domain to the virsh numatune command. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2093-1 - http://libvirt.org/news.html - http://secunia.com/advisories/60895 - http://security.gentoo.org/gls
com/usn/USN-2093-1 - http://libvirt.org/news.html - http://secunia.com/advisories/60895 - http://security.gentoo.org/glsa/glsa-201412-04.xml - http://lists.opensuse.org/opensuse-updates/2014-02/msg00060.html - https://www.redhat.com/archives/libvir-list/2013-December/msg01176.html - https://www.redhat.com/archives/libvir-list/2013-December/msg01258.html - https://bugzilla.redhat.com/show_bug.cgi?id=1048629
CVE ID: CVE-2013-6458 State: PUBLISHED Published: 2014-01-24T18:00:00 Last Updated: 2024-08-06T17:39:01.171Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple race conditions in the (1) virDomainBlockStats, (2) virDomainGetBlockInf, (3) qemuDomainBlockJobImpl, and (4) virDomainGetBlockIoTune functions in libvirt before 1.2.1 do not properly verify that the disk is attached, which allows remote read-only attackers to cause a denial of service (libvirtd crash) via the virDomainDetachDeviceFlags command. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2093-1 - http://secunia.com/advisories/56446 - http://www.debian.org/security/20
rences: - http://www.ubuntu.com/usn/USN-2093-1 - http://secunia.com/advisories/56446 - http://www.debian.org/security/2014/dsa-2846 - https://bugzilla.redhat.com/show_bug.cgi?id=1043069 - http://libvirt.org/news.html - http://secunia.com/advisories/60895 - http://security.gentoo.org/glsa/glsa-201412-04.xml - http://lists.opensuse.org/opensuse-updates/2014-02/msg00060.html - http://rhn.redhat.com/errata/RHSA-2014-0103.html - http://secunia.com/advisories/56186 - http://lists.opensuse.org/opensuse-updates/2014-02/msg00062.html
CVE ID: CVE-2013-6459 State: PUBLISHED Published: 2013-12-31T15:00:00 Last Updated: 2024-08-06T17:39:01.443Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the will_paginate gem before 3.0.5 for Ruby allows remote attackers to inject arbitrary web script or HTML via vectors involving generated pagination links. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/56180 - https://access.redhat.com/errata/RHSA-2018:0336 - http://www.securityfocus.com/bid/64509 - https://github.com/mislav/will_paginate/releases/tag/v3.0.5
CVE ID: CVE-2013-6460 State: PUBLISHED Published: 2019-11-05T14:02:54 Last Updated: 2024-08-06T17:39:01.455Z Vendors: Ruby Products: Nokogiri gem Problem Types: while parsing XML documents Description: Nokogiri gem 1.5.x has Denial of Service via infinite loop when parsing XML documents Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2013-6460 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-6460 - https://bugzilla.suse.com/show_bug.cgi?id=CVE-2013-6460 - https://access.redhat.com/security/cve/cve-2013-6460 - http://www.openwall.com/lists/oss-security/2013/12/27/2 - http://www.securityfocus.com/bid/64513 - https://exchang
460 - http://www.openwall.com/lists/oss-security/2013/12/27/2 - http://www.securityfocus.com/bid/64513 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90058
CVE ID: CVE-2013-6461 State: PUBLISHED Published: 2019-11-05T14:07:42 Last Updated: 2024-08-06T17:39:01.356Z Vendors: Ruby Products: Nokogiri gem Problem Types: while parsing XML entities Description: Nokogiri gem 1.5.x and 1.6.x has DoS while parsing XML entities by failing to apply limits Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2013-6461 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-6461 - https://access.redhat.com/security/cve/cve-2013-6461 - http://www.openwall.com/lists/oss-security/2013/12/27/2 - http://www.securityfocus.com/bid/64513 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90059
CVE ID: CVE-2013-6462 State: PUBLISHED Published: 2014-01-09T15:00:00 Last Updated: 2024-08-06T17:39:01.320Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont 1.1 through 1.4.6 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long string in a character name in a BDF font file. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2014-01/msg00052.html - http://lists.x.org/archives/xorg-announce/2014-January/002389.html - http://www.debian.org/security/2014/dsa-2838 - http://secun
ists.x.org/archives/xorg-announce/2014-January/002389.html - http://www.debian.org/security/2014/dsa-2838 - http://secunia.com/advisories/56357 - http://seclists.org/oss-sec/2014/q1/33 - http://rhn.redhat.com/errata/RHSA-2014-0018.html - http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html - http://secunia.com/advisories/56240 - http://secunia.com/advisories/56336 - http://www.ubuntu.com/usn/USN-2078-1 - http://lists.opensuse.org/opensuse-updates/2014-01/msg00050.html - http://secunia.com/advisories/56371 - http://osvdb.org/101842 - http://www.securityfocus.com/bid/64694 - http://cgit.freedesktop.org/xorg/lib/libXfont/commit/?id=4d024ac10f964f6bd372ae0dd14f02772a6e5f63 -
ocus.com/bid/64694 - http://cgit.freedesktop.org/xorg/lib/libXfont/commit/?id=4d024ac10f964f6bd372ae0dd14f02772a6e5f63 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90123
CVE ID: CVE-2013-6463 State: REJECTED Published: 2014-01-06T11:00:00 Last Updated: 2014-01-06T02:57:00 Description: No description available.
CVE ID: CVE-2013-6464 State: REJECTED Published: 2022-06-30T20:26:36 Last Updated: 2022-06-30T20:26:36 Description: No description available.
CVE ID: CVE-2013-6465 State: PUBLISHED Published: 2017-12-19T19:00:00 Last Updated: 2024-08-06T17:39:01.329Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in JBPM KIE Workbench 6.0.x allow remote authenticated users to inject arbitrary web script or HTML via vectors related to task name html inputs. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kiegroup/jbpm-wb/commit/4818204506e8e94645b52adb9426bedfa9ffdd04 - https://github.com/kiegroup/jbpm-wb/compare/6.0.x - https://bugzilla.redhat.com/show_bug.cgi?id=1048380
CVE ID: CVE-2013-6466 State: PUBLISHED Published: 2014-01-26T20:00:00 Last Updated: 2024-08-06T17:39:01.444Z Vendors: n/a Products: n/a Problem Types: n/a Description: Openswan 2.6.39 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daemon restart) via IKEv2 packets that lack expected payloads. Additional Analyst Notes: - CVE Program Container: References: - https://libreswan.org/security/CVE-2013-6467/CVE-2013-6467.txt - http://www.securityfocus.com/bid/65155 - https://cert.vde.com/en-us/advisories/vde-2017-001 - http://rhn.redhat.com/errata/RHSA-2014-0185.html - http://www.debian.org/security/2014/dsa-2893 - https://exchange.xforce.ibmcloud
.redhat.com/errata/RHSA-2014-0185.html - http://www.debian.org/security/2014/dsa-2893 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90524
CVE ID: CVE-2013-6467 State: PUBLISHED Published: 2014-01-26T20:00:00 Last Updated: 2024-08-06T17:39:01.252Z Vendors: n/a Products: n/a Problem Types: n/a Description: Libreswan 3.7 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daemon restart) via IKEv2 packets that lack expected payloads. Additional Analyst Notes: - CVE Program Container: References: - https://libreswan.org/security/CVE-2013-6467/CVE-2013-6467.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/90522 - http://osvdb.org/102172 - http://www.securityfocus.com/bid/64987 - http://secunia.com/advisories/56420
CVE ID: CVE-2013-6468 State: PUBLISHED Published: 2014-04-10T14:00:00 Last Updated: 2024-08-06T17:39:01.441Z Vendors: n/a Products: n/a Problem Types: n/a Description: JBoss Drools, Red Hat JBoss BRMS before 6.0.1, and Red Hat JBoss BPM Suite before 6.0.1 allows remote authenticated users to execute arbitrary Java code via a (1) MVFLEX Expression Language (MVEL) or (2) Drools expression. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-0371.html - http://secunia.com/advisories/57719 - http://secunia.com/advisories/57716 - http://rhn.redhat.com/errata/RHSA-2014-0372.html
CVE ID: CVE-2013-6469 State: PUBLISHED Published: 2014-04-21T14:00:00 Last Updated: 2024-08-06T17:39:01.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: JBoss Overlord Run Time Governance (RTGov) 1.0 for JBossAS allows remote authenticated users to execute arbitrary Java code via an MVFLEX Expression Language (MVEL) expression. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1051279 - http://secunia.com/advisories/57843
CVE ID: CVE-2013-6470 State: PUBLISHED Published: 2014-06-02T15:00:00 Last Updated: 2024-08-06T17:39:01.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration in the standalone controller quickstack manifest in openstack-foreman-installer, as used in Red Hat Enterprise Linux OpenStack Platform 4.0, disables authentication for Qpid, which allows remote attackers to gain access by connecting to Qpid. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-0517.html - https://bugzilla.redhat.com/show_bug.cgi?id=1051994
CVE ID: CVE-2013-6471 State: REJECTED Published: 2022-06-30T20:27:09 Last Updated: 2022-06-30T20:27:09 Description: No description available.
CVE ID: CVE-2013-6472 State: PUBLISHED Published: 2014-05-12T14:00:00 Last Updated: 2024-08-06T17:39:01.426Z Vendors: n/a Products: n/a Problem Types: n/a Description: MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 allows remote attackers to obtain information about deleted page via the (1) log API, (2) enhanced RecentChanges, and (3) user watchlists. Additional Analyst Notes: - CVE Program Container: References: - http://lists.wikimedia.org/pipermail/mediawiki-announce/2014-January/000138.html
CVE ID: CVE-2013-6473 State: PUBLISHED Published: 2014-03-14T15:00:00 Last Updated: 2024-08-06T17:39:01.463Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple heap-based buffer overflows in the urftopdf filter in cups-filters 1.0.25 before 1.0.47 allow remote attackers to execute arbitrary code via a large (1) page or (2) line in a URF file. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2143-1 - http://www.securityfocus.com/bid/66601 - http://bzr.linuxfoundation.org/loggerhead/openprinting/cups-filters/revision/7175 - https://bugzilla.redhat.com/show_bug.cgi?id=1027547 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=74133
ion/7175 - https://bugzilla.redhat.com/show_bug.cgi?id=1027547 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=741333
CVE ID: CVE-2013-6474 State: PUBLISHED Published: 2014-03-14T15:00:00 Last Updated: 2024-08-06T17:39:01.678Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the pdftoopvp filter in CUPS and cups-filters before 1.0.47 allows remote attackers to execute arbitrary code via a crafted PDF file. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2144-1 - http://www.debian.org/security/2014/dsa-2876 - https://bugzilla.redhat.com/show_bug.cgi?id=1027548 - http://bzr.linuxfoundation.org/loggerhead/openprinting/cups-filters/revision/7176 - http://www.ubuntu.com/usn/USN-2143-1 - http://www.debian.org/security/2014/dsa-
penprinting/cups-filters/revision/7176 - http://www.ubuntu.com/usn/USN-2143-1 - http://www.debian.org/security/2014/dsa-2875 - http://www.securityfocus.com/bid/66163
CVE ID: CVE-2013-6475 State: PUBLISHED Published: 2014-03-14T15:00:00 Last Updated: 2024-08-06T17:39:01.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in (1) OPVPOutputDev.cxx and (2) oprs/OPVPSplash.cxx in the pdftoopvp filter in CUPS and cups-filters before 1.0.47 allow remote attackers to execute arbitrary code via a crafted PDF file, which triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2144-1 - http://www.debian.org/security/2014/dsa-2876 - https://bugzilla.redhat.com/show_bug.cgi?id=1027550 - http://bzr.linuxfoundation.org/loggerhead/openprinting/cups-filter
https://bugzilla.redhat.com/show_bug.cgi?id=1027550 - http://bzr.linuxfoundation.org/loggerhead/openprinting/cups-filters/revision/7176 - http://www.securityfocus.com/bid/66166 - http://www.ubuntu.com/usn/USN-2143-1 - http://www.debian.org/security/2014/dsa-2875
CVE ID: CVE-2013-6476 State: PUBLISHED Published: 2014-03-14T15:00:00 Last Updated: 2024-08-06T17:39:01.883Z Vendors: n/a Products: n/a Problem Types: n/a Description: The OPVPWrapper::loadDriver function in oprs/OPVPWrapper.cxx in the pdftoopvp filter in CUPS and cups-filters before 1.0.47 allows local users to gain privileges via a Trojan horse driver in the same directory as the PDF file. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2144-1 - https://bugzilla.redhat.com/show_bug.cgi?id=1027551 - http://www.debian.org/security/2014/dsa-2876 - http://bzr.linuxfoundation.org/loggerhead/openprinting/cups-filters/revision/7176 - http://www.ubunt
ity/2014/dsa-2876 - http://bzr.linuxfoundation.org/loggerhead/openprinting/cups-filters/revision/7176 - http://www.ubuntu.com/usn/USN-2143-1 - http://www.debian.org/security/2014/dsa-2875
CVE ID: CVE-2013-6477 State: PUBLISHED Published: 2014-02-06T15:00:00 Last Updated: 2024-08-06T17:39:01.763Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer signedness errors in libpurple in Pidgin before 2.10.8 allow remote attackers to cause a denial of service (application crash) via a crafted timestamp value in an XMPP message. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2014-03/msg00005.html - https://rhn.redhat.com/errata/RHSA-2014-0139.html - http://www.debian.org/security/2014/dsa-2859 - http://lists.opensuse.org/opensuse-updates/2014-02/msg00039.html - http://pidgin.im/news/security/?id=71 -
4/dsa-2859 - http://lists.opensuse.org/opensuse-updates/2014-02/msg00039.html - http://pidgin.im/news/security/?id=71 - http://www.ubuntu.com/usn/USN-2100-1 - http://hg.pidgin.im/pidgin/main/rev/852014ae74a0
CVE ID: CVE-2013-6478 State: PUBLISHED Published: 2014-02-06T15:00:00 Last Updated: 2024-08-06T17:39:01.598Z Vendors: n/a Products: n/a Problem Types: n/a Description: gtkimhtml.c in Pidgin before 2.10.8 does not properly interact with underlying library support for wide Pango layouts, which allows user-assisted remote attackers to cause a denial of service (application crash) via a long URL that is examined with a tooltip. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2014-03/msg00005.html - https://rhn.redhat.com/errata/RHSA-2014-0139.html - http://www.debian.org/security/2014/dsa-2859 - http://pidgin.im/pipermail/support/2013-M
om/errata/RHSA-2014-0139.html - http://www.debian.org/security/2014/dsa-2859 - http://pidgin.im/pipermail/support/2013-March/012981.html - http://lists.opensuse.org/opensuse-updates/2014-02/msg00039.html - http://pidgin.im/news/security/?id=72 - http://hg.pidgin.im/pidgin/main/rev/2bb66ef1475e - http://pidgin.im/pipermail/support/2013-March/012980.html - http://www.ubuntu.com/usn/USN-2100-1