Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2012-3380 State: PUBLISHED Published: 2012-08-31T18:00:00Z Last Updated: 2024-09-17T03:47:46.694Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in naxsi-ui/nx_extract.py in the Naxsi module before 0.46-1 for Nginx allows local users to read arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/07/05/1 - http://code.google.com/p/naxsi/ - http://code.google.com/p/naxsi/source/detail?r=307 - http://secunia.com/advisories/49811 - http://www.openwall.com/lists/oss-security/2012/07/06/3 - http://www.osvdb.org/83617
CVE ID: CVE-2012-3381 State: PUBLISHED Published: 2012-08-17T00:00:00Z Last Updated: 2024-08-06T20:05:12.175Z Vendors: n/a Products: n/a Problem Types: n/a Description: sfcb in sblim-sfcb places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=838160 - http://www.openwall.com/lists/oss-security/2012/07/06/8 - http://sourceforge.net/tracker/index.php?func=detail&aid=3541554&group_id=128809&atid=712784 - https://bugzilla.novell.com/show_bug.cgi?id=770234 - http://www.openw
c=detail&aid=3541554&group_id=128809&atid=712784 - https://bugzilla.novell.com/show_bug.cgi?id=770234 - http://www.openwall.com/lists/oss-security/2012/07/06/7
CVE ID: CVE-2012-3382 State: PUBLISHED Published: 2012-07-12T21:00:00 Last Updated: 2024-08-06T20:05:11.741Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the ProcessRequest function in mcs/class/System.Web/System.Web/HttpForbiddenHandler.cs in Mono 2.10.8 and earlier allows remote attackers to inject arbitrary web script or HTML via a file with a crafted name and a forbidden extension, which is not properly handled in an error message. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mono/mono/commit/d16d4623edb210635bec3ca3786481b82cde25a2 - https://hermes.opensuse.org/messages/15374367 - https://bu
m/mono/mono/commit/d16d4623edb210635bec3ca3786481b82cde25a2 - https://hermes.opensuse.org/messages/15374367 - https://bugzilla.novell.com/show_bug.cgi?id=769799 - http://www.openwall.com/lists/oss-security/2012/07/06/11 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:140
CVE ID: CVE-2012-3383 State: PUBLISHED Published: 2012-07-22T17:00:00 Last Updated: 2024-08-06T20:05:12.252Z Vendors: n/a Products: n/a Problem Types: n/a Description: The map_meta_cap function in wp-includes/capabilities.php in WordPress 3.4.x before 3.4.2, when the multisite feature is enabled, does not properly assign the unfiltered_html capability, which allows remote authenticated users to bypass intended access restrictions and conduct cross-site scripting (XSS) attacks by leveraging the Administrator or Editor role and composing crafted text. Additional Analyst Notes: - CVE Program Container: References: - http://core.trac.wordpress.org/changeset?reponame=&new=21153%40branches%2F3.4&o
: - CVE Program Container: References: - http://core.trac.wordpress.org/changeset?reponame=&new=21153%40branches%2F3.4&old=21076%40trunk#file16 - http://codex.wordpress.org/Version_3.4.2 - http://www.openwall.com/lists/oss-security/2012/07/08/1 - http://codex.wordpress.org/Version_3.4.1 - http://openwall.com/lists/oss-security/2012/09/12/17 - http://core.trac.wordpress.org/changeset?old_path=%2Ftags%2F3.4.1&old=21780&new_path=%2Ftags%2F3.4.2&new=21780#file23 - http://www.openwall.com/lists/oss-security/2012/07/02/1
CVE ID: CVE-2012-3384 State: PUBLISHED Published: 2012-07-22T17:00:00 Last Updated: 2024-08-06T20:05:12.340Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the customizer in WordPress before 3.4.1 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/07/08/1 - http://codex.wordpress.org/Version_3.4.1 - http://www.openwall.com/lists/oss-security/2012/07/02/1
CVE ID: CVE-2012-3385 State: PUBLISHED Published: 2012-07-22T17:00:00 Last Updated: 2024-08-06T20:05:11.760Z Vendors: n/a Products: n/a Problem Types: n/a Description: WordPress before 3.4.1 does not properly restrict access to post contents such as private or draft posts, which allows remote authors or contributors to obtain sensitive information via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/07/08/1 - http://codex.wordpress.org/Version_3.4.1 - http://www.openwall.com/lists/oss-security/2012/07/02/1
CVE ID: CVE-2012-3386 State: PUBLISHED Published: 2012-08-07T21:00:00 Last Updated: 2024-08-06T20:05:12.403Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "make distcheck" rule in GNU Automake before 1.11.6 and 1.12.x before 1.12.2 grants world-writable permissions to the extraction directory, which introduces a race condition that allows local users to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2012-October/089187.html - http://www.mandriva.com/security/advisories?name=MDVSA-2012:103 - http://lists.opensuse.org/opensuse-updates/2012-11/msg00038.htm
w.mandriva.com/security/advisories?name=MDVSA-2012:103 - http://lists.opensuse.org/opensuse-updates/2012-11/msg00038.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-September/087538.html - http://rhn.redhat.com/errata/RHSA-2013-0526.html - https://lists.gnu.org/archive/html/automake/2012-07/msg00021.html - https://lists.gnu.org/archive/html/automake/2012-07/msg00022.html - https://lists.gnu.org/archive/html/automake/2012-07/msg00023.html - http://git.savannah.gnu.org/cgit/automake.git/commit/?id=784b3e6ccc7c72a1c95c340cbbe8897d6b689d76 - http://lists.fedoraproject.org/pipermail/package-announce/2012-September/087665.html
CVE ID: CVE-2012-3387 State: PUBLISHED Published: 2012-07-23T21:00:00 Last Updated: 2024-08-06T20:05:12.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: Moodle 2.3.x before 2.3.1 uses only a client-side check for whether references are permitted in a file upload, which allows remote authenticated users to bypass intended alias (aka shortcut) restrictions via a client that omits this check. Additional Analyst Notes: - CVE Program Container: References: - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-33948 - http://secunia.com/advisories/49890 - http://openwall.com/lists/oss-security/2012/07/17/1 - http://www.securityfocus.com/bid/54481 - https://exchange
/49890 - http://openwall.com/lists/oss-security/2012/07/17/1 - http://www.securityfocus.com/bid/54481 - https://exchange.xforce.ibmcloud.com/vulnerabilities/76954
CVE ID: CVE-2012-3388 State: PUBLISHED Published: 2012-07-23T21:00:00 Last Updated: 2024-08-06T20:05:12.436Z Vendors: n/a Products: n/a Problem Types: n/a Description: The is_enrolled function in lib/accesslib.php in Moodle 2.2.x before 2.2.4 and 2.3.x before 2.3.1 does not properly interact with the caching feature, which might allow remote authenticated users to bypass an intended capability check via unspecified vectors that trigger caching of a user record. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/76955 - http://secunia.com/advisories/49890 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-
ies/76955 - http://secunia.com/advisories/49890 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-33916 - http://openwall.com/lists/oss-security/2012/07/17/1 - http://www.securityfocus.com/bid/54481
CVE ID: CVE-2012-3389 State: PUBLISHED Published: 2012-07-23T21:00:00 Last Updated: 2024-08-06T20:05:12.214Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in mod/lti/typessettings.php in Moodle 2.2.x before 2.2.4 and 2.3.x before 2.3.1 allow remote attackers to inject arbitrary web script or HTML via the (1) lti_typename or (2) lti_toolurl parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/49890 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-31692 - http://openwall.com/lists/oss-security/2012/07/17/1 - http://www.securityfocus.com/bid/54481 - https:
mmit&s=MDL-31692 - http://openwall.com/lists/oss-security/2012/07/17/1 - http://www.securityfocus.com/bid/54481 - https://exchange.xforce.ibmcloud.com/vulnerabilities/76965
CVE ID: CVE-2012-3390 State: PUBLISHED Published: 2012-07-23T21:00:00 Last Updated: 2024-08-06T20:05:12.077Z Vendors: n/a Products: n/a Problem Types: n/a Description: lib/filelib.php in Moodle 2.1.x before 2.1.7 and 2.2.x before 2.2.4 does not properly restrict file access after a block has been hidden, which allows remote authenticated users to obtain sensitive information by reading a file that is embedded in a block. Additional Analyst Notes: - CVE Program Container: References: - http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=c58c05ad4f22c6ee1e136a7d4caaddd809a7134d - http://secunia.com/advisories/49890 - http://openwall.com/lists/oss-security/2012/07/17/1 - http://www.securityfoc
34d - http://secunia.com/advisories/49890 - http://openwall.com/lists/oss-security/2012/07/17/1 - http://www.securityfocus.com/bid/54481 - https://exchange.xforce.ibmcloud.com/vulnerabilities/76956
CVE ID: CVE-2012-3391 State: PUBLISHED Published: 2012-07-23T21:00:00 Last Updated: 2024-08-06T20:05:12.194Z Vendors: n/a Products: n/a Problem Types: n/a Description: mod/forum/rsslib.php in Moodle 2.1.x before 2.1.7 and 2.2.x before 2.2.4 does not properly implement the requirement for posting before reading a Q&A forum, which allows remote authenticated users to bypass intended access restrictions by leveraging the student role and reading the RSS feed for a forum. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/76957 - http://secunia.com/advisories/49890 - http://openwall.com/lists/oss-security/2012/07/17/1 - http://ww
rabilities/76957 - http://secunia.com/advisories/49890 - http://openwall.com/lists/oss-security/2012/07/17/1 - http://www.securityfocus.com/bid/54481 - http://git.moodle.org/gw?p=moodle.git&a=search&h=refs%2Fheads%2FMOODLE_22_STABLE&st=commit&s=MDL-32199
CVE ID: CVE-2012-3392 State: PUBLISHED Published: 2012-07-23T21:00:00 Last Updated: 2024-08-06T20:05:12.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: mod/forum/unsubscribeall.php in Moodle 2.1.x before 2.1.7 and 2.2.x before 2.2.4 does not consider whether a forum is optional, which allows remote authenticated users to bypass forum-subscription requirements by leveraging the student role and unsubscribing from all forums. Additional Analyst Notes: - CVE Program Container: References: - http://git.moodle.org/gw?p=moodle.git&a=search&h=refs%2Fheads%2FMOODLE_22_STABLE&st=commit&s=MDL-31460 - https://exchange.xforce.ibmcloud.com/vulnerabilities/76958 - http://secunia.com/adviso
22_STABLE&st=commit&s=MDL-31460 - https://exchange.xforce.ibmcloud.com/vulnerabilities/76958 - http://secunia.com/advisories/49890 - http://openwall.com/lists/oss-security/2012/07/17/1 - http://www.securityfocus.com/bid/54481
CVE ID: CVE-2012-3393 State: PUBLISHED Published: 2012-07-23T21:00:00 Last Updated: 2024-08-06T20:05:12.136Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in repository/lib.php in Moodle 2.1.x before 2.1.7 and 2.2.x before 2.2.4 allows remote authenticated administrators to inject arbitrary web script or HTML by renaming a repository. Additional Analyst Notes: - CVE Program Container: References: - http://git.moodle.org/gw?p=moodle.git&a=search&h=refs%2Fheads%2FMOODLE_22_STABLE&st=commit&s=MDL-33808 - http://secunia.com/advisories/49890 - http://openwall.com/lists/oss-security/2012/07/17/1 - http://www.securityfocus.com/bid/54481 - https:
advisories/49890 - http://openwall.com/lists/oss-security/2012/07/17/1 - http://www.securityfocus.com/bid/54481 - https://exchange.xforce.ibmcloud.com/vulnerabilities/76959
CVE ID: CVE-2012-3394 State: PUBLISHED Published: 2012-07-23T21:00:00 Last Updated: 2024-08-06T20:05:12.072Z Vendors: n/a Products: n/a Problem Types: n/a Description: auth/ldap/ntlmsso_attempt.php in Moodle 2.0.x before 2.0.10, 2.1.x before 2.1.7, 2.2.x before 2.2.4, and 2.3.x before 2.3.1 redirects users from an https LDAP login URL to an http URL, which allows remote attackers to obtain sensitive information by sniffing the network. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/76960 - http://secunia.com/advisories/49890 - http://openwall.com/lists/oss-security/2012/07/17/1 - http://www.securityfocus.com/bid/54481 - h
.com/advisories/49890 - http://openwall.com/lists/oss-security/2012/07/17/1 - http://www.securityfocus.com/bid/54481 - http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=9d8d2ee6192e8b7ebb6713bd6215e06f94e2a9f7
CVE ID: CVE-2012-3395 State: PUBLISHED Published: 2012-07-23T21:00:00 Last Updated: 2024-08-06T20:05:12.033Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in mod/feedback/complete.php in Moodle 2.0.x before 2.0.10, 2.1.x before 2.1.7, and 2.2.x before 2.2.4 allows remote authenticated users to execute arbitrary SQL commands via crafted form data. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/76961 - http://git.moodle.org/gw?p=moodle.git&a=search&h=9d8d2ee6192e8b7ebb6713bd6215e06f94e2a9f7&st=commit&s=MDL-27675 - http://secunia.com/advisories/49890 - http://openwall.com/lists/oss-se
ebb6713bd6215e06f94e2a9f7&st=commit&s=MDL-27675 - http://secunia.com/advisories/49890 - http://openwall.com/lists/oss-security/2012/07/17/1 - http://www.securityfocus.com/bid/54481
CVE ID: CVE-2012-3396 State: PUBLISHED Published: 2012-07-23T21:00:00 Last Updated: 2024-08-06T20:05:12.422Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in cohort/edit_form.php in Moodle 2.0.x before 2.0.10, 2.1.x before 2.1.7, 2.2.x before 2.2.4, and 2.3.x before 2.3.1 allows remote authenticated administrators to inject arbitrary web script or HTML via the idnumber field. NOTE: this vulnerability exists because of an incorrect fix for CVE-2012-2365. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/49890 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-34045 - http://
p://secunia.com/advisories/49890 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-34045 - http://openwall.com/lists/oss-security/2012/07/17/1 - http://www.securityfocus.com/bid/54481 - https://exchange.xforce.ibmcloud.com/vulnerabilities/76962
CVE ID: CVE-2012-3397 State: PUBLISHED Published: 2012-07-23T21:00:00 Last Updated: 2024-08-06T20:05:12.478Z Vendors: n/a Products: n/a Problem Types: n/a Description: lib/modinfolib.php in Moodle 2.0.x before 2.0.10, 2.1.x before 2.1.7, 2.2.x before 2.2.4, and 2.3.x before 2.3.1 does not check for a group-membership requirement when determining whether an activity is unavailable or hidden, which allows remote authenticated users to bypass intended access restrictions by selecting an activity that is configured for a group of other users. Additional Analyst Notes: - CVE Program Container: References: - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-33466 - http://secun
gram Container: References: - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-33466 - http://secunia.com/advisories/49890 - http://openwall.com/lists/oss-security/2012/07/17/1 - http://www.securityfocus.com/bid/54481 - https://exchange.xforce.ibmcloud.com/vulnerabilities/76963
CVE ID: CVE-2012-3398 State: PUBLISHED Published: 2012-07-23T21:00:00 Last Updated: 2024-08-06T20:05:12.477Z Vendors: n/a Products: n/a Problem Types: n/a Description: Algorithmic complexity vulnerability in Moodle 1.9.x before 1.9.19, 2.0.x before 2.0.10, 2.1.x before 2.1.7, and 2.2.x before 2.2.4 allows remote authenticated users to cause a denial of service (CPU consumption) by using the advanced-search feature on a database activity that has many records. Additional Analyst Notes: - CVE Program Container: References: - http://git.moodle.org/gw?p=moodle.git&a=search&h=refs%2Fheads%2FMOODLE_22_STABLE&st=commit&s=MDL-32126 - https://exchange.xforce.ibmcloud.com/vulnerabilities/76964 - http:
fs%2Fheads%2FMOODLE_22_STABLE&st=commit&s=MDL-32126 - https://exchange.xforce.ibmcloud.com/vulnerabilities/76964 - http://secunia.com/advisories/49890 - http://openwall.com/lists/oss-security/2012/07/17/1 - http://www.securityfocus.com/bid/54481
CVE ID: CVE-2012-3399 State: PUBLISHED Published: 2012-07-12T19:00:00 Last Updated: 2024-08-06T20:05:12.437Z Vendors: n/a Products: n/a Problem Types: n/a Description: Config/diff.php in Basilic 1.5.14 allows remote attackers to execute arbitrary commands via shell metacharacters in the file parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/76667 - http://archives.neohapsis.com/archives/bugtraq/2012-07/0043.html - http://www.openwall.com/lists/oss-security/2012/07/09/4 - http://www.exploit-db.com/exploits/19631 - http://www.securityfocus.com/bid/54234 - http://archives.neohapsis.com/archives/bugtraq/2012-07/0002.h
/exploits/19631 - http://www.securityfocus.com/bid/54234 - http://archives.neohapsis.com/archives/bugtraq/2012-07/0002.html - http://www.openwall.com/lists/oss-security/2012/07/10/1
CVE ID: CVE-2012-3400 State: PUBLISHED Published: 2012-10-03T10:00:00 Last Updated: 2024-08-06T20:05:12.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the udf_load_logicalvol function in fs/udf/super.c in the Linux kernel before 3.4.5 allows remote attackers to cause a denial of service (system crash) or possibly have unspecified other impact via a crafted UDF filesystem. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1556-1 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.4.5 - http://www.openwall.com/lists/oss-security/2012/07/10/2 - http://www.ubuntu.com/usn/USN-1557-1 - https://github.
3.4.5 - http://www.openwall.com/lists/oss-security/2012/07/10/2 - http://www.ubuntu.com/usn/USN-1557-1 - https://github.com/torvalds/linux/commit/adee11b2085bee90bd8f4f52123ffb07882d6256 - https://bugzilla.redhat.com/show_bug.cgi?id=843139 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=adee11b2085bee90bd8f4f52123ffb07882d6256 - http://www.ubuntu.com/usn/USN-1555-1 - http://ubuntu.com/usn/usn-1529-1 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10691 - https://github.com/torvalds/linux/commit/1df2ae31c724e57be9d7ac00d78db8a5dabdd050 - http://rhn.redhat.com/errata/RHSA-2013-0594.html - http://secunia.com/advisories/50506 - http://git.kernel.org/
bdd050 - http://rhn.redhat.com/errata/RHSA-2013-0594.html - http://secunia.com/advisories/50506 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=1df2ae31c724e57be9d7ac00d78db8a5dabdd050 - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html
CVE ID: CVE-2012-3401 State: PUBLISHED Published: 2012-08-13T20:00:00 Last Updated: 2024-08-06T20:05:12.257Z Vendors: n/a Products: n/a Problem Types: n/a Description: The t2p_read_tiff_init function in tiff2pdf (tools/tiff2pdf.c) in LibTIFF 4.0.2 and earlier does not properly initialize the T2P context struct pointer in certain error conditions, which allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted TIFF image that triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=837577 - http://lists.opensuse.org/opensuse-updates/2012-08
r: References: - https://bugzilla.redhat.com/show_bug.cgi?id=837577 - http://lists.opensuse.org/opensuse-updates/2012-08/msg00011.html - http://www.openwall.com/lists/oss-security/2012/07/19/1 - http://libjpeg-turbo.svn.sourceforge.net/viewvc/libjpeg-turbo?view=revision&revision=830 - http://www.securityfocus.com/bid/54601 - http://www.openwall.com/lists/oss-security/2012/07/19/4 - http://www.debian.org/security/2012/dsa-2552 - http://secunia.com/advisories/49938 - http://secunia.com/advisories/50007 - http://www.ubuntu.com/usn/USN-1511-1 - http://security.gentoo.org/glsa/glsa-201209-02.xml - http://osvdb.org/84090 - https://exchange.xforce.ibmcloud.com/vulnerabilities/77088 - https://bugzil
lsa-201209-02.xml - http://osvdb.org/84090 - https://exchange.xforce.ibmcloud.com/vulnerabilities/77088 - https://bugzilla.redhat.com/attachment.cgi?id=596457 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:127 - http://rhn.redhat.com/errata/RHSA-2012-1590.html - http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf - http://secunia.com/advisories/50726
CVE ID: CVE-2012-3402 State: PUBLISHED Published: 2012-08-25T10:00:00 Last Updated: 2024-08-06T20:05:12.026Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in plug-ins/common/psd.c in the Adobe Photoshop PSD plugin in GIMP 2.2.13 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted channels header value in a PSD image file, which triggers a heap-based buffer overflow, a different vulnerability than CVE-2009-3909. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/08/20/6 - http://security.gentoo.org/glsa/glsa-201209-23.xml - http://www.secur
www.openwall.com/lists/oss-security/2012/08/20/6 - http://security.gentoo.org/glsa/glsa-201209-23.xml - http://www.securitytracker.com/id?1027411 - http://rhn.redhat.com/errata/RHSA-2012-1181.html - https://bugzilla.redhat.com/attachment.cgi?id=603059&action=diff - http://secunia.com/advisories/50737 - https://bugzilla.redhat.com/show_bug.cgi?id=838941
CVE ID: CVE-2012-3403 State: PUBLISHED Published: 2012-08-25T10:00:00 Last Updated: 2024-08-06T20:05:12.071Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the KiSS CEL file format plug-in in GIMP 2.8.x and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted KiSS palette file, which triggers an "invalid free." Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1559-1 - http://rhn.redhat.com/errata/RHSA-2012-1180.html - http://www.securitytracker.com/id?1027411 - http://rhn.redhat.com/errata/RHSA-2012-1181.html - http://www.securityfocus.com/bid/5510
ecuritytracker.com/id?1027411 - http://rhn.redhat.com/errata/RHSA-2012-1181.html - http://www.securityfocus.com/bid/55101 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:082 - http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00020.html - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00000.html - http://www.mandriva.com/security/advisories?name=MDVSA-2012:142 - http://secunia.com/advisories/50296 - https://bugzilla.redhat.com/show_bug.cgi?id=839020 - http://www.openwall.com/lists/oss-security/2012/08/20/7