Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-3846 State: PUBLISHED Published: 2009-12-10T22:00:00 Last Updated: 2024-08-07T06:38:30.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple heap-based buffer overflows in ovlogin.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote attackers to execute arbitrary code via a long (1) userid or (2) passwd parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/54658 - http://www.securityfocus.com/archive/1/508350/100/0/threaded - http://dvlabs.tippingpoint.com/advisory/TPTI-09-08 - http://www.securityfocus.com/bid/37261 - http://marc.info/?l=bugtraq&m=12604
labs.tippingpoint.com/advisory/TPTI-09-08 - http://www.securityfocus.com/bid/37261 - http://marc.info/?l=bugtraq&m=126046355120442&w=2 - http://www.securityfocus.com/bid/37295 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01950877 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01950877
CVE ID: CVE-2009-3847 State: PUBLISHED Published: 2009-12-10T22:00:00 Last Updated: 2024-08-07T06:38:30.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/37261 - http://marc.info/?l=bugtraq&m=126046355120442&w=2 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01950877 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01950877 - https://exchange.xforce.ibmcloud.com/vulnerab
20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01950877 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54840
CVE ID: CVE-2009-3848 State: PUBLISHED Published: 2009-12-10T22:00:00 Last Updated: 2024-08-07T06:38:30.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in nnmRptConfig.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via a long Template parameter, related to the vsprintf function. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/54653 - http://www.securityfocus.com/bid/37296 - http://zerodayinitiative.com/advisories/ZDI-09-096/ - http://www.securityfocus.com/bid/37261 - http://marc.info/?l=bugtraq&m=12604635512
itiative.com/advisories/ZDI-09-096/ - http://www.securityfocus.com/bid/37261 - http://marc.info/?l=bugtraq&m=126046355120442&w=2 - http://www.securityfocus.com/archive/1/508346/100/0/threaded - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01950877 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01950877
CVE ID: CVE-2009-3849 State: PUBLISHED Published: 2009-12-10T22:00:00 Last Updated: 2024-08-07T06:38:30.336Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote attackers to execute arbitrary code via (1) a long Template parameter to nnmRptConfig.exe, related to the strcat function; or (2) a long Oid parameter to snmp.exe. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/508348/100/0/threaded - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01950877 - http://www.securityfocus.com/bid/37299 -
p://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01950877 - http://www.securityfocus.com/bid/37299 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54652 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54654 - http://www.securityfocus.com/bid/37298 - http://www.securityfocus.com/bid/37261 - http://marc.info/?l=bugtraq&m=126046355120442&w=2 - http://zerodayinitiative.com/advisories/ZDI-09-097/ - http://www.securityfocus.com/archive/1/508349/100/0/threaded - http://zerodayinitiative.com/advisories/ZDI-09-095/ - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01950877
CVE ID: CVE-2009-3850 State: PUBLISHED Published: 2009-11-06T15:00:00 Last Updated: 2024-08-07T06:38:30.528Z Vendors: n/a Products: n/a Problem Types: n/a Description: Blender 2.34, 2.35a, 2.40, and 2.49b allows remote attackers to execute arbitrary code via a .blend file that contains Python statements in the onLoad action of a ScriptLink SDNA. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36838 - http://www.securityfocus.com/archive/1/507706/100/0/threaded - http://www.coresecurity.com/content/blender-scripting-injection
CVE ID: CVE-2009-3851 State: PUBLISHED Published: 2009-11-03T16:00:00 Last Updated: 2024-08-07T06:45:49.920Z Vendors: n/a Products: n/a Problem Types: n/a Description: Trusted Extensions in Sun Solaris 10 interferes with the operation of the xscreensaver-demo command for the XScreenSaver application, which makes it easier for physically proximate attackers to access an unattended workstation for which the intended screen locking did not occur, related to the "restart daemon." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6845 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-270
tory/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6845 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-270809-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-120094-28-1
CVE ID: CVE-2009-3852 State: PUBLISHED Published: 2009-11-03T16:00:00 Last Updated: 2024-08-07T06:45:50.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the XML component in IBM Runtimes for Java Technology 5.0.0 before SR10 has unknown impact and attack vectors, related to the "updated version of XML4J 4.4.17." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36894 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54069 - http://www.vupen.com/english/advisories/2009/3106 - http://www-01.ibm.com/support/docview.wss?uid=swg1IZ63920 - http://secunia.com/advisories/37210
CVE ID: CVE-2009-3853 State: PUBLISHED Published: 2009-11-04T15:00:00 Last Updated: 2024-08-07T06:45:49.522Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the client acceptor daemon (CAD) scheduler in the client in IBM Tivoli Storage Manager (TSM) 5.3 before 5.3.6.7, 5.4 before 5.4.3, 5.5 before 5.5.2.2, and 6.1 before 6.1.0.2, and TSM Express 5.3.3.0 through 5.3.6.6, allows remote attackers to execute arbitrary code via crafted data in a TCP packet. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1023136 - http://www.vupen.com/english/advisories/2009/3132 - http://www-01.ibm.com/support/docview.wss?ui
racker.com/id?1023136 - http://www.vupen.com/english/advisories/2009/3132 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC61036 - http://www.securityfocus.com/archive/1/507654/100/0/threaded - http://www-01.ibm.com/support/docview.wss?uid=swg21405562 - http://secunia.com/secunia_research/2008-51/ - http://secunia.com/advisories/32534
CVE ID: CVE-2009-3854 State: PUBLISHED Published: 2009-11-04T15:00:00 Last Updated: 2024-08-07T06:45:49.522Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the traditional client scheduler in the client in IBM Tivoli Storage Manager (TSM) 5.3 before 5.3.6.7 and 5.4 before 5.4.2 allows remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IC61058 - http://securitytracker.com/id?1023136 - http://www.vupen.com/english/advisories/2009/3132 - http://www-01.ibm.com/support/docview.wss?uid=swg21405562 - http://secunia.com/advisories/32534
CVE ID: CVE-2009-3855 State: PUBLISHED Published: 2009-11-04T15:00:00 Last Updated: 2024-08-07T06:45:49.887Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the (1) UNIX and (2) Linux backup-archive clients, and the (3) OS/400 API client, in IBM Tivoli Storage Manager (TSM) 5.3 before 5.3.6.6, 5.4 before 5.4.2, and 5.5 before 5.5.1, when the MAILPROG option is enabled, allow attackers to read, modify, or delete arbitrary files via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/3132 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC54489 - http://www-01.ibm.co
upen.com/english/advisories/2009/3132 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC54489 - http://www-01.ibm.com/support/docview.wss?uid=swg21405562 - http://secunia.com/advisories/32534
CVE ID: CVE-2009-3856 State: PUBLISHED Published: 2009-11-04T17:00:00Z Last Updated: 2024-09-16T18:24:47.531Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the default URI in news/ in Twilight CMS before 4.1 allows remote attackers to inject arbitrary web script or HTML via the calendar parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37204 - http://onsec.ru/vuln?id=10
CVE ID: CVE-2009-3857 State: PUBLISHED Published: 2009-11-04T17:00:00 Last Updated: 2024-08-07T06:45:50.765Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Softonic International SciTE 1.72 allows user-assisted remote attackers to cause a denial of service (application crash) via a Ruby (.rb) file containing a long string, which triggers the crash when a scroll bar is used. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9133 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51674
CVE ID: CVE-2009-3858 State: PUBLISHED Published: 2009-11-04T17:00:00 Last Updated: 2024-08-07T06:45:50.393Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in GejoSoft allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to the default URI in photos/tags. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35921 - http://packetstormsecurity.org/0907-exploits/gejosoft-xss.txt - http://osvdb.org/56061 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51879 - http://www.vupen.com/english/advisories/2009/1968
CVE ID: CVE-2009-3859 State: PUBLISHED Published: 2009-11-04T17:00:00 Last Updated: 2024-08-07T06:45:49.744Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in eEye Retina WiFi Scanner 1.0.8.68, as used in Retina Network Security Scanner 5.10.14, allows user-assisted remote attackers to cause a denial of service (application crash) or execute arbitrary code via a .rws file with a long RWS010 entry. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/51625 - http://www.exploit-db.com/exploits/9114 - http://www.vupen.com/english/advisories/2009/1862 - http://osvdb.org/55744 - http://secunia.com/advisor
/exploits/9114 - http://www.vupen.com/english/advisories/2009/1862 - http://osvdb.org/55744 - http://secunia.com/advisories/35786 - http://www.securityfocus.com/bid/35624 - http://research.eeye.com/html/advisories/published/AD20090710.html - http://www.securitytracker.com/id?1022534
CVE ID: CVE-2009-3860 State: PUBLISHED Published: 2009-11-04T17:00:00 Last Updated: 2024-08-07T06:45:50.336Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple insecure method vulnerabilities in Idefense Labs COMRaider allow remote attackers to create or overwrite arbitrary files via the (1) CreateFolder and (2) Copy methods. NOTE: this might only be a vulnerability in certain insecure configurations of Internet Explorer. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/505042/100/0/threaded - http://www.securityfocus.com/bid/35725 - http://www.juniper.net/security/auto/vulnerabilities/vuln35725.html
CVE ID: CVE-2009-3861 State: PUBLISHED Published: 2009-11-04T17:00:00 Last Updated: 2024-08-07T06:45:50.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in SafeNet SoftRemote 10.8.5 (Build 2) and 10.3.5 (Build 6), and possibly other versions before 10.8.9, allows local users to execute arbitrary code via a long string in a (1) TREENAME or (2) GROUPNAME Policy file (spd). Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/3108 - http://www.securityfocus.com/archive/1/507593/100/0/threaded - http://www.securitytracker.com/id?1023117 - http://www.senseofsecurity.com.au/advisories/SOS-09-008
CVE ID: CVE-2009-3862 State: PUBLISHED Published: 2009-11-04T18:00:00 Last Updated: 2024-08-07T06:45:51.084Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NDSD process in Novell eDirectory 8.7.3 before 8.7.3.10 ftf2 and eDirectory 8.8 before 8.8.5 ftf1 does not properly handle certain LDAP search requests, which allows remote attackers to cause a denial of service (application hang) via a search request with a NULL BaseDN value. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/support/viewContent.do?externalId=7004721 - http://www.vupen.com/english/advisories/2009/3120 - http://www.securityfocus.com/bid/36902 - http://www.zerodayinitiati
http://www.vupen.com/english/advisories/2009/3120 - http://www.securityfocus.com/bid/36902 - http://www.zerodayinitiative.com/advisories/ZDI-09-075/
CVE ID: CVE-2009-3863 State: PUBLISHED Published: 2009-11-04T18:00:00 Last Updated: 2024-08-07T06:45:50.464Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the gxmim1.dll ActiveX control in Novell Groupwise Client 7.0.3.1294 allows remote attackers to cause a denial of service (application crash) via a long argument to the SetFontFace method. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9683
CVE ID: CVE-2009-3864 State: PUBLISHED Published: 2009-11-05T16:00:00 Last Updated: 2024-08-07T06:45:50.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Java Update functionality in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 5.0 before Update 22 and JDK and JRE 6 before Update 17, when a non-English version of Windows is used, does not retrieve available new JRE versions, which allows remote attackers to leverage vulnerabilities in older releases of this software, aka Bug Id 6869694. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36881 - http://secunia.com/advisories/37231 - http://lists.opensuse.org/open
erences: - http://www.securityfocus.com/bid/36881 - http://secunia.com/advisories/37231 - http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00010.html - http://www.vupen.com/english/advisories/2009/3131 - http://java.sun.com/javase/6/webnotes/6u17.html - http://secunia.com/advisories/37239 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-269868-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6753
CVE ID: CVE-2009-3865 State: PUBLISHED Published: 2009-11-05T16:00:00 Last Updated: 2024-08-07T06:45:50.429Z Vendors: n/a Products: n/a Problem Types: n/a Description: The launch method in the Deployment Toolkit plugin in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 6 before Update 17 allows remote attackers to execute arbitrary commands via a crafted web page, aka Bug Id 6869752. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36881 - http://support.apple.com/kb/HT3970 - http://marc.info/?l=bugtraq&m=134254866602253&w=2 - http://support.apple.com/kb/HT3969 - http://security.gentoo.org/glsa/glsa-200911-02.xml - http://www.redh
66602253&w=2 - http://support.apple.com/kb/HT3969 - http://security.gentoo.org/glsa/glsa-200911-02.xml - http://www.redhat.com/support/errata/RHSA-2009-1694.html - http://lists.apple.com/archives/security-announce/2009/Dec/msg00000.html - http://secunia.com/advisories/37231 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7562 - http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00010.html - http://www.vupen.com/english/advisories/2009/3131 - http://lists.apple.com/archives/security-announce/2009/Dec/msg00001.html - http://secunia.com/advisories/37581 - http://java.sun.com/javase/6/webnotes/6u17.html - http://secunia.com/advisories/37841 -
//secunia.com/advisories/37581 - http://java.sun.com/javase/6/webnotes/6u17.html - http://secunia.com/advisories/37841 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-269869-1 - http://secunia.com/advisories/37239 - http://secunia.com/advisories/37386 - http://www.securitytracker.com/id?1023244
CVE ID: CVE-2009-3866 State: PUBLISHED Published: 2009-11-05T16:00:00 Last Updated: 2024-08-07T06:45:49.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Java Web Start Installer in Sun Java SE in JDK and JRE 6 before Update 17 does not properly use security model permissions when removing installer extensions, which allows remote attackers to execute arbitrary code by modifying a certain JNLP file to have a URL field that points to an unintended trusted application, aka Bug Id 6872824. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36881 - http://support.apple.com/kb/HT3970 - http://marc.info/?l=bugtraq&m=134254866602253&w
//www.securityfocus.com/bid/36881 - http://support.apple.com/kb/HT3970 - http://marc.info/?l=bugtraq&m=134254866602253&w=2 - http://support.apple.com/kb/HT3969 - http://security.gentoo.org/glsa/glsa-200911-02.xml - http://www.redhat.com/support/errata/RHSA-2009-1694.html - http://lists.apple.com/archives/security-announce/2009/Dec/msg00000.html - http://secunia.com/advisories/37231 - http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00010.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6635 - http://www.vupen.com/english/advisories/2009/3131 - http://lists.apple.com/archives/security-announce/2009/Dec/msg00001.html - http://secunia.
nglish/advisories/2009/3131 - http://lists.apple.com/archives/security-announce/2009/Dec/msg00001.html - http://secunia.com/advisories/37581 - http://java.sun.com/javase/6/webnotes/6u17.html - http://secunia.com/advisories/37841 - http://zerodayinitiative.com/advisories/ZDI-09-077/ - http://sunsolve.sun.com/search/document.do?assetkey=1-66-269870-1 - http://secunia.com/advisories/37239 - http://secunia.com/advisories/37386
CVE ID: CVE-2009-3867 State: PUBLISHED Published: 2009-11-05T16:00:00 Last Updated: 2024-08-07T06:45:51.061Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the HsbParser.getSoundBank function in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to execute arbitrary code via a long file: URL in an argument, aka Bug Id 6854303. Additional Analyst Notes: - CVE Program Container: References: - http://zerodayinitiative.com/advisories/ZDI-09-076/ - http://marc.info/?l=bugtraq&m=126566824131534&w=2 - http://www.securityfocus.com/b
itiative.com/advisories/ZDI-09-076/ - http://marc.info/?l=bugtraq&m=126566824131534&w=2 - http://www.securityfocus.com/bid/36881 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6746 - http://support.apple.com/kb/HT3970 - http://marc.info/?l=bugtraq&m=134254866602253&w=2 - http://support.apple.com/kb/HT3969 - http://marc.info/?l=bugtraq&m=131593453929393&w=2 - http://security.gentoo.org/glsa/glsa-200911-02.xml - http://www.redhat.com/support/errata/RHSA-2009-1694.html - http://lists.apple.com/archives/security-announce/2009/Dec/msg00000.html - http://secunia.com/advisories/37231 - http://marc.info/?l=bugtraq&m=126566824131534&w=2 - http://securitytrack
00.html - http://secunia.com/advisories/37231 - http://marc.info/?l=bugtraq&m=126566824131534&w=2 - http://securitytracker.com/id?1023132 - http://marc.info/?l=bugtraq&m=131593453929393&w=2 - http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00010.html - http://sunsolve.sun.com/search/document.do?assetkey=1-66-270474-1 - http://www.vupen.com/english/advisories/2009/3131 - http://lists.apple.com/archives/security-announce/2009/Dec/msg00001.html - http://secunia.com/advisories/37581 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11903 - http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html - http://java.sun.com/javase/6
%3Adef%3A11903 - http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html - http://java.sun.com/javase/6/webnotes/6u17.html - http://secunia.com/advisories/37841 - http://secunia.com/advisories/37239 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7750 - http://secunia.com/advisories/37386
CVE ID: CVE-2009-3868 State: PUBLISHED Published: 2009-11-05T16:00:00 Last Updated: 2024-08-07T06:45:50.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 does not properly parse color profiles, which allows remote attackers to gain privileges via a crafted image file, aka Bug Id 6862970. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=126566824131534&w=2 - http://www.securityfocus.com/bid/36881 - http://support.apple.com/kb/HT3970 - http://marc.info/?l=bugtraq&m=134254866602253&w=
/www.securityfocus.com/bid/36881 - http://support.apple.com/kb/HT3970 - http://marc.info/?l=bugtraq&m=134254866602253&w=2 - http://support.apple.com/kb/HT3969 - http://marc.info/?l=bugtraq&m=131593453929393&w=2 - http://security.gentoo.org/glsa/glsa-200911-02.xml - http://www.redhat.com/support/errata/RHSA-2009-1694.html - http://lists.apple.com/archives/security-announce/2009/Dec/msg00000.html - http://secunia.com/advisories/37231 - http://marc.info/?l=bugtraq&m=126566824131534&w=2 - http://securitytracker.com/id?1023132 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11834 - http://marc.info/?l=bugtraq&m=131593453929393&w=2 - http://lists.opensuse.o
nition/oval%3Aorg.mitre.oval%3Adef%3A11834 - http://marc.info/?l=bugtraq&m=131593453929393&w=2 - http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00010.html - http://sunsolve.sun.com/search/document.do?assetkey=1-66-270474-1 - http://www.vupen.com/english/advisories/2009/3131 - http://lists.apple.com/archives/security-announce/2009/Dec/msg00001.html - http://secunia.com/advisories/37581 - http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html - http://java.sun.com/javase/6/webnotes/6u17.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6786 - http://secunia.com/advisories/37841 - https://oval.cisecurity.org/reposito
finition/oval%3Aorg.mitre.oval%3Adef%3A6786 - http://secunia.com/advisories/37841 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8622 - http://secunia.com/advisories/37239 - http://secunia.com/advisories/37386