Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-0942 State: PUBLISHED Published: 2009-05-13T15:14:00 Last Updated: 2024-08-07T04:57:17.474Z Vendors: n/a Products: n/a Problem Types: n/a Description: Help Viewer in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 does not verify that certain Cascading Style Sheets (CSS) are located in a registered help book, which allows remote attackers to execute arbitrary code via a help: URL that triggers invocation of AppleScript files. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT3549 - http://secunia.com/advisories/35074 - http://lists.apple.com/archives/security-announce/2009/May/msg00002.html - http://www.securityfocus.com/bid/34926 -
74 - http://lists.apple.com/archives/security-announce/2009/May/msg00002.html - http://www.securityfocus.com/bid/34926 - http://www.us-cert.gov/cas/techalerts/TA09-133A.html - http://www.vupen.com/english/advisories/2009/1297 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50485 - http://www.securitytracker.com/id?1022216
CVE ID: CVE-2009-0943 State: PUBLISHED Published: 2009-05-13T15:14:00 Last Updated: 2024-08-07T04:57:16.799Z Vendors: n/a Products: n/a Problem Types: n/a Description: Help Viewer in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 does not verify that HTML pathnames are located in a registered help book, which allows remote attackers to execute arbitrary code via a help: URL that triggers invocation of AppleScript files. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT3549 - http://secunia.com/advisories/35074 - http://lists.apple.com/archives/security-announce/2009/May/msg00002.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/50486 - h
e.com/archives/security-announce/2009/May/msg00002.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/50486 - http://www.securityfocus.com/bid/34926 - http://www.us-cert.gov/cas/techalerts/TA09-133A.html - http://www.vupen.com/english/advisories/2009/1297 - http://www.securitytracker.com/id?1022216
CVE ID: CVE-2009-0944 State: PUBLISHED Published: 2009-05-13T15:14:00 Last Updated: 2024-08-07T04:57:17.035Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Microsoft Office Spotlight Importer in Spotlight in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 does not properly validate Microsoft Office files, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a file that triggers memory corruption. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT3549 - http://secunia.com/advisories/35074 - http://lists.apple.com/archives/security-announce/2009/May/msg00002.html - http://www.secu
ecunia.com/advisories/35074 - http://lists.apple.com/archives/security-announce/2009/May/msg00002.html - http://www.securityfocus.com/bid/34939 - http://www.securityfocus.com/bid/34926 - http://www.us-cert.gov/cas/techalerts/TA09-133A.html - http://www.securitytracker.com/id?1022215 - http://www.vupen.com/english/advisories/2009/1297
CVE ID: CVE-2009-0945 State: PUBLISHED Published: 2009-05-13T17:00:00 Last Updated: 2024-08-07T04:57:17.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: Array index error in the insertItemBefore method in WebKit, as used in Apple Safari before 3.2.3 and 4 Public Beta, iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Google Chrome Stable before 1.0.154.65, and possibly other products allows remote attackers to execute arbitrary code via a document with a SVGPathList data structure containing a negative index in the (1) SVGTransformList, (2) SVGStringList, (3) SVGNumberList, (4) SVGPathSegList, (5) SVGPointList, or (6) SVGLengthList SVGList object, which
(2) SVGStringList, (3) SVGNumberList, (4) SVGPathSegList, (5) SVGPointList, or (6) SVGLengthList SVGList object, which triggers memory corruption. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-822-1 - http://secunia.com/advisories/35805 - http://support.apple.com/kb/HT3639 - http://secunia.com/advisories/43068 - https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01177.html - http://www.vupen.com/english/advisories/2009/1621 - http://support.apple.com/kb/HT3549 - http://googlechromereleases.blogspot.com/2009/05/stable-update-bug-fix.html - http://www.vupen.com/english/advisories/2011/0212 - http://www.securitytracker.com/id?1
/05/stable-update-bug-fix.html - http://www.vupen.com/english/advisories/2011/0212 - http://www.securitytracker.com/id?1022207 - http://www.securityfocus.com/archive/1/503594/100/0/threaded - http://www.redhat.com/support/errata/RHSA-2009-1130.html - http://www.vupen.com/english/advisories/2009/1298 - http://secunia.com/advisories/35576 - http://secunia.com/advisories/35074 - http://secunia.com/advisories/37746 - http://secunia.com/advisories/36790 - http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html - http://lists.apple.com/archives/security-announce/2009/May/msg00002.html - http://secunia.com/advisories/35056 - http://www.zerodayinitiative.com/advisories/ZDI-09-022 -
2009/May/msg00002.html - http://secunia.com/advisories/35056 - http://www.zerodayinitiative.com/advisories/ZDI-09-022 - http://www.securityfocus.com/bid/34924 - http://secunia.com/advisories/36461 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50477 - http://lists.apple.com/archives/security-announce/2009/May/msg00000.html - https://usn.ubuntu.com/823-1/ - http://www.debian.org/security/2009/dsa-1950 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - http://secunia.com/advisories/36062 - http://www.ubuntu.com/usn/USN-857-1 - http://lists.apple.com/archives/security-announce/2009/May/msg00001.html - http://www.us-cert.gov/cas/techalerts/TA09-133A.html - htt
apple.com/archives/security-announce/2009/May/msg00001.html - http://www.us-cert.gov/cas/techalerts/TA09-133A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11584 - http://www.vupen.com/english/advisories/2009/1297 - http://secunia.com/advisories/35095 - https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01196.html - http://support.apple.com/kb/HT3550 - https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00303.html - http://www.ubuntu.com/usn/USN-836-1 - http://www.vupen.com/english/advisories/2009/1321 - http://code.google.com/p/chromium/issues/detail?id=9019
CVE ID: CVE-2009-0946 State: PUBLISHED Published: 2009-04-17T00:00:00 Last Updated: 2024-08-07T04:57:17.538Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in FreeType 2.3.9 and earlier allow remote attackers to execute arbitrary code via vectors related to large values in certain inputs in (1) smooth/ftsmooth.c, (2) sfnt/ttcmap.c, and (3) cff/cffload.c. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/34967 - http://support.apple.com/kb/HT3639 - http://support.apple.com/kb/HT4435 - http://secunia.com/advisories/34913 - http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=a18788b14db60ae3673f93
secunia.com/advisories/34913 - http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=a18788b14db60ae3673f932249cd02d33a227c4e - http://www.vupen.com/english/advisories/2009/1621 - http://www.securityfocus.com/bid/34550 - http://support.apple.com/kb/HT3549 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:243 - http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html - http://www.ubuntu.com/usn/USN-767-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-270268-1 - http://secunia.com/advisories/35198 - http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=79972af4f0485a11dcb19551356c45245749fc5b - http://secunia.com/advisories/3507
org/cgit/freetype/freetype2.git/commit/?id=79972af4f0485a11dcb19551356c45245749fc5b - http://secunia.com/advisories/35074 - http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=0545ec1ca36b27cb928128870a83e5f668980bc5 - http://www.vupen.com/english/advisories/2009/1522 - http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html - http://www.redhat.com/support/errata/RHSA-2009-1062.html - http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html - http://lists.apple.com/archives/security-announce/2009/May/msg00002.html - http://secunia.com/advisories/35065 - http://www.debian.org/security/2009/dsa-1784 - http://secunia.com/advisories/35210 - http:/
cunia.com/advisories/35065 - http://www.debian.org/security/2009/dsa-1784 - http://secunia.com/advisories/35210 - http://security.gentoo.org/glsa/glsa-200905-05.xml - http://secunia.com/advisories/35379 - https://bugzilla.redhat.com/show_bug.cgi?id=491384 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10149 - http://git.savannah.gnu.org/cgit/freetype/freetype2.git/tree/ChangeLog - http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html - http://www.us-cert.gov/cas/techalerts/TA09-133A.html - http://www.vupen.com/english/advisories/2009/1297 - http://secunia.com/advisories/35200 - http://support.apple.com/kb/HT3613 - http://www.redh
nglish/advisories/2009/1297 - http://secunia.com/advisories/35200 - http://support.apple.com/kb/HT3613 - http://www.redhat.com/support/errata/RHSA-2009-0329.html - http://www.vupen.com/english/advisories/2009/1058 - http://secunia.com/advisories/35204 - http://secunia.com/advisories/34723 - http://www.redhat.com/support/errata/RHSA-2009-1061.html
CVE ID: CVE-2009-0947 State: PUBLISHED Published: 2021-06-02T15:58:05 Last Updated: 2024-08-07T04:57:17.431Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in the (1) cdf_read_property_info and (2) cdf_read_sat functions in file before 5.02. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=498682
CVE ID: CVE-2009-0948 State: PUBLISHED Published: 2021-06-02T15:58:08 Last Updated: 2024-08-07T04:57:17.538Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the (1) cdf_read_sat, (2) cdf_read_long_sector_chain, and (3) cdf_read_ssat function in file before 5.02. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=498682
CVE ID: CVE-2009-0949 State: PUBLISHED Published: 2009-06-09T17:00:00 Last Updated: 2024-08-07T04:57:17.124Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ippReadIO function in cups/ipp.c in cupsd in CUPS before 1.3.10 does not properly initialize memory for IPP request packets, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a scheduler request with two consecutive IPP_TAG_UNSUPPORTED tags. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35169 - http://www.debian.org/security/2009/dsa-1811 - http://secunia.com/advisories/35340 - https://oval.cisecurity.org/repository
p://www.debian.org/security/2009/dsa-1811 - http://secunia.com/advisories/35340 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9631 - https://bugzilla.redhat.com/show_bug.cgi?id=500972 - http://secunia.com/advisories/35342 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50926 - http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html - http://www.ubuntu.com/usn/USN-780-1 - http://www.coresecurity.com/content/AppleCUPS-null-pointer-vulnerability - http://secunia.com/advisories/35328 - http://www.redhat.com/support/errata/RHSA-2009-1082.html - http://secunia.com/advisories/35685 - http://lists.opensuse.org/opensuse-security-annou
ort/errata/RHSA-2009-1082.html - http://secunia.com/advisories/35685 - http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html - http://support.apple.com/kb/HT3865 - http://secunia.com/advisories/36701 - http://www.securityfocus.com/archive/1/504032/100/0/threaded - http://www.redhat.com/support/errata/RHSA-2009-1083.html - http://securitytracker.com/id?1022321 - http://secunia.com/advisories/35322
CVE ID: CVE-2009-0950 State: PUBLISHED Published: 2009-06-02T18:00:00 Last Updated: 2024-08-07T04:57:17.367Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Apple iTunes before 8.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via an itms: URL with a long URL component after a colon. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/1470 - http://www.securityfocus.com/bid/35157 - http://secunia.com/advisories/35314 - https://www.exploit-db.com/exploits/8934 - http://redpig.dataspill.org/2009/05/drive-by-attack-for-itunes-811.html - https:/
s://www.exploit-db.com/exploits/8934 - http://redpig.dataspill.org/2009/05/drive-by-attack-for-itunes-811.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17099 - https://www.exploit-db.com/exploits/8861 - http://support.apple.com/kb/HT3592 - http://www.securityfocus.com/archive/1/504043/100/0/threaded - http://static.dataspill.org/releases/itunes/itms_overflow.rb - http://osvdb.org/54833 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50899 - http://lists.apple.com/archives/security-announce/2009/Jun/msg00001.html - http://www.securitytracker.com/id?1022313
CVE ID: CVE-2009-0951 State: PUBLISHED Published: 2009-06-02T18:00:00 Last Updated: 2024-08-07T04:57:17.347Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted FLC compression file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/50887 - http://secunia.com/advisories/35091 - http://support.apple.com/kb/HT3591 - http://www.securitytracker.com/id?1022314 - http://www.vupen.com/english/advisories/2009/1469 - https://oval.cisecurity.org/repository/se
tytracker.com/id?1022314 - http://www.vupen.com/english/advisories/2009/1469 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16098 - http://www.securityfocus.com/bid/35161 - http://lists.apple.com/archives/security-announce/2009/Jun/msg00000.html - http://osvdb.org/54878
CVE ID: CVE-2009-0952 State: PUBLISHED Published: 2009-06-02T18:00:00 Last Updated: 2024-08-07T04:57:17.409Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted compressed PSD image. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15793 - http://secunia.com/advisories/35091 - http://support.apple.com/kb/HT3591 - http://www.securityfocus.com/bid/35168 - http://www.securitytracker.com/id?1022314 - http://www.vupen.com/english/
591 - http://www.securityfocus.com/bid/35168 - http://www.securitytracker.com/id?1022314 - http://www.vupen.com/english/advisories/2009/1469 - http://lists.apple.com/archives/security-announce/2009/Jun/msg00000.html - http://osvdb.org/54877
CVE ID: CVE-2009-0953 State: PUBLISHED Published: 2009-06-02T18:00:00 Last Updated: 2024-08-07T04:57:17.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PICT image. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/50890 - http://secunia.com/advisories/35091 - http://support.apple.com/kb/HT3591 - http://osvdb.org/54876 - http://www.securitytracker.com/id?1022314 - http://www.vupen.com/english/advisories/2009/1469 - http://www.securityfocus.c
tp://www.securitytracker.com/id?1022314 - http://www.vupen.com/english/advisories/2009/1469 - http://www.securityfocus.com/bid/35164 - http://lists.apple.com/archives/security-announce/2009/Jun/msg00000.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15939
CVE ID: CVE-2009-0954 State: PUBLISHED Published: 2009-06-02T18:00:00 Last Updated: 2024-08-07T04:57:17.411Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Apple QuickTime before 7.6.2 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a movie file containing crafted Clipping Region (CRGN) atom types. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35091 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50892 - http://support.apple.com/kb/HT3591 - http://www.securitytracker.com/id?1022314 - http://www.vupen.com/english/advisories/2009/14
upport.apple.com/kb/HT3591 - http://www.securitytracker.com/id?1022314 - http://www.vupen.com/english/advisories/2009/1469 - http://www.securityfocus.com/bid/35167 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15344 - http://osvdb.org/54875 - http://lists.apple.com/archives/security-announce/2009/Jun/msg00000.html
CVE ID: CVE-2009-0955 State: PUBLISHED Published: 2009-06-02T18:00:00 Last Updated: 2024-08-07T04:57:16.643Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted image description atoms in an Apple video file, related to a "sign extension issue." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35091 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50895 - http://support.apple.com/kb/HT3591 - http://www.securitytracker.com/id?1022314 - http://www.vupen.com/english/advisories/2009/1469 - https://ov
m/kb/HT3591 - http://www.securitytracker.com/id?1022314 - http://www.vupen.com/english/advisories/2009/1469 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16159 - http://www.securityfocus.com/bid/35166 - http://lists.apple.com/archives/security-announce/2009/Jun/msg00000.html - http://osvdb.org/54874
CVE ID: CVE-2009-0956 State: PUBLISHED Published: 2009-06-02T18:00:00 Last Updated: 2024-08-07T04:57:17.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple QuickTime before 7.6.2 does not properly initialize memory before use in handling movie files, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a movie containing a user data atom of size zero. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35091 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16188 - http://support.apple.com/kb/HT3591 - http://www.securitytracker.com/id?102
inition/oval%3Aorg.mitre.oval%3Adef%3A16188 - http://support.apple.com/kb/HT3591 - http://www.securitytracker.com/id?1022314 - http://www.vupen.com/english/advisories/2009/1469 - http://www.securityfocus.com/bid/35162 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50896 - http://lists.apple.com/archives/security-announce/2009/Jun/msg00000.html
CVE ID: CVE-2009-0957 State: PUBLISHED Published: 2009-06-02T18:00:00 Last Updated: 2024-08-07T04:57:17.115Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted JP2 image. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16155 - http://secunia.com/advisories/35091 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50898 - http://support.apple.com/kb/HT3591 - http://www.securitytracker.com/id?1022314 - http://ww
d.com/vulnerabilities/50898 - http://support.apple.com/kb/HT3591 - http://www.securitytracker.com/id?1022314 - http://www.securityfocus.com/bid/35165 - http://www.vupen.com/english/advisories/2009/1469 - http://lists.apple.com/archives/security-announce/2009/Jun/msg00000.html - http://osvdb.org/54873
CVE ID: CVE-2009-0958 State: PUBLISHED Published: 2009-06-19T16:00:00 Last Updated: 2024-08-07T04:57:17.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 stores an exception for a hostname when the user accepts an untrusted Exchange server certificate, which causes it to be accepted without prompting in future usage and allows remote Exchange servers to obtain sensitive information such as credentials. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT3639 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51208 - http://www.vupen.com/english/advisor
.apple.com/kb/HT3639 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51208 - http://www.vupen.com/english/advisories/2009/1621 - http://www.securityfocus.com/bid/35447 - http://www.securityfocus.com/bid/35414 - http://osvdb.org/55236 - http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html
CVE ID: CVE-2009-0959 State: PUBLISHED Published: 2009-06-19T16:00:00 Last Updated: 2024-08-07T04:57:17.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MPEG-4 video codec in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to cause a denial of service (device reset) via a crafted MPEG-4 video file that triggers an "input validation issue." Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/55237 - http://support.apple.com/kb/HT3639 - http://www.vupen.com/english/advisories/2009/1621 - http://www.securityfocus.com/bid/35414 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51211 - h
ries/2009/1621 - http://www.securityfocus.com/bid/35414 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51211 - http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html - http://www.securityfocus.com/bid/35433
CVE ID: CVE-2009-0960 State: PUBLISHED Published: 2009-06-19T16:00:00 Last Updated: 2024-08-07T04:57:17.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Mail component in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 does not provide an option to disable remote image loading in HTML email, which allows remote attackers to determine the device address and when an e-mail is read via an HTML email containing an image URL. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT3639 - http://www.vupen.com/english/advisories/2009/1621 - http://www.securityfocus.com/bid/35434 - http://www.securityfocus.com
ttp://www.vupen.com/english/advisories/2009/1621 - http://www.securityfocus.com/bid/35434 - http://www.securityfocus.com/bid/35414 - http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/51209
CVE ID: CVE-2009-0961 State: PUBLISHED Published: 2009-06-19T16:00:00 Last Updated: 2024-08-07T04:57:17.163Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Mail component in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 dismisses the call approval dialog when another alert appears, which might allow remote attackers to force the iPhone to place a call without user approval by causing an application to trigger an alert. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT3639 - http://www.vupen.com/english/advisories/2009/1621 - http://osvdb.org/55238 - http://www.securityfocus.com/bid/35414 - http:/