Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100727_01 - http://www.securityfocus.com/bid/41928 - http://www-01.ibm.com/support/docview.wss?uid=swg21440812 - http://secunia.com/secunia_research/2010-28/
CVE ID: CVE-2010-0134 State: PUBLISHED Published: 2010-08-17T17:31:00 Last Updated: 2024-08-07T00:37:53.906Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in rtfsr.dll in Autonomy KeyView 10.4 and 10.9, as used in multiple IBM, Symantec, and other products, allows remote attackers to execute arbitrary code via a crafted \ls keyword in a list override table entry in an RTF file, which triggers a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100727_01 - http://www.securityfocus.com/bid/41928
il.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100727_01 - http://www.securityfocus.com/bid/41928 - http://www-01.ibm.com/support/docview.wss?uid=swg21440812 - http://secunia.com/secunia_research/2010-27/
CVE ID: CVE-2010-0135 State: PUBLISHED Published: 2010-08-17T17:31:00 Last Updated: 2024-08-07T00:37:53.870Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the WordPerfect 5.x reader (wosr.dll), as used in Autonomy KeyView 10.4 and 10.9 and possibly other products, allows remote attackers to execute arbitrary code via unspecified vectors related to "data blocks." Additional Analyst Notes: - CVE Program Container: References: - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100727_01 - http://www.securityfocus.com/bid/41928 - http://secunia.com/secunia_research/2010-31
visory&year=2010&suid=20100727_01 - http://www.securityfocus.com/bid/41928 - http://secunia.com/secunia_research/2010-31/ - http://www-01.ibm.com/support/docview.wss?uid=swg21440812
CVE ID: CVE-2010-0136 State: PUBLISHED Published: 2010-02-16T19:00:00 Last Updated: 2024-08-07T00:37:54.087Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenOffice.org (OOo) 2.0.4, 2.4.1, and 3.1.1 does not properly enforce Visual Basic for Applications (VBA) macro security settings, which allows remote attackers to run arbitrary macros via a crafted document. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2010:221 - http://secunia.com/advisories/38695 - http://www.debian.org/security/2010/dsa-1995 - http://securitytracker.com/id?1023588 - http://www.ubuntu.com/usn/USN-903-1 - http://lists.opensuse.org/op
10/dsa-1995 - http://securitytracker.com/id?1023588 - http://www.ubuntu.com/usn/USN-903-1 - http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00005.html - http://www.mail-archive.com/debian-openoffice%40lists.debian.org/msg23178.html - http://www.vupen.com/english/advisories/2010/0635 - http://www.securityfocus.com/bid/38245 - http://secunia.com/advisories/38921 - http://www.vupen.com/english/advisories/2010/2905
CVE ID: CVE-2010-0137 State: PUBLISHED Published: 2010-01-21T22:00:00 Last Updated: 2024-08-07T00:37:53.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the sshd_child_handler process in the SSH server in Cisco IOS XR 3.4.1 through 3.7.0 allows remote attackers to cause a denial of service (process crash and memory consumption) via a crafted SSH2 packet, aka Bug ID CSCsu10574. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/0183 - https://exchange.xforce.ibmcloud.com/vulnerabilities/55767 - http://securitytracker.com/id?1023480 - http://www.cisco.com/en/US/products/products_security_advi
lnerabilities/55767 - http://securitytracker.com/id?1023480 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b13512.shtml - http://secunia.com/advisories/38227 - http://www.securityfocus.com/bid/37878
CVE ID: CVE-2010-0138 State: PUBLISHED Published: 2010-01-21T22:00:00 Last Updated: 2024-08-07T00:37:54.107Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Cisco CiscoWorks Internetwork Performance Monitor (IPM) 2.6 and earlier on Windows, as distributed in CiscoWorks LAN Management Solution (LMS), allows remote attackers to execute arbitrary code via a malformed getProcessName CORBA General Inter-ORB Protocol (GIOP) request, related to a "third-party component," aka Bug ID CSCsv62350. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/0184 - http://secunia.com/advisories/38230 - http://securitytracker.
ces: - http://www.vupen.com/english/advisories/2010/0184 - http://secunia.com/advisories/38230 - http://securitytracker.com/id?1023484 - http://www.zerodayinitiative.com/advisories/ZDI-10-004/ - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1351d.shtml - http://www.securityfocus.com/bid/37879 - https://exchange.xforce.ibmcloud.com/vulnerabilities/55768
CVE ID: CVE-2010-0139 State: PUBLISHED Published: 2010-01-28T20:00:00Z Last Updated: 2024-09-16T16:47:38.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Unified MeetingPlace 7 before 7.0(2.3) hotfix 5F, 6 before 6.0.639.2, and possibly 5 does not properly validate SQL commands, which allows remote attackers to create, modify, or delete data in a database via unspecified vectors, aka Bug ID CSCtc39691. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1490b.shtml - http://www.securityfocus.com/bid/37965
CVE ID: CVE-2010-0140 State: PUBLISHED Published: 2010-01-28T20:00:00Z Last Updated: 2024-09-17T02:11:54.087Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the web server in Cisco Unified MeetingPlace 7 before 7.0(2.3) hotfix 5F, 6 before 6.0.639.3, and possibly 5 allow remote attackers to create (1) user or (2) administrator accounts via a crafted URL in a request to the internal interface, aka Bug IDs CSCtc59231 and CSCtd40661. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1490b.shtml - http://www.securityfocus.com/bid/37965
CVE ID: CVE-2010-0141 State: PUBLISHED Published: 2010-01-28T20:00:00Z Last Updated: 2024-09-17T04:04:32.495Z Vendors: n/a Products: n/a Problem Types: n/a Description: MeetingTime in Cisco Unified MeetingPlace 6 before MR5, and possibly 5, allows remote attackers to discover usernames, passwords, and unspecified other data from the user database via a modified authentication sequence to the Audio Server, aka Bug ID CSCsv76935. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1490b.shtml - http://www.securityfocus.com/bid/37965
CVE ID: CVE-2010-0142 State: PUBLISHED Published: 2010-01-28T20:00:00Z Last Updated: 2024-09-17T02:16:29.135Z Vendors: n/a Products: n/a Problem Types: n/a Description: MeetingTime in Cisco Unified MeetingPlace 6 before MR5, and possibly 5, allows remote authenticated users to gain privileges via a modified authentication sequence, aka Bug ID CSCsv66530. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1490b.shtml - http://www.securityfocus.com/bid/37965
CVE ID: CVE-2010-0143 State: PUBLISHED Published: 2010-02-11T17:00:00 Last Updated: 2024-08-07T00:37:53.883Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the administrative interface in the embedded HTTPS server on the Cisco IronPort Encryption Appliance 6.2.x before 6.2.9.1 and 6.5.x before 6.5.2, and the IronPort PostX MAP before 6.2.9.1, allows remote attackers to read arbitrary files via unknown vectors, aka IronPort Bug 65921. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/products/products_applied_mitigation_bulletin09186a0080b17904.html - http://secunia.com/advisories/38525 - http://www.cisco.com/e
products_applied_mitigation_bulletin09186a0080b17904.html - http://secunia.com/advisories/38525 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b17903.shtml
CVE ID: CVE-2010-0144 State: PUBLISHED Published: 2010-02-11T17:00:00 Last Updated: 2024-08-07T00:37:53.839Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the WebSafe DistributorServlet in the embedded HTTPS server on the Cisco IronPort Encryption Appliance 6.2.x before 6.2.9.1 and 6.5.x before 6.5.2, and the IronPort PostX MAP before 6.2.9.1, allows remote attackers to read arbitrary files via unknown vectors, aka IronPort Bug 65922. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/products/products_applied_mitigation_bulletin09186a0080b17904.html - http://secunia.com/advisories/38525 - http://www.cisco.com
s/products_applied_mitigation_bulletin09186a0080b17904.html - http://secunia.com/advisories/38525 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b17903.shtml
CVE ID: CVE-2010-0145 State: PUBLISHED Published: 2010-02-11T17:00:00 Last Updated: 2024-08-07T00:37:53.888Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the embedded HTTPS server on the Cisco IronPort Encryption Appliance 6.2.x before 6.2.9.1 and 6.5.x before 6.5.2, and the IronPort PostX MAP before 6.2.9.1, allows remote attackers to execute arbitrary code via unknown vectors, aka IronPort Bug 65923. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/products/products_applied_mitigation_bulletin09186a0080b17904.html - http://secunia.com/advisories/38525 - http://www.cisco.com/en/US/products/products_securit
lletin09186a0080b17904.html - http://secunia.com/advisories/38525 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b17903.shtml
CVE ID: CVE-2010-0146 State: PUBLISHED Published: 2010-02-23T20:00:00 Last Updated: 2024-08-07T00:37:53.922Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Management Center for Cisco Security Agents 6.0 allows remote authenticated users to read arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/62443 - http://secunia.com/advisories/38619 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56345 - http://www.vupen.com/english/advisories/2010/0416 - http://www.securitytracker.com/id?1023606 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b19
http://www.securitytracker.com/id?1023606 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1910d.shtml - http://www.securityfocus.com/bid/38271
CVE ID: CVE-2010-0147 State: PUBLISHED Published: 2010-02-23T20:00:00 Last Updated: 2024-08-07T00:37:53.918Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Management Center for Cisco Security Agents 5.1 before 5.1.0.117, 5.2 before 5.2.0.296, and 6.0 before 6.0.1.132 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38619 - http://osvdb.org/62444 - http://www.vupen.com/english/advisories/2010/0416 - http://www.securitytracker.com/id?1023606 - http://www.cisco.com/en/US/products/products_security_advisory09186
0/0416 - http://www.securitytracker.com/id?1023606 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1910d.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/56346 - http://www.securityfocus.com/bid/38272
CVE ID: CVE-2010-0148 State: PUBLISHED Published: 2010-02-23T20:00:00 Last Updated: 2024-08-07T00:37:53.899Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Cisco Security Agent 5.2 before 5.2.0.285, when running on Linux, allows remote attackers to cause a denial of service (kernel panic) via "a series of TCP packets." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/56347 - http://www.securitytracker.com/id?1023607 - http://secunia.com/advisories/38619 - http://www.vupen.com/english/advisories/2010/0416 - http://www.securityfocus.com/bid/38273 - http://www.cisco.com/en/US/products/p
.vupen.com/english/advisories/2010/0416 - http://www.securityfocus.com/bid/38273 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1910d.shtml - http://osvdb.org/62445
CVE ID: CVE-2010-0149 State: PUBLISHED Published: 2010-02-19T17:00:00 Last Updated: 2024-08-07T00:37:54.003Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7.2 before 7.2(4.46), 8.0 before 8.0(4.38), 8.1 before 8.1(2.29), and 8.2 before 8.2(1.5); and Cisco PIX 500 Series Security Appliance; allows remote attackers to cause a denial of service (prevention of new connections) via crafted TCP segments during termination of the TCP connection that cause the connection to remain in CLOSEWAIT status, aka "TCP Connection Exhaustion Denial of Service Vulnerability." Additional Analyst Notes: - CVE Program Cont
IT status, aka "TCP Connection Exhaustion Denial of Service Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1910c.shtml - http://www.securityfocus.com/bid/38275 - http://secunia.com/advisories/38618 - http://osvdb.org/62433 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56336 - http://secunia.com/advisories/38636 - http://www.securitytracker.com/id?1023612 - http://www.vupen.com/english/advisories/2010/0415
CVE ID: CVE-2010-0150 State: PUBLISHED Published: 2010-02-19T17:00:00 Last Updated: 2024-08-07T00:37:53.915Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7.0 before 7.0(8.10), 7.2 before 7.2(4.45), 8.0 before 8.0(5.2), 8.1 before 8.1(2.37), and 8.2 before 8.2(1.16); and Cisco PIX 500 Series Security Appliance; allows remote attackers to cause a denial of service (device reload) via malformed SIP messages, aka Bug ID CSCsy91157. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/38277 - http://www.cisco.com/en/US/products/products_security_advisory09186a0
rences: - http://www.securityfocus.com/bid/38277 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1910c.shtml - http://osvdb.org/62434 - http://secunia.com/advisories/38618 - http://secunia.com/advisories/38636 - http://www.securitytracker.com/id?1023612 - http://www.vupen.com/english/advisories/2010/0415 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56338
CVE ID: CVE-2010-0151 State: PUBLISHED Published: 2010-02-19T17:00:00 Last Updated: 2024-08-07T00:37:53.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Cisco Firewall Services Module (FWSM) 4.0 before 4.0(8), as used in for the Cisco Catalyst 6500 switches, Cisco 7600 routers, and ASA 5500 Adaptive Security Appliances, allows remote attackers to cause a denial of service (crash) via a malformed Skinny Client Control Protocol (SCCP) message. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1910e.shtml - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1910c.shtm
ity_advisory09186a0080b1910e.shtml - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1910c.shtml - http://www.securityfocus.com/bid/38274 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56333 - http://www.vupen.com/english/advisories/2010/0418 - http://osvdb.org/62432 - http://www.securitytracker.com/id?1023609 - http://secunia.com/advisories/38621
CVE ID: CVE-2010-0152 State: PUBLISHED Published: 2010-09-14T16:39:00 Last Updated: 2024-08-07T00:37:54.081Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Local Management Interface (LMI) on the IBM Proventia Network Mail Security System (PNMSS) appliance with firmware before 2.5.0.2 allow remote attackers to inject arbitrary web script or HTML via (1) the date1 parameter to pvm_messagestore.php, (2) the userfilter parameter to pvm_user_management.php, (3) the ping parameter to sys_tools.php in a sys_ping.php action, (4) the action parameter to pvm_cert_commaction.php, (5) the action parameter to pvm_cert_serveraction.ph
ng.php action, (4) the action parameter to pvm_cert_commaction.php, (5) the action parameter to pvm_cert_serveraction.php, (6) the action parameter to pvm_smtpstore.php, (7) the l parameter to sla/index.php, or (8) unspecified stored data; and allow remote authenticated users to inject arbitrary web script or HTML via (9) saved search filters. Additional Analyst Notes: - CVE Program Container: References: - http://www.ventuneac.net/security-advisories/MVSA-10-007 - http://www.securityfocus.com/archive/1/513629/100/0/threaded
CVE ID: CVE-2010-0153 State: PUBLISHED Published: 2010-09-14T16:39:00 Last Updated: 2024-08-07T00:37:53.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the Local Management Interface (LMI) on the IBM Proventia Network Mail Security System (PNMSS) appliance with firmware before 2.5.0.2 allow remote attackers to hijack the authentication of administrators for requests that (1) change settings or (2) conduct denial of service attacks. Additional Analyst Notes: - CVE Program Container: References: - http://www.ventuneac.net/security-advisories/MVSA-10-006 - http://www.securityfocus.com/archive/1/513627/100/0/threaded
CVE ID: CVE-2010-0154 State: PUBLISHED Published: 2010-09-14T16:39:00 Last Updated: 2024-08-07T00:37:54.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in sla/index.php in the Local Management Interface (LMI) on the IBM Proventia Network Mail Security System (PNMSS) appliance with firmware before 2.5 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the l parameter, related to an "Insecure Direct Object Reference vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.ventuneac.net/security-advisories/MVSA-10-008 - http://www.securityfocus.com/archive/1/513637/100/0/threaded
CVE ID: CVE-2010-0155 State: PUBLISHED Published: 2010-09-14T16:39:00 Last Updated: 2024-08-07T00:37:54.114Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in load.php in the Local Management Interface (LMI) on the IBM Proventia Network Mail Security System (PNMSS) appliance with firmware before 2.5 allows remote authenticated users to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the javaVersion parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/513636/100/0/threaded - http://www.ventuneac.net/security-advisories/MVSA-10-009
CVE ID: CVE-2010-0156 State: PUBLISHED Published: 2010-03-03T19:00:00 Last Updated: 2024-08-07T00:37:54.102Z Vendors: n/a Products: n/a Problem Types: n/a Description: Puppet 0.24.x before 0.24.9 and 0.25.x before 0.25.2 allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/daemonout, (2) /tmp/puppetdoc.txt, (3) /tmp/puppetdoc.tex, or (4) /tmp/puppetdoc.aux temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38766 - https://bugzilla.redhat.com/show_bug.cgi?id=502881 - http://groups.google.com/group/puppet-announce/browse_thread/thread/4401823f6cbf6087 - http://lists.opensuse.org/opensuse-security-announ
gle.com/group/puppet-announce/browse_thread/thread/4401823f6cbf6087 - http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html - http://groups.google.com/group/puppet-announce/browse_thread/thread/73cd1b2896d986c2 - http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036083.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036166.html - https://puppet.com/security/cve/cve-2010-0156
CVE ID: CVE-2010-0157 State: PUBLISHED Published: 2010-01-06T21:33:00Z Last Updated: 2024-09-16T18:56:01.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Bible Study (com_biblestudy) component 6.1 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the controller parameter in a studieslist action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/37583 - http://secunia.com/advisories/37896 - http://packetstormsecurity.org/1001-exploits/joomlabiblestudy-lfi.txt
CVE ID: CVE-2010-0158 State: PUBLISHED Published: 2010-01-06T21:33:00 Last Updated: 2024-08-07T00:37:54.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the JoomlaBamboo (JB) Simpla Admin template for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in an article action to the com_content component, reachable through index.php. NOTE: the vendor disputes this report, saying: "JoomlaBamboo has investigated this report, and it is incorrect. There is no SQL injection vulnerability involving the id parameter in an article view, and there never was. JoomlaBamboo customers have no reason to be concerned about this r
id parameter in an article view, and there never was. JoomlaBamboo customers have no reason to be concerned about this report. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/0014 - http://www.securityfocus.com/bid/37579 - http://packetstormsecurity.org/1001-exploits/joomlabamboo-sql.txt - http://www.attrition.org/pipermail/vim/2010-February/002319.html - http://www.attrition.org/pipermail/vim/2010-February/002320.html - http://www.exploit-db.com/exploits/10971
CVE ID: CVE-2010-0159 State: PUBLISHED Published: 2010-02-21T17:00:00 Last Updated: 2024-08-07T00:37:53.936Z Vendors: n/a Products: n/a Problem Types: n/a Description: The browser engine in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and SeaMonkey before 2.0.3 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the nsBlockFrame::StealFrame function in layout/generic/nsBlockFrame.cpp, and unspecified other vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-895-1 - https://bugzilla.mozilla.org/show_bu
Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-895-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=534082 - http://www.redhat.com/support/errata/RHSA-2010-0153.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9590 - http://secunia.com/advisories/38847 - http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00001.html - http://www.redhat.com/support/errata/RHSA-2010-0113.html - http://www.mandriva.com/security/advisories?name=MDVSA-2010:042 - http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035367.html - https://bugzilla.mozilla.org/show_bug.cgi?id=530880 - http://www.redhat.com/support