Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2011-0195 State: PUBLISHED Published: 2011-04-15T19:00:00 Last Updated: 2024-08-06T21:43:15.431Z Vendors: n/a Products: n/a Problem Types: n/a Description: The generate-id XPath function in libxslt in Apple iOS 4.3.x before 4.3.2 allows remote attackers to obtain potentially sensitive information about heap memory addresses via a crafted web site. NOTE: this may overlap CVE-2011-1202. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT4723 - http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html - http://www.securitytracker.com/id?1025365 - http://support.apple.com/kb/HT4808 - http://lists.apple.com/archives/security-
tp://www.securitytracker.com/id?1025365 - http://support.apple.com/kb/HT4808 - http://lists.apple.com/archives/security-announce/2011//Apr/msg00000.html - http://lists.apple.com/archives/security-announce/2011//Jul/msg00002.html
CVE ID: CVE-2011-0196 State: PUBLISHED Published: 2011-06-24T20:00:00Z Last Updated: 2024-09-16T18:33:34.851Z Vendors: n/a Products: n/a Problem Types: n/a Description: AirPort in Apple Mac OS X 10.5.8 allows remote attackers to cause a denial of service (out-of-bounds read and reboot) via Wi-Fi frames on the local wireless network. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT4723 - http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html
CVE ID: CVE-2011-0197 State: PUBLISHED Published: 2011-06-24T20:00:00 Last Updated: 2024-08-06T21:43:15.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: App Store in Apple Mac OS X before 10.6.8 creates a log entry containing a user's AppleID password, which might allow local users to obtain sensitive information by reading a log file, as demonstrated by a log file that has non-default permissions. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT4723 - http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html - http://www.securityfocus.com/bid/48443
CVE ID: CVE-2011-0198 State: PUBLISHED Published: 2011-06-24T20:00:00 Last Updated: 2024-08-06T21:43:15.369Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Apple Type Services (ATS) in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code via a crafted embedded TrueType font. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT4723 - http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html - http://www.securityfocus.com/bid/48436
CVE ID: CVE-2011-0199 State: PUBLISHED Published: 2011-06-24T20:00:00 Last Updated: 2025-01-21T18:01:55.874Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Certificate Trust Policy component in Apple Mac OS X before 10.6.8 does not perform CRL checking for Extended Validation (EV) certificates that lack OCSP URLs, which might allow man-in-the-middle attackers to spoof an SSL server via a revoked certificate. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://support.apple.com/kb/HT4723 - http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html - http://www.securityfocus.com/bid/48447
CVE ID: CVE-2011-0200 State: PUBLISHED Published: 2011-06-24T20:00:00 Last Updated: 2024-08-06T21:43:15.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in ColorSync in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via an image containing a crafted embedded ColorSync profile that triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT4723 - http://support.apple.com/kb/HT5130 - http://support.apple.com/kb/HT4981 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html - http://lists.a
support.apple.com/kb/HT4981 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html - http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html - http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html - http://support.apple.com/kb/HT4808 - http://lists.apple.com/archives/security-announce/2011//Jul/msg00002.html
CVE ID: CVE-2011-0201 State: PUBLISHED Published: 2011-06-24T20:00:00 Last Updated: 2024-08-06T21:43:15.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one error in the CoreFoundation framework in Apple Mac OS X before 10.6.8 allows context-dependent attackers to execute arbitrary code or cause a denial of service (application crash) via a CFString object that triggers a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT4723 - http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html - http://support.apple.com/kb/HT4808 - http://lists.apple.com/archives/security-announce/2011//Jul/msg00002.ht
0000.html - http://support.apple.com/kb/HT4808 - http://lists.apple.com/archives/security-announce/2011//Jul/msg00002.html
CVE ID: CVE-2011-0202 State: PUBLISHED Published: 2011-06-24T20:00:00 Last Updated: 2024-08-06T21:43:15.526Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in CoreGraphics in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted embedded Type 1 font in a PDF document. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT4723 - http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html - http://support.apple.com/kb/HT4808 - http://lists.apple.com/archives/security-announce/2011//Jul/msg00002.html
CVE ID: CVE-2011-0203 State: PUBLISHED Published: 2011-06-24T20:00:00 Last Updated: 2024-08-06T21:43:15.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in xftpd in the FTP Server component in Apple Mac OS X before 10.6.8 allows remote attackers to list arbitrary directories by using the root directory as the starting point of a recursive listing. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT4723 - http://www.securityfocus.com/bid/48418 - http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html
CVE ID: CVE-2011-0204 State: PUBLISHED Published: 2011-06-24T20:00:00 Last Updated: 2024-08-06T21:43:15.426Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in ImageIO in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted TIFF image. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT4723 - http://support.apple.com/kb/HT4981 - http://archives.neohapsis.com/archives/bugtraq/2011-07/0034.html - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html - http://lists.apple.com/archives/security-announce/2011/
s.apple.com/archives/Security-announce/2011//Oct/msg00000.html - http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html - http://support.apple.com/kb/HT4808 - http://lists.apple.com/archives/security-announce/2011//Jul/msg00002.html - http://osvdb.org/73368
CVE ID: CVE-2011-0205 State: PUBLISHED Published: 2011-06-24T20:00:00 Last Updated: 2024-08-06T21:43:15.374Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in ImageIO in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted JPEG2000 image. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT4723 - http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html - http://www.securityfocus.com/bid/48439
CVE ID: CVE-2011-0206 State: PUBLISHED Published: 2011-06-24T20:00:00 Last Updated: 2024-08-06T21:43:15.385Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in International Components for Unicode (ICU) in Apple Mac OS X before 10.6.8 allows context-dependent attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving uppercase strings. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT4723 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html - http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html - https://exchange.xforce.ibmcloud.
001.html - http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/68217 - http://support.apple.com/kb/HT4999 - http://support.apple.com/kb/HT4808 - http://lists.apple.com/archives/security-announce/2011//Jul/msg00002.html
CVE ID: CVE-2011-0207 State: PUBLISHED Published: 2011-06-24T20:00:00 Last Updated: 2024-08-06T21:43:15.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MobileMe component in Apple Mac OS X before 10.6.8 uses a cleartext HTTP session for the Mail application to read e-mail aliases, which allows remote attackers to obtain potentially sensitive alias information by sniffing the network. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT4723 - http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html - http://www.securityfocus.com/bid/48444
CVE ID: CVE-2011-0208 State: PUBLISHED Published: 2011-06-24T20:00:00 Last Updated: 2024-08-06T21:43:15.397Z Vendors: n/a Products: n/a Problem Types: n/a Description: QuickLook in Apple Mac OS X 10.6 before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted Microsoft Office document. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT4723 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html - http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html - http://support.apple.com/kb/HT4999
CVE ID: CVE-2011-0209 State: PUBLISHED Published: 2011-06-24T20:00:00 Last Updated: 2024-08-06T21:43:15.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in QuickTime in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted RIFF WAV file. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT4723 - http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html - http://lists.apple.com/archives/security-announce/2011//Aug/msg00000.html
CVE ID: CVE-2011-0210 State: PUBLISHED Published: 2011-06-24T20:00:00 Last Updated: 2024-08-06T21:43:15.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: QuickTime in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted sample tables in a movie file. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT4723 - http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html - http://lists.apple.com/archives/security-announce/2011//Aug/msg00000.html - http://www.securityfocus.com/bid/48442
CVE ID: CVE-2011-0211 State: PUBLISHED Published: 2011-06-24T20:00:00 Last Updated: 2024-08-06T21:43:15.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in QuickTime in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT4723 - http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html - http://lists.apple.com/archives/security-announce/2011//Aug/msg00000.html
CVE ID: CVE-2011-0212 State: PUBLISHED Published: 2011-06-24T20:00:00 Last Updated: 2024-08-06T21:43:15.296Z Vendors: n/a Products: n/a Problem Types: n/a Description: servermgrd in Apple Mac OS X before 10.6.8 allows remote attackers to read arbitrary files, and possibly send HTTP requests to intranet servers or cause a denial of service (CPU and memory consumption), via an XML-RPC request containing an entity declaration in conjunction with an entity reference, related to an XML External Entity (aka XXE) issue. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT4723 - http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html - htt
: - http://support.apple.com/kb/HT4723 - http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html - http://www.securityfocus.com/bid/48445
CVE ID: CVE-2011-0213 State: PUBLISHED Published: 2011-06-24T20:00:00 Last Updated: 2024-08-06T21:43:15.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in QuickTime in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted JPEG file. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT4723 - http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html - http://lists.apple.com/archives/security-announce/2011//Aug/msg00000.html
CVE ID: CVE-2011-0214 State: PUBLISHED Published: 2011-07-21T23:00:00Z Last Updated: 2024-09-16T23:22:16.872Z Vendors: n/a Products: n/a Problem Types: n/a Description: CFNetwork in Apple Safari before 5.0.6 on Windows does not properly handle an untrusted attribute of a system root certificate, which allows remote web servers to bypass intended SSL restrictions via a certificate signed by a blacklisted certification authority. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT4808 - http://lists.apple.com/archives/security-announce/2011//Jul/msg00002.html
CVE ID: CVE-2011-0215 State: PUBLISHED Published: 2011-07-21T23:00:00 Last Updated: 2024-08-06T21:43:15.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: ImageIO in Apple Safari before 5.0.6 on Windows does not properly address re-entrancy issues, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted TIFF file. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT4981 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html - http://support.apple.com/kb/HT4808 - http://lists.apple.com/archives/security-announce/2011//Jul/msg00002.html
CVE ID: CVE-2011-0216 State: PUBLISHED Published: 2011-07-21T23:00:00 Last Updated: 2024-08-06T21:43:15.272Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one error in libxml in Apple Safari before 5.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow and application crash) via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html - http://rhn.redhat.com/errata/RHSA-2013-0217.html - http://www.redhat.com/support/errata/RHSA-2011-1749.html - http://www.mandriva.com/security/advisories?name=MDVSA-2011:188 - http:
.redhat.com/support/errata/RHSA-2011-1749.html - http://www.mandriva.com/security/advisories?name=MDVSA-2011:188 - http://support.apple.com/kb/HT4999 - http://support.apple.com/kb/HT5001 - http://support.apple.com/kb/HT4808 - http://lists.apple.com/archives/security-announce/2011//Jul/msg00002.html - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00002.html - http://www.debian.org/security/2012/dsa-2394
CVE ID: CVE-2011-0217 State: PUBLISHED Published: 2011-07-21T23:00:00Z Last Updated: 2024-09-17T01:25:52.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple Safari before 5.0.6 provides AutoFill information to scripts that execute before HTML form submission, which allows remote attackers to obtain Address Book information via a crafted form, as demonstrated by a form that includes non-visible fields. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT4808 - http://lists.apple.com/archives/security-announce/2011//Jul/msg00002.html
CVE ID: CVE-2011-0218 State: PUBLISHED Published: 2011-07-21T23:00:00 Last Updated: 2024-08-06T21:43:15.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2011-07-20-1. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT4981 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html - http:
ity-announce/2011//Oct/msg00001.html - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html - http://support.apple.com/kb/HT4999 - http://support.apple.com/kb/HT4808 - http://lists.apple.com/archives/security-announce/2011//Jul/msg00002.html
CVE ID: CVE-2011-0219 State: PUBLISHED Published: 2011-07-21T23:00:00Z Last Updated: 2024-09-16T23:00:40.403Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple Safari before 5.0.6 allows remote attackers to bypass the Same Origin Policy, and modify the rendering of text from arbitrary web sites, via a Java applet that loads fonts. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT4808 - http://lists.apple.com/archives/security-announce/2011//Jul/msg00002.html
CVE ID: CVE-2011-0220 State: PUBLISHED Published: 2020-02-05T19:46:24 Last Updated: 2024-08-06T21:43:15.303Z Vendors: Apple Products: Bonjour Problem Types: Other Description: Apple Bonjour before 2011 allows a crash via a crafted multicast DNS packet. Additional Analyst Notes: - CVE Program Container: References: - https://opensource.apple.com/source/mDNSResponder/mDNSResponder-541/mDNSPosix/ReadMe.txt
CVE ID: CVE-2011-0221 State: PUBLISHED Published: 2011-07-21T23:00:00 Last Updated: 2024-08-06T21:43:15.295Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2011-07-20-1. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT4981 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html - http:
CVE ID: CVE-2011-0222 State: PUBLISHED Published: 2011-07-21T23:00:00 Last Updated: 2024-08-06T21:43:15.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2011-07-20-1. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT4981 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html - http:
ity-announce/2011//Oct/msg00001.html - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html - http://securityreason.com/securityalert/8313 - http://support.apple.com/kb/HT4999 - http://support.apple.com/kb/HT4808 - http://lists.apple.com/archives/security-announce/2011//Jul/msg00002.html - http://securityreason.com/securityalert/8315
CVE ID: CVE-2011-0223 State: PUBLISHED Published: 2011-07-21T23:00:00 Last Updated: 2024-08-06T21:43:15.281Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2011-07-20-1. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT4981 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html - http://support.apple.com/kb/HT4808 - http://lists.apple.com/archives/security-ann
ity-announce/2011//Oct/msg00000.html - http://support.apple.com/kb/HT4808 - http://lists.apple.com/archives/security-announce/2011//Jul/msg00002.html
CVE ID: CVE-2011-0224 State: PUBLISHED Published: 2011-10-14T10:00:00 Last Updated: 2024-08-06T21:43:15.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: CoreMedia in Apple Mac OS X through 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted QuickTime movie file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/50095 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html - http://support.apple.com/kb/HT5002 - http://www.securityfocus.com/bid/50085
CVE ID: CVE-2011-0225 State: PUBLISHED Published: 2011-07-21T23:00:00 Last Updated: 2024-08-06T21:43:15.409Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2011-07-20-1. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT4981 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html - http:
CVE ID: CVE-2011-0226 State: PUBLISHED Published: 2011-07-19T22:00:00 Last Updated: 2024-08-06T21:43:15.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in psaux/t1decode.c in FreeType before 2.4.6, as used in CoreGraphics in Apple iOS before 4.2.9 and 4.3.x before 4.3.4 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted Type 1 font in a PDF document, as exploited in the wild in July 2011. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/45224 - http://support.apple.com/kb/HT4803 - http://lists.apple.com/
tainer: References: - http://secunia.com/advisories/45224 - http://support.apple.com/kb/HT4803 - http://lists.apple.com/archives/security-announce/2011//Jul/msg00000.html - http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00015.html - http://www.securityfocus.com/bid/48619 - http://lists.nongnu.org/archive/html/freetype-devel/2011-07/msg00020.html - http://lists.apple.com/archives/security-announce/2011//Jul/msg00001.html - http://secunia.com/advisories/45167 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html - http://www.redhat.com/support/errata/RHSA-2011-1085.html - http://support.apple.com/kb/HT4802 - http://lists.nongnu.org/archive/html/freetype-d