Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
953 - http://support.apple.com/kb/HT3865 - http://secunia.com/advisories/36701 - http://www.securityfocus.com/bid/36360 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53171
CVE ID: CVE-2009-2812 State: PUBLISHED Published: 2009-09-14T16:00:00 Last Updated: 2024-08-07T06:07:36.962Z Vendors: n/a Products: n/a Problem Types: n/a Description: Launch Services in Apple Mac OS X 10.5.8 does not properly recognize an unsafe Uniform Type Identifier (UTI) in an exported document type in a downloaded application, which allows remote attackers to trigger the automatic opening of a file, and execute arbitrary code, via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36361 - http://osvdb.org/57954 - http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html - http://support.apple.com/kb/HT386
org/57954 - http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html - http://support.apple.com/kb/HT3865 - http://secunia.com/advisories/36701
CVE ID: CVE-2009-2813 State: PUBLISHED Published: 2009-09-14T16:00:00 Last Updated: 2024-08-07T06:07:36.127Z Vendors: n/a Products: n/a Problem Types: n/a Description: Samba 3.4 before 3.4.2, 3.3 before 3.3.8, 3.2 before 3.2.15, and 3.0.12 through 3.0.36, as used in the SMB subsystem in Apple Mac OS X 10.5.8 when Windows File Sharing is enabled, Fedora 11, and other operating systems, does not properly handle errors in resolving pathnames, which allows remote authenticated users to bypass intended sharing restrictions, and read, create, or modify files, in certain circumstances involving user accounts that lack home directories. Additional Analyst Notes: - CVE Program Container: References:
nces involving user accounts that lack home directories. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=126514298313071&w=2 - http://news.samba.org/releases/3.4.2/ - http://www.securityfocus.com/archive/1/507856/100/0/threaded - https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00098.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9191 - http://marc.info/?l=bugtraq&m=126514298313071&w=2 - http://news.samba.org/releases/3.2.15/ - http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html - http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021111.1-1 - http:
/security-announce/2009/Sep/msg00004.html - http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021111.1-1 - http://www.vupen.com/english/advisories/2009/2810 - http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.561439 - http://secunia.com/advisories/37428 - http://secunia.com/advisories/36937 - http://www.ubuntu.com/usn/USN-839-1 - http://news.samba.org/releases/3.0.37/ - http://www.samba.org/samba/security/CVE-2009-2813.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7257 - http://support.apple.com/kb/HT3865 - http://www.securityfocus.com/bid/36363 - http://secunia.com/advisories/36918 - http://secun
upport.apple.com/kb/HT3865 - http://www.securityfocus.com/bid/36363 - http://secunia.com/advisories/36918 - http://secunia.com/advisories/36701 - http://secunia.com/advisories/36893 - http://news.samba.org/releases/3.3.8/ - http://secunia.com/advisories/36953 - http://wiki.rpath.com/Advisories:rPSA-2009-0145 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7211 - http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/53174 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7791 - http://osvdb.org/57955 - https://www.redhat.com/archives/fedor
ry/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7791 - http://osvdb.org/57955 - https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00095.html
CVE ID: CVE-2009-2814 State: PUBLISHED Published: 2009-09-14T16:00:00 Last Updated: 2024-08-07T06:07:36.138Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Wiki Server in Apple Mac OS X 10.5.8 allows remote attackers to inject arbitrary web script or HTML via a search request containing data that does not use UTF-8 encoding. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36364 - http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html - http://support.apple.com/kb/HT3865 - http://osvdb.org/57956 - http://secunia.com/advisories/36701 - https://exchange.xforce.ibmcloud
rt.apple.com/kb/HT3865 - http://osvdb.org/57956 - http://secunia.com/advisories/36701 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53175
CVE ID: CVE-2009-2815 State: PUBLISHED Published: 2009-09-10T21:00:00Z Last Updated: 2024-09-16T22:35:07.868Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Telephony component in Apple iPhone OS before 3.1 does not properly handle SMS arrival notifications, which allows remote attackers to cause a denial of service (NULL pointer dereference and service interruption) via a crafted SMS message. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2009/Sep/msg00001.html - http://secunia.com/advisories/36677 - http://support.apple.com/kb/HT3860
CVE ID: CVE-2009-2816 State: PUBLISHED Published: 2009-11-13T15:00:00 Last Updated: 2024-08-07T06:07:36.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: The implementation of Cross-Origin Resource Sharing (CORS) in WebKit, as used in Apple Safari before 4.0.4 and Google Chrome before 3.0.195.33, includes certain custom HTTP headers in the OPTIONS request during cross-origin operations with preflight, which makes it easier for remote attackers to conduct cross-site request forgery (CSRF) attacks via a crafted web page. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43068 - http://www.vupen.com/english/advisories/2009/3233 - http:/
ontainer: References: - http://secunia.com/advisories/43068 - http://www.vupen.com/english/advisories/2009/3233 - http://lists.apple.com/archives/security-announce/2009/Nov/msg00001.html - http://www.vupen.com/english/advisories/2009/3217 - http://www.vupen.com/english/advisories/2011/0212 - http://support.apple.com/kb/HT4225 - https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00545.html - http://osvdb.org/59967 - http://www.securityfocus.com/bid/36997 - http://support.apple.com/kb/HT3949 - http://www.securitytracker.com/id?1023165 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6516 - http://lists.opensuse.org/opensuse-security
curity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6516 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/54239 - https://bugzilla.redhat.com/show_bug.cgi?id=525789 - https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00549.html - http://secunia.com/advisories/37358 - http://osvdb.org/59940 - http://secunia.com/advisories/37397 - http://secunia.com/advisories/37393 - http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html - http://secunia.com/advisories/37346
CVE ID: CVE-2009-2817 State: PUBLISHED Published: 2009-09-24T18:00:00 Last Updated: 2024-08-07T06:07:36.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Apple iTunes before 9.0.1 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted .pls file. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6290 - http://lists.apple.com/archives/security-announce/2009/Sep/msg00006.html - http://support.apple.com/kb/HT3884 - http://www.securityfocus.com/bid/36478
CVE ID: CVE-2009-2818 State: PUBLISHED Published: 2009-11-10T19:00:00 Last Updated: 2024-08-07T06:07:36.515Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adaptive Firewall in Apple Mac OS X before 10.6.2 does not properly handle invalid usernames in SSH login attempts, which makes it easier for remote attackers to obtain login access via a brute-force attack (aka dictionary attack). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36956 - http://www.vupen.com/english/advisories/2009/3184 - http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html - http://support.apple.com/kb/HT3937
CVE ID: CVE-2009-2819 State: PUBLISHED Published: 2009-11-10T19:00:00 Last Updated: 2024-08-07T06:07:36.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: AFP Client in Apple Mac OS X 10.5.8 allows remote AFP servers to execute arbitrary code or cause a denial of service (memory corruption and system crash) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36956 - http://www.vupen.com/english/advisories/2009/3184 - http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html - http://support.apple.com/kb/HT3937
CVE ID: CVE-2009-2820 State: PUBLISHED Published: 2009-11-10T19:00:00 Last Updated: 2024-08-07T06:07:37.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web interface in CUPS before 1.4.2, as used on Apple Mac OS X before 10.6.2 and other platforms, does not properly handle (1) HTTP headers and (2) HTML templates, which allows remote attackers to conduct cross-site scripting (XSS) attacks and HTTP response splitting attacks via vectors related to (a) the product's web interface, (b) the configuration of the print system, and (c) the titles of printed jobs, as demonstrated by an XSS attack that uses the kerberos parameter to the admin program, and leverages attribute inject
, as demonstrated by an XSS attack that uses the kerberos parameter to the admin program, and leverages attribute injection and HTTP Parameter Pollution (HPP) issues. Additional Analyst Notes: - CVE Program Container: References: - http://www.cups.org/str.php?L3367 - http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021115.1-1 - http://www.redhat.com/support/errata/RHSA-2009-1595.html - http://www.mandriva.com/security/advisories?name=MDVSA-2010:072 - http://www.securityfocus.com/bid/36956 - http://secunia.com/advisories/37308 - https://bugzilla.redhat.com/show_bug.cgi?id=529833 - http://secunia.com/advisories/37360 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:073 -
cgi?id=529833 - http://secunia.com/advisories/37360 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:073 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9153 - http://www.cups.org/documentation.php/relnotes.html - http://www.vupen.com/english/advisories/2009/3184 - http://www.cups.org/articles.php?L590 - http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html - http://support.apple.com/kb/HT3937
CVE ID: CVE-2009-2822 State: PUBLISHED Published: 2010-04-05T16:00:00 Last Updated: 2024-08-07T06:07:37.334Z Vendors: n/a Products: n/a Problem Types: n/a Description: AirPort Utility before 5.5.1 for Apple AirPort Base Station does not properly distribute MAC address ACLs to network extenders, which allows remote attackers to bypass intended access restrictions via an 802.11 authentication frame. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2010//Mar/msg00004.html - http://securitytracker.com/id?1023801 - http://www.vupen.com/english/advisories/2010/0778 - http://www.securityfocus.com/bid/39134 - http://support.apple.com/
- http://www.vupen.com/english/advisories/2010/0778 - http://www.securityfocus.com/bid/39134 - http://support.apple.com/kb/HT3958 - https://exchange.xforce.ibmcloud.com/vulnerabilities/57434 - http://secunia.com/advisories/39160 - http://www.osvdb.org/63420
CVE ID: CVE-2009-2823 State: PUBLISHED Published: 2009-11-10T19:00:00 Last Updated: 2024-08-07T06:07:36.959Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Apache HTTP Server in Apple Mac OS X before 10.6.2 enables the HTTP TRACE method, which allows remote attackers to conduct cross-site scripting (XSS) attacks via unspecified web client software. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36956 - http://www.vupen.com/english/advisories/2009/3184 - http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html - http://www.mandriva.com/security/advisories?name=MDVSA-2009:300 - http://support.apple.com/kb/HT3937
CVE ID: CVE-2009-2824 State: PUBLISHED Published: 2009-11-10T19:00:00 Last Updated: 2024-08-07T06:07:36.408Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in Apple Type Services (ATS) in Apple Mac OS X 10.5.8 allow remote attackers to execute arbitrary code via a crafted embedded font in a document. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36956 - http://www.vupen.com/english/advisories/2009/3184 - http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html - http://support.apple.com/kb/HT3937
CVE ID: CVE-2009-2825 State: PUBLISHED Published: 2009-11-10T19:00:00 Last Updated: 2024-08-07T06:07:36.498Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certificate Assistant in Apple Mac OS X before 10.6.2 does not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which might allow man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36956 - http://www.vupen.com/english/advisories/2009/3184 - http://list
: References: - http://www.securityfocus.com/bid/36956 - http://www.vupen.com/english/advisories/2009/3184 - http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html - http://support.apple.com/kb/HT3937
CVE ID: CVE-2009-2826 State: PUBLISHED Published: 2009-11-10T19:00:00 Last Updated: 2024-08-07T06:07:36.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in CoreGraphics in Apple Mac OS X 10.5.8 allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF document that triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36956 - http://www.vupen.com/english/advisories/2009/3184 - http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html - http://support.apple.com/kb/HT3937
CVE ID: CVE-2009-2827 State: PUBLISHED Published: 2009-11-10T19:00:00 Last Updated: 2024-08-07T06:07:36.542Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Disk Images in Apple Mac OS X 10.5.8 allows user-assisted remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted FAT filesystem on a disk image. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36956 - http://www.vupen.com/english/advisories/2009/3184 - http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html - http://support.apple.com/kb/HT3937
CVE ID: CVE-2009-2828 State: PUBLISHED Published: 2009-11-10T19:00:00 Last Updated: 2024-08-07T06:07:36.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: The server in DirectoryService in Apple Mac OS X 10.5.8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36956 - http://www.vupen.com/english/advisories/2009/3184 - http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html - http://support.apple.com/kb/HT3937
CVE ID: CVE-2009-2829 State: PUBLISHED Published: 2009-11-10T19:00:00 Last Updated: 2024-08-07T06:07:36.396Z Vendors: n/a Products: n/a Problem Types: n/a Description: Event Monitor in Apple Mac OS X 10.5.8 does not properly handle crafted authentication data sent to an SSH daemon, which allows remote attackers to cause a denial of service via vectors involving processing of XML log documents by other services, related to a "log injection" issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36956 - http://www.vupen.com/english/advisories/2009/3184 - http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html - http://support.a
glish/advisories/2009/3184 - http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html - http://support.apple.com/kb/HT3937
CVE ID: CVE-2009-2830 State: PUBLISHED Published: 2009-11-10T19:00:00 Last Updated: 2024-08-07T06:07:36.399Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in Christos Zoulas file before 5.03 in Apple Mac OS X 10.6.x before 10.6.2 allow user-assisted remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted Common Document Format (CDF) file. NOTE: this might overlap CVE-2009-1515. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36956 - http://www.vupen.com/english/advisories/2009/3184 - http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html
://www.vupen.com/english/advisories/2009/3184 - http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html - http://support.apple.com/kb/HT3937
CVE ID: CVE-2009-2831 State: PUBLISHED Published: 2009-11-10T19:00:00 Last Updated: 2024-08-07T06:07:36.281Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dictionary in Apple Mac OS X 10.5.8 allows remote attackers to create arbitrary files with any contents, and thereby execute arbitrary code, via crafted JavaScript, related to a "design issue." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36956 - http://www.vupen.com/english/advisories/2009/3184 - http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html - http://support.apple.com/kb/HT3937
CVE ID: CVE-2009-2832 State: PUBLISHED Published: 2009-11-10T19:00:00 Last Updated: 2024-08-07T06:07:37.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in FTP Server in Apple Mac OS X before 10.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via a CWD command specifying a pathname in a deeply nested hierarchy of directories, related to a "CWD command line tool." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36956 - http://www.vupen.com/english/advisories/2009/3184 - http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html - http://support.apple
h/advisories/2009/3184 - http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html - http://support.apple.com/kb/HT3937
CVE ID: CVE-2009-2833 State: PUBLISHED Published: 2009-11-10T19:00:00 Last Updated: 2024-08-07T06:07:36.661Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the UCCompareTextDefault API in International Components for Unicode in Apple Mac OS X 10.5.8 allows context-dependent attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36956 - http://www.vupen.com/english/advisories/2009/3184 - http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html - http://support.apple.com/kb/HT3937
CVE ID: CVE-2009-2834 State: PUBLISHED Published: 2009-11-10T19:00:00 Last Updated: 2024-08-07T06:07:37.179Z Vendors: n/a Products: n/a Problem Types: n/a Description: IOKit in Apple Mac OS X before 10.6.2 allows local users to modify the firmware of a (1) USB or (2) Bluetooth keyboard via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36956 - http://www.vupen.com/english/advisories/2009/3184 - http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html - http://support.apple.com/kb/HT3937
CVE ID: CVE-2009-2835 State: PUBLISHED Published: 2009-11-10T19:00:00 Last Updated: 2024-08-07T06:07:37.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel in Apple Mac OS X before 10.6.2 does not properly handle task state segments, which allows local users to gain privileges, cause a denial of service (system crash), or obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36956 - http://www.vupen.com/english/advisories/2009/3184 - http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html - http://support.apple.com/kb/HT3937
CVE ID: CVE-2009-2836 State: PUBLISHED Published: 2009-11-10T19:00:00 Last Updated: 2024-08-07T06:07:37.040Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in Login Window in Apple Mac OS X 10.6.x before 10.6.2, when at least one account has a blank password, allows attackers to bypass password authentication and obtain login access to an arbitrary account via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36956 - http://www.vupen.com/english/advisories/2009/3184 - http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html - http://support.apple.com/kb/HT3937
CVE ID: CVE-2009-2837 State: PUBLISHED Published: 2009-11-10T19:00:00 Last Updated: 2024-08-07T06:07:37.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in QuickDraw Manager in Apple Mac OS X before 10.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PICT image. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36956 - http://lists.apple.com/archives/security-announce/2010//Mar/msg00002.html - http://www.vupen.com/english/advisories/2009/3184 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6707 -
ish/advisories/2009/3184 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6707 - http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html - http://support.apple.com/kb/HT3937
CVE ID: CVE-2009-2838 State: PUBLISHED Published: 2009-11-10T19:00:00 Last Updated: 2024-08-07T06:07:36.986Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in QuickLook in Apple Mac OS X 10.5.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted Microsoft Office document that triggers a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36956 - http://www.vupen.com/english/advisories/2009/3184 - http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html - http://support.apple.com/kb/HT3937