Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2012-3923 State: PUBLISHED Published: 2012-09-16T10:00:00 Last Updated: 2024-08-06T20:21:04.090Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SSLVPN implementation in Cisco IOS 12.4, 15.0, 15.1, and 15.2, when DTLS is not enabled, does not properly handle certain outbound ACL configurations, which allows remote authenticated users to cause a denial of service (device crash) via a session involving a PPP over ATM (PPPoA) interface, aka Bug ID CSCte41827. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/docs/ios/15_2m_and_t/release/notes/152-1TCAVS.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/78670
CVE ID: CVE-2012-3924 State: PUBLISHED Published: 2012-09-16T10:00:00 Last Updated: 2024-08-06T20:21:04.246Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SSLVPN implementation in Cisco IOS 15.1 and 15.2, when DTLS is enabled, does not properly handle certain outbound ACL configurations, which allows remote authenticated users to cause a denial of service (device crash) via a session involving a PPP over ATM (PPPoA) interface, aka Bug ID CSCty97961. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/docs/ios/15_2m_and_t/release/notes/152-1TCAVS.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/78672
CVE ID: CVE-2012-3935 State: PUBLISHED Published: 2012-09-12T23:00:00 Last Updated: 2024-08-06T20:21:04.047Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Unified Presence (CUP) before 8.6(3) and Jabber Extensible Communications Platform (aka Jabber XCP) before 5.3 allow remote attackers to cause a denial of service (process crash) via a crafted XMPP stream header, aka Bug ID CSCtu32832. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/78457 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120912-cupxcp - http://www.securitytracker.com/id?1027520 - http://osvdb.org/85421 -
nt/CiscoSecurityAdvisory/cisco-sa-20120912-cupxcp - http://www.securitytracker.com/id?1027520 - http://osvdb.org/85421 - http://secunia.com/advisories/50562
CVE ID: CVE-2012-3936 State: PUBLISHED Published: 2012-10-25T14:00:00 Last Updated: 2024-08-06T20:21:04.042Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 before LD SP32 EP10 and T28 before T28.4 allows remote attackers to execute arbitrary code via a crafted WRF file, aka Bug ID CSCua40962. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/86141 - http://www.securitytracker.com/id?1027639 - http://www.securityfocus.com/bid/55866 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20121010-webex
CVE ID: CVE-2012-3937 State: PUBLISHED Published: 2012-10-25T14:00:00 Last Updated: 2024-08-06T20:21:04.221Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 before LD SP32 EP10 and T28 before T28.4 allows remote attackers to execute arbitrary code via a crafted WRF file, aka Bug ID CSCtz72967. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1027639 - http://www.securityfocus.com/bid/55866 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20121010-webex - http://osvdb.org/86142
CVE ID: CVE-2012-3938 State: PUBLISHED Published: 2012-10-25T14:00:00 Last Updated: 2024-08-06T20:21:04.244Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 before LD SP32 EP10 and T28 before T28.4 allows remote attackers to execute arbitrary code via a crafted WRF file, aka Bug ID CSCtz73583. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/86143 - http://www.securitytracker.com/id?1027639 - http://www.securityfocus.com/bid/55866 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20121010-webex
CVE ID: CVE-2012-3939 State: PUBLISHED Published: 2012-10-25T14:00:00 Last Updated: 2024-08-06T20:21:04.183Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 before LD SP32 EP10 and T28 before T28.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted WRF file, aka Bug ID CSCua61331. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/86138 - http://www.securitytracker.com/id?1027639 - http://www.securityfocus.com/bid/55866 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20121010-webex
CVE ID: CVE-2012-3940 State: PUBLISHED Published: 2012-10-25T14:00:00 Last Updated: 2024-08-06T20:21:04.220Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 before LD SP32 EP10 and T28 before T28.4 allows remote attackers to execute arbitrary code via a crafted WRF file, aka Bug ID CSCtz72958. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/86139 - http://www.securitytracker.com/id?1027639 - http://www.securityfocus.com/bid/55866 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20121010-webex
CVE ID: CVE-2012-3941 State: PUBLISHED Published: 2012-10-25T14:00:00 Last Updated: 2024-08-06T20:21:04.046Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 before LD SP32 EP10 and T28 before T28.4 allows remote attackers to execute arbitrary code via a crafted WRF file, aka Bug ID CSCtz72850. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/86140 - http://www.securitytracker.com/id?1027639 - http://www.securityfocus.com/bid/55866 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20121010-webex
CVE ID: CVE-2012-3946 State: PUBLISHED Published: 2014-04-24T10:00:00 Last Updated: 2024-08-06T20:21:04.050Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS before 15.3(2)S allows remote attackers to bypass interface ACL restrictions in opportunistic circumstances by sending IPv6 packets in an unspecified scenario in which expected packet drops do not occur for "a small percentage" of the packets, aka Bug ID CSCty73682. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/c/en/us/td/docs/ios/15_3s/release/notes/15_3s_rel_notes/15_3s_caveats_15_3_2s.html
CVE ID: CVE-2012-3949 State: PUBLISHED Published: 2012-09-27T00:00:00 Last Updated: 2024-08-06T20:21:04.181Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SIP implementation in Cisco Unified Communications Manager (CUCM) 6.x and 7.x before 7.1(5b)su5, 8.x before 8.5(1)su4, and 8.6 before 8.6(2a)su1; Cisco IOS 12.2 through 12.4 and 15.0 through 15.2; and Cisco IOS XE 3.3.xSG before 3.3.1SG, 3.4.xS, and 3.5.xS allows remote attackers to cause a denial of service (service crash or device reload) via a crafted SIP message containing an SDP session description, aka Bug IDs CSCtw66721, CSCtj33003, and CSCtw84664. Additional Analyst Notes: - CVE Program Container: References: - htt
aka Bug IDs CSCtw66721, CSCtj33003, and CSCtw84664. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120926-cucm - http://secunia.com/advisories/50774 - http://osvdb.org/85816 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120926-sip - http://www.securityfocus.com/bid/55697
CVE ID: CVE-2012-3950 State: PUBLISHED Published: 2012-09-27T00:00:00 Last Updated: 2024-08-06T20:21:04.114Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Intrusion Prevention System (IPS) feature in Cisco IOS 12.3 through 12.4 and 15.0 through 15.2, in certain configurations of enabled categories and missing signatures, allows remote attackers to cause a denial of service (device reload) via DNS packets, aka Bug ID CSCtw55976. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120926-ios-ips - http://www.securityfocus.com/bid/55695 - https://exchange.xforce.ibmcloud.com/vulnerabili
ry/cisco-sa-20120926-ios-ips - http://www.securityfocus.com/bid/55695 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78882 - http://secunia.com/advisories/50777 - http://www.securitytracker.com/id?1027580
CVE ID: CVE-2012-3951 State: PUBLISHED Published: 2012-07-31T10:00:00Z Last Updated: 2024-09-17T03:07:09.522Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MySQL component in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) 9.0.1.19899 and earlier has a default password of admin for the (1) scrutinizer and (2) scrutremote accounts, which allows remote attackers to execute arbitrary SQL commands via a TCP session. Additional Analyst Notes: - CVE Program Container: References: - https://www.trustwave.com/spiderlabs/advisories/TWSL2012-014.txt - http://www.plixer.com/Press-Releases/plixer-releases-9-5-2.html
CVE ID: CVE-2012-3952 State: PUBLISHED Published: 2012-08-12T00:00:00 Last Updated: 2024-08-06T20:21:04.042Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in admin/index.php in phpList before 2.10.19 allows remote attackers to inject arbitrary web script or HTML via the unconfirmed parameter to the user page. Additional Analyst Notes: - CVE Program Container: References: - http://www.phplist.com/?lid=579 - https://www.htbridge.com/advisory/HTB23100 - https://exchange.xforce.ibmcloud.com/vulnerabilities/77526 - http://www.securityfocus.com/bid/54887 - http://archives.neohapsis.com/archives/bugtraq/2012-08/0059.html - http://secunia.com/adv
.securityfocus.com/bid/54887 - http://archives.neohapsis.com/archives/bugtraq/2012-08/0059.html - http://secunia.com/advisories/50150 - http://osvdb.org/84482
CVE ID: CVE-2012-3953 State: PUBLISHED Published: 2012-08-12T00:00:00 Last Updated: 2024-08-06T20:21:04.190Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin/index.php in phpList before 2.10.19 allows remote administrators to execute arbitrary SQL commands via the delete parameter to the editattributes page. Additional Analyst Notes: - CVE Program Container: References: - http://www.phplist.com/?lid=579 - https://www.htbridge.com/advisory/HTB23100 - http://archives.neohapsis.com/archives/bugtraq/2012-08/0059.html - http://osvdb.org/84483 - https://exchange.xforce.ibmcloud.com/vulnerabilities/77527
CVE ID: CVE-2012-3954 State: PUBLISHED Published: 2012-07-25T10:00:00 Last Updated: 2024-08-06T20:21:04.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple memory leaks in ISC DHCP 4.1.x and 4.2.x before 4.2.4-P1 and 4.1-ESV before 4.1-ESV-R6 allow remote attackers to cause a denial of service (memory consumption) by sending many requests. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1027300 - http://www.debian.org/security/2012/dsa-2516 - http://rhn.redhat.com/errata/RHSA-2012-1141.html - http://www.mandriva.com/security/advisories?name=MDVSA-2012:116 - http://lists.opensuse.org/opensuse-updates/2012-08/msg00030.html
.mandriva.com/security/advisories?name=MDVSA-2012:116 - http://lists.opensuse.org/opensuse-updates/2012-08/msg00030.html - http://www.mandriva.com/security/advisories?name=MDVSA-2012:115 - http://www.debian.org/security/2012/dsa-2519 - http://www.ubuntu.com/usn/USN-1519-1 - https://kb.isc.org/article/AA-00737 - http://security.gentoo.org/glsa/glsa-201301-06.xml - http://www.securityfocus.com/bid/54665
CVE ID: CVE-2012-3955 State: PUBLISHED Published: 2012-09-14T10:00:00 Last Updated: 2024-08-06T20:21:04.060Z Vendors: n/a Products: n/a Problem Types: n/a Description: ISC DHCP 4.1.x before 4.1-ESV-R7 and 4.2.x before 4.2.4-P2 allows remote attackers to cause a denial of service (daemon crash) in opportunistic circumstances by establishing an IPv6 lease in an environment where the lease expiration time is later reduced. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2012-September/088220.html - http://lists.opensuse.org/opensuse-updates/2012-09/msg00103.html - http://www.ubuntu.com/usn/USN-1571-1 - http://lists.opens
://lists.opensuse.org/opensuse-updates/2012-09/msg00103.html - http://www.ubuntu.com/usn/USN-1571-1 - http://lists.opensuse.org/opensuse-updates/2012-09/msg00088.html - http://www.debian.org/security/2012/dsa-2551 - http://secunia.com/advisories/51318 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:153 - http://lists.fedoraproject.org/pipermail/package-announce/2012-September/086992.html - http://www.securityfocus.com/bid/55530 - http://lists.fedoraproject.org/pipermail/package-announce/2012-October/088882.html - http://rhn.redhat.com/errata/RHSA-2013-0504.html - https://blogs.oracle.com/sunsecurity/entry/cve_2012_3955_denial_of - http://lists.opensuse.org/opensuse-updates/2012
l - https://blogs.oracle.com/sunsecurity/entry/cve_2012_3955_denial_of - http://lists.opensuse.org/opensuse-updates/2012-09/msg00105.html - http://security.gentoo.org/glsa/glsa-201301-06.xml - https://kb.isc.org/article/AA-00779 - http://www.securitytracker.com/id?1027528
CVE ID: CVE-2012-3956 State: PUBLISHED Published: 2012-08-29T10:00:00 Last Updated: 2024-08-06T20:21:04.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the MediaStreamGraphThreadRunnable::Run function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2012-1211.html - http://www.securityfocus.com/bid/55320 - http://www.moz
References: - http://rhn.redhat.com/errata/RHSA-2012-1211.html - http://www.securityfocus.com/bid/55320 - http://www.mozilla.org/security/announce/2012/mfsa2012-58.html - https://bugzilla.mozilla.org/show_bug.cgi?id=774597 - http://www.ubuntu.com/usn/USN-1548-1 - http://www.ubuntu.com/usn/USN-1548-2 - http://rhn.redhat.com/errata/RHSA-2012-1210.html - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16997 - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00011.html - http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html - http://www.xerox.com
012-09/msg00011.html - http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html - http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf
CVE ID: CVE-2012-3957 State: PUBLISHED Published: 2012-08-29T10:00:00 Last Updated: 2024-08-06T20:21:04.192Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the nsBlockFrame::MarkLineDirty function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2012-1211.html - http://www.securityfocus.com/bid/55341 - http://www.mozilla.org/security/announce/2012/mfsa2012-58.html - https://bugzi
http://www.securityfocus.com/bid/55341 - http://www.mozilla.org/security/announce/2012/mfsa2012-58.html - https://bugzilla.mozilla.org/show_bug.cgi?id=774548 - http://www.ubuntu.com/usn/USN-1548-1 - http://www.ubuntu.com/usn/USN-1548-2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16940 - http://rhn.redhat.com/errata/RHSA-2012-1210.html - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00011.html - http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html - http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XR
ty-announce/2012-08/msg00028.html - http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf
CVE ID: CVE-2012-3958 State: PUBLISHED Published: 2012-08-29T10:00:00 Last Updated: 2024-08-06T20:21:04.452Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the nsHTMLEditRules::DeleteNonTableElements function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16782 - http://
er: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16782 - http://rhn.redhat.com/errata/RHSA-2012-1211.html - https://bugzilla.mozilla.org/show_bug.cgi?id=772346 - http://www.mozilla.org/security/announce/2012/mfsa2012-58.html - http://www.ubuntu.com/usn/USN-1548-1 - http://www.securityfocus.com/bid/55323 - http://www.ubuntu.com/usn/USN-1548-2 - http://rhn.redhat.com/errata/RHSA-2012-1210.html - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00011.html - http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html - http://www.xerox
ce/2012-09/msg00011.html - http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html - http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf
CVE ID: CVE-2012-3959 State: PUBLISHED Published: 2012-08-29T10:00:00 Last Updated: 2024-08-06T20:21:04.157Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the nsRangeUpdater::SelAdjDeleteNode function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16805 - http://www.deb
erences: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16805 - http://www.debian.org/security/2012/dsa-2556 - https://bugzilla.mozilla.org/show_bug.cgi?id=771994 - http://rhn.redhat.com/errata/RHSA-2012-1211.html - http://www.securityfocus.com/bid/55324 - http://www.mozilla.org/security/announce/2012/mfsa2012-58.html - http://www.debian.org/security/2012/dsa-2553 - http://www.ubuntu.com/usn/USN-1548-1 - http://www.ubuntu.com/usn/USN-1548-2 - http://rhn.redhat.com/errata/RHSA-2012-1210.html - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html - http://www.debian.org/security/2012/dsa-2554 - http://lists.opensuse.org/opensuse-s
ity-announce/2012-09/msg00014.html - http://www.debian.org/security/2012/dsa-2554 - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00011.html - http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html - http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf
CVE ID: CVE-2012-3960 State: PUBLISHED Published: 2012-08-29T10:00:00 Last Updated: 2024-08-06T20:21:04.035Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the mozSpellChecker::SetCurrentDictionary function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2012-1211.html - https://oval.cisecurity.org/repository/search/definit
: References: - http://rhn.redhat.com/errata/RHSA-2012-1211.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16853 - http://www.mozilla.org/security/announce/2012/mfsa2012-58.html - http://www.ubuntu.com/usn/USN-1548-1 - http://www.ubuntu.com/usn/USN-1548-2 - http://rhn.redhat.com/errata/RHSA-2012-1210.html - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00011.html - https://bugzilla.mozilla.org/show_bug.cgi?id=771976 - http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html - http://www.xerox.com/download/security/security-bulletin/16
nsuse.org/opensuse-security-announce/2012-08/msg00028.html - http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf - http://www.securityfocus.com/bid/55325
CVE ID: CVE-2012-3961 State: PUBLISHED Published: 2012-08-29T10:00:00 Last Updated: 2024-08-06T20:21:04.212Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the RangeData implementation in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=771873 - http://rhn.redhat.com/errata/RHSA-2012-1211.html - http://www.securityfo
//bugzilla.mozilla.org/show_bug.cgi?id=771873 - http://rhn.redhat.com/errata/RHSA-2012-1211.html - http://www.securityfocus.com/bid/55321 - http://www.mozilla.org/security/announce/2012/mfsa2012-58.html - http://www.ubuntu.com/usn/USN-1548-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16514 - http://www.ubuntu.com/usn/USN-1548-2 - http://rhn.redhat.com/errata/RHSA-2012-1210.html - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00011.html - http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html - http://www.xerox.com/download/security/s
- http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html - http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf
CVE ID: CVE-2012-3962 State: PUBLISHED Published: 2012-08-29T10:00:00 Last Updated: 2024-08-06T20:21:04.157Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 do not properly iterate through the characters in a text run, which allows remote attackers to execute arbitrary code via a crafted document. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2012/dsa-2556 - http://rhn.redhat.com/errata/RHSA-2012-1211.html - http://www.mozilla.org/security/announce/2012/mfsa2012-58.html - http://www.deb