Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2012-1518 State: PUBLISHED Published: 2012-04-17T21:00:00 Last Updated: 2024-08-06T19:01:01.226Z Vendors: n/a Products: n/a Problem Types: n/a Description: VMware Workstation 8.x before 8.0.2, VMware Player 4.x before 4.0.2, VMware Fusion 4.x before 4.1.2, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 use an incorrect ACL for the VMware Tools folder, which allows guest OS users to gain guest OS privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/48782 - http://osvdb.org/81163 - http://www.securitytracker.com/id?1026922 - http://www.securityfocus.com/bid/53006 - http://www.vmware.com/secur
81163 - http://www.securitytracker.com/id?1026922 - http://www.securityfocus.com/bid/53006 - http://www.vmware.com/security/advisories/VMSA-2012-0007.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16745 - http://www.securitytracker.com/id?1026923
CVE ID: CVE-2012-1520 State: PUBLISHED Published: 2012-07-25T20:00:00 Last Updated: 2024-08-06T19:01:02.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT5485 - http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html - http://support.apple.com/kb/HT5503 - http://lists.apple.com/archives/security-announ
CVE ID: CVE-2012-1521 State: PUBLISHED Published: 2012-05-01T10:00:00 Last Updated: 2024-08-06T19:01:01.561Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the XML parser in Google Chrome before 18.0.1025.168 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2012/04/stable-channel-update_30.html - http://secunia.com/advisories/48992 - http://www.securitytracker.com/id?1027001 - http://support.apple.com/kb/HT5485 - http://lists.apple.com/archives/security-announce/2012/Sep/msg0000
com/id?1027001 - http://support.apple.com/kb/HT5485 - http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html - http://support.apple.com/kb/HT5503 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75270 - http://osvdb.org/81644 - http://security.gentoo.org/glsa/glsa-201205-01.xml - http://code.google.com/p/chromium/issues/detail?id=117110 - http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html - http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15397 - http://support.apple.com/kb/HT5400 - http://www.securityfocus.com/bid/53309
CVE ID: CVE-2012-1522 State: PUBLISHED Published: 2012-07-10T21:00:00 Last Updated: 2024-08-06T19:01:01.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "Cached Object Remote Code Execution Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-044 - http://www.us-cert.gov/cas/techalerts/TA12-192A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15464
CVE ID: CVE-2012-1523 State: PUBLISHED Published: 2012-06-12T22:00:00 Last Updated: 2024-08-06T19:01:02.509Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "Center Element Remote Code Execution Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA12-164A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-037 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15579
CVE ID: CVE-2012-1524 State: PUBLISHED Published: 2012-07-10T21:00:00 Last Updated: 2024-08-06T19:01:02.059Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "Attribute Remove Remote Code Execution Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-044 - http://www.us-cert.gov/cas/techalerts/TA12-192A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15595
CVE ID: CVE-2012-1525 State: PUBLISHED Published: 2012-08-15T10:00:00 Last Updated: 2024-08-06T19:01:01.139Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allows attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16422 - http://www.adobe.com/support/security/bulletins/apsb12-16.html - http://security.gentoo.org/glsa/glsa-201308-03.xml
CVE ID: CVE-2012-1526 State: PUBLISHED Published: 2012-08-15T01:00:00 Last Updated: 2024-08-06T19:01:02.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 and 7 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not initialized or (2) is deleted, aka "Layout Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-052 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15240 - http://www.us-cert.gov/cas/techaler
al.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15240 - http://www.us-cert.gov/cas/techalerts/TA12-227A.html
CVE ID: CVE-2012-1527 State: PUBLISHED Published: 2012-11-14T00:00:00 Last Updated: 2024-08-06T19:01:01.761Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer underflow in Windows Shell in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, and Windows Server 2012 allows local users to gain privileges via a crafted briefcase, aka "Windows Briefcase Integer Underflow Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-072 - http://secunia.com/advisories/51221 - http://ww
s.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-072 - http://secunia.com/advisories/51221 - http://www.us-cert.gov/cas/techalerts/TA12-318A.html - http://www.securitytracker.com/id?1027748 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15975
CVE ID: CVE-2012-1528 State: PUBLISHED Published: 2012-11-14T00:00:00 Last Updated: 2024-08-06T19:01:01.882Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in Windows Shell in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, and Windows Server 2012 allows local users to gain privileges via a crafted briefcase, aka "Windows Briefcase Integer Overflow Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15528 - https://docs.microsoft.com/en-us/secur
cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15528 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-072 - http://secunia.com/advisories/51221 - http://www.us-cert.gov/cas/techalerts/TA12-318A.html - http://www.securitytracker.com/id?1027748
CVE ID: CVE-2012-1529 State: PUBLISHED Published: 2012-09-21T21:00:00 Last Updated: 2024-08-06T19:01:01.718Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to an object that (1) was not properly initialized or (2) is deleted, aka "OnMove Use After Free Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15852 - http://www.securitytracker.com/id?1027555 - http://www.securityfocus.com/bid/55641 - https://exch
e.oval%3Adef%3A15852 - http://www.securitytracker.com/id?1027555 - http://www.securityfocus.com/bid/55641 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78756 - http://www.us-cert.gov/cas/techalerts/TA12-255A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-063
CVE ID: CVE-2012-1530 State: PUBLISHED Published: 2013-01-10T11:00:00 Last Updated: 2024-08-06T19:01:01.360Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the XSLT engine in Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a PDF file containing an XSL file that triggers memory corruption when the lang function processes XML data with a crafted node-set. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00004.html - http://www.verisigninc.com
r: References: - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00004.html - http://www.verisigninc.com/en_US/products-and-services/network-intelligence-availability/idefense/public-vulnerability-reports/articles/index.xhtml?id=1019 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16094 - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00005.html - http://lists.opensuse.org/opensuse-updates/2013-01/msg00081.html - http://lists.opensuse.org/opensuse-updates/2013-01/msg00028.html - http://www.adobe.com/support/security/bulletins/apsb13-02.html - http://rhn.redhat.com/errata/RHSA-2013-0150.html - http://security.gentoo.org
upport/security/bulletins/apsb13-02.html - http://rhn.redhat.com/errata/RHSA-2013-0150.html - http://security.gentoo.org/glsa/glsa-201308-03.xml
CVE ID: CVE-2012-1531 State: PUBLISHED Published: 2012-10-16T21:29:00 Last Updated: 2024-08-06T19:01:01.537Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0 Update 36 and earlier, and 1.4.2_38 and earlier; and JavaFX 2.2 and earlier; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/51313 - http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00016.html - http://www.hitac
nia.com/advisories/51313 - http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00016.html - http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS12-023/index.html - http://www.securityfocus.com/bid/56033 - http://rhn.redhat.com/errata/RHSA-2012-1466.html - http://secunia.com/advisories/51315 - http://secunia.com/advisories/51438 - http://secunia.com/advisories/51141 - http://marc.info/?l=bugtraq&m=135758563611658&w=2 - http://www-01.ibm.com/support/docview.wss?uid=swg21621154 - http://rhn.redhat.com/errata/RHSA-2013-1455.html - http://rhn.redhat.com/errata/RHSA-2012-1391.html - http://www-01.ibm.com/support/docview.wss?uid=swg21620037 - http://marc.info/?l=bugtraq
com/errata/RHSA-2012-1391.html - http://www-01.ibm.com/support/docview.wss?uid=swg21620037 - http://marc.info/?l=bugtraq&m=135758563611658&w=2 - http://secunia.com/advisories/51390 - http://rhn.redhat.com/errata/RHSA-2012-1392.html - http://www-01.ibm.com/support/docview.wss?uid=swg21631786 - http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00010.html - http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00022.html - http://www-01.ibm.com/support/docview.wss?uid=swg21616490 - http://secunia.com/advisories/51327 - http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval
topics/security/cpuoct2012-1515893.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16546 - http://rhn.redhat.com/errata/RHSA-2012-1467.html - http://rhn.redhat.com/errata/RHSA-2012-1465.html - http://secunia.com/advisories/51328 - http://marc.info/?l=bugtraq&m=135542848327757&w=2 - http://rhn.redhat.com/errata/RHSA-2013-1456.html - http://secunia.com/advisories/51393 - http://www.oracle.com/technetwork/topics/security/javacpuoct2012-1515924.html - http://secunia.com/advisories/51326 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:150 - http://www-01.ibm.com/support/docview.wss?uid=swg21625794 - http://www.xerox.com/download/security
name=MDVSA-2013:150 - http://www-01.ibm.com/support/docview.wss?uid=swg21625794 - http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf - http://marc.info/?l=bugtraq&m=135542848327757&w=2
CVE ID: CVE-2012-1532 State: PUBLISHED Published: 2012-10-16T21:29:00 Last Updated: 2024-08-06T19:01:02.145Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier and 6 Update 35 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00016.html - http://rhn.redhat.com/errata/RHSA-2012-1466.html - http://secunia.com/advisories/51438 - http://marc.info/?l=bugtraq&m=135758
//rhn.redhat.com/errata/RHSA-2012-1466.html - http://secunia.com/advisories/51438 - http://marc.info/?l=bugtraq&m=135758563611658&w=2 - http://www-01.ibm.com/support/docview.wss?uid=swg21621154 - http://www.securityfocus.com/bid/56051 - http://rhn.redhat.com/errata/RHSA-2013-1455.html - http://rhn.redhat.com/errata/RHSA-2012-1391.html - http://www-01.ibm.com/support/docview.wss?uid=swg21620037 - http://marc.info/?l=bugtraq&m=135758563611658&w=2 - http://secunia.com/advisories/51390 - http://rhn.redhat.com/errata/RHSA-2012-1392.html - http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00022.html - http://www-01.ibm.com/support/docview.wss?uid=swg21616490 - http://secunia.com/advi
ity-announce/2012-11/msg00022.html - http://www-01.ibm.com/support/docview.wss?uid=swg21616490 - http://secunia.com/advisories/51327 - http://rhn.redhat.com/errata/RHSA-2012-1467.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16556 - http://marc.info/?l=bugtraq&m=135542848327757&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/79417 - http://rhn.redhat.com/errata/RHSA-2013-1456.html - http://www.oracle.com/technetwork/topics/security/javacpuoct2012-1515924.html - http://secunia.com/advisories/51326 - http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf - http://marc.info/?l=bugtraq&m=1355
com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf - http://marc.info/?l=bugtraq&m=135542848327757&w=2
CVE ID: CVE-2012-1533 State: PUBLISHED Published: 2012-10-16T21:29:00 Last Updated: 2024-08-06T19:01:01.700Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, and 6 Update 35 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2012-3159. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00016.html - http://rhn.redhat.com/errata/RHSA-2012-1466.html - http://secunia.com/advisor
-security-announce/2012-10/msg00016.html - http://rhn.redhat.com/errata/RHSA-2012-1466.html - http://secunia.com/advisories/51438 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16648 - http://marc.info/?l=bugtraq&m=135758563611658&w=2 - http://www-01.ibm.com/support/docview.wss?uid=swg21621154 - http://rhn.redhat.com/errata/RHSA-2013-1455.html - http://rhn.redhat.com/errata/RHSA-2012-1391.html - http://www-01.ibm.com/support/docview.wss?uid=swg21620037 - http://marc.info/?l=bugtraq&m=135758563611658&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/79416 - http://secunia.com/advisories/51390 - http://rhn.redhat.com/errata/RHSA-2012-1392.html
cloud.com/vulnerabilities/79416 - http://secunia.com/advisories/51390 - http://rhn.redhat.com/errata/RHSA-2012-1392.html - http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00022.html - http://www-01.ibm.com/support/docview.wss?uid=swg21616490 - http://secunia.com/advisories/51327 - http://rhn.redhat.com/errata/RHSA-2012-1467.html - http://marc.info/?l=bugtraq&m=135542848327757&w=2 - http://rhn.redhat.com/errata/RHSA-2013-1456.html - http://www.securityfocus.com/bid/56046 - http://www.oracle.com/technetwork/topics/security/javacpuoct2012-1515924.html - http://secunia.com/advisories/51326 - http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-0
secunia.com/advisories/51326 - http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf - http://marc.info/?l=bugtraq&m=135542848327757&w=2
CVE ID: CVE-2012-1534 State: REJECTED Published: 2012-08-21T23:00:00Z Last Updated: 2024-09-16T22:10:21.467Z Description: No description available.
CVE ID: CVE-2012-1535 State: PUBLISHED Published: 2012-08-15T10:00:00.000Z Last Updated: 2025-10-22T00:05:46.712Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Adobe Flash Player before 11.3.300.271 on Windows and Mac OS X and before 11.2.202.238 on Linux allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted SWF content, as exploited in the wild in August 2012 with SWF content in a Word document. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.adobe.com/support/security/bulletins/apsb12-18.html - http://rhn.redhat.com/errata/RHSA-2012-1203.ht
ences: - http://www.adobe.com/support/security/bulletins/apsb12-18.html - http://rhn.redhat.com/errata/RHSA-2012-1203.html - http://security.gentoo.org/glsa/glsa-201209-01.xml - http://marc.info/?l=bugtraq&m=139455789818399&w=2 - http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00012.html - http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00010.html
CVE ID: CVE-2012-1537 State: PUBLISHED Published: 2012-12-12T00:00:00 Last Updated: 2024-08-06T19:01:01.881Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in DirectPlay in DirectX 9.0 through 11.1 in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, and Windows Server 2012 allows remote attackers to execute arbitrary code via a crafted Office document, aka "DirectPlay Heap Overflow Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA12-346A.html - https://docs.microsoft.com/en-us/se
gram Container: References: - http://www.us-cert.gov/cas/techalerts/TA12-346A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-082 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16086
CVE ID: CVE-2012-1538 State: PUBLISHED Published: 2012-11-14T00:00:00 Last Updated: 2024-08-06T19:01:02.725Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code via a crafted web site, aka "CFormElement Use After Free Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1027749 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15677 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-071 - http://secunia.com/advisories/51202 - http://www.us-cert.go
com/en-us/security-updates/securitybulletins/2012/ms12-071 - http://secunia.com/advisories/51202 - http://www.us-cert.gov/cas/techalerts/TA12-318A.html - http://www.securityfocus.com/bid/56420
CVE ID: CVE-2012-1539 State: PUBLISHED Published: 2012-11-14T00:00:00 Last Updated: 2024-10-21T16:49:21.204Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code via a crafted web site, aka "CTreePos Use After Free Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15886 - http://www.securitytracker.com/id?1027749 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-071 - http://www.securityfocus.com/bid/56421
tps://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-071 - http://www.securityfocus.com/bid/56421 - http://secunia.com/advisories/51202 - http://www.us-cert.gov/cas/techalerts/TA12-318A.html
CVE ID: CVE-2012-1541 State: PUBLISHED Published: 2013-02-02T00:00:00 Last Updated: 2024-08-06T19:01:01.408Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than other CVEs listed in the February 2013 CPU. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from a third party that the issue is due to an interaction error in between the JRE plug-in for WebKit
mmented on claims from a third party that the issue is due to an interaction error in between the JRE plug-in for WebKit-based browsers and the Javascript engine, which allows remote attackers to execute arbitrary code by modifying DOM nodes that contain applet elements in a way that triggers an incorrect reference count and a use after free. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19070 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19499 - http://marc.info/?l=bugtraq&m=136570436423916&w=2 - http://www.us-cert.gov/cas/techalerts/TA13-032A.