Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-4035 State: PUBLISHED Published: 2010-10-21T18:12:00 Last Updated: 2024-08-07T03:34:36.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 7.0.517.41 does not properly perform autofill operations for forms, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted HTML document. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/2731 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6867 - http://code.google.com/p/chromium/issues/detail?id=50428 - http://secunia.com/advi
/oval%3Aorg.mitre.oval%3Adef%3A6867 - http://code.google.com/p/chromium/issues/detail?id=50428 - http://secunia.com/advisories/41888 - http://www.securityfocus.com/bid/44241 - http://googlechromereleases.blogspot.com/2010/10/stable-channel-update.html
CVE ID: CVE-2010-4036 State: PUBLISHED Published: 2010-10-21T18:12:00 Last Updated: 2024-08-07T03:34:36.778Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 7.0.517.41 does not properly handle the unloading of a page, which allows remote attackers to spoof URLs via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/2731 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7627 - http://secunia.com/advisories/41888 - http://www.securityfocus.com/bid/44241 - http://googlechromereleases.blogspot.com/2010/10/stable-channel-update.html - http://code.g
ecurityfocus.com/bid/44241 - http://googlechromereleases.blogspot.com/2010/10/stable-channel-update.html - http://code.google.com/p/chromium/issues/detail?id=51680
CVE ID: CVE-2010-4037 State: PUBLISHED Published: 2010-10-21T18:12:00 Last Updated: 2024-08-07T03:34:36.900Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Google Chrome before 7.0.517.41 allows remote attackers to bypass the pop-up blocker via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/2731 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6790 - http://code.google.com/p/chromium/issues/detail?id=53002 - http://secunia.com/advisories/41888 - http://www.securityfocus.com/bid/44241 - http://googlechromereleases.blogspot.com/2010/10
secunia.com/advisories/41888 - http://www.securityfocus.com/bid/44241 - http://googlechromereleases.blogspot.com/2010/10/stable-channel-update.html
CVE ID: CVE-2010-4038 State: PUBLISHED Published: 2010-10-21T18:12:00 Last Updated: 2024-08-07T03:34:37.213Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Web Sockets implementation in Google Chrome before 7.0.517.41 does not properly handle a shutdown action, which allows remote attackers to cause a denial of service (application crash) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/2731 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13930 - http://code.google.com/p/chromium/issues/detail?id=53985 - http://secunia.com/advisories/41888 - http://ww
def%3A13930 - http://code.google.com/p/chromium/issues/detail?id=53985 - http://secunia.com/advisories/41888 - http://www.securityfocus.com/bid/44241 - http://googlechromereleases.blogspot.com/2010/10/stable-channel-update.html
CVE ID: CVE-2010-4039 State: PUBLISHED Published: 2010-10-21T18:12:00 Last Updated: 2024-08-07T03:34:36.683Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 7.0.517.41 on Linux does not properly set the PATH environment variable, which has unspecified impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14223 - http://code.google.com/p/chromium/issues/detail?id=54132 - http://www.vupen.com/english/advisories/2010/2731 - http://secunia.com/advisories/41888 - http://www.securityfocus.com/bid/44241 - http://googlechromereleases.blogspot.co
- http://secunia.com/advisories/41888 - http://www.securityfocus.com/bid/44241 - http://googlechromereleases.blogspot.com/2010/10/stable-channel-update.html
CVE ID: CVE-2010-4040 State: PUBLISHED Published: 2010-10-21T18:12:00 Last Updated: 2024-08-07T03:34:36.803Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 7.0.517.41 does not properly handle animated GIF images, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted image. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2011:039 - http://secunia.com/advisories/43068 - http://www.vupen.com/english/advisories/2010/2731 - http://code.google.com/p/chromium/issues/detail?id=54500 - http://www.vupen.com/english/adv
glish/advisories/2010/2731 - http://code.google.com/p/chromium/issues/detail?id=54500 - http://www.vupen.com/english/advisories/2011/0212 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - http://www.debian.org/security/2011/dsa-2188 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7646 - http://www.vupen.com/english/advisories/2011/0552 - http://secunia.com/advisories/41888 - http://www.securityfocus.com/bid/44241 - http://googlechromereleases.blogspot.com/2010/10/stable-channel-update.html
CVE ID: CVE-2010-4041 State: PUBLISHED Published: 2010-10-21T18:12:00 Last Updated: 2024-08-07T03:34:36.870Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sandbox implementation in Google Chrome before 7.0.517.41 on Linux does not properly constrain worker processes, which might allow remote attackers to bypass intended access restrictions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/2731 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14201 - http://code.google.com/p/chromium/issues/detail?id=54794 - http://secunia.com/advisories/41888 - http://
3Adef%3A14201 - http://code.google.com/p/chromium/issues/detail?id=54794 - http://secunia.com/advisories/41888 - http://www.securityfocus.com/bid/44241 - http://googlechromereleases.blogspot.com/2010/10/stable-channel-update.html
CVE ID: CVE-2010-4042 State: PUBLISHED Published: 2010-10-21T18:12:00 Last Updated: 2024-08-07T03:34:37.295Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 7.0.517.41 does not properly handle element maps, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to "stale elements." Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html - http://www.vupen.com/english/advisories/2010/2731 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6654 - http://secunia.com/advisories/4
://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6654 - http://secunia.com/advisories/41888 - http://www.securityfocus.com/bid/44241 - http://googlechromereleases.blogspot.com/2010/10/stable-channel-update.html - http://code.google.com/p/chromium/issues/detail?id=56451
CVE ID: CVE-2010-4043 State: PUBLISHED Published: 2010-10-21T18:12:00 Last Updated: 2024-08-07T03:34:37.649Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera before 10.63 does not prevent interpretation of a cross-origin document as a CSS stylesheet when the document lacks a CSS token sequence, which allows remote attackers to obtain sensitive information via a crafted document. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1024570 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12208 - http://www.opera.com/docs/changelogs/mac/1063/ - http://www.opera.com/support/kb/view/971/ - http://se
l%3Adef%3A12208 - http://www.opera.com/docs/changelogs/mac/1063/ - http://www.opera.com/support/kb/view/971/ - http://secunia.com/advisories/41740 - http://www.opera.com/docs/changelogs/unix/1063/ - http://www.opera.com/docs/changelogs/windows/1063/
CVE ID: CVE-2010-4044 State: PUBLISHED Published: 2010-10-21T18:12:00 Last Updated: 2024-08-07T03:34:36.751Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera before 10.63 does not ensure that the portion of a URL shown in the Address Bar contains the beginning of the URL, which allows remote attackers to spoof URLs by changing a window's size. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12135 - http://www.opera.com/support/kb/view/972/ - http://securitytracker.com/id?1024570 - http://www.opera.com/docs/changelogs/mac/1063/ - http://secunia.com/advisories/41740 - http://
ytracker.com/id?1024570 - http://www.opera.com/docs/changelogs/mac/1063/ - http://secunia.com/advisories/41740 - http://www.opera.com/docs/changelogs/unix/1063/ - http://www.opera.com/docs/changelogs/windows/1063/
CVE ID: CVE-2010-4045 State: PUBLISHED Published: 2010-10-21T18:12:00 Last Updated: 2024-08-07T03:34:37.233Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera before 10.63 does not properly restrict web script in unspecified circumstances involving reloads and redirects, which allows remote attackers to spoof the Address Bar, conduct cross-site scripting (XSS) attacks, and possibly execute arbitrary code by leveraging the ability of a script to interact with a web page from (1) a different domain or (2) a different security context. Additional Analyst Notes: - CVE Program Container: References: - http://www.opera.com/support/kb/view/973/ - http://securitytracker.com/id?1024570
- CVE Program Container: References: - http://www.opera.com/support/kb/view/973/ - http://securitytracker.com/id?1024570 - http://www.opera.com/docs/changelogs/mac/1063/ - http://secunia.com/advisories/41740 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12071 - http://www.opera.com/docs/changelogs/unix/1063/ - http://www.opera.com/docs/changelogs/windows/1063/
CVE ID: CVE-2010-4046 State: PUBLISHED Published: 2010-10-21T18:12:00 Last Updated: 2024-08-07T03:34:36.340Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera before 10.63 does not properly verify the origin of video content, which allows remote attackers to obtain sensitive information by using a video stream as HTML5 canvas content. Additional Analyst Notes: - CVE Program Container: References: - https://technet.microsoft.com/library/security/msvr11-002 - http://securitytracker.com/id?1024570 - http://www.opera.com/support/kb/view/974/ - http://www.opera.com/docs/changelogs/mac/1063/ - http://secunia.com/advisories/41740 - https://oval.cisecurity.org/repository/search/defini
m/docs/changelogs/mac/1063/ - http://secunia.com/advisories/41740 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11937 - http://www.opera.com/docs/changelogs/unix/1063/ - http://www.opera.com/docs/changelogs/windows/1063/
CVE ID: CVE-2010-4047 State: PUBLISHED Published: 2010-10-21T18:12:00 Last Updated: 2024-08-07T03:34:36.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera before 10.63 does not properly select the security context of JavaScript code associated with an error page, which allows user-assisted remote attackers to conduct cross-site scripting (XSS) attacks via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1024570 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12115 - http://www.opera.com/docs/changelogs/mac/1063/ - http://www.opera.com/support/kb/view/976/ - http://sec
%3Adef%3A12115 - http://www.opera.com/docs/changelogs/mac/1063/ - http://www.opera.com/support/kb/view/976/ - http://secunia.com/advisories/41740 - http://www.opera.com/docs/changelogs/unix/1063/ - http://www.opera.com/docs/changelogs/windows/1063/
CVE ID: CVE-2010-4048 State: PUBLISHED Published: 2010-10-21T18:12:00 Last Updated: 2024-08-07T03:34:36.896Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera before 10.63 allows user-assisted remote web servers to cause a denial of service (application crash) by sending a redirect during the saving of a file. Additional Analyst Notes: - CVE Program Container: References: - http://www.opera.com/docs/changelogs/mac/1063/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12054 - http://www.opera.com/docs/changelogs/unix/1063/ - http://www.opera.com/docs/changelogs/windows/1063/
CVE ID: CVE-2010-4049 State: PUBLISHED Published: 2010-10-21T18:12:00 Last Updated: 2024-08-07T03:34:36.815Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera before 10.63 allows remote attackers to cause a denial of service (application crash) via a Flash movie with a transparent Window Mode (aka wmode) property, which is not properly handled during navigation away from the containing HTML document. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12263 - http://www.opera.com/docs/changelogs/mac/1063/ - http://www.opera.com/docs/changelogs/unix/1063/ - http://www.opera.com/d
ttp://www.opera.com/docs/changelogs/mac/1063/ - http://www.opera.com/docs/changelogs/unix/1063/ - http://www.opera.com/docs/changelogs/windows/1063/
CVE ID: CVE-2010-4050 State: PUBLISHED Published: 2010-10-21T18:12:00 Last Updated: 2024-08-07T03:34:37.231Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera before 10.63 allows remote attackers to cause a denial of service (memory corruption) by referencing an SVG document in an IMG element. Additional Analyst Notes: - CVE Program Container: References: - http://www.opera.com/docs/changelogs/mac/1063/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11699 - http://www.opera.com/docs/changelogs/unix/1063/ - http://www.opera.com/docs/changelogs/windows/1063/
CVE ID: CVE-2010-4051 State: PUBLISHED Published: 2011-01-13T18:35:00 Last Updated: 2024-08-07T03:34:37.117Z Vendors: n/a Products: n/a Problem Types: n/a Description: The regcomp implementation in the GNU C Library (aka glibc or libc6) through 2.11.3, and 2.12.x through 2.12.2, allows context-dependent attackers to cause a denial of service (application crash) via a regular expression containing adjacent bounded repetitions that bypass the intended RE_DUP_MAX limitation, as demonstrated by a {10,}{10,}{10,}{10,}{10,} sequence in the proftpd.gnu.c exploit for ProFTPD, related to a "RE_DUP_MAX overflow." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advis
ed to a "RE_DUP_MAX overflow." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/42547 - http://securitytracker.com/id?1024832 - http://seclists.org/fulldisclosure/2011/Jan/78 - http://www.kb.cert.org/vuls/id/912279 - http://www.securityfocus.com/bid/45233 - http://www.securityfocus.com/archive/1/515589/100/0/threaded - http://cxib.net/stuff/proftpd.gnu.c - http://www.exploit-db.com/exploits/15935 - http://securityreason.com/securityalert/8003 - http://securityreason.com/achievement_securityalert/93 - https://bugzilla.redhat.com/show_bug.cgi?id=645859 - https://lists.apache.org/thread.html/rc713534b10f9daeee2e0990239fa407e2118e4aa9e88a7041177497c%
show_bug.cgi?id=645859 - https://lists.apache.org/thread.html/rc713534b10f9daeee2e0990239fa407e2118e4aa9e88a7041177497c%40%3Cissues.guacamole.apache.org%3E
CVE ID: CVE-2010-4052 State: PUBLISHED Published: 2011-01-13T18:35:00 Last Updated: 2024-08-07T03:34:37.250Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack consumption vulnerability in the regcomp implementation in the GNU C Library (aka glibc or libc6) through 2.11.3, and 2.12.x through 2.12.2, allows context-dependent attackers to cause a denial of service (resource exhaustion) via a regular expression containing adjacent repetition operators, as demonstrated by a {10,}{10,}{10,}{10,} sequence in the proftpd.gnu.c exploit for ProFTPD. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/42547 - http://securitytracker.com/id?102483
Notes: - CVE Program Container: References: - http://secunia.com/advisories/42547 - http://securitytracker.com/id?1024832 - http://seclists.org/fulldisclosure/2011/Jan/78 - http://www.kb.cert.org/vuls/id/912279 - http://www.securityfocus.com/bid/45233 - http://www.securityfocus.com/archive/1/515589/100/0/threaded - http://cxib.net/stuff/proftpd.gnu.c - http://www.exploit-db.com/exploits/15935 - http://securityreason.com/securityalert/8003 - http://securityreason.com/achievement_securityalert/93 - https://bugzilla.redhat.com/show_bug.cgi?id=645859
CVE ID: CVE-2010-4053 State: PUBLISHED Published: 2010-10-22T22:00:00 Last Updated: 2024-08-07T03:34:37.353Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in an unspecified logging function in oninit.exe in IBM Informix Dynamic Server (IDS) 11.10 before 11.10.xC2W2 and 11.50 before 11.50.xC1 allows remote authenticated users to execute arbitrary code via a crafted EXPLAIN directive, aka idsdb00154125 and idsdb00154243. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-10-216/ - http://www.vupen.com/english/advisories/2010/2734 - http://www.osvdb.org/68705 - http://secunia.com/advisories/41
216/ - http://www.vupen.com/english/advisories/2010/2734 - http://www.osvdb.org/68705 - http://secunia.com/advisories/41913 - https://exchange.xforce.ibmcloud.com/vulnerabilities/62619
CVE ID: CVE-2010-4054 State: PUBLISHED Published: 2010-10-22T22:00:00 Last Updated: 2024-08-07T03:34:37.193Z Vendors: n/a Products: n/a Problem Types: n/a Description: The gs_type2_interpret function in Ghostscript allows remote attackers to cause a denial of service (incorrect pointer dereference and application crash) via crafted font data in a compressed data stream, aka bug 691043. Additional Analyst Notes: - CVE Program Container: References: - https://rhn.redhat.com/errata/RHSA-2012-0095.html - http://security.gentoo.org/glsa/glsa-201412-17.xml - http://rhn.redhat.com/errata/RHSA-2012-0096.html - http://www.kb.cert.org/vuls/id/538191 - http://ghostscript.com/pipermail/gs-cvs/2010-Janua
/errata/RHSA-2012-0096.html - http://www.kb.cert.org/vuls/id/538191 - http://ghostscript.com/pipermail/gs-cvs/2010-January/010333.html
CVE ID: CVE-2010-4055 State: PUBLISHED Published: 2010-10-22T22:00:00 Last Updated: 2024-08-07T03:34:36.808Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack consumption vulnerability in solid.exe in IBM solidDB 6.5.0.3 and earlier allows remote attackers to cause a denial of service (memory consumption and daemon crash) by connecting to TCP port 1315 and sending a packet with many integer fields, which trigger many recursive calls of a certain function. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/62590 - http://www.exploit-db.com/exploits/15261 - http://www.vupen.com/english/advisories/2010/2715 - http
nerabilities/62590 - http://www.exploit-db.com/exploits/15261 - http://www.vupen.com/english/advisories/2010/2715 - http://secunia.com/advisories/41873 - http://securitytracker.com/id?1024597 - http://aluigi.altervista.org/adv/soliddb_1-adv.txt
CVE ID: CVE-2010-4056 State: PUBLISHED Published: 2010-10-22T22:00:00 Last Updated: 2024-08-07T03:34:37.217Z Vendors: n/a Products: n/a Problem Types: n/a Description: solid.exe in IBM solidDB 6.5.0.3 and earlier does not properly perform a recursive call to a certain function upon receiving packet data containing a single integer field, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a TCP session on port 1315. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/62590 - http://www.exploit-db.com/exploits/15261 - http://www.vupen.com/english/advisories/2010/2715 - http
CVE ID: CVE-2010-4057 State: PUBLISHED Published: 2010-10-22T22:00:00 Last Updated: 2024-08-07T03:34:36.867Z Vendors: n/a Products: n/a Problem Types: n/a Description: solid.exe in IBM solidDB 6.5.0.3 and earlier does not properly perform a recursive call to a certain function upon receiving packet data containing many integer fields with two different values, which allows remote attackers to cause a denial of service (invalid memory access and daemon crash) via a TCP session on port 1315. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/62590 - http://www.exploit-db.com/exploits/15261 - http://www.vupen.com/english/advisor
rce.ibmcloud.com/vulnerabilities/62590 - http://www.exploit-db.com/exploits/15261 - http://www.vupen.com/english/advisories/2010/2715 - http://secunia.com/advisories/41873 - http://securitytracker.com/id?1024597 - http://aluigi.altervista.org/adv/soliddb_1-adv.txt
CVE ID: CVE-2010-4068 State: PUBLISHED Published: 2010-10-25T19:00:00Z Last Updated: 2024-09-16T17:03:21.588Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Extension Manager in TYPO3 4.2.x before 4.2.15, 4.3.x before 4.3.7, and 4.4.x before 4.4.4 allows remote authenticated administrators to read and possibly modify arbitrary files via a crafted parameter, a different vulnerability than CVE-2010-3714. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/43786 - http://www.debian.org/security/2010/dsa-2121 - http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-020/
CVE ID: CVE-2010-4069 State: PUBLISHED Published: 2010-10-25T19:00:00Z Last Updated: 2024-09-16T22:29:41.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in IBM Informix Dynamic Server (IDS) 7.x through 7.31, 9.x through 9.40, 10.00 before 10.00.xC10, 11.10 before 11.10.xC3, and 11.50 before 11.50.xC3 allows remote authenticated users to execute arbitrary code via long DBINFO keyword arguments in a SQL statement, aka idsdb00165017, idsdb00165019, idsdb00165021, idsdb00165022, and idsdb00165023. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-10-217/ - http://www.vupen.com/english/advis
am Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-10-217/ - http://www.vupen.com/english/advisories/2010/2735 - http://www.osvdb.org/68707 - http://secunia.com/advisories/41914
CVE ID: CVE-2010-4070 State: PUBLISHED Published: 2010-10-25T19:00:00Z Last Updated: 2024-09-16T20:52:24.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in librpc.dll in portmap.exe (aka the ISM Portmapper service) in ISM before 2.20.TC1.117 in IBM Informix Dynamic Server (IDS) 7.x before 7.31.xD11, 9.x before 9.40.xC10, 10.00 before 10.00.xC8, and 11.10 before 11.10.xC2 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted parameter size, aka idsdb00146931, idsdb00146930, idsdb00146929, and idsdb00138308. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiati
00146929, and idsdb00138308. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-10-215/ - http://www.osvdb.org/68706 - http://www.vupen.com/english/advisories/2010/2733 - http://secunia.com/advisories/41915