Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2011-2897 State: PUBLISHED Published: 2019-11-12T13:37:35 Last Updated: 2024-08-06T23:15:31.626Z Vendors: gdk-pixbuf Products: gdk-pixbuf Problem Types: GIF loader buffer overflow when initializing decompression tables Description: gdk-pixbuf through 2.31.1 has GIF loader buffer overflow when initializing decompression tables due to an input validation flaw Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2011-2897 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-2897 - https://access.redhat.com/security/cve/cve-2011-2897
CVE ID: CVE-2011-2898 State: PUBLISHED Published: 2012-05-24T23:00:00Z Last Updated: 2024-08-06T23:15:31.640Z Vendors: n/a Products: n/a Problem Types: n/a Description: net/packet/af_packet.c in the Linux kernel before 2.6.39.3 does not properly restrict user-space access to certain packet data structures associated with VLAN Tag Control Information, which allows local users to obtain potentially sensitive information via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=13fcb7bd322164c67926ffe272846d4860196dc6 - http://www.openwall.com/lists/oss-security/2011/08/03/7 - https
Ba=commit%3Bh=13fcb7bd322164c67926ffe272846d4860196dc6 - http://www.openwall.com/lists/oss-security/2011/08/03/7 - https://github.com/torvalds/linux/commit/13fcb7bd322164c67926ffe272846d4860196dc6 - https://bugzilla.redhat.com/show_bug.cgi?id=728023 - http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39.3
CVE ID: CVE-2011-2899 State: PUBLISHED Published: 2011-08-31T23:00:00Z Last Updated: 2024-08-06T23:15:31.677Z Vendors: n/a Products: n/a Problem Types: n/a Description: pysmb.py in system-config-printer 0.6.x and 0.7.x, as used in foomatic-gui and possibly other products, allows remote SMB servers to execute arbitrary commands via shell metacharacters in the (1) NetBIOS or (2) workgroup name, which are not properly handled when searching for network printers. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/45744 - http://www.redhat.com/support/errata/RHSA-2011-1196.html - http://cvs.savannah.gnu.org/viewvc/foomatic-gui/foomatic/pysmb.py?root=foo
dhat.com/support/errata/RHSA-2011-1196.html - http://cvs.savannah.gnu.org/viewvc/foomatic-gui/foomatic/pysmb.py?root=foomatic-gui&r1=1.2&r2=1.3&view=patch - http://www.securitytracker.com/id?1025967 - https://bugs.launchpad.net/ubuntu/+source/foomatic-gui/+bug/811119 - https://bugzilla.redhat.com/show_bug.cgi?id=728348
CVE ID: CVE-2011-2900 State: PUBLISHED Published: 2011-08-05T21:00:00 Last Updated: 2024-08-06T23:15:31.716Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the (1) put_dir function in mongoose.c in Mongoose 3.0, (2) put_dir function in yasslEWS.c in yaSSL Embedded Web Server (yasslEWS) 0.2, and (3) _shttpd_put_dir function in io_dir.c in Simple HTTPD (shttpd) 1.42 allows remote attackers to execute arbitrary code via an HTTP PUT request, as exploited in the wild in 2011. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065505.html - http://www.securityfocus.com/
: - http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065505.html - http://www.securityfocus.com/bid/48980 - https://code.google.com/p/mongoose/source/detail?r=556f4de91eae4bac40dc5d4ddbd9ec7c424711d0 - http://secunia.com/advisories/45464 - http://secunia.com/advisories/45902 - http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065537.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/68991 - http://www.openwall.com/lists/oss-security/2011/08/03/5 - http://securityreason.com/securityalert/8337 - http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065273.html - http://www.openwall.com/lists/oss-security/2011/08/03/9
CVE ID: CVE-2011-2901 State: PUBLISHED Published: 2013-10-01T17:00:00 Last Updated: 2024-08-06T23:15:31.518Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one error in the __addr_ok macro in Xen 3.3 and earlier allows local 64 bit PV guest administrators to cause a denial of service (host crash) via unspecified hypercalls that ignore virtual-address bits. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/55082 - http://www.openwall.com/lists/oss-security/2011/09/02/2 - http://security.gentoo.org/glsa/glsa-201309-24.xml - http://rhn.redhat.com/errata/RHSA-2011-1212.html - https://bugzilla.redhat.com/show_bug.cgi?id=728042
CVE ID: CVE-2011-2902 State: PUBLISHED Published: 2018-01-30T20:00:00 Last Updated: 2024-08-06T23:15:31.535Z Vendors: n/a Products: n/a Problem Types: n/a Description: zxpdf in xpdf before 3.02-19 as packaged in Debian unstable and 3.02-12+squeeze1 as packaged in Debian squeeze deletes temporary files insecurely, which allows remote attackers to delete arbitrary files via a crafted .pdf.gz file name. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2014/02/08/5 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=635849 - https://security-tracker.debian.org/tracker/CVE-2011-2902/
CVE ID: CVE-2011-2903 State: PUBLISHED Published: 2011-09-02T16:00:00 Last Updated: 2024-08-06T23:15:31.450Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in tcptrack before 1.4.2 might allow attackers to execute arbitrary code via a long command line argument. NOTE: this is only a vulnerability in limited scenarios in which tcptrack is "configured as a handler for other applications." This issue might not qualify for inclusion in CVE. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=729096 - https://exchange.xforce.ibmcloud.com/vulnerabilities/69467 - http://www.rhythm.cx/~steve/devel/tcptrac
g.cgi?id=729096 - https://exchange.xforce.ibmcloud.com/vulnerabilities/69467 - http://www.rhythm.cx/~steve/devel/tcptrack/ - http://www.securityfocus.com/bid/49352 - https://bugs.gentoo.org/show_bug.cgi?id=377917 - http://www.openwall.com/lists/oss-security/2011/08/31/1 - http://seclists.org/oss-sec/2011/q3/293
CVE ID: CVE-2011-2904 State: PUBLISHED Published: 2011-08-19T21:00:00 Last Updated: 2024-08-06T23:15:31.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in acknow.php in Zabbix before 1.8.6 allows remote attackers to inject arbitrary web script or HTML via the backurl parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/45502 - http://www.securityfocus.com/bid/49016 - http://www.openwall.com/lists/oss-security/2011/08/09/5 - http://www.zabbix.com/rn1.8.6.php - http://www.openwall.com/lists/oss-security/2011/08/08/2 - http://lists.fedoraproject.org/pipermail/package-announce/2011-Augus
/www.openwall.com/lists/oss-security/2011/08/08/2 - http://lists.fedoraproject.org/pipermail/package-announce/2011-August/063904.html - https://support.zabbix.com/browse/ZBX-3835 - http://lists.fedoraproject.org/pipermail/package-announce/2011-August/063884.html - https://bugzilla.redhat.com/show_bug.cgi?id=729162 - http://secunia.com/advisories/45677 - https://exchange.xforce.ibmcloud.com/vulnerabilities/69025
CVE ID: CVE-2011-2905 State: PUBLISHED Published: 2013-03-01T11:00:00Z Last Updated: 2024-08-06T23:15:31.654Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in the perf_config function in tools/perf/util/config.c in perf, as distributed in the Linux kernel before 3.1, allows local users to overwrite arbitrary files via a crafted config file in the current working directory. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=729808 - https://github.com/torvalds/linux/commit/aba8d056078e47350d85b06a9cabd5afcc4b72ea - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1 - http://git.ke
mit/aba8d056078e47350d85b06a9cabd5afcc4b72ea - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=aba8d056078e47350d85b06a9cabd5afcc4b72ea - http://www.openwall.com/lists/oss-security/2011/08/09/6
CVE ID: CVE-2011-2906 State: PUBLISHED Published: 2012-05-24T00:00:00 Last Updated: 2024-08-06T23:15:31.492Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in the pmcraid_ioctl_passthrough function in drivers/scsi/pmcraid.c in the Linux kernel before 3.1 might allow local users to cause a denial of service (memory consumption or memory corruption) via a negative size value in an ioctl call. NOTE: this may be a vulnerability only in unusual environments that provide a privileged program for obtaining the required file descriptor. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/08/09/8 - http:
al Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/08/09/8 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b5b515445f4f5a905c5dd27e6e682868ccd6c09d - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1 - https://github.com/torvalds/linux/commit/b5b515445f4f5a905c5dd27e6e682868ccd6c09d
CVE ID: CVE-2011-2907 State: PUBLISHED Published: 2011-08-15T19:00:00 Last Updated: 2024-08-06T23:15:31.645Z Vendors: n/a Products: n/a Problem Types: n/a Description: Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) 3.0.1 and earlier allows remote attackers to bypass host-based authentication and submit arbitrary jobs via a modified PBS_O_HOST variable to the qsub program. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=713090 - https://wiki.egi.eu/wiki/SVG:Advisory-SVG-2011-2296 - http://www.clusterresources.com/pipermail/torqueusers/2011-August/013194.html - http://www.securityfocus.com/bid/49119 -
ttp://www.clusterresources.com/pipermail/torqueusers/2011-August/013194.html - http://www.securityfocus.com/bid/49119 - http://secunia.com/advisories/45524 - https://exchange.xforce.ibmcloud.com/vulnerabilities/69138 - http://www.openwall.com/lists/oss-security/2011/08/11/1
CVE ID: CVE-2011-2908 State: PUBLISHED Published: 2012-11-23T20:00:00 Last Updated: 2024-08-06T23:15:31.651Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the JMX Console (jmx-console) in JBoss Enterprise Portal Platform before 5.2.2, BRMS Platform 5.3.0 before roll up patch1, and SOA Platform 5.3.0 allows remote authenticated users to hijack the authentication of arbitrary users for requests that perform operations on MBeans and possibly execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2012-1165.html - http://www.securityfocus.com/
- CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2012-1165.html - http://www.securityfocus.com/bid/54915 - https://exchange.xforce.ibmcloud.com/vulnerabilities/77549 - http://secunia.com/advisories/50230 - http://rhn.redhat.com/errata/RHSA-2013-0192.html - http://rhn.redhat.com/errata/RHSA-2013-0198.html - http://rhn.redhat.com/errata/RHSA-2012-1152.html - http://rhn.redhat.com/errata/RHSA-2013-0195.html - http://rhn.redhat.com/errata/RHSA-2013-0196.html - http://rhn.redhat.com/errata/RHSA-2013-0193.html - http://secunia.com/advisories/51984 - http://secunia.com/advisories/50549 - https://bugzilla.redhat.com/show_bug.cgi?id=730176 - http://rhn.redhat.com/errata/RHSA-
//secunia.com/advisories/50549 - https://bugzilla.redhat.com/show_bug.cgi?id=730176 - http://rhn.redhat.com/errata/RHSA-2013-0191.html - http://rhn.redhat.com/errata/RHSA-2012-1232.html - http://rhn.redhat.com/errata/RHSA-2013-0197.html - http://rhn.redhat.com/errata/RHSA-2013-0194.html - http://www.osvdb.org/84530
CVE ID: CVE-2011-2909 State: PUBLISHED Published: 2014-02-15T11:00:00 Last Updated: 2024-08-06T23:15:31.909Z Vendors: n/a Products: n/a Problem Types: n/a Description: The do_devinfo_ioctl function in drivers/staging/comedi/comedi_fops.c in the Linux kernel before 3.1 allows local users to obtain sensitive information from kernel memory via a copy of a short string. Additional Analyst Notes: - CVE Program Container: References: - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=819cbb120eaec7e014e5abd029260db1ca8c5735 - https://www.kernel.org/pub/linux/kernel/v3.x/patch-3.1.bz2 - http://www.openwall.com/lists/oss-security/2011/08/12/1 - https://github.com/torva
pub/linux/kernel/v3.x/patch-3.1.bz2 - http://www.openwall.com/lists/oss-security/2011/08/12/1 - https://github.com/torvalds/linux/commit/819cbb120eaec7e014e5abd029260db1ca8c5735
CVE ID: CVE-2011-2910 State: PUBLISHED Published: 2019-11-15T16:37:29 Last Updated: 2024-08-06T23:15:31.523Z Vendors: ax25-tools Products: ax25-tools Problem Types: possible privilege escalation due to failure to check for s*id return values Description: The AX.25 daemon (ax25d) in ax25-tools before 0.0.8-13 does not check the return value of a setuid call. The setuid call is responsible for dropping privileges but if the call fails the daemon would continue to run with root privileges which can allow possible privilege escalation. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2011-2910 - https://bugzilla.redhat.com/show_bug.
ntainer: References: - https://security-tracker.debian.org/tracker/CVE-2011-2910 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-2910 - https://access.redhat.com/security/cve/cve-2011-2910
CVE ID: CVE-2011-2911 State: PUBLISHED Published: 2012-06-07T19:00:00 Last Updated: 2024-08-06T23:15:31.663Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the CSoundFile::ReadWav function in src/load_wav.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted WAV file, which triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2011-September/066044.html - http://www.openwall.com/lists/oss-security/2011/08/10/4 - http://www.debian.org/security/2012/dsa-2415 - http://sourcefo
http://www.openwall.com/lists/oss-security/2011/08/10/4 - http://www.debian.org/security/2012/dsa-2415 - http://sourceforge.net/projects/modplug-xmms/files/libmodplug/0.8.8.4/ - http://www.gentoo.org/security/en/glsa/glsa-201203-16.xml - http://lists.fedoraproject.org/pipermail/package-announce/2011-August/063786.html - http://secunia.com/advisories/45131 - http://www.openwall.com/lists/oss-security/2011/08/12/4 - http://secunia.com/advisories/48058 - http://secunia.com/advisories/46032 - http://www.osvdb.org/74208 - http://secunia.com/advisories/46793 - http://secunia.com/advisories/48439 - http://secunia.com/advisories/45742 - http://ubuntu.com/usn/usn-1255-1 - http://lists.opensuse.org/op
advisories/48439 - http://secunia.com/advisories/45742 - http://ubuntu.com/usn/usn-1255-1 - http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00019.html - http://secunia.com/advisories/48434 - http://www.securityfocus.com/bid/48979 - http://www.gentoo.org/security/en/glsa/glsa-201203-14.xml - http://modplug-xmms.git.sourceforge.net/git/gitweb.cgi?p=modplug-xmms/modplug-xmms%3Ba=commitdiff%3Bh=2d4c56de314ab13e4437bd8b609f0b751066eee8 - http://secunia.com/advisories/45901 - http://rhn.redhat.com/errata/RHSA-2011-1264.html - http://secunia.com/advisories/46043 - https://exchange.xforce.ibmcloud.com/vulnerabilities/68983 - http://jira.atheme.org/browse/AUDPLUG-394 - http://secunia.
https://exchange.xforce.ibmcloud.com/vulnerabilities/68983 - http://jira.atheme.org/browse/AUDPLUG-394 - http://secunia.com/advisories/45658
CVE ID: CVE-2011-2912 State: PUBLISHED Published: 2012-06-07T19:00:00 Last Updated: 2024-08-06T23:15:31.904Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the CSoundFile::ReadS3M function in src/load_s3m.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted S3M file with an invalid offset. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2011-September/066044.html - http://www.openwall.com/lists/oss-security/2011/08/10/4 - http://www.debian.org/security/2012/dsa-2415 - http://sourceforge.net/pro
openwall.com/lists/oss-security/2011/08/10/4 - http://www.debian.org/security/2012/dsa-2415 - http://sourceforge.net/projects/modplug-xmms/files/libmodplug/0.8.8.4/ - http://www.gentoo.org/security/en/glsa/glsa-201203-16.xml - http://lists.fedoraproject.org/pipermail/package-announce/2011-August/063786.html - http://secunia.com/advisories/45131 - http://www.openwall.com/lists/oss-security/2011/08/12/4 - http://secunia.com/advisories/48058 - http://secunia.com/advisories/46032 - http://secunia.com/advisories/46793 - http://secunia.com/advisories/48439 - http://secunia.com/advisories/45742 - http://ubuntu.com/usn/usn-1255-1 - http://modplug-xmms.git.sourceforge.net/git/gitweb.cgi?p=modplug-xmm
visories/45742 - http://ubuntu.com/usn/usn-1255-1 - http://modplug-xmms.git.sourceforge.net/git/gitweb.cgi?p=modplug-xmms/modplug-xmms%3Ba=commitdiff%3Bh=f4e5295658fff000379caa122e75c9200205fe20 - http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00019.html - http://secunia.com/advisories/48434 - https://exchange.xforce.ibmcloud.com/vulnerabilities/68984 - http://www.securityfocus.com/bid/48979 - http://www.gentoo.org/security/en/glsa/glsa-201203-14.xml - http://secunia.com/advisories/45901 - http://rhn.redhat.com/errata/RHSA-2011-1264.html - http://secunia.com/advisories/46043 - http://jira.atheme.org/browse/AUDPLUG-394 - http://www.osvdb.org/74209 - http://secunia.com/advisor
m/advisories/46043 - http://jira.atheme.org/browse/AUDPLUG-394 - http://www.osvdb.org/74209 - http://secunia.com/advisories/45658
CVE ID: CVE-2011-2913 State: PUBLISHED Published: 2012-06-07T19:00:00 Last Updated: 2024-08-06T23:15:31.946Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one error in the CSoundFile::ReadAMS function in src/load_ams.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of service (stack memory corruption) and possibly execute arbitrary code via a crafted AMS file with a large number of samples. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2011-September/066044.html - http://www.openwall.com/lists/oss-security/2011/08/10/4 - http://www.debian.org/security/2012/dsa-2415 - htt
6044.html - http://www.openwall.com/lists/oss-security/2011/08/10/4 - http://www.debian.org/security/2012/dsa-2415 - http://sourceforge.net/projects/modplug-xmms/files/libmodplug/0.8.8.4/ - http://www.gentoo.org/security/en/glsa/glsa-201203-16.xml - http://lists.fedoraproject.org/pipermail/package-announce/2011-August/063786.html - http://secunia.com/advisories/45131 - http://www.openwall.com/lists/oss-security/2011/08/12/4 - http://modplug-xmms.git.sourceforge.net/git/gitweb.cgi?p=modplug-xmms/modplug-xmms%3Ba=commitdiff%3Bh=26243ab9fe1171f70053e9aec4b20e9f7de9e4ef - http://secunia.com/advisories/48058 - http://secunia.com/advisories/46032 - http://secunia.com/advisories/46793 - http://secu
//secunia.com/advisories/48058 - http://secunia.com/advisories/46032 - http://secunia.com/advisories/46793 - http://secunia.com/advisories/48439 - http://secunia.com/advisories/45742 - http://ubuntu.com/usn/usn-1255-1 - http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00019.html - http://secunia.com/advisories/48434 - http://www.securityfocus.com/bid/48979 - http://www.gentoo.org/security/en/glsa/glsa-201203-14.xml - http://secunia.com/advisories/45901 - http://rhn.redhat.com/errata/RHSA-2011-1264.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/68985 - http://secunia.com/advisories/46043 - http://jira.atheme.org/browse/AUDPLUG-394 - http://www.osvdb.org/74210 - htt
985 - http://secunia.com/advisories/46043 - http://jira.atheme.org/browse/AUDPLUG-394 - http://www.osvdb.org/74210 - http://secunia.com/advisories/45658
CVE ID: CVE-2011-2914 State: PUBLISHED Published: 2012-06-07T19:00:00 Last Updated: 2024-08-06T23:15:31.776Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one error in the CSoundFile::ReadDSM function in src/load_dms.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via a crafted DSM file with a large number of samples. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2011-September/066044.html - http://www.openwall.com/lists/oss-security/2011/08/10/4 - http://www.debian.org/security/2012/dsa-2415 - http://so
tml - http://www.openwall.com/lists/oss-security/2011/08/10/4 - http://www.debian.org/security/2012/dsa-2415 - http://sourceforge.net/projects/modplug-xmms/files/libmodplug/0.8.8.4/ - http://www.gentoo.org/security/en/glsa/glsa-201203-16.xml - http://www.osvdb.org/74211 - http://lists.fedoraproject.org/pipermail/package-announce/2011-August/063786.html - http://secunia.com/advisories/45131 - http://www.openwall.com/lists/oss-security/2011/08/12/4 - http://modplug-xmms.git.sourceforge.net/git/gitweb.cgi?p=modplug-xmms/modplug-xmms%3Ba=commitdiff%3Bh=26243ab9fe1171f70053e9aec4b20e9f7de9e4ef - http://secunia.com/advisories/48058 - http://secunia.com/advisories/46032 - http://secunia.com/advisor
4b20e9f7de9e4ef - http://secunia.com/advisories/48058 - http://secunia.com/advisories/46032 - http://secunia.com/advisories/46793 - https://exchange.xforce.ibmcloud.com/vulnerabilities/68985 - http://secunia.com/advisories/48439 - http://secunia.com/advisories/45742 - http://ubuntu.com/usn/usn-1255-1 - http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00019.html - http://secunia.com/advisories/48434 - http://www.securityfocus.com/bid/48979 - http://www.gentoo.org/security/en/glsa/glsa-201203-14.xml - http://secunia.com/advisories/45901 - http://rhn.redhat.com/errata/RHSA-2011-1264.html - http://secunia.com/advisories/46043 - http://jira.atheme.org/browse/AUDPLUG-394 - http://se
errata/RHSA-2011-1264.html - http://secunia.com/advisories/46043 - http://jira.atheme.org/browse/AUDPLUG-394 - http://secunia.com/advisories/45658
CVE ID: CVE-2011-2915 State: PUBLISHED Published: 2012-06-07T19:00:00 Last Updated: 2024-08-06T23:15:31.655Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one error in the CSoundFile::ReadAMS2 function in src/load_ams.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via a crafted AMS file with a large number of instruments. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2011-September/066044.html - http://www.openwall.com/lists/oss-security/2011/08/10/4 - http://www.debian.org/security/2012/dsa-2415 - http
044.html - http://www.openwall.com/lists/oss-security/2011/08/10/4 - http://www.debian.org/security/2012/dsa-2415 - http://sourceforge.net/projects/modplug-xmms/files/libmodplug/0.8.8.4/ - http://www.gentoo.org/security/en/glsa/glsa-201203-16.xml - http://lists.fedoraproject.org/pipermail/package-announce/2011-August/063786.html - http://secunia.com/advisories/45131 - http://www.openwall.com/lists/oss-security/2011/08/12/4 - http://secunia.com/advisories/48058 - http://secunia.com/advisories/46032 - https://exchange.xforce.ibmcloud.com/vulnerabilities/68987 - http://secunia.com/advisories/46793 - http://secunia.com/advisories/48439 - http://secunia.com/advisories/45742 - http://ubuntu.com/us