Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2011-0639 State: PUBLISHED Published: 2011-01-25T00:00:00Z Last Updated: 2024-09-16T20:21:18.277Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple Mac OS X does not properly warn the user before enabling additional Human Interface Device (HID) functionality over USB, which allows user-assisted attackers to execute arbitrary programs via crafted USB data, as demonstrated by keyboard and mouse data sent by malware on a smartphone that the user connected to the computer. Additional Analyst Notes: - CVE Program Container: References: - http://news.cnet.com/8301-27080_3-20028919-245.html - http://www.blackhat.com/html/bh-dc-11/bh-dc-11-briefings.html#Stavrou - http://w
et.com/8301-27080_3-20028919-245.html - http://www.blackhat.com/html/bh-dc-11/bh-dc-11-briefings.html#Stavrou - http://www.cs.gmu.edu/~astavrou/publications.html
CVE ID: CVE-2011-0640 State: PUBLISHED Published: 2011-01-25T00:00:00Z Last Updated: 2024-09-16T22:25:14.883Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of udev on Linux does not warn the user before enabling additional Human Interface Device (HID) functionality over USB, which allows user-assisted attackers to execute arbitrary programs via crafted USB data, as demonstrated by keyboard and mouse data sent by malware on a smartphone that the user connected to the computer. Additional Analyst Notes: - CVE Program Container: References: - http://news.cnet.com/8301-27080_3-20028919-245.html - http://www.blackhat.com/html/bh-dc-11/bh-dc-11-briefings.html
s: - http://news.cnet.com/8301-27080_3-20028919-245.html - http://www.blackhat.com/html/bh-dc-11/bh-dc-11-briefings.html#Stavrou - http://www.cs.gmu.edu/~astavrou/publications.html
CVE ID: CVE-2011-0641 State: PUBLISHED Published: 2011-01-25T18:00:00 Last Updated: 2024-08-06T21:58:26.034Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in wp-admin/admin.php in the StatPressCN plugin 1.9.0 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) what1, (2) what2, (3) what3, (4) what4, and (5) what5 parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/70595 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64882 - http:/
am Container: References: - http://osvdb.org/70595 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64882 - http://www.securityfocus.com/bid/45950 - http://secunia.com/advisories/43016
CVE ID: CVE-2011-0642 State: PUBLISHED Published: 2011-01-25T18:00:00 Last Updated: 2024-08-06T21:58:26.081Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in news/admin.php in N-13 News 3.4, 3.7, and 4.0 allows remote attackers to hijack the authentication of administrators for requests that create new users via the options action. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/70593 - http://www.exploit-db.com/exploits/16013 - http://secunia.com/advisories/42959 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64824
CVE ID: CVE-2011-0643 State: PUBLISHED Published: 2011-01-25T18:00:00 Last Updated: 2024-08-06T21:58:26.100Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in admin/conf_users_edit.php in PHP Link Directory (phpLD) 4.1.0 allows remote attackers to hijack the authentication of administrators for requests that add an administrator via the N action. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/64860 - http://osvdb.org/70627 - http://www.exploit-db.com/exploits/16037 - http://secunia.com/advisories/43032
CVE ID: CVE-2011-0644 State: PUBLISHED Published: 2011-01-25T18:00:00 Last Updated: 2024-08-06T21:58:26.078Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in include/admin/model_field.class.php in PHPCMS 2008 V2 allows remote attackers to execute arbitrary SQL commands via the modelid parameter to flash_upload.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43007 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64828 - http://www.exploit-db.com/exploits/16019 - http://osvdb.org/70598 - http://www.securityfocus.com/bid/45933
CVE ID: CVE-2011-0645 State: PUBLISHED Published: 2011-01-25T18:00:00 Last Updated: 2024-08-06T21:58:26.053Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in data.php in PHPCMS 2008 V2 allows remote attackers to execute arbitrary SQL commands via the where_time parameter in a get action. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/70655 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64828 - http://www.securityfocus.com/bid/45913 - http://securityreason.com/wlb_show/WLB-2011010077
CVE ID: CVE-2011-0646 State: PUBLISHED Published: 2011-01-25T18:00:00 Last Updated: 2024-08-06T21:58:25.965Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in viewfaqs.php in PHP LOW BIDS allows remote attackers to execute arbitrary SQL commands via the cat parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/16020 - http://osvdb.org/70594 - http://www.securityfocus.com/bid/45941 - http://secunia.com/advisories/43008 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64829
CVE ID: CVE-2011-0647 State: PUBLISHED Published: 2011-02-10T17:00:00 Last Updated: 2024-08-06T21:58:25.940Z Vendors: n/a Products: n/a Problem Types: n/a Description: The irccd.exe service in EMC Replication Manager Client before 5.3 and NetWorker Module for Microsoft Applications 2.1.x and 2.2.x allows remote attackers to execute arbitrary commands via the RunProgram function to TCP port 6542. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/516260 - http://secunia.com/advisories/43164 - http://www.securityfocus.com/bid/46235 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65205 - http://osvdb.org/70853 - http://www.vupen.com/en
id/46235 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65205 - http://osvdb.org/70853 - http://www.vupen.com/english/advisories/2011/0304 - http://www.securityfocus.com/archive/1/516282/100/0/threaded - http://www.zerodayinitiative.com/advisories/ZDI-11-061/
CVE ID: CVE-2011-0648 State: PUBLISHED Published: 2011-03-16T22:00:00 Last Updated: 2024-08-06T21:58:26.023Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in EMC Avamar before 5.0.4-30 allows remote authenticated users to gain privileges via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/8138 - http://www.securityfocus.com/bid/46874 - http://secunia.com/advisories/43749 - http://osvdb.org/71181 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66108 - http://www.securityfocus.com/archive/1/517024/100/0/threaded
CVE ID: CVE-2011-0649 State: PUBLISHED Published: 2011-02-04T00:00:00 Last Updated: 2024-08-06T21:58:26.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in TIBCO Rendezvous 8.2.1 through 8.3.0, Enterprise Message Service (EMS) 5.1.0 through 6.0.0, Runtime Agent (TRA) 5.6.2 through 5.7.0, Silver BPM Service before 1.0.4, Silver CAP Service vebefore 1.0.2, and Silver BusinessWorks Service 1.0.0, when running on Unix systems, allow local users to gain root privileges via unknown vectors related to SUID and (1) Rendezvous Routing Daemon (rvrd), (2) Rendezvous Secure Daemon (rvsd), (3) Rendezvous Secure Routing Daemon (rvsrd), and (4) EMS Server
ing Daemon (rvrd), (2) Rendezvous Secure Daemon (rvsd), (3) Rendezvous Secure Routing Daemon (rvsrd), and (4) EMS Server (tibemsd). Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43174 - http://secunia.com/advisories/43160 - http://www.vupen.com/english/advisories/2011/0269 - http://www.securityfocus.com/bid/46104 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65105 - http://www.tibco.com/multimedia/rv_ems_security_advisory_20110201_tcm8-13185.txt
CVE ID: CVE-2011-0650 State: PUBLISHED Published: 2011-01-28T15:00:00 Last Updated: 2024-08-06T21:58:26.004Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Greenbone Security Assistant (GSA) before 2.0+rc3 allows remote attackers to hijack the authentication of users for requests that send email via an OMP request to OpenVAS Manager. NOTE: this issue can be leveraged to bypass authentication requirements for exploiting CVE-2011-0018. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/515971/100/0/threaded - http://secunia.com/advisories/43092 - http://www.openvas.org/OVSA201101
urityfocus.com/archive/1/515971/100/0/threaded - http://secunia.com/advisories/43092 - http://www.openvas.org/OVSA20110118.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/65012 - https://lists.wald.intevation.org/pipermail/openvas-commits/2011-February/010206.html - https://lists.wald.intevation.org/pipermail/openvas-commits/2011-February/010242.html
CVE ID: CVE-2011-0651 State: PUBLISHED Published: 2011-01-28T15:00:00 Last Updated: 2024-08-06T21:58:26.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the key exchange functionality in Icon Labs Iconfidant SSL Server before 1.3.0 allows remote attackers to execute arbitrary code via a client master key packet in which the sum of unspecified length fields is greater than a certain value. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-11-021/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/64868 - http://osvdb.org/70599 - http://secunia.com/advisories/42971 - http://www.securityfocus.co
d.com/vulnerabilities/64868 - http://osvdb.org/70599 - http://secunia.com/advisories/42971 - http://www.securityfocus.com/bid/45938
CVE ID: CVE-2011-0652 State: PUBLISHED Published: 2011-01-28T15:00:00 Last Updated: 2024-08-06T21:58:26.011Z Vendors: n/a Products: n/a Problem Types: n/a Description: lnsfw1.sys 6.0.2900.5512 in Look 'n' Stop Firewall 2.06p4 and 2.07 allows local users to cause a denial of service (crash) via a crafted 0x80000064 IOCTL request that triggers an assertion failure. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/16021 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64851 - http://www.securityfocus.com/bid/45949 - http://secunia.com/advisories/43044 - http://osvdb.or
m/vulnerabilities/64851 - http://www.securityfocus.com/bid/45949 - http://secunia.com/advisories/43044 - http://osvdb.org/70638
CVE ID: CVE-2011-0653 State: PUBLISHED Published: 2011-09-15T10:00:00 Last Updated: 2024-08-06T21:58:26.081Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint Server 2010 Gold and SP1, and SharePoint Foundation 2010, allows remote attackers to inject arbitrary web script or HTML via the URI, aka "XSS in SharePoint Calendar Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-074 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12835 - http://www.us-cert.gov/cas/techale
val.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12835 - http://www.us-cert.gov/cas/techalerts/TA11-256A.html
CVE ID: CVE-2011-0654 State: PUBLISHED Published: 2011-02-16T00:00:00 Last Updated: 2024-08-06T21:58:26.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer underflow in the BowserWriteErrorLogEntry function in the Common Internet File System (CIFS) browser service in Mrxsmb.sys or bowser.sys in Active Directory in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code or cause a denial of service (system crash) via a malformed BROWSER ELECTION message, leading to a heap-based buffer overflow, aka "Browser Pool Corruptio
em crash) via a malformed BROWSER ELECTION message, leading to a heap-based buffer overflow, aka "Browser Pool Corruption Vulnerability." NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://blogs.technet.com/b/mmpc/archive/2011/02/16/my-sweet-valentine-the-cifs-browser-protocol-heap-corruption-vulnerability.aspx - http://www.us-cert.gov/cas/techalerts/TA11-102A.html - http://www.kb.cert.org/vuls/id/323172 - http://www.exploit-db.com/exploits/16166 - http://www.vupen.com/english/advisories/2011/0394 - http://blogs.technet.com/b/srd/archive/2011/02/16/notes-on-exploitability-of-the-recent-windows-browser
ries/2011/0394 - http://blogs.technet.com/b/srd/archive/2011/02/16/notes-on-exploitability-of-the-recent-windows-browser-protocol-issue.aspx - http://www.securitytracker.com/id?1025328 - http://archives.neohapsis.com/archives/fulldisclosure/2011-02/0284.html - http://www.securityfocus.com/bid/46360 - http://www.vupen.com/english/advisories/2011/0938 - http://secunia.com/advisories/43299 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65376 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-019 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12637
CVE ID: CVE-2011-0655 State: PUBLISHED Published: 2011-04-13T18:00:00 Last Updated: 2024-08-06T21:58:26.082Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft PowerPoint 2007 SP2 and 2010; Office 2004, 2008, and 2011 for Mac; Open XML File Format Converter for Mac; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2; PowerPoint Viewer; PowerPoint Viewer 2007 SP2; and PowerPoint Web App do not properly validate TimeColorBehaviorContainer Floating Point records in PowerPoint documents, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted document containing an invalid record, aka "F
itrary code or cause a denial of service (memory corruption) via a crafted document containing an invalid record, aka "Floating Point Techno-color Time Bandit RCE Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-022 - http://www.us-cert.gov/cas/techalerts/TA11-102A.html - http://www.securitytracker.com/id?1025340 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12624 - http://www.vupen.com/english/advisories/2011/0941
CVE ID: CVE-2011-0656 State: PUBLISHED Published: 2011-04-13T18:00:00 Last Updated: 2024-08-06T21:58:26.095Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft PowerPoint 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004, 2008, and 2011 for Mac; Open XML File Format Converter for Mac; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2; PowerPoint Viewer; PowerPoint Viewer 2007 SP2; and PowerPoint Web App do not properly validate PersistDirectoryEntry records in PowerPoint documents, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a Slide with a malformed record, which triggers an exc
bitrary code or cause a denial of service (memory corruption) via a Slide with a malformed record, which triggers an exception and later use of an unspecified method, aka "Persist Directory RCE Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11761 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-022 - http://www.us-cert.gov/cas/techalerts/TA11-102A.html - http://www.securitytracker.com/id?1025340 - http://www.zerodayinitiative.com/advisories/ZDI-11-125 - http://www.securityfocus.com/bid/47251 - http://www.vupen.com/english/advisories/2011/0941
e.com/advisories/ZDI-11-125 - http://www.securityfocus.com/bid/47251 - http://www.vupen.com/english/advisories/2011/0941 - http://osvdb.org/71770 - http://www.securityfocus.com/archive/1/517482/100/0/threaded
CVE ID: CVE-2011-0657 State: PUBLISHED Published: 2011-04-13T18:00:00 Last Updated: 2024-10-17T19:59:59.425Z Vendors: n/a Products: n/a Problem Types: n/a Description: DNSAPI.dll in the DNS client in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly process DNS queries, which allows remote attackers to execute arbitrary code via (1) a crafted LLMNR broadcast query or (2) a crafted application, aka "DNS Query Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://oval.cisecurity.org/repository/search/definiti
: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11902 - http://www.us-cert.gov/cas/techalerts/TA11-102A.html - http://www.securitytracker.com/id?1025332 - http://secunia.com/advisories/44161 - http://www.vupen.com/english/advisories/2011/0948 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-030 - http://www.securityfocus.com/bid/47242 - http://osvdb.org/71780
CVE ID: CVE-2011-0658 State: PUBLISHED Published: 2011-06-16T20:21:00 Last Updated: 2024-08-06T21:58:26.084Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer underflow in the OLE Automation protocol implementation in VBScript.dll in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted WMF file, aka "OLE Automation Underflow Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-038 - https://oval.cisecur
: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-038 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12335
CVE ID: CVE-2011-0659 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2011-0660 State: PUBLISHED Published: 2011-04-13T18:00:00 Last Updated: 2024-08-06T21:58:26.056Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SMB client in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote SMB servers to execute arbitrary code via a crafted (1) SMBv1 or (2) SMBv2 response, aka "SMB Client Response Parsing Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/71772 - http://www.us-cert.gov/cas/techalerts/TA11-102A.html - http://www.securitytracker.com/id?1025328 - http://www.securi
2 - http://www.us-cert.gov/cas/techalerts/TA11-102A.html - http://www.securitytracker.com/id?1025328 - http://www.securityfocus.com/bid/47239 - http://www.vupen.com/english/advisories/2011/0938 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11995 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-019
CVE ID: CVE-2011-0661 State: PUBLISHED Published: 2011-04-13T18:00:00 Last Updated: 2024-08-06T21:58:26.015Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SMB Server service in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly validate fields in SMB requests, which allows remote attackers to execute arbitrary code via a malformed request in a (1) SMBv1 or (2) SMBv2 packet, aka "SMB Transaction Parsing Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/44072 - http://osvdb.org/71781 - http:/
lyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/44072 - http://osvdb.org/71781 - http://www.us-cert.gov/cas/techalerts/TA11-102A.html - http://www.securitytracker.com/id?1025329 - http://www.vupen.com/english/advisories/2011/0939 - http://www.securityfocus.com/bid/47198 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12076 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-020
CVE ID: CVE-2011-0662 State: PUBLISHED Published: 2011-04-13T18:00:00 Last Updated: 2024-08-06T21:58:26.014Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other "Vulnerability Type 1" CVEs listed in MS11-034, aka "Win32k Use After Free Vulnerability." Additional Analyst Notes: - CVE Program Container: Refer
listed in MS11-034, aka "Win32k Use After Free Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12543 - http://www.us-cert.gov/cas/techalerts/TA11-102A.html - http://osvdb.org/71740 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-034 - http://www.securityfocus.com/bid/47194 - http://www.vupen.com/english/advisories/2011/0952 - http://support.avaya.com/css/P8/documents/100133352 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66395 - http://secunia.com/advisories/44156 - http://blogs.technet.com/b/srd/archive/2011/04/12/ms11-034-address
ilities/66395 - http://secunia.com/advisories/44156 - http://blogs.technet.com/b/srd/archive/2011/04/12/ms11-034-addressing-vulnerabilities-in-the-win32k-subsystem.aspx - http://www.securitytracker.com/id?1025345
CVE ID: CVE-2011-0663 State: PUBLISHED Published: 2011-04-13T18:00:00 Last Updated: 2025-01-21T17:48:51.146Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in the Microsoft (1) JScript 5.6 through 5.8 and (2) VBScript 5.6 through 5.8 scripting engines allow remote attackers to execute arbitrary code via a crafted web page, aka "Scripting Memory Reallocation Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.vupen.com/english/advisories/2011/0949 - http://osvdb.org/71774 - http://www.us-cert.gov/cas/techalerts/TA11-102A.html - http://www.securitytracker.com/id?1025333 - https://docs.micros
- http://www.us-cert.gov/cas/techalerts/TA11-102A.html - http://www.securitytracker.com/id?1025333 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-031 - http://www.securityfocus.com/bid/47249 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12673 - http://secunia.com/advisories/44162