Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2011-0550 State: PUBLISHED Published: 2011-08-15T19:00:00 Last Updated: 2024-08-06T21:58:25.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Web Interface in the Endpoint Protection Manager in Symantec Endpoint Protection (SEP) 11.0.600x through 11.0.6300 allow remote attackers to inject arbitrary web script or HTML via (1) the token parameter to portal/Help.jsp or (2) the URI in a console/apps/sepm request. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1025919 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=s
acker.com/id?1025919 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2011&suid=20110810_00 - http://www.osvdb.org/74466 - https://exchange.xforce.ibmcloud.com/vulnerabilities/69136 - http://www.securityfocus.com/bid/48231 - http://secunia.com/advisories/43662 - http://www.osvdb.org/74465
CVE ID: CVE-2011-0551 State: PUBLISHED Published: 2011-08-15T19:00:00 Last Updated: 2024-08-06T21:58:25.357Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the Web Interface in the Endpoint Protection Manager in Symantec Endpoint Protection (SEP) 11.0.600x through 11.0.6300 allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1025919 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2011&suid=2011081
tec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2011&suid=20110810_00 - http://secunia.com/advisories/43662 - http://www.securityfocus.com/bid/49101 - http://www.osvdb.org/74467
CVE ID: CVE-2011-0552 State: PUBLISHED Published: 2011-10-02T01:00:00 Last Updated: 2024-08-06T21:58:25.058Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the management console in Symantec IM Manager before 8.4.18 allow remote attackers to inject arbitrary web script or HTML via the (1) refreshRateSetting parameter to IMManager/Admin/IMAdminSystemDashboard.asp, the (2) nav or (3) menuitem parameter to IMManager/Admin/IMAdminTOC_simple.asp, or the (4) action parameter to IMManager/Admin/IMAdminEdituser.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/49739 - http://securi
Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/49739 - http://securitytracker.com/id?1026130 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2011&suid=20110929_00 - http://secunia.com/advisories/43157
CVE ID: CVE-2011-0553 State: PUBLISHED Published: 2011-10-02T01:00:00 Last Updated: 2024-08-06T21:58:25.166Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the management console in Symantec IM Manager before 8.4.18 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/49738 - http://securitytracker.com/id?1026130 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2011&suid=20110929_00 - http://secunia.com/advisories/43157
CVE ID: CVE-2011-0554 State: PUBLISHED Published: 2011-10-02T01:00:00 Last Updated: 2024-08-06T21:58:25.854Z Vendors: n/a Products: n/a Problem Types: n/a Description: The management console in Symantec IM Manager before 8.4.18 allows remote attackers to execute arbitrary code via unspecified vectors, related to a "code injection issue." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/49742 - http://securitytracker.com/id?1026130 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2011&suid=20110929_00 - http://secunia.com/advisories/43157
CVE ID: CVE-2011-0555 State: PUBLISHED Published: 2011-02-10T15:00:00 Last Updated: 2024-08-06T21:58:25.867Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TextXtra.x32 module in Adobe Shockwave Player before 11.5.9.620 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a Director file with a crafted DEMX RIFF chunk that triggers incorrect buffer allocation, a different vulnerability than CVE-2010-4093, CVE-2010-4187, CVE-2010-4190, CVE-2010-4191, CVE-2010-4192, and CVE-2010-4306. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/516333/100/0/threaded - https://excha
tes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/516333/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/65257 - http://dvlabs.tippingpoint.com/advisory/TPTI-11-02 - http://www.vupen.com/english/advisories/2011/0335 - http://www.adobe.com/support/security/bulletins/apsb11-01.html - http://www.securityfocus.com/bid/46327 - http://www.securitytracker.com/id?1025056
CVE ID: CVE-2011-0556 State: PUBLISHED Published: 2011-02-10T15:00:00 Last Updated: 2024-08-06T21:58:25.026Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Font Xtra.x32 module in Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted PFR1 chunk that leads to an unexpected sign extension and an invalid pointer dereference, a different vulnerability than CVE-2011-0569. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/65258 - http://www.vupen.com/english/advisories/2011/0335 - http://www.adobe.com/support/security/bulle
/vulnerabilities/65258 - http://www.vupen.com/english/advisories/2011/0335 - http://www.adobe.com/support/security/bulletins/apsb11-01.html - http://dvlabs.tippingpoint.com/advisory/TPTI-11-03 - http://www.securitytracker.com/id?1025056 - http://www.securityfocus.com/bid/46328 - http://www.securityfocus.com/archive/1/516336/100/0/threaded
CVE ID: CVE-2011-0557 State: PUBLISHED Published: 2011-02-10T15:00:00 Last Updated: 2024-08-06T21:58:25.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in Adobe Shockwave Player before 11.5.9.620 allows remote attackers to execute arbitrary code via a Director movie with a large count value in 3D assets type 0xFFFFFF45 record, which triggers a "faulty allocation" and memory corruption. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/65259 - http://www.vupen.com/english/advisories/2011/0335 - http://www.adobe.com/support/security/bulletins/apsb11-01.html - http://www.securitytracker.com/id?1
isories/2011/0335 - http://www.adobe.com/support/security/bulletins/apsb11-01.html - http://www.securitytracker.com/id?1025056 - http://www.securityfocus.com/bid/46330 - http://www.securityfocus.com/archive/1/516323/100/0/threaded
CVE ID: CVE-2011-0558 State: PUBLISHED Published: 2011-02-10T15:00:00 Last Updated: 2024-08-06T21:58:25.813Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code via a large array length value in the ActionScript method of the Function class. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16129 - http://www.vupen.com/english/advisories/2011/0348 - http://www.securityfocus.com/bid/46194 - http://www.securitytracker.com/id?1025055 - http://www.vupen.com/english/advisories/2011/0646 - h
yfocus.com/bid/46194 - http://www.securitytracker.com/id?1025055 - http://www.vupen.com/english/advisories/2011/0646 - http://secunia.com/advisories/43267 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=893 - http://secunia.com/advisories/43292 - http://secunia.com/advisories/43351 - http://secunia.com/advisories/43340 - http://www.vupen.com/english/advisories/2011/0383 - http://www.adobe.com/support/security/bulletins/apsb11-02.html - http://secunia.com/advisories/43747 - http://www.vupen.com/english/advisories/2011/0402 - http://www.redhat.com/support/errata/RHSA-2011-0259.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1
rt/errata/RHSA-2011-0259.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14056 - http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_adobe_flash2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65230 - http://www.redhat.com/support/errata/RHSA-2011-0206.html - http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00003.html - http://www.redhat.com/support/errata/RHSA-2011-0368.html
CVE ID: CVE-2011-0559 State: PUBLISHED Published: 2011-02-10T15:00:00 Last Updated: 2024-08-06T21:58:25.095Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted parameters to an unspecified ActionScript method that cause a parameter to be used as an object pointer, a different vulnerability than CVE-2011-0560, CVE-2011-0561, CVE-2011-0571, CVE-2011-0572, CVE-2011-0573, CVE-2011-0574, CVE-2011-0578, CVE-2011-0607, and CVE-2011-0608. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/0348
608. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/0348 - http://www.securitytracker.com/id?1025055 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14009 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=894 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16231 - http://www.vupen.com/english/advisories/2011/0646 - http://secunia.com/advisories/43267 - http://secunia.com/advisories/43292 - http://www.securityfocus.com/bid/46186 - http://secunia.com/advisories/43351 - http://secunia.com/advisories/43340 - http://www.vupen.com/eng
cus.com/bid/46186 - http://secunia.com/advisories/43351 - http://secunia.com/advisories/43340 - http://www.vupen.com/english/advisories/2011/0383 - http://www.adobe.com/support/security/bulletins/apsb11-02.html - http://secunia.com/advisories/43747 - http://www.vupen.com/english/advisories/2011/0402 - http://www.redhat.com/support/errata/RHSA-2011-0259.html - http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_adobe_flash2 - http://www.redhat.com/support/errata/RHSA-2011-0206.html - http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00003.html - http://www.redhat.com/support/errata/RHSA-2011-0368.html
CVE ID: CVE-2011-0560 State: PUBLISHED Published: 2011-02-10T15:00:00 Last Updated: 2024-08-06T21:58:25.114Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0559, CVE-2011-0561, CVE-2011-0571, CVE-2011-0572, CVE-2011-0573, CVE-2011-0574, CVE-2011-0578, CVE-2011-0607, and CVE-2011-0608. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/0348 - http://www.securitytracker.com/id?1025055 - https://oval.cisecurity.org/repository/search/
nglish/advisories/2011/0348 - http://www.securitytracker.com/id?1025055 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16174 - http://www.vupen.com/english/advisories/2011/0646 - http://www.kb.cert.org/vuls/id/812969 - http://secunia.com/advisories/43267 - http://secunia.com/advisories/43292 - http://www.securityfocus.com/bid/46188 - http://secunia.com/advisories/43351 - http://secunia.com/advisories/43340 - http://www.vupen.com/english/advisories/2011/0383 - http://www.adobe.com/support/security/bulletins/apsb11-02.html - http://secunia.com/advisories/43747 - http://www.vupen.com/english/advisories/2011/0402 - http://www.redhat.com/support/errata/RH
cunia.com/advisories/43747 - http://www.vupen.com/english/advisories/2011/0402 - http://www.redhat.com/support/errata/RHSA-2011-0259.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13429 - http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_adobe_flash2 - http://www.redhat.com/support/errata/RHSA-2011-0206.html - http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00003.html - http://www.redhat.com/support/errata/RHSA-2011-0368.html
CVE ID: CVE-2011-0561 State: PUBLISHED Published: 2011-02-10T15:00:00 Last Updated: 2024-08-06T21:58:25.986Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0559, CVE-2011-0560, CVE-2011-0571, CVE-2011-0572, CVE-2011-0573, CVE-2011-0574, CVE-2011-0578, CVE-2011-0607, and CVE-2011-0608. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/0348 - http://www.securitytracker.com/id?1025055 - http://www.vupen.com/english/advisories/2011/0
nglish/advisories/2011/0348 - http://www.securitytracker.com/id?1025055 - http://www.vupen.com/english/advisories/2011/0646 - http://www.kb.cert.org/vuls/id/812969 - http://secunia.com/advisories/43267 - http://secunia.com/advisories/43292 - http://www.securityfocus.com/bid/46189 - http://secunia.com/advisories/43351 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14169 - http://secunia.com/advisories/43340 - http://www.vupen.com/english/advisories/2011/0383 - http://www.adobe.com/support/security/bulletins/apsb11-02.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15930 - http://secunia.com/advisories/4374
val.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15930 - http://secunia.com/advisories/43747 - http://www.vupen.com/english/advisories/2011/0402 - http://www.redhat.com/support/errata/RHSA-2011-0259.html - http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_adobe_flash2 - http://www.redhat.com/support/errata/RHSA-2011-0206.html - http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00003.html - http://www.redhat.com/support/errata/RHSA-2011-0368.html
CVE ID: CVE-2011-0562 State: PUBLISHED Published: 2011-02-10T17:00:00 Last Updated: 2024-08-06T21:58:25.353Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows allows local users to gain privileges via a Trojan horse DLL in the current working directory, a different vulnerability than CVE-2011-0570 and CVE-2011-0588. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/0492 - http://www.acrossecurity.com/aspr/ASPR-2011-02-11-1-PUB.txt - http://www.securityfocus.com/archive/1/516399/100/0/threaded
tp://www.acrossecurity.com/aspr/ASPR-2011-02-11-1-PUB.txt - http://www.securityfocus.com/archive/1/516399/100/0/threaded - http://secunia.com/advisories/43470 - http://www.redhat.com/support/errata/RHSA-2011-0301.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12555 - http://www.vupen.com/english/advisories/2011/0337 - http://www.securitytracker.com/id?1025033 - http://www.securityfocus.com/bid/46252 - http://www.adobe.com/support/security/bulletins/apsb11-03.html
CVE ID: CVE-2011-0563 State: PUBLISHED Published: 2011-02-10T17:00:00 Last Updated: 2024-08-06T21:58:25.592Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0589 and CVE-2011-0606. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/0492 - http://secunia.com/advisories/43470 - http://www.redhat.com/support/errata/RHSA-2011-0301.html - http://www.vupen.com/english/a
secunia.com/advisories/43470 - http://www.redhat.com/support/errata/RHSA-2011-0301.html - http://www.vupen.com/english/advisories/2011/0337 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12452 - http://www.securitytracker.com/id?1025033 - http://www.adobe.com/support/security/bulletins/apsb11-03.html
CVE ID: CVE-2011-0564 State: PUBLISHED Published: 2011-02-10T17:00:00 Last Updated: 2024-08-06T21:58:25.926Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows use weak permissions for unspecified files, which allows attackers to gain privileges via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/0337 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12548 - http://www.securitytracker.com/id?1025033 - http://www.adobe.com/support/security/bulletins/apsb11-03.html
CVE ID: CVE-2011-0565 State: PUBLISHED Published: 2011-02-10T17:00:00 Last Updated: 2024-08-06T21:58:25.934Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allows attackers to cause a denial of service or possibly execute arbitrary code via unknown vectors, a different vulnerability than CVE-2011-0585. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/0492 - http://secunia.com/advisories/43470 - http://www.redhat.com/support/errata/RHSA-2011-0301.html - http://www.securityfocus.com/bid/
unia.com/advisories/43470 - http://www.redhat.com/support/errata/RHSA-2011-0301.html - http://www.securityfocus.com/bid/46204 - http://www.vupen.com/english/advisories/2011/0337 - http://www.securitytracker.com/id?1025033 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12606 - http://www.adobe.com/support/security/bulletins/apsb11-03.html
CVE ID: CVE-2011-0566 State: PUBLISHED Published: 2011-02-10T17:00:00 Last Updated: 2024-08-06T21:58:25.434Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted image, a different vulnerability than CVE-2011-0567 and CVE-2011-0603. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/0492 - http://secunia.com/advisories/43470 - http://www.securityfocus.com/bid/46198 - http://www.redhat.com/support/errata/RHSA-201
://secunia.com/advisories/43470 - http://www.securityfocus.com/bid/46198 - http://www.redhat.com/support/errata/RHSA-2011-0301.html - http://www.vupen.com/english/advisories/2011/0337 - http://www.securitytracker.com/id?1025033 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12630 - http://www.adobe.com/support/security/bulletins/apsb11-03.html
CVE ID: CVE-2011-0567 State: PUBLISHED Published: 2011-02-10T17:00:00 Last Updated: 2024-08-06T21:58:25.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: AcroRd32.dll in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted image that triggers an incorrect pointer calculation, leading to heap memory corruption, a different vulnerability than CVE-2011-0566 and CVE-2011-0603. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/0492 - http://secunia.com/advisor
s: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/0492 - http://secunia.com/advisories/43470 - http://www.redhat.com/support/errata/RHSA-2011-0301.html - http://www.securityfocus.com/bid/46199 - http://www.vupen.com/english/advisories/2011/0337 - http://www.zerodayinitiative.com/advisories/ZDI-11-065/ - http://www.securitytracker.com/id?1025033 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12248 - http://www.adobe.com/support/security/bulletins/apsb11-03.html
CVE ID: CVE-2011-0568 State: PUBLISHED Published: 2011-02-10T17:00:00 Last Updated: 2024-08-06T21:58:25.966Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Mac OS X allows attackers to cause a denial of service or possibly execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14024 - http://www.vupen.com/english/advisories/2011/0337 - http://www.securitytracker.com/id?1025033 - http://www.adobe.com/support/security/bulletins/a
ish/advisories/2011/0337 - http://www.securitytracker.com/id?1025033 - http://www.adobe.com/support/security/bulletins/apsb11-03.html
CVE ID: CVE-2011-0569 State: PUBLISHED Published: 2011-02-10T15:00:00 Last Updated: 2024-08-06T21:58:25.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Font Xtra.x32 module in Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a PFR1 chunk containing an invalid size value that leads to an unexpected sign extension and a buffer overflow, a different vulnerability than CVE-2011-0556. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/0335 - http://www.adobe.com/support/security/bulletins/apsb11-01.html - http://www.securityfocus.co
lish/advisories/2011/0335 - http://www.adobe.com/support/security/bulletins/apsb11-01.html - http://www.securityfocus.com/archive/1/516335/100/0/threaded - http://www.securitytracker.com/id?1025056 - http://dvlabs.tippingpoint.com/advisory/TPTI-11-05 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65260
CVE ID: CVE-2011-0570 State: PUBLISHED Published: 2011-02-10T17:00:00 Last Updated: 2024-08-06T21:58:25.953Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows allows local users to gain privileges via a Trojan horse DLL in the current working directory, a different vulnerability than CVE-2011-0562 and CVE-2011-0588. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/65289 - http://www.securityfocus.com/bid/46255 - http://www.vupen.com/english/advisories/2011/0337 - http://www.securityt
5289 - http://www.securityfocus.com/bid/46255 - http://www.vupen.com/english/advisories/2011/0337 - http://www.securitytracker.com/id?1025033 - http://www.adobe.com/support/security/bulletins/apsb11-03.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12262