Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-1088 State: PUBLISHED Published: 2009-03-25T18:00:00 Last Updated: 2024-08-07T04:57:17.922Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hannon Hill Cascade Server 5.7 and other versions allows remote authenticated users to execute arbitrary programs or Java code via a crafted XSLT stylesheet with "extension elements and extension functions" that trigger code execution by Xalan-Java, as demonstrated using xalan://java.lang.Runtime. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8247 - http://support.hannonhill.com/browse/CSCD-4753 - http://www.securityfocus.com/archive/1/501981/100/0/threaded - http://www.se
//support.hannonhill.com/browse/CSCD-4753 - http://www.securityfocus.com/archive/1/501981/100/0/threaded - http://www.securityfocus.com/bid/34186 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49332
CVE ID: CVE-2009-1089 State: PUBLISHED Published: 2009-03-25T18:00:00 Last Updated: 2024-08-07T04:57:17.918Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in upload.php in Rapidleech rev.36 and earlier allows remote attackers to read arbitrary files via a base64-encoded absolute path in the filename parameter. Additional Analyst Notes: - CVE Program Container: References: - http://security.bkis.vn/?p=345 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49253 - http://secunia.com/advisories/34300 - http://www.securityfocus.com/bid/34119 - http://www.securityfocus.com/archive/1/501854/100/0/threaded
CVE ID: CVE-2009-1090 State: PUBLISHED Published: 2009-03-25T18:00:00 Last Updated: 2024-08-07T04:57:17.932Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in upload.php in Rapidleech rev.36 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the uploaded parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/49256 - http://osvdb.org/52753 - http://security.bkis.vn/?p=345 - http://secunia.com/advisories/34300 - http://www.securityfocus.com/bid/34119 - http://www.securityfocus.com/archive/1/501854/100/0/thread
m/advisories/34300 - http://www.securityfocus.com/bid/34119 - http://www.securityfocus.com/archive/1/501854/100/0/threaded
CVE ID: CVE-2009-1091 State: PUBLISHED Published: 2009-03-25T18:00:00 Last Updated: 2024-08-07T04:57:17.689Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in upload.php in Rapidleech rev.36 and earlier allows remote attackers to inject arbitrary web script or HTML via the uploaded parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/52754 - http://security.bkis.vn/?p=345 - http://secunia.com/advisories/34300 - http://www.securityfocus.com/bid/34119 - http://www.securityfocus.com/archive/1/501854/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/49257
CVE ID: CVE-2009-1092 State: PUBLISHED Published: 2009-03-25T18:00:00 Last Updated: 2024-08-07T04:57:17.812Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the LIVEAUDIO.LiveAudioCtrl.1 ActiveX control in LIVEAU~1.OCX 7.0 for GeoVision DVR systems allows remote attackers to execute arbitrary code by calling the GetAudioPlayingTime method with certain arguments. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/49238 - http://www.securityfocus.com/bid/34115 - http://retrogod.altervista.org/9sg_geovision_liveaudio_freedmem.html - https://www.exploit-db.com/exploits/8206 - http://www.
//retrogod.altervista.org/9sg_geovision_liveaudio_freedmem.html - https://www.exploit-db.com/exploits/8206 - http://www.securityfocus.com/archive/1/501773/100/0/threaded
CVE ID: CVE-2009-1093 State: PUBLISHED Published: 2009-03-25T23:00:00 Last Updated: 2024-08-07T04:57:17.813Z Vendors: n/a Products: n/a Problem Types: n/a Description: LdapCtx in the LDAP service in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; SDK and JRE 1.3.1_24 and earlier; and 1.4.2_19 and earlier does not close the connection when initialization fails, which allows remote attackers to cause a denial of service (LDAP service hang). Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00001.html - http://www.mandriva.com/security/advisories?na
p://lists.opensuse.org/opensuse-security-announce/2009-07/msg00001.html - http://www.mandriva.com/security/advisories?name=MDVSA-2009:137 - http://secunia.com/advisories/34632 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133 - http://secunia.com/advisories/35156 - http://secunia.com/advisories/34675 - http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00003.html - http://secunia.com/advisories/35776 - http://support.avaya.com/elmodocs2/security/ASA-2009-109.htm - http://secunia.com/advisories/37460 - http://secunia.com/advisories/34489 - http://security.gentoo.org/glsa/glsa-200911-02.xml - http://www.redhat.com/support/errata/RHSA-
a.com/advisories/34489 - http://security.gentoo.org/glsa/glsa-200911-02.xml - http://www.redhat.com/support/errata/RHSA-2009-1038.html - https://rhn.redhat.com/errata/RHSA-2009-1198.html - http://www.vmware.com/security/advisories/VMSA-2009-0016.html - http://marc.info/?l=bugtraq&m=124344236532162&w=2 - http://www.redhat.com/support/errata/RHSA-2009-0394.html - http://secunia.com/advisories/34495 - http://www.securitytracker.com/id?1021893 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-118667-19-1 - http://secunia.com/advisories/36185 - https://rhn.redhat.com/errata/RHSA-2009-0377.html - http://secunia.com/advisories/35255 - http://www.vupen.com/english/advisories/2009/1426 - htt
rata/RHSA-2009-0377.html - http://secunia.com/advisories/35255 - http://www.vupen.com/english/advisories/2009/1426 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-254569-1 - http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html - http://www.mandriva.com/security/advisories?name=MDVSA-2009:162 - http://www.securityfocus.com/archive/1/507985/100/0/threaded - http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html - http://www.redhat.com/support/errata/RHSA-2009-0392.html - http://secunia.com/advisories/35223 - http://www.securityfocus.com/bid/34240 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11343 - h
tyfocus.com/bid/34240 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11343 - http://secunia.com/advisories/34496 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6676 - http://www.ubuntu.com/usn/usn-748-1 - http://www.debian.org/security/2009/dsa-1769 - http://secunia.com/advisories/35416 - http://support.avaya.com/elmodocs2/security/ASA-2009-108.htm - http://secunia.com/advisories/37386 - http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html - http://www.vupen.com/english/advisories/2009/3316
CVE ID: CVE-2009-1094 State: PUBLISHED Published: 2009-03-25T23:00:00 Last Updated: 2024-08-07T04:57:17.640Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the LDAP implementation in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; SDK and JRE 1.3.1_24 and earlier; and 1.4.2_19 and earlier allows remote LDAP servers to execute arbitrary code via unknown vectors related to serialized data. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00001.html - http://www.mandriva.com/security/advisories?name=MDVSA-20
pensuse.org/opensuse-security-announce/2009-07/msg00001.html - http://www.mandriva.com/security/advisories?name=MDVSA-2009:137 - http://secunia.com/advisories/34632 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133 - http://secunia.com/advisories/35156 - http://secunia.com/advisories/34675 - http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00003.html - http://secunia.com/advisories/35776 - http://support.avaya.com/elmodocs2/security/ASA-2009-109.htm - http://secunia.com/advisories/37460 - http://secunia.com/advisories/34489 - http://security.gentoo.org/glsa/glsa-200911-02.xml - http://www.redhat.com/support/errata/RHSA-2009-1038.h
ories/34489 - http://security.gentoo.org/glsa/glsa-200911-02.xml - http://www.redhat.com/support/errata/RHSA-2009-1038.html - https://rhn.redhat.com/errata/RHSA-2009-1198.html - http://www.vmware.com/security/advisories/VMSA-2009-0016.html - http://marc.info/?l=bugtraq&m=124344236532162&w=2 - http://www.redhat.com/support/errata/RHSA-2009-0394.html - http://secunia.com/advisories/34495 - http://www.securitytracker.com/id?1021893 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-118667-19-1 - http://secunia.com/advisories/36185 - https://rhn.redhat.com/errata/RHSA-2009-0377.html - http://secunia.com/advisories/35255 - http://www.vupen.com/english/advisories/2009/1900 - http://www.vup
009-0377.html - http://secunia.com/advisories/35255 - http://www.vupen.com/english/advisories/2009/1900 - http://www.vupen.com/english/advisories/2009/1426 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-254569-1 - http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html - http://www.mandriva.com/security/advisories?name=MDVSA-2009:162 - http://www.securityfocus.com/archive/1/507985/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11064 - http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html - http://www.redhat.com/support/errata/RHSA-2009-0392.html - http://secunia.com/advisories/35223 - h
jul2009-091332.html - http://www.redhat.com/support/errata/RHSA-2009-0392.html - http://secunia.com/advisories/35223 - http://www.securityfocus.com/bid/34240 - http://secunia.com/advisories/34496 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133 - http://www.ubuntu.com/usn/usn-748-1 - http://www.debian.org/security/2009/dsa-1769 - http://secunia.com/advisories/35416 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6598 - http://support.avaya.com/elmodocs2/security/ASA-2009-108.htm - http://secunia.com/advisories/37386 - http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html - http://www
//secunia.com/advisories/37386 - http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html - http://www.vupen.com/english/advisories/2009/3316
CVE ID: CVE-2009-1095 State: PUBLISHED Published: 2009-03-25T23:00:00 Last Updated: 2024-08-07T04:57:17.796Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in unpack200 in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier, and 6 Update 12 and earlier, allows remote attackers to access files or execute arbitrary code via a JAR file with crafted Pack200 headers. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00001.html - http://www.mandriva.com/security/advisories?name=MDVSA-2009:137 - http://secunia.com/advisories/34632 - http://h20000.www2.hp
//www.mandriva.com/security/advisories?name=MDVSA-2009:137 - http://secunia.com/advisories/34632 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-254570-1 - http://secunia.com/advisories/35156 - http://secunia.com/advisories/34675 - http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00003.html - http://secunia.com/advisories/35776 - http://support.avaya.com/elmodocs2/security/ASA-2009-109.htm - http://secunia.com/advisories/37460 - http://secunia.com/advisories/34489 - http://security.gentoo.org/glsa/glsa-200911-02.xml - http://www.redhat.com/support/errata/RHSA-2009-1038.h
ories/34489 - http://security.gentoo.org/glsa/glsa-200911-02.xml - http://www.redhat.com/support/errata/RHSA-2009-1038.html - https://rhn.redhat.com/errata/RHSA-2009-1198.html - http://www.vmware.com/security/advisories/VMSA-2009-0016.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10124 - http://marc.info/?l=bugtraq&m=124344236532162&w=2 - http://www.redhat.com/support/errata/RHSA-2009-0394.html - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=781 - http://secunia.com/advisories/34495 - http://secunia.com/advisories/36185 - https://rhn.redhat.com/errata/RHSA-2009-0377.html - http://secunia.com/advisories/35255 - http://www.
advisories/36185 - https://rhn.redhat.com/errata/RHSA-2009-0377.html - http://secunia.com/advisories/35255 - http://www.vupen.com/english/advisories/2009/1426 - http://www.securitytracker.com/id?1021894 - http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html - http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020225.1-1 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:162 - http://www.securityfocus.com/archive/1/507985/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6643 - http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html - http://www.redhat.com/support/errata/RHSA-2009-03
://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html - http://www.redhat.com/support/errata/RHSA-2009-0392.html - http://secunia.com/advisories/35223 - http://www.securityfocus.com/bid/34240 - http://secunia.com/advisories/34496 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133 - http://www.ubuntu.com/usn/usn-748-1 - http://www.debian.org/security/2009/dsa-1769 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-125137-14-1 - http://secunia.com/advisories/35416 - http://support.avaya.com/elmodocs2/security/ASA-2009-108.htm - http://secunia.com/advisories/37386 - http://lists.opensuse.org/opensuse-security-announce/2009-04/
y/ASA-2009-108.htm - http://secunia.com/advisories/37386 - http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html - http://www.vupen.com/english/advisories/2009/3316
CVE ID: CVE-2009-1096 State: PUBLISHED Published: 2009-03-25T23:00:00 Last Updated: 2024-08-07T04:57:17.714Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in unpack200 in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier, and 6 Update 12 and earlier, allows remote attackers to access files or execute arbitrary code via a JAR file with crafted Pack200 headers. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00001.html - http://www.mandriva.com/security/advisories?name=MDVSA-2009:137 - http://secunia.com/advisories/34632 - http://h20000.www2.hp.
/www.mandriva.com/security/advisories?name=MDVSA-2009:137 - http://secunia.com/advisories/34632 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-254570-1 - http://secunia.com/advisories/35156 - http://secunia.com/advisories/34675 - http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00003.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6659 - http://support.avaya.com/elmodocs2/security/ASA-2009-109.htm - http://secunia.com/advisories/37460 - http://secunia.com/advisories/34489 - http://security.gentoo.org/glsa/glsa-200911-02.xml
secunia.com/advisories/37460 - http://secunia.com/advisories/34489 - http://security.gentoo.org/glsa/glsa-200911-02.xml - http://www.redhat.com/support/errata/RHSA-2009-1038.html - https://rhn.redhat.com/errata/RHSA-2009-1198.html - http://www.vmware.com/security/advisories/VMSA-2009-0016.html - http://marc.info/?l=bugtraq&m=124344236532162&w=2 - http://www.redhat.com/support/errata/RHSA-2009-0394.html - http://secunia.com/advisories/34495 - http://secunia.com/advisories/36185 - https://rhn.redhat.com/errata/RHSA-2009-0377.html - http://secunia.com/advisories/35255 - http://www.vupen.com/english/advisories/2009/1426 - http://www.securitytracker.com/id?1021894 - http://lists.opensuse.org/open
/www.vupen.com/english/advisories/2009/1426 - http://www.securitytracker.com/id?1021894 - http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html - http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020225.1-1 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:162 - http://www.securityfocus.com/archive/1/507985/100/0/threaded - http://www.redhat.com/support/errata/RHSA-2009-0392.html - http://secunia.com/advisories/35223 - http://www.securityfocus.com/bid/34240 - http://secunia.com/advisories/34496 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133 - http://www.ubuntu.com/usn/usn-748-1 - http://www.debian.org/
TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133 - http://www.ubuntu.com/usn/usn-748-1 - http://www.debian.org/security/2009/dsa-1769 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-125137-14-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8844 - http://secunia.com/advisories/35416 - http://support.avaya.com/elmodocs2/security/ASA-2009-108.htm - http://secunia.com/advisories/37386 - http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html - http://www.vupen.com/english/advisories/2009/3316
CVE ID: CVE-2009-1097 State: PUBLISHED Published: 2009-03-25T23:00:00 Last Updated: 2024-08-07T04:57:17.819Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12 and earlier allow remote attackers to access files or execute arbitrary code via (1) a crafted PNG image that triggers an integer overflow during memory allocation for display on the splash screen, aka CR 6804996; and (2) a crafted GIF image from which unspecified values are used in calculation of offsets, leading to object-pointer corruption, aka CR 6804997. Additional Analyst Notes: - CVE Program Container: References: -
, leading to object-pointer corruption, aka CR 6804997. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00001.html - http://www.mandriva.com/security/advisories?name=MDVSA-2009:137 - http://secunia.com/advisories/34632 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133 - http://secunia.com/advisories/35156 - http://secunia.com/advisories/34675 - http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00003.html - http://secunia.com/advisories/35776 - http://www.securitytracker.com/id?1021913 - http://secunia.com/advisories/37460 - http://secunia.com/advisorie
s/35776 - http://www.securitytracker.com/id?1021913 - http://secunia.com/advisories/37460 - http://secunia.com/advisories/34489 - http://security.gentoo.org/glsa/glsa-200911-02.xml - http://www.redhat.com/support/errata/RHSA-2009-1038.html - https://rhn.redhat.com/errata/RHSA-2009-1198.html - http://www.vmware.com/security/advisories/VMSA-2009-0016.html - http://marc.info/?l=bugtraq&m=124344236532162&w=2 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-254571-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49475 - http://secunia.com/advisories/36185 - https://rhn.redhat.com/errata/RHSA-2009-0377.html - http://secunia.com/advisories/35255 - https://oval.cisecurity.org/repos
ps://rhn.redhat.com/errata/RHSA-2009-0377.html - http://secunia.com/advisories/35255 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6288 - http://www.vupen.com/english/advisories/2009/1426 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:162 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=780 - http://www.securityfocus.com/archive/1/507985/100/0/threaded - http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html - http://www.redhat.com/support/errata/RHSA-2009-0392.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11241 - http://secunia.com/advisories/3522
val.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11241 - http://secunia.com/advisories/35223 - http://www.securityfocus.com/bid/34240 - http://secunia.com/advisories/34496 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=779 - http://www.ubuntu.com/usn/usn-748-1 - http://www.debian.org/security/2009/dsa-1769 - http://support.avaya.com/elmodocs2/security/ASA-2009-108.htm - http://secunia.com/advisories/37386 - http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html - http://www.vupen.com/english/advisories/2009/3316
CVE ID: CVE-2009-1098 State: PUBLISHED Published: 2009-03-25T23:00:00 Last Updated: 2024-08-07T04:57:17.770Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; 1.4.2_19 and earlier; and 1.3.1_24 and earlier allows remote attackers to access files or execute arbitrary code via a crafted GIF image, aka CR 6804998. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00001.html - http://www.mandriva.com/security/advisories?name=MDVSA-2009:137 - http://secunia.com/advisories/3463
-07/msg00001.html - http://www.mandriva.com/security/advisories?name=MDVSA-2009:137 - http://secunia.com/advisories/34632 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133 - http://secunia.com/advisories/35156 - http://secunia.com/advisories/34675 - http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00003.html - http://secunia.com/advisories/35776 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6008 - http://support.avaya.com/elmodocs2/security/ASA-2009-109.htm - http://www.securitytracker.com/id?1021913 - http://secunia.com/advisories/37460 - http://secunia.com/advisories/34489 - http://secu
securitytracker.com/id?1021913 - http://secunia.com/advisories/37460 - http://secunia.com/advisories/34489 - http://security.gentoo.org/glsa/glsa-200911-02.xml - http://www.redhat.com/support/errata/RHSA-2009-1038.html - https://rhn.redhat.com/errata/RHSA-2009-1198.html - http://www.vmware.com/security/advisories/VMSA-2009-0016.html - http://marc.info/?l=bugtraq&m=124344236532162&w=2 - http://www.redhat.com/support/errata/RHSA-2009-0394.html - http://sunsolve.sun.com/search/document.do?assetkey=1-26-254571-1 - http://secunia.com/advisories/34495 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9956 - http://secunia.com/advisories/36185 - https://rhn.re