Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
and execute arbitrary code, via vectors related to absence of a "credential-reflection protections" opt-in step, aka "Windows HTTP Services Credential Reflection Vulnerability" and "WinINet Credential Reflection Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/1028 - http://osvdb.org/53619 - http://secunia.com/advisories/34677 - http://www.us-cert.gov/cas/techalerts/TA09-104A.html - http://www.securitytracker.com/id?1022041 - http://secunia.com/advisories/34678 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6233 - https://oval.cisecurity.org/repository/search/definition/ova
tory/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6233 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7569 - http://blogs.technet.com/srd/archive/2009/04/14/ntlm-credential-reflection-updates-for-http-clients.aspx - http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=871138 - http://www.securityfocus.com/bid/34439 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-014 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5320 - http://www.vupen.com/english/advisories/2009/1027 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-013 - http://support.av
sories/2009/1027 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-013 - http://support.avaya.com/elmodocs2/security/ASA-2009-133.htm
CVE ID: CVE-2009-0551 State: PUBLISHED Published: 2009-04-15T03:49:00 Last Updated: 2024-10-21T16:26:23.249Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 SP1, 6 and 7 on Windows XP SP2 and SP3, 6 and 7 on Windows Server 2003 SP1 and SP2, 7 on Windows Vista Gold and SP1, and 7 on Windows Server 2008 does not properly handle transition errors in a request for one HTTP document followed by a request for a second HTTP document, which allows remote attackers to execute arbitrary code via vectors involving (1) multiple crafted pages on a web site or (2) a web page with crafted inline content such as banner advertisements, aka "Page Transition Memory Corr
a web site or (2) a web page with crafted inline content such as banner advertisements, aka "Page Transition Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.vupen.com/english/advisories/2009/1028 - http://osvdb.org/53624 - http://www.us-cert.gov/cas/techalerts/TA09-104A.html - http://secunia.com/advisories/34678 - http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=871138 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6164 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-014 - http://www.securitytracker.com/id?1022042 - http://s
rosoft.com/en-us/security-updates/securitybulletins/2009/ms09-014 - http://www.securitytracker.com/id?1022042 - http://support.avaya.com/elmodocs2/security/ASA-2009-133.htm
CVE ID: CVE-2009-0552 State: PUBLISHED Published: 2009-04-15T03:49:00 Last Updated: 2024-08-07T04:40:05.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Microsoft Internet Explorer 5.01 SP4, 6 SP1, 6 on Windows XP SP2 and SP3, and 6 on Windows Server 2003 SP1 and SP2 allows remote attackers to execute arbitrary code via a web page that triggers presence of an object in memory that was (1) not properly initialized or (2) deleted, aka "Uninitialized Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/1028 - http://osvdb.org/53625 - http://www.us-cert.gov/cas/t
References: - http://www.vupen.com/english/advisories/2009/1028 - http://osvdb.org/53625 - http://www.us-cert.gov/cas/techalerts/TA09-104A.html - http://secunia.com/advisories/34678 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5551 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-014 - http://www.securitytracker.com/id?1022042 - http://support.avaya.com/elmodocs2/security/ASA-2009-133.htm
CVE ID: CVE-2009-0553 State: PUBLISHED Published: 2009-04-15T03:49:00 Last Updated: 2024-08-07T04:40:04.086Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 SP1, 6 and 7 on Windows XP SP2 and SP3, 6 and 7 on Windows Server 2003 SP1 and SP2, 7 on Windows Vista Gold and SP1, and 7 on Windows Server 2008 allows remote attackers to execute arbitrary code via a web page that triggers presence of an object in memory that was (1) not properly initialized or (2) deleted, aka "Uninitialized Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/1028 - http://www.us-cert.go
Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/1028 - http://www.us-cert.gov/cas/techalerts/TA09-104A.html - http://secunia.com/advisories/34678 - http://skypher.com/index.php/2009/04/19/ms09-014-embed-element-memory-corruption/ - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-014 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6069 - http://www.securityfocus.com/bid/34424 - http://osvdb.org/53626 - http://www.securitytracker.com/id?1022042 - http://support.avaya.com/elmodocs2/security/ASA-2009-133.htm
CVE ID: CVE-2009-0554 State: PUBLISHED Published: 2009-04-15T03:49:00 Last Updated: 2025-01-21T15:23:09.366Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 5.01 SP4, 6 SP1, 6 and 7 on Windows XP SP2 and SP3, 6 and 7 on Windows Server 2003 SP1 and SP2, 7 on Windows Vista Gold and SP1, and 7 on Windows Server 2008 allows remote attackers to execute arbitrary code via a web page that triggers presence of an object in memory that was (1) not properly initialized or (2) deleted, aka "Uninitialized Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.vupen.com/english/advisorie
al Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.vupen.com/english/advisories/2009/1028 - http://www.us-cert.gov/cas/techalerts/TA09-104A.html - http://secunia.com/advisories/34678 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-014 - http://www.securitytracker.com/id?1022042 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5723 - http://support.avaya.com/elmodocs2/security/ASA-2009-133.htm
CVE ID: CVE-2009-0555 State: PUBLISHED Published: 2009-10-14T10:00:00 Last Updated: 2024-08-07T04:40:05.072Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows Media Runtime, as used in DirectShow WMA Voice Codec, Windows Media Audio Voice Decoder, and Audio Compression Manager (ACM), does not properly process Advanced Systems Format (ASF) files, which allows remote attackers to execute arbitrary code via a crafted audio file that uses the Windows Media Speech codec, aka "Windows Media Runtime Voice Sample Rate Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ov
tes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6407 - http://www.us-cert.gov/cas/techalerts/TA09-286A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-051
CVE ID: CVE-2009-0556 State: PUBLISHED Published: 2009-04-03T18:00:00 Last Updated: 2024-08-07T04:40:05.099Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3, and PowerPoint in Microsoft Office 2004 for Mac, allows remote attackers to execute arbitrary code via a PowerPoint file with an OutlineTextRefAtom containing an an invalid index value that triggers memory corruption, as exploited in the wild in April 2009 by Exploit:Win32/Apptom.gen, aka "Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-09-019 - http://blogs.technet.co
- CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-09-019 - http://blogs.technet.com/mmpc/archive/2009/04/02/new-0-day-exploits-using-powerpoint-files.aspx - http://www.vupen.com/english/advisories/2009/1290 - http://osvdb.org/53182 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-017 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49632 - http://www.securityfocus.com/bid/34351 - http://www.vupen.com/english/advisories/2009/0915 - http://blogs.technet.com/msrc/archive/2009/04/02/microsoft-security-advisory-969136.aspx - http://blogs.technet.com/srd/archive/2009/04/02/investigating-the-new-powerpoint-issue.aspx - https
visory-969136.aspx - http://blogs.technet.com/srd/archive/2009/04/02/investigating-the-new-powerpoint-issue.aspx - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6279 - http://secunia.com/advisories/34572 - http://www.securitytracker.com/id?1021967 - http://www.us-cert.gov/cas/techalerts/TA09-132A.html - http://www.microsoft.com/technet/security/advisory/969136.mspx - http://www.kb.cert.org/vuls/id/627331 - http://www.securityfocus.com/archive/1/503453/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6204
CVE ID: CVE-2009-0557 State: PUBLISHED Published: 2009-06-10T18:00:00.000Z Last Updated: 2025-10-22T00:05:54.825Z Vendors: n/a Products: n/a Problem Types: n/a Description: Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, and Office 2004 and 2008 for Mac; Excel in 2007 Microsoft Office System SP1 and SP2; Open XML File Format Converter for Mac; Microsoft Office Excel Viewer 2003 SP3; Microsoft Office Excel Viewer; and Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allow remote attackers to execute arbitrary code via a crafted Excel file with a malformed record object, aka "Object Record Corruption Vulnerability." Additiona
ry code via a crafted Excel file with a malformed record object, aka "Object Record Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.vupen.com/english/advisories/2009/1540 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5564 - http://www.securitytracker.com/id?1022351 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-021 - http://osvdb.org/54953 - http://www.securityfocus.com/bid/35241 - http://www.us-cert.gov/cas/techalerts/TA09-160A.html
CVE ID: CVE-2009-0558 State: PUBLISHED Published: 2009-06-10T18:00:00 Last Updated: 2024-08-07T04:40:04.026Z Vendors: n/a Products: n/a Problem Types: n/a Description: Array index error in Excel in Microsoft Office 2000 SP3 and Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac, allows remote attackers to execute arbitrary code via a crafted Excel file with a malformed record object, aka "Array Indexing Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/1540 - http://www.securityfocus.com/archive/1/504188/100/0/threaded - http://www.securityfocus.com/bid/35242 - http://www.secur
http://www.securityfocus.com/archive/1/504188/100/0/threaded - http://www.securityfocus.com/bid/35242 - http://www.securitytracker.com/id?1022351 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-021 - http://osvdb.org/54954 - http://www.us-cert.gov/cas/techalerts/TA09-160A.html - http://secunia.com/secunia_research/2009-1/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11525
CVE ID: CVE-2009-0559 State: PUBLISHED Published: 2009-06-10T18:00:00 Last Updated: 2024-08-07T04:40:05.044Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Excel in Microsoft Office 2000 SP3 and Office XP SP3 allows remote attackers to execute arbitrary code via a crafted Excel file with a malformed record object, aka "String Copy Stack-Based Overrun Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/1540 - http://www.securitytracker.com/id?1022351 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-021 - https://oval.cisecurity.org/repository/sear
/docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-021 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6273 - http://www.us-cert.gov/cas/techalerts/TA09-160A.html - http://www.securityfocus.com/bid/35243
CVE ID: CVE-2009-0560 State: PUBLISHED Published: 2009-06-10T18:00:00 Last Updated: 2024-08-07T04:40:04.108Z Vendors: n/a Products: n/a Problem Types: n/a Description: Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, and Office 2004 and 2008 for Mac; Excel in 2007 Microsoft Office System SP1 and SP2; Open XML File Format Converter for Mac; Microsoft Office Excel Viewer 2003 SP3; Microsoft Office Excel Viewer; and Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allow remote attackers to execute arbitrary code via a crafted Excel file with a malformed record object, aka "Field Sanitization Memory Corruption Vulnerability." Ad
de via a crafted Excel file with a malformed record object, aka "Field Sanitization Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/1540 - http://osvdb.org/54956 - http://www.securitytracker.com/id?1022351 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-021 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6178 - http://www.us-cert.gov/cas/techalerts/TA09-160A.html - http://www.securityfocus.com/bid/35244
CVE ID: CVE-2009-0561 State: PUBLISHED Published: 2009-06-10T18:00:00 Last Updated: 2024-08-07T04:40:05.071Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, and Office 2004 and 2008 for Mac; Excel in 2007 Microsoft Office System SP1 and SP2; Open XML File Format Converter for Mac; Microsoft Office Excel Viewer 2003 SP3; Microsoft Office Excel Viewer; Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2; and Microsoft Office SharePoint Server 2007 SP1 and SP2 allows remote attackers to execute arbitrary code via an Excel file with a Shared String Tabl
nt Server 2007 SP1 and SP2 allows remote attackers to execute arbitrary code via an Excel file with a Shared String Table (SST) record with a numeric field that specifies an invalid number of unique strings, which triggers a heap-based buffer overflow, aka "Record Integer Overflow Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/1540 - http://secunia.com/secunia_research/2009-12/ - http://www.securityfocus.com/archive/1/504190/100/0/threaded - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=805 - http://www.securitytracker.com/id?1022351 - https://oval.cisecurity.org/repository/search/definition
isplay.php?id=805 - http://www.securitytracker.com/id?1022351 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5925 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-021 - http://www.us-cert.gov/cas/techalerts/TA09-160A.html - http://osvdb.org/54957 - http://www.securityfocus.com/bid/35245
CVE ID: CVE-2009-0562 State: PUBLISHED Published: 2009-08-12T17:00:00 Last Updated: 2024-08-07T04:40:05.053Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Office Web Components ActiveX Control in Microsoft Office XP SP3, Office 2003 SP3, Office XP Web Components SP3, Office 2003 Web Components SP3, Office 2003 Web Components SP1 for the 2007 Microsoft Office System, Internet Security and Acceleration (ISA) Server 2004 SP3 and 2006 SP1, and Office Small Business Accounting 2006 does not properly allocate memory, which allows remote attackers to execute arbitrary code via unspecified vectors that trigger "system state" corruption, aka "Office Web Components Memory Allocation V
rary code via unspecified vectors that trigger "system state" corruption, aka "Office Web Components Memory Allocation Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA09-223A.html - http://www.securitytracker.com/id?1022708 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6337 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-043
CVE ID: CVE-2009-0563 State: PUBLISHED Published: 2009-06-10T17:37:00.000Z Last Updated: 2025-10-22T00:05:55.003Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Microsoft Office for Mac 2004 and 2008; Open XML File Format Converter for Mac; Microsoft Office Word Viewer 2003 SP3; Microsoft Office Word Viewer; and Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allows remote attackers to execute arbitrary code via a Word document with a crafted tag containing an invalid length field, aka "Word Buffer Overflow Vulnerability." Additional Ana
document with a crafted tag containing an invalid length field, aka "Word Buffer Overflow Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6133 - http://www.securityfocus.com/bid/35188 - http://osvdb.org/54959 - http://www.zerodayinitiative.com/advisories/ZDI-09-035 - http://www.us-cert.gov/cas/techalerts/TA09-160A.html - http://www.securitytracker.com/id?1022356 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-027 - http://www.vupen.com/english/advisories/2009/1546 - http://www.securityfocus.com/archive/1/504204/100/0/
2009/ms09-027 - http://www.vupen.com/english/advisories/2009/1546 - http://www.securityfocus.com/archive/1/504204/100/0/threaded
CVE ID: CVE-2009-0565 State: PUBLISHED Published: 2009-06-10T17:37:00 Last Updated: 2024-08-07T04:40:04.061Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Microsoft Office Word 2000 SP3, 2002 SP3, and 2007 SP1 and SP2; Microsoft Office for Mac 2004 and 2008; Open XML File Format Converter for Mac; and Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allows remote attackers to execute arbitrary code via a Word document with a malformed record that triggers memory corruption, aka "Word Buffer Overflow Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/54960 - http://s
rflow Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/54960 - http://securityreason.com/securityalert/8206 - http://www.us-cert.gov/cas/techalerts/TA09-160A.html - http://www.securitytracker.com/id?1022356 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6334 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-027 - http://www.vupen.com/english/advisories/2009/1546 - http://www.securityfocus.com/bid/35190
CVE ID: CVE-2009-0566 State: PUBLISHED Published: 2009-07-15T15:00:00 Last Updated: 2024-08-07T04:40:05.108Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Office Publisher 2007 SP1 does not properly calculate object handler data for Publisher files, which allows remote attackers to execute arbitrary code via a crafted file in a legacy format that triggers memory corruption, aka "Pointer Dereference Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6285 - http://www.securitytracker.com/id?1022546 - http://osvdb.org/55838 - https://docs.microsoft.com/en-u
oval%3Adef%3A6285 - http://www.securitytracker.com/id?1022546 - http://osvdb.org/55838 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-030 - http://www.securityfocus.com/bid/35599 - http://www.vupen.com/english/advisories/2009/1888 - http://www.us-cert.gov/cas/techalerts/TA09-195A.html
CVE ID: CVE-2009-0567 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2009-0568 State: PUBLISHED Published: 2009-06-10T17:37:00 Last Updated: 2024-08-07T04:40:04.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RPC Marshalling Engine (aka NDR) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 does not properly maintain its internal state, which allows remote attackers to overwrite arbitrary memory locations via a crafted RPC message that triggers incorrect pointer reading, related to "IDL interfaces containing a non-conformant varying array" and FC_SMVARRAY, FC_LGVARRAY, FC_VARIABLE_REPEAT, and FC_VARIABLE_OFFSET, aka "RPC Marshalling Engine Vulnerability." Additional An
RRAY, FC_LGVARRAY, FC_VARIABLE_REPEAT, and FC_VARIABLE_OFFSET, aka "RPC Marshalling Engine Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/1545 - http://blogs.technet.com/srd/archive/2009/06/09/ms09-026-how-a-developer-can-know-if-their-rpc-interface-is-affected.aspx - http://www.securitytracker.com/id?1022357 - http://osvdb.org/54936 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-026 - http://www.us-cert.gov/cas/techalerts/TA09-160A.html - http://www.securityfocus.com/bid/35219 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6227
CVE ID: CVE-2009-0569 State: PUBLISHED Published: 2009-02-13T01:00:00 Last Updated: 2024-08-07T04:40:05.089Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Becky! Internet Mail 2.48.02 and earlier allows remote attackers to execute arbitrary code via a mail message with a crafted return receipt request. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000011.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/48684 - http://secunia.com/advisories/33892 - http://www.securityfocus.com/bid/33756 - http://www.rimarts.jp/downloads/B2/Readme-e.txt - http://jvn.jp/en/jp/JVN29641290/index.html
CVE ID: CVE-2009-0570 State: PUBLISHED Published: 2009-02-13T17:00:00 Last Updated: 2024-08-07T04:40:04.969Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in send.php in Ninja Designs Mailist 3.0, when register_globals is enabled and magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the load parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33682 - https://www.exploit-db.com/exploits/8001 - http://www.securityfocus.com/bid/33648