Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2011-1264 State: PUBLISHED Published: 2011-06-16T20:21:00 Last Updated: 2024-08-06T22:21:33.965Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Active Directory Certificate Services Web Enrollment in Microsoft Windows Server 2003 SP2 and Server 2008 Gold, SP2, R2, and R2 SP1 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka "Active Directory Certificate Services Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12749 - https://docs.microsoft.com/en-us/security-up
rity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12749 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-051
CVE ID: CVE-2011-1265 State: PUBLISHED Published: 2011-07-13T22:00:00 Last Updated: 2024-08-06T22:21:33.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Bluetooth Stack 2.1 in Microsoft Windows Vista SP1 and SP2 and Windows 7 Gold and SP1 does not prevent access to objects in memory that (1) were not properly initialized or (2) have been deleted, which allows remote attackers to execute arbitrary code via crafted Bluetooth packets, aka "Bluetooth Stack Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12094 - https://docs.microsoft.com/en-us/security-update
.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12094 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-053 - http://www.us-cert.gov/cas/techalerts/TA11-193A.html
CVE ID: CVE-2011-1266 State: PUBLISHED Published: 2011-06-16T20:21:00 Last Updated: 2024-08-06T22:21:33.899Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Vector Markup Language (VML) implementation in vgx.dll in Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, aka "VML Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12593 - https://docs.microsoft.com/en-us/security-updat
y.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12593 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-052
CVE ID: CVE-2011-1267 State: PUBLISHED Published: 2011-06-16T20:21:00 Last Updated: 2024-08-06T22:21:34.192Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SMB server in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to cause a denial of service (system hang) via a crafted (1) SMBv1 or (2) SMBv2 request, aka "SMB Request Parsing Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/67724 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-048 - https://oval.cisecurity.org/repository/
ps://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-048 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12654
CVE ID: CVE-2011-1268 State: PUBLISHED Published: 2011-06-16T20:21:00 Last Updated: 2024-08-06T22:21:34.050Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SMB client in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote SMB servers to execute arbitrary code via a crafted (1) SMBv1 or (2) SMBv2 response, aka "SMB Response Parsing Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12746 - https://docs.microsoft.com/en-us/security-updates/sec
repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12746 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-043
CVE ID: CVE-2011-1269 State: PUBLISHED Published: 2011-05-13T17:00:00 Last Updated: 2024-08-06T22:21:34.092Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft PowerPoint 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 make unspecified function calls during file parsing without proper handling of memory, which allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka "Presentation Memory Corruption RCE Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.c
Corruption RCE Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-036 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12438
CVE ID: CVE-2011-1270 State: PUBLISHED Published: 2011-05-13T17:00:00 Last Updated: 2024-08-06T22:21:34.049Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Microsoft PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka "Presentation Buffer Overrun RCE Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-036 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12256
CVE ID: CVE-2011-1271 State: PUBLISHED Published: 2011-05-10T19:00:00 Last Updated: 2024-10-17T18:54:02.496Z Vendors: n/a Products: n/a Problem Types: n/a Description: The JIT compiler in Microsoft .NET Framework 3.5 Gold and SP1, 3.5.1, and 4.0, when IsJITOptimizerDisabled is false, does not properly handle expressions related to null strings, which allows context-dependent attackers to bypass intended access restrictions, and consequently execute arbitrary code, in opportunistic circumstances by leveraging a crafted application, as demonstrated by (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET application, or (3) a crafted .NET Framework application, aka ".NET Fra
er application (aka XBAP), (2) a crafted ASP.NET application, or (3) a crafted .NET Framework application, aka ".NET Framework JIT Optimization Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12686 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-044 - http://stackoverflow.com/questions/2135509/bug-only-occurring-when-compile-optimization-enabled/
CVE ID: CVE-2011-1272 State: PUBLISHED Published: 2011-06-16T20:21:00 Last Updated: 2024-08-06T22:21:33.978Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Excel 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 do not properly validate record structures during parsing of Excel spreadsheets, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel Insufficient Record Validation Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocu
cord Validation Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/48157 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12139 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-045
CVE ID: CVE-2011-1273 State: PUBLISHED Published: 2011-06-16T20:21:00 Last Updated: 2024-08-06T22:21:33.981Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Excel 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004, 2008, and 2011 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 do not properly validate record information during parsing of Excel spreadsheets, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted spreadsheet, aka "Excel Improper Record Parsing Vulnerability." Additional Analyst Notes: - CVE
rruption) via a crafted spreadsheet, aka "Excel Improper Record Parsing Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/72921 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12354 - http://secunia.com/advisories/44931/ - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-045
CVE ID: CVE-2011-1274 State: PUBLISHED Published: 2011-06-16T20:21:00 Last Updated: 2024-08-06T22:21:34.071Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Excel 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 do not properly validate record information during parsing of Excel spreadsheets, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted spreadsheet, aka "Excel Out of Bounds Array Access Vulnerability." Additional Analyst Notes: - CVE Program Co
a crafted spreadsheet, aka "Excel Out of Bounds Array Access Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12538 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-045
CVE ID: CVE-2011-1275 State: PUBLISHED Published: 2011-06-16T20:21:00 Last Updated: 2024-08-06T22:21:34.063Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Excel 2002 SP3; Office 2004, 2008, and 2011 for Mac; and Open XML File Format Converter for Mac do not properly validate record information during parsing of Excel spreadsheets, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted spreadsheet, aka "Excel Memory Heap Overwrite Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12736 - htt
tainer: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12736 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-045
CVE ID: CVE-2011-1276 State: PUBLISHED Published: 2011-06-16T20:21:00 Last Updated: 2024-08-06T22:21:33.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Microsoft Excel 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Excel spreadsheet, related to improper validation of record information, aka "Excel Buffer Overrun Vulnerability." Additional Analyst Notes: - CVE Program Container: References:
d information, aka "Excel Buffer Overrun Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/72924 - http://securityreason.com/securityalert/8330 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12451 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-045
CVE ID: CVE-2011-1277 State: PUBLISHED Published: 2011-06-16T20:21:00 Last Updated: 2024-08-06T22:21:33.981Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Excel 2002 SP3, Office 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate record information during parsing of Excel spreadsheets, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted spreadsheet, aka "Excel Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/48162 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ova
- http://www.securityfocus.com/bid/48162 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12291 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-045
CVE ID: CVE-2011-1278 State: PUBLISHED Published: 2011-06-16T20:21:00 Last Updated: 2024-08-06T22:21:34.067Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Excel 2002 SP3 and Office 2004 for Mac do not properly validate record information during parsing of Excel spreadsheets, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted spreadsheet, aka "Excel WriteAV Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12687 - https://exchange.xforce.ibmcloud.com/vulnerabilities/67716 - http://www.se
inition/oval%3Aorg.mitre.oval%3Adef%3A12687 - https://exchange.xforce.ibmcloud.com/vulnerabilities/67716 - http://www.securityfocus.com/bid/48163 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-045
CVE ID: CVE-2011-1279 State: PUBLISHED Published: 2011-06-16T20:21:00 Last Updated: 2024-08-06T22:21:33.990Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate record information during parsing of Excel spreadsheets, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted spreadsheet, aka "Excel Out of Bounds WriteAV Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/67717 - https://oval.cisecurity.org/rep
am Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/67717 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12373 - http://www.securityfocus.com/bid/48164 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-045
CVE ID: CVE-2011-1280 State: PUBLISHED Published: 2011-06-16T20:21:00 Last Updated: 2024-08-06T22:21:34.188Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XML Editor in Microsoft InfoPath 2007 SP2 and 2010; SQL Server 2005 SP3 and SP4 and 2008 SP1, SP2, and R2; SQL Server Management Studio Express (SSMSE) 2005; and Visual Studio 2005 SP1, 2008 SP1, and 2010 does not properly handle external entities, which allows remote attackers to read arbitrary files via a crafted .disco (Web Service Discovery) file, aka "XML External Entities Resolution Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/48196 - http://www.sec
Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/48196 - http://www.securitytracker.com/id?1025647 - http://www.securitytracker.com/id?1025648 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-049 - http://www.securitytracker.com/id?1025646 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12664 - http://secunia.com/advisories/44912
CVE ID: CVE-2011-1281 State: PUBLISHED Published: 2011-07-13T22:00:00 Last Updated: 2024-08-06T22:21:34.178Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Client/Server Run-time Subsystem (aka CSRSS) in the Win32 subsystem in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly restrict the number of console objects for a process, which allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted application that triggers an incorrect memory assignment for a user transaction, aka "CSRSS Local EOP AllocConsole Vul
d application that triggers an incorrect memory assignment for a user transaction, aka "CSRSS Local EOP AllocConsole Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12602 - http://www.us-cert.gov/cas/techalerts/TA11-193A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-056
CVE ID: CVE-2011-1282 State: PUBLISHED Published: 2011-07-13T23:00:00 Last Updated: 2024-10-17T19:27:40.187Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Client/Server Run-time Subsystem (aka CSRSS) in the Win32 subsystem in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly initialize memory and consequently uses a NULL pointer in an unspecified function call, which allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted application that triggers an incorrect memory assignment for a user transaction, aka
e (memory corruption) via a crafted application that triggers an incorrect memory assignment for a user transaction, aka "CSRSS Local EOP SrvSetConsoleLocalEUDC Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12402 - http://www.us-cert.gov/cas/techalerts/TA11-193A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-056
CVE ID: CVE-2011-1283 State: PUBLISHED Published: 2011-07-13T23:00:00 Last Updated: 2024-08-06T22:21:33.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Client/Server Run-time Subsystem (aka CSRSS) in the Win32 subsystem in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, and Windows Server 2008 Gold and SP2 does not ensure that an unspecified array index has a non-negative value before performing read and write operations, which allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted application that triggers an incorrect memory assignment for a user transaction, aka "CSRSS Local EOP SrvSetC
a crafted application that triggers an incorrect memory assignment for a user transaction, aka "CSRSS Local EOP SrvSetConsoleNumberOfCommand Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12362 - http://www.us-cert.gov/cas/techalerts/TA11-193A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-056
CVE ID: CVE-2011-1284 State: PUBLISHED Published: 2011-07-13T23:00:00 Last Updated: 2024-08-06T22:21:34.066Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the Client/Server Run-time Subsystem (aka CSRSS) in the Win32 subsystem in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted application that triggers an incorrect memory assignment for a user transaction, aka "CSRSS Local EOP SrvWriteConsoleOutput Vulnerability." Additional Analyst Notes: - CVE Prog
for a user transaction, aka "CSRSS Local EOP SrvWriteConsoleOutput Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA11-193A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12734 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-056
CVE ID: CVE-2011-1285 State: PUBLISHED Published: 2011-03-11T01:00:00 Last Updated: 2024-08-06T22:21:33.966Z Vendors: n/a Products: n/a Problem Types: n/a Description: The regular-expression functionality in Google Chrome before 10.0.648.127 does not properly implement reentrancy, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/46785 - http://googlechromereleases.blogspot.com/2011/03/chrome-stable-release.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14571
hrome-stable-release.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14571 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65969 - http://code.google.com/p/chromium/issues/detail?id=74662 - http://www.vupen.com/english/advisories/2011/0628
CVE ID: CVE-2011-1286 State: PUBLISHED Published: 2011-03-11T01:00:00 Last Updated: 2024-08-06T22:21:34.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google V8, as used in Google Chrome before 10.0.648.127, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that trigger incorrect access to memory. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/chromium/issues/detail?id=74675 - http://www.securityfocus.com/bid/46785 - http://googlechromereleases.blogspot.com/2011/03/chrome-stable-release.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/65970 - https://oval.ci
ot.com/2011/03/chrome-stable-release.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/65970 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14455 - http://www.vupen.com/english/advisories/2011/0628
CVE ID: CVE-2011-1288 State: PUBLISHED Published: 2011-07-21T23:00:00 Last Updated: 2024-08-06T22:21:34.042Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2011-07-20-1. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT4981 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html - http:
CVE ID: CVE-2011-1290 State: PUBLISHED Published: 2011-03-11T21:00:00 Last Updated: 2024-08-06T22:21:34.187Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in WebKit, as used on the Research In Motion (RIM) BlackBerry Torch 9800 with firmware 6.0.0.246, in Google Chrome before 10.0.648.133, and in Apple Safari before 5.0.5, allows remote attackers to execute arbitrary code via unknown vectors related to CSS "style handling," nodesets, and a length value, as demonstrated by Vincenzo Iozzo, Willem Pinckaers, and Ralf-Philipp Weinmann during a Pwn2Own competition at CanSecWest 2011. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.co