Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-2983 State: PUBLISHED Published: 2009-10-19T22:00:00 Last Updated: 2024-08-07T06:07:37.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 allow attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36638 - http://www.us-cert.gov/cas/techalerts/TA09-286B.html - http://securitytracker.com/id?1023007 - http://www.adobe.com/support/security/bulletins/apsb09-15.html - http://www.vupen.com/english/advisories/2009/2898 -
7 - http://www.adobe.com/support/security/bulletins/apsb09-15.html - http://www.vupen.com/english/advisories/2009/2898 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5636
CVE ID: CVE-2009-2984 State: PUBLISHED Published: 2009-10-19T22:00:00 Last Updated: 2024-08-07T06:07:37.440Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the image decoder in Adobe Acrobat 9.x before 9.2, and possibly 7.x through 7.1.4 and 8.x through 8.1.7, allows attackers to cause a denial of service or possibly execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36638 - http://www.us-cert.gov/cas/techalerts/TA09-286B.html - http://securitytracker.com/id?1023007 - http://www.adobe.com/support/security/bulletins/apsb09-15.html - https://oval.cisecurity.org/re
tracker.com/id?1023007 - http://www.adobe.com/support/security/bulletins/apsb09-15.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5523 - http://www.vupen.com/english/advisories/2009/2898
CVE ID: CVE-2009-2985 State: PUBLISHED Published: 2009-10-19T22:00:00 Last Updated: 2024-08-07T06:07:37.533Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allow attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2009-2996. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36638 - http://www.us-cert.gov/cas/techalerts/TA09-286B.html - http://securitytracker.com/id?1023007 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3
http://securitytracker.com/id?1023007 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6145 - http://www.adobe.com/support/security/bulletins/apsb09-15.html - http://www.vupen.com/english/advisories/2009/2898
CVE ID: CVE-2009-2986 State: PUBLISHED Published: 2009-10-19T22:00:00 Last Updated: 2024-08-07T06:07:37.430Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple heap-based buffer overflows in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 might allow attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36638 - http://www.us-cert.gov/cas/techalerts/TA09-286B.html - http://securitytracker.com/id?1023007 - http://www.adobe.com/support/security/bulletins/apsb09-15.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre
om/support/security/bulletins/apsb09-15.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5888 - http://www.vupen.com/english/advisories/2009/2898
CVE ID: CVE-2009-2987 State: PUBLISHED Published: 2009-10-19T22:00:00 Last Updated: 2024-08-07T06:07:37.434Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in an ActiveX control in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 on Windows allows remote attackers to cause a denial of service via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36638 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6274 - http://www.us-cert.gov/cas/techalerts/TA09-286B.html - http://securitytracker.com/id?1023007 - http://www.adobe.com/
4 - http://www.us-cert.gov/cas/techalerts/TA09-286B.html - http://securitytracker.com/id?1023007 - http://www.adobe.com/support/security/bulletins/apsb09-15.html - http://www.vupen.com/english/advisories/2009/2898
CVE ID: CVE-2009-2988 State: PUBLISHED Published: 2009-10-19T22:00:00 Last Updated: 2024-08-07T06:07:37.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 do not properly validate input, which allows attackers to cause a denial of service via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36638 - http://www.us-cert.gov/cas/techalerts/TA09-286B.html - http://securitytracker.com/id?1023007 - http://www.adobe.com/support/security/bulletins/apsb09-15.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ova
upport/security/bulletins/apsb09-15.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6483 - http://www.vupen.com/english/advisories/2009/2898
CVE ID: CVE-2009-2989 State: PUBLISHED Published: 2009-10-19T22:00:00 Last Updated: 2024-08-07T06:07:37.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in Adobe Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 might allow attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36638 - http://www.us-cert.gov/cas/techalerts/TA09-286B.html - http://securitytracker.com/id?1023007 - http://www.adobe.com/support/security/bulletins/apsb09-15.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6297 -
ulletins/apsb09-15.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6297 - http://www.vupen.com/english/advisories/2009/2898
CVE ID: CVE-2009-2990 State: PUBLISHED Published: 2009-10-19T22:00:00 Last Updated: 2024-08-07T06:07:37.479Z Vendors: n/a Products: n/a Problem Types: n/a Description: Array index error in Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 might allow attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36638 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6371 - http://www.us-cert.gov/cas/techalerts/TA09-286B.html - http://securitytracker.com/id?1023007 - http://www.adobe.com/support/security/bulletins/apsb0
echalerts/TA09-286B.html - http://securitytracker.com/id?1023007 - http://www.adobe.com/support/security/bulletins/apsb09-15.html - http://www.vupen.com/english/advisories/2009/2898
CVE ID: CVE-2009-2991 State: PUBLISHED Published: 2009-10-19T22:00:00 Last Updated: 2024-08-07T06:07:37.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Mozilla plug-in in Adobe Reader and Acrobat 8.x before 8.1.7, and possibly 7.x before 7.1.4 and 9.x before 9.2, might allow remote attackers to execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36638 - http://www.us-cert.gov/cas/techalerts/TA09-286B.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5557 - http://securitytracker.com/id?1023007 - http://www.adobe
pository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5557 - http://securitytracker.com/id?1023007 - http://www.adobe.com/support/security/bulletins/apsb09-15.html - http://www.vupen.com/english/advisories/2009/2898
CVE ID: CVE-2009-2992 State: PUBLISHED Published: 2009-10-19T22:00:00 Last Updated: 2024-08-07T06:07:37.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: An unspecified ActiveX control in Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 does not properly validate input, which allows attackers to cause a denial of service via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6054 - http://www.securityfocus.com/bid/36638 - http://www.us-cert.gov/cas/techalerts/TA09-286B.html - http://securitytracker.com/id?1023007 - http:/
us.com/bid/36638 - http://www.us-cert.gov/cas/techalerts/TA09-286B.html - http://securitytracker.com/id?1023007 - http://www.adobe.com/support/security/bulletins/apsb09-15.html - http://www.vupen.com/english/advisories/2009/2898
CVE ID: CVE-2009-2993 State: PUBLISHED Published: 2009-10-19T22:00:00 Last Updated: 2024-08-07T06:07:37.479Z Vendors: n/a Products: n/a Problem Types: n/a Description: The JavaScript for Acrobat API in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 does not properly implement the (1) Privileged Context and (2) Safe Path restrictions for unspecified JavaScript methods, which allows remote attackers to create arbitrary files, and possibly execute arbitrary code, via the cPath parameter in a crafted PDF file. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.security
ained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36638 - http://www.us-cert.gov/cas/techalerts/TA09-286B.html - http://securitytracker.com/id?1023007 - http://www.adobe.com/support/security/bulletins/apsb09-15.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5822 - http://www.vupen.com/english/advisories/2009/2898 - http://www.kb.cert.org/vuls/id/257117 - http://www.securityfocus.com/bid/36664
CVE ID: CVE-2009-2994 State: PUBLISHED Published: 2009-10-19T22:00:00 Last Updated: 2024-08-07T06:07:37.445Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 might allow attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36638 - http://www.us-cert.gov/cas/techalerts/TA09-286B.html - http://securitytracker.com/id?1023007 - http://www.adobe.com/support/security/bulletins/apsb09-15.html - http://www.vupen.com/english/advisories/2009/2898 - https://oval.cisecurity.org/repository/sea
ulletins/apsb09-15.html - http://www.vupen.com/english/advisories/2009/2898 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6156
CVE ID: CVE-2009-2995 State: PUBLISHED Published: 2009-10-19T22:00:00 Last Updated: 2024-08-07T06:07:37.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in Adobe Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allows attackers to cause a denial of service via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36638 - http://www.us-cert.gov/cas/techalerts/TA09-286B.html - http://securitytracker.com/id?1023007 - http://www.adobe.com/support/security/bulletins/apsb09-15.html - http://www.vupen.com/english/advisories/2009/2898 - https://oval.cisecurity.org/repository/search/definiti
b09-15.html - http://www.vupen.com/english/advisories/2009/2898 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6554
CVE ID: CVE-2009-2996 State: PUBLISHED Published: 2009-10-19T22:00:00 Last Updated: 2024-08-07T06:07:37.467Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allow attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2009-2985. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36638 - http://www.us-cert.gov/cas/techalerts/TA09-286B.html - http://securitytracker.com/id?1023007 - http://www.adobe.com/support/security/bulletins/apsb09-15.html - https://oval.ci
http://securitytracker.com/id?1023007 - http://www.adobe.com/support/security/bulletins/apsb09-15.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5560 - http://www.vupen.com/english/advisories/2009/2898
CVE ID: CVE-2009-2997 State: PUBLISHED Published: 2009-10-19T22:00:00 Last Updated: 2024-08-07T06:07:37.530Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 might allow attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36638 - http://www.us-cert.gov/cas/techalerts/TA09-286B.html - http://securitytracker.com/id?1023007 - http://www.adobe.com/support/security/bulletins/apsb09-15.html - http://www.vupen.com/english/advisories/2009/2898 - https://oval.cisecurity.org/rep
/security/bulletins/apsb09-15.html - http://www.vupen.com/english/advisories/2009/2898 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6481
CVE ID: CVE-2009-2998 State: PUBLISHED Published: 2009-10-19T22:00:00 Last Updated: 2024-08-07T06:07:37.487Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 do not properly validate input, which might allow attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2009-3458. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36638 - http://www.us-cert.gov/cas/techalerts/TA09-286B.html - http://securitytracker.com/id?1023007 - http://www.adobe.com/support/security/bulletins/apsb09-15.html - https://oval.cisecurity.org/r
ytracker.com/id?1023007 - http://www.adobe.com/support/security/bulletins/apsb09-15.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6418 - http://www.vupen.com/english/advisories/2009/2898
CVE ID: CVE-2009-2999 State: PUBLISHED Published: 2009-10-14T10:00:00 Last Updated: 2024-08-07T06:07:37.443Z Vendors: n/a Products: n/a Problem Types: n/a Description: The com.android.phone process in Android 1.5 CRBxx allows remote attackers to cause a denial of service (application restart and network disconnection) via an SMS message containing a malformed WAP Push message that triggers an ArrayIndexOutOfBoundsException exception, possibly a related issue to CVE-2009-2656. Additional Analyst Notes: - CVE Program Container: References: - http://android.git.kernel.org/?p=platform/frameworks/base.git%3Ba=commit%3Bh=46e23fe762d2143d60589ab6d39c4b47c2c754d1 - http://securitytracker.com/id?1022
latform/frameworks/base.git%3Ba=commit%3Bh=46e23fe762d2143d60589ab6d39c4b47c2c754d1 - http://securitytracker.com/id?1022986 - http://www.ocert.org/advisories/ocert-2009-014.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/53655 - http://www.securityfocus.com/archive/1/506948/100/0/threaded
CVE ID: CVE-2009-3000 State: PUBLISHED Published: 2009-08-28T15:00:00Z Last Updated: 2024-09-16T17:37:39.117Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sockfs module in the kernel in Sun Solaris 10 and OpenSolaris snv_41 through snv_122, when Network Cache Accelerator (NCA) logging is enabled, allows remote attackers to cause a denial of service (panic) via unspecified web-server traffic that triggers a NULL pointer dereference in the nl7c_http_log function, related to "improper http response handling." Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-21-141690-02-1 - http://sunsolve.sun.com/search/doc
References: - http://sunsolve.sun.com/search/document.do?assetkey=1-21-141690-02-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-265888-1
CVE ID: CVE-2009-3001 State: PUBLISHED Published: 2009-08-28T15:00:00 Last Updated: 2024-08-07T06:07:37.446Z Vendors: n/a Products: n/a Problem Types: n/a Description: The llc_ui_getname function in net/llc/af_llc.c in the Linux kernel 2.6.31-rc7 and earlier does not initialize a certain data structure, which allows local users to read the contents of some kernel memory locations by calling getsockname on an AF_LLC socket. Additional Analyst Notes: - CVE Program Container: References: - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=28e9fc592cb8c7a43e4d3147b38be6032a0e81bc - http://www.openwall.com/lists/oss-security/2009/08/26/1 - http://www.ubuntu.com/usn/U
2cb8c7a43e4d3147b38be6032a0e81bc - http://www.openwall.com/lists/oss-security/2009/08/26/1 - http://www.ubuntu.com/usn/USN-852-1 - https://bugzilla.redhat.com/show_bug.cgi?id=519305 - http://jon.oberheide.org/files/llc-getsockname-leak.c - http://www.exploit-db.com/exploits/9513 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52732 - http://www.securityfocus.com/bid/36126 - http://secunia.com/advisories/37105
CVE ID: CVE-2009-3002 State: PUBLISHED Published: 2009-08-28T15:00:00 Last Updated: 2024-08-07T06:14:55.183Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Linux kernel before 2.6.31-rc7 does not initialize certain data structures within getname functions, which allows local users to read the contents of some kernel memory locations by calling getsockname on (1) an AF_APPLETALK socket, related to the atalk_getname function in net/appletalk/ddp.c; (2) an AF_IRDA socket, related to the irda_getname function in net/irda/af_irda.c; (3) an AF_ECONET socket, related to the econet_getname function in net/econet/af_econet.c; (4) an AF_NETROM socket, related to the nr_getname function
ed to the econet_getname function in net/econet/af_econet.c; (4) an AF_NETROM socket, related to the nr_getname function in net/netrom/af_netrom.c; (5) an AF_ROSE socket, related to the rose_getname function in net/rose/af_rose.c; or (6) a raw CAN socket, related to the raw_getname function in net/can/raw.c. Additional Analyst Notes: - CVE Program Container: References: - http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.31-rc7 - http://www.securityfocus.com/archive/1/512019/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11611 - https://rhn.redhat.com/errata/RHSA-2009-1540.html - http://www.ubuntu.com/usn/USN-852-1 - ht
.mitre.oval%3Adef%3A11611 - https://rhn.redhat.com/errata/RHSA-2009-1540.html - http://www.ubuntu.com/usn/USN-852-1 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=3d392475c873c10c10d6d96b94d092a34ebd4791 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=17ac2e9c58b69a1e25460a568eae1b0dc0188c25 - https://bugzilla.redhat.com/show_bug.cgi?id=519305 - http://secunia.com/advisories/37351 - http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00007.html - http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f6b97b29513
unce/2010-02/msg00005.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f6b97b29513950bfbf621a83d85b6f86b39ec8db - http://www.securityfocus.com/bid/36150 - http://www.openwall.com/lists/oss-security/2009/08/27/1 - https://rhn.redhat.com/errata/RHSA-2009-1550.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11741 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=80922bbb12a105f858a8f0abb879cb4302d0ecaa - http://secunia.com/advisories/36438 - http://www.exploit-db.com/exploits/9521 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=e84b90ae5eb3c112d1f
.com/exploits/9521 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=e84b90ae5eb3c112d1f208964df1d8156a538289 - http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00005.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=09384dfc76e526c3993c09c42e016372dc9dd22c - http://secunia.com/advisories/37105 - http://www.openwall.com/lists/oss-security/2009/08/27/2
CVE ID: CVE-2009-3003 State: PUBLISHED Published: 2009-08-28T15:00:00 Last Updated: 2024-08-07T06:14:55.194Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 through 8 allows remote attackers to spoof the address bar, via window.open with a relative URI, to show an arbitrary URL on the web site visited by the victim, as demonstrated by a visit to an attacker-controlled web page, which triggers a spoofed login form for the site containing that page. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/53005 - http://secunia.com/advisories/36334 - http://lostmon.blogspot.com/2009/08/multipl
e.ibmcloud.com/vulnerabilities/53005 - http://secunia.com/advisories/36334 - http://lostmon.blogspot.com/2009/08/multiple-browsers-fake-url-folder-file.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12817
CVE ID: CVE-2009-3004 State: PUBLISHED Published: 2009-08-28T15:00:00Z Last Updated: 2024-09-16T22:10:31.073Z Vendors: n/a Products: n/a Problem Types: n/a Description: Avant Browser 11.7 Builds 35 and 36 allows remote attackers to spoof the address bar, via window.open with a relative URI, to show an arbitrary URL on the web site visited by the victim, as demonstrated by a visit to an attacker-controlled web page, which triggers a spoofed login form for the site containing that page. NOTE: a related attack was reported in which an arbitrary file: URL is shown. Additional Analyst Notes: - CVE Program Container: References: - http://lostmon.blogspot.com/2009/08/multiple-browsers-fake-url-fold
nalyst Notes: - CVE Program Container: References: - http://lostmon.blogspot.com/2009/08/multiple-browsers-fake-url-folder-file.html
CVE ID: CVE-2009-3005 State: PUBLISHED Published: 2009-08-28T15:00:00 Last Updated: 2024-08-07T06:14:55.219Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lunascape 5.1.3 and 5.1.4 allows remote attackers to spoof the address bar, via window.open with a relative URI, to show an arbitrary URL on the web site visited by the victim, as demonstrated by a visit to an attacker-controlled web page, which triggers a spoofed login form for the site containing that page. NOTE: a related attack was reported in which an arbitrary file: URL is shown. Additional Analyst Notes: - CVE Program Container: References: - http://lostmon.blogspot.com/2009/08/multiple-browsers-fake-url-folder-file.htm
s: - CVE Program Container: References: - http://lostmon.blogspot.com/2009/08/multiple-browsers-fake-url-folder-file.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/53008
CVE ID: CVE-2009-3006 State: PUBLISHED Published: 2009-08-28T15:00:00 Last Updated: 2024-08-07T06:14:55.158Z Vendors: n/a Products: n/a Problem Types: n/a Description: Maxthon Browser 2.5.3.80 UNICODE allows remote attackers to spoof the address bar, via window.open with a relative URI, to show an arbitrary URL on the web site visited by the victim, as demonstrated by a visit to an attacker-controlled web page, which triggers a spoofed login form for the site containing that page. Additional Analyst Notes: - CVE Program Container: References: - http://lostmon.blogspot.com/2009/08/multiple-browsers-fake-url-folder-file.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg