Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2012-0155 State: PUBLISHED Published: 2012-02-14T22:00:00 Last Updated: 2024-08-06T18:16:19.013Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "VML Remote Code Execution Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA12-045A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-010 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14781
CVE ID: CVE-2012-0156 State: PUBLISHED Published: 2012-03-13T21:00:00 Last Updated: 2024-08-06T18:16:19.059Z Vendors: n/a Products: n/a Problem Types: n/a Description: DirectWrite in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly render Unicode characters, which allows remote attackers to cause a denial of service (application hang) via a (1) instant message or (2) web site, aka "DirectWrite Application Denial of Service Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-019 - https://oval.cisecurity.org/repository/sea
//docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-019 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14807 - http://osvdb.org/80003
CVE ID: CVE-2012-0157 State: PUBLISHED Published: 2012-03-13T21:00:00 Last Updated: 2024-10-17T19:22:54.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly handle window messaging, which allows local users to gain privileges via a crafted application that calls the PostMessage function, aka "PostMessage Function Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.us-cert.gov/cas/techalerts/TA12-073A.html - https://
rogram Container: - CISA ADP Vulnrichment: References: - http://www.us-cert.gov/cas/techalerts/TA12-073A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-018 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14217 - http://osvdb.org/80002
CVE ID: CVE-2012-0158 State: PUBLISHED Published: 2012-04-10T21:00:00.000Z Last Updated: 2025-10-22T00:05:47.862Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) ListView, (2) ListView2, (3) TreeView, and (4) TreeView2 ActiveX controls in MSCOMCTL.OCX in the Common Controls in Microsoft Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Office 2003 Web Components SP3; SQL Server 2000 SP4, 2005 SP4, and 2008 SP2, SP3, and R2; BizTalk Server 2002 SP1; Commerce Server 2002 SP4, 2007 SP2, and 2009 Gold and R2; Visual FoxPro 8.0 SP1 and 9.0 SP2; and Visual Basic 6.0 Runtime allow remote attackers to execute arbitrary code via a crafted (a) web site, (b) Office document,
ual Basic 6.0 Runtime allow remote attackers to execute arbitrary code via a crafted (a) web site, (b) Office document, or (c) .rtf file that triggers "system state" corruption, as exploited in the wild in April 2012, aka "MSCOMCTL.OCX RCE Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securitytracker.com/id?1026902 - http://www.securitytracker.com/id?1026899 - http://www.us-cert.gov/cas/techalerts/TA12-101A.html - http://www.securitytracker.com/id?1026904 - http://www.securitytracker.com/id?1026903 - http://www.securitytracker.com/id?1026905 - http://opensources.info/comment-on-the-curious-case-of-a-cve-2012-0158-exploit-
p://www.securitytracker.com/id?1026905 - http://opensources.info/comment-on-the-curious-case-of-a-cve-2012-0158-exploit-by-chris-pierce/ - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-027 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15462 - http://www.securityfocus.com/bid/52911 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74372 - http://www.securitytracker.com/id?1026900
CVE ID: CVE-2012-0159 State: PUBLISHED Published: 2012-05-09T00:00:00 Last Updated: 2024-08-06T18:16:18.977Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, and Windows 8 Consumer Preview; Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Silverlight 4 before 4.1.10329; and Silverlight 5 before 5.1.10411 allow remote attackers to execute arbitrary code via a crafted TrueType font (TTF) file, aka "TrueType Font Parsing Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/49121
ing Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/49121 - http://www.us-cert.gov/cas/techalerts/TA12-164A.html - http://www.securitytracker.com/id?1027039 - http://secunia.com/advisories/49122 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15667 - http://www.securityfocus.com/bid/53335 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75124 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-034 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-039 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.o
ty-updates/securitybulletins/2012/ms12-039 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15388 - http://www.us-cert.gov/cas/techalerts/TA12-129A.html
CVE ID: CVE-2012-0160 State: PUBLISHED Published: 2012-05-09T00:00:00 Last Updated: 2024-08-06T18:16:19.104Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.0 SP2, 3.5 SP1, 3.5.1, and 4 does not properly serialize input data, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP) or (2) a crafted .NET Framework application, aka ".NET Framework Serialization Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/53356 - http://www.securitytracker.com/id?1027036 - https://oval.cisecurity.org/repository/search/definiti
focus.com/bid/53356 - http://www.securitytracker.com/id?1027036 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15554 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-035 - http://www.us-cert.gov/cas/techalerts/TA12-129A.html - http://secunia.com/advisories/49117
CVE ID: CVE-2012-0161 State: PUBLISHED Published: 2012-05-09T00:00:00 Last Updated: 2024-08-06T18:16:19.112Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.0 SP2, 3.5 SP1, 3.5.1, and 4 does not properly handle an unspecified exception during use of partially trusted assemblies to serialize input data, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP) or (2) a crafted .NET Framework application, aka ".NET Framework Serialization Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval
onal Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14951 - http://www.securityfocus.com/bid/53357 - http://www.securitytracker.com/id?1027036 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-035 - http://www.us-cert.gov/cas/techalerts/TA12-129A.html - http://secunia.com/advisories/49117
CVE ID: CVE-2012-0162 State: PUBLISHED Published: 2012-05-09T00:00:00 Last Updated: 2024-08-06T18:16:19.095Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft .NET Framework 4 does not properly allocate buffers, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP) or (2) a crafted .NET Framework application, aka ".NET Framework Buffer Allocation Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14655 - http://www.securityfocus.com/bid/53358 - https://docs.microsoft.com/en-us/security-updates/securityb
val%3Adef%3A14655 - http://www.securityfocus.com/bid/53358 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-034 - http://www.us-cert.gov/cas/techalerts/TA12-129A.html
CVE ID: CVE-2012-0163 State: PUBLISHED Published: 2012-04-10T21:00:00 Last Updated: 2024-08-06T18:16:19.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly validate function parameters, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET application, or (3) a crafted .NET Framework application, aka ".NET Framework Parameter Validation Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-025 - https://oval
ontainer: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-025 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15495 - http://www.us-cert.gov/cas/techalerts/TA12-101A.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/74377 - http://www.securitytracker.com/id?1026907
CVE ID: CVE-2012-0164 State: PUBLISHED Published: 2012-05-09T00:00:00 Last Updated: 2024-08-06T18:16:19.094Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft .NET Framework 4 does not properly compare index values, which allows remote attackers to cause a denial of service (application hang) via crafted requests to a Windows Presentation Foundation (WPF) application, aka ".NET Framework Index Comparison Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/53363 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-034 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg
s/security-updates/securitybulletins/2012/ms12-034 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15580
CVE ID: CVE-2012-0165 State: PUBLISHED Published: 2012-05-09T00:00:00 Last Updated: 2024-08-06T18:16:19.102Z Vendors: n/a Products: n/a Problem Types: n/a Description: GDI+ in Microsoft Windows Vista SP2 and Server 2008 SP2 and Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1 does not properly validate record types in EMF images, which allows remote attackers to execute arbitrary code via a crafted image, aka "GDI+ Record Type Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/49121 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75125 - http://www.securityfocus.com/bid/53347 - https://oval.cisecurity.org/repository/s
e.ibmcloud.com/vulnerabilities/75125 - http://www.securityfocus.com/bid/53347 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15621 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-034 - http://www.securitytracker.com/id?1027038 - http://www.us-cert.gov/cas/techalerts/TA12-129A.html
CVE ID: CVE-2012-0166 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2012-0167 State: PUBLISHED Published: 2012-05-09T00:00:00 Last Updated: 2024-08-06T18:16:19.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the Office GDI+ library in Microsoft Office 2003 SP3 and 2007 SP2 and SP3 allows remote attackers to execute arbitrary code via a crafted EMF image in an Office document, aka "GDI+ Heap Overflow Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/49121 - http://www.securityfocus.com/bid/53351 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15628 - https://exchange.xforce.ibmcloud.com/vulnerabilities
/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15628 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75126 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-034 - http://www.securitytracker.com/id?1027038 - http://www.us-cert.gov/cas/techalerts/TA12-129A.html
CVE ID: CVE-2012-0168 State: PUBLISHED Published: 2012-04-10T21:00:00 Last Updated: 2024-08-06T18:16:19.096Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 through 9 allows user-assisted remote attackers to execute arbitrary code via a crafted HTML document that is not properly handled during a "Print table of links" print operation, aka "Print Feature Remote Code Execution Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15577 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-023 - http://www.securitytr
Adef%3A15577 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-023 - http://www.securitytracker.com/id?1026901 - http://osvdb.org/81126 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74379
CVE ID: CVE-2012-0169 State: PUBLISHED Published: 2012-04-10T21:00:00 Last Updated: 2024-08-06T18:16:19.132Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "JScript9 Remote Code Execution Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/81127 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-023 - http://www.securitytracker.com/id?1026901 - http://www.us-cert.gov/cas/techalerts/TA12-101A.html - https://oval.cisecurity.org/repository/search/
r.com/id?1026901 - http://www.us-cert.gov/cas/techalerts/TA12-101A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15611 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74380 - http://www.securityfocus.com/bid/52902
CVE ID: CVE-2012-0170 State: PUBLISHED Published: 2012-04-10T21:00:00 Last Updated: 2024-08-06T18:16:19.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 and 7 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "OnReadyStateChange Remote Code Execution Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-023 - http://www.securitytracker.com/id?1026901 - http://www.us-cert.gov/cas/techalerts/TA12-101A.html - http://osvdb.org/81128 - https://oval.cisecurity.org/re
1026901 - http://www.us-cert.gov/cas/techalerts/TA12-101A.html - http://osvdb.org/81128 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15573 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74381
CVE ID: CVE-2012-0171 State: PUBLISHED Published: 2012-04-10T21:00:00 Last Updated: 2024-08-06T18:16:19.123Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "SelectAll Remote Code Execution Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-023 - http://www.securitytracker.com/id?1026901 - http://www.us-cert.gov/cas/techalerts/TA12-101A.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/74382 -
01 - http://www.us-cert.gov/cas/techalerts/TA12-101A.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/74382 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15313
CVE ID: CVE-2012-0172 State: PUBLISHED Published: 2012-04-10T21:00:00 Last Updated: 2024-08-06T18:16:19.085Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "VML Style Remote Code Execution Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-023 - http://www.securitytracker.com/id?1026901 - http://www.us-cert.gov/cas/techalerts/TA12-101A.html - https://oval.cisecurity.org/repository/search/definition/ova
01 - http://www.us-cert.gov/cas/techalerts/TA12-101A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15550 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74383
CVE ID: CVE-2012-0173 State: PUBLISHED Published: 2012-06-12T22:00:00 Last Updated: 2024-08-06T18:16:19.415Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Remote Desktop Protocol (RDP) implementation in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly process packets in memory, which allows remote attackers to execute arbitrary code by sending crafted RDP packets triggering access to an object that (1) was not properly initialized or (2) is deleted, aka "Remote Desktop Protocol Vulnerability," a different vulnerability than CVE-2012-0002. Additional Analyst Note
eted, aka "Remote Desktop Protocol Vulnerability," a different vulnerability than CVE-2012-0002. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15116 - http://www.us-cert.gov/cas/techalerts/TA12-164A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-036
CVE ID: CVE-2012-0174 State: PUBLISHED Published: 2012-05-09T00:00:00 Last Updated: 2024-08-06T18:16:19.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: Windows Firewall in tcpip.sys in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly enforce firewall rules for outbound broadcast packets, which allows remote attackers to obtain potentially sensitive information by observing broadcast traffic on a local network, aka "Windows Firewall Bypass Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/53352 - https://oval.cisecurity.org/repository/search/definit
Container: References: - http://www.securityfocus.com/bid/53352 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15160 - http://www.securitytracker.com/id?1027044 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-032 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75128 - http://secunia.com/advisories/49114 - http://www.us-cert.gov/cas/techalerts/TA12-129A.html - http://osvdb.org/81730
CVE ID: CVE-2012-0175 State: PUBLISHED Published: 2012-07-10T21:00:00 Last Updated: 2025-01-21T19:58:03.862Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Shell in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted name for a (1) file or (2) directory, aka "Command Injection Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.us-cert.gov/cas/techalerts/TA12-192A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-048 - htt
/cas/techalerts/TA12-192A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-048 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14897
CVE ID: CVE-2012-0176 State: PUBLISHED Published: 2012-05-09T00:00:00 Last Updated: 2024-08-06T18:16:19.186Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in Microsoft Silverlight 4 before 4.1.10329 on Windows allows remote attackers to execute arbitrary code via vectors involving crafted XAML glyphs, aka "Silverlight Double-Free Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/49122 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15574 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-034 - http://www.securitytracker.com/
74 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-034 - http://www.securitytracker.com/id?1027040 - http://www.securityfocus.com/bid/53360 - http://www.us-cert.gov/cas/techalerts/TA12-129A.html
CVE ID: CVE-2012-0177 State: PUBLISHED Published: 2012-04-10T21:00:00 Last Updated: 2024-08-06T18:16:19.329Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the Office Works File Converter in Microsoft Office 2007 SP2, Works 9, and Works 6-9 File Converter allows remote attackers to execute arbitrary code via a crafted Works (aka .wps) file, aka "Office WPS Converter Heap Overflow Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15598 - http://www.securityfocus.com/bid/52867 - http://www.us-cert.gov/cas/techalerts/TA12-101A.html - htt
oval%3Adef%3A15598 - http://www.securityfocus.com/bid/52867 - http://www.us-cert.gov/cas/techalerts/TA12-101A.html - http://www.securitytracker.com/id?1026911 - http://secunia.com/advisories/48723 - http://www.securitytracker.com/id?1026910 - http://osvdb.org/81134 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-028
CVE ID: CVE-2012-0178 State: PUBLISHED Published: 2012-05-09T00:00:00 Last Updated: 2024-08-06T18:16:19.317Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in partmgr.sys in Windows Partition Manager in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that makes multiple simultaneous Plug and Play (PnP) Configuration Manager function calls, aka "Plug and Play (PnP) Configuration Manager Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/49115 - https://docs.microsoft.com/en-us/security-updates/se
gram Container: References: - http://secunia.com/advisories/49115 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-033 - http://www.securitytracker.com/id?1027043 - http://osvdb.org/81735 - http://www.us-cert.gov/cas/techalerts/TA12-129A.html - http://www.securityfocus.com/bid/53378 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15229