Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
updates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2011&suid=20110126_00 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64940 - http://www.zerodayinitiative.com/advisories/ZDI-11-030 - http://secunia.com/advisories/43106 - http://securitytracker.com/id?1024996 - http://www.securityfocus.com/bid/45936 - http://www.vupen.com/english/advisories/2011/0234
CVE ID: CVE-2010-0111 State: PUBLISHED Published: 2011-01-31T20:00:00 Last Updated: 2024-08-07T00:37:53.893Z Vendors: n/a Products: n/a Problem Types: n/a Description: HDNLRSVC.EXE in the Intel Alert Handler service (aka Symantec Intel Handler service) in Intel Alert Management System (aka AMS or AMS2), as used in Symantec AntiVirus Corporate Edition (SAVCE) 10.x before 10.1 MR10, Symantec System Center (SSC) 10.x, and Symantec Quarantine Server 3.5 and 3.6, allows remote attackers to execute arbitrary programs by sending msgsys.exe a UNC share pathname, which is used directly in a CreateProcessA (aka CreateProcess) call. Additional Analyst Notes: - CVE Program Container: References: - http:
tly in a CreateProcessA (aka CreateProcess) call. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43099 - http://www.zerodayinitiative.com/advisories/ZDI-11-029 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64943 - http://secunia.com/advisories/43106 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2011&suid=20110126_01 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64942 - http://www.securityfocus.com/bid/45935 - http://www.vupen.com/english/advisories/2011/0234 - http://securitytracker.com/id?1024997
CVE ID: CVE-2010-0112 State: PUBLISHED Published: 2010-10-28T19:00:00 Last Updated: 2024-08-07T00:37:53.890Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the Administrative Interface in the IIS extension in Symantec IM Manager before 8.4.16 allow remote attackers to execute arbitrary SQL commands via (1) the rdReport parameter to rdpageimlogic.aspx, related to the sGetDefinition function in rdServer.dll, and SQL statements contained within a certain report file; (2) unspecified parameters in a DetailReportGroup (aka DetailReportGroup.lgx) action to rdpageimlogic.aspx; the (3) selclause, (4) whereTrendTimeClause, (5) TrendTypeForReport,
tailReportGroup.lgx) action to rdpageimlogic.aspx; the (3) selclause, (4) whereTrendTimeClause, (5) TrendTypeForReport, (6) whereProtocolClause, or (7) groupClause parameter in a SummaryReportGroup (aka SummaryReportGroup.lgx) action to rdpageimlogic.aspx; the (8) loginTimeStamp, (9) dbo, (10) dateDiffParam, or (11) whereClause parameter in a LoggedInUsers (aka LoggedInUSers.lgx) action to (a) rdpageimlogic.aspx or (b) rdPage.aspx; the (12) selclause, (13) whereTrendTimeClause, (14) TrendTypeForReport, (15) whereProtocolClause, or (16) groupClause parameter to rdpageimlogic.aspx; (17) the groupList parameter to IMAdminReportTrendFormRun.asp; or (18) the email parameter to IMAdminScheduleRepo
.aspx; (17) the groupList parameter to IMAdminReportTrendFormRun.asp; or (18) the email parameter to IMAdminScheduleReport.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-10-220/ - http://www.vupen.com/english/advisories/2010/2789 - http://www.zerodayinitiative.com/advisories/ZDI-10-226/ - http://www.zerodayinitiative.com/advisories/ZDI-10-223/ - http://www.zerodayinitiative.com/advisories/ZDI-10-221/ - http://www.securityfocus.com/bid/44299 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20101027_01 - http://osvdb.org/68903 - http://osvdb.o
il.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20101027_01 - http://osvdb.org/68903 - http://osvdb.org/68902 - http://www.zerodayinitiative.com/advisories/ZDI-10-224/ - http://www.securitytracker.com/id?1024648 - http://osvdb.org/68901 - https://exchange.xforce.ibmcloud.com/vulnerabilities/62806 - http://secunia.com/advisories/41959 - http://www.zerodayinitiative.com/advisories/ZDI-10-222/ - http://www.zerodayinitiative.com/advisories/ZDI-10-225/
CVE ID: CVE-2010-0113 State: PUBLISHED Published: 2010-11-15T20:00:00 Last Updated: 2024-08-07T00:37:54.077Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Symantec Norton Mobile Security application 1.0 Beta for Android records setup details, possibly including wipe/lock credentials, in the device logs, which allows user-assisted remote attackers to obtain potentially sensitive information by leveraging the ability of a separate crafted application to read these logs. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/63294 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_ad
bmcloud.com/vulnerabilities/63294 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20101111_00 - http://osvdb.org/69253 - http://www.vupen.com/english/advisories/2010/2982 - http://www.securityfocus.com/bid/44767
CVE ID: CVE-2010-0114 State: PUBLISHED Published: 2010-12-22T00:00:00 Last Updated: 2024-08-07T00:37:53.916Z Vendors: n/a Products: n/a Problem Types: n/a Description: fw_charts.php in the reporting module in the Manager (aka SEPM) component in Symantec Endpoint Protection (SEP) 11.x before 11 RU6 MP2 allows remote attackers to bypass intended restrictions on report generation, overwrite arbitrary PHP scripts, and execute arbitrary code via a crafted request. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1024900 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64118 - http://www.securityfocus.com/bid/45372 - http://www.symantec.com/secur
hange.xforce.ibmcloud.com/vulnerabilities/64118 - http://www.securityfocus.com/bid/45372 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20101215_00 - http://www.vupen.com/english/advisories/2010/3252 - http://www.zerodayinitiative.com/advisories/ZDI-10-291/ - http://secunia.com/advisories/42643
CVE ID: CVE-2010-0115 State: PUBLISHED Published: 2011-01-14T22:00:00 Last Updated: 2024-08-07T00:37:53.896Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in login.php in the GUI management console in Symantec Web Gateway 4.5 before 4.5.0.376 allows remote attackers to execute arbitrary SQL commands via the USERNAME parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2011&suid=20110112_00 - http://www.securityfocus.com/bid/45742 - http://www.vupen.com/english/advisories/2011/0088 - https://exchange.xforce.ibmcl
tp://www.securityfocus.com/bid/45742 - http://www.vupen.com/english/advisories/2011/0088 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64658 - http://secunia.com/advisories/42878 - http://www.zerodayinitiative.com/advisories/ZDI-11-013/ - http://osvdb.org/70415 - http://www.securitytracker.com/id?1024958
CVE ID: CVE-2010-0116 State: PUBLISHED Published: 2010-08-30T19:00:00 Last Updated: 2024-08-07T00:37:53.922Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1.4 on Windows might allow remote attackers to execute arbitrary code via a crafted QCP file that triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/2216 - http://secunia.com/advisories/41096 - https://exchange.xforce.ibmcloud.com/vulnerabilities/61420 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%
mcloud.com/vulnerabilities/61420 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7326 - http://service.real.com/realplayer/security/08262010_player/en/ - http://www.securitytracker.com/id?1024370 - http://secunia.com/advisories/41154 - http://secunia.com/secunia_research/2010-3/
CVE ID: CVE-2010-0117 State: PUBLISHED Published: 2010-08-30T19:00:00 Last Updated: 2024-08-07T00:37:54.036Z Vendors: n/a Products: n/a Problem Types: n/a Description: RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1.4 on Windows do not properly handle dimensions during YUV420 transformations, which might allow remote attackers to execute arbitrary code via crafted MP4 content. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/2216 - http://secunia.com/advisories/41096 - http://service.real.com/realplayer/security/08262010_player/en/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/61421 - http://sec
al.com/realplayer/security/08262010_player/en/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/61421 - http://secunia.com/secunia_research/2010-5/ - http://www.securitytracker.com/id?1024370 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7169 - http://secunia.com/advisories/41154
CVE ID: CVE-2010-0118 State: PUBLISHED Published: 2010-02-25T00:00:00 Last Updated: 2024-08-07T00:37:54.070Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bournal before 1.4.1 allows local users to overwrite arbitrary files via a symlink attack on unspecified temporary files associated with a --hack_the_gibson update check. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/509685/100/0/threaded - http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036701.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036764.html - http://secunia.com/advisories/38554 - http://secunia.com/secunia_re
/pipermail/package-announce/2010-March/036764.html - http://secunia.com/advisories/38554 - http://secunia.com/secunia_research/2010-6/ - http://secunia.com/advisories/38814 - http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036697.html - http://www.securityfocus.com/bid/38353
CVE ID: CVE-2010-0119 State: PUBLISHED Published: 2010-02-25T00:00:00 Last Updated: 2024-08-07T00:37:53.886Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bournal before 1.4.1 on FreeBSD 8.0, when the -K option is used, places a ccrypt key on the command line, which allows local users to obtain sensitive information by listing the process and its arguments, related to "echoing." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/509688/100/0/threaded - http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036701.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036764.html - http://www.
/2010-March/036701.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036764.html - http://www.securityfocus.com/bid/38352 - http://secunia.com/advisories/38814 - http://secunia.com/advisories/38723 - http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036697.html - http://secunia.com/secunia_research/2010-7/
CVE ID: CVE-2010-0120 State: PUBLISHED Published: 2010-08-30T19:00:00 Last Updated: 2024-08-07T00:37:54.076Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1.4 on Windows allows remote attackers to execute arbitrary code via large size values in QCP audio content. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/2216 - http://secunia.com/advisories/41096 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6807 - http://secunia.com/secunia_research/2010-8/ - https://exchange.xforce.
h/definition/oval%3Aorg.mitre.oval%3Adef%3A6807 - http://secunia.com/secunia_research/2010-8/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/61422 - http://service.real.com/realplayer/security/08262010_player/en/ - http://www.securitytracker.com/id?1024370 - http://secunia.com/advisories/41154
CVE ID: CVE-2010-0121 State: PUBLISHED Published: 2010-12-14T15:00:00 Last Updated: 2024-08-07T00:37:53.873Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cook codec in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, Mac RealPlayer 11.0 through 12.0.0.1444, and Linux RealPlayer 11.0.2.1744 does not properly perform initialization, which has unspecified impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1024861 - http://service.real.com/realplayer/security/12102010_player/en/
CVE ID: CVE-2010-0122 State: PUBLISHED Published: 2010-03-12T20:00:00 Last Updated: 2024-08-07T00:37:53.904Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Employee Timeclock Software 0.99 allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameter to (a) auth.php or (b) login_action.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/38639 - http://secunia.com/advisories/38739 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56799 - http://secunia.com/secunia_research/2010-11/ - http://www.osvdb.org/62832 - http://www.osvdb.org/62831 - ht
ties/56799 - http://secunia.com/secunia_research/2010-11/ - http://www.osvdb.org/62832 - http://www.osvdb.org/62831 - http://www.securityfocus.com/archive/1/509995/100/0/threaded
CVE ID: CVE-2010-0123 State: PUBLISHED Published: 2010-03-12T20:00:00 Last Updated: 2024-08-07T00:37:53.875Z Vendors: n/a Products: n/a Problem Types: n/a Description: The database backup implementation in Employee Timeclock Software 0.99 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for a "semi-predictable file name." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38739 - http://www.securityfocus.com/archive/1/509990/100/0/threaded - http://www.osvdb.org/62833 - http://secunia.com/secunia_research/2010-10/ - https://exchange.xforce.ibm
100/0/threaded - http://www.osvdb.org/62833 - http://secunia.com/secunia_research/2010-10/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/56798
CVE ID: CVE-2010-0124 State: PUBLISHED Published: 2010-03-12T20:00:00 Last Updated: 2024-08-07T00:37:53.941Z Vendors: n/a Products: n/a Problem Types: n/a Description: Employee Timeclock Software 0.99 places the database password on the mysqldump command line, which allows local users to obtain sensitive information by listing the process. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/509996/100/0/threaded - http://secunia.com/advisories/38739 - http://secunia.com/secunia_research/2010-12/ - http://www.osvdb.org/62830 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56800 - http://www.securityfocus.com/bid/38642
CVE ID: CVE-2010-0125 State: PUBLISHED Published: 2010-12-14T15:00:00 Last Updated: 2024-08-07T00:37:54.042Z Vendors: n/a Products: n/a Problem Types: n/a Description: RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, and Mac RealPlayer 11.0 through 12.0.0.1444 do not properly parse spectral data in AAC files, which has unspecified impact and remote attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1024861 - http://service.real.com/realplayer/security/12102010_player/en/
CVE ID: CVE-2010-0126 State: PUBLISHED Published: 2010-08-17T17:31:00 Last Updated: 2024-08-07T00:37:53.832Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in an unspecified library in Autonomy KeyView 10.4 and 10.9, as used in multiple IBM, Symantec, and other products, allows remote attackers to execute arbitrary code via a crafted compound file, as demonstrated using a Quattro Pro file, which is not properly handled by the Quattro speed reader (qpssr.dll). Additional Analyst Notes: - CVE Program Container: References: - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=201
ymantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100727_01 - http://secunia.com/secunia_research/2010-16/ - http://www.securityfocus.com/bid/41928 - http://www-01.ibm.com/support/docview.wss?uid=swg21440812
CVE ID: CVE-2010-0127 State: PUBLISHED Published: 2010-05-13T17:00:00 Last Updated: 2024-08-07T00:37:54.167Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Shockwave Player before 11.5.7.609 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted FFFFFF45h Shockwave 3D blocks in a Shockwave file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38751 - http://www.adobe.com/support/security/bulletins/apsb10-12.html - http://www.vupen.com/english/advisories/2010/1128 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7477 - http://www.secu
010/1128 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7477 - http://www.securityfocus.com/archive/1/511260/100/0/threaded - http://secunia.com/secunia_research/2010-17/
CVE ID: CVE-2010-0128 State: PUBLISHED Published: 2010-05-13T17:00:00 Last Updated: 2024-08-07T00:37:53.902Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in dirapi.dll in Adobe Shockwave Player before 11.5.7.609 and Adobe Director before 11.5.7.609 allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted .dir file that triggers an invalid read operation. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38751 - http://www.coresecurity.com/content/adobe-director-invalid-read - http://www.securityfocus.com/archive/1/511261/100/0/threaded - http://
ecurity.com/content/adobe-director-invalid-read - http://www.securityfocus.com/archive/1/511261/100/0/threaded - http://www.adobe.com/support/security/bulletins/apsb10-12.html - http://www.securityfocus.com/archive/1/511240/100/0/threaded - http://www.vupen.com/english/advisories/2010/1128 - http://secunia.com/secunia_research/2010-19/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7273
CVE ID: CVE-2010-0129 State: PUBLISHED Published: 2010-05-13T17:00:00 Last Updated: 2024-08-07T00:37:53.894Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in Adobe Shockwave Player before 11.5.7.609 allow remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted .dir (aka Director) file that triggers an array index error. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38751 - http://www.securityfocus.com/archive/1/511256/100/0/threaded - http://www.adobe.com/support/security/bulletins/apsb10-12.html - http://archives.neohapsis.com/archives/fulldiscl
aded - http://www.adobe.com/support/security/bulletins/apsb10-12.html - http://archives.neohapsis.com/archives/fulldisclosure/2010-05/0138.html - http://www.securityfocus.com/bid/40082 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=869 - http://www.vupen.com/english/advisories/2010/1128 - http://secunia.com/secunia_research/2010-20/ - http://hi.baidu.com/fs_fx/blog/item/fa74a61705b5e24621a4e951.html - http://www.securityfocus.com/archive/1/511262/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7134
CVE ID: CVE-2010-0130 State: PUBLISHED Published: 2010-05-13T17:00:00 Last Updated: 2024-08-07T00:37:53.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in Adobe Shockwave Player before 11.5.7.609 might allow remote attackers to execute arbitrary code via a crafted .dir (aka Director) file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38751 - http://www.securityfocus.com/archive/1/511263/100/0/threaded - http://www.adobe.com/support/security/bulletins/apsb10-12.html - http://secunia.com/secunia_research/2010-22/ - http://www.securityfocus.com/bid/40084 - http://www.vupen.com/english/advisories/2010/1128 - https
a_research/2010-22/ - http://www.securityfocus.com/bid/40084 - http://www.vupen.com/english/advisories/2010/1128 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7108
CVE ID: CVE-2010-0131 State: PUBLISHED Published: 2010-08-17T17:31:00 Last Updated: 2024-08-07T00:37:53.861Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the SpreadSheet Lotus 123 reader (wkssr.dll), as used in Autonomy KeyView 10.4 and 10.9, Symantec Mail Security, and possibly other products, allows remote attackers to execute arbitrary code via unspecified vectors related to floating point conversion in unknown record types. Additional Analyst Notes: - CVE Program Container: References: - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100727_01 - http://secunia.
nse/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100727_01 - http://secunia.com/secunia_research/2010-25/ - http://www.securityfocus.com/bid/41928 - http://secunia.com/secunia_research/2010-23/ - http://www-01.ibm.com/support/docview.wss?uid=swg21440812
CVE ID: CVE-2010-0132 State: PUBLISHED Published: 2010-03-31T17:35:00 Last Updated: 2024-08-07T00:37:53.920Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in ViewVC 1.1 before 1.1.5 and 1.0 before 1.0.11, when the regular expression search functionality is enabled, allows remote attackers to inject arbitrary web script or HTML via vectors related to "search_re input," a different vulnerability than CVE-2010-0736. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/510408/100/0/threaded - http://viewvc.tigris.org/source/browse/viewvc/trunk/CHANGES?r1=2342&r2=2359&pathrev=HEAD - http://lis
8/100/0/threaded - http://viewvc.tigris.org/source/browse/viewvc/trunk/CHANGES?r1=2342&r2=2359&pathrev=HEAD - http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038456.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038420.html - http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00002.html - http://secunia.com/secunia_research/2010-26/ - http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038925.html - http://secunia.com/advisories/38918 - http://www.vupen.com/english/advisories/2010/0844 - http://www.vupen.com/english/advisories/2010/0743
CVE ID: CVE-2010-0133 State: PUBLISHED Published: 2010-08-17T17:31:00 Last Updated: 2024-08-07T00:37:54.083Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in the SpreadSheet Lotus 123 reader (wkssr.dll) in Autonomy KeyView 10.4 and 10.9, as used in multiple IBM, Symantec, and other products, allow remote attackers to execute arbitrary code via unspecified vectors related to "certain records." Additional Analyst Notes: - CVE Program Container: References: - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100727_01 - http://www.securityfocus.com/bid/41928 - http