Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-1544 State: PUBLISHED Published: 2009-08-12T17:00:00 Last Updated: 2024-10-21T16:33:15.766Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in the Workstation service in Microsoft Windows allows remote authenticated users to gain privileges via a crafted RPC message to a Windows XP SP2 or SP3 or Server 2003 SP2 system, or cause a denial of service via a crafted RPC message to a Vista Gold, SP1, or SP2 or Server 2008 Gold or SP2 system, aka "Workstation Service Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.us-cert.gov/cas/techalerts/TA09-223A.html - ht
CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.us-cert.gov/cas/techalerts/TA09-223A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-041 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6286
CVE ID: CVE-2009-1545 State: PUBLISHED Published: 2009-08-12T17:00:00 Last Updated: 2024-08-07T05:20:33.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Avifil32.dll in the Windows Media file handling functionality in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via a malformed header in a crafted AVI file, aka "Malformed AVI Header Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1022711 - http://www.us-cert.gov/cas/techalerts/TA09-223A.html - http://secunia.com/a
http://www.securitytracker.com/id?1022711 - http://www.us-cert.gov/cas/techalerts/TA09-223A.html - http://secunia.com/advisories/36206 - http://www.vupen.com/english/advisories/2009/2233 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5412 - http://www.securityfocus.com/bid/35967 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-038
CVE ID: CVE-2009-1546 State: PUBLISHED Published: 2009-08-12T17:00:00 Last Updated: 2024-08-07T05:20:33.433Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in Avifil32.dll in the Windows Media file handling functionality in Microsoft Windows allows remote attackers to execute arbitrary code on a Windows 2000 SP4 system via a crafted AVI file, or cause a denial of service on a Windows XP SP2 or SP3, Server 2003 SP2, Vista Gold, SP1, or SP2, or Server 2008 Gold or SP2 system via a crafted AVI file, aka "AVI Integer Overflow Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1022711 - http://www.us-cert
nal Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1022711 - http://www.us-cert.gov/cas/techalerts/TA09-223A.html - http://secunia.com/advisories/36206 - http://www.securityfocus.com/bid/35970 - http://www.vupen.com/english/advisories/2009/2233 - http://osvdb.org/56909 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5930 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-038
CVE ID: CVE-2009-1547 State: PUBLISHED Published: 2009-10-14T10:00:00 Last Updated: 2025-01-21T16:28:04.495Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via a crafted data stream header that triggers memory corruption, aka "Data Stream Header Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-054 - http://www.us-cert.gov/cas/techalerts/TA09-286A.html - https://oval.cisecurity.org/repository/search/definit
/ms09-054 - http://www.us-cert.gov/cas/techalerts/TA09-286A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6454
CVE ID: CVE-2009-1548 State: PUBLISHED Published: 2009-05-06T15:00:00 Last Updated: 2024-08-07T05:20:33.470Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in BluSky CMS allows remote attackers to execute arbitrary SQL commands via the news_id parameter in a read action. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/1246 - http://osvdb.org/54221 - https://www.exploit-db.com/exploits/8600 - http://secunia.com/advisories/34998 - http://www.securityfocus.com/bid/34811
CVE ID: CVE-2009-1549 State: PUBLISHED Published: 2009-05-06T15:00:00 Last Updated: 2024-08-07T05:20:33.463Z Vendors: n/a Products: n/a Problem Types: n/a Description: AGTC MyShop 3.2b allows remote attackers to bypass authentication and obtain administrative access setting the log_accept cookie to "correcto." Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/54216 - https://www.exploit-db.com/exploits/8599 - http://www.vupen.com/english/advisories/2009/1245 - http://www.securityfocus.com/bid/34808 - http://secunia.com/advisories/34968
CVE ID: CVE-2009-1550 State: PUBLISHED Published: 2009-05-06T15:00:00 Last Updated: 2024-08-07T05:20:33.972Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zakkis Technology ABC Advertise 1.0 does not properly restrict access to admin.inc.php, which allows remote attackers to obtain the administrator login name and password via a direct request. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8555 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50183
CVE ID: CVE-2009-1551 State: PUBLISHED Published: 2009-05-06T15:00:00 Last Updated: 2024-08-07T05:20:33.443Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Qt quickteam 2 allow remote attackers to execute arbitrary PHP code via a URL in the (1) qte_web_path parameter to qte_web.php and the (2) qte_root parameter to bin/qte_init.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/54217 - http://secunia.com/advisories/34997 - http://osvdb.org/54218 - http://www.vupen.com/english/advisories/2009/1247 - https://www.exploit-db.com/exploits/8602
CVE ID: CVE-2009-1552 State: PUBLISHED Published: 2009-05-06T15:00:00 Last Updated: 2024-08-07T05:20:33.715Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the IGMP driver in SCO Unixware Release 7.1.4 Maintenance Pack 4 allows attackers to cause a denial of service (system panic) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.sco.com/pub/unixware7/714/security/p535283/p535283.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/50255 - http://www.securityfocus.com/bid/34781 - http://osvdb.org/54168 - http://secunia.com/advisories/34951
CVE ID: CVE-2009-1553 State: PUBLISHED Published: 2009-05-06T16:00:00 Last Updated: 2024-08-07T05:20:33.751Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Admin Console in Sun GlassFish Enterprise Server 2.1 allow remote attackers to inject arbitrary web script or HTML via the query string to (1) applications/applications.jsf, (2) configuration/configuration.jsf, (3) customMBeans/customMBeans.jsf, (4) resourceNode/resources.jsf, (5) sysnet/registration.jsf, or (6) webService/webServicesGeneral.jsf; or the name parameter to (7) configuration/auditModuleEdit.jsf, (8) configuration/httpListenerEdit.jsf, or (9) resourceNode/
he name parameter to (7) configuration/auditModuleEdit.jsf, (8) configuration/httpListenerEdit.jsf, or (9) resourceNode/jdbcResourceEdit.jsf. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/503236/100/0/threaded - http://sunsolve.sun.com/search/document.do?assetkey=1-26-258528-1 - http://www.nabble.com/-DSECRG--Sun-Glassfish-Multiple-Security-Vulnerabilities-p22595435.html - http://osvdb.org/54254 - https://glassfish.dev.java.net/servlets/ReadMsg?list=cvs&msgNo=29675 - http://osvdb.org/54256 - http://www.nabble.com/Re:--DSECRG--Sun-Glassfish-Multiple-Security-Vulnerabilities-p23002524.html - http://osvdb.org/54250 - http://osvdb.org/542
--DSECRG--Sun-Glassfish-Multiple-Security-Vulnerabilities-p23002524.html - http://osvdb.org/54250 - http://osvdb.org/54253 - http://osvdb.org/54257 - https://glassfish.dev.java.net/servlets/ReadMsg?list=cvs&msgNo=29669 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50453 - http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000027.html - http://www.vupen.com/english/advisories/2009/1255 - https://glassfish.dev.java.net/servlets/ReadMsg?list=cvs&msgNo=29668 - http://osvdb.org/54252 - http://osvdb.org/54255 - http://dsecrg.com/pages/vul/show.php?id=134 - http://osvdb.org/54249 - http://jvn.jp/en/jp/JVN73653977/index.html - http://osvdb.org/54251 - http://www.securityfocus.com/bid/34824 - h
54249 - http://jvn.jp/en/jp/JVN73653977/index.html - http://osvdb.org/54251 - http://www.securityfocus.com/bid/34824 - http://www.securityfocus.com/bid/34914
CVE ID: CVE-2009-1554 State: PUBLISHED Published: 2009-05-06T16:00:00 Last Updated: 2024-08-07T05:20:33.454Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in ThemeServlet.java in Sun Woodstock 4.2, as used in Sun GlassFish Enterprise Server and other products, allows remote attackers to inject arbitrary web script or HTML via a UTF-7 string in the PATH_INFO, which is displayed on the 404 error page, as demonstrated by the PATH_INFO to theme/META-INF. Additional Analyst Notes: - CVE Program Container: References: - http://www.nabble.com/-DSECRG--Sun-Glassfish-Multiple-Security-Vulnerabilities-p22595435.html - http://www.securityfocus.com/b
/www.nabble.com/-DSECRG--Sun-Glassfish-Multiple-Security-Vulnerabilities-p22595435.html - http://www.securityfocus.com/bid/34829 - http://www.nabble.com/Re:--DSECRG--Sun-Glassfish-Multiple-Security-Vulnerabilities-p23002524.html - http://www.securityfocus.com/archive/1/503239/100/0/threaded - http://secunia.com/advisories/35006 - http://osvdb.org/54220 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50336 - https://woodstock.dev.java.net/servlets/ReadMsg?list=cvs&msgNo=4041 - http://dsecrg.com/pages/vul/show.php?id=138
CVE ID: CVE-2009-1555 State: PUBLISHED Published: 2009-05-06T16:00:00 Last Updated: 2024-08-07T05:20:34.469Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Cisco Linksys WVC54GCA wireless video camera with firmware 1.00R22 and 1.00R24 sends configuration data in response to a Setup Wizard remote-management command, which allows remote attackers to obtain sensitive information such as passwords by reading the SetupWizard.exe process memory, a related issue to CVE-2008-4390. Additional Analyst Notes: - CVE Program Container: References: - http://www.gnucitizen.org/blog/hacking-linksys-ip-cameras-pt-1/ - http://www.vupen.com/english/advisories/2009/1173 - http://www.securityfocu
.org/blog/hacking-linksys-ip-cameras-pt-1/ - http://www.vupen.com/english/advisories/2009/1173 - http://www.securityfocus.com/bid/34596 - http://secunia.com/advisories/34767
CVE ID: CVE-2009-1556 State: PUBLISHED Published: 2009-05-06T16:00:00 Last Updated: 2024-08-07T05:20:33.683Z Vendors: n/a Products: n/a Problem Types: n/a Description: img/main.cgi on the Cisco Linksys WVC54GCA wireless video camera with firmware 1.00R22 and 1.00R24 allows remote authenticated users to read arbitrary files in img/ via a filename in the next_file parameter, as demonstrated by reading .htpasswd to obtain the admin password, a different vulnerability than CVE-2004-2507. Additional Analyst Notes: - CVE Program Container: References: - http://www.gnucitizen.org/blog/hacking-linksys-ip-cameras-pt-2/ - http://www.vupen.com/english/advisories/2009/1173 - http://secunia.com/advisorie
blog/hacking-linksys-ip-cameras-pt-2/ - http://www.vupen.com/english/advisories/2009/1173 - http://secunia.com/advisories/34767 - http://www.securityfocus.com/bid/34629
CVE ID: CVE-2009-1557 State: PUBLISHED Published: 2009-05-06T16:00:00 Last Updated: 2024-08-07T05:20:33.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities on the Cisco Linksys WVC54GCA wireless video camera with firmware 1.00R22 and 1.00R24 allow remote attackers to inject arbitrary web script or HTML via the next_file parameter to (1) main.cgi, (2) img/main.cgi, or (3) adm/file.cgi; or (4) the this_file parameter to adm/file.cgi. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/50224 - http://www.securityfocus.com/bid/34714 - http://www.vupen.com/english/advi
e.xforce.ibmcloud.com/vulnerabilities/50224 - http://www.securityfocus.com/bid/34714 - http://www.vupen.com/english/advisories/2009/1173 - http://www.gnucitizen.org/blog/hacking-linksys-ip-cameras-pt-4/ - http://secunia.com/advisories/34767
CVE ID: CVE-2009-1558 State: PUBLISHED Published: 2009-05-06T16:00:00 Last Updated: 2024-08-07T05:20:33.708Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in adm/file.cgi on the Cisco Linksys WVC54GCA wireless video camera with firmware 1.00R22 and 1.00R24 allows remote attackers to read arbitrary files via a %2e. (encoded dot dot) or an absolute pathname in the next_file parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/50231 - http://www.securityfocus.com/bid/34713 - http://www.vupen.com/english/advisories/2009/1173 - http://www.gnucitizen.org/blog/hacking-linksys-i
cus.com/bid/34713 - http://www.vupen.com/english/advisories/2009/1173 - http://www.gnucitizen.org/blog/hacking-linksys-ip-cameras-pt-3/
CVE ID: CVE-2009-1559 State: PUBLISHED Published: 2009-05-06T16:00:00 Last Updated: 2024-08-07T05:20:34.000Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in adm/file.cgi on the Cisco Linksys WVC54GCA wireless video camera with firmware 1.00R24 and possibly 1.00R22 allows remote attackers to read arbitrary files via an absolute pathname in the this_file parameter. NOTE: traversal via a .. (dot dot) is probably also possible. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/50231 - http://www.securityfocus.com/bid/34713 - http://www.vupen.com/english/advisories/2009/1173 - h
m/vulnerabilities/50231 - http://www.securityfocus.com/bid/34713 - http://www.vupen.com/english/advisories/2009/1173 - http://www.gnucitizen.org/blog/hacking-linksys-ip-cameras-pt-3/
CVE ID: CVE-2009-1560 State: PUBLISHED Published: 2009-05-06T16:00:00 Last Updated: 2024-08-07T05:20:34.453Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Cisco Linksys WVC54GCA wireless video camera with firmware 1.00R22 and 1.00R24 stores passwords and wireless-network keys in cleartext in (1) pass_wd.htm and (2) Wsecurity.htm, which allows remote attackers to obtain sensitive information by reading the HTML source code. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/50410 - http://www.vupen.com/english/advisories/2009/1173 - http://www.gnucitizen.org/blog/hacking-linksys-ip-cameras-pt-4/
CVE ID: CVE-2009-1561 State: PUBLISHED Published: 2009-05-06T16:00:00Z Last Updated: 2024-09-17T01:11:40.144Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in administration.cgi on the Cisco Linksys WRT54GC router with firmware 1.05.7 allows remote attackers to hijack the intranet connectivity of arbitrary users for requests that change the administrator password via the sysPasswd and sysConfirmPasswd parameters. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2009-04/0198.html - http://packetstormsecurity.org/0904-exploits/linksysadmin-passwd.txt - http://www.vupen.co
s/bugtraq/2009-04/0198.html - http://packetstormsecurity.org/0904-exploits/linksysadmin-passwd.txt - http://www.vupen.com/english/advisories/2009/1172 - http://www.falandodeseguranca.com/?p=17 - http://www.securityfocus.com/bid/34616 - http://secunia.com/advisories/34805
CVE ID: CVE-2009-1563 State: REJECTED Published: 2009-10-29T14:00:00 Last Updated: 2009-11-24T10:00:00 Description: No description available.
CVE ID: CVE-2009-1564 State: PUBLISHED Published: 2010-04-12T18:00:00 Last Updated: 2024-08-07T05:20:34.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in vmnc.dll in the VMnc media codec in VMware Movie Decoder before 6.5.4 Build 246459 on Windows, and the movie decoder in VMware Workstation 6.5.x before 6.5.4 build 246459, VMware Player 2.5.x before 2.5.4 build 246459, and VMware Server 2.x on Windows, allows remote attackers to execute arbitrary code via an AVI file with crafted video chunks that use HexTile encoding. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39206 - http://osvdb.org/63614 - ht
Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39206 - http://osvdb.org/63614 - http://lists.vmware.com/pipermail/security-announce/2010/000090.html - http://secunia.com/advisories/36712 - http://archives.neohapsis.com/archives/bugtraq/2010-04/0077.html - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=866 - http://www.vmware.com/security/advisories/VMSA-2010-0007.html - http://www.securityfocus.com/bid/39363 - http://www.securitytracker.com/id?1023838 - http://secunia.com/advisories/39215 - http://secunia.com/secunia_research/2009-36/ - http://archives.neohapsis.com/archives/fulldisclosure/2010-04/0121.html
CVE ID: CVE-2009-1565 State: PUBLISHED Published: 2010-04-12T18:00:00 Last Updated: 2024-08-07T05:20:33.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: vmnc.dll in the VMnc media codec in VMware Movie Decoder before 6.5.4 Build 246459 on Windows, and the movie decoder in VMware Workstation 6.5.x before 6.5.4 build 246459, VMware Player 2.5.x before 2.5.4 build 246459, and VMware Server 2.x on Windows, allows remote attackers to execute arbitrary code via an AVI file with crafted HexTile-encoded video chunks that trigger heap-based buffer overflows, related to "integer truncation errors." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advis
o "integer truncation errors." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39206 - http://lists.vmware.com/pipermail/security-announce/2010/000090.html - http://secunia.com/advisories/36712 - http://archives.neohapsis.com/archives/bugtraq/2010-04/0077.html - http://www.vmware.com/security/advisories/VMSA-2010-0007.html - http://www.osvdb.org/63615 - http://secunia.com/secunia_research/2009-37/ - http://www.securitytracker.com/id?1023838 - http://www.securityfocus.com/bid/39364 - http://secunia.com/advisories/39215 - http://archives.neohapsis.com/archives/fulldisclosure/2010-04/0121.html
CVE ID: CVE-2009-1566 State: PUBLISHED Published: 2009-12-03T18:00:00 Last Updated: 2024-08-07T05:20:33.652Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in Roxio Easy Media Creator 9.0.136, and Roxio Creator 2010 before SP1, might allow remote attackers to execute arbitrary code via an image with crafted dimensions. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/508165/100/0/threaded - http://www.securityfocus.com/bid/37183 - http://secunia.com/secunia_research/2009-38/ - http://secunia.com/advisories/36069 - http://www.vupen.com/english/advisories/2009/3375 - https://exchange.xforce.ibmcloud.com/vulnera
.com/advisories/36069 - http://www.vupen.com/english/advisories/2009/3375 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54496
CVE ID: CVE-2009-1567 State: PUBLISHED Published: 2009-12-03T17:00:00 Last Updated: 2024-08-07T05:20:34.218Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in the Lateral Arts Photobox uploader ActiveX control 1.x before 1.3, and 2.2.0.6, allow remote attackers to execute arbitrary code via a long URL string for the (1) LogURL, (2) ConnectURL, (3) SkinURL, (4) AlbumCreateURL, (5) ErrorURL, or (6) httpsinglehost property value. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/37187 - http://secunia.com/advisories/37492 - http://secunia.com/secunia_research/2009-41/ - http://www.vupen.com/english
7187 - http://secunia.com/advisories/37492 - http://secunia.com/secunia_research/2009-41/ - http://www.vupen.com/english/advisories/2009/3377 - http://secunia.com/advisories/37138 - http://www.vupen.com/english/advisories/2009/3376 - http://www.securityfocus.com/archive/1/508169/100/0/threaded
CVE ID: CVE-2009-1568 State: PUBLISHED Published: 2009-12-08T23:00:00 Last Updated: 2024-08-07T05:20:34.608Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in ienipp.ocx in Novell iPrint Client 5.30, and possibly other versions before 5.32, allows remote attackers to execute arbitrary code via a long target-frame parameter. Additional Analyst Notes: - CVE Program Container: References: - http://download.novell.com/Download?buildid=29T3EFRky18~ - http://www.securityfocus.com/archive/1/508289/100/0/threaded - http://secunia.com/secunia_research/2009-40/ - http://www.vupen.com/english/advisories/2009/3429 - http://www.securityfocus.com/bid/37242 - http://
research/2009-40/ - http://www.vupen.com/english/advisories/2009/3429 - http://www.securityfocus.com/bid/37242 - http://secunia.com/advisories/37169
CVE ID: CVE-2009-1569 State: PUBLISHED Published: 2009-12-08T23:00:00 Last Updated: 2024-08-07T05:20:34.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in Novell iPrint Client 4.38, 5.30, and possibly other versions before 5.32 allow remote attackers to execute arbitrary code via vectors related to (1) Date and (2) Time. Additional Analyst Notes: - CVE Program Container: References: - http://download.novell.com/Download?buildid=29T3EFRky18~ - http://www.securityfocus.com/archive/1/508288/100/0/threaded - http://www.vupen.com/english/advisories/2009/3429 - http://www.securityfocus.com/bid/37242 - http://secunia.com/advisories/35004 - http:
.com/english/advisories/2009/3429 - http://www.securityfocus.com/bid/37242 - http://secunia.com/advisories/35004 - http://secunia.com/secunia_research/2009-44/ - http://secunia.com/advisories/37169
CVE ID: CVE-2009-1570 State: PUBLISHED Published: 2009-11-13T15:00:00 Last Updated: 2024-08-07T05:20:34.803Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the ReadImage function in plug-ins/file-bmp/bmp-read.c in GIMP 2.6.7 might allow remote attackers to execute arbitrary code via a BMP file with crafted width and height values that trigger a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-201209-23.xml - http://www.vupen.com/english/advisories/2009/3564 - http://www.securityfocus.com/bid/37006 - http://www.vupen.com/english/advisories/2009/3228 - http://www.redhat.com/support/