Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ner: References: - http://www.kb.cert.org/vuls/id/326830 - https://community.rapid7.com/community/metasploit/blog/2013/10/30/seven-tricks-and-treats
CVE ID: CVE-2013-3632 State: PUBLISHED Published: 2014-09-29T22:00:00 Last Updated: 2024-08-06T16:14:56.656Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Cron service in rpc.php in OpenMediaVault allows remote authenticated users to execute cron jobs as arbitrary users and execute arbitrary commands via the username parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/62873 - http://www.exploit-db.com/exploits/29323 - https://community.rapid7.com/community/metasploit/blog/2013/10/30/seven-tricks-and-treats - http://osvdb.org/99143 - https://community.rapid7.com/community/metasploit/blog/2013/10
/10/30/seven-tricks-and-treats - http://osvdb.org/99143 - https://community.rapid7.com/community/metasploit/blog/2013/10/30/seven-foss-disclosures-part-one
CVE ID: CVE-2013-3633 State: PUBLISHED Published: 2013-05-24T20:00:00 Last Updated: 2024-08-06T16:14:56.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (Versions < V5.0.0 for CVE-2013-3633 and versions < V4.5.0 for CVE-2013-3634), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.1.0). The user privileges for the web interface are only enforced on client side and not properly verified on server side. Therefore, an attacker is able to execute privileged commands using an unprivileged account. Additional Analyst Notes: - CVE Program Container: References:
xecute privileged commands using an unprivileged account. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-170686.pdf
CVE ID: CVE-2013-3634 State: PUBLISHED Published: 2013-05-24T20:00:00 Last Updated: 2024-08-06T16:14:56.585Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (Versions < V5.0.0 for CVE-2013-3633 and versions < V4.5.0 for CVE-2013-3634), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.1.0). The implementation of SNMPv3 does not check the user credentials sufficiently. Therefore, an attacker is able to execute SNMP commands without correct credentials. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert
redentials. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-170686.pdf
CVE ID: CVE-2013-3635 State: PUBLISHED Published: 2020-02-07T14:31:22 Last Updated: 2024-08-06T16:14:56.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: ProjectPier 0.8.8 has stored XSS Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/122341/Project-Pier-0.8.8-XSS-Insecure-Cookies.html
CVE ID: CVE-2013-3636 State: PUBLISHED Published: 2020-02-07T14:34:40 Last Updated: 2024-08-06T16:14:56.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: ProjectPier 0.8.8 has a Remote Information Disclosure Weakness because of the lack of the HttpOnly cookie flag Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/122341/Project-Pier-0.8.8-XSS-Insecure-Cookies.html - http://www.securityfocus.com/bid/60739 - https://exchange.xforce.ibmcloud.com/vulnerabilities/85609
CVE ID: CVE-2013-3637 State: PUBLISHED Published: 2020-02-07T14:38:48 Last Updated: 2024-08-06T16:14:56.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: ProjectPier 0.8.8 does not use the Secure flag for cookies Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/122341/Project-Pier-0.8.8-XSS-Insecure-Cookies.html
CVE ID: CVE-2013-3638 State: PUBLISHED Published: 2020-02-06T21:59:15 Last Updated: 2024-08-06T16:14:56.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Boonex Dolphin before 7.1.3 allows remote authenticated users to execute arbitrary SQL commands via the 'pathes' parameter in 'categories.php'. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/60511 - https://exchange.xforce.ibmcloud.com/vulnerabilities/84928
CVE ID: CVE-2013-3639 State: PUBLISHED Published: 2014-02-05T15:00:00 Last Updated: 2024-08-06T16:14:56.592Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Xaraya 2.4.0-b1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) id, (2) interface, (3) name, or (4) tabmodule parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.htbridge.com/advisory/HTB23156 - http://osvdb.org/94598 - https://exchange.xforce.ibmcloud.com/vulnerabilities/85300 - http://packetstormsecurity.com/files/122174/Xaraya-2.4.0-b1-Cross-Site-Scripting.html - http://archives.neoha
es/85300 - http://packetstormsecurity.com/files/122174/Xaraya-2.4.0-b1-Cross-Site-Scripting.html - http://archives.neohapsis.com/archives/bugtraq/2013-06/0098.html
CVE ID: CVE-2013-3640 State: PUBLISHED Published: 2013-06-10T17:00:00Z Last Updated: 2024-09-16T23:30:42.781Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Instant Web Publish function in FileMaker Pro before 12 and Pro Advanced before 12 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN53579095/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000049
CVE ID: CVE-2013-3641 State: PUBLISHED Published: 2013-06-10T17:00:00Z Last Updated: 2024-09-17T02:56:48.381Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Pizza Hut Japan Official Order application before 1.1.1.a for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000054 - http://jvn.jp/en/jp/JVN39218538/index.html - https://play.google.com/store/apps/details?id=jp.pizzahut.aorder
CVE ID: CVE-2013-3642 State: PUBLISHED Published: 2013-06-17T01:00:00Z Last Updated: 2024-09-16T20:17:26.764Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Angel Browser application 1.47b and earlier for Android 1.6 through 2.1, 1.62b and earlier for Android 2.2 through 2.3.4, 1.68b and earlier for Android 3.0 through 4.0.3, and 1.76b and earlier for Android 4.1 through 4.2 does not properly implement the WebView class, which allows attackers to obtain sensitive information via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN79301570/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000055
CVE ID: CVE-2013-3643 State: PUBLISHED Published: 2013-06-17T01:00:00Z Last Updated: 2024-09-17T00:20:33.381Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Galapagos Browser application for Android does not properly implement the WebView class, which allows attackers to obtain sensitive information via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000056 - http://jvn.jp/en/jp/JVN99813183/index.html
CVE ID: CVE-2013-3644 State: PUBLISHED Published: 2013-06-18T18:45:00Z Last Updated: 2024-09-17T01:46:11.964Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in JustSystems Ichitaro 2006 through 2013; Ichitaro Pro through 2; Ichitaro Government 6, 7, and 2006 through 2010; Ichitaro Portable with oreplug; Ichitaro Viewer; and Ichitaro JUST School through 2010 allows remote attackers to execute arbitrary code via a crafted document. Additional Analyst Notes: - CVE Program Container: References: - http://www.justsystems.com/jp/info/js13002.html - http://jvn.jp/en/jp/JVN98712361/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000058
CVE ID: CVE-2013-3645 State: PUBLISHED Published: 2013-06-14T10:00:00Z Last Updated: 2024-09-16T19:47:14.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Orchard.Comments module in Orchard before 1.6.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://docs.orchardproject.net/Documentation/Patch-4-30-2013 - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000057 - http://jvn.jp/en/jp/JVN53622030/index.html
CVE ID: CVE-2013-3646 State: PUBLISHED Published: 2013-06-18T18:45:00Z Last Updated: 2024-09-16T19:10:58.003Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Cybozu Live application before 2.0.1 for Android allows remote attackers to execute arbitrary Java methods, and obtain sensitive information or execute arbitrary commands, via a crafted web site. NOTE: this vulnerability exists because of a CVE-2012-4008 regression. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000059 - https://live.cybozu.co.jp/trouble.html?q=2530 - http://jvn.jp/en/jp/JVN63428218/index.html
CVE ID: CVE-2013-3647 State: PUBLISHED Published: 2013-06-18T18:45:00Z Last Updated: 2024-09-16T18:08:44.597Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WebView class in the Cybozu Live application before 2.0.1 for Android allows attackers to execute arbitrary JavaScript code, and obtain sensitive information, via a crafted application that places this code into a local file associated with a file: URL. NOTE: this vulnerability exists because of a CVE-2012-4009 regression. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000060 - http://jvn.jp/en/jp/JVN19740283/index.html - https://live.cybozu.co.jp/trouble.html?q=2530
CVE ID: CVE-2013-3648 State: PUBLISHED Published: 2013-06-28T23:00:00Z Last Updated: 2024-09-16T17:17:36.926Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in KENT-WEB POST-MAIL before 6.7, when Internet Explorer 7 or earlier is used, allows remote attackers to inject arbitrary web script or HTML via an unspecified form field. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000066 - http://www.kent-web.com/mail/postmail.html - http://jvn.jp/en/jp/JVN26394323/index.html
CVE ID: CVE-2013-3649 State: PUBLISHED Published: 2013-06-28T23:00:00Z Last Updated: 2024-09-16T17:14:01.337Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in KENT-WEB CLIP-MAIL before 3.4, when Internet Explorer 7 or earlier is used, allows remote attackers to inject arbitrary web script or HTML via an unspecified form field. Additional Analyst Notes: - CVE Program Container: References: - http://www.kent-web.com/mail/clipmail.html - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000067 - http://jvn.jp/en/jp/JVN85804149/index.html
CVE ID: CVE-2013-3650 State: PUBLISHED Published: 2013-06-29T19:00:00Z Last Updated: 2024-09-17T01:40:45.892Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the lfCheckFileName function in data/class/pages/LC_Page_ResizeImage.php in LOCKON EC-CUBE before 2.12.5 allows remote attackers to read arbitrary image files via vectors involving the image parameter to resize_image.php, a different vulnerability than CVE-2013-3654. Additional Analyst Notes: - CVE Program Container: References: - http://www.ec-cube.net/info/weakness/20130626/index.php - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000061 - http://svn.ec-cube.net/open_trac/changeset/22863 - http:/
0626/index.php - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000061 - http://svn.ec-cube.net/open_trac/changeset/22863 - http://jvn.jp/en/jp/JVN43886811/index.html - http://www.ec-cube.net/info/weakness/weakness.php?id=48
CVE ID: CVE-2013-3651 State: PUBLISHED Published: 2013-06-29T19:00:00Z Last Updated: 2024-09-16T18:29:31.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: LOCKON EC-CUBE 2.11.2 through 2.12.4 allows remote attackers to conduct unspecified PHP code-injection attacks via a crafted string, related to data/class/SC_CheckError.php and data/class/SC_FormParam.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.ec-cube.net/info/weakness/20130626/index.php - http://svn.ec-cube.net/open_trac/changeset/22891 - http://www.ec-cube.net/info/weakness/weakness.php?id=49 - http://jvn.jp/en/jp/JVN34900750/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000062
CVE ID: CVE-2013-3652 State: PUBLISHED Published: 2013-06-29T16:00:00Z Last Updated: 2024-09-17T04:24:01.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in data/class/pages/products/LC_Page_Products_List.php in LOCKON EC-CUBE 2.11.0 through 2.12.4 allows remote attackers to inject arbitrary web script or HTML via vectors involving the classcategory_id2 field, a different vulnerability than CVE-2013-3653. Additional Analyst Notes: - CVE Program Container: References: - http://www.ec-cube.net/info/weakness/20130626/index.php - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000063 - http://www.ec-cube.net/info/weakness/weakness.php?id=47 - http://s
x.php - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000063 - http://www.ec-cube.net/info/weakness/weakness.php?id=47 - http://svn.ec-cube.net/open_trac/changeset/22862 - http://jvn.jp/en/jp/JVN07192063/index.html
CVE ID: CVE-2013-3653 State: PUBLISHED Published: 2013-06-29T16:00:00Z Last Updated: 2024-09-16T16:28:53.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the RecommendSearch feature in the management screen in LOCKON EC-CUBE before 2.12.5 allow remote attackers to inject arbitrary web script or HTML via vectors involving the rank parameter, a different vulnerability than CVE-2013-3652. Additional Analyst Notes: - CVE Program Container: References: - http://www.ec-cube.net/info/weakness/20130626/index.php - http://www.ec-cube.net/info/weakness/weakness.php?id=46 - http://jvn.jp/en/jp/JVN98665228/index.html - http://jvndb.jv
- http://www.ec-cube.net/info/weakness/weakness.php?id=46 - http://jvn.jp/en/jp/JVN98665228/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000064 - http://svn.ec-cube.net/open_trac/changeset/22861
CVE ID: CVE-2013-3654 State: PUBLISHED Published: 2013-06-29T19:00:00Z Last Updated: 2024-09-17T03:54:12.840Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in LOCKON EC-CUBE 2.12.0 through 2.12.4 allows remote attackers to read arbitrary image files via vectors related to data/class/SC_CheckError.php and data/class/SC_FormParam.php, a different vulnerability than CVE-2013-3650. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000065 - http://www.ec-cube.net/info/weakness/20130626/index.php - http://jvn.jp/en/jp/JVN04161229/index.html - http://www.ec-cube.net/info/weakness/weakness.php?id=45 -
0626/index.php - http://jvn.jp/en/jp/JVN04161229/index.html - http://www.ec-cube.net/info/weakness/weakness.php?id=45 - http://svn.ec-cube.net/open_trac/changeset/22891
CVE ID: CVE-2013-3655 State: PUBLISHED Published: 2013-07-12T16:00:00Z Last Updated: 2024-09-17T02:46:37.190Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Sharp AQUOS PhotoPlayer HN-PP150 with firmware before 1.04.00.04 allows remote attackers to cause a denial of service (networking outage) via crafted packet data. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000068 - http://jvn.jp/en/jp/JVN68773685/index.html - http://www.sharp.co.jp/support/photoplayer/fw_update.html
CVE ID: CVE-2013-3656 State: PUBLISHED Published: 2013-07-18T01:00:00 Last Updated: 2024-08-06T16:14:56.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cybozu Office 9.1.0 and earlier does not properly manage sessions, which allows remote attackers to bypass authentication by leveraging knowledge of a login URL. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN19491840/index.html - http://products.cybozu.co.jp/office/ver9/download/update/fix910.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/85894 - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000069
CVE ID: CVE-2013-3657 State: PUBLISHED Published: 2013-09-10T10:00:00Z Last Updated: 2024-09-17T04:14:13.425Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in VMware ESXi 4.0 through 5.0, and ESX 4.0 and 4.1, allows remote attackers to execute arbitrary code or cause a denial of service via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000085 - http://jvn.jp/en/jp/JVN19847770/index.html - http://jvn.jp/en/jp/JVN19847770/995428/index.html
CVE ID: CVE-2013-3658 State: PUBLISHED Published: 2013-09-10T10:00:00Z Last Updated: 2024-09-17T00:10:58.689Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in VMware ESXi 4.0 through 5.0, and ESX 4.0 and 4.1, allows remote attackers to delete arbitrary host OS files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000084 - http://jvn.jp/en/jp/JVN72911629/995428/index.html - http://jvn.jp/en/jp/JVN72911629/index.html
CVE ID: CVE-2013-3659 State: PUBLISHED Published: 2013-08-09T19:00:00 Last Updated: 2024-08-06T16:14:56.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NTT DOCOMO overseas usage application 2.0.0 through 2.0.4 for Android does not properly connect to Wi-Fi access points, which allows remote attackers to obtain sensitive information by leveraging presence in an 802.11 network's coverage area. Additional Analyst Notes: - CVE Program Container: References: - https://play.google.com/store/apps/details?id=com.nttdocomo.android.gs.utility - http://jvn.jp/en/jp/JVN44035194/index.html - http://jvn.jp/en/jp/JVN44035194/995312/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2013-00007
/JVN44035194/index.html - http://jvn.jp/en/jp/JVN44035194/995312/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000075 - https://exchange.xforce.ibmcloud.com/vulnerabilities/86361
CVE ID: CVE-2013-3660 State: PUBLISHED Published: 2013-05-24T20:00:00.000Z Last Updated: 2025-10-22T00:05:42.100Z Vendors: n/a Products: n/a Problem Types: n/a Description: The EPATHOBJ::pprFlattenRec function in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, and Windows Server 2012 does not properly initialize a pointer for the next object in a certain list, which allows local users to obtain write access to the PATHRECORD chain, and consequently gain privileges, by triggering excessive consumption of paged memory and then making many FlattenPath function cal
ently gain privileges, by triggering excessive consumption of paged memory and then making many FlattenPath function calls, aka "Win32k Read AV Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://archives.neohapsis.com/archives/fulldisclosure/2013-05/0094.html - http://www.exploit-db.com/exploits/25611/ - http://archives.neohapsis.com/archives/fulldisclosure/2013-05/0090.html - http://secunia.com/advisories/53435 - http://www.osvdb.org/93539 - http://twitter.com/taviso/statuses/309157606247768064 - http://www.computerworld.com/s/article/9239477 - http://www.theverge.com/2013/5/23/4358400/google-engineer-bashes-microsoft-discloses-w
uterworld.com/s/article/9239477 - http://www.theverge.com/2013/5/23/4358400/google-engineer-bashes-microsoft-discloses-windows-flaw - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17360 - http://www.reddit.com/r/netsec/comments/1eqh66/0day_windows_kernel_epathobj_vulnerability/ - http://archives.neohapsis.com/archives/fulldisclosure/2013-06/0006.html - http://www.us-cert.gov/ncas/alerts/TA13-190A - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-053 - http://twitter.com/taviso/statuses/335557286657400832
CVE ID: CVE-2013-3661 State: PUBLISHED Published: 2013-05-24T20:00:00 Last Updated: 2024-08-06T16:14:56.685Z Vendors: n/a Products: n/a Problem Types: n/a Description: The EPATHOBJ::bFlatten function in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT does not check whether linked-list traversal is continually accessing the same list member, which allows local users to cause a denial of service (infinite traversal) via vectors that trigger a crafted PATHRECORD chain. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohap
gger a crafted PATHRECORD chain. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2013-05/0094.html - http://www.exploit-db.com/exploits/25611/ - http://secunia.com/advisories/53435 - http://www.osvdb.org/93539 - http://www.computerworld.com/s/article/9239477 - http://www.theverge.com/2013/5/23/4358400/google-engineer-bashes-microsoft-discloses-windows-flaw - http://www.reddit.com/r/netsec/comments/1eqh66/0day_windows_kernel_epathobj_vulnerability/ - http://archives.neohapsis.com/archives/fulldisclosure/2013-06/0006.html - http://twitter.com/taviso/statuses/335557286657400832
CVE ID: CVE-2013-3662 State: PUBLISHED Published: 2014-07-01T17:00:00 Last Updated: 2024-08-06T16:14:56.663Z Vendors: n/a Products: n/a Problem Types: n/a Description: Timbre SketchUp (formerly Google SketchUp) before 8 Maintenance 2 allows remote attackers to execute arbitrary code via a crafted color palette table in a MAC Pict texture, which triggers a stack-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/84720 - http://blog.binamuse.com/2013/05/multiple-vulnerabilities-on-sketchup.html - http://archives.neohapsis.com/archives/bugtraq/2013-06/0006.html
CVE ID: CVE-2013-3663 State: PUBLISHED Published: 2014-06-13T14:00:00 Last Updated: 2024-08-06T16:14:56.576Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in paintlib, as used in Trimble SketchUp (formerly Google SketchUp) before 8 Maintenance 3, allows remote attackers to execute arbitrary code via a crafted RLE8 compressed BMP. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2013-06/0007.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/84721 - http://blog.binamuse.com/2013/05/multiple-vulnerabilities-on-sketchup.html
CVE ID: CVE-2013-3664 State: PUBLISHED Published: 2014-07-01T17:00:00 Last Updated: 2024-08-06T16:14:56.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: Trimble SketchUp (formerly Google SketchUp) before 2013 (13.0.3689) allows remote attackers to execute arbitrary code via a crafted color palette table in a MAC Pict texture, which triggers an out-of-bounds stack write. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-3662. NOTE: this issue was SPLIT due to different affected products and codebases (ADT1); CVE-2013-7388 has been assigned to the paintlib issue. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.co