Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2011-3199 State: PUBLISHED Published: 2014-03-20T19:00:00 Last Updated: 2024-08-06T23:29:56.595Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Domain Technologie Control (DTC) before 0.34.1 allow remote authenticated users to inject arbitrary web script or HTML via the (1) message body of a support ticket or unspecified vectors to the (2) DNS and (3) MX form, as demonstrated by the "Domain root TXT record:" field. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/08/13/1 - http://www.openwall.com/lists/oss-security/2011/08/24/10 - http://www.debian.or
ll.com/lists/oss-security/2011/08/13/1 - http://www.openwall.com/lists/oss-security/2011/08/24/10 - http://www.debian.org/security/2011/dsa-2365 - http://git.gplhost.com/gitweb/?p=dtc.git%3Ba=blob%3Bf=debian/changelog%3Bhb=3eb6ef5cea6c571aae5e49e1930de778eca280c3 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=637584
CVE ID: CVE-2011-3200 State: PUBLISHED Published: 2011-09-06T16:00:00 Last Updated: 2024-08-06T23:29:55.424Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the parseLegacySyslogMsg function in tools/syslogd.c in rsyslogd in rsyslog 4.6.x before 4.6.8 and 5.2.0 through 5.8.4 might allow remote attackers to cause a denial of service (application exit) via a long TAG in a legacy syslog message. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/46027 - https://bugzilla.redhat.com/show_bug.cgi?id=727644 - http://www.rsyslog.com/potential-dos-with-malformed-tag/ - http://securitytracker.com/id?1026000 - http://
i?id=727644 - http://www.rsyslog.com/potential-dos-with-malformed-tag/ - http://securitytracker.com/id?1026000 - http://lists.opensuse.org/opensuse-updates/2011-09/msg00013.html - http://git.adiscon.com/?p=rsyslog.git%3Ba=commit%3Bh=1ca6cc236d1dabf1633238b873fb1c057e52f95e - http://www.redhat.com/support/errata/RHSA-2011-1247.html - http://www.mandriva.com/security/advisories?name=MDVSA-2011:134 - http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065941.html - http://www.securityfocus.com/bid/49413 - http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065837.html - http://secunia.com/advisories/45922
CVE ID: CVE-2011-3201 State: PUBLISHED Published: 2013-03-08T21:00:00 Last Updated: 2024-08-06T23:29:55.914Z Vendors: n/a Products: n/a Problem Types: n/a Description: GNOME Evolution before 3.2.3 allows user-assisted remote attackers to read arbitrary files via the attachment parameter to a mailto: URL, which attaches the file to the email. Additional Analyst Notes: - CVE Program Container: References: - https://git.gnome.org/browse/evolution/commit/?id=0a478083fa31aec0059bc6feacc054226fe55b56 - http://rhn.redhat.com/errata/RHSA-2013-0516.html - http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/82450 - https
etwork/topics/security/bulletinjan2015-2370101.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/82450 - https://bugzilla.redhat.com/show_bug.cgi?id=733504 - https://bugzilla.gnome.org/show_bug.cgi?id=657374 - https://git.gnome.org/browse/evolution/commit/?id=588c410718068388f8ce0004a71c104a4c89cce3
CVE ID: CVE-2011-3202 State: PUBLISHED Published: 2020-01-14T20:03:39 Last Updated: 2024-08-06T23:29:56.156Z Vendors: Jcow Products: Jcow CMS Problem Types: XSS Description: A Cross-Site Scripting (XSS) vulnerability exists in the g parameter to index.php in Jcow CMS 4.2 and earlier. Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2011/08/30/5
CVE ID: CVE-2011-3203 State: PUBLISHED Published: 2020-01-14T19:57:40 Last Updated: 2024-08-06T23:29:56.321Z Vendors: Jcow Products: Jcow CMS Problem Types: Arbitrary Code Execution Description: A Code Execution vulnerability exists the attachment parameter to index.php in Jcow CMS 4.x to 4.2 and 5.2 to 5.2. Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2011/08/30/6
CVE ID: CVE-2011-3204 State: PUBLISHED Published: 2011-09-06T16:00:00 Last Updated: 2024-08-06T23:29:55.998Z Vendors: n/a Products: n/a Problem Types: n/a Description: hammerhead.cc in Hammerhead 2.1.4 allows local users to write to arbitrary files via a symlink attack on (1) /tmp/hammer.log (aka the HH_LOG file) or (2) the REPORT_LOG file. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/08/30/7 - http://www.openwall.com/lists/oss-security/2011/08/26/9 - http://www.securityfocus.com/bid/49548 - https://launchpad.net/bugs/826679
CVE ID: CVE-2011-3205 State: PUBLISHED Published: 2011-09-06T15:00:00 Last Updated: 2024-08-06T23:29:55.437Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the gopherToHTML function in gopher.cc in the Gopher reply parser in Squid 3.0 before 3.0.STABLE26, 3.1 before 3.1.15, and 3.2 before 3.2.0.11 allows remote Gopher servers to cause a denial of service (memory corruption and daemon restart) or possibly have unspecified other impact via a long line in a response. NOTE: This issue exists because of a CVE-2005-0094 regression. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2011-1293.html - http://secuni
t Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2011-1293.html - http://secunia.com/advisories/46029 - http://secunia.com/advisories/45906 - http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065534.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.html - http://lists.opensuse.org/opensuse-security-announce/2011-09/msg00013.html - http://securitytracker.com/id?1025981 - http://www.squid-cache.org/Versions/v3/3.0/changesets/squid-3.0-9193.patch - http://www.squid-cache.org/Versions/v3/3.1/changesets/squid-3.1-10363.patch - http://www.squid-cache.org/Versions/v2/2.HEAD/changesets/12710.patch - http://sec
3.1/changesets/squid-3.1-10363.patch - http://www.squid-cache.org/Versions/v2/2.HEAD/changesets/12710.patch - http://secunia.com/advisories/45965 - http://secunia.com/advisories/45805 - http://www.debian.org/security/2011/dsa-2304 - http://openwall.com/lists/oss-security/2011/08/30/8 - http://www.squid-cache.org/Advisories/SQUID-2011_3.txt - http://lists.opensuse.org/opensuse-security-announce/2011-09/msg00012.html - http://openwall.com/lists/oss-security/2011/08/29/2 - https://bugzilla.redhat.com/show_bug.cgi?id=734583 - http://openwall.com/lists/oss-security/2011/08/30/4 - http://www.squid-cache.org/Versions/v3/3.2/changesets/squid-3.2-11294.patch - http://lists.opensuse.org/opensuse-secur
- http://www.squid-cache.org/Versions/v3/3.2/changesets/squid-3.2-11294.patch - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00040.html - http://www.securityfocus.com/bid/49356 - http://www.osvdb.org/74847 - http://secunia.com/advisories/45920 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:150
CVE ID: CVE-2011-3206 State: PUBLISHED Published: 2012-01-08T00:00:00 Last Updated: 2024-08-06T23:29:55.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the administration interface in RHQ 4.2.0, as used in JBoss Operations Network (aka JON or JBoss ON) before 3.0, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/47197 - http://secunia.com/advisories/47280 - http://rhn.redhat.com/errata/RHSA-2012-0089.html - http://securitytracker.com/id?1026435 - https://bugzilla.redhat.com/show_bug.cgi?id=7
t.com/errata/RHSA-2012-0089.html - http://securitytracker.com/id?1026435 - https://bugzilla.redhat.com/show_bug.cgi?id=734662
CVE ID: CVE-2011-3207 State: PUBLISHED Published: 2011-09-22T10:00:00 Last Updated: 2024-08-06T23:29:56.260Z Vendors: n/a Products: n/a Problem Types: n/a Description: crypto/x509/x509_vfy.c in OpenSSL 1.0.x before 1.0.0e does not initialize certain structure members, which makes it easier for remote attackers to bypass CRL validation by using a nextUpdate value corresponding to a time in the past. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=133226187115472&w=2 - http://marc.info/?l=bugtraq&m=133226187115472&w=2 - http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564 - http://lists.fedoraproject.org/pipermail/package-announce/2012-Novem
w-01.ibm.com/support/docview.wss?uid=ssg1S1004564 - http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092905.html - http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065744.html - http://cvs.openssl.org/chngview?cn=21349 - http://secunia.com/advisories/45956 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:137 - http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065712.html - http://support.apple.com/kb/HT5784 - http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html - https://bugzilla.redhat.com/show_bug.cgi?id=736087 - http://www.securitytracker.com/id?1026012 - http://openssl.org/news/secadv_2
ugzilla.redhat.com/show_bug.cgi?id=736087 - http://www.securitytracker.com/id?1026012 - http://openssl.org/news/secadv_20110906.txt - http://secunia.com/advisories/57353 - http://www.redhat.com/support/errata/RHSA-2011-1409.html
CVE ID: CVE-2011-3208 State: PUBLISHED Published: 2011-09-14T17:00:00 Last Updated: 2024-08-06T23:29:56.064Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the split_wildmats function in nntpd.c in nntpd in Cyrus IMAP Server before 2.3.17 and 2.4.x before 2.4.11 allows remote attackers to execute arbitrary code via a crafted NNTP command. Additional Analyst Notes: - CVE Program Container: References: - https://hermes.opensuse.org/messages/11723935 - http://secunia.com/advisories/46064 - http://git.cyrusimap.org/cyrus-imapd/commit/?id=3244c18c928fa331f6927e2b8146abe90feafddd - http://www.securityfocus.com/bid/49534 - http://www.osvdb.org/75307 - http
id=3244c18c928fa331f6927e2b8146abe90feafddd - http://www.securityfocus.com/bid/49534 - http://www.osvdb.org/75307 - http://lists.opensuse.org/opensuse-updates/2011-09/msg00019.html - http://asg.andrew.cmu.edu/archive/message.php?mailbox=archive.cyrus-announce&msg=200 - http://secunia.com/advisories/45975 - https://exchange.xforce.ibmcloud.com/vulnerabilities/69679 - http://asg.andrew.cmu.edu/archive/message.php?mailbox=archive.cyrus-announce&msg=199 - http://www.redhat.com/support/errata/RHSA-2011-1317.html - http://secunia.com/advisories/45938 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:149 - https://bugzilla.redhat.com/show_bug.cgi?id=734926 - http://www.debian.org/securi
urity/advisories?name=MDVSA-2011:149 - https://bugzilla.redhat.com/show_bug.cgi?id=734926 - http://www.debian.org/security/2011/dsa-2318 - http://git.cyrusimap.org/cyrus-imapd/commit/?id=0f8f026699829b65733c3081657b24e2174f4f4d - http://securitytracker.com/id?1026031
CVE ID: CVE-2011-3209 State: PUBLISHED Published: 2012-10-03T10:00:00Z Last Updated: 2024-08-06T23:29:56.015Z Vendors: n/a Products: n/a Problem Types: n/a Description: The div_long_long_rem implementation in include/asm-x86/div64.h in the Linux kernel before 2.6.26 on the x86 platform allows local users to cause a denial of service (Divide Error Fault and panic) via a clock_gettime system call. Additional Analyst Notes: - CVE Program Container: References: - http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.26 - https://bugzilla.redhat.com/show_bug.cgi?id=732878 - https://github.com/torvalds/linux/commit/f8bd2258e2d520dff28c855658bd24bdafb5102d - http://git.kernel.org/?p=linux/kerne
https://github.com/torvalds/linux/commit/f8bd2258e2d520dff28c855658bd24bdafb5102d - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f8bd2258e2d520dff28c855658bd24bdafb5102d - http://www.openwall.com/lists/oss-security/2011/10/24/3
CVE ID: CVE-2011-3210 State: PUBLISHED Published: 2011-09-22T10:00:00 Last Updated: 2024-08-06T23:29:56.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ephemeral ECDH ciphersuite functionality in OpenSSL 0.9.8 through 0.9.8r and 1.0.x before 1.0.0e does not ensure thread safety during processing of handshake messages from clients, which allows remote attackers to cause a denial of service (daemon crash) via out-of-order messages that violate the TLS protocol. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=133226187115472&w=2 - http://marc.info/?l=bugtraq&m=133226187115472&w=2 - http://www-01.ibm.com/support/docview.wss?uid=s
33226187115472&w=2 - http://marc.info/?l=bugtraq&m=133226187115472&w=2 - http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:137 - http://support.apple.com/kb/HT5784 - http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html - http://www.securitytracker.com/id?1026012 - http://marc.info/?l=bugtraq&m=132750648501816&w=2 - http://openssl.org/news/secadv_20110906.txt - http://cvs.openssl.org/chngview?cn=21337 - http://secunia.com/advisories/57353 - https://bugzilla.redhat.com/show_bug.cgi?id=736079 - http://marc.info/?l=bugtraq&m=132750648501816&w=2
CVE ID: CVE-2011-3211 State: PUBLISHED Published: 2011-09-15T20:00:00 Last Updated: 2024-08-06T23:29:55.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: The server in Bcfg2 1.1.2 and earlier, and 1.2 prerelease, allows remote attackers to execute arbitrary commands via shell metacharacters in data received from a client. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/solj/bcfg2/commit/f4a35efec1b6a1e54d61cf1b8bfc83dd1d89eef7 - https://bugzilla.redhat.com/show_bug.cgi?id=736279 - http://www.securityfocus.com/bid/49414 - http://secunia.com/advisories/46042 - http://www.debian.org/security/2011/dsa-2302 - http://lists.fedoraproject.org/piperma
p://secunia.com/advisories/46042 - http://www.debian.org/security/2011/dsa-2302 - http://lists.fedoraproject.org/pipermail/package-announce/2011-September/066070.html - http://secunia.com/advisories/45926 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=640028 - http://article.gmane.org/gmane.comp.sysutils.bcfg2.devel/4318 - http://secunia.com/advisories/45807 - http://openwall.com/lists/oss-security/2011/09/06/1 - http://lists.fedoraproject.org/pipermail/package-announce/2011-September/066071.html - https://github.com/solj/bcfg2/commit/46795ae451ca6ede55a0edeb726978aef4684b53 - http://openwall.com/lists/oss-security/2011/09/01/1
CVE ID: CVE-2011-3212 State: PUBLISHED Published: 2011-10-14T10:00:00 Last Updated: 2024-08-06T23:29:56.688Z Vendors: n/a Products: n/a Problem Types: n/a Description: CoreStorage in Apple Mac OS X 10.7 before 10.7.2 does not ensure that all disk data is encrypted during the enabling of FileVault, which makes it easier for physically proximate attackers to obtain sensitive information by reading directly from the disk device. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/76362 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html - http://support.apple.com/kb/HT5002 - http://support.apple.com/kb/HT5281 - http://lists.apple.com/archive
msg00003.html - http://support.apple.com/kb/HT5002 - http://support.apple.com/kb/HT5281 - http://lists.apple.com/archives/security-announce/2012/May/msg00001.html - http://www.securityfocus.com/bid/50085
CVE ID: CVE-2011-3213 State: PUBLISHED Published: 2011-10-14T10:00:00 Last Updated: 2024-08-06T23:29:55.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: The File Systems component in Apple Mac OS X before 10.7.2 does not properly track the specific X.509 certificate that a user manually accepted for an initial https WebDAV connection, which allows man-in-the-middle attackers to hijack WebDAV communication by presenting an arbitrary certificate for a subsequent connection. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html - http://support.apple.com/kb/HT5002 - http://www.securityfocus.com/b
archives/Security-announce/2011//Oct/msg00003.html - http://support.apple.com/kb/HT5002 - http://www.securityfocus.com/bid/50085
CVE ID: CVE-2011-3214 State: PUBLISHED Published: 2011-10-14T10:00:00 Last Updated: 2024-08-06T23:29:56.579Z Vendors: n/a Products: n/a Problem Types: n/a Description: IOGraphics in Apple Mac OS X through 10.6.8 does not properly handle a locked-screen state in display sleep mode for an Apple Cinema Display, which allows physically proximate attackers to bypass the password requirement via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html - http://support.apple.com/kb/HT5002 - http://www.securityfocus.com/bid/50085
CVE ID: CVE-2011-3215 State: PUBLISHED Published: 2011-10-14T10:00:00 Last Updated: 2024-08-06T23:29:56.297Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel in Apple Mac OS X before 10.7.2 does not properly prevent FireWire DMA in the absence of a login, which allows physically proximate attackers to bypass intended access restrictions and discover a password by making a DMA request in the (1) loginwindow, (2) boot, or (3) shutdown state. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html - http://support.apple.com/kb/HT5002 - http://www.securityfocus.com/bid/50085
CVE ID: CVE-2011-3216 State: PUBLISHED Published: 2011-10-14T10:00:00 Last Updated: 2024-08-06T23:29:55.424Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel in Apple Mac OS X before 10.7.2 does not properly implement the sticky bit for directories, which might allow local users to bypass intended permissions and delete files via an unlink system call. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html - http://support.apple.com/kb/HT5002 - http://www.securityfocus.com/bid/50085
CVE ID: CVE-2011-3217 State: PUBLISHED Published: 2011-10-14T10:00:00 Last Updated: 2024-08-06T23:29:55.419Z Vendors: n/a Products: n/a Problem Types: n/a Description: MediaKit in Apple Mac OS X through 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted disk image. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html - http://support.apple.com/kb/HT5002 - http://www.securityfocus.com/bid/50085
CVE ID: CVE-2011-3218 State: PUBLISHED Published: 2011-10-14T10:00:00 Last Updated: 2024-08-06T23:29:56.628Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "Save for Web" selection in QuickTime Player in Apple Mac OS X through 10.6.8 exports HTML documents that contain an http link to a script file, which allows man-in-the-middle attackers to conduct cross-site scripting (XSS) attacks by spoofing the http server during local viewing of an exported document. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html - http://support.apple.com/kb/HT5016 - http://support.apple.com/kb/HT5002 - http://
ity-announce/2011//Oct/msg00003.html - http://support.apple.com/kb/HT5016 - http://support.apple.com/kb/HT5002 - http://osvdb.org/76373 - http://www.securityfocus.com/bid/50085 - http://www.securityfocus.com/bid/50122
CVE ID: CVE-2011-3219 State: PUBLISHED Published: 2011-10-12T18:00:00 Last Updated: 2024-08-06T23:29:55.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in CoreMedia, as used in Apple iTunes before 10.5, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with H.264 encoding. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17228 - http://support.apple.com/kb/HT4981 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html - http://lists.apple.com/archives/Security-announ
p://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html - http://support.apple.com/kb/HT5016 - http://support.apple.com/kb/HT5002 - http://osvdb.org/76374
CVE ID: CVE-2011-3220 State: PUBLISHED Published: 2011-10-14T10:00:00 Last Updated: 2024-08-06T23:29:56.579Z Vendors: n/a Products: n/a Problem Types: n/a Description: QuickTime in Apple Mac OS X before 10.7.2 does not properly process URL data handlers in movie files, which allows remote attackers to obtain sensitive information from uninitialized memory locations via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/76377 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html - http://www.securityfocus.com/bid/50130 - http://support.apple.com/kb/HT5016 - http://support.apple.com/kb/HT5002 - http://www.securityfocus.com/bi
om/bid/50130 - http://support.apple.com/kb/HT5016 - http://support.apple.com/kb/HT5002 - http://www.securityfocus.com/bid/50085
CVE ID: CVE-2011-3221 State: PUBLISHED Published: 2011-10-14T10:00:00 Last Updated: 2024-08-06T23:29:56.633Z Vendors: n/a Products: n/a Problem Types: n/a Description: QuickTime in Apple Mac OS X before 10.7.2 does not properly handle the atom hierarchy in movie files, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/76378 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html - http://support.apple.com/kb/HT5016 - http://support.apple.com/kb/HT5002 - http://www.securityfocus.com/bid/50085
CVE ID: CVE-2011-3222 State: PUBLISHED Published: 2011-10-14T10:00:00 Last Updated: 2024-08-06T23:29:56.316Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in QuickTime in Apple Mac OS X before 10.7.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted FlashPix file. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/76379 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html - http://support.apple.com/kb/HT5016 - http://support.apple.com/kb/HT5002 - http://www.securityfocus.com/bid/50085
CVE ID: CVE-2011-3223 State: PUBLISHED Published: 2011-10-14T10:00:00 Last Updated: 2024-08-06T23:29:55.831Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in QuickTime in Apple Mac OS X before 10.7.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted FLIC movie file. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/76380 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html - http://support.apple.com/kb/HT5016 - http://support.apple.com/kb/HT5002 - http://www.securityfocus.com/bid/50085