Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
yst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/43700 - http://www.debian.org/security/2010/dsa-2116 - https://rhn.redhat.com/errata/RHSA-2010-0737.html - http://www.mandriva.com/security/advisories?name=MDVSA-2010:201 - http://www.ubuntu.com/usn/USN-1013-1 - http://www.redhat.com/support/errata/RHSA-2010-0864.html - http://secunia.com/advisories/48951 - http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html - https://bugzilla.redhat.com/show_bug.cgi?id=623625 - https://rhn.redhat.com/errata/RHSA-2010-0736.html
CVE ID: CVE-2010-3312 State: PUBLISHED Published: 2010-10-12T21:00:00 Last Updated: 2024-08-07T03:03:18.997Z Vendors: n/a Products: n/a Problem Types: n/a Description: Epiphany 2.28 and 2.29, when WebKit and LibSoup are used, unconditionally displays a closed-lock icon for any URL beginning with the https: substring, without any warning to the user, which allows man-in-the-middle attackers to spoof arbitrary https web sites via a crafted X.509 server certificate. Additional Analyst Notes: - CVE Program Container: References: - http://blog.fefe.de/?ts=b26ca29d - http://secunia.com/advisories/43068 - http://www.openwall.com/lists/oss-security/2010/09/17/10 - http://www.vupen.com/english/adviso
ia.com/advisories/43068 - http://www.openwall.com/lists/oss-security/2010/09/17/10 - http://www.vupen.com/english/advisories/2011/0212 - http://www.openwall.com/lists/oss-security/2010/09/17/12 - https://bugzilla.gnome.org/show_bug.cgi?id=600663 - http://www.openwall.com/lists/oss-security/2010/09/17/5 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=564690 - http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00000.html - http://bugzilla-attachments.gnome.org/attachment.cgi?id=154330 - http://www.openwall.com/lists/oss-security/2010/09/21/5 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - http://www.openwall.com/lists/oss-security/2010/09/17/13 -
nsuse.org/opensuse-security-announce/2011-01/msg00006.html - http://www.openwall.com/lists/oss-security/2010/09/17/13 - http://www.openwall.com/lists/oss-security/2010/09/20/2 - http://www.openwall.com/lists/oss-security/2010/09/17/6
CVE ID: CVE-2010-3313 State: PUBLISHED Published: 2010-09-22T18:00:00Z Last Updated: 2024-09-16T20:37:37.850Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpgwapi/js/fckeditor/editor/dialog/fck_spellerpages/spellerpages/serverscripts/spellchecker.php in EGroupware 1.4.001+.002; 1.6.001+.002 and possibly other versions before 1.6.003; and EPL 9.1 before 9.1.20100309 and 9.2 before 9.2.20100309; allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) aspell_path or (2) spellchecker_lang parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/11777/ - http://www.egroupware.org/news?item=93 -
VE Program Container: References: - http://www.exploit-db.com/exploits/11777/ - http://www.egroupware.org/news?item=93 - http://www.debian.org/security/2010/dsa-2013 - http://www.openwall.com/lists/oss-security/2010/09/21/7
CVE ID: CVE-2010-3314 State: PUBLISHED Published: 2010-09-22T18:00:00Z Last Updated: 2024-09-17T02:46:30.217Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in login.php in EGroupware 1.4.001+.002; 1.6.001+.002 and possibly other versions before 1.6.003; and EPL 9.1 before 9.1.20100309 and 9.2 before 9.2.20100309; allows remote attackers to inject arbitrary web script or HTML via the lang parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/11777/ - http://www.egroupware.org/news?item=93 - http://www.debian.org/security/2010/dsa-2013 - http://www.openwall.com/lists/oss-security/2010
upware.org/news?item=93 - http://www.debian.org/security/2010/dsa-2013 - http://www.openwall.com/lists/oss-security/2010/09/21/7
CVE ID: CVE-2010-3315 State: PUBLISHED Published: 2010-10-04T20:00:00 Last Updated: 2024-08-07T03:03:18.934Z Vendors: n/a Products: n/a Problem Types: n/a Description: authz.c in the mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x before 1.5.8 and 1.6.x before 1.6.13, when SVNPathAuthz short_circuit is enabled, does not properly handle a named repository as a rule scope, which allows remote authenticated users to bypass intended access restrictions via svn commands. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19007 - http://secunia.com/advisorie
ps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19007 - http://secunia.com/advisories/41652 - http://subversion.apache.org/security/CVE-2010-3315-advisory.txt - http://security-tracker.debian.org/tracker/CVE-2010-3315 - http://www.vupen.com/english/advisories/2011/0264 - http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html - http://www.debian.org/security/2010/dsa-2118 - http://secunia.com/advisories/43346 - http://www.redhat.com/support/errata/RHSA-2011-0258.html - http://www.ubuntu.com/usn/USN-1053-1 - http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html - http://www.mandriva.com/security/advisories?name=MDVSA-20
pensuse.org/opensuse-security-announce/2010-12/msg00006.html - http://www.mandriva.com/security/advisories?name=MDVSA-2010:199 - http://secunia.com/advisories/43139 - http://support.apple.com/kb/HT4581
CVE ID: CVE-2010-3316 State: PUBLISHED Published: 2011-01-24T17:00:00 Last Updated: 2024-08-07T03:03:18.998Z Vendors: n/a Products: n/a Problem Types: n/a Description: The run_coprocess function in pam_xauth.c in the pam_xauth module in Linux-PAM (aka pam) before 1.1.2 does not check the return values of the setuid, setgid, and setgroups system calls, which might allow local users to read arbitrary files by executing a program that relies on the pam_xauth PAM check. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2010/09/27/5 - http://openwall.com/lists/oss-security/2010/09/21/3 - http://security.gentoo.org/glsa/glsa-201206-31.xml - htt
09/27/5 - http://openwall.com/lists/oss-security/2010/09/21/3 - http://security.gentoo.org/glsa/glsa-201206-31.xml - http://lists.vmware.com/pipermail/security-announce/2011/000126.html - http://www.vupen.com/english/advisories/2011/0606 - https://bugzilla.redhat.com/show_bug.cgi?id=637898 - http://www.securityfocus.com/archive/1/516909/100/0/threaded - https://sourceforge.net/tracker/?func=detail&aid=3028213&group_id=6663&atid=106663 - http://www.openwall.com/lists/oss-security/2010/09/24/2 - http://openwall.com/lists/oss-security/2010/08/16/2 - http://openwall.com/lists/oss-security/2010/09/21/8 - http://openwall.com/lists/oss-security/2010/09/27/10 - http://openwall.com/lists/oss-security
ss-security/2010/09/21/8 - http://openwall.com/lists/oss-security/2010/09/27/10 - http://openwall.com/lists/oss-security/2010/09/27/4 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:220 - http://secunia.com/advisories/49711 - http://git.altlinux.org/people/ldv/packages/?p=pam.git%3Ba=commit%3Bh=06f882f30092a39a1db867c9744b2ca8d60e4ad6 - http://openwall.com/lists/oss-security/2010/09/27/7 - http://www.redhat.com/support/errata/RHSA-2010-0891.html - http://openwall.com/lists/oss-security/2010/10/25/2 - http://www.redhat.com/support/errata/RHSA-2010-0819.html - http://www.vmware.com/security/advisories/VMSA-2011-0004.html
CVE ID: CVE-2010-3317 State: PUBLISHED Published: 2010-09-13T20:00:00Z Last Updated: 2024-09-16T20:36:51.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Records Manager (RM) 4.5.x before 4.5.1.1-IER-FP001 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/43136 - http://secunia.com/advisories/41344 - http://www-01.ibm.com/support/docview.wss?uid=swg1PJ37426
CVE ID: CVE-2010-3318 State: PUBLISHED Published: 2010-09-13T20:00:00Z Last Updated: 2024-09-17T03:08:11.056Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Records Manager (RM) 4.5.x before 4.5.1.1-IER-FP001 transmits passwords in cleartext, which allows remote attackers to obtain sensitive information by sniffing the network. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/43136 - http://secunia.com/advisories/41344 - http://www-01.ibm.com/support/docview.wss?uid=swg1PJ37426
CVE ID: CVE-2010-3319 State: PUBLISHED Published: 2010-09-13T20:00:00Z Last Updated: 2024-09-17T00:45:38.617Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Records Manager (RM) 4.5.x before 4.5.1.1-IER-FP001 places a session token in the URI, which might allow remote attackers to obtain sensitive information by reading a Referer log file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/43136 - http://www-01.ibm.com/support/docview.wss?uid=swg1PJ37426
CVE ID: CVE-2010-3320 State: PUBLISHED Published: 2010-09-13T20:00:00Z Last Updated: 2024-09-16T17:03:57.729Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in IBM Records Manager (RM) 4.5.x before 4.5.1.1-IER-FP001 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/43136 - http://secunia.com/advisories/41344 - http://www-01.ibm.com/support/docview.wss?uid=swg1PJ37426
CVE ID: CVE-2010-3321 State: PUBLISHED Published: 2010-10-07T20:21:00 Last Updated: 2024-08-07T03:03:18.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: RSA Authentication Client 2.0.x, 3.0, and 3.5.x before 3.5.3 does not properly handle a SENSITIVE or NON-EXTRACTABLE tag on a secret key object that is stored on a SecurID 800 authenticator, which allows local users to bypass intended access restrictions and read keys via unspecified PKCS#11 API requests. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/43795 - http://www.securityfocus.com/archive/1/514153/100/0/threaded
CVE ID: CVE-2010-3322 State: PUBLISHED Published: 2010-09-14T16:39:00Z Last Updated: 2024-09-16T16:44:07.698Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XML parser in Splunk 4.0.0 through 4.1.4 allows remote authenticated users to obtain sensitive information and gain privileges via an XML External Entity (XXE) attack to unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.splunk.com/view/SP-CAAAFQ6
CVE ID: CVE-2010-3323 State: PUBLISHED Published: 2010-09-14T16:39:00Z Last Updated: 2024-09-16T18:33:48.501Z Vendors: n/a Products: n/a Problem Types: n/a Description: Splunk 4.0.0 through 4.1.4 allows remote attackers to conduct session hijacking attacks and obtain the splunkd session key via vectors related to the SPLUNKD_SESSION_KEY parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.splunk.com/view/SP-CAAAFQ6
CVE ID: CVE-2010-3324 State: PUBLISHED Published: 2010-09-17T17:46:00 Last Updated: 2024-08-07T03:03:18.926Z Vendors: n/a Products: n/a Problem Types: n/a Description: The toStaticHTML function in Microsoft Internet Explorer 8, and the SafeHTML function in Microsoft Windows SharePoint Services 3.0 SP2, SharePoint Foundation 2010, Office SharePoint Server 2007 SP2, Groove Server 2010, and Office Web Apps, allows remote attackers to bypass the cross-site scripting (XSS) protection mechanism and conduct XSS attacks via a crafted use of the Cascading Style Sheets (CSS) @import rule, aka "HTML Sanitization Vulnerability," a different vulnerability than CVE-2010-1257. Additional Analyst Notes: - C
rule, aka "HTML Sanitization Vulnerability," a different vulnerability than CVE-2010-1257. Additional Analyst Notes: - CVE Program Container: References: - http://www.wooyun.org/bug.php?action=view&id=189 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-071 - http://archives.neohapsis.com/archives/fulldisclosure/2010-08/0179.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7297 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-072 - http://www.us-cert.gov/cas/techalerts/TA10-285A.html - http://support.avaya.com/css/P8/documents/100113324
CVE ID: CVE-2010-3325 State: PUBLISHED Published: 2010-10-13T18:00:00 Last Updated: 2024-08-07T03:03:19.008Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 through 8 does not properly handle unspecified special characters in Cascading Style Sheets (CSS) documents, which allows remote attackers to obtain sensitive information from a different (1) domain or (2) zone via a crafted web site, aka "CSS Special Character Information Disclosure Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7410 - https://docs.microsoft.com/en-us/security-
ecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7410 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-071 - http://www.us-cert.gov/cas/techalerts/TA10-285A.html - http://support.avaya.com/css/P8/documents/100113324
CVE ID: CVE-2010-3326 State: PUBLISHED Published: 2010-10-13T18:00:00 Last Updated: 2024-08-07T03:03:18.995Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "Uninitialized Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-071 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A720
ritybulletins/2010/ms10-071 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7207 - http://www.us-cert.gov/cas/techalerts/TA10-285A.html - http://support.avaya.com/css/P8/documents/100113324
CVE ID: CVE-2010-3327 State: PUBLISHED Published: 2010-10-13T18:00:00 Last Updated: 2024-08-07T03:03:18.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: The implementation of HTML content creation in Microsoft Internet Explorer 6 through 8 does not remove the Anchor element during pasting and editing, which might allow remote attackers to obtain sensitive deleted information by visiting a web page, aka "Anchor Element Information Disclosure Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7417 - https://docs.microsoft.com/en-us/security-updates/securitybulleti
search/definition/oval%3Aorg.mitre.oval%3Adef%3A7417 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-071 - http://support.avaya.com/css/P8/documents/100113324
CVE ID: CVE-2010-3328 State: PUBLISHED Published: 2010-10-13T18:00:00 Last Updated: 2024-08-07T03:03:19.039Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the CAttrArray::PrivateFind function in mshtml.dll in Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code by setting an unspecified property of a stylesheet object, aka "Uninitialized Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-071 - http://www.zerodayinitiative.com/advisories/ZDI-10-197/ - http://www.securityfocus.com/bid/4370
ulletins/2010/ms10-071 - http://www.zerodayinitiative.com/advisories/ZDI-10-197/ - http://www.securityfocus.com/bid/43705 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7059 - http://www.us-cert.gov/cas/techalerts/TA10-285A.html - http://support.avaya.com/css/P8/documents/100113324
CVE ID: CVE-2010-3329 State: PUBLISHED Published: 2010-10-13T18:00:00 Last Updated: 2024-08-07T03:03:19.121Z Vendors: n/a Products: n/a Problem Types: n/a Description: mshtmled.dll in Microsoft Internet Explorer 7 and 8 allows remote attackers to execute arbitrary code via a crafted Microsoft Office document that causes the HtmlDlgHelper class destructor to access uninitialized memory, aka "Uninitialized Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-071 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7482 - http://www.secu
ms10-071 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7482 - http://www.securityfocus.com/bid/43706 - http://www.us-cert.gov/cas/techalerts/TA10-285A.html - http://support.avaya.com/css/P8/documents/100113324
CVE ID: CVE-2010-3330 State: PUBLISHED Published: 2010-10-13T18:00:00 Last Updated: 2025-01-21T17:29:24.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 through 8 does not properly restrict script access to content from a different (1) domain or (2) zone, which allows remote attackers to obtain sensitive information via a crafted web site, aka "Cross-Domain Information Disclosure Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6928 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010
definition/oval%3Aorg.mitre.oval%3Adef%3A6928 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-071 - http://www.us-cert.gov/cas/techalerts/TA10-285A.html - http://support.avaya.com/css/P8/documents/100113324
CVE ID: CVE-2010-3331 State: PUBLISHED Published: 2010-10-13T18:00:00 Last Updated: 2024-08-07T03:03:18.967Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory in certain circumstances involving use of Microsoft Word to read Word documents, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "Uninitialized Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-071 -
VE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-071 - http://www.us-cert.gov/cas/techalerts/TA10-285A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6832 - http://support.avaya.com/css/P8/documents/100113324
CVE ID: CVE-2010-3332 State: PUBLISHED Published: 2010-09-22T18:00:00 Last Updated: 2024-08-07T03:03:18.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft .NET Framework 1.1 SP1, 2.0 SP1 and SP2, 3.5, 3.5 SP1, 3.5.1, and 4.0, as used for ASP.NET in Microsoft Internet Information Services (IIS), provides detailed error codes during decryption attempts, which allows remote attackers to decrypt and modify encrypted View State (aka __VIEWSTATE) form data, and possibly forge cookies or read application files, via a padding oracle attack, aka "ASP.NET Padding Oracle Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.ekoparty.org/julia
ng Oracle Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.ekoparty.org/juliano-rizzo-2010.php - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12365 - http://www.vupen.com/english/advisories/2010/2751 - http://www.dotnetnuke.com/Community/Blogs/tabid/825/EntryId/2799/Oracle-Padding-Vulnerability-in-ASP-NET.aspx - http://weblogs.asp.net/scottgu/archive/2010/09/18/important-asp-net-security-vulnerability.aspx - http://www.troyhunt.com/2010/09/fear-uncertainty-and-and-padding-oracle.html - http://secunia.com/advisories/41409 - http://www.securityfocus.com/bid/43316 - http://www.mono-project.com/Vulnerabilities#A
://secunia.com/advisories/41409 - http://www.securityfocus.com/bid/43316 - http://www.mono-project.com/Vulnerabilities#ASP.NET_Padding_Oracle - http://www.microsoft.com/technet/security/advisory/2416728.mspx - http://securitytracker.com/id?1024459 - http://blogs.technet.com/b/srd/archive/2010/09/17/understanding-the-asp-net-vulnerability.aspx - http://isc.sans.edu/diary.html?storyid=9568 - http://www.vupen.com/english/advisories/2010/2429 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-070 - http://www.theinquirer.net/inquirer/news/1732956/security-researchers-destroy-microsoft-aspnet-security - http://threatpost.com/en_us/blogs/new-crypto-attack-affects-milli
curity-researchers-destroy-microsoft-aspnet-security - http://threatpost.com/en_us/blogs/new-crypto-attack-affects-millions-aspnet-apps-091310 - http://twitter.com/thaidn/statuses/24832350146 - http://pentonizer.com/general-programming/aspnet-poet-vulnerability-what-else-can-i-do/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/61898
CVE ID: CVE-2010-3333 State: PUBLISHED Published: 2010-11-10T01:00:00.000Z Last Updated: 2025-10-22T00:05:50.753Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2010, Office 2004 and 2008 for Mac, Office for Mac 2011, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via crafted RTF data, aka "RTF Stack Buffer Overflow Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securitytracker.com/id?1024705 - http://securityreason.com/securityalert/8293 - http://secunia.com/advisories/
ttp://www.securitytracker.com/id?1024705 - http://securityreason.com/securityalert/8293 - http://secunia.com/advisories/42144 - http://secunia.com/advisories/38521 - http://www.vupen.com/english/advisories/2010/2923 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=880 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11931 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-087 - http://www.us-cert.gov/cas/techalerts/TA10-313A.html - http://www.securityfocus.com/bid/44652
CVE ID: CVE-2010-3334 State: PUBLISHED Published: 2010-11-10T01:00:00 Last Updated: 2024-08-07T03:03:19.192Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2010, Office 2004 and 2008 for Mac, Office for Mac 2011, and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code via an Office document containing an Office Art Drawing record with crafted msofbtSp records and unspecified flags, which triggers memory corruption, aka "Office Art Drawing Records Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1024705 - https://ov