Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
re.com/servlet/ClientServlet/C40_WS_INST_SV_2063534-001r2.pdf?REQ=RAA&DIRECTION=2063534-001&FILENAME=C40_WS_INST_SV_2063534-001r2.pdf&FILEREV=1&DOCREV_ORG=1 - http://www.forbes.com/sites/thomasbrewster/2015/07/10/vulnerable-breasts/ - https://twitter.com/digitalbond/status/619250429751222277 - https://ics-cert.us-cert.gov/advisories/ICSMA-18-037-02 - http://apps.gehealthcare.com/servlet/ClientServlet/C401_WS_INST_SV_2069560001r1.pdf?REQ=RAA&DIRECTION=2069560-001&FILENAME=C401_WS_INST_SV_2069560001r1.pdf&FILEREV=1&DOCREV_ORG=1
CVE ID: CVE-2012-6695 State: PUBLISHED Published: 2015-08-04T10:00:00 Last Updated: 2024-08-06T21:36:02.049Z Vendors: n/a Products: n/a Problem Types: n/a Description: GE Healthcare Centricity PACS Workstation 4.0 and 4.0.1 has a password of ddpadmin for the ddpadmin user, which has unspecified impact and attack vectors. NOTE: it is not clear whether this password is default, hardcoded, or dependent on another system or product that requires a fixed value. Additional Analyst Notes: - CVE Program Container: References: - http://apps.gehealthcare.com/servlet/ClientServlet/C40_WS_INST_SV_2063534-001r2.pdf?REQ=RAA&DIRECTION=2063534-001&FILENAME=C40_WS_INST_SV_2063534-001r2.pdf&FILEREV=1&DOCREV_O
_WS_INST_SV_2063534-001r2.pdf?REQ=RAA&DIRECTION=2063534-001&FILENAME=C40_WS_INST_SV_2063534-001r2.pdf&FILEREV=1&DOCREV_ORG=1 - http://www.forbes.com/sites/thomasbrewster/2015/07/10/vulnerable-breasts/ - https://twitter.com/digitalbond/status/619250429751222277 - https://ics-cert.us-cert.gov/advisories/ICSMA-18-037-02 - http://apps.gehealthcare.com/servlet/ClientServlet/C401_WS_INST_SV_2069560001r1.pdf?REQ=RAA&DIRECTION=2069560-001&FILENAME=C401_WS_INST_SV_2069560001r1.pdf&FILEREV=1&DOCREV_ORG=1
CVE ID: CVE-2012-6696 State: PUBLISHED Published: 2017-09-25T21:00:00 Last Updated: 2024-08-06T21:36:02.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: inspircd in Debian before 2.0.7 does not properly handle unsigned integers. NOTE: This vulnerability exists because of an incomplete fix to CVE-2012-1836. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/08/26/1 - http://www.debian.org/security/2015/dsa-3226 - https://github.com/inspircd/inspircd/commit/ed28c1ba666b39581adb860bf51cdde43c84cc89
CVE ID: CVE-2012-6697 State: PUBLISHED Published: 2017-04-13T14:00:00 Last Updated: 2024-08-06T21:36:02.224Z Vendors: n/a Products: n/a Problem Types: n/a Description: InspIRCd before 2.0.7 allows remote attackers to cause a denial of service (infinite loop). Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=780880 - https://security.gentoo.org/glsa/201512-13 - http://www.debian.org/security/2015/dsa-3226 - https://github.com/inspircd/inspircd/commit/58c893e834ff20495d00770922
CVE ID: CVE-2012-6698 State: PUBLISHED Published: 2016-04-11T15:00:00 Last Updated: 2024-08-06T21:36:02.244Z Vendors: n/a Products: n/a Problem Types: n/a Description: The decode_search function in dhcp.c in dhcpcd 3.x allows remote DHCP servers to cause a denial of service (out-of-bounds write) via a crafted response. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/ubuntu/+source/dhcpcd/+bug/1517226 - http://www.openwall.com/lists/oss-security/2015/12/02/1 - https://launchpadlibrarian.net/228152582/dhcp.c.patch - http://www.debian.org/security/2016/dsa-3534 - http://www.openwall.com/lists/oss-security/2015/12/03/1
CVE ID: CVE-2012-6699 State: PUBLISHED Published: 2016-04-11T15:00:00 Last Updated: 2024-08-06T21:36:02.240Z Vendors: n/a Products: n/a Problem Types: n/a Description: The decode_search function in dhcp.c in dhcpcd 3.x allows remote DHCP servers to cause a denial of service (out-of-bounds read) via a crafted response. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/ubuntu/+source/dhcpcd/+bug/1517226 - http://www.openwall.com/lists/oss-security/2015/12/02/1 - https://launchpadlibrarian.net/228152582/dhcp.c.patch - http://www.debian.org/security/2016/dsa-3534 - http://www.openwall.com/lists/oss-security/2015/12/03/1
CVE ID: CVE-2012-6700 State: PUBLISHED Published: 2016-04-11T15:00:00 Last Updated: 2024-08-06T21:36:02.250Z Vendors: n/a Products: n/a Problem Types: n/a Description: The decode_search function in dhcp.c in dhcpcd 3.x does not properly free allocated memory, which allows remote DHCP servers to cause a denial of service via a crafted response. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/ubuntu/+source/dhcpcd/+bug/1517226 - http://www.openwall.com/lists/oss-security/2015/12/02/1 - https://launchpadlibrarian.net/228152582/dhcp.c.patch - http://www.debian.org/security/2016/dsa-3534 - http://www.openwall.com/lists/oss-security/2015/12/03/1
CVE ID: CVE-2012-6701 State: PUBLISHED Published: 2016-05-02T10:00:00 Last Updated: 2024-08-06T21:36:01.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in fs/aio.c in the Linux kernel before 3.4.1 allows local users to cause a denial of service or possibly have unspecified other impact via a large AIO iovec. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/a70b52ec1aaeaf60f4739edb1b422827cb6f3893 - https://bugzilla.redhat.com/show_bug.cgi?id=1314288 - https://access.redhat.com/errata/RHSA-2018:1854 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=a70b52ec1aaeaf60f4739edb1b4228
HSA-2018:1854 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=a70b52ec1aaeaf60f4739edb1b422827cb6f3893 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.4.1 - http://www.openwall.com/lists/oss-security/2016/03/02/9
CVE ID: CVE-2012-6702 State: PUBLISHED Published: 2016-06-16T18:00:00 Last Updated: 2024-08-06T21:36:02.049Z Vendors: n/a Products: n/a Problem Types: n/a Description: Expat, when used in a parser that has not called XML_SetHashSalt or passed it a seed of 0, makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms via vectors involving use of the srand function. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/tns-2016-20 - http://www.securityfocus.com/bid/91483 - http://www.debian.org/security/2016/dsa-3597 - http://www.openwall.com/lists/oss-security/2016/06/04/1 - http://www.openwall.com/lists/oss-securi
urity/2016/dsa-3597 - http://www.openwall.com/lists/oss-security/2016/06/04/1 - http://www.openwall.com/lists/oss-security/2016/06/03/8 - https://security.gentoo.org/glsa/201701-21 - https://source.android.com/security/bulletin/2016-11-01.html - http://www.ubuntu.com/usn/USN-3010-1
CVE ID: CVE-2012-6703 State: PUBLISHED Published: 2016-06-29T14:00:00 Last Updated: 2024-08-06T21:36:02.055Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the snd_compr_allocate_buffer function in sound/core/compress_offload.c in the ALSA subsystem in the Linux kernel before 3.6-rc6-next-20120917 allows local users to cause a denial of service (insufficient memory allocation) or possibly have unspecified other impact via a crafted SNDRV_COMPRESS_SET_PARAMS ioctl call. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/06/28/6 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?
w.openwall.com/lists/oss-security/2016/06/28/6 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b35cc8225845112a616e3a2266d2fde5ab13d3ab - https://github.com/torvalds/linux/commit/b35cc8225845112a616e3a2266d2fde5ab13d3ab - https://bugzilla.redhat.com/show_bug.cgi?id=1351076 - https://www.kernel.org/pub/linux/kernel/next/patch-v3.6-rc6-next-20120917.xz - http://www.securityfocus.com/bid/91502 - http://www.securitytracker.com/id/1036190
CVE ID: CVE-2012-6704 State: PUBLISHED Published: 2016-12-28T07:42:00 Last Updated: 2024-08-06T21:36:02.175Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sock_setsockopt function in net/core/sock.c in the Linux kernel before 3.5 mishandles negative values of sk_sndbuf and sk_rcvbuf, which allows local users to cause a denial of service (memory corruption and system crash) or possibly have unspecified other impact by leveraging the CAP_NET_ADMIN capability for a crafted setsockopt system call with the (1) SO_SNDBUF or (2) SO_RCVBUF option. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95135 - https://bugzilla.redhat.com/sho
t Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95135 - https://bugzilla.redhat.com/show_bug.cgi?id=1402024 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=82981930125abfd39d7c8378a9cfdf5e1be2002b - http://www.openwall.com/lists/oss-security/2016/12/03/1 - https://github.com/torvalds/linux/commit/82981930125abfd39d7c8378a9cfdf5e1be2002b
CVE ID: CVE-2012-6705 State: PUBLISHED Published: 2017-06-03T22:00:00Z Last Updated: 2024-09-16T23:51:29.795Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) exists in Jamroom before 4.2.7 via the Status Update field. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/52073 - http://st2tea.blogspot.com/2012/02/jamroom-cross-site-scripting.html
CVE ID: CVE-2012-6706 State: PUBLISHED Published: 2017-06-22T13:00:00 Last Updated: 2024-08-06T21:36:02.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: A VMSF_DELTA memory corruption was discovered in unrar before 5.5.5, as used in Sophos Anti-Virus Threat Detection Engine before 3.37.2 and other products, that can lead to arbitrary code execution. An integer overflow can be caused in DataSize+CurChannel. The result is a negative value of the "DestPos" variable, which allows the attacker to write out of bounds when setting Mem[DestPos]. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.chromium.org/p/project-zero/issues/detail?id=1286 - https://nak
tes: - CVE Program Container: References: - https://bugs.chromium.org/p/project-zero/issues/detail?id=1286 - https://nakedsecurity.sophos.com/2012/11/05/tavis-ormandy-sophos/ - https://security.gentoo.org/glsa/201709-24 - https://community.sophos.com/kb/en-us/118424#six - https://security.gentoo.org/glsa/201708-05 - https://lock.cmpxchg8b.com/sophailv2.pdf - https://security.gentoo.org/glsa/201804-16 - https://kc.mcafee.com/corporate/index?page=content&id=SB10205 - http://telussecuritylabs.com/threats/show/TSL20121207-01 - http://securitytracker.com/id?1027725
CVE ID: CVE-2012-6707 State: PUBLISHED Published: 2017-10-19T19:00:00Z Last Updated: 2024-09-17T00:51:05.712Z Vendors: n/a Products: n/a Problem Types: n/a Description: WordPress through 4.8.2 uses a weak MD5-based password hashing algorithm, which makes it easier for attackers to determine cleartext values by leveraging access to the hash values. NOTE: the approach to changing this may not be fully compatible with certain use cases, such as migration of a WordPress site from a web host that uses a recent PHP version to a different web host that uses PHP 5.2. These use cases are plausible (but very unlikely) based on statistics showing widespread deployment of WordPress with obsolete PHP ver
s are plausible (but very unlikely) based on statistics showing widespread deployment of WordPress with obsolete PHP versions. Additional Analyst Notes: - CVE Program Container: References: - https://core.trac.wordpress.org/ticket/21022
CVE ID: CVE-2012-6708 State: PUBLISHED Published: 2018-01-18T23:00:00 Last Updated: 2024-08-06T21:36:02.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: jQuery before 1.9.0 is vulnerable to Cross-site Scripting (XSS) attacks. The jQuery(strInput) function does not differentiate selectors from HTML in a reliable fashion. In vulnerable versions, jQuery determined whether the input was HTML by looking for the '<' character anywhere in the string, giving attackers more flexibility when attempting to construct a malicious payload. In fixed versions, jQuery only deems the input to be HTML if it explicitly starts with the '<' character, limiting exploitability only to attackers who c
ems the input to be HTML if it explicitly starts with the '<' character, limiting exploitability only to attackers who can control the beginning of a string, which is far less common. Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/vuln/npm:jquery:20120206 - https://bugs.jquery.com/ticket/11290 - https://github.com/jquery/jquery/commit/05531fc4080ae24070930d15ae0cea7ae056457d - https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0 - http://www.securityfocus.com/bid/102792 - http://packetstormsecurity.com/files/153237/RetireJS-CORS-Issue-Script-Execution.html - https://lists.apache.org/thread.html/b0656
ketstormsecurity.com/files/153237/RetireJS-CORS-Issue-Script-Execution.html - https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E - https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E - https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00041.html - http://packetstormsecurity.com/files/161972/Linksys-EA7500-2.0.8.194281-Cross-Site-Scripting.html
CVE ID: CVE-2012-6709 State: PUBLISHED Published: 2018-02-23T17:00:00Z Last Updated: 2024-09-16T20:43:12.705Z Vendors: n/a Products: n/a Problem Types: n/a Description: ELinks 0.12 and Twibright Links 2.3 have Missing SSL Certificate Validation. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=881399 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=694658
CVE ID: CVE-2012-6710 State: PUBLISHED Published: 2018-10-07T18:00:00 Last Updated: 2024-08-06T21:36:02.195Z Vendors: n/a Products: n/a Problem Types: n/a Description: ext_find_user in eXtplorer through 2.1.2 allows remote attackers to bypass authentication via a password[]= (aka an empty array) in an action=login request to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-201212-371 - https://www.securityfocus.com/bid/57058 - http://itsecuritysolutions.org/2012-12-31-eXtplorer-v2.1-authentication-bypass-vulnerability
CVE ID: CVE-2012-6711 State: PUBLISHED Published: 2019-06-18T17:34:08 Last Updated: 2024-08-06T21:36:02.224Z Severity: HIGH (CVSS 7 CVSS:3.0/AC:H/AV:L/A:H/C:H/I:H/PR:L/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: A heap-based buffer overflow exists in GNU Bash before 4.3 when wide characters, not supported by the current locale set in the LC_CTYPE environment variable, are printed through the echo built-in function. A local attacker, who can provide data to print through the "echo -e" built-in function, may use this flaw to crash a script or execute code with the privileges of the bash process. This occurs because ansicstr() in lib/sh/strtrans.c mishandles u32cconv().
code with the privileges of the bash process. This occurs because ansicstr() in lib/sh/strtrans.c mishandles u32cconv(). Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1721071 - http://git.savannah.gnu.org/cgit/bash.git/commit/?h=devel&id=863d31ae775d56b785dc5b0105b6d251515d81d5 - http://www.securityfocus.com/bid/108824 - https://support.f5.com/csp/article/K05122252 - https://support.f5.com/csp/article/K05122252?utm_source=f5support&amp%3Butm_medium=RSS - https://usn.ubuntu.com/4180-1/
CVE ID: CVE-2012-6712 State: PUBLISHED Published: 2019-07-27T21:39:23 Last Updated: 2024-08-06T21:36:02.060Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Linux kernel before 3.4, a buffer overflow occurs in drivers/net/wireless/iwlwifi/iwl-agn-sta.c, which will cause at least memory corruption. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/2da424b0773cea3db47e1e81db71eeebde8269d4 - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=2da424b0773cea3db47e1e81db71eeebde8269d4 - https://mirrors.edge.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.4
CVE ID: CVE-2012-6713 State: PUBLISHED Published: 2019-08-13T16:38:28 Last Updated: 2024-08-06T21:36:01.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: The job-manager plugin before 0.7.19 for WordPress has multiple XSS issues. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/job-manager/#developers
CVE ID: CVE-2012-6714 State: PUBLISHED Published: 2019-08-21T18:09:03 Last Updated: 2024-08-06T21:36:02.277Z Vendors: n/a Products: n/a Problem Types: n/a Description: The count-per-day plugin before 3.2.3 for WordPress has XSS via search words. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/count-per-day/#developers
CVE ID: CVE-2012-6715 State: PUBLISHED Published: 2019-08-21T17:46:49 Last Updated: 2024-08-06T21:36:02.047Z Vendors: n/a Products: n/a Problem Types: n/a Description: The formbuilder plugin before 0.9.1 for WordPress has XSS via a Referer header. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/formbuilder/#developers
CVE ID: CVE-2012-6716 State: PUBLISHED Published: 2019-08-22T12:28:55 Last Updated: 2024-08-06T21:36:01.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: The events-manager plugin before 5.1.7 for WordPress has XSS via JSON call links. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/events-manager/#developers
CVE ID: CVE-2012-6717 State: PUBLISHED Published: 2019-08-28T11:09:50 Last Updated: 2024-08-06T21:36:02.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: The redirection plugin before 2.2.12 for WordPress has XSS, a different issue than CVE-2011-4562. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/redirection/#developers
CVE ID: CVE-2012-6718 State: PUBLISHED Published: 2019-08-28T11:13:59 Last Updated: 2024-08-06T21:36:02.353Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sharebar plugin before 1.2.2 for WordPress has XSS, a different issue than CVE-2013-3491. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/sharebar/#developers
CVE ID: CVE-2012-6719 State: PUBLISHED Published: 2019-08-28T11:14:57 Last Updated: 2024-08-06T21:36:02.242Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sharebar plugin before 1.2.2 for WordPress has SQL injection. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/sharebar/#developers
CVE ID: CVE-2012-6720 State: PUBLISHED Published: 2020-02-11T19:55:46 Last Updated: 2024-08-06T21:36:01.929Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in SocialEngine before 4.2.4 allow remote attackers to inject arbitrary web script or HTML via the (1) title parameter to music/create, (2) location parameter to events/create, or (3) search parameter to widget/index/content_id/*. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2012/q2/396
CVE ID: CVE-2012-6721 State: PUBLISHED Published: 2020-02-11T19:55:32 Last Updated: 2024-08-06T21:36:02.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the (1) Forum, (2) Event, and (3) Classifieds plugins in SocialEngine before 4.2.4. Additional Analyst Notes: - CVE Program Container: References: - https://seclists.org/oss-sec/2012/q2/396
CVE ID: CVE-2013-0001 State: PUBLISHED Published: 2013-01-09T18:00:00 Last Updated: 2024-08-06T14:10:56.652Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Windows Forms (aka WinForms) component in Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.0 SP2, 4, and 4.5 does not properly initialize memory arrays, which allows remote attackers to obtain sensitive information via (1) a crafted XAML browser application (XBAP) or (2) a crafted .NET Framework application that leverages a pointer to an unmanaged memory location, aka "System Drawing Information Disclosure Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repo
losure Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15814 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-004
CVE ID: CVE-2013-0002 State: PUBLISHED Published: 2013-01-09T18:00:00 Last Updated: 2024-08-06T14:10:56.656Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Windows Forms (aka WinForms) component in Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4, and 4.5 allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (XBAP) or (2) a crafted .NET Framework application that leverages improper counting of objects during a memory copy operation, aka "WinForms Buffer Overflow Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA13-008A.html
." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA13-008A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-004 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16343 - https://lists.apache.org/thread.html/680e6938b6412e26d5446054fd31de2011d33af11786b989127d1cc3%40%3Ccommits.santuario.apache.org%3E
CVE ID: CVE-2013-0003 State: PUBLISHED Published: 2013-01-09T18:00:00 Last Updated: 2024-08-06T14:10:56.762Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in a System.DirectoryServices.Protocols (S.DS.P) namespace method in Microsoft .NET Framework 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4, and 4.5 allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (XBAP) or (2) a crafted .NET Framework application that leverages a missing array-size check during a memory copy operation, aka "S.DS.P Buffer Overflow Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA13-008A.html -
Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA13-008A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16381 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-004
CVE ID: CVE-2013-0004 State: PUBLISHED Published: 2013-01-09T18:00:00 Last Updated: 2024-08-06T14:10:56.664Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly validate the permissions of objects in memory, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (XBAP) or (2) a crafted .NET Framework application, aka "Double Construction Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA13-008A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mit
/www.us-cert.gov/cas/techalerts/TA13-008A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16339 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-004