Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-2549 State: PUBLISHED Published: 2009-07-20T19:25:00Z Last Updated: 2024-09-17T02:32:50.860Z Vendors: n/a Products: n/a Problem Types: n/a Description: Armed Assault (aka ArmA) 1.14 and earlier, and 1.16 beta, and Armed Assault II 1.02 and earlier allows remote attackers to cause a denial of service via a join packet with a final field whose value is (1) 0, which triggers a server crash related to memory allocation, or (2) 1, which triggers CPU/memory consumption and a NULL pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/1951 - http://aluigi.altervista.org/adv/armazzo-adv.txt
CVE ID: CVE-2009-2550 State: PUBLISHED Published: 2009-07-20T19:25:00 Last Updated: 2024-08-07T05:52:15.241Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Hamster Audio Player 0.3a allows remote attackers to execute arbitrary code via a long string in a (1) .m3u or (2) .hpl playlist file. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/55871 - http://www.exploit-db.com/exploits/9157 - http://secunia.com/advisories/35825 - http://www.exploit-db.com/exploits/9172 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51732
CVE ID: CVE-2009-2551 State: PUBLISHED Published: 2009-07-20T19:25:00 Last Updated: 2024-08-07T05:52:15.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in ScriptsEz Easy Image Downloader allow remote attackers to inject arbitrary web script or HTML via the id parameter in a detail action to (1) main.php and possibly (2) demo_page.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/55862 - http://www.securityfocus.com/bid/35701 - http://secunia.com/advisories/35838 - http://packetstormsecurity.org/0907-exploits/eid-xss.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/51722
CVE ID: CVE-2009-2552 State: PUBLISHED Published: 2009-07-20T19:25:00 Last Updated: 2024-08-07T05:52:15.287Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in comments.php in Super Simple Blog Script 2.5.4 allow remote attackers to overwrite, include, and execute arbitrary local files via the entry parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/51805 - http://www.exploit-db.com/exploits/9179 - http://secunia.com/advisories/35859
CVE ID: CVE-2009-2553 State: PUBLISHED Published: 2009-07-20T19:25:00 Last Updated: 2024-08-07T05:52:15.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in comments.php in Super Simple Blog Script 2.5.4, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the entry parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/51806 - http://www.exploit-db.com/exploits/9180 - http://secunia.com/advisories/35859
CVE ID: CVE-2009-2554 State: PUBLISHED Published: 2009-07-20T19:25:00 Last Updated: 2024-08-07T05:52:15.252Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the search method in jobline.class.php in Jobline (com_jobline) 1.1.2.2, 1.3.1, and possibly earlier versions, a component for Joomla!, allows remote attackers to execute arbitrary SQL commands via the search parameter in a results action to index.php, which invokes the search method from the searchJobPostings function in jobline.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9187 - https://exchange.xforce.ibmcloud.com/vulnerabilities/5181
ainer: References: - http://www.exploit-db.com/exploits/9187 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51811 - http://secunia.com/advisories/35877 - http://www.securityfocus.com/bid/35728
CVE ID: CVE-2009-2555 State: PUBLISHED Published: 2009-07-21T16:00:00 Last Updated: 2024-08-07T05:52:15.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in src/jsregexp.cc in Google V8 before 1.1.10.14, as used in Google Chrome before 2.0.172.37, allows remote attackers to execute arbitrary code in the Chrome sandbox via a crafted JavaScript regular expression. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2009/07/stable-beta-update-bug-fixes.html - http://code.google.com/p/chromium/issues/detail?id=14719 - http://www.securityfocus.com/bid/35722 - https://exchange.xforce.ibmcloud.com/vulnera
/chromium/issues/detail?id=14719 - http://www.securityfocus.com/bid/35722 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51801 - http://secunia.com/advisories/35844 - http://codereview.chromium.org/141042 - http://codereview.chromium.org/141042/diff/6/1004 - http://www.vupen.com/english/advisories/2009/1924 - http://www.osvdb.org/55939
CVE ID: CVE-2009-2556 State: PUBLISHED Published: 2009-07-21T16:00:00 Last Updated: 2024-08-07T05:52:15.256Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 2.0.172.37 allows attackers to leverage renderer access to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors that trigger excessive memory allocation. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/51802 - http://googlechromereleases.blogspot.com/2009/07/stable-beta-update-bug-fixes.html - http://secunia.com/advisories/35844 - http://www.vupen.com/english/advis
com/2009/07/stable-beta-update-bug-fixes.html - http://secunia.com/advisories/35844 - http://www.vupen.com/english/advisories/2009/1924 - http://www.securityfocus.com/bid/35723
CVE ID: CVE-2009-2557 State: PUBLISHED Published: 2009-07-21T17:00:00 Last Updated: 2024-08-07T05:52:15.290Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in system/download.php in Admin News Tools 2.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the fichier parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/504949/100/0/threaded - http://www.exploit-db.com/exploits/9153 - http://secunia.com/advisories/35842 - http://osvdb.org/55856
CVE ID: CVE-2009-2558 State: PUBLISHED Published: 2009-07-21T17:00:00 Last Updated: 2024-08-07T05:52:15.226Z Vendors: n/a Products: n/a Problem Types: n/a Description: system/message.php in Admin News Tools 2.5 does not properly restrict access, which allows remote attackers to post news messages via a direct request. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9161 - http://secunia.com/advisories/35842 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51780
CVE ID: CVE-2009-2559 State: PUBLISHED Published: 2009-07-21T17:00:00 Last Updated: 2024-08-07T05:52:15.287Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the IPMI dissector in Wireshark 1.2.0 allows remote attackers to cause a denial of service (crash) via unspecified vectors related to an array index error. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.wireshark.org/security/wnpa-sec-2009-04.html - http://www.vupen.com/english/advisories/2009/1970 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6379 - http://www.securi
9/1970 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6379 - http://www.securityfocus.com/bid/35748 - http://secunia.com/advisories/35884
CVE ID: CVE-2009-2560 State: PUBLISHED Published: 2009-07-21T17:00:00 Last Updated: 2024-08-07T05:52:15.250Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Wireshark 1.2.0 allow remote attackers to cause a denial of service (application crash) via a file that records a malformed packet trace and is processed by the (1) Bluetooth L2CAP, (2) RADIUS, or (3) MIOP dissector. NOTE: it was later reported that the RADIUS issue also affects 0.10.13 through 1.0.9. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36846 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:194 - http://www.wiresh
://www.securityfocus.com/bid/36846 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:194 - http://www.wireshark.org/security/wnpa-sec-2009-04.html - http://secunia.com/advisories/37477 - http://www.vupen.com/english/advisories/2009/3061 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10403 - http://www.openwall.com/lists/oss-security/2009/07/22/2 - http://www.vupen.com/english/advisories/2009/1970 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6416 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54019 - http://www.wireshark.org/docs/relnotes/wireshark-1.0.10.html - http://www.securityfocus.c
ud.com/vulnerabilities/54019 - http://www.wireshark.org/docs/relnotes/wireshark-1.0.10.html - http://www.securityfocus.com/bid/35748 - http://secunia.com/advisories/35884 - http://secunia.com/advisories/37409 - http://www.wireshark.org/security/wnpa-sec-2009-08.html - http://www.debian.org/security/2009/dsa-1942 - http://secunia.com/advisories/37175
CVE ID: CVE-2009-2561 State: PUBLISHED Published: 2009-07-21T17:00:00 Last Updated: 2024-08-07T05:52:15.288Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the sFlow dissector in Wireshark 1.2.0 allows remote attackers to cause a denial of service (CPU and memory consumption) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.wireshark.org/security/wnpa-sec-2009-04.html - http://www.vupen.com/english/advisories/2009/1970 - http://www.securityfocus.com/bid/35748 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5795 - http://secunia.com/advisories/35884
CVE ID: CVE-2009-2562 State: PUBLISHED Published: 2009-07-21T17:00:00 Last Updated: 2024-08-07T05:52:15.279Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the AFS dissector in Wireshark 0.9.2 through 1.2.0 allows remote attackers to cause a denial of service (crash) via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2009:194 - http://www.wireshark.org/security/wnpa-sec-2009-04.html - http://secunia.com/advisories/37477 - http://www.vupen.com/english/advisories/2009/1970 - http://www.wireshark.org/security/wnpa-sec-2009-05.html - https://oval.cisecurity.org/repos
glish/advisories/2009/1970 - http://www.wireshark.org/security/wnpa-sec-2009-05.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11643 - http://www.securityfocus.com/bid/35748 - http://secunia.com/advisories/35884 - http://www.openwall.com/lists/oss-security/2009/09/18/2 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3564 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5625 - http://www.debian.org/security/2009/dsa-1942 - http://www.openwall.com/lists/oss-security/2009/09/17/15 - http://www.wireshark.org/docs/relnotes/wireshark-1.0.9.html
CVE ID: CVE-2009-2563 State: PUBLISHED Published: 2009-07-21T17:00:00 Last Updated: 2024-08-07T05:52:15.289Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Infiniband dissector in Wireshark 1.0.6 through 1.2.0, when running on unspecified platforms, allows remote attackers to cause a denial of service (crash) via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2009:194 - http://www.wireshark.org/security/wnpa-sec-2009-04.html - http://www.vupen.com/english/advisories/2009/1970 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Ad
en.com/english/advisories/2009/1970 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6321 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11210 - http://www.wireshark.org/security/wnpa-sec-2009-05.html - http://www.securityfocus.com/bid/35748 - http://secunia.com/advisories/35884 - http://www.openwall.com/lists/oss-security/2009/09/18/2 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:031 - http://www.openwall.com/lists/oss-security/2009/09/17/15 - http://www.wireshark.org/docs/relnotes/wireshark-1.0.9.html
CVE ID: CVE-2009-2564 State: PUBLISHED Published: 2009-07-21T17:00:00 Last Updated: 2024-08-07T05:52:15.251Z Vendors: n/a Products: n/a Problem Types: n/a Description: NOS Microsystems getPlus Download Manager, as used in Adobe Reader 1.6.2.36 and possibly other versions, Corel getPlus Download Manager before 1.5.0.48, and possibly other products, installs NOS\bin\getPlus_HelperSvc.exe with insecure permissions (Everyone:Full Control), which allows local users to gain SYSTEM privileges by replacing getPlus_HelperSvc.exe with a Trojan horse program, as demonstrated by use of getPlus Download Manager within Adobe Reader. NOTE: within Adobe Reader, the scope of this issue is limited because the
getPlus Download Manager within Adobe Reader. NOTE: within Adobe Reader, the scope of this issue is limited because the program is deleted and the associated service is not automatically launched after a successful installation and reboot. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9199 - http://www.us-cert.gov/cas/techalerts/TA09-286B.html - http://securitytracker.com/id?1023007 - http://www.adobe.com/support/security/bulletins/apsb09-15.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5719 - http://www.securityfocus.com/bid/35740 - http://www.vupen.com/english/advisories/2009/1969 - http:
e.oval%3Adef%3A5719 - http://www.securityfocus.com/bid/35740 - http://www.vupen.com/english/advisories/2009/1969 - http://retrogod.altervista.org/9sg_adobe_local.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/54383 - http://secunia.com/advisories/35930 - http://www.securityfocus.com/archive/1/505095/100/0/threaded - http://www.vupen.com/english/advisories/2009/2898 - http://secunia.com/advisories/36331 - http://blogs.adobe.com/psirt/2009/07/local_privilege_escalation_in.html
CVE ID: CVE-2009-2565 State: PUBLISHED Published: 2009-07-21T22:00:00 Last Updated: 2024-08-07T05:52:15.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Perl CGI's By Mrs. Shiromuku shiromuku(fs6)DIARY 2.40 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.t-okada.com/cgi-bin/s_news/s_news.cgi?action=show_detail&txtnumber=log&mynum=345 - http://secunia.com/advisories/35806 - http://jvn.jp/en/jp/JVN31110006/index.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/51696 - http://jvndb.jvn.jp/en/contents/2009/JVNDB-
06/index.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/51696 - http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000048.html
CVE ID: CVE-2009-2566 State: PUBLISHED Published: 2009-07-21T22:00:00 Last Updated: 2024-08-07T05:52:15.250Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in TFM MMPlayer 2.0, and possibly 2.0.0.30, allows remote attackers to execute arbitrary code via a long string in a playlist (.m3u) file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35605 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51442 - http://www.exploit-db.com/exploits/9047
CVE ID: CVE-2009-2567 State: PUBLISHED Published: 2009-07-22T17:09:00 Last Updated: 2024-08-07T05:52:15.242Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Almond Classifieds (com_aclassf) component 5.6.2 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/8619 - http://www.securityfocus.com/bid/34843
CVE ID: CVE-2009-2568 State: PUBLISHED Published: 2009-07-22T17:09:00 Last Updated: 2024-08-07T05:52:15.244Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Sorinara Streaming Audio Player (SAP) 0.9 allows remote attackers to execute arbitrary code via a long string in a playlist (.m3u) file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34842 - http://www.exploit-db.com/exploits/8617 - http://www.exploit-db.com/exploits/8620 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50339
CVE ID: CVE-2009-2569 State: PUBLISHED Published: 2009-07-22T17:09:00Z Last Updated: 2024-09-16T16:38:51.113Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Verlihub Control Panel (VHCP) 1.7e allow remote attackers to inject arbitrary web script or HTML via (1) the nick parameter in a login action to index.php or (2) the URI in a news request to index.html. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/34941 - http://packetstorm.linuxsecurity.com/0905-exploits/verlihub-xss.txt - http://www.securityfocus.com/bid/34856 - http://www.vupen.com/english/advisories/2009/1264
CVE ID: CVE-2009-2570 State: PUBLISHED Published: 2009-07-22T17:09:00 Last Updated: 2024-08-07T05:52:15.219Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the Symantec.FaxViewerControl.1 ActiveX control in WinFax\DCCFAXVW.DLL in Symantec WinFax Pro 10.03 allows remote attackers to execute arbitrary code via a long argument to the AppendFax method. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-008 - http://www.securityfocus.com/bid/34766 - http://www.vupen.com/english/advisories/2009/1221 - http://secunia.com/advisories/34925 - http://retrogod.altervista
6 - http://www.vupen.com/english/advisories/2009/1221 - http://secunia.com/advisories/34925 - http://retrogod.altervista.org/9sg_symantec_win_fuck_pro.html - http://www.securitytracker.com/id?1022147 - http://www.securityfocus.com/archive/1/503086/100/0/threaded - http://osvdb.org/54137 - http://www.securityfocus.com/archive/1/503074/100/0/threaded - http://www.securityfocus.com/archive/1/503163/100/0/threaded
CVE ID: CVE-2009-2571 State: PUBLISHED Published: 2009-07-22T17:09:00 Last Updated: 2024-08-07T05:52:15.289Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in VerliAdmin 0.3.7 and 0.3.8 allow remote attackers to inject arbitrary web script or HTML via (1) the URI, (2) the q parameter, (3) the nick parameter, or (4) the nick parameter in a bantest action. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/0905-exploits/verliadmin-xss.txt - http://www.securityfocus.com/bid/34845 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50347 - http://www.vupen.com/english/advi
rityfocus.com/bid/34845 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50347 - http://www.vupen.com/english/advisories/2009/1265
CVE ID: CVE-2009-2572 State: PUBLISHED Published: 2009-07-22T17:09:00 Last Updated: 2024-08-07T05:52:15.223Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the Fivestar module 5.x-1.x before 5.x-1.14 and 6.x-1.x before 6.x-1.14, a module for Drupal, allows remote attackers to hijack the authentication of arbitrary users for requests that cast votes. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/50245 - http://osvdb.org/54154 - http://drupal.org/node/449028 - http://secunia.com/advisories/34956 - http://www.vupen.com/english/advisories/2009/1215 - http://drupa
org/node/449028 - http://secunia.com/advisories/34956 - http://www.vupen.com/english/advisories/2009/1215 - http://drupal.org/node/449042 - http://drupal.org/node/449026
CVE ID: CVE-2009-2573 State: PUBLISHED Published: 2009-07-22T17:09:00 Last Updated: 2024-08-07T05:59:55.776Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in MiniTwitter 0.2 beta, when magic_quotes_gpc is disabled, allow remote authenticated users to execute arbitrary SQL commands via the (1) user parameter to (a) index.php and (b) rss.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/503155/100/0/threaded - http://www.securityfocus.com/bid/34795 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50282 - http://www.exploit-db.com/exploits/8586
CVE ID: CVE-2009-2574 State: PUBLISHED Published: 2009-07-22T17:09:00 Last Updated: 2024-08-07T05:59:55.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: index.php in MiniTwitter 0.2 beta allows remote authenticated users to modify certain options of arbitrary accounts via an opt action. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/50283 - http://www.securityfocus.com/archive/1/503157/100/0/threaded - http://www.securityfocus.com/bid/34795 - http://www.exploit-db.com/exploits/8587
CVE ID: CVE-2009-2575 State: PUBLISHED Published: 2009-07-22T18:00:00Z Last Updated: 2024-09-16T20:17:07.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Research In Motion (RIM) BlackBerry 8800 allows remote attackers to cause a denial of service (memory consumption and browser crash) via a large integer value for the length property of a Select object, a related issue to CVE-2009-1692. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2009-July/069772.html
CVE ID: CVE-2009-2576 State: PUBLISHED Published: 2009-07-22T18:00:00 Last Updated: 2024-08-07T05:59:55.640Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6.0.2900.2180 and earlier allows remote attackers to cause a denial of service (CPU and memory consumption) via a long Unicode string argument to the write method, a related issue to CVE-2009-2479. NOTE: it was later reported that 7.0.6000.16473 and earlier are also affected. Additional Analyst Notes: - CVE Program Container: References: - http://websecurity.com.ua/3338/ - http://archives.neohapsis.com/archives/bugtraq/2009-07/0193.html - http://archives.neohapsis.com/archives/bugtraq/2009-07/0192.h
rchives.neohapsis.com/archives/bugtraq/2009-07/0193.html - http://archives.neohapsis.com/archives/bugtraq/2009-07/0192.html - http://www.securityfocus.com/archive/1/505120/100/0/threaded - http://www.securityfocus.com/archive/1/505092/100/0/threaded - http://www.securityfocus.com/archive/1/505122/100/0/threaded
CVE ID: CVE-2009-2577 State: PUBLISHED Published: 2009-07-22T18:00:00 Last Updated: 2024-08-07T05:59:55.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera 9.52 and earlier allows remote attackers to cause a denial of service (CPU and memory consumption, and application hang) via a long Unicode string argument to the write method, a related issue to CVE-2009-2479. Additional Analyst Notes: - CVE Program Container: References: - http://websecurity.com.ua/3338/ - http://www.securityfocus.com/archive/1/505092/100/0/threaded