Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-2621 State: PUBLISHED Published: 2010-07-02T20:00:00 Last Updated: 2024-08-07T02:39:37.809Z Vendors: n/a Products: n/a Problem Types: n/a Description: The QSslSocketBackendPrivate::transmit function in src_network_ssl_qsslsocket_openssl.cpp in Qt 4.6.3 and earlier allows remote attackers to cause a denial of service (infinite loop) via a malformed request. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/46410 - http://www.vupen.com/english/advisories/2010/1657 - http://aluigi.org/poc/qtsslame.zip - http://www.securityfocus.com/bid/41250 - http://osvdb.org/65860 - http://secunia.com/advisories/40389 - http://qt.gitorious.org/qt/q
ecurityfocus.com/bid/41250 - http://osvdb.org/65860 - http://secunia.com/advisories/40389 - http://qt.gitorious.org/qt/qt/commit/c25c7c9bdfade6b906f37ac8bad44f6f0de57597 - https://hermes.opensuse.org/messages/12056605 - http://aluigi.org/adv/qtsslame-adv.txt
CVE ID: CVE-2010-2622 State: PUBLISHED Published: 2010-07-02T20:00:00 Last Updated: 2024-08-07T02:39:37.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Joomanager component, possibly 1.1.1, for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/41256 - http://www.exploit-db.com/exploits/14127 - https://exchange.xforce.ibmcloud.com/vulnerabilities/59945
CVE ID: CVE-2010-2623 State: PUBLISHED Published: 2010-07-02T20:00:00 Last Updated: 2024-08-07T02:39:37.478Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in pages.php in Internet DM Specialist Bed and Breakfast allows remote attackers to execute arbitrary SQL commands via the pp_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/1677 - https://exchange.xforce.ibmcloud.com/vulnerabilities/59964 - http://www.securityfocus.com/bid/41275 - http://www.exploit-db.com/exploits/14144
CVE ID: CVE-2010-2624 State: PUBLISHED Published: 2010-07-02T20:00:00 Last Updated: 2024-08-07T02:39:37.195Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in iScripts EasySnaps 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) comment parameter to add_comments.php, (2) values parameter to tags_details.php, or (3) begin parameter to greetings.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/40448 - http://www.salvatorefresta.net/files/adv/iScripts%20EasySnaps%202.0%20Multiple%20SQL%20Injection%20Vulnerabilities-01072010.txt - https://exchange.xforce.ibmcloud.com/vulner
asySnaps%202.0%20Multiple%20SQL%20Injection%20Vulnerabilities-01072010.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/59984 - http://www.securityfocus.com/archive/1/512140/100/0/threaded - http://www.exploit-db.com/exploits/14162 - http://www.securityfocus.com/bid/41298
CVE ID: CVE-2010-2625 State: PUBLISHED Published: 2010-07-02T20:00:00Z Last Updated: 2024-09-17T00:42:26.506Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Client Service for DPM in Hitachi ServerConductor / Deployment Manager 01-00, 01-01, and 06-00 through 06-00-/A; ServerConductor / Deployment Manager Standard Edition and Enterprise Edition 07-50 through 07-55, and 07-57 through 07-59; and JP1/ServerConductor/Deployment Manager Standard and Enterprise Edition 07-50 through 07-56-/F, 08-00 through 08-09-/E, 08-50 through 08-80-/A, 08-06 through 08-07, and 08-51 through 08-70; allows attackers to cause a denial of service (shutdown and reboot) v
-/A, 08-06 through 08-07, and 08-51 through 08-70; allows attackers to cause a denial of service (shutdown and reboot) via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/40343 - http://www.hitachi.co.jp/Prod/comp/soft1/security/info/vuls/HS10-013/index.html - http://osvdb.org/65833 - http://www.vupen.com/english/advisories/2010/1635
CVE ID: CVE-2010-2626 State: PUBLISHED Published: 2010-07-02T20:00:00 Last Updated: 2024-08-07T02:39:37.836Z Vendors: n/a Products: n/a Problem Types: n/a Description: index.pl in Miyabi CGI Tools SEO Links 1.02 allows remote attackers to execute arbitrary commands via shell metacharacters in the fn command. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/65884 - https://exchange.xforce.ibmcloud.com/vulnerabilities/59908 - http://www.securityfocus.com/bid/41228 - http://secunia.com/advisories/40419 - http://archives.neohapsis.com/archives/fulldisclosure/2010-06/0615.html - http://archives
secunia.com/advisories/40419 - http://archives.neohapsis.com/archives/fulldisclosure/2010-06/0615.html - http://archives.neohapsis.com/archives/fulldisclosure/2010-06/0614.html
CVE ID: CVE-2010-2627 State: PUBLISHED Published: 2010-07-02T20:00:00Z Last Updated: 2024-09-16T19:35:26.035Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in the Refractor 2 engine, as used in Battlefield 2 1.50 (1.5.3153-802.0) and earlier, and Battlefield 2142 (1.10.48.0) and earlier, allow remote servers to overwrite arbitrary files on the client via "..\" (dot dot backslash) sequences in URLs for the (1) sponsor or (2) community logos, and other URLs related to (3) DemoDownloadURL, (4) DemoIndexURL and (5) CustomMapsURL. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/40334 - http://
mMapsURL. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/40334 - http://osvdb.org/65863 - http://www.securityfocus.com/bid/41262 - http://aluigi.altervista.org/adv/bf2urlz-adv.txt
CVE ID: CVE-2010-2628 State: PUBLISHED Published: 2010-08-20T17:00:00Z Last Updated: 2024-09-17T03:32:52.760Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IKE daemon in strongSwan 4.3.x before 4.3.7 and 4.4.x before 4.4.1 does not properly check the return values of snprintf calls, which allows remote attackers to execute arbitrary code via crafted (1) certificate or (2) identity data that triggers buffer overflows. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/2086 - http://lists.opensuse.org/opensuse-updates/2010-08/msg00026.html - https://lists.strongswan.org/pipermail/users/2010-August/005167.html - http://
/opensuse-updates/2010-08/msg00026.html - https://lists.strongswan.org/pipermail/users/2010-August/005167.html - http://download.strongswan.org/patches/08_snprintf_patch/strongswan-4.3.4_snprintf.patch - http://www.vupen.com/english/advisories/2010/2085 - http://www.securitytracker.com/id?1024338 - http://download.strongswan.org/patches/08_snprintf_patch/strongswan-4.4.0_snprintf.patch - http://download.strongswan.org/patches/08_snprintf_patch/strongswan-4.3.6_snprintf.patch - http://download.strongswan.org/patches/08_snprintf_patch/strongswan-4.3.3_snprintf.patch - http://secunia.com/advisories/40956 - http://www.securityfocus.com/bid/42444 - https://bugzilla.novell.com/615915 - http://trac
secunia.com/advisories/40956 - http://www.securityfocus.com/bid/42444 - https://bugzilla.novell.com/615915 - http://trac.strongswan.org/projects/strongswan/wiki/441 - http://download.strongswan.org/patches/08_snprintf_patch/strongswan-4.3.5_snprintf.patch
CVE ID: CVE-2010-2629 State: PUBLISHED Published: 2010-07-06T14:00:00 Last Updated: 2024-08-07T02:39:37.669Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Cisco Content Services Switch (CSS) 11500 with software 8.20.4.02 and the Application Control Engine (ACE) 4710 with software A2(3.0) do not properly handle LF header terminators in situations where the GET line is terminated by CRLF, which allows remote attackers to conduct HTTP request smuggling attacks and possibly bypass intended header insertions via crafted header data, as demonstrated by an LF character between the ClientCert-Subject and ClientCert-Subject-CN headers. NOTE: this vulnerability exists because of an in
acter between the ClientCert-Subject and ClientCert-Subject-CN headers. NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-1576. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/512144/100/0/threaded - http://securitytracker.com/id?1024167 - http://www.securityfocus.com/bid/41315 - http://www.vsecurity.com/resources/advisory/20100702-1/ - http://securitytracker.com/id?1024168
CVE ID: CVE-2010-2630 State: PUBLISHED Published: 2010-07-06T15:00:00 Last Updated: 2024-08-07T02:39:37.761Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TIFFReadDirectory function in LibTIFF 3.9.0 does not properly validate the data types of codec-specific tags that have an out-of-order position in a TIFF file, which allows remote attackers to cause a denial of service (application crash) via a crafted file, a different vulnerability than CVE-2010-2481. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=554371 - http://bugzilla.maptools.org/show_bug.cgi?id=2210 - http://www.debian.org/security/2012/dsa-2552 - http:/
gi?id=554371 - http://bugzilla.maptools.org/show_bug.cgi?id=2210 - http://www.debian.org/security/2012/dsa-2552 - http://security.gentoo.org/glsa/glsa-201209-02.xml - http://secunia.com/advisories/50726
CVE ID: CVE-2010-2631 State: PUBLISHED Published: 2010-07-06T15:00:00 Last Updated: 2024-08-07T02:39:37.668Z Vendors: n/a Products: n/a Problem Types: n/a Description: LibTIFF 3.9.0 ignores tags in certain situations during the first stage of TIFF file processing and does not properly handle this during the second stage, which allows remote attackers to cause a denial of service (application crash) via a crafted file, a different vulnerability than CVE-2010-2481. Additional Analyst Notes: - CVE Program Container: References: - http://bugzilla.maptools.org/show_bug.cgi?id=2210 - http://security.gentoo.org/glsa/glsa-201209-02.xml - http://secunia.com/advisories/50726
CVE ID: CVE-2010-2632 State: PUBLISHED Published: 2011-01-19T15:00:00 Last Updated: 2024-08-07T02:39:37.480Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the FTP Server in Oracle Solaris 8, 9, 10, and 11 Express allows remote attackers to affect availability. NOTE: the previous information was obtained from the January 2011 CPU. Oracle has not commented on claims from a reliable researcher that this is an issue in the glob implementation in libc that allows remote authenticated users to cause a denial of service (CPU and memory consumption) via crafted glob expressions that do not match any pathnames. Additional Analyst Notes: - CVE Program Containe
sumption) via crafted glob expressions that do not match any pathnames. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/55212 - http://securityreason.com/achievement_securityalert/89 - http://secunia.com/advisories/43433 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64798 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10598 - http://secunia.com/advisories/42984 - https://support.avaya.com/css/P8/documents/100127892 - http://securityreason.com/achievement_securityalert/97 - http://www.securitytracker.com/id?1024975 - http://www.vupen.com/english/advisories/2011/0151 - http://www.oracle.com/technetwork/topics/security/cpujan2
?1024975 - http://www.vupen.com/english/advisories/2011/0151 - http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html
CVE ID: CVE-2010-2633 State: PUBLISHED Published: 2010-08-02T21:00:00 Last Updated: 2024-08-07T02:39:37.986Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in EMC Disk Library (EDL) before 3.2.7, 3.3.x before 3.3.2 epatch 8, and 4.0.x before 4.0.1 epatch 4 allows remote attackers to cause a denial of service (communication-module crash) by sending a crafted message through TCP. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2010-07/0272.html - http://osvdb.org/66826 - http://www.vupen.com/english/advisories/2010/1969 - http://www.securityfocus.com/bid/42105 - https://exchange.xforce.ibmclou
://www.vupen.com/english/advisories/2010/1969 - http://www.securityfocus.com/bid/42105 - https://exchange.xforce.ibmcloud.com/vulnerabilities/60853 - http://secunia.com/advisories/40828 - http://securitytracker.com/id?1024265
CVE ID: CVE-2010-2634 State: PUBLISHED Published: 2010-08-09T20:00:00 Last Updated: 2024-08-07T02:39:37.657Z Vendors: n/a Products: n/a Problem Types: n/a Description: RSA enVision before 3.7 SP1 allows remote authenticated users to cause a denial of service via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/512929/100/0/threaded
CVE ID: CVE-2010-2635 State: PUBLISHED Published: 2010-11-09T20:00:00 Last Updated: 2024-08-07T02:39:37.628Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in IBM WebSphere Commerce 6.0 before 6.0.0.10 allows remote authenticated users to execute arbitrary SQL commands via unspecified parameters to "Commerce Organization Admin Console JavaServer pages." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/62951 - http://www-01.ibm.com/support/docview.wss?uid=swg1IZ73130
CVE ID: CVE-2010-2636 State: PUBLISHED Published: 2010-11-09T20:00:00 Last Updated: 2024-08-07T02:39:37.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in sample store pages in IBM WebSphere Commerce 7.0 before 7.0.0.1 allow remote attackers to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1JR35424 - https://exchange.xforce.ibmcloud.com/vulnerabilities/62952
CVE ID: CVE-2010-2637 State: PUBLISHED Published: 2010-11-12T20:00:00 Last Updated: 2024-08-07T02:39:37.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere MQ 6.0 before 6.0.2.9 and 7.0 before 7.0.1.1 does not encrypt the username and password in the security parameters field, which allows remote attackers to obtain sensitive information by sniffing the network traffic from a .NET client application. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg27007069 - http://www-01.ibm.com/support/docview.wss?uid=swg27014224 - https://exchange.xforce.ibmcloud.com/vulnerabilities/63114 - http://www-01.ibm.com/su
port/docview.wss?uid=swg27014224 - https://exchange.xforce.ibmcloud.com/vulnerabilities/63114 - http://www-01.ibm.com/support/docview.wss?uid=swg1IZ56005
CVE ID: CVE-2010-2638 State: PUBLISHED Published: 2010-11-15T20:00:00 Last Updated: 2024-08-07T02:39:37.969Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in IBM WebSphere MQ 7.0 before 7.0.1.5 allows remote authenticated users to cause a denial of service (disk consumption) via vectors that trigger an FDC with an RM680004 Probe Id value. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IC71123 - https://exchange.xforce.ibmcloud.com/vulnerabilities/63147
CVE ID: CVE-2010-2639 State: PUBLISHED Published: 2010-12-06T20:00:00 Last Updated: 2024-08-07T02:39:37.939Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Commerce Enterprise 7.0 before 7.0.0.2 allows remote attackers to read messages intended for other recipients via vectors involving access by the outbound messaging system to the RunTimeProfileCacheCmdImpl class, related to the caching of mutable objects and "concurrency issues." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1024845 - http://www-01.ibm.com/support/docview.wss?uid=swg24028397 - http://www-1.ibm.com/support/docview.wss?uid=swg1JR38114 - https://e
ww-01.ibm.com/support/docview.wss?uid=swg24028397 - http://www-1.ibm.com/support/docview.wss?uid=swg1JR38114 - https://exchange.xforce.ibmcloud.com/vulnerabilities/63406
CVE ID: CVE-2010-2640 State: PUBLISHED Published: 2011-01-07T18:00:00 Last Updated: 2024-08-07T02:39:37.989Z Vendors: n/a Products: n/a Problem Types: n/a Description: Array index error in the PK font parser in the dvi-backend component in Evince 2.32 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font in conjunction with a DVI file that is processed by the thumbnailer. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43068 - http://lists.mandriva.com/security-announce/2011-01/msg00006.php - http://secunia.com/advisories/42872 - http://www.vupen.com/english/adv
riva.com/security-announce/2011-01/msg00006.php - http://secunia.com/advisories/42872 - http://www.vupen.com/english/advisories/2011/0212 - http://www.vupen.com/english/advisories/2011/0043 - http://www.vupen.com/english/advisories/2011/0029 - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052995.html - http://secunia.com/advisories/42769 - http://www.vupen.com/english/advisories/2011/0097 - http://www.debian.org/security/2011/dsa-2357 - http://www.ubuntu.com/usn/USN-1035-1 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - http://www.vupen.com/english/advisories/2011/0102 - http://secunia.com/advisories/42821 - http://www.vupen.com/english
- http://www.vupen.com/english/advisories/2011/0102 - http://secunia.com/advisories/42821 - http://www.vupen.com/english/advisories/2011/0056 - http://www.redhat.com/support/errata/RHSA-2011-0009.html - http://git.gnome.org/browse/evince/commit/?id=d4139205b010ed06310d14284e63114e88ec6de2 - http://www.securitytracker.com/id?1024937 - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052910.html - http://www.securityfocus.com/bid/45678 - http://secunia.com/advisories/42847 - https://bugzilla.redhat.com/show_bug.cgi?id=666313
CVE ID: CVE-2010-2641 State: PUBLISHED Published: 2011-01-07T18:00:00 Last Updated: 2024-08-07T02:39:37.760Z Vendors: n/a Products: n/a Problem Types: n/a Description: Array index error in the VF font parser in the dvi-backend component in Evince 2.32 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font in conjunction with a DVI file that is processed by the thumbnailer. Additional Analyst Notes: - CVE Program Container: References: - http://lists.mandriva.com/security-announce/2011-01/msg00006.php - http://secunia.com/advisories/42872 - http://www.vupen.com/english/advisories/2011/0043 - http://www.vupen.c
00006.php - http://secunia.com/advisories/42872 - http://www.vupen.com/english/advisories/2011/0043 - http://www.vupen.com/english/advisories/2011/0029 - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052995.html - http://secunia.com/advisories/42769 - http://www.vupen.com/english/advisories/2011/0097 - http://www.debian.org/security/2011/dsa-2357 - http://www.ubuntu.com/usn/USN-1035-1 - http://www.vupen.com/english/advisories/2011/0102 - http://secunia.com/advisories/42821 - https://bugzilla.redhat.com/show_bug.cgi?id=666314 - http://www.vupen.com/english/advisories/2011/0056 - http://www.redhat.com/support/errata/RHSA-2011-0009.html - http://git.gnome.org/browse/evi
nglish/advisories/2011/0056 - http://www.redhat.com/support/errata/RHSA-2011-0009.html - http://git.gnome.org/browse/evince/commit/?id=d4139205b010ed06310d14284e63114e88ec6de2 - http://www.securitytracker.com/id?1024937 - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052910.html - http://www.securityfocus.com/bid/45678 - http://secunia.com/advisories/42847
CVE ID: CVE-2010-2642 State: PUBLISHED Published: 2011-01-07T18:00:00 Last Updated: 2024-08-07T02:39:37.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the AFM font parser in the dvi-backend component in Evince 2.32 and earlier, teTeX 3.0, t1lib 5.1.2, and possibly other products allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font in conjunction with a DVI file that is processed by the thumbnailer. Additional Analyst Notes: - CVE Program Container: References: - http://lists.mandriva.com/security-announce/2011-01/msg00006.php - http://www.mandriva.com/security/advisories?n
nces: - http://lists.mandriva.com/security-announce/2011-01/msg00006.php - http://www.mandriva.com/security/advisories?name=MDVSA-2011:016 - http://secunia.com/advisories/42872 - http://www.vupen.com/english/advisories/2011/0043 - http://www.vupen.com/english/advisories/2011/0029 - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052995.html - http://secunia.com/advisories/42769 - http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html - http://rhn.redhat.com/errata/RHSA-2012-1201.html - http://www.vupen.com/english/advisories/2011/0097 - http://www.vupen.com/english/advisories/2011/0193 - http://www.debian.org/security/2011/dsa-2357 - http://www.ubun
097 - http://www.vupen.com/english/advisories/2011/0193 - http://www.debian.org/security/2011/dsa-2357 - http://www.ubuntu.com/usn/USN-1035-1 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:017 - http://www.vupen.com/english/advisories/2011/0102 - http://secunia.com/advisories/42821 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:144 - http://www.vupen.com/english/advisories/2011/0056 - https://bugzilla.redhat.com/show_bug.cgi?id=666318 - http://www.redhat.com/support/errata/RHSA-2011-0009.html - http://git.gnome.org/browse/evince/commit/?id=d4139205b010ed06310d14284e63114e88ec6de2 - http://www.securitytracker.com/id?1024937 - http://lists.fedoraproject.org/piperm
9205b010ed06310d14284e63114e88ec6de2 - http://www.securitytracker.com/id?1024937 - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052910.html - http://www.securityfocus.com/bid/45678 - https://security.gentoo.org/glsa/201701-57 - http://secunia.com/advisories/42847 - http://www.vupen.com/english/advisories/2011/0194
CVE ID: CVE-2010-2643 State: PUBLISHED Published: 2011-01-07T18:00:00 Last Updated: 2024-08-07T02:39:37.997Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the TFM font parser in the dvi-backend component in Evince 2.32 and earlier allows remote attackers to execute arbitrary code via a crafted font in conjunction with a DVI file that is processed by the thumbnailer. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43068 - http://lists.mandriva.com/security-announce/2011-01/msg00006.php - https://bugzilla.redhat.com/show_bug.cgi?id=666321 - http://secunia.com/advisories/42872 - http://www.vupen.com/english/advisori
bugzilla.redhat.com/show_bug.cgi?id=666321 - http://secunia.com/advisories/42872 - http://www.vupen.com/english/advisories/2011/0212 - http://www.vupen.com/english/advisories/2011/0043 - http://www.vupen.com/english/advisories/2011/0029 - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052995.html - http://secunia.com/advisories/42769 - http://www.vupen.com/english/advisories/2011/0097 - http://www.debian.org/security/2011/dsa-2357 - http://www.ubuntu.com/usn/USN-1035-1 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - http://www.vupen.com/english/advisories/2011/0102 - http://secunia.com/advisories/42821 - http://www.vupen.com/english/advi