Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-2560 State: PUBLISHED Published: 2010-08-11T18:00:00 Last Updated: 2024-08-07T02:39:37.199Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "HTML Layout Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA10-222A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11832 - https://docs.mic
A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11832 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-053
CVE ID: CVE-2010-2561 State: PUBLISHED Published: 2010-08-11T18:00:00 Last Updated: 2024-08-07T02:39:36.913Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft XML Core Services (aka MSXML) 3.0 does not properly handle HTTP responses, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted response, aka "Msxml2.XMLHTTP.3.0 Response Handling Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA10-222A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11730 - https://docs.microsoft.com/
tps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11730 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-051
CVE ID: CVE-2010-2562 State: PUBLISHED Published: 2010-08-11T18:00:00 Last Updated: 2024-08-07T02:39:37.664Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Office Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly parse the Excel file format, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Excel file, aka "Excel Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA10-222A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010
www.us-cert.gov/cas/techalerts/TA10-222A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-057 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12088
CVE ID: CVE-2010-2563 State: PUBLISHED Published: 2010-09-15T18:00:00 Last Updated: 2024-08-07T02:39:37.607Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Word 97 text converter in the WordPad Text Converters in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly parse malformed structures in Word 97 documents, which allows remote attackers to execute arbitrary code via a crafted document containing an unspecified value that is used in a loop counter, aka "WordPad Word 97 Text Converter Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/
Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-067 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=879 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6632
CVE ID: CVE-2010-2564 State: PUBLISHED Published: 2010-08-11T18:00:00 Last Updated: 2024-08-07T02:39:36.970Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Microsoft Windows Movie Maker (WMM) 2.1, 2.6, and 6.0 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted project file, aka "Movie Maker Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA10-222A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-050 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ova
-updates/securitybulletins/2010/ms10-050 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12011
CVE ID: CVE-2010-2565 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2010-2566 State: PUBLISHED Published: 2010-08-11T18:00:00 Last Updated: 2024-08-07T02:39:36.838Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Secure Channel (aka SChannel) security package in Microsoft Windows XP SP2 and SP3, and Windows Server 2003 SP2, does not properly validate certificate request messages from TLS and SSL servers, which allows remote servers to execute arbitrary code via a crafted SSL response, aka "SChannel Malformed Certificate Request Remote Code Execution Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA10-222A.html - https://oval.cisecurity.org/repository/search/def
: References: - http://www.us-cert.gov/cas/techalerts/TA10-222A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11787 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-049
CVE ID: CVE-2010-2567 State: PUBLISHED Published: 2010-09-15T18:00:00 Last Updated: 2024-08-07T02:39:37.086Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RPC client implementation in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly allocate memory during the parsing of responses, which allows remote RPC servers and man-in-the-middle attackers to execute arbitrary code via a malformed response, aka "RPC Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7177 - https://docs.microsoft.com/en-us/security-updates/securitybul
ory/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7177 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-066
CVE ID: CVE-2010-2568 State: PUBLISHED Published: 2010-07-22T10:00:00.000Z Last Updated: 2025-10-22T00:05:52.095Z Vendors: n/a Products: n/a Problem Types: n/a Description: Windows Shell in Microsoft Windows XP SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 SP2 and R2, and Windows 7 allows local users or remote attackers to execute arbitrary code via a crafted (1) .LNK or (2) .PIF shortcut file, which is not properly handled during icon display in Windows Explorer, as demonstrated in the wild in July 2010, and originally reported for malware that leverages CVE-2010-2772 in Siemens WinCC SCADA systems. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Reference
72 in Siemens WinCC SCADA systems. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.us-cert.gov/cas/techalerts/TA10-222A.html - http://isc.sans.edu/diary.html?storyid=9181 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11564 - http://www.f-secure.com/weblog/archives/00001986.html - http://www.kb.cert.org/vuls/id/940193 - http://krebsonsecurity.com/2010/07/experts-warn-of-new-windows-shortcut-flaw/ - http://secunia.com/advisories/40647 - http://www.microsoft.com/technet/security/advisory/2286198.mspx - http://isc.sans.edu/diary.html?storyid=9190 - http://www.securityfocus.com/bid/41732 - http://www.f
isory/2286198.mspx - http://isc.sans.edu/diary.html?storyid=9190 - http://www.securityfocus.com/bid/41732 - http://www.f-secure.com/weblog/archives/new_rootkit_en.pdf - https://www.geoffchappell.com/notes/security/stuxnet/ctrlfldr.htm - http://securitytracker.com/id?1024216 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-046
CVE ID: CVE-2010-2569 State: PUBLISHED Published: 2010-12-16T19:00:00 Last Updated: 2024-08-07T02:39:37.344Z Vendors: n/a Products: n/a Problem Types: n/a Description: pubconv.dll (aka the Publisher Converter DLL) in Microsoft Publisher 2002 SP3, 2003 SP3, and 2007 SP2 does not properly handle an unspecified size field in certain older file formats, which allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted Publisher file, aka "Size Value Heap Corruption in pubconv.dll Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA10-348A.html - https://docs.microsoft.co
- CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA10-348A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-103 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11555 - http://www.securitytracker.com/id?1024885
CVE ID: CVE-2010-2570 State: PUBLISHED Published: 2010-12-16T19:00:00 Last Updated: 2024-08-07T02:39:37.320Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in pubconv.dll (aka the Publisher Converter DLL) in Microsoft Publisher 2002 SP3, 2003 SP3, 2007 SP2, and 2010 allows remote attackers to execute arbitrary code via a crafted Publisher file that uses an old file format, aka "Heap Overrun in pubconv.dll Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA10-348A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-103 - http://www.securitytracker.com/i
l - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-103 - http://www.securitytracker.com/id?1024885 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12187
CVE ID: CVE-2010-2571 State: PUBLISHED Published: 2010-12-16T19:00:00 Last Updated: 2024-08-07T02:39:37.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: Array index error in pubconv.dll (aka the Publisher Converter DLL) in Microsoft Publisher 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher 97 file, aka "Memory Corruption Due To Invalid Index Into Array in Pubconv.dll Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA10-348A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-103 - http://www.securitytracker.com/id?1024885 - htt
s.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-103 - http://www.securitytracker.com/id?1024885 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12298
CVE ID: CVE-2010-2572 State: PUBLISHED Published: 2010-11-10T01:00:00.000Z Last Updated: 2025-10-22T00:05:50.925Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Microsoft PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint 95 document, aka "PowerPoint Parsing Buffer Overflow Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12195 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-088 - http://www.us-cert.gov/cas/techalerts/TA10-313A.html
CVE ID: CVE-2010-2573 State: PUBLISHED Published: 2010-11-10T01:00:00 Last Updated: 2024-08-07T02:39:37.299Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer underflow in Microsoft PowerPoint 2002 SP3 and 2003 SP3, PowerPoint Viewer SP2, and Office 2004 for Mac allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka "PowerPoint Integer Underflow Causes Heap Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12122 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-088 - http://www.us-cert
l%3Adef%3A12122 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-088 - http://www.us-cert.gov/cas/techalerts/TA10-313A.html
CVE ID: CVE-2010-2574 State: PUBLISHED Published: 2010-08-09T20:00:00 Last Updated: 2024-08-07T02:39:37.761Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in manage_proj_cat_add.php in MantisBT 1.2.2 allows remote authenticated administrators to inject arbitrary web script or HTML via the name parameter in an Add Category action. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/secunia_research/2010-103/ - http://lists.fedoraproject.org/pipermail/package-announce/2010-September/048639.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-September/048659.html - http://secunia.com/advisori
tml - http://lists.fedoraproject.org/pipermail/package-announce/2010-September/048659.html - http://secunia.com/advisories/41653 - http://www.vupen.com/english/advisories/2010/2535 - http://secunia.com/advisories/40832 - http://www.openwall.com/lists/oss-security/2010/09/14/12 - http://www.securityfocus.com/archive/1/512886/100/0/threaded - http://lists.fedoraproject.org/pipermail/package-announce/2010-September/048548.html - http://www.openwall.com/lists/oss-security/2010/09/14/13 - http://www.mantisbt.org/bugs/changelog_page.php?version_id=111 - http://www.mantisbt.org/bugs/view.php?id=12230
CVE ID: CVE-2010-2575 State: PUBLISHED Published: 2010-08-30T20:00:00 Last Updated: 2024-08-07T02:39:37.989Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the RLE decompression functionality in the TranscribePalmImageToJPEG function in generators/plucker/inplug/image.cpp in Okular in KDE SC 4.3.0 through 4.5.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted image in a PDB file. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-979-1 - http://www.vupen.com/english/advisories/2010/2178 - http://www.vupen.com/english/advisories/2010/22
.com/usn/USN-979-1 - http://www.vupen.com/english/advisories/2010/2178 - http://www.vupen.com/english/advisories/2010/2202 - http://www.vupen.com/english/advisories/2010/2219 - http://secunia.com/advisories/41132 - http://www.kde.org/info/security/advisory-20100825-1.txt - http://www.securityfocus.com/archive/1/513341/100/0/threaded - http://lists.fedoraproject.org/pipermail/package-announce/2010-August/046542.html - http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.340142 - http://lists.fedoraproject.org/pipermail/package-announce/2010-August/046524.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/61371 - http://www.vupen.com/english/adviso
10-August/046524.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/61371 - http://www.vupen.com/english/advisories/2010/2206 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:162 - http://www.osvdb.org/67454 - http://www.vupen.com/english/advisories/2010/2230 - http://secunia.com/advisories/41086 - http://www.vupen.com/english/advisories/2010/2179 - http://secunia.com/advisories/40952 - http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html - http://secunia.com/secunia_research/2010-109/ - http://lists.fedoraproject.org/pipermail/package-announce/2010-August/046448.html - https://bugzilla.redhat.com/show_bug.cgi?id=627289
CVE ID: CVE-2010-2576 State: PUBLISHED Published: 2010-08-16T18:25:00 Last Updated: 2024-08-07T02:39:37.218Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera before 10.61 does not properly suppress clicks on download dialogs that became visible after a recent tab change, which allows remote attackers to conduct clickjacking attacks, and consequently execute arbitrary code, via vectors involving (1) closing a tab or (2) hiding a tab, a related issue to CVE-2005-2407. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12084 - http://www.opera.com/docs/changelogs/unix/1061/ - htt
repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12084 - http://www.opera.com/docs/changelogs/unix/1061/ - http://www.opera.com/support/kb/view/967/ - http://www.securityfocus.com/archive/1/513040/100/0/threaded - http://www.opera.com/docs/changelogs/mac/1061/ - http://www.opera.com/docs/changelogs/windows/1061/ - http://secunia.com/secunia_research/2010-110/
CVE ID: CVE-2010-2577 State: PUBLISHED Published: 2010-08-16T17:00:00Z Last Updated: 2024-09-16T16:17:59.729Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Pligg before 1.1.1 allow remote attackers to execute arbitrary SQL commands via the title parameter to (1) storyrss.php or (2) story.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/67068 - http://www.securityfocus.com/bid/42408 - http://www.osvdb.org/67067 - http://secunia.com/advisories/40931 - http://www.pligg.com/blog/991/pligg-cms-1-1-1-release/ - http://secunia.com/secunia_research/2010-111/
CVE ID: CVE-2010-2578 State: PUBLISHED Published: 2010-10-18T22:00:00Z Last Updated: 2024-09-17T03:47:59.229Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, and RealPlayer Enterprise 2.1.2 allows remote attackers to have an unspecified impact via a crafted QCP file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/44144 - http://service.real.com/realplayer/security/10152010_player/en/
CVE ID: CVE-2010-2579 State: PUBLISHED Published: 2010-12-14T15:00:00 Last Updated: 2024-08-07T02:39:36.880Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cook codec in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, Mac RealPlayer 11.0 through 11.1, and Linux RealPlayer 11.0.2.1744 does not properly initialize the number of channels, which allows attackers to obtain unspecified "memory access" via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1024861 - http://service.real.com/realplayer/security/12102010_player/en/
CVE ID: CVE-2010-2580 State: PUBLISHED Published: 2010-09-15T17:26:00 Last Updated: 2024-08-07T02:39:37.493Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SMTP service (MESMTPC.exe) in MailEnable 3.x and 4.25 does not properly perform a length check, which allows remote attackers to cause a denial of service (crash) via a long (1) email address in the MAIL FROM command, or (2) domain name in the RCPT TO command, which triggers an "unhandled invalid parameter error." Additional Analyst Notes: - CVE Program Container: References: - http://www.mailenable.com/Standard-ReleaseNotes.txt - http://www.securitytracker.com/id?1024427 - http://www.securityfocus.com/bid/43182 - http://w
tandard-ReleaseNotes.txt - http://www.securitytracker.com/id?1024427 - http://www.securityfocus.com/bid/43182 - http://www.securityfocus.com/archive/1/513648/100/0/threaded - http://www.mailenable.com/Professional-ReleaseNotes.txt - http://www.mailenable.com/hotfix/ - http://secunia.com/secunia_research/2010-112/ - http://secunia.com/advisories/41175 - http://www.mailenable.com/Enterprise-ReleaseNotes.txt
CVE ID: CVE-2010-2581 State: PUBLISHED Published: 2010-10-29T18:00:00 Last Updated: 2024-08-07T02:39:37.365Z Vendors: n/a Products: n/a Problem Types: n/a Description: dirapi.dll in Adobe Shockwave Player before 11.5.9.615 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a Director file containing a crafted pamm chunk with an invalid (1) size and (2) number of sub-chunks, a different vulnerability than CVE-2010-4084, CVE-2010-4085, CVE-2010-4086, and CVE-2010-4088. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1024664 - http://www.adobe.com/support/security/bulletins/apsb10-25.html - ht
ences: - http://www.securitytracker.com/id?1024664 - http://www.adobe.com/support/security/bulletins/apsb10-25.html - http://www.securityfocus.com/archive/1/514559/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12185 - http://secunia.com/secunia_research/2010-113/
CVE ID: CVE-2010-2582 State: PUBLISHED Published: 2010-10-29T18:00:00 Last Updated: 2024-08-07T02:39:37.060Z Vendors: n/a Products: n/a Problem Types: n/a Description: An unspecified function in TextXtra.x32 in Adobe Shockwave Player before 11.5.9.615 does not properly reallocate a buffer when processing a DEMX chunk in a Director file, which allows remote attackers to trigger a heap-based buffer overflow and execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12078 - http://www.securitytracker.com/id?1024664 - http://www.adobe.com/support/security/bulletins/apsb10-25.h
%3Adef%3A12078 - http://www.securitytracker.com/id?1024664 - http://www.adobe.com/support/security/bulletins/apsb10-25.html - http://www.securityfocus.com/archive/1/514560/100/0/threaded - http://secunia.com/secunia_research/2010-114/
CVE ID: CVE-2010-2583 State: PUBLISHED Published: 2010-11-03T01:00:00 Last Updated: 2024-08-07T02:39:37.284Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in SonicWALL SSL-VPN End-Point Interrogator/Installer ActiveX control (Aventail.EPInstaller) before 10.5.2 and 10.0.5 hotfix 3 allows remote attackers to execute arbitrary code via long (1) CabURL and (2) Location arguments to the Install3rdPartyComponent method. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1024666 - http://secunia.com/secunia_research/2010-117/ - http://www.securityfocus.com/archive/1/514561/100/0/threaded - http://secunia.com/a
nia.com/secunia_research/2010-117/ - http://www.securityfocus.com/archive/1/514561/100/0/threaded - http://secunia.com/advisories/41644 - https://exchange.xforce.ibmcloud.com/vulnerabilities/62865 - http://software.sonicwall.com/Aventail/KB/hotfix/10.0.5/clt-hotfix-10_0_5-003.txt - http://www.securityfocus.com/bid/44535
CVE ID: CVE-2010-2584 State: PUBLISHED Published: 2010-10-26T18:00:00Z Last Updated: 2024-09-16T20:37:02.746Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Upload method in the RealPage Module Upload ActiveX control in Realpage.dll 1.0.0.9 in RealPage Module ActiveX Controls does not properly restrict certain property values, which allows remote attackers to read arbitrary files via a filename in the SourceFile property in conjunction with an http URL in the DestURL property. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/41392 - http://www.securityfocus.com/bid/44302 - http://secunia.com/secunia_research/2010-118/ - http://www
m/advisories/41392 - http://www.securityfocus.com/bid/44302 - http://secunia.com/secunia_research/2010-118/ - http://www.osvdb.org/68813