Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-1229 State: PUBLISHED Published: 2010-04-01T22:00:00 Last Updated: 2024-08-07T01:14:06.913Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sandbox infrastructure in Google Chrome before 4.1.249.1036 does not properly use pointers, which has unspecified impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14220 - http://googlechromereleases.blogspot.com/2010/03/stable-channel-update.html - http://code.google.com/p/chromium/issues/detail?id=28804 - http://code.google.com/p/chromium/issues/detail?id=31880
CVE ID: CVE-2010-1230 State: PUBLISHED Published: 2010-04-01T22:00:00 Last Updated: 2024-08-07T01:14:06.674Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 4.1.249.1036 does not have the expected behavior for attempts to delete Web SQL Databases and clear the Strict Transport Security (STS) state, which has unspecified impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/chromium/issues/detail?id=30801 - http://googlechromereleases.blogspot.com/2010/03/stable-channel-update.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14292 - http://code.google.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14292 - http://code.google.com/p/chromium/issues/detail?id=33445
CVE ID: CVE-2010-1231 State: PUBLISHED Published: 2010-04-01T22:00:00 Last Updated: 2024-08-07T01:14:06.914Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 4.1.249.1036 processes HTTP headers before invoking the SafeBrowsing feature, which allows remote attackers to have an unspecified impact via crafted headers. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/chromium/issues/detail?id=33572 - http://googlechromereleases.blogspot.com/2010/03/stable-channel-update.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14332
CVE ID: CVE-2010-1232 State: PUBLISHED Published: 2010-04-01T22:00:00 Last Updated: 2024-08-07T01:14:06.702Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 4.1.249.1036 allows remote attackers to cause a denial of service (memory error) or possibly have unspecified other impact via a malformed SVG document. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/chromium/issues/detail?id=34978 - http://googlechromereleases.blogspot.com/2010/03/stable-channel-update.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14000
CVE ID: CVE-2010-1233 State: PUBLISHED Published: 2010-04-01T22:00:00 Last Updated: 2024-08-07T01:14:06.894Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in Google Chrome before 4.1.249.1036 allow remote attackers to have an unspecified impact via vectors involving WebKit JavaScript objects. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14023 - http://secunia.com/advisories/43068 - http://www.vupen.com/english/advisories/2011/0212 - http://googlechromereleases.blogspot.com/2010/03/stable-channel-update.html - http://lists.opensuse.org/opensuse-sec
2 - http://googlechromereleases.blogspot.com/2010/03/stable-channel-update.html - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - http://code.google.com/p/chromium/issues/detail?id=35724
CVE ID: CVE-2010-1234 State: PUBLISHED Published: 2010-04-01T22:00:00 Last Updated: 2024-08-07T01:14:06.679Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Google Chrome before 4.1.249.1036 allows remote attackers to truncate the URL shown in the HTTP Basic Authentication dialog via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14275 - http://googlechromereleases.blogspot.com/2010/03/stable-channel-update.html - http://code.google.com/p/chromium/issues/detail?id=36772
CVE ID: CVE-2010-1235 State: PUBLISHED Published: 2010-04-01T22:00:00 Last Updated: 2024-08-07T01:14:06.670Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Google Chrome before 4.1.249.1036 allows remote attackers to trigger the omission of a download warning dialog via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/chromium/issues/detail?id=37007 - http://googlechromereleases.blogspot.com/2010/03/stable-channel-update.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14297
CVE ID: CVE-2010-1236 State: PUBLISHED Published: 2010-04-01T22:00:00 Last Updated: 2024-08-07T01:14:06.681Z Vendors: n/a Products: n/a Problem Types: n/a Description: The protocolIs function in platform/KURLGoogle.cpp in WebCore in WebKit before r55822, as used in Google Chrome before 4.1.249.1036 and Flock Browser 3.x before 3.0.0.4112, does not properly handle whitespace at the beginning of a URL, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted javascript: URL, as demonstrated by a \x00javascript:alert sequence. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43068 - http://src.chromium.org/viewvc/chr
t Notes: - CVE Program Container: References: - http://secunia.com/advisories/43068 - http://src.chromium.org/viewvc/chrome?view=rev&revision=41244 - http://www.vupen.com/english/advisories/2011/0212 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14067 - http://googlechromereleases.blogspot.com/2010/03/stable-channel-update.html - https://bugs.webkit.org/show_bug.cgi?id=35948 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - http://flock.com/security/ - http://code.google.com/p/chromium/issues/detail?id=37383 - http://codereview.chromium.org/858001
CVE ID: CVE-2010-1237 State: PUBLISHED Published: 2010-04-01T22:00:00 Last Updated: 2024-08-07T01:14:06.672Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome 4.1 BETA before 4.1.249.1036 allows remote attackers to cause a denial of service (memory error) or possibly have unspecified other impact via an empty SVG element. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14374 - http://googlechromereleases.blogspot.com/2010/03/stable-channel-update.html - http://code.google.com/p/chromium/issues/detail?id=37061
CVE ID: CVE-2010-1238 State: PUBLISHED Published: 2010-04-05T15:15:00 Last Updated: 2024-08-07T01:14:06.680Z Vendors: n/a Products: n/a Problem Types: n/a Description: MoinMoin 1.7.1 allows remote attackers to bypass the textcha protection mechanism by modifying the textcha-question and textcha-answer fields to have empty values. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2010/dsa-2024 - http://secunia.com/advisories/39284 - http://www.vupen.com/english/advisories/2010/0831 - http://www.ubuntu.com/usn/USN-925-1
CVE ID: CVE-2010-1239 State: PUBLISHED Published: 2010-04-05T15:15:00Z Last Updated: 2024-09-16T17:22:42.306Z Vendors: n/a Products: n/a Problem Types: n/a Description: Foxit Reader before 3.2.1.0401 allows remote attackers to (1) execute arbitrary local programs via a certain "/Type /Action /S /Launch" sequence, and (2) execute arbitrary programs embedded in a PDF document via an unspecified "/Launch /Action" sequence, a related issue to CVE-2009-0836. Additional Analyst Notes: - CVE Program Container: References: - http://www.f-secure.com/weblog/archives/00001923.html - http://www.kb.cert.org/vuls/id/570177 - http://blog.didierstevens.com/2010/03/29/escape-from-pdf/ - http://blog.didierste
ttp://www.kb.cert.org/vuls/id/570177 - http://blog.didierstevens.com/2010/03/29/escape-from-pdf/ - http://blog.didierstevens.com/2010/03/31/escape-from-foxit-reader/ - http://www.foxitsoftware.com/pdf/reader/security.htm#0401 - http://www.foxitsoftware.com/announcements/2010420408.html
CVE ID: CVE-2010-1240 State: PUBLISHED Published: 2010-04-05T15:15:00 Last Updated: 2024-08-07T01:14:06.682Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, do not restrict the contents of one text field in the Launch File warning dialog, which makes it easier for remote attackers to trick users into executing an arbitrary local program that was specified in a PDF document, as demonstrated by a text field that claims that the Open button will enable the user to read an encrypted message. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/20
ted message. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/1636 - http://www.adobe.com/support/security/bulletins/apsb10-15.html - http://blog.didierstevens.com/2010/03/29/escape-from-pdf/ - http://www.us-cert.gov/cas/techalerts/TA10-231A.html - http://www.securitytracker.com/id?1024159 - http://lists.immunitysec.com/pipermail/dailydave/2010-April/006075.html - http://blog.didierstevens.com/2010/06/29/quickpost-no-escape-from-pdf/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7466
CVE ID: CVE-2010-1241 State: PUBLISHED Published: 2010-04-05T15:15:00 Last Updated: 2024-08-07T01:14:06.842Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the custom heap management system in Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted PDF document, aka FG-VD-10-005. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/57589 - http://www.securityfocus.com/bid/39227 - http://lists.immunitysec.com/pipermail/dailydave/2010-April/0060
lities/57589 - http://www.securityfocus.com/bid/39227 - http://lists.immunitysec.com/pipermail/dailydave/2010-April/006077.html - http://www.vupen.com/english/advisories/2010/0873 - http://www.us-cert.gov/cas/techalerts/TA10-103C.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6940 - http://www.securityfocus.com/bid/39329 - http://www.adobe.com/support/security/bulletins/apsb10-09.html - http://blog.fortinet.com/the-upcoming-blackhat-europe-2010-presentation/ - http://www.youtube.com/watch?v=9EVHtY1-0q8 - http://www.blackhat.com/html/bh-eu-10/bh-eu-10-briefings.html#Li
CVE ID: CVE-2010-1242 State: PUBLISHED Published: 2010-04-05T15:15:00 Last Updated: 2024-08-07T01:14:06.956Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the IBM Web Interface for Content Management (aka WEBi) before 1.0.4 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/0834 - http://secunia.com/advisories/39186 - http://www.vupen.com/english/advisories/2010/0733 - http://www-1.ibm.com/support/docview.wss?uid=swg1IO11274 - http://www-01.ibm.com/support/docview.wss?uid=swg240256
733 - http://www-1.ibm.com/support/docview.wss?uid=swg1IO11274 - http://www-01.ibm.com/support/docview.wss?uid=swg24025662
CVE ID: CVE-2010-1243 State: PUBLISHED Published: 2010-04-05T15:15:00 Last Updated: 2024-08-07T01:14:06.646Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IBM Web Interface for Content Management (aka WEBi) before 1.0.4 creates persistent cookies on client workstations, which has unspecified impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/0834 - http://secunia.com/advisories/39186 - http://www.vupen.com/english/advisories/2010/0733 - http://www-01.ibm.com/support/docview.wss?uid=swg24025662 - http://www-1.ibm.com/support/docview.wss?uid=swg1IO11279
CVE ID: CVE-2010-1244 State: PUBLISHED Published: 2010-04-05T16:00:00 Last Updated: 2024-08-07T01:14:06.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in createDestination.action in Apache ActiveMQ before 5.3.1 allows remote attackers to hijack the authentication of unspecified victims for requests that create queues via the JMSDestination parameter in a queue action. Additional Analyst Notes: - CVE Program Container: References: - https://issues.apache.org/activemq/browse/AMQ-2613 - http://activemq.apache.org/activemq-531-release.html - http://secunia.com/advisories/39223 - https://exchange.xforce.ibmcloud.com/vulnerabilities/
/activemq-531-release.html - http://secunia.com/advisories/39223 - https://exchange.xforce.ibmcloud.com/vulnerabilities/57398 - https://issues.apache.org/activemq/browse/AMQ-2625
CVE ID: CVE-2010-1245 State: PUBLISHED Published: 2010-06-08T20:00:00 Last Updated: 2024-08-07T01:14:06.681Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Microsoft Office Excel 2002 SP3, Office 2004 for Mac, Office 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via an Excel file with a malformed SxView (0xB0) record, aka "Excel Record Memory Corruption Vulnerability," a different vulnerability than CVE-2010-0824 and CVE-2010-0821. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-038 - http://www.se
ntainer: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-038 - http://www.securityfocus.com/archive/1/511753/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6877 - http://www.us-cert.gov/cas/techalerts/TA10-159B.html
CVE ID: CVE-2010-1246 State: PUBLISHED Published: 2010-06-08T20:00:00 Last Updated: 2024-08-07T01:14:06.911Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Microsoft Office Excel 2002 SP3 allows remote attackers to execute arbitrary code via an Excel file with a malformed RTD (0x813) record, aka "Excel RTD Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6839 - http://www.securityfocus.com/archive/1/511755/100/0/threaded - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-038 - http://ww
/1/511755/100/0/threaded - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-038 - http://www.us-cert.gov/cas/techalerts/TA10-159B.html
CVE ID: CVE-2010-1247 State: PUBLISHED Published: 2010-06-08T20:00:00 Last Updated: 2024-08-07T01:14:06.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Microsoft Office Excel 2002 SP3 allows remote attackers to execute arbitrary code via an Excel file with a malformed RTD (0x813) record that triggers heap corruption, aka "Excel Memory Corruption Vulnerability," a different vulnerability than CVE-2010-0823 and CVE-2010-1249. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/65237 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-038 - https://oval.cisecurity.org/repository/search/definit
osoft.com/en-us/security-updates/securitybulletins/2010/ms10-038 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6630 - http://www.us-cert.gov/cas/techalerts/TA10-159B.html - http://www.securityfocus.com/archive/1/511754/100/0/threaded
CVE ID: CVE-2010-1248 State: PUBLISHED Published: 2010-06-08T20:00:00 Last Updated: 2024-08-07T01:14:06.660Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Microsoft Office Excel 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via an Excel file with a malformed HFPicture (0x866) record, aka "Excel HFPicture Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/511765/100/0/threaded - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-038 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%
pdates/securitybulletins/2010/ms10-038 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7223 - http://www.securityfocus.com/bid/40526 - http://www.us-cert.gov/cas/techalerts/TA10-159B.html - http://osvdb.org/65235
CVE ID: CVE-2010-1249 State: PUBLISHED Published: 2010-06-08T20:00:00 Last Updated: 2024-08-07T01:14:06.669Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Microsoft Office Excel 2002 SP3, Office 2004 for Mac, Office 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via an Excel file with a malformed ExternName (0x23) record, aka "Excel Memory Corruption Vulnerability," a different vulnerability than CVE-2010-0823 and CVE-2010-1247. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/40527 - http://www.securityfocus.com/archive/1/511767/100/0/threaded - http:/
rences: - http://www.securityfocus.com/bid/40527 - http://www.securityfocus.com/archive/1/511767/100/0/threaded - http://osvdb.org/65232 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-038 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6634 - http://www.us-cert.gov/cas/techalerts/TA10-159B.html
CVE ID: CVE-2010-1250 State: PUBLISHED Published: 2010-06-08T20:00:00 Last Updated: 2024-08-07T01:14:06.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Microsoft Office Excel 2002 SP3, Office 2004 for Mac, Office 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via an Excel file with malformed (1) EDG (0x88) and (2) Publisher (0x89) records, aka "Excel EDG Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/511756/100/0/threaded - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms
yfocus.com/archive/1/511756/100/0/threaded - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-038 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7593 - http://www.us-cert.gov/cas/techalerts/TA10-159B.html - http://www.securityfocus.com/bid/40528
CVE ID: CVE-2010-1251 State: PUBLISHED Published: 2010-06-08T20:00:00 Last Updated: 2024-08-07T01:14:06.793Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Microsoft Office Excel 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via a crafted Excel file, aka "Excel Record Stack Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/40529 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6761 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-038 - http://www.us-cert.gov/cas/techalert
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-038 - http://www.us-cert.gov/cas/techalerts/TA10-159B.html
CVE ID: CVE-2010-1252 State: PUBLISHED Published: 2010-06-08T20:00:00 Last Updated: 2024-08-07T01:14:06.721Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Microsoft Office Excel 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via a crafted Excel file, aka "Excel String Variable Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/40530 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7369 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-038 - http://www.us-cert.gov/cas/techalerts/TA10-1
docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-038 - http://www.us-cert.gov/cas/techalerts/TA10-159B.html
CVE ID: CVE-2010-1253 State: PUBLISHED Published: 2010-06-08T20:00:00 Last Updated: 2024-08-07T01:14:06.671Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Office Excel 2002 SP3, 2007 SP1, and SP2; Office 2004 for mac; Office 2008 for Mac; Open XML File Format Converter for Mac; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2; allows remote attackers to execute arbitrary code via an Excel file with crafted DBQueryExt records that allow a function call to a "user-controlled pointer," aka "Excel ADO Object Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories
erability." Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-10-103 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6842 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-038 - http://osvdb.org/65228 - http://www.us-cert.gov/cas/techalerts/TA10-159B.html - http://www.securityfocus.com/archive/1/511728/100/0/threaded
CVE ID: CVE-2010-1254 State: PUBLISHED Published: 2010-06-08T20:00:00 Last Updated: 2024-08-07T01:14:06.894Z Vendors: n/a Products: n/a Problem Types: n/a Description: The installation for Microsoft Open XML File Format Converter for Mac sets insecure ACLs for the /Applications folder, which allows local users to execute arbitrary code by replacing the executable with a Trojan Horse, aka "Mac Office Open XML Permissions Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-038 - http://www.us-cert.gov/cas/techalerts/TA10-159B.html - http://www.securityfocus.com/bid/40533
CVE ID: CVE-2010-1255 State: PUBLISHED Published: 2010-06-08T22:00:00 Last Updated: 2024-08-07T01:14:06.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Windows kernel-mode drivers in win32k.sys in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 Gold and SP2, Windows 7, and Server 2008 R2 allows local users to execute arbitrary code via vectors related to "glyph outline information" and TrueType fonts, aka "Win32k TrueType Font Parsing Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7283 - http://www.opera.com/s
: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7283 - http://www.opera.com/support/kb/view/954/ - http://www.us-cert.gov/cas/techalerts/TA10-159B.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-032