Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
rogram Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/74322 - http://www.kb.cert.org/vuls/id/913483 - http://www.kb.cert.org/vuls/id/MAPG-8NNKN8 - http://www.kb.cert.org/vuls/id/MAPG-8NVRPY - http://osvdb.org/80372 - http://www.kb.cert.org/vuls/id/MORO-8QNJLE
CVE ID: CVE-2012-1845 State: PUBLISHED Published: 2012-03-22T16:00:00 Last Updated: 2024-08-06T19:08:38.639Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Google Chrome 17.0.963.66 and earlier allows remote attackers to bypass the DEP and ASLR protection mechanisms, and execute arbitrary code, via unspecified vectors, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2012. NOTE: the primary affected product may be clarified later; it was not identified by the researcher, who reportedly stated "it really doesn't matter if it's third-party code." Additional Analyst Notes: - CVE Program Container: References: - http://pwn2own.zeroda
matter if it's third-party code." Additional Analyst Notes: - CVE Program Container: References: - http://pwn2own.zerodayinitiative.com/status.html - http://www.forbes.com/sites/andygreenberg/2012/03/21/meet-the-hackers-who-sell-spies-the-tools-to-crack-your-pc-and-get-paid-six-figure-fees/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/74323 - http://www.zdnet.com/blog/security/pwn2own-2012-google-chrome-browser-sandbox-first-to-fall/10588 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14843 - http://twitter.com/vupen/statuses/177576000761237505
CVE ID: CVE-2012-1846 State: PUBLISHED Published: 2012-03-22T16:00:00 Last Updated: 2024-08-06T19:08:38.516Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome 17.0.963.66 and earlier allows remote attackers to bypass the sandbox protection mechanism by leveraging access to a sandboxed process, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2012. NOTE: the primary affected product may be clarified later; it was not identified by the researcher, who reportedly stated "it really doesn't matter if it's third-party code." Additional Analyst Notes: - CVE Program Container: References: - http://pwn2own.zerodayinitiative.com/status.html - http://www.forbes
alyst Notes: - CVE Program Container: References: - http://pwn2own.zerodayinitiative.com/status.html - http://www.forbes.com/sites/andygreenberg/2012/03/21/meet-the-hackers-who-sell-spies-the-tools-to-crack-your-pc-and-get-paid-six-figure-fees/ - http://www.zdnet.com/blog/security/pwn2own-2012-google-chrome-browser-sandbox-first-to-fall/10588 - http://twitter.com/vupen/statuses/177576000761237505 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14940 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74324
CVE ID: CVE-2012-1847 State: PUBLISHED Published: 2012-05-09T00:00:00 Last Updated: 2024-08-06T19:08:38.491Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Office 2008 and 2011 for Mac; Excel Viewer; and Office Compatibility Pack SP2 and SP3 do not properly handle memory during the opening of files, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel Series Record Parsing Type Mismatch Could Result in Remote Code Execution Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mit
st Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15575 - http://www.securitytracker.com/id?1027041 - http://www.securityfocus.com/bid/53379 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-030 - http://secunia.com/advisories/49112 - http://www.us-cert.gov/cas/techalerts/TA12-129A.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/75119
CVE ID: CVE-2012-1848 State: PUBLISHED Published: 2012-05-09T00:00:00 Last Updated: 2024-08-06T19:08:38.511Z Vendors: n/a Products: n/a Problem Types: n/a Description: win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, and Windows 8 Consumer Preview does not properly handle user-mode input passed to kernel mode, which allows local users to gain privileges via a crafted application, aka "Scrollbar Calculation Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1027039 - http://www.securityfocus.com/b
Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1027039 - http://www.securityfocus.com/bid/53327 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15555 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-034 - http://www.us-cert.gov/cas/techalerts/TA12-129A.html
CVE ID: CVE-2012-1849 State: PUBLISHED Published: 2012-06-12T22:00:00 Last Updated: 2024-08-06T19:08:38.715Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in Microsoft Lync 2010, 2010 Attendee, and 2010 Attendant allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .ocsmeet file, aka "Lync Insecure Library Loading Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA12-164A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14874 - https://docs.mi
4A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14874 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-039
CVE ID: CVE-2012-1850 State: PUBLISHED Published: 2012-08-15T01:00:00 Last Updated: 2024-08-06T19:08:38.513Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Remote Administration Protocol (RAP) implementation in the LanmanWorkstation service in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly handle RAP responses, which allows remote attackers to cause a denial of service (service hang) via crafted RAP packets, aka "Remote Administration Protocol Denial of Service Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecur
Denial of Service Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15669 - http://www.us-cert.gov/cas/techalerts/TA12-227A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-054
CVE ID: CVE-2012-1851 State: PUBLISHED Published: 2012-08-15T01:00:00 Last Updated: 2024-08-06T19:08:38.513Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the Print Spooler service in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted response, aka "Print Spooler Service Format String Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA12-227A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.o
.us-cert.gov/cas/techalerts/TA12-227A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15531 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-054
CVE ID: CVE-2012-1852 State: PUBLISHED Published: 2012-08-15T01:00:00 Last Updated: 2024-08-06T19:08:38.516Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the Remote Administration Protocol (RAP) implementation in the LanmanWorkstation service in Microsoft Windows XP SP2 and SP3 allows remote attackers to execute arbitrary code via crafted RAP response packets, aka "Remote Administration Protocol Heap Overflow Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15079 - http://www.us-cert.gov/cas/techalerts/TA12-227A.html - https://docs
rch/definition/oval%3Aorg.mitre.oval%3Adef%3A15079 - http://www.us-cert.gov/cas/techalerts/TA12-227A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-054
CVE ID: CVE-2012-1853 State: PUBLISHED Published: 2012-08-15T01:00:00 Last Updated: 2024-08-06T19:08:38.697Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the Remote Administration Protocol (RAP) implementation in the LanmanWorkstation service in Microsoft Windows XP SP3 allows remote attackers to execute arbitrary code via crafted RAP response packets, aka "Remote Administration Protocol Stack Overflow Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15408 - http://www.us-cert.gov/cas/techalerts/TA12-227A.html - https://docs.micro
finition/oval%3Aorg.mitre.oval%3Adef%3A15408 - http://www.us-cert.gov/cas/techalerts/TA12-227A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-054
CVE ID: CVE-2012-1854 State: PUBLISHED Published: 2012-07-10T21:00:00 Last Updated: 2024-08-06T19:08:38.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in VBE6.dll in Microsoft Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Microsoft Visual Basic for Applications (VBA); and Summit Microsoft Visual Basic for Applications SDK allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .docx file, aka "Visual Basic for Applications Insecure Library Loading Vulnerability," as exploited in the wild in July 2012. Additional Analyst Notes: - CVE Program Co
secure Library Loading Vulnerability," as exploited in the wild in July 2012. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA12-192A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14950 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-046
CVE ID: CVE-2012-1855 State: PUBLISHED Published: 2012-06-12T22:00:00 Last Updated: 2024-08-06T19:08:38.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly handle function pointers, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP) or (2) a crafted .NET Framework application, aka ".NET Framework Memory Access Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA12-164A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14717 - https://doc
2-164A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14717 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-038
CVE ID: CVE-2012-1856 State: PUBLISHED Published: 2012-08-15T01:00:00.000Z Last Updated: 2025-10-22T00:05:46.865Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TabStrip ActiveX control in the Common Controls in MSCOMCTL.OCX in Microsoft Office 2003 SP3, Office 2003 Web Components SP3, Office 2007 SP2 and SP3, Office 2010 SP1, SQL Server 2000 SP4, SQL Server 2005 SP4, SQL Server 2008 SP2, SP3, R2, R2 SP1, and R2 SP2, Commerce Server 2002 SP4, Commerce Server 2007 SP2, Commerce Server 2009 Gold and R2, Host Integration Server 2004 SP1, Visual FoxPro 8.0 SP1, Visual FoxPro 9.0 SP2, and Visual Basic 6.0 Runtime allows remote attackers to execute arbitrary code via a crafted (1)
Visual FoxPro 9.0 SP2, and Visual Basic 6.0 Runtime allows remote attackers to execute arbitrary code via a crafted (1) document or (2) web page that triggers system-state corruption, aka "MSCOMCTL.OCX RCE Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-060 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15447 - http://www.us-cert.gov/cas/techalerts/TA12-227A.html - http://www.securityfocus.com/bid/54948
CVE ID: CVE-2012-1857 State: PUBLISHED Published: 2012-06-12T22:00:00 Last Updated: 2024-08-06T19:08:38.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Enterprise Portal component in Microsoft Dynamics AX 2012 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "Dynamics AX Enterprise Portal XSS Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA12-164A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-040
CVE ID: CVE-2012-1858 State: PUBLISHED Published: 2012-06-12T22:00:00 Last Updated: 2024-08-06T19:08:38.504Z Vendors: n/a Products: n/a Problem Types: n/a Description: The toStaticHTML API (aka the SafeHTML component) in Microsoft Internet Explorer 8 and 9, Communicator 2007 R2, and Lync 2010 and 2010 Attendee does not properly handle event attributes and script, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via a crafted HTML document, aka "HTML Sanitization Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA12-192A.html - https://docs.microsoft.com/en-us/security-updates/securit
nces: - http://www.us-cert.gov/cas/techalerts/TA12-192A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-050 - http://www.us-cert.gov/cas/techalerts/TA12-164A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-037 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15530 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-039
CVE ID: CVE-2012-1859 State: PUBLISHED Published: 2012-07-10T21:00:00 Last Updated: 2024-08-06T19:08:38.735Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in scriptresx.ashx in Microsoft SharePoint Server 2010 Gold and SP1, SharePoint Foundation 2010 Gold and SP1, and Office Web Apps 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via crafted JavaScript elements in a URL, aka "XSS scriptresx.ashx Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA12-192A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12
s-cert.gov/cas/techalerts/TA12-192A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-050 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15589
CVE ID: CVE-2012-1860 State: PUBLISHED Published: 2012-07-10T21:00:00 Last Updated: 2024-08-06T19:08:38.512Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Office SharePoint Server 2007 SP2 and SP3, SharePoint Server 2010 Gold and SP1, and Office Web Apps 2010 Gold and SP1 do not properly check permissions for search scopes, which allows remote authenticated users to obtain sensitive information or cause a denial of service (data modification) by changing a parameter in a search-scope URL, aka "SharePoint Search Scope Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/
Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-050 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15265
CVE ID: CVE-2012-1861 State: PUBLISHED Published: 2012-07-10T21:00:00 Last Updated: 2024-08-06T19:08:38.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2010 Gold and SP1, SharePoint Foundation 2010 Gold and SP1, and Office Web Apps 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via crafted JavaScript elements in a URL, aka "SharePoint Script in Username Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA12-192A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-050 - ht
v/cas/techalerts/TA12-192A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-050 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15544
CVE ID: CVE-2012-1862 State: PUBLISHED Published: 2012-07-10T21:00:00 Last Updated: 2024-08-06T19:08:38.712Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in Microsoft Office SharePoint Server 2007 SP2 and SP3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL, aka "SharePoint URL Redirection Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-050 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15657
CVE ID: CVE-2012-1863 State: PUBLISHED Published: 2012-07-10T21:00:00 Last Updated: 2024-08-06T19:08:38.728Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint Server 2007 SP2 and SP3 Windows SharePoint Services 3.0 SP2, and SharePoint Foundation 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via crafted JavaScript elements in a URL, aka "SharePoint Reflected List Parameter Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA12-192A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/
ww.us-cert.gov/cas/techalerts/TA12-192A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-050 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15689
CVE ID: CVE-2012-1864 State: PUBLISHED Published: 2012-06-12T22:00:00 Last Updated: 2024-08-06T19:08:38.502Z Vendors: n/a Products: n/a Problem Types: n/a Description: win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly handle user-mode input passed to kernel mode for driver objects, which allows local users to gain privileges via a crafted application, aka "String Atom Class Name Handling Vulnerability," a different vulnerability than CVE-2012-1865. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/
ability than CVE-2012-1865. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA12-164A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15496 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-041
CVE ID: CVE-2012-1865 State: PUBLISHED Published: 2012-06-12T22:00:00 Last Updated: 2024-08-06T19:08:38.623Z Vendors: n/a Products: n/a Problem Types: n/a Description: win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly handle user-mode input passed to kernel mode for driver objects, which allows local users to gain privileges via a crafted application, aka "String Atom Class Name Handling Vulnerability," a different vulnerability than CVE-2012-1864. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/
ability than CVE-2012-1864. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA12-164A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-041 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15649
CVE ID: CVE-2012-1866 State: PUBLISHED Published: 2012-06-12T22:00:00 Last Updated: 2024-08-06T19:08:38.688Z Vendors: n/a Products: n/a Problem Types: n/a Description: win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly handle user-mode input passed to kernel mode for driver objects, which allows local users to gain privileges via a crafted application, aka "Clipboard Format Atom Name Handling Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA12-164A.html - https://oval.c
lyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA12-164A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15096 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-041
CVE ID: CVE-2012-1867 State: PUBLISHED Published: 2012-06-12T22:00:00 Last Updated: 2024-10-17T19:21:51.911Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted TrueType font file that triggers incorrect memory allocation, aka "Font Resource Refcount Integer Overflow Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.us-cert.gov/cas/techalerts/TA12-164A.html - https
E Program Container: - CISA ADP Vulnrichment: References: - http://www.us-cert.gov/cas/techalerts/TA12-164A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15510 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-041
CVE ID: CVE-2012-1868 State: PUBLISHED Published: 2012-06-12T22:00:00 Last Updated: 2024-08-06T19:08:38.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the thread-creation implementation in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP3 allows local users to gain privileges via a crafted application, aka "Win32k.sys Race Condition Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA12-164A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-041 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15647
CVE ID: CVE-2012-1869 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.