Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1024705 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11439 - http://secunia.com/advisories/42144 - http://www.securityfocus.com/archive/1/514699/100/0/threaded - http://secunia.com/advisories/38521 - http://www.vupen.com/english/advisories/2010/2923 - http://www.securityfocus.com/bid/44656 - http://secunia.com/secunia_research/2010-4/ - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-087 - http://www.us-cert.gov/cas/techalerts/TA10-313A.html
CVE ID: CVE-2010-3335 State: PUBLISHED Published: 2010-11-10T01:00:00 Last Updated: 2024-08-07T03:03:19.059Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2010, Office 2004 and 2008 for Mac, Office for Mac 2011, and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code via a crafted Office document that triggers memory corruption, aka "Drawing Exception Handling Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1024705 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11739 - ht
acker.com/id?1024705 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11739 - http://secunia.com/advisories/42144 - http://www.securityfocus.com/bid/44659 - http://secunia.com/advisories/38521 - http://www.vupen.com/english/advisories/2010/2923 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-087 - http://www.us-cert.gov/cas/techalerts/TA10-313A.html
CVE ID: CVE-2010-3336 State: PUBLISHED Published: 2010-11-10T01:00:00 Last Updated: 2024-08-07T03:03:18.867Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Office XP SP3, Office 2004 and 2008 for Mac, Office for Mac 2011, and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code via a crafted Office document that triggers memory corruption, aka "MSO Large SPID Read AV Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1024705 - http://secunia.com/advisories/42144 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11947 - http://www.secu
s/42144 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11947 - http://www.securityfocus.com/bid/44660 - http://secunia.com/advisories/38521 - http://www.vupen.com/english/advisories/2010/2923 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-087 - http://www.us-cert.gov/cas/techalerts/TA10-313A.html
CVE ID: CVE-2010-3337 State: PUBLISHED Published: 2010-11-10T01:00:00 Last Updated: 2024-08-07T03:03:18.998Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in Microsoft Office 2007 SP2 and 2010 allows local users to gain privileges via a Trojan horse DLL in the current working directory, aka "Insecure Library Loading Vulnerability." NOTE: this might overlap CVE-2010-3141 and CVE-2010-3142. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11929 - http://www.securitytracker.com/id?1024705 - http://www.vupen.com/english/advisories/2010/2923 - htt
oval%3Adef%3A11929 - http://www.securitytracker.com/id?1024705 - http://www.vupen.com/english/advisories/2010/2923 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-087 - http://www.us-cert.gov/cas/techalerts/TA10-313A.html
CVE ID: CVE-2010-3338 State: PUBLISHED Published: 2010-12-16T19:00:00 Last Updated: 2024-08-07T03:03:18.911Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Windows Task Scheduler in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly determine the security context of scheduled tasks, which allows local users to gain privileges via a crafted application, aka "Task Scheduler Vulnerability." NOTE: this might overlap CVE-2010-3888. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA10-348A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ov
us-cert.gov/cas/techalerts/TA10-348A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12304 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-092 - http://www.securitytracker.com/id?1024874
CVE ID: CVE-2010-3339 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2010-3340 State: PUBLISHED Published: 2010-12-16T19:00:00 Last Updated: 2024-08-07T03:03:18.956Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 and 7 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "HTML Object Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA10-348A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-090 - http://www.securitytracker.com/
ml - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-090 - http://www.securitytracker.com/id?1024872 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12204
CVE ID: CVE-2010-3341 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2010-3342 State: PUBLISHED Published: 2010-12-16T19:00:00 Last Updated: 2024-08-07T03:03:19.105Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6, 7, and 8 does not prevent rendering of cached content as HTML, which allows remote attackers to access content from a different (1) domain or (2) zone via unspecified script code, aka "Cross-Domain Information Disclosure Vulnerability," a different vulnerability than CVE-2010-3348. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-090 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.m
security-updates/securitybulletins/2010/ms10-090 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11447 - http://www.securitytracker.com/id?1024872
CVE ID: CVE-2010-3343 State: PUBLISHED Published: 2010-12-16T19:00:00 Last Updated: 2024-08-07T03:03:18.920Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "HTML Object Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA10-348A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-090 - https://oval.cisecurity.org/repositor
ttps://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-090 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12372 - http://www.securitytracker.com/id?1024872
CVE ID: CVE-2010-3344 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2010-3345 State: PUBLISHED Published: 2010-12-16T19:00:00 Last Updated: 2024-08-07T03:03:18.928Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "HTML Element Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11849 - http://www.us-cert.gov/cas/techalerts/TA10-348A.html - https://docs.microsoft.co
n/oval%3Aorg.mitre.oval%3Adef%3A11849 - http://www.us-cert.gov/cas/techalerts/TA10-348A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-090 - http://www.securitytracker.com/id?1024872
CVE ID: CVE-2010-3346 State: PUBLISHED Published: 2010-12-16T19:00:00 Last Updated: 2024-08-07T03:03:19.058Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "HTML Element Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA10-348A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-090 - https://oval.cisecurity.or
8A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-090 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12322 - http://www.securitytracker.com/id?1024872
CVE ID: CVE-2010-3347 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2010-3348 State: PUBLISHED Published: 2010-12-16T19:00:00 Last Updated: 2024-08-07T03:03:18.967Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6, 7, and 8 does not prevent rendering of cached content as HTML, which allows remote attackers to access content from a different (1) domain or (2) zone via unspecified script code, aka "Cross-Domain Information Disclosure Vulnerability," a different vulnerability than CVE-2010-3342. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-090 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.m
security-updates/securitybulletins/2010/ms10-090 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12055 - http://www.securitytracker.com/id?1024872
CVE ID: CVE-2010-3349 State: PUBLISHED Published: 2010-10-20T17:00:00Z Last Updated: 2024-09-16T16:57:38.588Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ardour 2.8.11 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=638365 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=598283 - http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049333.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049377.html -
announce/2010-October/049333.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049377.html - http://www.securityfocus.com/bid/44106 - http://www.vupen.com/english/advisories/2010/2678 - http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049373.html - http://secunia.com/advisories/41872
CVE ID: CVE-2010-3350 State: PUBLISHED Published: 2010-10-20T17:00:00 Last Updated: 2024-08-07T03:03:19.086Z Vendors: n/a Products: n/a Problem Types: n/a Description: bareFTP 0.3.4 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/3141 - http://lists.fedoraproject.org/pipermail/package-announce/2010-December/051936.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/64433 - http://secunia.com/advisories/42521 - http://lists.fedoraproject.org/pipermail/pac
.ibmcloud.com/vulnerabilities/64433 - http://secunia.com/advisories/42521 - http://lists.fedoraproject.org/pipermail/package-announce/2010-December/051921.html - http://gitorious.org/bareftp/bareftp/blobs/15489abdb4c698cf832e95184bfe769a1ba70238/ChangeLog - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=598284 - http://www.securityfocus.com/bid/44334
CVE ID: CVE-2010-3351 State: PUBLISHED Published: 2010-10-20T17:00:00 Last Updated: 2024-08-07T03:03:18.957Z Vendors: n/a Products: n/a Problem Types: n/a Description: startBristol in Bristol 0.60.5 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=598285 - http://secunia.com/advisories/42272 - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050784.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050805.htm
-announce/2010-November/050784.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050805.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050787.html - http://www.vupen.com/english/advisories/2010/2972 - http://www.securityfocus.com/bid/44335
CVE ID: CVE-2010-3353 State: PUBLISHED Published: 2010-10-20T17:00:00Z Last Updated: 2024-09-16T20:07:12.881Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cowbell 0.2.7.1 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=598286
CVE ID: CVE-2010-3354 State: PUBLISHED Published: 2010-10-20T17:00:00Z Last Updated: 2024-09-16T20:37:13.477Z Vendors: n/a Products: n/a Problem Types: n/a Description: dropboxd in Dropbox 0.7.110 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=598287
CVE ID: CVE-2010-3355 State: PUBLISHED Published: 2010-10-20T17:00:00Z Last Updated: 2024-09-17T01:36:11.875Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ember 0.5.7 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=598288
CVE ID: CVE-2010-3357 State: PUBLISHED Published: 2010-10-20T17:00:00 Last Updated: 2024-08-07T03:03:18.956Z Vendors: n/a Products: n/a Problem Types: n/a Description: gnome-subtitles 1.0 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049184.html - http://git.gnome.org/browse/gnome-subtitles/commit/?id=44370dc2a87f7fa0d6c9730979514bd407a37c65 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=598289 - http://lists.fedoraproject.org/pip
0d6c9730979514bd407a37c65 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=598289 - http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049275.html - http://secunia.com/advisories/41807 - http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049288.html
CVE ID: CVE-2010-3358 State: PUBLISHED Published: 2010-10-20T17:00:00Z Last Updated: 2024-09-16T22:40:35.605Z Vendors: n/a Products: n/a Problem Types: n/a Description: HenPlus JDBC SQL-Shell 0.9.7 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=598290
CVE ID: CVE-2010-3359 State: PUBLISHED Published: 2019-11-12T18:49:09 Last Updated: 2024-08-07T03:03:18.995Z Vendors: n/a Products: n/a Problem Types: n/a Description: If LD_LIBRARY_PATH is undefined in gargoyle-free before 2009-08-25, the variable will point to the current directory. This can allow a local user to trick another user into running gargoyle in a directory with a cracked libgarglk.so and gain access to the user's account. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2010-3359
CVE ID: CVE-2010-3360 State: PUBLISHED Published: 2010-10-20T17:00:00Z Last Updated: 2024-09-16T23:36:48.685Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hipo 0.6.1 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=598291
CVE ID: CVE-2010-3361 State: PUBLISHED Published: 2010-10-20T17:00:00Z Last Updated: 2024-09-17T00:46:19.174Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) iked, (2) ikea, and (3) ikec scripts in Shrew Soft IKE 2.1.5 place a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=598292 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=598293
CVE ID: CVE-2010-3362 State: PUBLISHED Published: 2010-10-20T17:00:00Z Last Updated: 2024-09-16T16:43:13.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: lastfm 1.5.4 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=598294
CVE ID: CVE-2010-3363 State: PUBLISHED Published: 2010-10-20T17:00:00Z Last Updated: 2024-09-16T23:36:17.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: roarify in roaraudio 0.3 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=598295
CVE ID: CVE-2010-3364 State: PUBLISHED Published: 2010-10-20T17:00:00Z Last Updated: 2024-09-16T17:14:35.272Z Vendors: n/a Products: n/a Problem Types: n/a Description: The vips-7.22 script in VIPS 7.22.2 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=598296
CVE ID: CVE-2010-3365 State: PUBLISHED Published: 2010-10-20T17:00:00Z Last Updated: 2024-09-16T23:15:49.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mistelix 0.31 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=598297
CVE ID: CVE-2010-3366 State: PUBLISHED Published: 2010-10-20T17:00:00Z Last Updated: 2024-09-16T22:51:55.968Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mn_Fit 5.13 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=598298
CVE ID: CVE-2010-3369 State: PUBLISHED Published: 2010-10-20T17:00:00 Last Updated: 2024-08-07T03:11:42.925Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) mdb and (2) mdb-symbolreader scripts in mono-debugger 2.4.3, and other versions before 2.8.1, place a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/42348 - http://www.mono-project.com/Vulnerabilities#mono-debugger_Insecure_Use_of_LD_LIBRARY_PATH - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=598299 - https:
ilities#mono-debugger_Insecure_Use_of_LD_LIBRARY_PATH - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=598299 - https://bugzilla.novell.com/show_bug.cgi?id=647353
CVE ID: CVE-2010-3372 State: PUBLISHED Published: 2010-12-08T17:00:00 Last Updated: 2024-08-07T03:11:42.923Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in NorduGrid Advanced Resource Connector (ARC) before 0.8.3 allows local users to gain privileges via vectors related to the LD_LIBRARY_PATH environment variable. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.nordugrid.org/arc/releases/0_8_3/release_notes_0_8_3.html - http://secunia.com/advisories/42496 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64434
CVE ID: CVE-2010-3373 State: PUBLISHED Published: 2019-10-29T12:10:42 Last Updated: 2024-08-07T03:11:42.928Z Vendors: n/a Products: n/a Problem Types: n/a Description: paxtest handles temporary files insecurely Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2010-3373 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=598413 - https://people.canonical.com/~ubuntu-security/cve/2010/CVE-2010-3373.html
CVE ID: CVE-2010-3374 State: PUBLISHED Published: 2010-10-04T20:00:00Z Last Updated: 2024-09-16T19:10:38.822Z Vendors: n/a Products: n/a Problem Types: n/a Description: Qt Creator before 2.0.1 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/2559 - http://www.qt.gitorious.org/qt-creator/qt-creator/commit/3c00715c8e90c57953ec4a8716110f6954e524e4 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:193 - http://www.securityfocus.com/bid/43672 - http://www.
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:193 - http://www.securityfocus.com/bid/43672 - http://www.vupen.com/english/advisories/2010/2560 - http://qt.nokia.com/about/news/security-announcement-qt-creator-2.0.0-for-desktop-platforms
CVE ID: CVE-2010-3375 State: PUBLISHED Published: 2019-10-29T12:20:38 Last Updated: 2024-08-07T03:11:42.926Z Vendors: n/a Products: n/a Problem Types: n/a Description: qtparted has insecure library loading which may allow arbitrary code execution Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2010-3375 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=598301 - https://people.canonical.com/~ubuntu-security/cve/2010/CVE-2010-3375.html