Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-2478 State: PUBLISHED Published: 2009-07-16T15:00:00 Last Updated: 2024-08-07T05:52:14.980Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox 3.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via unspecified vectors, related to a "flash bug." Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=503286 - https://bugzilla.mozilla.org/show_bug.cgi?id=502648 - https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00909.html
CVE ID: CVE-2009-2479 State: PUBLISHED Published: 2009-07-16T15:00:00 Last Updated: 2024-08-07T05:52:14.838Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox 3.0.x, 3.5, and 3.5.1 on Windows allows remote attackers to cause a denial of service (uncaught exception and application crash) via a long Unicode string argument to the write method. NOTE: this was originally reported as a stack-based buffer overflow. NOTE: on Linux and Mac OS X, a crash resulting from this long string reportedly occurs in an operating-system library, not in Firefox. Additional Analyst Notes: - CVE Program Container: References: - http://websecurity.com.ua/3338/ - https://bugzilla.mozilla.org
nal Analyst Notes: - CVE Program Container: References: - http://websecurity.com.ua/3338/ - https://bugzilla.mozilla.org/show_bug.cgi?id=504342 - https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00909.html - http://www.exploit-db.com/exploits/9158 - http://blog.mozilla.com/security/2009/07/19/milw0rm-9158-stack-overflow-crash-not-exploitable-cve-2009-2479/ - http://www.securityfocus.com/archive/1/505092/100/0/threaded - http://www.securitytracker.com/id?1022580 - http://www.securityfocus.com/bid/35707 - https://bugzilla.mozilla.org/show_bug.cgi?id=504343 - http://osvdb.org/55931 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51729
CVE ID: CVE-2009-2480 State: PUBLISHED Published: 2009-07-16T16:00:00 Last Updated: 2024-08-07T05:52:14.988Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in mt-wizard.cgi in Six Apart Movable Type 4.24, and 4.25 when global templates are not initialized, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN97248625/index.html - http://secunia.com/advisories/35534 - http://www.movabletype.org/documentation/appendices/release-notes/426.html - http://www.vupen.com/english/advisories/2009/1668 - http://jvndb.jvn.jp/en/co
tation/appendices/release-notes/426.html - http://www.vupen.com/english/advisories/2009/1668 - http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000020.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/51329 - http://www.securityfocus.com/bid/35471
CVE ID: CVE-2009-2481 State: PUBLISHED Published: 2009-07-16T16:00:00 Last Updated: 2024-08-07T05:52:14.744Z Vendors: n/a Products: n/a Problem Types: n/a Description: mt-wizard.cgi in Six Apart Movable Type before 4.261, when global templates are not initialized, allows remote attackers to bypass access restrictions and (1) send e-mail to arbitrary addresses or (2) obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN08369659/index.html - http://secunia.com/advisories/35534 - http://www.vupen.com/english/advisories/2009/1668 - http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000043.html - http://www.secu
w.vupen.com/english/advisories/2009/1668 - http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000043.html - http://www.securityfocus.com/bid/35471 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51330
CVE ID: CVE-2009-2482 State: PUBLISHED Published: 2009-07-16T16:00:00 Last Updated: 2024-08-07T05:52:15.081Z Vendors: n/a Products: n/a Problem Types: n/a Description: The pam_unix module in OpenPAM in NetBSD 4.0 before 4.0.2 and 5.0 before 5.0.1 allows local users to change the current root password if it is already known, even when they are not in the wheel group. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1022432 - ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-004.txt.asc - http://secunia.com/advisories/35553 - http://osvdb.org/55284 - http://www.securityfocus.com/bid/35465 - https://exchange.xforce.ibmcloud.com/v
isories/35553 - http://osvdb.org/55284 - http://www.securityfocus.com/bid/35465 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51312
CVE ID: CVE-2009-2483 State: PUBLISHED Published: 2009-07-16T16:00:00 Last Updated: 2024-08-07T05:52:14.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: libprop/prop_object.c in proplib in NetBSD 4.0 and 4.0.1 allows local users to cause a denial of service (NULL pointer dereference and kernel panic) via a malformed externalized plist (XML form) containing an undefined element. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35556 - http://www.securityfocus.com/bid/35466 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51311 - ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-003.txt.asc - http://osvdb.org/55
nerabilities/51311 - ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-003.txt.asc - http://osvdb.org/55285 - http://www.securitytracker.com/id?1022431
CVE ID: CVE-2009-2484 State: PUBLISHED Published: 2009-07-16T16:00:00 Last Updated: 2024-08-07T05:52:14.948Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the Win32AddConnection function in modules/access/smb.c in VideoLAN VLC media player 0.9.9, when running on Microsoft Windows, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long smb URI in a playlist file. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/1714 - http://www.exploit-db.com/exploits/9029 - http://git.videolan.org/?p=vlc.git%3Ba=commit%3Bh=e60a9038b13b5eb80
009/1714 - http://www.exploit-db.com/exploits/9029 - http://git.videolan.org/?p=vlc.git%3Ba=commit%3Bh=e60a9038b13b5eb805a76755efc5c6d5e080180f - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14800 - http://secunia.com/advisories/35558 - http://www.securityfocus.com/bid/35500
CVE ID: CVE-2009-2485 State: PUBLISHED Published: 2009-07-16T16:00:00 Last Updated: 2024-08-07T05:52:14.650Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in HT-MP3Player 1.0 allows remote attackers to execute arbitrary code via a long string in a .ht3 file. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9034
CVE ID: CVE-2009-2486 State: PUBLISHED Published: 2009-07-16T16:00:00 Last Updated: 2024-08-07T05:52:14.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the SCTP implementation in Sun Solaris 10, and OpenSolaris before snv_120, allows remote attackers to cause a denial of service (panic) via unspecified packets. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1022574 - http://www.vupen.com/english/advisories/2009/1914 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-253608-1 - http://secunia.com/advisories/35873 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-141414-01-1 - http
08-1 - http://secunia.com/advisories/35873 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-141414-01-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6349 - http://osvdb.org/55875 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51740
CVE ID: CVE-2009-2487 State: PUBLISHED Published: 2009-07-16T16:00:00 Last Updated: 2024-08-07T05:52:14.872Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the frpr_icmp function in the ipfilter (aka IP Filter) subsystem in Sun Solaris 10, and OpenSolaris snv_45 through snv_110, allows remote attackers to cause a denial of service (panic) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-21-141020-01-1 - http://secunia.com/advisories/35881 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-260951-1 - https://oval.cisecurity.org/repository/search/de
1 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-260951-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6361 - http://osvdb.org/55874 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51739 - http://www.vupen.com/english/advisories/2009/1923
CVE ID: CVE-2009-2488 State: PUBLISHED Published: 2009-07-16T16:00:00 Last Updated: 2024-08-07T05:52:14.710Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the NFSv4 module in the kernel in Sun Solaris 10, and OpenSolaris snv_102 through snv_119, allows local users to cause a denial of service (client panic) via vectors involving "file operations." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35874 - http://www.vupen.com/english/advisories/2009/1922 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5586 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-14
itory/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5586 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-141733-03-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51774 - http://osvdb.org/55876 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-262788-1
CVE ID: CVE-2009-2489 State: PUBLISHED Published: 2009-07-16T16:00:00 Last Updated: 2024-08-07T05:52:14.792Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the utdmsession program in Sun Ray Server Software (SRSS) 4.0 allows local users to access the sessions of arbitrary users via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/51743 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-252226-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-127553-06-1 - http://www.vupen.com/english/advisories/2009/1915
CVE ID: CVE-2009-2490 State: PUBLISHED Published: 2009-07-16T16:00:00 Last Updated: 2024-08-07T05:52:15.080Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the utaudiod daemon in Sun Ray Server Software (SRSS) 4.0, when Solaris Trusted Extensions is enabled, allows local users to cause a denial of service (audio outage) or possibly gain privileges via unknown vectors related to "resource leaks." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/51741 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-253889-1 - http://osvdb.org/55979 - http://sunsolve.sun.com/search/document.d
e.sun.com/search/document.do?assetkey=1-66-253889-1 - http://osvdb.org/55979 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-127553-06-1 - http://www.vupen.com/english/advisories/2009/1915
CVE ID: CVE-2009-2491 State: PUBLISHED Published: 2009-07-16T16:00:00 Last Updated: 2024-08-07T05:52:14.758Z Vendors: n/a Products: n/a Problem Types: n/a Description: The utaudiod daemon in Sun Ray Server Software (SRSS) 4.0, when Solaris Trusted Extensions is enabled, allows local users to access the sessions of arbitrary users via unknown vectors related to "resource leaks." Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-66-253889-1 - http://osvdb.org/55978 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-127553-06-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51742 - http://www.vupen.com/english/
o?assetkey=1-21-127553-06-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51742 - http://www.vupen.com/english/advisories/2009/1915
CVE ID: CVE-2009-2492 State: PUBLISHED Published: 2009-07-17T16:00:00 Last Updated: 2024-08-07T05:52:14.767Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in mt-wizard.cgi in Six Apart Movable Type before 4.261 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2009-2480. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000042.html - http://www.securityfocus.com/bid/35885 - http://jvn.jp/en/jp/JVN86472161/index.html - http://secunia.com/advisories/35534 - http://www.vupen.com/english/advisories/2009/1668
CVE ID: CVE-2009-2493 State: PUBLISHED Published: 2009-07-29T17:00:00 Last Updated: 2024-08-07T05:52:15.041Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold and SP1, and Visual C++ 2005 SP1 and 2008 Gold and SP1; and Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2; does not properly restrict use of OleLoadFromStream in instantiating objects from data streams, which allows remote attackers to execute arbitrary code via a crafted HTML document with an ATL (1) component or (2) control, related to ATL headers and byp
cute arbitrary code via a crafted HTML document with an ATL (1) component or (2) control, related to ATL headers and bypassing security policies, aka "ATL COM Initialization Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.adobe.com/support/security/bulletins/apsb09-11.html - http://sunsolve.sun.com/search/document.do?assetkey=1-66-266108-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6304 - http://www.vupen.com/english/advisories/2009/2034 - http://www.us-cert.gov/cas/techalerts/TA09-223A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6621 - http://www.openof
A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6621 - http://www.openoffice.org/security/cves/CVE-2009-2493.html - http://www.adobe.com/support/security/bulletins/apsb09-13.html - http://www.novell.com/support/viewContent.do?externalId=7004997&sliceId=1 - http://www.us-cert.gov/cas/techalerts/TA09-286A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-035 - http://blogs.technet.com/srd/archive/2009/08/11/ms09-037-why-we-are-using-cve-s-already-used-in-ms09-035.aspx - http://www.vupen.com/english/advisories/2010/0366 - http://marc.info/?l=bugtraq&m=126592505426855&w=2 - https://docs.microsoft.com/en-us/securit
lish/advisories/2010/0366 - http://marc.info/?l=bugtraq&m=126592505426855&w=2 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-072 - http://marc.info/?l=bugtraq&m=126592505426855&w=2 - http://secunia.com/advisories/36187 - http://www.us-cert.gov/cas/techalerts/TA09-342A.html - http://www.vupen.com/english/advisories/2009/2232 - http://www.adobe.com/support/security/bulletins/apsb09-10.html - http://secunia.com/advisories/36374 - http://secunia.com/advisories/38568 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-037 - http://www.adobe.com/support/security/advisories/apsa09-04.html - https://oval.cisecurity.org/repository/search/de
037 - http://www.adobe.com/support/security/advisories/apsa09-04.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6245 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6716 - http://secunia.com/advisories/36746 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6421 - http://secunia.com/advisories/41818 - http://secunia.com/advisories/35967 - http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00002.html - http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020775.1-1 - http://www.us-cert.gov/cas/techalerts/TA09-195A.html - https://docs.microsoft.com/en
ment.do?assetkey=1-77-1020775.1-1 - http://www.us-cert.gov/cas/techalerts/TA09-195A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-060 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-055 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-264648-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6473
CVE ID: CVE-2009-2494 State: PUBLISHED Published: 2009-08-12T17:00:00 Last Updated: 2025-01-21T16:03:07.500Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Active Template Library (ATL) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via vectors related to erroneous free operations after reading a variant from a stream and deleting this variant, aka "ATL Object Type Mismatch Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://osvdb.org/56910 - http://www.us-cert.gov/cas/techalerts/TA09-223A.html -
: - CISA ADP Vulnrichment: References: - http://osvdb.org/56910 - http://www.us-cert.gov/cas/techalerts/TA09-223A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5708 - http://blogs.technet.com/srd/archive/2009/08/11/ms09-037-why-we-are-using-cve-s-already-used-in-ms09-035.aspx - http://www.securityfocus.com/bid/35982 - http://secunia.com/advisories/36187 - http://www.vupen.com/english/advisories/2009/2232 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-037 - http://www.securitytracker.com/id?1022712
CVE ID: CVE-2009-2495 State: PUBLISHED Published: 2009-07-29T17:00:00 Last Updated: 2024-08-07T05:52:14.722Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold and SP1, and Visual C++ 2005 SP1 and 2008 Gold and SP1 does not properly enforce string termination, which allows remote attackers to obtain sensitive information via a crafted HTML document with an ATL (1) component or (2) control that triggers a buffer over-read, related to ATL headers and buffer allocation, aka "ATL Null String Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http:
allocation, aka "ATL Null String Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-66-266108-1 - http://www.vupen.com/english/advisories/2009/2034 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7573 - http://www.adobe.com/support/security/bulletins/apsb09-13.html - http://www.novell.com/support/viewContent.do?externalId=7004997&sliceId=1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6478 - http://www.us-cert.gov/cas/techalerts/TA09-286A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-035
rt.gov/cas/techalerts/TA09-286A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-035 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6305 - http://marc.info/?l=bugtraq&m=126592505426855&w=2 - http://marc.info/?l=bugtraq&m=126592505426855&w=2 - http://www.adobe.com/support/security/bulletins/apsb09-10.html - http://secunia.com/advisories/36374 - http://secunia.com/advisories/36746 - http://secunia.com/advisories/35967 - http://www.us-cert.gov/cas/techalerts/TA09-195A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-060
CVE ID: CVE-2009-2496 State: PUBLISHED Published: 2009-08-12T17:00:00 Last Updated: 2024-08-07T05:52:14.657Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the Office Web Components ActiveX Control in Microsoft Office XP SP3, Office 2003 SP3, Office XP Web Components SP3, Office 2003 Web Components SP3, Office 2003 Web Components SP1 for the 2007 Microsoft Office System, Internet Security and Acceleration (ISA) Server 2004 SP3 and 2006 SP1, and Office Small Business Accounting 2006 allows remote attackers to execute arbitrary code via unspecified parameters to unknown methods, aka "Office Web Components Heap Corruption Vulnerability." Additional Anal
ia unspecified parameters to unknown methods, aka "Office Web Components Heap Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA09-223A.html - http://www.securitytracker.com/id?1022708 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5645 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-043
CVE ID: CVE-2009-2497 State: PUBLISHED Published: 2009-10-14T10:00:00 Last Updated: 2024-08-07T05:52:14.789Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Common Language Runtime (CLR) in Microsoft .NET Framework 2.0, 2.0 SP1, 2.0 SP2, 3.5, and 3.5 SP1, and Silverlight 2, does not properly handle interfaces, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (XBAP), (2) a crafted Silverlight application, (3) a crafted ASP.NET application, or (4) a crafted .NET Framework application, aka "Microsoft Silverlight and Microsoft .NET Framework CLR Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http:/
and Microsoft .NET Framework CLR Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA09-286A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6510 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-061
CVE ID: CVE-2009-2498 State: PUBLISHED Published: 2009-09-08T22:00:00 Last Updated: 2024-08-07T05:52:14.607Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows Media Format Runtime 9.0, 9.5, and 11 and Windows Media Services 9.1 and 2008 do not properly parse malformed headers in Advanced Systems Format (ASF) files, which allows remote attackers to execute arbitrary code via a crafted (1) .asf, (2) .wmv, or (3) .wma file, aka "Windows Media Header Parsing Invalid Free Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-047 - http://www.us-cert.gov/cas/techalert
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-047 - http://www.us-cert.gov/cas/techalerts/TA09-251A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6257
CVE ID: CVE-2009-2499 State: PUBLISHED Published: 2009-09-08T22:00:00 Last Updated: 2024-08-07T05:52:14.645Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows Media Format Runtime 9.0, 9.5, and 11; and Microsoft Media Foundation on Windows Vista Gold, SP1, and SP2 and Server 2008; allows remote attackers to execute arbitrary code via an MP3 file with crafted metadata that triggers memory corruption, aka "Windows Media Playback Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-047 - https://oval.cisecurity.org/repository/search/definition/ov
com/en-us/security-updates/securitybulletins/2009/ms09-047 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5531 - http://www.us-cert.gov/cas/techalerts/TA09-251A.html