Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2011-0383 State: PUBLISHED Published: 2011-02-25T11:00:00 Last Updated: 2024-08-06T21:51:08.928Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Java Servlet framework on Cisco TelePresence Recording Server devices with software 1.6.x before 1.6.2 and Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x does not require administrative authentication for unspecified actions, which allows remote attackers to execute arbitrary code via a crafted request, aka Bug IDs CSCtf42005 and CSCtf42008. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/46519 - http://www.cisco.com/en/US/p
lyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/46519 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e11d.shtml - http://www.securitytracker.com/id?1025114 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e14e.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/65602 - http://www.securitytracker.com/id?1025113
CVE ID: CVE-2011-0384 State: PUBLISHED Published: 2011-02-25T11:00:00 Last Updated: 2024-08-06T21:51:08.923Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Java Servlet framework on Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x does not require administrative authentication for unspecified actions, which allows remote attackers to execute arbitrary code via a crafted request, aka Bug ID CSCtf01253. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/46520 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65620 - http://www.cisco.com/en/US/products/products_security_advisory09
://exchange.xforce.ibmcloud.com/vulnerabilities/65620 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e14e.shtml - http://www.securitytracker.com/id?1025113
CVE ID: CVE-2011-0385 State: PUBLISHED Published: 2011-02-25T11:00:00 Last Updated: 2024-08-06T21:51:08.918Z Vendors: n/a Products: n/a Problem Types: n/a Description: The administrative web interface on Cisco TelePresence Recording Server devices with software 1.6.x and Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x allows remote attackers to create or overwrite arbitrary files, and possibly execute arbitrary code, via a crafted request, aka Bug IDs CSCth85786 and CSCth61065. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e11d.shtml - https://exchange
r: References: - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e11d.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/65604 - http://www.securitytracker.com/id?1025114 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e14e.shtml - http://www.securitytracker.com/id?1025113
CVE ID: CVE-2011-0386 State: PUBLISHED Published: 2011-02-25T11:00:00 Last Updated: 2024-08-06T21:51:08.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XML-RPC implementation on Cisco TelePresence Recording Server devices with software 1.6.x and 1.7.x before 1.7.1 allows remote attackers to overwrite files and consequently execute arbitrary code via a malformed request, aka Bug ID CSCti50739. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e11d.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/65605 - http://www.securitytracker.com/id?1025114 - http://www.securityfocus.co
ange.xforce.ibmcloud.com/vulnerabilities/65605 - http://www.securitytracker.com/id?1025114 - http://www.securityfocus.com/bid/46522
CVE ID: CVE-2011-0387 State: PUBLISHED Published: 2011-02-25T11:00:00 Last Updated: 2024-08-06T21:51:08.932Z Vendors: n/a Products: n/a Problem Types: n/a Description: The administrative web interface on Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x allows remote authenticated users to cause a denial of service or have unspecified other impact via vectors involving access to a servlet, aka Bug ID CSCtf97164. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/65621 - http://www.securityfocus.com/bid/46520 - http://www.cisco.com/en/US/products/products_security_advisory09186a00
/65621 - http://www.securityfocus.com/bid/46520 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e14e.shtml - http://www.securitytracker.com/id?1025113
CVE ID: CVE-2011-0388 State: PUBLISHED Published: 2011-02-25T11:00:00 Last Updated: 2024-08-06T21:51:08.555Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco TelePresence Recording Server devices with software 1.6.x and Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x do not properly restrict remote access to the Java servlet RMI interface, which allows remote attackers to cause a denial of service (memory consumption and web outage) via multiple crafted requests, aka Bug IDs CSCtg35830 and CSCtg35825. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/products/products_security_advisory0
al Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e11d.shtml - http://www.securitytracker.com/id?1025114 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e14e.shtml - http://www.securityfocus.com/bid/46523 - http://www.securitytracker.com/id?1025113
CVE ID: CVE-2011-0389 State: PUBLISHED Published: 2011-02-25T11:00:00 Last Updated: 2024-08-06T21:51:09.071Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x allow remote attackers to cause a denial of service (process crash) via a crafted Real-Time Transport Control Protocol (RTCP) UDP packet, aka Bug ID CSCth60993. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/65622 - http://www.securityfocus.com/bid/46520 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e14e.shtml - http://www.securityt
/bid/46520 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e14e.shtml - http://www.securitytracker.com/id?1025113
CVE ID: CVE-2011-0390 State: PUBLISHED Published: 2011-02-25T11:00:00 Last Updated: 2024-08-06T21:51:09.066Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XML-RPC implementation on Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x, 1.6.x, and 1.7.0 allows remote attackers to cause a denial of service (process crash) via a crafted request, aka Bug ID CSCtj44534. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/46520 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e14e.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/65623 - http://www.securitytracker.co
isory09186a0080b6e14e.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/65623 - http://www.securitytracker.com/id?1025113
CVE ID: CVE-2011-0391 State: PUBLISHED Published: 2011-02-25T11:00:00 Last Updated: 2024-08-06T21:51:09.083Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco TelePresence Recording Server devices with software 1.6.x allow remote attackers to cause a denial of service (thread consumption and device outage) via a malformed request, related to an "ad hoc recording" issue, aka Bug ID CSCtf97205. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/65607 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e11d.shtml - http://www.securitytracker.com/id?1025114 - http://www.securityfocus.com/bid
s_security_advisory09186a0080b6e11d.shtml - http://www.securitytracker.com/id?1025114 - http://www.securityfocus.com/bid/46522
CVE ID: CVE-2011-0392 State: PUBLISHED Published: 2011-02-25T11:00:00 Last Updated: 2024-08-06T21:51:08.526Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco TelePresence Recording Server devices with software 1.6.x do not require authentication for an XML-RPC interface, which allows remote attackers to perform unspecified actions via a session on TCP port 8080, aka Bug ID CSCtg35833. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/65609 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e11d.shtml - http://www.securitytracker.com/id?1025114 - http://www.securityfocus.com/bid/46522
CVE ID: CVE-2011-0393 State: PUBLISHED Published: 2011-02-25T11:00:00 Last Updated: 2024-08-06T21:51:08.924Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.0 before 7.0(8.12), 7.1 and 7.2 before 7.2(5.2), 8.0 before 8.0(5.21), 8.1 before 8.1(2.49), 8.2 before 8.2(3.6), and 8.3 before 8.3(2.7) and Cisco PIX Security Appliances 500 series devices, when transparent firewall mode is configured but IPv6 is not configured, allow remote attackers to cause a denial of service (packet buffer exhaustion and device outage) via IPv6 traffic, aka Bug ID CSCtj04707. Additional Analyst Notes: - CVE Program Container: R
austion and device outage) via IPv6 traffic, aka Bug ID CSCtj04707. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e14d.shtml - http://www.securitytracker.com/id?1025108 - http://secunia.com/advisories/43488 - http://www.vupen.com/english/advisories/2011/0493 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65589
CVE ID: CVE-2011-0394 State: PUBLISHED Published: 2011-02-25T11:00:00 Last Updated: 2024-08-06T21:51:09.078Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.0 before 7.0(8.11), 7.1 and 7.2 before 7.2(5.1), 8.0 before 8.0(5.19), 8.1 before 8.1(2.47), 8.2 before 8.2(2.19), and 8.3 before 8.3(1.8); Cisco PIX Security Appliances 500 series devices; and Cisco Firewall Services Module (aka FWSM) 3.1 before 3.1(20), 3.2 before 3.2(20), 4.0 before 4.0(15), and 4.1 before 4.1(5) allow remote attackers to cause a denial of service (device reload) via a malformed Skinny Client Control Protocol (SCCP) message, aka Bu
ckers to cause a denial of service (device reload) via a malformed Skinny Client Control Protocol (SCCP) message, aka Bug IDs CSCtg69457 and CSCtl84952. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e14d.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/65593 - http://www.securitytracker.com/id?1025108 - http://www.securityfocus.com/bid/46518 - http://www.vupen.com/english/advisories/2011/0494 - http://secunia.com/advisories/43453 - http://secunia.com/advisories/43488 - http://www.vupen.com/english/advisories/2011/0493 - http://www.securitytracker.com/id?1025109 - http://www.cisco.com/en/U
ttp://www.vupen.com/english/advisories/2011/0493 - http://www.securitytracker.com/id?1025109 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e148.shtml
CVE ID: CVE-2011-0395 State: PUBLISHED Published: 2011-02-25T11:00:00 Last Updated: 2024-08-06T21:51:09.044Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.0 before 8.0(5.20), 8.1 before 8.1(2.48), 8.2 before 8.2(3), and 8.3 before 8.3(2.1), when the RIP protocol and the Cisco Phone Proxy functionality are configured, allow remote attackers to cause a denial of service (device reload) via a RIP update, aka Bug ID CSCtg66583. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e14d.shtml - http://www.securitytracker.com
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e14d.shtml - http://www.securitytracker.com/id?1025108 - http://secunia.com/advisories/43488 - http://www.vupen.com/english/advisories/2011/0493 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65590
CVE ID: CVE-2011-0396 State: PUBLISHED Published: 2011-02-25T11:00:00 Last Updated: 2024-08-06T21:51:08.972Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.0 before 8.0(5.23), 8.1 before 8.1(2.49), 8.2 before 8.2(4.1), and 8.3 before 8.3(2.13), when a Certificate Authority (CA) is configured, allow remote attackers to read arbitrary files via unspecified vectors, aka Bug ID CSCtk12352. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e14d.shtml - http://www.securitytracker.com/id?1025108 - https://exchange.xforce.ib
roducts_security_advisory09186a0080b6e14d.shtml - http://www.securitytracker.com/id?1025108 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65591 - http://secunia.com/advisories/43488 - http://www.vupen.com/english/advisories/2011/0493
CVE ID: CVE-2011-0398 State: PUBLISHED Published: 2011-01-10T19:18:00 Last Updated: 2024-08-06T21:51:08.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Piwik_Common::getIP function in Piwik before 1.1 does not properly determine the client IP address, which allows remote attackers to bypass intended geolocation and logging functionality via (1) use of a private (aka RFC 1918) address behind a proxy server or (2) spoofing of the X-Forwarded-For HTTP header. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/45787 - http://osvdb.org/70384 - http://dev.piwik.org/trac/ticket/567 - https://exchange.xforce.ibmcloud.com/vulnerabilit
5787 - http://osvdb.org/70384 - http://dev.piwik.org/trac/ticket/567 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64641 - http://piwik.org/blog/2011/01/piwik-1-1-2/
CVE ID: CVE-2011-0399 State: PUBLISHED Published: 2011-01-10T19:18:00 Last Updated: 2024-08-06T21:51:09.060Z Vendors: n/a Products: n/a Problem Types: n/a Description: Piwik before 1.1 does not prevent the rendering of the login form inside a frame in a third-party HTML document, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/45787 - http://dev.piwik.org/trac/ticket/1679 - http://piwik.org/blog/2011/01/piwik-1-1-2/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/64640 - http://osvdb.org/70383
CVE ID: CVE-2011-0400 State: PUBLISHED Published: 2011-01-10T19:18:00 Last Updated: 2024-08-06T21:51:08.690Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cookie.php in Piwik before 1.1 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/45787 - http://osvdb.org/70382 - http://dev.piwik.org/trac/ticket/1795 - http://piwik.org/blog/2011/01/piwik-1-1-2/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/64639
CVE ID: CVE-2011-0401 State: PUBLISHED Published: 2011-01-10T19:18:00 Last Updated: 2024-08-06T21:51:08.771Z Vendors: n/a Products: n/a Problem Types: n/a Description: Piwik before 1.1 does not properly limit the number of files stored under tmp/sessions/, which might allow remote attackers to cause a denial of service (inode consumption) by establishing many sessions. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/45787 - http://dev.piwik.org/trac/ticket/1910 - http://dev.piwik.org/trac/ticket/1279#comment:13 - http://piwik.org/blog/2011/01/piwik-1-1-2/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/64638 - http://osvdb.org/70381
CVE ID: CVE-2011-0402 State: PUBLISHED Published: 2011-01-11T01:00:00 Last Updated: 2024-08-06T21:51:09.064Z Vendors: n/a Products: n/a Problem Types: n/a Description: dpkg-source in dpkg before 1.14.31 and 1.15.x allows user-assisted remote attackers to modify arbitrary files via a symlink attack on unspecified files in the .pc directory. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/42831 - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053311.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/64614 - http://secunia.com/advisories/42826 - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/
es/64614 - http://secunia.com/advisories/42826 - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053306.html - http://www.ubuntu.com/usn/USN-1038-1 - http://osvdb.org/70367 - http://www.vupen.com/english/advisories/2011/0040 - http://www.securityfocus.com/bid/45703 - http://www.debian.org/security/2011/dsa-2142 - http://secunia.com/advisories/43054 - http://www.vupen.com/english/advisories/2011/0044 - http://www.vupen.com/english/advisories/2011/0196
CVE ID: CVE-2011-0403 State: PUBLISHED Published: 2011-01-11T01:00:00 Last Updated: 2024-08-06T21:51:08.948Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in ImgBurn.exe in ImgBurn 2.4.0.0, 2.5.4.0, and other versions allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a CUE file. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/files/view/97207/imgburn-dllhijack.txt - http://secunia.com/advisories/42798 - http://osvdb.org/70273 - http://www.securityfocus.com/bid/45657 - h
llhijack.txt - http://secunia.com/advisories/42798 - http://osvdb.org/70273 - http://www.securityfocus.com/bid/45657 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64478
CVE ID: CVE-2011-0404 State: PUBLISHED Published: 2011-01-11T01:00:00 Last Updated: 2024-08-06T21:51:09.052Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in NetSupport Manager Agent for Linux 11.00, for Solaris 9.50, and for Mac OS X 11.00 allows remote attackers to execute arbitrary code via a long control hostname to TCP port 5405, probably a different vulnerability than CVE-2007-5252. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/0062 - http://www.exploit-db.com/exploits/15937 - http://osvdb.org/70408 - http://www.securitytracker.com/id?1024943 - http://www.securityfocus.com/bid/45728
oits/15937 - http://osvdb.org/70408 - http://www.securitytracker.com/id?1024943 - http://www.securityfocus.com/bid/45728 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64546 - http://www.ikkisoft.com/stuff/netsupport_linux.txt - http://www.exploit-db.com/exploits/16838 - http://archives.neohapsis.com/archives/fulldisclosure/2011-01/0090.html - http://secunia.com/advisories/42794
CVE ID: CVE-2011-0405 State: PUBLISHED Published: 2011-01-11T01:00:00 Last Updated: 2024-08-06T21:51:09.080Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in module.php in PhpGedView 4.2.3 and possibly other versions, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via directory traversal sequences in the pgvaction parameter. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/projects/phpgedview/forums/forum/185166/topic/4040059 - http://www.vupen.com/english/advisories/2011/0036 - http://osvdb.org/70295 - http://www.exploit-db.com/exploits/15913 - https://exchange.xforce.ib
sh/advisories/2011/0036 - http://osvdb.org/70295 - http://www.exploit-db.com/exploits/15913 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64733 - http://sourceforge.net/tracker/?func=detail&aid=3152857&group_id=55456&atid=477081 - http://secunia.com/advisories/42786 - http://www.securityfocus.com/bid/45674
CVE ID: CVE-2011-0406 State: PUBLISHED Published: 2011-01-11T01:00:00 Last Updated: 2024-08-06T21:51:08.939Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in HistorySvr.exe in WellinTech KingView 6.53 allows remote attackers to execute arbitrary code via a long request to TCP port 777. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/64559 - http://www.exploit-db.com/exploits/15957 - http://www.securityfocus.com/bid/45727 - http://www.cnnvd.org.cn/showCnnvd.html?id=2011010108 - http://secunia.com/advisories/42851 - http://osvdb.org/70366 - http://securityreason.com/securityalert/8134
011010108 - http://secunia.com/advisories/42851 - http://osvdb.org/70366 - http://securityreason.com/securityalert/8134 - http://www.vupen.com/english/advisories/2011/0063 - http://thesauceofutterpwnage.blogspot.com/2011/01/waking-up-sleeping-dragon.html - http://www.kingview.com/news/detail.aspx?contentid=528 - http://www.kb.cert.org/vuls/id/180119
CVE ID: CVE-2011-0407 State: PUBLISHED Published: 2011-01-11T01:00:00 Last Updated: 2024-08-06T21:51:08.641Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the store function in _phenotype/system/class/PhenoTypeDataObject.class.php in Phenotype CMS 3.0 allows remote attackers to execute arbitrary SQL commands via a crafted URI, as demonstrated by Gallery/gal_id/1/image1,1.html. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/64538 - http://www.securityfocus.com/archive/1/515577/100/0/threaded - http://osvdb.org
rce.ibmcloud.com/vulnerabilities/64538 - http://www.securityfocus.com/archive/1/515577/100/0/threaded - http://osvdb.org/70308 - http://www.htbridge.ch/advisory/sql_injection_in_phenotype_cms.html - http://www.securityfocus.com/bid/45700 - http://secunia.com/advisories/42837
CVE ID: CVE-2011-0408 State: PUBLISHED Published: 2011-01-18T17:00:00 Last Updated: 2024-08-06T21:51:08.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: pngrtran.c in libpng 1.5.x before 1.5.1 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted palette-based PNG image that triggers a buffer overflow, related to the png_do_expand_palette function, the png_do_rgb_to_gray function, and an integer underflow. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/42863 - http://osvdb.org/70417 - http://w
st Notes: - CVE Program Container: References: - http://secunia.com/advisories/42863 - http://osvdb.org/70417 - http://www.kb.cert.org/vuls/id/643140 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64637 - ftp://ftp.simplesystems.org/pub/png-group/src/libpng-1.5.1beta01-README.txt - http://securitytracker.com/id?1024955 - ftp://ftp.simplesystems.org/pub/png-group/src/libpng-1.5.1beta01-1.5.0-diff.txt - http://sourceforge.net/mailarchive/forum.php?thread_name=002b01cbb0e2%24ae636c80%240b2a4580%24%40acm.org&forum_name=png-mng-implement - http://www.vupen.com/english/advisories/2011/0080