Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
sories/48300 - http://secunia.com/advisories/48508 - http://secunia.com/advisories/48822 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:057 - http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html - http://secunia.com/advisories/48758 - http://support.apple.com/kb/HT5503 - http://www.securityfocus.com/bid/52318 - http://www.ubuntu.com/usn/USN-1403-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=733512 - http://secunia.com/advisories/48918 - http://www.openwall.com/lists/oss-security/2012/03/06/16 - http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html - http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00015.html - https://
y-announce/2012-04/msg00003.html - http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00015.html - https://bugzilla.redhat.com/show_bug.cgi?id=800592 - http://secunia.com/advisories/48973 - http://www.mozilla.org/security/announce/2012/mfsa2012-21.html - http://rhn.redhat.com/errata/RHSA-2012-0467.html - http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html - http://www.securitytracker.com/id?1026765 - http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00004.html - http://secunia.com/advisories/48951 - http://security.gentoo.org/glsa/glsa-201204-04.xml - http://www.debian.org/security/2012/dsa-2428
CVE ID: CVE-2012-1135 State: PUBLISHED Published: 2012-04-25T10:00:00 Last Updated: 2024-08-06T18:45:27.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via vectors involving the NPUSHB and NPUSHW instructions in a TrueType font. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/48797 - http://secunia.com/advisories/48508 - http://secunia.com/advisories/48822 - http://www.mandriva.com/security/advisories?n
ttp://secunia.com/advisories/48508 - http://secunia.com/advisories/48822 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:057 - http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html - http://support.apple.com/kb/HT5503 - http://www.securityfocus.com/bid/52318 - http://www.ubuntu.com/usn/USN-1403-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=733512 - http://secunia.com/advisories/48918 - http://www.openwall.com/lists/oss-security/2012/03/06/16 - http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html - http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00015.html - http://secunia.com/advisories/48973 - http://www.mozilla.org/s
se.org/opensuse-security-announce/2012-04/msg00015.html - http://secunia.com/advisories/48973 - http://www.mozilla.org/security/announce/2012/mfsa2012-21.html - http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html - http://www.securitytracker.com/id?1026765 - http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00004.html - http://secunia.com/advisories/48951 - https://bugzilla.redhat.com/show_bug.cgi?id=800593 - http://security.gentoo.org/glsa/glsa-201204-04.xml
CVE ID: CVE-2012-1136 State: PUBLISHED Published: 2012-04-25T10:00:00 Last Updated: 2024-08-06T18:45:27.474Z Vendors: n/a Products: n/a Problem Types: n/a Description: FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap write operation and memory corruption) or possibly execute arbitrary code via crafted glyph or bitmap data in a BDF font that lacks an ENCODING field. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/48797 - http://secunia.com/advisories/48300 - http://secunia.com/advisories/48508 - http://secunia.com/advisories/48822 - http:/
http://secunia.com/advisories/48300 - http://secunia.com/advisories/48508 - http://secunia.com/advisories/48822 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:057 - http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html - http://secunia.com/advisories/48758 - http://support.apple.com/kb/HT5503 - http://www.securityfocus.com/bid/52318 - http://www.ubuntu.com/usn/USN-1403-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=733512 - http://secunia.com/advisories/48918 - http://www.openwall.com/lists/oss-security/2012/03/06/16 - http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html - http://lists.opensuse.org/opensuse-security-announce/2012-04/m
se.org/opensuse-security-announce/2012-04/msg00003.html - http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00015.html - http://secunia.com/advisories/48973 - http://www.mozilla.org/security/announce/2012/mfsa2012-21.html - http://rhn.redhat.com/errata/RHSA-2012-0467.html - https://bugzilla.redhat.com/show_bug.cgi?id=800594 - http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html - http://www.securitytracker.com/id?1026765 - http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00004.html - http://secunia.com/advisories/48951 - http://security.gentoo.org/glsa/glsa-201204-04.xml - http://www.debian.org/security/2012/dsa-2428
CVE ID: CVE-2012-1137 State: PUBLISHED Published: 2012-04-25T10:00:00 Last Updated: 2024-08-06T18:45:27.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via a crafted header in a BDF font. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/48797 - http://secunia.com/advisories/48508 - http://secunia.com/advisories/48822 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:057 - http://lists.apple.c
://secunia.com/advisories/48822 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:057 - http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html - http://secunia.com/advisories/48758 - http://support.apple.com/kb/HT5503 - http://www.securityfocus.com/bid/52318 - http://www.ubuntu.com/usn/USN-1403-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=733512 - http://www.openwall.com/lists/oss-security/2012/03/06/16 - http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html - http://secunia.com/advisories/48973 - http://www.mozilla.org/security/announce/2012/mfsa2012-21.html - http://rhn.redhat.com/errata/RHSA-2012-0467.html - http://lists.opensuse.org/
/security/announce/2012/mfsa2012-21.html - http://rhn.redhat.com/errata/RHSA-2012-0467.html - http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html - https://bugzilla.redhat.com/show_bug.cgi?id=800595 - http://www.securitytracker.com/id?1026765 - http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00004.html - http://secunia.com/advisories/48951 - http://security.gentoo.org/glsa/glsa-201204-04.xml
CVE ID: CVE-2012-1138 State: PUBLISHED Published: 2012-04-25T10:00:00 Last Updated: 2024-08-06T18:45:27.576Z Vendors: n/a Products: n/a Problem Types: n/a Description: FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via vectors involving the MIRP instruction in a TrueType font. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/48797 - http://secunia.com/advisories/48508 - http://secunia.com/advisories/48822 - http://www.mandriva.com/security/advisories?name=MDVSA-2012
com/advisories/48508 - http://secunia.com/advisories/48822 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:057 - http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html - http://support.apple.com/kb/HT5503 - http://www.securityfocus.com/bid/52318 - http://www.ubuntu.com/usn/USN-1403-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=733512 - http://secunia.com/advisories/48918 - http://www.openwall.com/lists/oss-security/2012/03/06/16 - http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html - http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00015.html - http://secunia.com/advisories/48973 - http://www.mozilla.org/security/announ
e-security-announce/2012-04/msg00015.html - http://secunia.com/advisories/48973 - http://www.mozilla.org/security/announce/2012/mfsa2012-21.html - http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html - http://www.securitytracker.com/id?1026765 - http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00004.html - http://secunia.com/advisories/48951 - https://bugzilla.redhat.com/show_bug.cgi?id=800597 - http://security.gentoo.org/glsa/glsa-201204-04.xml
CVE ID: CVE-2012-1139 State: PUBLISHED Published: 2012-04-25T10:00:00 Last Updated: 2024-08-06T18:45:27.501Z Vendors: n/a Products: n/a Problem Types: n/a Description: Array index error in FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid stack read operation and memory corruption) or possibly execute arbitrary code via crafted glyph data in a BDF font. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/48797 - http://secunia.com/advisories/48508 - http://secunia.com/advisories/48822 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:05
/advisories/48508 - http://secunia.com/advisories/48822 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:057 - http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html - http://secunia.com/advisories/48758 - http://support.apple.com/kb/HT5503 - http://www.securityfocus.com/bid/52318 - http://www.ubuntu.com/usn/USN-1403-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=733512 - http://secunia.com/advisories/48918 - http://www.openwall.com/lists/oss-security/2012/03/06/16 - http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html - http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00015.html - http://secunia.com/advisories/48973 - htt
- http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00015.html - http://secunia.com/advisories/48973 - http://www.mozilla.org/security/announce/2012/mfsa2012-21.html - http://rhn.redhat.com/errata/RHSA-2012-0467.html - http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html - http://www.securitytracker.com/id?1026765 - http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00004.html - http://secunia.com/advisories/48951 - https://bugzilla.redhat.com/show_bug.cgi?id=800598 - http://security.gentoo.org/glsa/glsa-201204-04.xml
CVE ID: CVE-2012-1140 State: PUBLISHED Published: 2012-04-25T10:00:00 Last Updated: 2024-08-06T18:45:27.476Z Vendors: n/a Products: n/a Problem Types: n/a Description: FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via a crafted PostScript font object. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/48508 - http://secunia.com/advisories/48822 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:057 - http://lists.apple.com/archives/security-announce/2012/S
tp://www.mandriva.com/security/advisories?name=MDVSA-2012:057 - http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html - http://secunia.com/advisories/48758 - http://support.apple.com/kb/HT5503 - http://www.securityfocus.com/bid/52318 - http://www.ubuntu.com/usn/USN-1403-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=733512 - http://www.openwall.com/lists/oss-security/2012/03/06/16 - http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html - http://secunia.com/advisories/48973 - http://www.mozilla.org/security/announce/2012/mfsa2012-21.html - http://rhn.redhat.com/errata/RHSA-2012-0467.html - https://bugzilla.redhat.com/show_bug.cgi?id=800600 - http://ww
html - http://rhn.redhat.com/errata/RHSA-2012-0467.html - https://bugzilla.redhat.com/show_bug.cgi?id=800600 - http://www.securitytracker.com/id?1026765 - http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00004.html - http://security.gentoo.org/glsa/glsa-201204-04.xml
CVE ID: CVE-2012-1141 State: PUBLISHED Published: 2012-04-25T10:00:00 Last Updated: 2024-08-06T18:45:27.470Z Vendors: n/a Products: n/a Problem Types: n/a Description: FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via a crafted ASCII string in a BDF font. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/48797 - http://secunia.com/advisories/48508 - http://secunia.com/advisories/48822 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:057 - http://lists.a
- http://secunia.com/advisories/48822 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:057 - http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html - http://secunia.com/advisories/48758 - http://support.apple.com/kb/HT5503 - http://www.securityfocus.com/bid/52318 - http://www.ubuntu.com/usn/USN-1403-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=733512 - http://secunia.com/advisories/48918 - http://www.openwall.com/lists/oss-security/2012/03/06/16 - http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html - http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00015.html - http://secunia.com/advisories/48973 - http://www.mozilla.or
nsuse.org/opensuse-security-announce/2012-04/msg00015.html - http://secunia.com/advisories/48973 - http://www.mozilla.org/security/announce/2012/mfsa2012-21.html - https://bugzilla.redhat.com/show_bug.cgi?id=800602 - http://rhn.redhat.com/errata/RHSA-2012-0467.html - http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html - http://www.securitytracker.com/id?1026765 - http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00004.html - http://secunia.com/advisories/48951 - http://security.gentoo.org/glsa/glsa-201204-04.xml
CVE ID: CVE-2012-1142 State: PUBLISHED Published: 2012-04-25T10:00:00 Last Updated: 2024-08-06T18:45:27.375Z Vendors: n/a Products: n/a Problem Types: n/a Description: FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap write operation and memory corruption) or possibly execute arbitrary code via crafted glyph-outline data in a font. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/48797 - http://secunia.com/advisories/48300 - http://secunia.com/advisories/48508 - http://secunia.com/advisories/48822 - http://www.mandriva.com/security/advisori
- http://secunia.com/advisories/48508 - http://secunia.com/advisories/48822 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:057 - http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html - http://secunia.com/advisories/48758 - http://support.apple.com/kb/HT5503 - http://www.securityfocus.com/bid/52318 - http://www.ubuntu.com/usn/USN-1403-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=733512 - http://secunia.com/advisories/48918 - http://www.openwall.com/lists/oss-security/2012/03/06/16 - http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html - http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00015.html - http://secunia.com/a
012-04/msg00003.html - http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00015.html - http://secunia.com/advisories/48973 - http://www.mozilla.org/security/announce/2012/mfsa2012-21.html - http://rhn.redhat.com/errata/RHSA-2012-0467.html - http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html - https://bugzilla.redhat.com/show_bug.cgi?id=800604 - http://www.securitytracker.com/id?1026765 - http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00004.html - http://secunia.com/advisories/48951 - http://security.gentoo.org/glsa/glsa-201204-04.xml - http://www.debian.org/security/2012/dsa-2428
CVE ID: CVE-2012-1143 State: PUBLISHED Published: 2012-04-25T10:00:00 Last Updated: 2024-08-06T18:45:27.489Z Vendors: n/a Products: n/a Problem Types: n/a Description: FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted font. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/48797 - http://secunia.com/advisories/48508 - http://secunia.com/advisories/48822 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:057 - http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html - http://secunia.com/adviso
me=MDVSA-2012:057 - http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html - http://secunia.com/advisories/48758 - http://support.apple.com/kb/HT5503 - http://www.securityfocus.com/bid/52318 - http://www.ubuntu.com/usn/USN-1403-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=733512 - http://secunia.com/advisories/48918 - http://www.openwall.com/lists/oss-security/2012/03/06/16 - http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html - http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00015.html - https://bugzilla.redhat.com/show_bug.cgi?id=800606 - http://secunia.com/advisories/48973 - http://www.mozilla.org/security/announce/2012/mfsa2012
om/show_bug.cgi?id=800606 - http://secunia.com/advisories/48973 - http://www.mozilla.org/security/announce/2012/mfsa2012-21.html - http://rhn.redhat.com/errata/RHSA-2012-0467.html - http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html - http://www.securitytracker.com/id?1026765 - http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00004.html - http://secunia.com/advisories/48951 - http://security.gentoo.org/glsa/glsa-201204-04.xml
CVE ID: CVE-2012-1144 State: PUBLISHED Published: 2012-04-25T10:00:00 Last Updated: 2024-08-06T18:45:27.490Z Vendors: n/a Products: n/a Problem Types: n/a Description: FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap write operation and memory corruption) or possibly execute arbitrary code via a crafted TrueType font. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/48300 - http://secunia.com/advisories/48508 - http://secunia.com/advisories/48822 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:057 - http://lists.apple.com/arc
unia.com/advisories/48822 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:057 - http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html - http://secunia.com/advisories/48758 - http://support.apple.com/kb/HT5503 - http://www.securityfocus.com/bid/52318 - http://www.ubuntu.com/usn/USN-1403-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=733512 - http://www.openwall.com/lists/oss-security/2012/03/06/16 - http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html - http://secunia.com/advisories/48973 - http://www.mozilla.org/security/announce/2012/mfsa2012-21.html - http://rhn.redhat.com/errata/RHSA-2012-0467.html - http://www.securitytracker.com/i
ity/announce/2012/mfsa2012-21.html - http://rhn.redhat.com/errata/RHSA-2012-0467.html - http://www.securitytracker.com/id?1026765 - http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00004.html - http://security.gentoo.org/glsa/glsa-201204-04.xml - http://www.debian.org/security/2012/dsa-2428 - https://bugzilla.redhat.com/show_bug.cgi?id=800607
CVE ID: CVE-2012-1145 State: PUBLISHED Published: 2012-06-16T00:00:00 Last Updated: 2024-08-06T18:45:27.495Z Vendors: n/a Products: n/a Problem Types: n/a Description: spacewalk-backend in Red Hat Network Satellite 5.4 on Red Hat Enterprise Linux 6 does not properly authorize or authenticate uploads to the NULL organization when mod_wsgi is used, which allows remote attackers to cause a denial of service (/var partition disk consumption and failed updates) via a large number of package uploads. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/81481 - http://www.securitytracker.com/id?1026873 - http://www.securityfocus.com/bid/52832 - https://exchange.xfor
b.org/81481 - http://www.securitytracker.com/id?1026873 - http://www.securityfocus.com/bid/52832 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74498 - http://secunia.com/advisories/48664 - http://rhn.redhat.com/errata/RHSA-2012-0436.html
CVE ID: CVE-2012-1146 State: PUBLISHED Published: 2012-05-17T10:00:00 Last Updated: 2024-08-06T18:45:27.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mem_cgroup_usage_unregister_event function in mm/memcontrol.c in the Linux kernel before 3.2.10 does not properly handle multiple events that are attached to the same eventfd, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by registering memory threshold events. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00021.html - https://github.com/torvalds/li
eferences: - http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00021.html - https://github.com/torvalds/linux/commit/371528caec553785c37f73fa3926ea0de84f986f - http://secunia.com/advisories/48898 - http://www.openwall.com/lists/oss-security/2012/03/07/3 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.10 - http://secunia.com/advisories/48964 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73711 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=371528caec553785c37f73fa3926ea0de84f986f - http://lists.fedoraproject.org/pipermail/package-announce/2012-March/075781.html - https://bugzilla.redhat.com/show_bug.cgi?id=800813
CVE ID: CVE-2012-1147 State: PUBLISHED Published: 2012-07-03T19:00:00 Last Updated: 2024-08-06T18:45:27.392Z Vendors: n/a Products: n/a Problem Types: n/a Description: readfilemap.c in expat before 2.1.0 allows context-dependent attackers to cause a denial of service (file descriptor consumption) via a large number of crafted XML files. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT205637 - http://www.securitytracker.com/id/1034344 - http://www.securityfocus.com/bid/52379 - http://sourceforge.net/projects/expat/files/expat/2.1.0/ - http://expat.cvs.sourceforge.net/viewvc/expat/expat/xmlwf/readfilemap.c?r1=1.14&r2=1.15 - http://lists.apple.com/ar
0/ - http://expat.cvs.sourceforge.net/viewvc/expat/expat/xmlwf/readfilemap.c?r1=1.14&r2=1.15 - http://lists.apple.com/archives/security-announce/2015/Dec/msg00005.html - http://sourceforge.net/tracker/?func=detail&aid=2895533&group_id=10127&atid=110127 - http://trac.wxwidgets.org/ticket/11432 - http://trac.wxwidgets.org/ticket/11194
CVE ID: CVE-2012-1148 State: PUBLISHED Published: 2012-07-03T19:00:00 Last Updated: 2024-08-06T18:45:27.498Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the poolGrow function in expat/lib/xmlparse.c in expat before 2.1.0 allows context-dependent attackers to cause a denial of service (memory consumption) via a large number of crafted XML files that cause improperly-handled reallocation failures when expanding entities. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/49504 - http://www.ubuntu.com/usn/USN-1527-1 - https://support.apple.com/HT205637 - http://www.securitytracker.com/id/1034344 - http://expat.cvs.sourcef