Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-4042 State: PUBLISHED Published: 2013-10-01T01:00:00 Last Updated: 2024-08-06T16:30:49.875Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in IBM SPSS Collaboration and Deployment Services 4.2.1 and 5.0 through FP2 allows remote attackers to execute arbitrary code via unknown vectors, a different vulnerability than CVE-2013-5370. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21651299 - https://exchange.xforce.ibmcloud.com/vulnerabilities/86418 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM95738
CVE ID: CVE-2013-4043 State: PUBLISHED Published: 2014-02-01T15:00:00 Last Updated: 2024-08-06T16:30:49.836Z Vendors: n/a Products: n/a Problem Types: n/a Description: The server in IBM SPSS Collaboration and Deployment Services 4.x before 4.2.1.3 IF3, 5.x before 5.0 FP3, and 6.x before 6.0 IF1 allows remote attackers to read arbitrary files via an unspecified HTTP request. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/86419 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI07828 - http://www-01.ibm.com/support/docview.wss?uid=swg21661169
CVE ID: CVE-2013-4044 State: PUBLISHED Published: 2013-12-21T11:00:00 Last Updated: 2024-08-06T16:30:49.878Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM SPSS Collaboration and Deployment Services 4.2.1 before 4.2.1.3 IF3 and 5.0 before FP3 allows remote authenticated users to read application log files via a direct HTTP request. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21660191 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM95817 - https://exchange.xforce.ibmcloud.com/vulnerabilities/86420
CVE ID: CVE-2013-4045 State: PUBLISHED Published: 2013-12-21T11:00:00 Last Updated: 2024-08-06T16:30:49.868Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Portal application in IBM SPSS Collaboration and Deployment Services 4.2.1 before 4.2.1.3 IF3 and 5.0 before FP3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21660191 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM95817 - https://exchange.xforce.ibmcloud.com/vulnerabilities/86421
CVE ID: CVE-2013-4046 State: PUBLISHED Published: 2013-12-21T11:00:00 Last Updated: 2024-08-06T16:30:49.905Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in IBM SPSS Collaboration and Deployment Services 4.2.1 before 4.2.1.3 IF3 and 5.0 before FP3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/86439 - http://www-01.ibm.com/support/docview.wss?uid=swg21660191 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM95817
CVE ID: CVE-2013-4047 State: PUBLISHED Published: 2013-09-16T16:00:00 Last Updated: 2024-08-06T16:30:49.849Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM SPSS Analytical Decision Management 6.1 before IF1, 6.2 before IF1, and 7.0 before FP1 IF6 allows remote attackers to inject arbitrary web script or HTML via a crafted link. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/86440 - http://www-01.ibm.com/support/docview.wss?uid=swg21648929
CVE ID: CVE-2013-4048 State: PUBLISHED Published: 2013-09-16T16:00:00 Last Updated: 2024-08-06T16:30:49.856Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM SPSS Analytical Decision Management 6.1 before IF1, 6.2 before IF1, and 7.0 before FP1 IF6 allows remote authenticated users to inject arbitrary web script or HTML via vectors involving addition of script to a page. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21648929 - https://exchange.xforce.ibmcloud.com/vulnerabilities/86441
CVE ID: CVE-2013-4049 State: PUBLISHED Published: 2013-09-16T16:00:00 Last Updated: 2024-08-06T16:30:49.880Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in IBM SPSS Analytical Decision Management 6.1 before IF1, 6.2 before IF1, and 7.0 before FP1 IF6 allows remote authenticated users to execute arbitrary code by uploading and accessing a JSP file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/86442 - http://www-01.ibm.com/support/docview.wss?uid=swg21648929
CVE ID: CVE-2013-4050 State: PUBLISHED Published: 2013-11-08T02:00:00 Last Updated: 2024-08-06T16:30:49.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in webadmin.nsf in Domino Web Administrator in IBM Domino 8.5 and 9.0 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/86433 - http://www-01.ibm.com/support/docview.wss?uid=swg21652988
CVE ID: CVE-2013-4051 State: PUBLISHED Published: 2013-11-08T02:00:00 Last Updated: 2024-08-06T16:30:49.873Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in webadmin.nsf in Domino Web Administrator in IBM Domino 8.5 and 9.0 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2013-4055. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/86503 - http://www-01.ibm.com/support/docview.wss?uid=swg21652988
CVE ID: CVE-2013-4052 State: PUBLISHED Published: 2013-09-20T21:00:00 Last Updated: 2024-08-06T16:30:49.883Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the UDDI Administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.31, 8.0 before 8.0.0.8, and 8.5 before 8.5.5.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/86504 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM91892 - http://www.ibm.com/support/docview.wss?uid=swg21647522
CVE ID: CVE-2013-4053 State: PUBLISHED Published: 2013-09-20T21:00:00 Last Updated: 2024-08-06T16:30:49.886Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WS-Security implementation in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.31, 8.0 before 8.0.0.8, and 8.5 before 8.5.5.1, and WAS Feature Pack for Web Services 6.1 before 6.1.0.47, when a trust store is configured for XML Digital Signatures, does not properly verify X.509 certificates, which allows remote attackers to obtain privileged access via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1PM90949 -
ional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1PM90949 - https://exchange.xforce.ibmcloud.com/vulnerabilities/86505 - http://www.ibm.com/support/docview.wss?uid=swg21647522 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM91521
CVE ID: CVE-2013-4054 State: PUBLISHED Published: 2014-03-02T02:00:00 Last Updated: 2024-08-06T16:30:50.017Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in WMQ Telemetry in IBM WebSphere MQ 7.5 before 7.5.0.3 allows remote attackers to read arbitrary files via a crafted URI. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21664550 - https://exchange.xforce.ibmcloud.com/vulnerabilities/86506
CVE ID: CVE-2013-4055 State: PUBLISHED Published: 2013-11-08T02:00:00 Last Updated: 2024-08-06T16:30:49.919Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in webadmin.nsf in Domino Web Administrator in IBM Domino 8.5 and 9.0 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2013-4051. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/86544 - http://www-01.ibm.com/support/docview.wss?uid=swg21652988
CVE ID: CVE-2013-4056 State: PUBLISHED Published: 2013-10-13T10:00:00 Last Updated: 2024-08-06T16:30:49.899Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the Data Quality Console and Information Analyzer components in IBM InfoSphere Information Server 8.7 through FP2 and 9.1 through 9.1.2.0 allows remote attackers to hijack the authentication of arbitrary users. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/86545 - http://www-01.ibm.com/support/docview.wss?uid=swg21652413
CVE ID: CVE-2013-4057 State: PUBLISHED Published: 2014-03-16T10:00:00 Last Updated: 2024-08-06T16:30:49.966Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the XML Pack in IBM InfoSphere Information Server 8.5.x through 8.5 FP3, 8.7.x through 8.7 FP2, and 9.1.x through 9.1.2.0 allows remote attackers to hijack the authentication of arbitrary users. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1JR49200 - http://www.securityfocus.com/bid/66154 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR48815 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR49206 -
http://www-01.ibm.com/support/docview.wss?uid=swg1JR48815 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR49206 - http://www-01.ibm.com/support/docview.wss?uid=swg21666684 - https://exchange.xforce.ibmcloud.com/vulnerabilities/86546
CVE ID: CVE-2013-4058 State: PUBLISHED Published: 2014-03-16T10:00:00 Last Updated: 2024-08-06T16:30:49.895Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in IBM InfoSphere Information Server 8.x through 8.5 FP3, 8.7.x through 8.7 FP2, and 9.1.x through 9.1.2.0 allow remote authenticated users to execute arbitrary SQL commands via unspecified interfaces. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1JR49200 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR48815 - https://exchange.xforce.ibmcloud.com/vulnerabilities/86547 - http://www-01.ibm.com/support/docview.wss?uid
swg1JR48815 - https://exchange.xforce.ibmcloud.com/vulnerabilities/86547 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR49206 - http://www.securityfocus.com/bid/66155 - http://www-01.ibm.com/support/docview.wss?uid=swg21666684
CVE ID: CVE-2013-4059 State: PUBLISHED Published: 2014-03-16T10:00:00 Last Updated: 2024-08-06T16:30:49.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in IBM InfoSphere Information Server 8.x through 8.5 FP3, 8.7.x through 8.7 FP2, and 9.1.x through 9.1.2.0 allow remote attackers to inject arbitrary web script or HTML via unspecified interfaces. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1JR49200 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR48815 - https://exchange.xforce.ibmcloud.com/vulnerabilities/86548 - http://www-01.ibm.com/support/docview
wss?uid=swg1JR48815 - https://exchange.xforce.ibmcloud.com/vulnerabilities/86548 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR49206 - http://www.securityfocus.com/bid/66151 - http://www-01.ibm.com/support/docview.wss?uid=swg21666684
CVE ID: CVE-2013-4061 State: PUBLISHED Published: 2013-09-09T01:00:00 Last Updated: 2024-08-06T16:30:50.215Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Rational Policy Tester 8.5 before 8.5.0.5 does not properly check authorization for changes to the set of authentication hosts, which allows remote authenticated users to perform spoofing attacks involving an HTTP redirect via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21648481 - https://exchange.xforce.ibmcloud.com/vulnerabilities/86585
CVE ID: CVE-2013-4062 State: PUBLISHED Published: 2013-09-09T01:00:00 Last Updated: 2024-08-06T16:30:50.130Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Rational Policy Tester 8.5 before 8.5.0.5 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof Jazz Team servers, obtain sensitive information, and modify the client-server data stream via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21648481 - https://exchange.xforce.ibmcloud.com/vulnerabilities/86586
CVE ID: CVE-2013-4063 State: PUBLISHED Published: 2013-12-21T11:00:00 Last Updated: 2024-08-06T16:30:50.013Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in iNotes in IBM Domino 8.5.x before 8.5.3 FP6 and 9.0.x before 9.0.1 allows remote attackers to inject arbitrary web script or HTML via active content in an e-mail message, aka SPRs PTHN9AQMV7 and TCLE98ZKRP. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21659959 - https://exchange.xforce.ibmcloud.com/vulnerabilities/86594
CVE ID: CVE-2013-4064 State: PUBLISHED Published: 2013-12-21T11:00:00 Last Updated: 2024-08-06T16:30:49.904Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in iNotes in IBM Domino 8.5.x before 8.5.3 FP6 and 9.0.x before 9.0.1, when ultra-light mode is enabled, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, aka SPR PTHN9ARMFA. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/86595 - http://www-01.ibm.com/support/docview.wss?uid=swg21659959
CVE ID: CVE-2013-4065 State: PUBLISHED Published: 2013-12-21T11:00:00 Last Updated: 2024-08-06T16:30:49.922Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in iNotes in IBM Domino 8.5.x before 8.5.3 FP6 and 9.0.x before 9.0.1, when ultra-light mode is enabled, allows remote attackers to inject arbitrary web script or HTML via active content in an e-mail message, aka SPR TCLE98ZKRP. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/86596 - http://www-01.ibm.com/support/docview.wss?uid=swg21659959
CVE ID: CVE-2013-4066 State: PUBLISHED Published: 2013-10-02T22:00:00 Last Updated: 2024-08-06T16:30:50.053Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM InfoSphere Information Server 8.0, 8.1, 8.5 through FP3, 8.7, and 9.1 allows remote attackers to conduct clickjacking attacks by creating an overlay interface on top of the Web Console interface. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21651343 - https://exchange.xforce.ibmcloud.com/vulnerabilities/86597 - http://www.securityfocus.com/bid/62767
CVE ID: CVE-2013-4067 State: PUBLISHED Published: 2013-10-02T22:00:00 Last Updated: 2024-08-06T16:30:49.916Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM InfoSphere Information Server 8.0, 8.1, 8.5 through FP3, 8.7, and 9.1 allows remote attackers to hijack sessions and read cookie values, or conduct phishing attacks to capture credentials, via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/62768 - http://www.ibm.com/support/docview.wss?uid=swg21651343 - https://exchange.xforce.ibmcloud.com/vulnerabilities/86598
CVE ID: CVE-2013-4068 State: PUBLISHED Published: 2013-09-20T15:00:00 Last Updated: 2024-08-06T16:30:49.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in iNotes in IBM Domino 8.5.3 before FP5 IF1 and 9.0 before IF4 allows remote authenticated users to execute arbitrary code via unspecified vectors, aka SPR PTHN9ADPA8. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21650034 - https://exchange.xforce.ibmcloud.com/vulnerabilities/86599 - http://www-01.ibm.com/support/docview.wss?uid=swg21649476 - http://www-01.ibm.com/support/docview.wss?uid=swg21650146
CVE ID: CVE-2013-4069 State: PUBLISHED Published: 2013-12-21T11:00:00 Last Updated: 2024-08-06T16:30:49.888Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Portal application in IBM SPSS Collaboration and Deployment Services 4.2.1 before 4.2.1.3 IF3 and 5.0 before FP3 allows remote attackers to read arbitrary files via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21660191 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM95817 - https://exchange.xforce.ibmcloud.com/vulnerabilities/86
91 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM95817 - https://exchange.xforce.ibmcloud.com/vulnerabilities/86621
CVE ID: CVE-2013-4070 State: PUBLISHED Published: 2013-12-21T11:00:00 Last Updated: 2024-08-06T16:30:49.887Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Portal application in IBM SPSS Collaboration and Deployment Services 4.2.1 before 4.2.1.3 IF3 and 5.0 before FP3 allows remote attackers to discover an internal password via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21660191 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM95817 - https://exchange.xforce.ibmcloud.com/vulnerabilities/86656
CVE ID: CVE-2013-4073 State: PUBLISHED Published: 2013-08-18T01:00:00 Last Updated: 2024-08-06T16:30:49.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: The OpenSSL::SSL.verify_certificate_identity function in lib/openssl/ssl.rb in Ruby 1.8 before 1.8.7-p374, 1.9 before 1.9.3-p448, and 2.0 before 2.0.0-p247 does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408. Additional Analyst Notes: - CVE Program Container: References: - http://ww
Authority, a related issue to CVE-2009-2408. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2013/dsa-2738 - http://www.ubuntu.com/usn/USN-1902-1 - http://forums.interworx.com/threads/8000-InterWorx-Version-5-0-14-Released-on-Beta-Channel%21 - http://rhn.redhat.com/errata/RHSA-2013-1090.html - http://rhn.redhat.com/errata/RHSA-2013-1103.html - http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html - http://support.apple.com/kb/HT6150 - https://puppet.com/security/cve/cve-2013-4073 - https://bugzilla.redhat.com/show_bug.cgi?id=979251 - http://lists.opensuse.org/opensuse-updates/2013-07/msg00042.html - http://rhn.redhat.com/err
om/show_bug.cgi?id=979251 - http://lists.opensuse.org/opensuse-updates/2013-07/msg00042.html - http://rhn.redhat.com/errata/RHSA-2013-1137.html - http://lists.opensuse.org/opensuse-updates/2013-07/msg00044.html - http://www.debian.org/security/2013/dsa-2809 - http://www.ruby-lang.org/en/news/2013/06/27/hostname-check-bypassing-vulnerability-in-openssl-client-cve-2013-4073/
CVE ID: CVE-2013-4074 State: PUBLISHED Published: 2013-06-09T21:00:00 Last Updated: 2024-08-06T16:30:49.897Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dissect_capwap_data function in epan/dissectors/packet-capwap.c in the CAPWAP dissector in Wireshark 1.6.x before 1.6.16 and 1.8.x before 1.8.8 incorrectly uses a -1 data value to represent an error condition, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/33556 - http://www.wireshark.org/docs/relnotes/wireshark-1.8.8.html - http://secunia.com/advisories/53762 - http://ww
ts/33556 - http://www.wireshark.org/docs/relnotes/wireshark-1.8.8.html - http://secunia.com/advisories/53762 - http://www.wireshark.org/security/wnpa-sec-2013-32.html - http://secunia.com/advisories/54425 - http://anonsvn.wireshark.org/viewvc?view=revision&revision=43716 - http://packetstormsecurity.com/files/126848/Wireshark-CAPWAP-Dissector-Denial-Of-Service.html - http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml - http://lists.opensuse.org/opensuse-updates/2013-06/msg00196.html - http://www.wireshark.org/docs/relnotes/wireshark-1.6.16.html - http://www.debian.org/security/2013/dsa-2709 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8725 - http://osvdb.org/show/osvdb/94091
g/security/2013/dsa-2709 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8725 - http://osvdb.org/show/osvdb/94091 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16698 - http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-capwap.c?r1=43716&r2=43715&pathrev=43716 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:172 - http://lists.opensuse.org/opensuse-updates/2013-06/msg00194.html
CVE ID: CVE-2013-4075 State: PUBLISHED Published: 2013-06-09T21:00:00 Last Updated: 2024-08-06T16:30:50.025Z Vendors: n/a Products: n/a Problem Types: n/a Description: epan/dissectors/packet-gmr1_bcch.c in the GMR-1 BCCH dissector in Wireshark 1.8.x before 1.8.8 does not properly initialize memory, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2017-0631.html - http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-gmr1_bcch.c?r1=44674&r2=44673&pathrev=44674 - http://www.wireshark.org/docs/relnotes/wireshark-1.8.8.html - http://sec
t-gmr1_bcch.c?r1=44674&r2=44673&pathrev=44674 - http://www.wireshark.org/docs/relnotes/wireshark-1.8.8.html - http://secunia.com/advisories/53762 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7664 - http://secunia.com/advisories/54425 - http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml - http://lists.opensuse.org/opensuse-updates/2013-06/msg00196.html - http://www.debian.org/security/2013/dsa-2709 - http://www.wireshark.org/security/wnpa-sec-2013-33.html - http://anonsvn.wireshark.org/viewvc?view=revision&revision=44674 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8726 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16859 - ht
show_bug.cgi?id=8726 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16859 - http://lists.opensuse.org/opensuse-updates/2013-06/msg00194.html