Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-2500 State: PUBLISHED Published: 2009-10-14T10:00:00 Last Updated: 2024-08-07T05:52:14.730Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer, Word Viewer 2003 Gold and SP3, Office Excel Viewer 2003 Gold and SP3, Office Excel Viewer, Office PowerPoint Viewer 2007 Gold, SP1, and SP2, Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2, Expression Web, Expression Web 2, Groove 2007 Gold and SP1, Works 8.5, SQL Serve
werPoint 2007 File Formats SP1 and SP2, Expression Web, Expression Web 2, Groove 2007 Gold and SP1, Works 8.5, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2 and SP3, Report Viewer 2005 SP1, Report Viewer 2008 Gold and SP1, and Forefront Client Security 1.0 allows remote attackers to execute arbitrary code via a crafted WMF image file, aka "GDI+ WMF Integer Overflow Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5967 - http://www.us-cert.gov/cas/techalerts/TA09-286A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-062
CVE ID: CVE-2009-2501 State: PUBLISHED Published: 2009-10-14T10:00:00 Last Updated: 2024-08-07T05:52:14.827Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer, Word Viewer 2003 Gold and SP3, Office Excel Viewer 2003 Gold and SP3, Office Excel Viewer, Office PowerPoint Viewer 2007 Gold, SP1, and SP2, Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2, Expression Web, Expression Web 2, Groove 2007 Gold and SP1, Works 8.5,
el, and PowerPoint 2007 File Formats SP1 and SP2, Expression Web, Expression Web 2, Groove 2007 Gold and SP1, Works 8.5, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2 and SP3, Report Viewer 2005 SP1, Report Viewer 2008 Gold and SP1, and Forefront Client Security 1.0 allows remote attackers to execute arbitrary code via a crafted PNG image file, aka "GDI+ PNG Heap Overflow Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA09-286A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5800 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-062
CVE ID: CVE-2009-2502 State: PUBLISHED Published: 2009-10-14T10:00:00 Last Updated: 2024-10-21T16:34:33.080Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer, Word Viewer 2003 Gold and SP3, Office Excel Viewer 2003 Gold and SP3, Office Excel Viewer, Office PowerPoint Viewer 2007 Gold, SP1, and SP2, Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2, Expression Web, Expression Web 2, Groove 2007 Gold and SP1, Works 8.5, SQL Server
erPoint 2007 File Formats SP1 and SP2, Expression Web, Expression Web 2, Groove 2007 Gold and SP1, Works 8.5, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2 and SP3, Report Viewer 2005 SP1, Report Viewer 2008 Gold and SP1, and Forefront Client Security 1.0 allows remote attackers to execute arbitrary code via a crafted TIFF image file, aka "GDI+ TIFF Buffer Overflow Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.us-cert.gov/cas/techalerts/TA09-286A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-062 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre
rity-updates/securitybulletins/2009/ms09-062 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5898
CVE ID: CVE-2009-2503 State: PUBLISHED Published: 2009-10-14T10:00:00 Last Updated: 2024-08-07T05:52:14.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Windows Server 2003 SP2, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer, Word Viewer 2003 Gold and SP3, Office Excel Viewer 2003 Gold and SP3, Office Excel Viewer, Office PowerPoint Viewer 2007 Gold, SP1, and SP2, Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2, Expression Web, Expression Web 2, Groove 2007 Gold and SP1, Works 8.5, SQL
nd PowerPoint 2007 File Formats SP1 and SP2, Expression Web, Expression Web 2, Groove 2007 Gold and SP1, Works 8.5, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2 and SP3, Report Viewer 2005 SP1, Report Viewer 2008 Gold and SP1, and Forefront Client Security 1.0 does not properly allocate an unspecified buffer, which allows remote attackers to execute arbitrary code via a crafted TIFF image file that triggers memory corruption, aka "GDI+ TIFF Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA09-286A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-062 - ht
v/cas/techalerts/TA09-286A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-062 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6491
CVE ID: CVE-2009-2504 State: PUBLISHED Published: 2009-10-14T10:00:00 Last Updated: 2024-08-07T05:52:14.775Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in unspecified APIs in GDI+ in Microsoft .NET Framework 1.1 SP1, .NET Framework 2.0 SP1 and SP2, Windows XP SP2 and SP3, Windows Server 2003 SP2, Vista Gold and SP1, Server 2008 Gold, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer, Word Viewer 2003 Gold and SP3, Office Excel Viewer 2003 Gold and SP3, Office Excel Viewer, Office PowerPoint Viewer 2007 Gold, SP1, and SP2, Office Compatibility Pack for Word, Excel, an
P3, Office Excel Viewer, Office PowerPoint Viewer 2007 Gold, SP1, and SP2, Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2, Expression Web, Expression Web 2, Groove 2007 Gold and SP1, Works 8.5, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2 and SP3, Report Viewer 2005 SP1, Report Viewer 2008 Gold and SP1, and Forefront Client Security 1.0 allow remote attackers to execute arbitrary code via (1) a crafted XAML browser application (XBAP), (2) a crafted ASP.NET application, or (3) a crafted .NET Framework application, aka "GDI+ .NET API Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.o
GDI+ .NET API Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6282 - http://www.us-cert.gov/cas/techalerts/TA09-286A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-062
CVE ID: CVE-2009-2505 State: PUBLISHED Published: 2009-12-09T18:00:00 Last Updated: 2024-08-07T05:52:14.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Internet Authentication Service (IAS) in Microsoft Windows Vista SP2 and Server 2008 SP2 does not properly validate MS-CHAP v2 Protected Extensible Authentication Protocol (PEAP) authentication requests, which allows remote attackers to execute arbitrary code via crafted structures in a malformed request, aka "Internet Authentication Service Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-071 - h
E Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-071 - http://www.us-cert.gov/cas/techalerts/TA09-342A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6063 - http://www.securitytracker.com/id?1023291
CVE ID: CVE-2009-2506 State: PUBLISHED Published: 2009-12-09T18:00:00 Last Updated: 2024-08-07T05:52:14.703Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the text converters in Microsoft Office Word 2002 SP3 and 2003 SP3; Works 8.5; Office Converter Pack; and WordPad in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to execute arbitrary code via a DOC file with an invalid number of property names in the DocumentSummaryInformation stream, which triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Ade
CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5846 - http://www.securityfocus.com/bid/37216 - http://www.us-cert.gov/cas/techalerts/TA09-342A.html - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=834 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-073 - http://support.avaya.com/css/P8/documents/100070184
CVE ID: CVE-2009-2507 State: PUBLISHED Published: 2009-10-14T10:00:00 Last Updated: 2024-08-07T05:52:14.803Z Vendors: n/a Products: n/a Problem Types: n/a Description: A certain ActiveX control in the Indexing Service in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not properly process URLs, which allows remote attackers to execute arbitrary programs via unspecified vectors that cause a "vulnerable binary" to load and run, aka "Memory Corruption in Indexing Service Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA09-286A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mi
//www.us-cert.gov/cas/techalerts/TA09-286A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6042 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-057
CVE ID: CVE-2009-2508 State: PUBLISHED Published: 2009-12-09T18:00:00 Last Updated: 2024-08-07T05:52:14.749Z Vendors: n/a Products: n/a Problem Types: n/a Description: The single sign-on implementation in Active Directory Federation Services (ADFS) in Microsoft Windows Server 2003 SP2 and Server 2008 Gold and SP2 does not properly remove credentials at the end of a network session, which allows physically proximate attackers to obtain the credentials of a previous user of the same web browser by using data from the browser's cache, aka "Single Sign On Spoofing in ADFS Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA09-3
rability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA09-342A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-070 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5882
CVE ID: CVE-2009-2509 State: PUBLISHED Published: 2009-12-09T18:00:00 Last Updated: 2024-08-07T05:52:14.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: Active Directory Federation Services (ADFS) in Microsoft Windows Server 2003 SP2 and Server 2008 Gold and SP2 does not properly validate headers in HTTP requests, which allows remote authenticated users to execute arbitrary code via a crafted request to an IIS web server, aka "Remote Code Execution in ADFS Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6441 - http://www.us-cert.gov/cas/techalerts/TA09-342A.h
.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6441 - http://www.us-cert.gov/cas/techalerts/TA09-342A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-070
CVE ID: CVE-2009-2510 State: PUBLISHED Published: 2009-10-14T10:00:00 Last Updated: 2024-08-07T05:52:14.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CryptoAPI component in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7, as used by Internet Explorer and other applications, does not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, aka "Null Truncat
spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, aka "Null Truncation in X.509 Common Name Vulnerability," a related issue to CVE-2009-2408. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36475 - http://www.us-cert.gov/cas/techalerts/TA09-286A.html - http://www.wired.com/threatlevel/2009/07/kaminsky/ - http://www.networkworld.com/news/2009/091709-microsoft-ie-security-hole.html - http://www.networkworld.com/news/2009/073009-more-holes-found-in-webs.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5842 - https://docs.microsoft.com/en-us/security
security.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5842 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-056
CVE ID: CVE-2009-2511 State: PUBLISHED Published: 2009-10-14T10:00:00 Last Updated: 2024-08-07T05:52:14.871Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the CryptoAPI component in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows man-in-the-middle attackers to spoof arbitrary SSL servers and other entities via an X.509 certificate that has a malformed ASN.1 Object Identifier (OID) and was issued by a legitimate Certification Authority, aka "Integer Overflow in X.509 Object Identifiers Vulnerability." Additional Analyst Notes: - CVE Progra
tion Authority, aka "Integer Overflow in X.509 Object Identifiers Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA09-286A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6186 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-056
CVE ID: CVE-2009-2512 State: PUBLISHED Published: 2009-11-11T19:00:00 Last Updated: 2025-01-21T16:39:31.357Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Web Services on Devices API (WSDAPI) in Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 does not properly process the headers of WSD messages, which allows remote attackers to execute arbitrary code via a crafted (1) message or (2) response, aka "Web Services on Devices API Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-063 - http://www.us-cert.gov/cas/tech
s: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-063 - http://www.us-cert.gov/cas/techalerts/TA09-314A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6079
CVE ID: CVE-2009-2513 State: PUBLISHED Published: 2009-11-11T19:00:00 Last Updated: 2024-08-07T05:52:14.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Graphics Device Interface (GDI) in win32k.sys in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 does not properly validate user-mode input, which allows local users to gain privileges via a crafted application, aka "Win32k Insufficient Data Validation Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-065 - https://oval.cisecurity.org/
nces: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-065 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6277 - http://www.us-cert.gov/cas/techalerts/TA09-314A.html
CVE ID: CVE-2009-2514 State: PUBLISHED Published: 2009-11-11T19:00:00 Last Updated: 2024-08-07T05:52:14.742Z Vendors: n/a Products: n/a Problem Types: n/a Description: win32k.sys in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not correctly parse font code during construction of a directory-entry table, which allows remote attackers to execute arbitrary code via a crafted Embedded OpenType (EOT) font, aka "Win32k EOT Parsing Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-065 - http://www.us-cert.gov/cas/techalerts/TA09-314A.html - https://oval.
/security-updates/securitybulletins/2009/ms09-065 - http://www.us-cert.gov/cas/techalerts/TA09-314A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6406
CVE ID: CVE-2009-2515 State: PUBLISHED Published: 2009-10-14T10:00:00 Last Updated: 2024-08-07T05:52:14.788Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer underflow in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows local users to gain privileges via a crafted application that triggers an incorrect truncation of a 64-bit integer to a 32-bit integer, aka "Windows Kernel Integer Underflow Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-058 - http://www.us-cert.gov/cas/techaler
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-058 - http://www.us-cert.gov/cas/techalerts/TA09-286A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6506
CVE ID: CVE-2009-2516 State: PUBLISHED Published: 2009-10-14T10:00:00 Last Updated: 2025-01-21T16:36:44.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold and SP1, and Server 2008 Gold does not properly validate data sent from user mode, which allows local users to gain privileges via a crafted PE .exe file that triggers a NULL pointer dereference during chain traversal, aka "Windows Kernel NULL Pointer Dereference Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ov
ner: - CISA ADP Vulnrichment: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6264 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-058 - http://www.us-cert.gov/cas/techalerts/TA09-286A.html - http://www.nsfocus.com/en/advisories/0903.html
CVE ID: CVE-2009-2517 State: PUBLISHED Published: 2009-10-14T10:00:00 Last Updated: 2024-08-07T05:52:14.821Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel in Microsoft Windows Server 2003 SP2 does not properly handle unspecified exceptions when an error condition occurs, which allows local users to cause a denial of service (reboot) via a crafted application, aka "Windows Kernel Exception Handler Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-058 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6512 - http://www.us-cer
09-058 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6512 - http://www.us-cert.gov/cas/techalerts/TA09-286A.html
CVE ID: CVE-2009-2518 State: PUBLISHED Published: 2009-10-14T10:00:00 Last Updated: 2024-08-07T05:52:14.811Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in GDI+ in Microsoft Office XP SP3 allows remote attackers to execute arbitrary code via an Office document with a bitmap (aka BMP) image that triggers memory corruption, aka "Office BMP Integer Overflow Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA09-286A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6430 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-062
CVE ID: CVE-2009-2519 State: PUBLISHED Published: 2009-09-08T22:00:00 Last Updated: 2024-08-07T05:52:15.190Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DHTML Editing Component ActiveX control in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not properly format HTML markup, which allows remote attackers to execute arbitrary code via a crafted web site that triggers "system state" corruption, aka "DHTML Editing Component ActiveX Control Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36280 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-046 - http://secun
tyfocus.com/bid/36280 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-046 - http://secunia.com/advisories/36592 - http://www.securitytracker.com/id?1022843 - http://www.us-cert.gov/cas/techalerts/TA09-251A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6271
CVE ID: CVE-2009-2520 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2009-2521 State: PUBLISHED Published: 2009-09-04T10:00:00 Last Updated: 2024-08-07T05:52:14.793Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack consumption vulnerability in the FTP Service in Microsoft Internet Information Services (IIS) 5.0 through 7.0 allows remote authenticated users to cause a denial of service (daemon crash) via a list (ls) -R command containing a wildcard that references a subdirectory, followed by a .. (dot dot), aka "IIS FTP Service DoS Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6508 - http://support.microsoft.com/
ps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6508 - http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ975191 - http://www.us-cert.gov/cas/techalerts/TA09-286A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-053 - http://archives.neohapsis.com/archives/fulldisclosure/2009-09/0040.html
CVE ID: CVE-2009-2522 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.