Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-2955 State: PUBLISHED Published: 2009-08-24T15:00:00 Last Updated: 2024-08-07T06:07:37.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome 1.0.154.48 and earlier allows remote attackers to cause a denial of service (CPU consumption and application hang) via JavaScript code with a long string value for the hash property (aka location.hash), a related issue to CVE-2008-5715. Additional Analyst Notes: - CVE Program Container: References: - http://websecurity.com.ua/3424/ - http://www.securityfocus.com/archive/1/506006/100/0/threaded
CVE ID: CVE-2009-2956 State: PUBLISHED Published: 2009-08-24T15:00:00 Last Updated: 2024-08-07T06:07:37.329Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) Net.Commerce and (2) Net.Data components in IBM WebSphere Commerce Suite store sensitive information under the web root with insufficient access control, which allows remote attackers to discover passwords, and database and filesystem details, via direct requests for configuration files. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/52616
CVE ID: CVE-2009-2957 State: PUBLISHED Published: 2009-09-02T15:00:00 Last Updated: 2024-08-07T06:07:37.403Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the tftp_request function in tftp.c in dnsmasq before 2.50, when --enable-tftp is used, might allow remote attackers to execute arbitrary code via a long filename in a TFTP packet, as demonstrated by a read (aka RRQ) request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36121 - http://secunia.com/advisories/36563 - http://www.ubuntu.com/usn/USN-827-1 - https://bugzilla.redhat.com/show_bug.cgi?id=519020 - https://oval.cisecurity.org/repository/se
buntu.com/usn/USN-827-1 - https://bugzilla.redhat.com/show_bug.cgi?id=519020 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10538 - http://www.thekelleys.org.uk/dnsmasq/CHANGELOG - http://www.coresecurity.com/content/dnsmasq-vulnerabilities - https://rhn.redhat.com/errata/RHSA-2010-0095.html - http://www.redhat.com/support/errata/RHSA-2009-1238.html
CVE ID: CVE-2009-2958 State: PUBLISHED Published: 2009-09-02T15:00:00 Last Updated: 2024-08-07T06:07:37.397Z Vendors: n/a Products: n/a Problem Types: n/a Description: The tftp_request function in tftp.c in dnsmasq before 2.50, when --enable-tftp is used, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a TFTP read (aka RRQ) request with a malformed blksize option. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36563 - http://www.ubuntu.com/usn/USN-827-1 - https://bugzilla.redhat.com/show_bug.cgi?id=519020 - http://www.securityfocus.com/bid/36120 - http://www.thekelleys.org.uk/dnsmasq/CHANGELO
dhat.com/show_bug.cgi?id=519020 - http://www.securityfocus.com/bid/36120 - http://www.thekelleys.org.uk/dnsmasq/CHANGELOG - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9816 - http://www.coresecurity.com/content/dnsmasq-vulnerabilities - https://rhn.redhat.com/errata/RHSA-2010-0095.html - http://www.redhat.com/support/errata/RHSA-2009-1238.html
CVE ID: CVE-2009-2959 State: PUBLISHED Published: 2009-08-25T17:00:00Z Last Updated: 2024-09-16T23:52:07.004Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the waterfall web status view (status/web/waterfall.py) in Buildbot 0.7.6 through 0.7.11p1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00985.html - http://sourceforge.net/mailarchive/message.php?msg_name=42338fbf0908121232mb790a6cn787ac3de90e8bc31%40mail.gmail.com - https://www.redhat.com/archives/fedora-p
age.php?msg_name=42338fbf0908121232mb790a6cn787ac3de90e8bc31%40mail.gmail.com - https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00978.html - http://www.vupen.com/english/advisories/2009/2352 - http://buildbot.net/trac#SecurityAlert - http://secunia.com/advisories/36352 - http://secunia.com/advisories/36418 - http://www.securityfocus.com/bid/36100
CVE ID: CVE-2009-2960 State: PUBLISHED Published: 2009-08-25T17:00:00 Last Updated: 2024-08-07T06:07:37.618Z Vendors: n/a Products: n/a Problem Types: n/a Description: CuteFlow 2.10.3 and 2.11.0_c does not properly restrict access to pages/edituser.php, which allows remote attackers to modify usernames and passwords via a direct request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/506000/100/0/threaded - http://secunia.com/advisories/36349 - http://www.securityfocus.com/bid/36099
CVE ID: CVE-2009-2961 State: PUBLISHED Published: 2009-08-25T17:00:00 Last Updated: 2024-08-07T06:07:37.533Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Thaddy de Konng KOL Player 1.0 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a long URL in a .MP3 playlist file. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9467 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52629
CVE ID: CVE-2009-2962 State: REJECTED Published: 2009-08-20T22:00:00Z Last Updated: 2024-09-17T00:36:11.042Z Description: No description available.
CVE ID: CVE-2009-2963 State: PUBLISHED Published: 2009-08-25T17:00:00 Last Updated: 2024-08-07T06:07:37.442Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the update feature in Toolbar Uninstaller 1.0.2 allows remote attackers to force the download and execution of arbitrary files via attack vectors related to a "malformed update url and a malformed update website." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/52607 - http://www.decomputeur.nl/pdf/security-risk-found.pdf - http://secunia.com/advisories/36366
CVE ID: CVE-2009-2964 State: PUBLISHED Published: 2009-08-25T17:00:00 Last Updated: 2024-08-07T06:07:37.413Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in SquirrelMail 1.4.19 and earlier, and NaSMail before 1.7, allow remote attackers to hijack the authentication of unspecified victims via features such as send message and change preferences, related to (1) functions/mailbox_display.php, (2) src/addrbook_search_html.php, (3) src/addressbook.php, (4) src/compose.php, (5) src/folders.php, (6) src/folders_create.php, (7) src/folders_delete.php, (8) src/folders_rename_do.php, (9) src/folders_rename_getname.php, (10) src/f
rs_create.php, (7) src/folders_delete.php, (8) src/folders_rename_do.php, (9) src/folders_rename_getname.php, (10) src/folders_subscribe.php, (11) src/move_messages.php, (12) src/options.php, (13) src/options_highlight.php, (14) src/options_identities.php, (15) src/options_order.php, (16) src/search.php, and (17) src/vcard.php. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html - https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00954.html - https://gna.org/forum/forum.php?forum_id=2146 - http://www.vupen.com/english/advisories/2010/1481 - http://download.gna.org/nasmail/nasmail-1.7.z
um.php?forum_id=2146 - http://www.vupen.com/english/advisories/2010/1481 - http://download.gna.org/nasmail/nasmail-1.7.zip - http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail?view=rev&revision=13818 - http://jvn.jp/en/jp/JVN30881447/index.html - http://secunia.com/advisories/34627 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=543818 - http://www.debian.org/security/2010/dsa-2091 - https://bugzilla.redhat.com/show_bug.cgi?id=517312 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:222 - http://support.apple.com/kb/HT4188 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10668 - http://secunia.com/advisories/40220 - http://osvdb
rg/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10668 - http://secunia.com/advisories/40220 - http://osvdb.org/60469 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52406 - http://secunia.com/advisories/40964 - https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00927.html - http://www.vupen.com/english/advisories/2010/2080 - http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail/branches/SM-1_4-STABLE/squirrelmail/doc/ChangeLog?revision=13818&view=markup&pathrev=13818 - http://www.securityfocus.com/bid/36196 - http://secunia.com/advisories/37415 - http://secunia.com/advisories/36363 - http://www.squirrelmail.org/security/issue/2009-08-12 - http:/
/advisories/37415 - http://secunia.com/advisories/36363 - http://www.squirrelmail.org/security/issue/2009-08-12 - http://www.vupen.com/english/advisories/2009/3315 - http://www.osvdb.org/57001 - http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002207.html - http://www.vupen.com/english/advisories/2009/2262
CVE ID: CVE-2009-2965 State: PUBLISHED Published: 2009-08-25T17:00:00 Last Updated: 2024-08-07T06:07:37.414Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in entry/index.jsp in Radvision Scopia 5.7, and possibly other versions before SD 7.0.100, allows remote attackers to inject arbitrary web script or HTML via the page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/506013/100/0/threaded
CVE ID: CVE-2009-2966 State: PUBLISHED Published: 2009-08-25T17:00:00 Last Updated: 2024-08-07T06:07:37.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: avp.exe in Kaspersky Internet Security 9.0.0.459 and Anti-Virus 9.0.0.463 allows remote attackers to cause a denial of service (CPU consumption and network connectivity loss) via an HTTP URL request that contains a large number of dot "." characters. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36405 - http://www.osvdb.org/57173 - http://securityreason.com/achievement_securityalert/66 - http://www.securityfocus.com/bid/36084 - http://www.securitytracker.com/id?1022754 - http://
ievement_securityalert/66 - http://www.securityfocus.com/bid/36084 - http://www.securitytracker.com/id?1022754 - http://www.securitytracker.com/id?1022755 - http://archives.neohapsis.com/archives/fulldisclosure/2009-08/0252.html - http://www.h-online.com/security/Kaspersky-confirm-and-close-DoS-vulnerability--/news/114077 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52571
CVE ID: CVE-2009-2967 State: PUBLISHED Published: 2009-08-26T14:00:00 Last Updated: 2024-08-07T06:07:37.404Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Buildbot 0.7.6 through 0.7.11p2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, different vulnerabilities than CVE-2009-2959. Additional Analyst Notes: - CVE Program Container: References: - https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00985.html - https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00978.html - http://www.vupen.com/english/advisories/2009/2352 - http://sourceforge.net/mail
age-announce/2009-August/msg00978.html - http://www.vupen.com/english/advisories/2009/2352 - http://sourceforge.net/mailarchive/message.php?msg_name=42338fbf0908130837o86b77d6y725233076286226f%40mail.gmail.com - http://buildbot.net/trac#SecurityAlert - http://secunia.com/advisories/36352 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52896 - http://secunia.com/advisories/36418 - http://www.securityfocus.com/bid/36100
CVE ID: CVE-2009-2968 State: PUBLISHED Published: 2009-09-02T17:00:00 Last Updated: 2024-08-07T06:07:37.396Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in a support component in the web interface in VMware Studio 2.0 public beta before build 1017-185256 allows remote attackers to upload files to arbitrary locations via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vmware.com/support/developer/studio/studio20/release_notes.html - http://lists.vmware.com/pipermail/security-announce/2009/000064.html - http://www.securityfocus.com/archive/1/506191/100/0/threaded - https://exchange.xforce.ibmcloud
ounce/2009/000064.html - http://www.securityfocus.com/archive/1/506191/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/52976 - http://www.vmware.com/security/advisories/VMSA-2009-0011.html - http://www.vupen.com/english/advisories/2009/2501 - http://www.securityfocus.com/bid/36199
CVE ID: CVE-2009-2970 State: PUBLISHED Published: 2009-10-19T19:27:00 Last Updated: 2024-08-07T06:07:37.348Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the GetUiDllVersion function in an ActiveX control in UiCheck.dll before 1.0.0.7 in UiTV UiPlayer, as used in BaiduX and other products, allows remote attackers to execute arbitrary code via the filename parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.nsfocus.com/en/advisories/0901.html - http://www.securityfocus.com/archive/1/507236/100/0/threaded
CVE ID: CVE-2009-2972 State: PUBLISHED Published: 2009-08-27T17:00:00 Last Updated: 2024-08-07T06:07:37.445Z Vendors: n/a Products: n/a Problem Types: n/a Description: in.lpd in the print service in Sun Solaris 8 and 9 allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors that trigger a "fork()/exec() bomb." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6225 - http://www.securityfocus.com/bid/36148 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-109320-23-1 - http://secunia.com/advisories/36445 - http://www.vupen.com/english/advisori
arch/document.do?assetkey=1-21-109320-23-1 - http://secunia.com/advisories/36445 - http://www.vupen.com/english/advisories/2009/2417 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-264608-1
CVE ID: CVE-2009-2973 State: PUBLISHED Published: 2009-08-27T17:00:00 Last Updated: 2024-08-07T06:07:37.403Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 2.0.172.43 does not prevent SSL connections to a site with an X.509 certificate signed with the (1) MD2 or (2) MD4 algorithm, which makes it easier for man-in-the-middle attackers to spoof arbitrary HTTPS servers via a crafted certificate, a related issue to CVE-2009-2409. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/2420 - http://secunia.com/advisories/36417 - http://code.google.com/p/chromium/issues/detail?id=18725 - http://googlechromerele
http://secunia.com/advisories/36417 - http://code.google.com/p/chromium/issues/detail?id=18725 - http://googlechromereleases.blogspot.com/2009/08/stable-update-security-fixes.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/52903
CVE ID: CVE-2009-2974 State: PUBLISHED Published: 2009-08-27T17:00:00Z Last Updated: 2024-09-16T21:58:14.478Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome 1.0.154.65, 1.0.154.48, and earlier allows remote attackers to (1) cause a denial of service (application hang) via vectors involving a chromehtml: URI value for the document.location property or (2) cause a denial of service (application hang and CPU consumption) via vectors involving a series of function calls that set a chromehtml: URI value for the document.location property. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2009-08/0217.html - ht
lyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2009-08/0217.html - http://archives.neohapsis.com/archives/bugtraq/2009-08/0236.html - http://websecurity.com.ua/3435/
CVE ID: CVE-2009-2975 State: PUBLISHED Published: 2009-08-27T17:00:00 Last Updated: 2024-08-07T06:07:37.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox 3.5.2 on Windows XP, in some situations possibly involving an incompletely configured protocol handler, does not properly implement setting the document.location property to a value specifying a protocol associated with an external application, which allows remote attackers to cause a denial of service (memory consumption) via vectors involving a series of function calls that set this property, as demonstrated by (1) the chromehtml: protocol and (2) the aim: protocol. Additional Analyst Notes: - CVE Program Con
, as demonstrated by (1) the chromehtml: protocol and (2) the aim: protocol. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/52923 - http://archives.neohapsis.com/archives/bugtraq/2009-08/0234.html - http://archives.neohapsis.com/archives/bugtraq/2009-08/0236.html - http://archives.neohapsis.com/archives/bugtraq/2009-08/0246.html
CVE ID: CVE-2009-2976 State: PUBLISHED Published: 2009-08-27T17:00:00Z Last Updated: 2024-09-16T18:49:52.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Aironet Lightweight Access Point (AP) devices send the contents of certain multicast data frames in cleartext, which allows remote attackers to discover Wireless LAN Controller MAC addresses and IP addresses, and AP configuration details, by sniffing the wireless network. Additional Analyst Notes: - CVE Program Container: References: - http://www.airmagnet.com/assets/AM_Technote_SkyJack_082509.pdf - http://securitytracker.com/id?1022774 - http://www.airmagnet.com/news/press_releases/2009/08252009.php
CVE ID: CVE-2009-2977 State: PUBLISHED Published: 2009-08-27T17:00:00 Last Updated: 2024-08-07T06:07:37.399Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Cisco Security Monitoring, Analysis and Response System (CS-MARS) 6.0.4 and earlier stores cleartext passwords in log/sysbacktrace.## files within error-logs.tar.gz archives, which allows context-dependent attackers to obtain sensitive information by reading these files. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36098 - http://www.vupen.com/english/advisories/2009/2364 - http://www.securityfocus.com/archive/1/505998/100/0/threaded - http://tools.cisco.com/Support/BugT
dvisories/2009/2364 - http://www.securityfocus.com/archive/1/505998/100/0/threaded - http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCtb52450 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52913 - http://www.securityfocus.com/archive/1/505995/100/0/threaded
CVE ID: CVE-2009-2978 State: PUBLISHED Published: 2009-08-27T18:00:00 Last Updated: 2024-08-07T06:07:37.413Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in SugarCRM 4.5.1o and earlier, 5.0.0k and earlier, and 5.2.0g and earlier, allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/52679 - http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000056.html - http://www.sugarcrm.com/forums/showthread.php?t=50907 - http://www.ipa.go.jp/security/vuln/documents/2009/200908_sugarcrm.html - http://www.sugarcrm.com/foru
read.php?t=50907 - http://www.ipa.go.jp/security/vuln/documents/2009/200908_sugarcrm.html - http://www.sugarcrm.com/forums/showthread.php?t=50953 - http://secunia.com/advisories/36423 - http://jvn.jp/en/jp/JVN31035930/index.html - http://www.securityfocus.com/bid/36118
CVE ID: CVE-2009-2979 State: PUBLISHED Published: 2009-10-19T22:00:00 Last Updated: 2024-08-07T06:07:37.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 do not properly perform XMP-XML entity expansion, which allows remote attackers to cause a denial of service via a crafted document. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36638 - http://www.us-cert.gov/cas/techalerts/TA09-286B.html - http://securitytracker.com/id?1023007 - http://www.adobe.com/support/security/bulletins/apsb09-15.html - https://oval.cisecurity.org/repository/sear
d?1023007 - http://www.adobe.com/support/security/bulletins/apsb09-15.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6280 - http://www.vupen.com/english/advisories/2009/2898
CVE ID: CVE-2009-2980 State: PUBLISHED Published: 2009-10-19T22:00:00 Last Updated: 2024-08-07T06:07:37.410Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allows attackers to cause a denial of service or possibly execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36638 - http://www.us-cert.gov/cas/techalerts/TA09-286B.html - http://securitytracker.com/id?1023007 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5964 - http://www.adobe.com/support/se
://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5964 - http://www.adobe.com/support/security/bulletins/apsb09-15.html - http://www.vupen.com/english/advisories/2009/2898
CVE ID: CVE-2009-2981 State: PUBLISHED Published: 2009-10-19T22:00:00 Last Updated: 2024-08-07T06:07:37.517Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 do not properly validate input, which might allow attackers to bypass intended Trust Manager restrictions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36638 - http://www.us-cert.gov/cas/techalerts/TA09-286B.html - http://securitytracker.com/id?1023007 - http://www.adobe.com/support/security/bulletins/apsb09-15.html - https://oval.cisecurity.org/repository/search/definitio
http://www.adobe.com/support/security/bulletins/apsb09-15.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6284 - http://www.vupen.com/english/advisories/2009/2898
CVE ID: CVE-2009-2982 State: PUBLISHED Published: 2009-10-19T22:00:00 Last Updated: 2024-08-07T06:07:37.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: An unspecified certificate in Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 might allow remote attackers to conduct a "social engineering attack" via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36638 - http://www.us-cert.gov/cas/techalerts/TA09-286B.html - http://securitytracker.com/id?1023007 - http://www.adobe.com/support/security/bulletins/apsb09-15.html - https://oval.cisecurity.org/repository/search/definitio
http://www.adobe.com/support/security/bulletins/apsb09-15.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6365 - http://www.vupen.com/english/advisories/2009/2898