Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-2664 State: PUBLISHED Published: 2009-08-04T16:13:00 Last Updated: 2024-08-07T05:59:56.939Z Vendors: n/a Products: n/a Problem Types: n/a Description: The js_watch_set function in js/src/jsdbgapi.cpp in the JavaScript engine in Mozilla Firefox before 3.0.12 allows remote attackers to cause a denial of service (assertion failure and application exit) or possibly execute arbitrary code via a crafted .js file, related to a "memory safety bug." NOTE: this was originally reported as affecting versions before 3.0.13. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/2142 - http://www.mozilla.org/security/announce/2009/mfs
ner: References: - http://www.vupen.com/english/advisories/2009/2142 - http://www.mozilla.org/security/announce/2009/mfsa2009-45.html - http://sunsolve.sun.com/search/document.do?assetkey=1-66-266148-1 - https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00261.html - http://secunia.com/advisories/36126 - https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00198.html - http://www.securityfocus.com/bid/35927 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9806 - https://bugzilla.mozilla.org/show_bug.cgi?id=501270
CVE ID: CVE-2009-2665 State: PUBLISHED Published: 2009-08-04T16:13:00 Last Updated: 2024-08-07T05:59:56.906Z Vendors: n/a Products: n/a Problem Types: n/a Description: The nsDocument::SetScriptGlobalObject function in content/base/src/nsDocument.cpp in Mozilla Firefox 3.5.x before 3.5.2, when certain add-ons are enabled, does not properly handle a Link HTTP header, which allows remote attackers to execute arbitrary JavaScript with chrome privileges via a crafted web page, related to an incorrect security wrapper. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/2142 - http://www.mozilla.org/security/announce/2009/mfsa2009-46.html -
: - http://www.vupen.com/english/advisories/2009/2142 - http://www.mozilla.org/security/announce/2009/mfsa2009-46.html - http://sunsolve.sun.com/search/document.do?assetkey=1-66-266148-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=498897 - https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00261.html - http://secunia.com/advisories/36126 - https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00198.html - http://www.securityfocus.com/bid/35928
CVE ID: CVE-2009-2666 State: PUBLISHED Published: 2009-08-07T18:33:00 Last Updated: 2024-08-07T05:59:56.877Z Vendors: n/a Products: n/a Problem Types: n/a Description: socket.c in fetchmail before 6.3.11 does not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2009:201 - http://secunia.com/advisories/36175 - http://secunia.com/advi
www.mandriva.com/security/advisories?name=MDVSA-2009:201 - http://secunia.com/advisories/36175 - http://secunia.com/advisories/36236 - http://www.debian.org/security/2009/dsa-1852 - http://fetchmail.berlios.de/fetchmail-SA-2009-01.txt - http://marc.info/?l=oss-security&m=124949601207156&w=2 - http://www.securityfocus.com/archive/1/505530/100/0/threaded - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.543463 - http://secunia.com/advisories/36179 - http://www.securitytracker.com/id?1022679 - http://osvdb.org/56855 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11059 - http://www.vupen.com/english/advisorie
cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11059 - http://www.vupen.com/english/advisories/2009/3184 - http://www.vupen.com/english/advisories/2009/2155 - http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html - http://support.apple.com/kb/HT3937 - http://www.securityfocus.com/bid/35951
CVE ID: CVE-2009-2667 State: PUBLISHED Published: 2009-08-05T19:00:00 Last Updated: 2024-08-07T05:59:56.537Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in IBM Tivoli Key Lifecycle Manager (TKLM) 1.0 has unknown impact and attack vectors, related to a "password security vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35938 - http://www.vupen.com/english/advisories/2009/2144 - http://www-01.ibm.com/support/docview.wss?uid=swg21395577
CVE ID: CVE-2009-2668 State: PUBLISHED Published: 2009-08-05T19:00:00Z Last Updated: 2024-09-17T03:07:46.574Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 through 6.0.2900.2180 and 7 through 7.0.6000.16473 allows remote attackers to cause a denial of service (CPU consumption) via an XML document composed of a long series of start-tags with no corresponding end-tags, a related issue to CVE-2009-1232. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2009-07/0193.html - http://websecurity.com.ua/3216/
CVE ID: CVE-2009-2669 State: PUBLISHED Published: 2009-08-05T19:00:00 Last Updated: 2024-08-07T05:59:56.276Z Vendors: n/a Products: n/a Problem Types: n/a Description: A certain debugging component in IBM AIX 5.3 and 6.1 does not properly handle the (1) _LIB_INIT_DBG and (2) _LIB_INIT_DBG_FILE environment variables, which allows local users to gain privileges by leveraging a setuid-root program to create an arbitrary root-owned file with world-writable permissions, related to libC.a (aka the XL C++ runtime library) in AIX 5.3 and libc.a in AIX 6.1. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=isg1IZ54593 - http://www.ibm.com/supp
- CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=isg1IZ54593 - http://www.ibm.com/support/docview.wss?uid=isg1IZ56204 - http://secunia.com/advisories/36156 - http://aix.software.ibm.com/aix/efixes/security/libC_advisory.asc - http://www.ibm.com/support/docview.wss?uid=isg1IZ56203 - http://www.ibm.com/support/docview.wss?uid=isg1IZ54090 - http://www.ibm.com/support/docview.wss?uid=isg1IZ54091 - http://www.securityfocus.com/bid/35934 - http://www.ibm.com/support/docview.wss?uid=isg1IZ56205 - http://www.vupen.com/english/advisories/2009/2151 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=815 - http://www.ibm.com/support/docview.wss?uid=i
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=815 - http://www.ibm.com/support/docview.wss?uid=isg1IZ56206
CVE ID: CVE-2009-2670 State: PUBLISHED Published: 2009-08-05T19:00:00 Last Updated: 2024-08-07T05:59:56.843Z Vendors: n/a Products: n/a Problem Types: n/a Description: The audio system in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, does not prevent access to java.lang.System properties by (1) untrusted applets and (2) Java Web Start applications, which allows context-dependent attackers to obtain sensitive information by reading these properties. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8022 - https://rhn.redhat.com/err
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8022 - https://rhn.redhat.com/errata/RHSA-2009-1200.html - https://rhn.redhat.com/errata/RHSA-2009-1199.html - http://secunia.com/advisories/36162 - http://www.vupen.com/english/advisories/2009/2543 - http://secunia.com/advisories/37460 - http://security.gentoo.org/glsa/glsa-200911-02.xml - http://www.vmware.com/security/advisories/VMSA-2009-0016.html - http://marc.info/?l=bugtraq&m=125787273209737&w=2 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-263408-1 - http://secunia.com/advisories/36199 - http://secunia.com/advisories/36248 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:2
m/advisories/36199 - http://secunia.com/advisories/36248 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:209 - https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00310.html - http://osvdb.org/56788 - http://marc.info/?l=bugtraq&m=125787273209737&w=2 - http://www.securitytracker.com/id?1022658 - http://java.sun.com/javase/6/webnotes/6u15.html - http://www.securityfocus.com/archive/1/507985/100/0/threaded - http://www.us-cert.gov/cas/techalerts/TA09-294A.html - http://secunia.com/advisories/36180 - http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html - http://sunsolve.sun.com/search/document.do?assetkey=1-21-125136-16-1 - http://secunia.com
urity/cpuoct2009-096303.html - http://sunsolve.sun.com/search/document.do?assetkey=1-21-125136-16-1 - http://secunia.com/advisories/36176 - https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00325.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11326 - http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html - http://secunia.com/advisories/37300 - http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html - http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00002.html - https://rhn.redhat.com/errata/RHSA-2009-1201.html - http://lists.opensuse.org/opensuse-security-announce/2009-08/m
tml - https://rhn.redhat.com/errata/RHSA-2009-1201.html - http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00003.html - http://secunia.com/advisories/37386 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52306 - http://java.sun.com/j2se/1.5.0/ReleaseNotes.html#150_20 - http://www.vupen.com/english/advisories/2009/3316 - http://www.securityfocus.com/bid/35939
CVE ID: CVE-2009-2671 State: PUBLISHED Published: 2009-08-05T19:00:00 Last Updated: 2024-08-07T05:59:56.765Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SOCKS proxy implementation in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, allows remote attackers to discover the username of the account that invoked an untrusted (1) applet or (2) Java Web Start application via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11115 - https://rhn.redhat.com/errata/RHSA-2009-1200.html - https://rhn.redhat
/definition/oval%3Aorg.mitre.oval%3Adef%3A11115 - https://rhn.redhat.com/errata/RHSA-2009-1200.html - https://rhn.redhat.com/errata/RHSA-2009-1199.html - http://secunia.com/advisories/36162 - http://www.vupen.com/english/advisories/2009/2543 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52336 - http://secunia.com/advisories/37460 - http://security.gentoo.org/glsa/glsa-200911-02.xml - http://www.vmware.com/security/advisories/VMSA-2009-0016.html - http://marc.info/?l=bugtraq&m=125787273209737&w=2 - http://secunia.com/advisories/36199 - http://secunia.com/advisories/36248 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:209 - https://www.redhat.com/archives/fedora-package
36248 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:209 - https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00310.html - http://marc.info/?l=bugtraq&m=125787273209737&w=2 - http://java.sun.com/javase/6/webnotes/6u15.html - http://www.securityfocus.com/archive/1/507985/100/0/threaded - http://www.us-cert.gov/cas/techalerts/TA09-294A.html - http://www.securityfocus.com/bid/35943 - http://secunia.com/advisories/36180 - http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html - http://sunsolve.sun.com/search/document.do?assetkey=1-21-125136-16-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-263409-1 - http://secunia.com/advisories
key=1-21-125136-16-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-263409-1 - http://secunia.com/advisories/36176 - https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00325.html - http://www.securitytracker.com/id?1022659 - http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html - http://secunia.com/advisories/37300 - http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html - http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00002.html - https://rhn.redhat.com/errata/RHSA-2009-1201.html - http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00003.html - http://secunia.com/advisories/37386 - http://ja
://lists.opensuse.org/opensuse-security-announce/2009-08/msg00003.html - http://secunia.com/advisories/37386 - http://java.sun.com/j2se/1.5.0/ReleaseNotes.html#150_20 - http://www.vupen.com/english/advisories/2009/3316 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8259
CVE ID: CVE-2009-2672 State: PUBLISHED Published: 2009-08-05T19:00:00 Last Updated: 2024-08-07T05:59:56.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: The proxy mechanism implementation in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, does not prevent access to browser cookies by untrusted (1) applets and (2) Java Web Start applications, which allows remote attackers to hijack web sessions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://rhn.redhat.com/errata/RHSA-2009-1200.html - https://rhn.redhat.com/errata/RHSA-2009-1199.html - http://www.vupen.com/english/advis
.com/errata/RHSA-2009-1200.html - https://rhn.redhat.com/errata/RHSA-2009-1199.html - http://www.vupen.com/english/advisories/2009/2543 - http://secunia.com/advisories/37460 - http://security.gentoo.org/glsa/glsa-200911-02.xml - http://www.vmware.com/security/advisories/VMSA-2009-0016.html - http://marc.info/?l=bugtraq&m=125787273209737&w=2 - http://secunia.com/advisories/36199 - http://secunia.com/advisories/36248 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7723 - http://marc.info/?l=bugtraq&m=125787273209737&w=2 - http://java.sun.com/javase/6/webnotes/6u15.html - http://www.securityfocus.com/archive/1/507985/100/0/threaded - http://www.us-cert.g
un.com/javase/6/webnotes/6u15.html - http://www.securityfocus.com/archive/1/507985/100/0/threaded - http://www.us-cert.gov/cas/techalerts/TA09-294A.html - http://www.securityfocus.com/bid/35943 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9359 - http://secunia.com/advisories/36180 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52337 - http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html - http://sunsolve.sun.com/search/document.do?assetkey=1-21-125136-16-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-263409-1 - http://secunia.com/advisories/36176 - http://www.securitytracker.com/id?1022659 - http://lists.op
setkey=1-66-263409-1 - http://secunia.com/advisories/36176 - http://www.securitytracker.com/id?1022659 - http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html - http://secunia.com/advisories/37300 - http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html - http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00002.html - https://rhn.redhat.com/errata/RHSA-2009-1201.html - http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00003.html - http://secunia.com/advisories/37386 - http://java.sun.com/j2se/1.5.0/ReleaseNotes.html#150_20 - http://www.vupen.com/english/advisories/2009/3316
CVE ID: CVE-2009-2673 State: PUBLISHED Published: 2009-08-05T19:00:00 Last Updated: 2024-08-07T05:59:56.917Z Vendors: n/a Products: n/a Problem Types: n/a Description: The proxy mechanism implementation in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, allows remote attackers to bypass intended access restrictions and connect to arbitrary sites via unspecified vectors, related to a declaration that lacks the final keyword. Additional Analyst Notes: - CVE Program Container: References: - https://rhn.redhat.com/errata/RHSA-2009-1200.html - https://rhn.redhat.com/errata/RHSA-2009-1199.html - http://secunia.com/advisories/36162 - http:
ta/RHSA-2009-1200.html - https://rhn.redhat.com/errata/RHSA-2009-1199.html - http://secunia.com/advisories/36162 - http://www.vupen.com/english/advisories/2009/2543 - http://secunia.com/advisories/37460 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8558 - http://security.gentoo.org/glsa/glsa-200911-02.xml - http://www.vmware.com/security/advisories/VMSA-2009-0016.html - http://marc.info/?l=bugtraq&m=125787273209737&w=2 - http://secunia.com/advisories/36199 - http://secunia.com/advisories/36248 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:209 - https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00310.html - http:/
isories?name=MDVSA-2009:209 - https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00310.html - http://marc.info/?l=bugtraq&m=125787273209737&w=2 - http://java.sun.com/javase/6/webnotes/6u15.html - http://www.securityfocus.com/archive/1/507985/100/0/threaded - http://www.us-cert.gov/cas/techalerts/TA09-294A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10263 - http://www.securityfocus.com/bid/35943 - http://secunia.com/advisories/36180 - http://osvdb.org/56785 - http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html - http://sunsolve.sun.com/search/document.do?assetkey=1-21-125136-16-1 - http://sunsolve.sun.c
ty/cpuoct2009-096303.html - http://sunsolve.sun.com/search/document.do?assetkey=1-21-125136-16-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-263409-1 - http://secunia.com/advisories/36176 - https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00325.html - http://www.securitytracker.com/id?1022659 - http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html - http://secunia.com/advisories/37300 - http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html - http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00002.html - https://rhn.redhat.com/errata/RHSA-2009-1201.html - https://exchange.xforce.ibmcloud.com/vulnerabili
-11/msg00002.html - https://rhn.redhat.com/errata/RHSA-2009-1201.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/52338 - http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00003.html - http://secunia.com/advisories/37386 - http://java.sun.com/j2se/1.5.0/ReleaseNotes.html#150_20 - http://www.vupen.com/english/advisories/2009/3316
CVE ID: CVE-2009-2674 State: PUBLISHED Published: 2009-08-05T19:00:00 Last Updated: 2024-08-07T05:59:56.647Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in javaws.exe in Sun Java Web Start in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15 allows context-dependent attackers to execute arbitrary code via a crafted JPEG image that is not properly handled during display to a splash screen, which triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-09-050/ - https://rhn.redhat.com/errata/RHSA-2009-1200.html - http://secunia.com/advisories/36162 -
e.com/advisories/ZDI-09-050/ - https://rhn.redhat.com/errata/RHSA-2009-1200.html - http://secunia.com/advisories/36162 - http://www.vupen.com/english/advisories/2009/2543 - http://security.gentoo.org/glsa/glsa-200911-02.xml - http://marc.info/?l=bugtraq&m=125787273209737&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10073 - http://secunia.com/advisories/36248 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-263428-1 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:209 - https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00310.html - http://marc.info/?l=bugtraq&m=125787273209737&w=2 - http://www.us-cert.
ora-package-announce/2009-August/msg00310.html - http://marc.info/?l=bugtraq&m=125787273209737&w=2 - http://www.us-cert.gov/cas/techalerts/TA09-294A.html - http://secunia.com/advisories/36180 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8073 - http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html - http://sunsolve.sun.com/search/document.do?assetkey=1-21-125136-16-1 - http://secunia.com/advisories/36176 - https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00325.html - http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html - http://secunia.com/advisories/37300 - http://lists.apple.com/archiv
g/opensuse-security-announce/2009-10/msg00001.html - http://secunia.com/advisories/37300 - http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html - http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00002.html - https://rhn.redhat.com/errata/RHSA-2009-1201.html - http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00003.html - http://secunia.com/advisories/37386 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52339
CVE ID: CVE-2009-2675 State: PUBLISHED Published: 2009-08-05T19:00:00 Last Updated: 2024-08-07T05:59:57.038Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the unpack200 utility in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, allows context-dependent attackers to gain privileges via unspecified length fields in the header of a Pack200-compressed JAR file, which leads to a heap-based buffer overflow during decompression. Additional Analyst Notes: - CVE Program Container: References: - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=814 - http://sunsolve.sun.com/search/document.d
: - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=814 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-263488-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10840 - https://rhn.redhat.com/errata/RHSA-2009-1200.html - https://rhn.redhat.com/errata/RHSA-2009-1199.html - http://secunia.com/advisories/36162 - http://www.vupen.com/english/advisories/2009/2543 - http://secunia.com/advisories/37460 - http://security.gentoo.org/glsa/glsa-200911-02.xml - http://www.vmware.com/security/advisories/VMSA-2009-0016.html - http://marc.info/?l=bugtraq&m=125787273209737&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/5230
016.html - http://marc.info/?l=bugtraq&m=125787273209737&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52307 - http://secunia.com/advisories/36199 - http://secunia.com/advisories/36248 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:209 - https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00310.html - http://marc.info/?l=bugtraq&m=125787273209737&w=2 - http://www.securityfocus.com/archive/1/507985/100/0/threaded - http://www.us-cert.gov/cas/techalerts/TA09-294A.html - http://secunia.com/advisories/36180 - http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html - http://sunsolve.sun.com/search/document.do?assetkey=1-21-125136-16-