Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-3918 State: PUBLISHED Published: 2010-12-10T18:00:00Z Last Updated: 2024-09-16T18:04:23.616Z Vendors: n/a Products: n/a Problem Types: n/a Description: Fenrir Sleipnir 2.9.6 and earlier does not prevent interaction between web script and the clipboard, which allows remote attackers to read or modify the clipboard contents via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/en/contents/2010/JVNDB-2010-000057.html - http://www.osvdb.org/69604 - http://secunia.com/advisories/42427 - http://fenrir-inc.blogspot.com/2010/11/vulnerability-regarding-allow-paste.html - http://jvn.jp/en/jp/JVN64764004/index.html - http://www.fen
gspot.com/2010/11/vulnerability-regarding-allow-paste.html - http://jvn.jp/en/jp/JVN64764004/index.html - http://www.fenrir.co.jp/blog/2010/11/post_47.html
CVE ID: CVE-2010-3919 State: PUBLISHED Published: 2010-12-10T18:00:00Z Last Updated: 2024-09-16T23:55:56.796Z Vendors: n/a Products: n/a Problem Types: n/a Description: Fenrir Grani 4.5 and earlier does not prevent interaction between web script and the clipboard, which allows remote attackers to read or modify the clipboard contents via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/en/contents/2010/JVNDB-2010-000058.html - http://secunia.com/advisories/42428 - http://jvn.jp/en/jp/JVN76662040/index.html - http://www.fenrir.co.jp/blog/2010/11/post_47.html
CVE ID: CVE-2010-3920 State: PUBLISHED Published: 2010-12-08T19:00:00 Last Updated: 2024-08-07T03:26:12.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Seiko Epson printer driver installers for LP-S9000 before 4.1.11 and LP-S7100 before 4.1.7, or as downloaded from the vendor between May 2010 and 20101125, set weak permissions for the "C:\Program Files" folder, which might allow local users to bypass intended access restrictions and create or modify arbitrary files and directories. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000059.html - http://jvn.jp/en/jp/JVN62736872/index.html - http://secunia.com/ad
vndb.jvn.jp/ja/contents/2010/JVNDB-2010-000059.html - http://jvn.jp/en/jp/JVN62736872/index.html - http://secunia.com/advisories/42540 - http://www.epson.jp/support/misc/lps7100_9000/index.htm - http://osvdb.org/69678
CVE ID: CVE-2010-3921 State: PUBLISHED Published: 2010-12-09T19:00:00 Last Updated: 2024-08-07T03:26:12.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Movable Type 4.x before 4.35 and 5.x before 5.04 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/en/contents/2010/JVNDB-2010-000060.html - http://www.securitytracker.com/id?1024833 - http://www.vupen.com/english/advisories/2010/3145 - http://secunia.com/advisories/42539 - http://www.movabletype.org/documentation/appendices/release-notes/movable-type-504-435-rel
ecunia.com/advisories/42539 - http://www.movabletype.org/documentation/appendices/release-notes/movable-type-504-435-release-notes.html - http://jvn.jp/en/jp/JVN36673836/index.html
CVE ID: CVE-2010-3922 State: PUBLISHED Published: 2010-12-09T19:00:00 Last Updated: 2024-08-07T03:26:12.224Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Movable Type 4.x before 4.35 and 5.x before 5.04 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1024833 - http://jvndb.jvn.jp/en/contents/2010/JVNDB-2010-000061.html - http://www.vupen.com/english/advisories/2010/3145 - http://secunia.com/advisories/42539 - http://www.movabletype.org/documentation/appendices/release-notes/movable-type-504-435-release-notes.html -
ies/42539 - http://www.movabletype.org/documentation/appendices/release-notes/movable-type-504-435-release-notes.html - http://jvn.jp/en/jp/JVN78536512/index.html
CVE ID: CVE-2010-3923 State: PUBLISHED Published: 2010-12-30T20:00:00Z Last Updated: 2024-09-17T02:42:55.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in AttacheCase before 2.70 allows local users to gain privileges via a Trojan horse executable file in the current working directory. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/42672 - http://homepage2.nifty.com/hibara/software/atcs.htm - http://jvndb.jvn.jp/en/contents/2010/JVNDB-2010-000066.html - http://jvn.jp/en/jp/JVN02175694/index.html
CVE ID: CVE-2010-3924 State: PUBLISHED Published: 2011-01-13T18:35:00 Last Updated: 2024-08-07T03:26:12.272Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Aimluck Aipo before 5.1.0.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN50704770/index.html - http://secunia.com/advisories/42860 - http://www.securityfocus.com/bid/45755 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64592 - http://jvn.jp/en/jp/JVN50704770/91216/index.html - http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000003.html - http://osvdb.org/
.jp/en/jp/JVN50704770/91216/index.html - http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000003.html - http://osvdb.org/70412
CVE ID: CVE-2010-3925 State: PUBLISHED Published: 2011-01-13T18:35:00 Last Updated: 2024-08-07T03:26:12.173Z Vendors: n/a Products: n/a Problem Types: n/a Description: Contents-Mall before 15 does not properly handle passwords, which allows remote attackers to discover the administrative password, and consequently obtain sensitive information or modify data, via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/70445 - http://secunia.com/advisories/42950 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64835 - http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000001.html - http://mag.wb-i.net/2010_05_07.html - http://jvn.jp/en/jp/JVN53
//jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000001.html - http://mag.wb-i.net/2010_05_07.html - http://jvn.jp/en/jp/JVN53293565/index.html
CVE ID: CVE-2010-3926 State: PUBLISHED Published: 2011-01-12T00:00:00 Last Updated: 2024-08-07T03:26:12.241Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Shop.cgi in SGX-SP Final before 11.00 and SGX-SP Final NE before 11.00 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/70410 - http://secunia.com/advisories/42857 - http://wb-i.net/soft1.HTML - https://exchange.xforce.ibmcloud.com/vulnerabilities/64593 - http://www.securityfocus.com/bid/45752 - http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000002.html
rabilities/64593 - http://www.securityfocus.com/bid/45752 - http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000002.html - http://jvn.jp/jp/JVN86347943/index.html
CVE ID: CVE-2010-3927 State: PUBLISHED Published: 2011-01-24T17:00:00 Last Updated: 2024-08-07T03:26:12.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in Lunascape before 6.4.0 allows local users to gain privileges via a Trojan horse DLL in the current working directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/45945 - http://lunapedia.lunascape.jp/index.php?title=Lunascape6#2011.2F01.2F19_ver_6.4.1 - http://jvn.jp/en/jp/JVN94695018/296426/index.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/64849 - http://help.lunascape.tv/LunascapeHelp-en/page.aspx?pageid=ver_6_4_11 -
nge.xforce.ibmcloud.com/vulnerabilities/64849 - http://help.lunascape.tv/LunascapeHelp-en/page.aspx?pageid=ver_6_4_11 - http://osvdb.org/70604 - http://jvndb.jvn.jp/en/contents/2011/JVNDB-2011-000004.html - http://secunia.com/advisories/43003 - http://jvn.jp/en/jp/JVN94695018/index.html
CVE ID: CVE-2010-3928 State: PUBLISHED Published: 2011-01-20T18:00:00 Last Updated: 2024-08-07T03:26:12.222Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ruby Version Manager (RVM) before 1.2.1 writes file contents to a terminal without sanitizing non-printable characters, which might allow remote attackers to execute arbitrary commands via a crafted file, related to an "escape sequence injection vulnerability." NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/en/contents/2011/JVNDB-2011-000005.html - http://www.securityfocus.com/bid/45841 - http://secunia.com/advisories/4
vn.jp/en/contents/2011/JVNDB-2011-000005.html - http://www.securityfocus.com/bid/45841 - http://secunia.com/advisories/42952 - http://jvn.jp/en/jp/JVN30414126/index.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/64746 - http://osvdb.org/70521 - http://www.vupen.com/english/advisories/2011/0174
CVE ID: CVE-2010-3929 State: PUBLISHED Published: 2011-02-02T00:00:00 Last Updated: 2024-08-07T03:26:12.295Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in MODx Evolution 1.0.4 and earlier allows remote attackers to execute arbitrary SQL commands via unknown vectors related to AjaxSearch. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/65082 - http://jvn.jp/en/jp/JVN54092716/index.html - http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000008.html - http://osvdb.org/70771 - http://modxcms.com/forums/index.php/topic%2C60045.0.html
CVE ID: CVE-2010-3930 State: PUBLISHED Published: 2011-02-02T00:00:00 Last Updated: 2024-08-07T03:26:12.229Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in MODx Evolution 1.0.4 and earlier allows remote attackers to read arbitrary files via unspecified vectors related to AjaxSearch, a different vulnerability than CVE-2010-1427. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/70772 - http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000009.html - http://modxcms.com/forums/index.php/topic%2C60045.0.html - http://jvn.jp/en/jp/JVN95385972/index.html
CVE ID: CVE-2010-3931 State: PUBLISHED Published: 2011-01-20T18:00:00 Last Updated: 2024-08-07T03:26:12.154Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in multiple Rocomotion products, including P board 1.18 and other versions, P forum 1.30 and earlier, P up board 1.38 and other versions, P diary R 1.13 and earlier, P link 1.11 and earlier, P link compact 1.04 and earlier, pplog 3.31 and earlier, pplog2 3.37 and earlier, PM bbs 1.07 and earlier, PM up bbs 1.08 and earlier, and PM forum 1.18 and earlier, allows remote attackers to inject arbitrary web script or HTML via unknown vectors. Additional Analyst Notes: - CVE Program Container:
attackers to inject arbitrary web script or HTML via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN09115481/index.html - http://secunia.com/advisories/42957 - http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000006.html - http://www.securityfocus.com/bid/45838 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64745 - http://another.rocomotion.jp/12949466953653.html - http://osvdb.org/70495
CVE ID: CVE-2010-3932 State: REJECTED Published: 2011-01-21T00:00:00Z Last Updated: 2024-09-17T00:06:39.352Z Description: No description available.
CVE ID: CVE-2010-3933 State: PUBLISHED Published: 2010-10-27T22:00:00Z Last Updated: 2024-09-16T20:42:14.245Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ruby on Rails 2.3.9 and 3.0.0 does not properly handle nested attributes, which allows remote attackers to modify arbitrary records by changing the names of parameters for form inputs. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/2719 - http://secunia.com/advisories/41930 - http://securitytracker.com/id?1024624 - http://weblog.rubyonrails.org/2010/10/15/security-vulnerability-in-nested-attributes-code-in-ruby-on-rails-2-3-9-and-3-0-0
CVE ID: CVE-2010-3934 State: PUBLISHED Published: 2010-10-14T18:00:00Z Last Updated: 2024-09-17T00:45:56.180Z Vendors: n/a Products: n/a Problem Types: n/a Description: The browser in Research In Motion (RIM) BlackBerry Device Software 5.0.0.593 Platform 5.1.0.147 on the BlackBerry 9700 does not properly restrict cross-domain execution of JavaScript, which allows remote attackers to bypass the Same Origin Policy via vectors related to a window.open call and an IFRAME element. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1009-exploits/blackberry-crossorigin.txt - http://se
CVE Program Container: References: - http://packetstormsecurity.org/1009-exploits/blackberry-crossorigin.txt - http://secunia.com/advisories/41536 - http://securitytracker.com/id?1024506
CVE ID: CVE-2010-3935 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2010-3936 State: PUBLISHED Published: 2010-11-10T01:00:00 Last Updated: 2024-08-07T03:26:12.247Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Signurl.asp in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, 2010 Update 1, and 2010 Update 2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "XSS in Signurl.asp Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-089 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12218 - http://w
/2010/ms10-089 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12218 - http://www.us-cert.gov/cas/techalerts/TA10-313A.html
CVE ID: CVE-2010-3937 State: PUBLISHED Published: 2010-12-16T19:00:00 Last Updated: 2024-08-07T03:26:12.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Exchange Server 2007 SP2 on the x64 platform allows remote authenticated users to cause a denial of service (infinite loop and MSExchangeIS outage) via a crafted RPC request, aka "Exchange Server Infinite Loop Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA10-348A.html - http://www.securitytracker.com/id?1024888 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-106 - https://oval.cisecurity.org/repository/search/de
.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-106 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12019 - http://www.securityfocus.com/bid/45297
CVE ID: CVE-2010-3938 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2010-3939 State: PUBLISHED Published: 2010-12-16T19:00:00 Last Updated: 2024-08-07T03:26:12.378Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows local users to gain privileges via vectors related to improper memory allocation for copies from user mode, aka "Win32k Buffer Overflow Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA10-348A.html - https://docs.microsoft.com/en-us/security-updates/secu
erences: - http://www.us-cert.gov/cas/techalerts/TA10-348A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-098 - http://www.securitytracker.com/id?1024880 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12252
CVE ID: CVE-2010-3940 State: PUBLISHED Published: 2010-12-16T19:00:00 Last Updated: 2024-08-07T03:26:12.102Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows local users to gain privileges via a crafted application, aka "Win32k PFE Pointer Double Free Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA10-348A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-098 - ht
v/cas/techalerts/TA10-348A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-098 - http://www.securitytracker.com/id?1024880 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12194
CVE ID: CVE-2010-3941 State: PUBLISHED Published: 2010-12-16T19:00:00 Last Updated: 2024-10-17T20:15:18.756Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold and SP2, and Windows 7 allows local users to gain privileges via a crafted application, aka "Win32k Double Free Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.us-cert.gov/cas/techalerts/TA10-348A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-
-cert.gov/cas/techalerts/TA10-348A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-098 - http://www.securitytracker.com/id?1024880 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11959
CVE ID: CVE-2010-3942 State: PUBLISHED Published: 2010-12-16T19:00:00 Last Updated: 2024-08-07T03:26:12.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly allocate memory for copies from user mode, which allows local users to gain privileges via a crafted application, aka "Win32k WriteAV Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA10-348A.html - https://docs.microsoft.com/en-us/security-updates/securitybullet
http://www.us-cert.gov/cas/techalerts/TA10-348A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-098 - http://www.securitytracker.com/id?1024880 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11762
CVE ID: CVE-2010-3943 State: PUBLISHED Published: 2010-12-16T19:00:00 Last Updated: 2024-08-07T03:26:12.202Z Vendors: n/a Products: n/a Problem Types: n/a Description: win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly link driver objects, which allows local users to gain privileges via a crafted application that triggers linked-list corruption, aka "Win32k Cursor Linking Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA10-348A.html - https://docs.microsoft.com/en-us/security-
ntainer: References: - http://www.us-cert.gov/cas/techalerts/TA10-348A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-098 - http://www.securitytracker.com/id?1024880 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12317
CVE ID: CVE-2010-3944 State: PUBLISHED Published: 2010-12-16T19:00:00 Last Updated: 2024-08-07T03:26:12.146Z Vendors: n/a Products: n/a Problem Types: n/a Description: win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2008 R2 and Windows 7 does not properly validate user-mode input, which allows local users to gain privileges via a crafted application, aka "Win32k Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA10-348A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-098 - http://www.securitytracker.com/id?1024880 - https://oval.cisecurity.org/reposit
pdates/securitybulletins/2010/ms10-098 - http://www.securitytracker.com/id?1024880 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12184
CVE ID: CVE-2010-3945 State: PUBLISHED Published: 2010-12-16T19:00:00 Last Updated: 2024-08-07T03:26:12.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the CGM image converter in the graphics filters in Microsoft Office XP SP3, Office 2003 SP3, and Office Converter Pack allows remote attackers to execute arbitrary code via a crafted CGM image in an Office document, aka "CGM Image Converter Buffer Overrun Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA10-348A.html - http://www.securitytracker.com/id?1024887 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ova
ttp://www.securitytracker.com/id?1024887 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12249 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-105
CVE ID: CVE-2010-3946 State: PUBLISHED Published: 2010-12-16T19:00:00 Last Updated: 2024-08-07T03:26:12.234Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the PICT image converter in the graphics filters in Microsoft Office XP SP3, Office 2003 SP3, and Office Converter Pack allows remote attackers to execute arbitrary code via a crafted PICT image in an Office document, aka "PICT Image Converter Integer Overflow Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA10-348A.html - http://www.securitytracker.com/id?1024887 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mit
ml - http://www.securitytracker.com/id?1024887 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11967 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-105
CVE ID: CVE-2010-3947 State: PUBLISHED Published: 2010-12-16T19:00:00 Last Updated: 2024-08-07T03:26:12.238Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the TIFF image converter in the graphics filters in Microsoft Office XP SP3, Office Converter Pack, and Works 9 allows remote attackers to execute arbitrary code via a crafted TIFF image in an Office document, aka "TIFF Image Converter Heap Overflow Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA10-348A.html - http://www.securitytracker.com/id?1024887 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitr
l - http://www.securitytracker.com/id?1024887 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11827 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-105
CVE ID: CVE-2010-3948 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.