Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
http://www.debian.org/security/2011/dsa-2274 - http://secunia.com/advisories/44449 - http://openwall.com/lists/oss-security/2011/06/01/11 - http://openwall.com/lists/oss-security/2011/06/01/1 - http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061290.html - http://openwall.com/lists/oss-security/2011/05/31/20 - http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061477.html - http://secunia.com/advisories/45149 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14656
CVE ID: CVE-2011-1960 State: PUBLISHED Published: 2011-08-10T21:16:00 Last Updated: 2024-08-06T22:46:00.862Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 through 9 does not properly implement JavaScript event handlers, which allows remote attackers to access content from a different (1) domain or (2) zone via unspecified script code, aka "Event Handlers Information Disclosure Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-057 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12383 - http://www.us-cer
1-057 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12383 - http://www.us-cert.gov/cas/techalerts/TA11-221A.html
CVE ID: CVE-2011-1961 State: PUBLISHED Published: 2011-08-10T21:16:00 Last Updated: 2024-08-06T22:46:00.871Z Vendors: n/a Products: n/a Problem Types: n/a Description: The telnet URI handler in Microsoft Internet Explorer 6 through 9 does not properly launch the handler application, which allows remote attackers to execute arbitrary programs via a crafted web site, aka "Telnet Handler Remote Code Execution Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-057 - http://jvn.jp/en/jp/JVN80404511/index.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3
//jvn.jp/en/jp/JVN80404511/index.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12684 - http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000060.html - http://www.us-cert.gov/cas/techalerts/TA11-221A.html
CVE ID: CVE-2011-1962 State: PUBLISHED Published: 2011-08-10T21:16:00 Last Updated: 2024-08-06T22:46:00.962Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 through 9 does not properly handle unspecified character sequences, which allows remote attackers to read content from a different (1) domain or (2) zone via a crafted web site that triggers "inactive filtering," aka "Shift JIS Character Encoding Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-057 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A126
ritybulletins/2011/ms11-057 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12657
CVE ID: CVE-2011-1963 State: PUBLISHED Published: 2011-08-10T21:16:00 Last Updated: 2024-08-06T22:46:00.856Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 7 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, aka "XSLT Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-057 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12753 - http://www.us-cert.gov/c
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12753 - http://www.us-cert.gov/cas/techalerts/TA11-221A.html
CVE ID: CVE-2011-1964 State: PUBLISHED Published: 2011-08-10T21:16:00 Last Updated: 2024-08-06T22:46:00.869Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, aka "Style Object Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-057 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12617 - http://www.us-ce
11-057 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12617 - http://www.us-cert.gov/cas/techalerts/TA11-221A.html
CVE ID: CVE-2011-1965 State: PUBLISHED Published: 2011-08-10T21:16:00 Last Updated: 2024-08-06T22:46:00.809Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tcpip.sys in the TCP/IP stack in Microsoft Windows 7 Gold and SP1 and Windows Server 2008 R2 and R2 SP1 does not properly implement URL-based QoS, which allows remote attackers to cause a denial of service (reboot) via a crafted URL to a web server, aka "TCP/IP QOS Denial of Service Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-064 - http://securityreason.com/securityalert/8474 - https://oval.cisecurity.org/reposito
es/securitybulletins/2011/ms11-064 - http://securityreason.com/securityalert/8474 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12318 - http://www.us-cert.gov/cas/techalerts/TA11-221A.html
CVE ID: CVE-2011-1966 State: PUBLISHED Published: 2011-08-10T21:16:00 Last Updated: 2024-08-06T22:46:00.930Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DNS server in Microsoft Windows Server 2008 SP2, R2, and R2 SP1 does not properly handle NAPTR queries that trigger recursive processing, which allows remote attackers to execute arbitrary code via a crafted query, aka "DNS NAPTR Query Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12764 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-058 - http://www.us-cert.gov/cas/techa
4 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-058 - http://www.us-cert.gov/cas/techalerts/TA11-221A.html
CVE ID: CVE-2011-1967 State: PUBLISHED Published: 2011-08-10T21:16:00 Last Updated: 2024-08-06T22:46:00.850Z Vendors: n/a Products: n/a Problem Types: n/a Description: Winsrv.dll in the Client/Server Run-time Subsystem (aka CSRSS) in the Win32 subsystem in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly check permissions for sending inter-process device-event messages from low-integrity processes to high-integrity processes, which allows local users to gain privileges via a crafted application, aka "CSRSS Vulnerability." Additional Analyst Notes: - CVE Program Container: Refere
ivileges via a crafted application, aka "CSRSS Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-063 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12911 - http://www.us-cert.gov/cas/techalerts/TA11-221A.html
CVE ID: CVE-2011-1968 State: PUBLISHED Published: 2011-08-10T21:16:00 Last Updated: 2024-08-06T22:46:00.966Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Remote Desktop Protocol (RDP) implementation in Microsoft Windows XP SP2 and SP3 and Windows Server 2003 SP2 does not properly process packets in memory, which allows remote attackers to cause a denial of service (reboot) by sending crafted RDP packets triggering access to an object that (1) was not properly initialized or (2) is deleted, as exploited in the wild in 2011, aka "Remote Desktop Protocol Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/sear
erability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12806 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-065 - http://www.us-cert.gov/cas/techalerts/TA11-221A.html
CVE ID: CVE-2011-1969 State: PUBLISHED Published: 2011-10-12T01:00:00 Last Updated: 2024-08-06T22:46:00.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 provides the MicrosoftClient.jar file containing a signed Java applet, which allows remote attackers to execute arbitrary code on client machines via unspecified vectors, aka "Poisoned Cup of Code Execution Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/49983 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-079 - https://oval.cisecurity.org/rep
83 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-079 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13032
CVE ID: CVE-2011-1970 State: PUBLISHED Published: 2011-08-10T21:16:00 Last Updated: 2024-08-06T22:46:00.817Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DNS server in Microsoft Windows Server 2003 SP2 and Windows Server 2008 SP2, R2, and R2 SP1 does not properly initialize memory, which allows remote attackers to cause a denial of service (service outage) via a query for a nonexistent domain, aka "DNS Uninitialized Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12870 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/
ch/definition/oval%3Aorg.mitre.oval%3Adef%3A12870 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-058 - http://www.us-cert.gov/cas/techalerts/TA11-221A.html
CVE ID: CVE-2011-1971 State: PUBLISHED Published: 2011-08-10T21:16:00 Last Updated: 2024-08-06T22:46:00.918Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly parse file metadata, which allows local users to cause a denial of service (reboot) via a crafted file, aka "Windows Kernel Metadata Parsing DOS Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-068 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12663
CVE ID: CVE-2011-1972 State: PUBLISHED Published: 2011-08-10T21:16:00 Last Updated: 2024-08-06T22:46:00.807Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Visio 2003 SP3, 2007 SP2, and 2010 Gold and SP1 does not properly validate objects in memory during Visio file parsing, which allows remote attackers to execute arbitrary code via a crafted file, aka "pStream Release RCE Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-060 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12852 - http://www.us-cert.gov/cas/techalerts/TA1
ecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12852 - http://www.us-cert.gov/cas/techalerts/TA11-221A.html
CVE ID: CVE-2011-1973 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2011-1974 State: PUBLISHED Published: 2011-08-10T21:16:00 Last Updated: 2024-08-06T22:46:00.863Z Vendors: n/a Products: n/a Problem Types: n/a Description: NDISTAPI.sys in the NDISTAPI driver in Remote Access Service (RAS) in Microsoft Windows XP SP2 and SP3 and Windows Server 2003 SP2 does not properly validate user-mode input, which allows local users to gain privileges via a crafted application, aka "NDISTAPI Elevation of Privilege Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12912 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/
finition/oval%3Aorg.mitre.oval%3Adef%3A12912 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-062 - https://www.exploit-db.com/exploits/40627/ - http://www.securityfocus.com/bid/48996 - http://www.us-cert.gov/cas/techalerts/TA11-221A.html
CVE ID: CVE-2011-1975 State: PUBLISHED Published: 2011-08-10T21:16:00 Last Updated: 2024-08-06T22:46:00.878Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in the Data Access Tracing component in Windows Data Access Components (Windows DAC) 6.0 in Microsoft Windows 7 Gold and SP1 and Windows Server 2008 R2 and R2 SP1 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains an Excel .xlsx file, aka "Data Access Components Insecure Library Loading Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/secur
Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-059 - http://www.us-cert.gov/cas/techalerts/TA11-221A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12936
CVE ID: CVE-2011-1976 State: PUBLISHED Published: 2011-08-10T21:16:00 Last Updated: 2024-08-06T22:46:00.863Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Report Viewer Control in Microsoft Visual Studio 2005 SP1 and Report Viewer 2005 SP1 allows remote attackers to inject arbitrary web script or HTML via a parameter in a data source, aka "Report Viewer Controls XSS Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-067 - http://marc.info/?l=bugtraq&m=145326307707460&w=2 - https://oval.cisecurity.org/repository/search/definit
011/ms11-067 - http://marc.info/?l=bugtraq&m=145326307707460&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12773 - http://www.securityfocus.com/bid/49033 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04945270 - http://www.us-cert.gov/cas/techalerts/TA11-221A.html
CVE ID: CVE-2011-1977 State: PUBLISHED Published: 2011-08-10T21:16:00 Last Updated: 2024-08-06T22:46:00.816Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ASP.NET Chart controls in Microsoft .NET Framework 4, and Chart Control for Microsoft .NET Framework 3.5 SP1, do not properly verify functions in URIs, which allows remote attackers to read arbitrary files via special characters in a URI in an HTTP request, aka "Chart Control Information Disclosure Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12970 - https://docs.microsoft.com/en-us/security-updates/se
/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12970 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-066 - http://www.us-cert.gov/cas/techalerts/TA11-221A.html
CVE ID: CVE-2011-1978 State: PUBLISHED Published: 2011-08-10T21:16:00 Last Updated: 2024-10-17T18:19:06.953Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft .NET Framework 2.0 SP2, 3.5.1, and 4 does not properly validate the System.Net.Sockets trust level, which allows remote attackers to obtain sensitive information or trigger arbitrary outbound network traffic via (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET application, or (3) a crafted .NET Framework application, aka "Socket Restriction Bypass Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://oval.cisecurity.org/repository/sea
nalyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12901 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-069
CVE ID: CVE-2011-1979 State: PUBLISHED Published: 2011-08-10T21:16:00 Last Updated: 2024-08-06T22:46:00.924Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Visio 2003 SP3 and 2007 SP2 does not properly validate objects in memory during Visio file parsing, which allows remote attackers to execute arbitrary code via a crafted file, aka "Move Around the Block RCE Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12659 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-060 - http://www.us-cert.gov/cas/techalerts/TA11-221A.html
CVE ID: CVE-2011-1980 State: PUBLISHED Published: 2011-09-15T10:00:00 Last Updated: 2024-08-06T22:46:01.122Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in Microsoft Office 2003 SP3 and 2007 SP2 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .doc, .ppt, or .xls file, aka "Office Component Insecure Library Loading Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-073 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.
ity-updates/securitybulletins/2011/ms11-073 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12694 - http://www.us-cert.gov/cas/techalerts/TA11-256A.html
CVE ID: CVE-2011-1981 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2011-1982 State: PUBLISHED Published: 2011-09-15T10:00:00 Last Updated: 2024-08-06T22:46:00.920Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Office 2007 SP2, and 2010 Gold and SP1, does not initialize an unspecified object pointer during the opening of Word documents, which allows remote attackers to execute arbitrary code via a crafted document, aka "Office Uninitialized Object Pointer Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-073 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12243 - http://www.kb
/ms11-073 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12243 - http://www.kb.cert.org/vuls/id/909022 - http://www.us-cert.gov/cas/techalerts/TA11-256A.html
CVE ID: CVE-2011-1983 State: PUBLISHED Published: 2011-12-14T00:00:00 Last Updated: 2024-08-06T22:46:00.923Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Microsoft Office 2007 SP2 and SP3, Office 2010 Gold and SP1, and Office for Mac 2011 allows remote attackers to execute arbitrary code via a crafted Word document, aka "Word Use After Free Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14558 - http://www.us-cert.gov/cas/techalerts/TA11-347A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-08
ert.gov/cas/techalerts/TA11-347A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-089 - http://www.securitytracker.com/id?1026409 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14197
CVE ID: CVE-2011-1984 State: PUBLISHED Published: 2011-09-15T10:00:00 Last Updated: 2024-08-06T22:46:00.911Z Vendors: n/a Products: n/a Problem Types: n/a Description: WINS in Microsoft Windows Server 2003 SP2 and Server 2008 SP2, R2, and R2 SP1 allows local users to gain privileges by sending crafted packets over the loopback interface, aka "WINS Local Elevation of Privilege Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/8378 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12634 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-070 - http://www.us-
.oval%3Adef%3A12634 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-070 - http://www.us-cert.gov/cas/techalerts/TA11-256A.html
CVE ID: CVE-2011-1985 State: PUBLISHED Published: 2011-10-12T01:00:00 Last Updated: 2025-01-21T18:07:49.453Z Vendors: n/a Products: n/a Problem Types: n/a Description: win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly validate user-mode input, which allows local users to gain privileges or cause a denial of service (NULL pointer dereference and system crash) via a crafted application, aka "Win32k Null Pointer De-reference Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.se
Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securitytracker.com/id?1026165 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-077 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12935
CVE ID: CVE-2011-1986 State: PUBLISHED Published: 2011-09-15T10:00:00 Last Updated: 2024-08-06T22:46:00.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Microsoft Excel 2003 SP3 allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel Use after Free WriteAV Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12345 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-072 - http://www.us-cert.gov/cas/techalerts/TA11-256A.html
CVE ID: CVE-2011-1987 State: PUBLISHED Published: 2011-09-15T10:00:00 Last Updated: 2024-08-06T22:46:00.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: Array index error in Microsoft Excel 2003 SP3 and 2007 SP2; Excel in Office 2007 SP2; Excel 2010 Gold and SP1; Excel in Office 2010 Gold and SP1; Office 2004, 2008, and 2011 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel Out of Bounds Array Indexing Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://o
Out of Bounds Array Indexing Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12953 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-072 - http://www.us-cert.gov/cas/techalerts/TA11-256A.html