Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2012-0007 State: PUBLISHED Published: 2012-01-10T21:00:00 Last Updated: 2024-08-06T18:09:17.209Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Microsoft Anti-Cross Site Scripting (AntiXSS) Library 3.x and 4.0 does not properly evaluate characters after the detection of a Cascading Style Sheets (CSS) escaped character, which allows remote attackers to conduct cross-site scripting (XSS) attacks via HTML input, aka "AntiXSS Library Bypass Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/51291 - http://www.us-cert.gov/cas/techalerts/TA12-010A.html - http://www.securitytracker.com/id?1026499 - https://do
id/51291 - http://www.us-cert.gov/cas/techalerts/TA12-010A.html - http://www.securitytracker.com/id?1026499 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-007 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14314 - http://secunia.com/advisories/47483 - http://secunia.com/advisories/47516
CVE ID: CVE-2012-0008 State: PUBLISHED Published: 2012-03-13T21:00:00 Last Updated: 2024-08-06T18:09:17.136Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in Microsoft Visual Studio 2008 SP1, 2010, and 2010 SP1 allows local users to gain privileges via a Trojan horse add-in in an unspecified directory, aka "Visual Studio Add-In Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/48396 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-021 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73537 - http://www.securityfocus.com/bid/52329 - http://www.us-ce
- https://exchange.xforce.ibmcloud.com/vulnerabilities/73537 - http://www.securityfocus.com/bid/52329 - http://www.us-cert.gov/cas/techalerts/TA12-073A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15081 - http://www.securitytracker.com/id?1026792
CVE ID: CVE-2012-0009 State: PUBLISHED Published: 2012-01-10T21:00:00 Last Updated: 2024-08-06T18:09:17.165Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in the Windows Object Packager configuration in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a Trojan horse executable file in the current working directory, as demonstrated by a directory that contains a file with an embedded packaged object, aka "Object Packager Insecure Executable Launching Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/20
yst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-002 - http://www.securityfocus.com/bid/51297 - http://www.us-cert.gov/cas/techalerts/TA12-010A.html - http://www.securitytracker.com/id?1026494 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14393 - http://secunia.com/advisories/45189
CVE ID: CVE-2012-0010 State: PUBLISHED Published: 2012-02-14T22:00:00 Last Updated: 2024-08-06T18:09:17.186Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 through 9 does not properly perform copy-and-paste operations, which allows user-assisted remote attackers to read content from a different (1) domain or (2) zone via a crafted web site, aka "Copy and Paste Information Disclosure Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14835 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-010
CVE ID: CVE-2012-0011 State: PUBLISHED Published: 2012-02-14T22:00:00 Last Updated: 2024-08-06T18:09:17.221Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 7 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "HTML Layout Remote Code Execution Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA12-045A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14310 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-010
CVE ID: CVE-2012-0012 State: PUBLISHED Published: 2012-02-14T22:00:00 Last Updated: 2024-08-06T18:09:17.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 9 does not properly handle the creation and initialization of string objects, which allows remote attackers to read data from arbitrary process-memory locations via a crafted web site, aka "Null Byte Information Disclosure Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA12-045A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-010 - https://oval.cisecurity.org/repository/search/definition/oval
m/en-us/security-updates/securitybulletins/2012/ms12-010 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14870
CVE ID: CVE-2012-0013 State: PUBLISHED Published: 2012-01-10T21:00:00 Last Updated: 2024-08-06T18:09:17.229Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incomplete blacklist vulnerability in the Windows Packager configuration in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted ClickOnce application in a Microsoft Office document, related to .application files, aka "Assembly Execution Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/51284 - http://www.us-c
dditional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/51284 - http://www.us-cert.gov/cas/techalerts/TA12-010A.html - http://secunia.com/advisories/47480 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-005 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14197 - http://www.securitytracker.com/id?1026497
CVE ID: CVE-2012-0014 State: PUBLISHED Published: 2012-02-14T22:00:00 Last Updated: 2025-01-21T18:30:35.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft .NET Framework 2.0 SP2, 3.5.1, and 4, and Silverlight 4 before 4.1.10111, does not properly restrict access to memory associated with unmanaged objects, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET application, (3) a crafted .NET Framework application, or (4) a crafted Silverlight application, aka ".NET Framework Unmanaged Objects Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Reference
Unmanaged Objects Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.us-cert.gov/cas/techalerts/TA12-045A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-016 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13972
CVE ID: CVE-2012-0015 State: PUBLISHED Published: 2012-02-14T22:00:00 Last Updated: 2024-08-06T18:09:17.225Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft .NET Framework 2.0 SP2 and 3.5.1 does not properly calculate the length of an unspecified buffer, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET application, or (3) a crafted .NET Framework application, aka ".NET Framework Heap Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA12-045A.html - https://docs.microsoft.com/en-us/security-updates/securitybul
: - http://www.us-cert.gov/cas/techalerts/TA12-045A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-016 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14513
CVE ID: CVE-2012-0016 State: PUBLISHED Published: 2012-03-13T21:00:00 Last Updated: 2024-08-06T18:09:17.133Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in Microsoft Expression Design; Expression Design SP1; and Expression Design 2, 3, and 4 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .xpr or .DESIGN file, aka "Expression Design Insecure Library Loading Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14973 - http://www.us-cert.
es: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14973 - http://www.us-cert.gov/cas/techalerts/TA12-073A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-022
CVE ID: CVE-2012-0017 State: PUBLISHED Published: 2012-02-14T22:00:00 Last Updated: 2024-08-06T18:09:17.113Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in inplview.aspx in Microsoft SharePoint Foundation 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via JavaScript sequences in a URL, aka "XSS in inplview.aspx Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA12-045A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14637 - https://docs.microsoft.com/en-us/security-updates/securitybulletin
arch/definition/oval%3Aorg.mitre.oval%3Adef%3A14637 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-011
CVE ID: CVE-2012-0018 State: PUBLISHED Published: 2012-05-09T00:00:00 Last Updated: 2024-08-06T18:09:17.067Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Visio Viewer 2010 Gold and SP1 does not properly validate attributes in Visio files, which allows remote attackers to execute arbitrary code via a crafted file, aka "VSD File Format Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-031 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75115 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15606 - h
vulnerabilities/75115 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15606 - http://secunia.com/advisories/49113 - http://www.securityfocus.com/bid/53328 - http://www.securitytracker.com/id?1027042 - http://osvdb.org/81731 - http://www.us-cert.gov/cas/techalerts/TA12-129A.html
CVE ID: CVE-2012-0019 State: PUBLISHED Published: 2012-02-14T22:00:00 Last Updated: 2024-08-06T18:09:17.227Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file, aka "VSD File Format Memory Corruption Vulnerability," a different vulnerability than CVE-2012-0020, CVE-2012-0136, CVE-2012-0137, and CVE-2012-0138. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA12-045A.html - https://docs.microsoft.com/en-us/security-updates/securitybullet
http://www.us-cert.gov/cas/techalerts/TA12-045A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-015 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14347
CVE ID: CVE-2012-0020 State: PUBLISHED Published: 2012-02-14T22:00:00 Last Updated: 2024-08-06T18:09:17.246Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file, aka "VSD File Format Memory Corruption Vulnerability," a different vulnerability than CVE-2012-0019, CVE-2012-0136, CVE-2012-0137, and CVE-2012-0138. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA12-045A.html - https://oval.cisecurity.org/repository/search/definition/oval%3A
http://www.us-cert.gov/cas/techalerts/TA12-045A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14965 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-015
CVE ID: CVE-2012-0021 State: PUBLISHED Published: 2012-01-28T02:00:00 Last Updated: 2024-08-06T18:09:17.166Z Vendors: n/a Products: n/a Problem Types: n/a Description: The log_cookie function in mod_log_config.c in the mod_log_config module in the Apache HTTP Server 2.2.17 through 2.2.21, when a threaded MPM is used, does not properly handle a %{}C format string, which allows remote attackers to cause a denial of service (daemon crash) via a cookie that lacks both a name and a value. Additional Analyst Notes: - CVE Program Container: References: - http://svn.apache.org/viewvc?view=revision&revision=1227292 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041 - h
vc?view=revision&revision=1227292 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:012 - http://rhn.redhat.com/errata/RHSA-2012-0543.html - http://marc.info/?l=bugtraq&m=133294460209056&w=2 - https://issues.apache.org/bugzilla/show_bug.cgi?id=52256 - https://bugzilla.redhat.com/show_bug.cgi?id=785065 - http://marc.info/?l=bugtraq&m=133294460209056&w=2 - http://rhn.redhat.com/errata/RHSA-2012-0542.html - http://httpd.apache.org/security/vulnerabilities_22.html - http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.html - http://support.apple.com/kb/HT5501 - http://www.oracle.com/tech
.com/archives/security-announce/2012/Sep/msg00004.html - http://support.apple.com/kb/HT5501 - http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041 - http://marc.info/?l=bugtraq&m=133494237717847&w=2 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:150 - http://secunia.com/advisories/48551 - http://marc.info/?l=bugtraq&m=133494237717847&w=2 - https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache
3E - https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9b4b963760a3cb5a4a70c902f325
5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9b4b963760a3cb5a4a70c902f325c6c0337fe51d5b8570416f8f8729%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r05b5357d1f6bd106f41541ee7d87aafe3f5ea4dc3e9bde5ce09baff8%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r1d201e3da31a2c8aa870c8314623caef7debd74a13d0f25205e26f15%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.ap
rg/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2012-0022 State: PUBLISHED Published: 2012-01-19T02:00:00 Last Updated: 2024-08-06T18:09:17.249Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache Tomcat 5.5.x before 5.5.35, 6.x before 6.0.34, and 7.x before 7.0.23 uses an inefficient approach for handling parameters, which allows remote attackers to cause a denial of service (CPU consumption) via a request that contains many parameters and parameter values, a different vulnerability than CVE-2011-4858. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2012/dsa-2401 - http://rhn.redhat.com/errata/RHSA-2012-0325.html - https://exchange.xforce.ibmcloud.com/vulnerabiliti
ty/2012/dsa-2401 - http://rhn.redhat.com/errata/RHSA-2012-0325.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/72425 - http://marc.info/?l=bugtraq&m=136485229118404&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16925 - http://rhn.redhat.com/errata/RHSA-2012-0078.html - http://www.mandriva.com/security/advisories?name=MDVSA-2012:085 - http://secunia.com/advisories/48791 - http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html - http://www.securityfocus.com/bid/51447 - http://rhn.redhat.com/errata/RHSA-2012-0075.html - http://rhn.redhat.com/errata/RHSA-2012-0074.html - http://tomcat.apache.org/security-7.html - http:
HSA-2012-0075.html - http://rhn.redhat.com/errata/RHSA-2012-0074.html - http://tomcat.apache.org/security-7.html - http://secunia.com/advisories/48549 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18934 - http://secunia.com/advisories/48790 - http://tomcat.apache.org/security-6.html - http://archives.neohapsis.com/archives/bugtraq/2012-01/0112.html - http://rhn.redhat.com/errata/RHSA-2012-1331.html - http://secunia.com/advisories/50863 - http://rhn.redhat.com/errata/RHSA-2012-0345.html - http://tomcat.apache.org/security-5.html - http://marc.info/?l=bugtraq&m=133294394108746&w=2 - http://marc.info/?l=bugtraq&m=132871655717248&w=2 - http://marc.info/
ttp://marc.info/?l=bugtraq&m=133294394108746&w=2 - http://marc.info/?l=bugtraq&m=132871655717248&w=2 - http://marc.info/?l=bugtraq&m=133294394108746&w=2 - http://marc.info/?l=bugtraq&m=136485229118404&w=2 - http://marc.info/?l=bugtraq&m=132871655717248&w=2 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:150 - http://rhn.redhat.com/errata/RHSA-2012-0076.html - http://secunia.com/advisories/48213 - http://rhn.redhat.com/errata/RHSA-2012-0077.html - https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat
e.org%3E - https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E
CVE ID: CVE-2012-0023 State: PUBLISHED Published: 2012-10-30T19:00:00 Last Updated: 2024-08-06T18:09:17.257Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in the get_chunk_header function in modules/demux/ty.c in VideoLAN VLC media player 0.9.0 through 1.1.12 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted TiVo (TY) file. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/10/29/5 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71916 - http://www.osvdb.org/77975 - http://www.securityfocus.com/bid/51231 - http://secunia.com/a
d.com/vulnerabilities/71916 - http://www.osvdb.org/77975 - http://www.securityfocus.com/bid/51231 - http://secunia.com/advisories/47325 - http://www.openwall.com/lists/oss-security/2012/10/30/9 - http://www.videolan.org/security/sa1108.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15893 - http://securitytracker.com/id?1026449 - http://git.videolan.org/?p=vlc.git%3Ba=commit%3Bh=7d282fac1cc455b5a5eca2bb56375efcbf879b06
CVE ID: CVE-2012-0024 State: PUBLISHED Published: 2012-01-08T00:00:00Z Last Updated: 2024-09-17T00:51:16.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: MaraDNS before 1.3.07.12 and 1.4.x before 1.4.08 computes hash values for DNS data without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted queries with the Recursion Desired (RD) bit set. Additional Analyst Notes: - CVE Program Container: References: - http://samiam.org/blog/20111229.html - https://bugzilla.redhat.com/show_bug.cgi?id=771428 - http://openwall.com/lists/oss-security/2012/01/03/6 - http://openwall
tps://bugzilla.redhat.com/show_bug.cgi?id=771428 - http://openwall.com/lists/oss-security/2012/01/03/6 - http://openwall.com/lists/oss-security/2012/01/03/13
CVE ID: CVE-2012-0025 State: PUBLISHED Published: 2012-11-02T18:00:00 Last Updated: 2024-08-06T18:09:17.245Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in the Free_All_Memory function in jpeg/dectile.c in libfpx before 1.3.1-1, as used in the FlashPix PlugIn 4.2.2.0 for IrfanView, allows remote attackers to cause a denial of service (crash) via a crafted FPX image. Additional Analyst Notes: - CVE Program Container: References: - http://www.protekresearchlab.com/index.php?option=com_content&view=article&id=31&Itemid=31 - http://secunia.com/advisories/47322 - http://www.osvdb.org/77958 - http://www.imagemagick.org/download/delegates/libfpx-1.3.1-1.zip
ia.com/advisories/47322 - http://www.osvdb.org/77958 - http://www.imagemagick.org/download/delegates/libfpx-1.3.1-1.zip - http://www.openwall.com/lists/oss-security/2012/01/03/16 - http://secunia.com/advisories/47246 - http://www.exploit-db.com/exploits/18256 - https://security.gentoo.org/glsa/201605-03 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71892 - http://www.openwall.com/lists/oss-security/2012/11/02/6
CVE ID: CVE-2012-0026 State: REJECTED Published: 2012-01-04T11:00:00Z Last Updated: 2024-09-16T20:12:48.614Z Description: No description available.
CVE ID: CVE-2012-0027 State: PUBLISHED Published: 2012-01-06T01:00:00 Last Updated: 2024-08-06T18:09:17.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: The GOST ENGINE in OpenSSL before 1.0.0f does not properly handle invalid parameters for the GOST block cipher, which allows remote attackers to cause a denial of service (daemon crash) via crafted data from a TLS client. Additional Analyst Notes: - CVE Program Container: References: - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041 - http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564 - http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00017.html - http://www.openssl.org/n