Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2011-0479 State: PUBLISHED Published: 2011-01-14T16:00:00 Last Updated: 2024-08-06T21:51:09.279Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly interact with extensions, which allows remote attackers to cause a denial of service via a crafted extension that triggers an uninitialized pointer. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2011/01/chrome-stable-release.html - http://www.securityfocus.com/bid/45788 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14746 - http://www.srware.net/
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14746 - http://www.srware.net/forum/viewtopic.php?f=18&t=2054 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64670 - http://code.google.com/p/chromium/issues/detail?id=67393 - http://osvdb.org/70462 - http://secunia.com/advisories/42951
CVE ID: CVE-2011-0480 State: PUBLISHED Published: 2011-01-14T16:00:00 Last Updated: 2024-08-06T21:51:08.928Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in vorbis_dec.c in the Vorbis decoder in FFmpeg, as used in Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344, allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via a crafted WebM file, related to buffers for (1) the channel floor and (2) the channel residue. Additional Analyst Notes: - CVE Program Container: References: - http://roundup.ffmpeg.org/issue2548 - http://www.debian.org/security/2011/dsa-2
: - CVE Program Container: References: - http://roundup.ffmpeg.org/issue2548 - http://www.debian.org/security/2011/dsa-2306 - http://googlechromereleases.blogspot.com/2011/01/chrome-stable-release.html - http://article.gmane.org/gmane.comp.video.ffmpeg.devel/122703 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=610550 - http://codereview.chromium.org/6069005 - http://www.securityfocus.com/bid/45788 - http://git.ffmpeg.org/?p=ffmpeg.git%3Ba=commit%3Bh=13184036a6b1b1d4b61c91118c0896e9ad4634c3 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:061 - http://src.chromium.org/viewvc/chrome?view=rev&revision=70200 - http://codereview.chromium.org/5964011 - http://www.srware.net/forum
hromium.org/viewvc/chrome?view=rev&revision=70200 - http://codereview.chromium.org/5964011 - http://www.srware.net/forum/viewtopic.php?f=18&t=2054 - http://www.ubuntu.com/usn/usn-1104-1/ - http://osvdb.org/70463 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64671 - http://ffmpeg.mplayerhq.hu/ - http://code.google.com/p/chromium/issues/detail?id=68115 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14380 - http://roundup.ffmpeg.org/issue2550 - http://secunia.com/advisories/42951
CVE ID: CVE-2011-0481 State: PUBLISHED Published: 2011-01-14T16:00:00 Last Updated: 2024-08-06T21:51:09.254Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to PDF shading. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/70464 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64672 - http://googlechromereleases.blogspot.com/2011/01/chrome-stable-release.html - http://www.securityfocus.com/bid/45788 - http://www.srware.net/forum/viewtopic.php?f=18
/01/chrome-stable-release.html - http://www.securityfocus.com/bid/45788 - http://www.srware.net/forum/viewtopic.php?f=18&t=2054 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14418 - http://code.google.com/p/chromium/issues/detail?id=68170 - http://secunia.com/advisories/42951
CVE ID: CVE-2011-0482 State: PUBLISHED Published: 2011-01-14T16:00:00 Last Updated: 2024-08-06T21:51:08.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly perform a cast of an unspecified variable during handling of anchors, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted HTML document. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html - http://googlechromereleases.blogspot.com/2011/01/chrome-stable-release.html - https://exchange.xforce.ibmclo
0005.html - http://googlechromereleases.blogspot.com/2011/01/chrome-stable-release.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/64673 - http://www.securityfocus.com/bid/45788 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14662 - http://code.google.com/p/chromium/issues/detail?id=68178 - http://osvdb.org/70465 - http://www.srware.net/forum/viewtopic.php?f=18&t=2054 - http://www.debian.org/security/2011/dsa-2188 - http://secunia.com/advisories/42951
CVE ID: CVE-2011-0483 State: PUBLISHED Published: 2011-01-14T16:00:00 Last Updated: 2024-08-06T21:51:09.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly perform a cast of an unspecified variable during handling of video, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/70466 - http://googlechromereleases.blogspot.com/2011/01/chrome-stable-release.html - http://www.securityfocus.com/bid/45788 - https://exchange.xforce.ibmcloud.com/vulnerabilitie
hrome-stable-release.html - http://www.securityfocus.com/bid/45788 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64674 - http://www.srware.net/forum/viewtopic.php?f=18&t=2054 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14706 - http://code.google.com/p/chromium/issues/detail?id=68181 - http://secunia.com/advisories/42951
CVE ID: CVE-2011-0484 State: PUBLISHED Published: 2011-01-14T16:00:00 Last Updated: 2024-08-06T21:51:08.993Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly perform DOM node removal, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale rendering node." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14131 - http://osvdb.org/70467 - http://googlechromereleases.blogspot.com/2011/01/chrome-stable-release.html - h
3Adef%3A14131 - http://osvdb.org/70467 - http://googlechromereleases.blogspot.com/2011/01/chrome-stable-release.html - http://www.securityfocus.com/bid/45788 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64675 - http://www.srware.net/forum/viewtopic.php?f=18&t=2054 - http://code.google.com/p/chromium/issues/detail?id=68439 - http://secunia.com/advisories/42951
CVE ID: CVE-2011-0485 State: PUBLISHED Published: 2011-01-14T16:00:00 Last Updated: 2024-08-06T21:51:08.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle speech data, which allows remote attackers to execute arbitrary code via unspecified vectors that lead to a "stale pointer." Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/70468 - http://googlechromereleases.blogspot.com/2011/01/chrome-stable-release.html - http://www.securityfocus.com/bid/45788 - http://www.srware.net/forum/viewtopic.php?f=18&t=2054 - https://oval.cisecurity.org/repository/search/definit
id/45788 - http://www.srware.net/forum/viewtopic.php?f=18&t=2054 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14381 - http://code.google.com/p/chromium/issues/detail?id=68666 - http://secunia.com/advisories/42951 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64676
CVE ID: CVE-2011-0486 State: PUBLISHED Published: 2011-01-18T17:00:00 Last Updated: 2024-08-06T21:51:09.167Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in cognos.cgi in IBM Cognos 8 Business Intelligence (BI) 8.4.1 before FP1 allows remote attackers to inject arbitrary web script or HTML via the pathinfo parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/45781 - http://securitytracker.com/id?1024954 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64660 - http://www.vupen.com/english/advisories/2011/0090 - http://www-01.ibm.com/support/docview.wss?uid=swg24026110 - http://
http://www.vupen.com/english/advisories/2011/0090 - http://www-01.ibm.com/support/docview.wss?uid=swg24026110 - http://www.securityfocus.com/archive/1/515643/100/0/threaded - http://osvdb.org/70485
CVE ID: CVE-2011-0487 State: PUBLISHED Published: 2011-01-18T17:00:00 Last Updated: 2024-08-06T21:51:08.844Z Vendors: n/a Products: n/a Problem Types: n/a Description: ICQ 7 does not verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a crafted file that is fetched through an automatic-update mechanism. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/680540 - http://www.securityfocus.com/archive/1/515724/100/0/threaded - http://www.securityfocus.com/bid/45805 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64711 - http://osvdb.org/70486
CVE ID: CVE-2011-0488 State: PUBLISHED Published: 2011-01-18T17:00:00 Last Updated: 2024-08-06T21:51:09.075Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in NTWebServer.exe in the test web service in InduSoft NTWebServer, as distributed in Advantech Studio 6.1 and InduSoft Web Studio 7.0, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a long request to TCP port 80. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/42903 - http://www.osvdb.org/70396 - http://www.indusoft.com/blog/?p=337 - http://www.kb.cert.org/vuls/id/506864 - http://www.vupen.com
www.osvdb.org/70396 - http://www.indusoft.com/blog/?p=337 - http://www.kb.cert.org/vuls/id/506864 - http://www.vupen.com/english/advisories/2011/0093 - http://downloadt.advantech.com/download/downloadsr.aspx?File_Id=1-I1D7QD - http://www.us-cert.gov/control_systems/pdf/ICSA-10-337-01.pdf - http://www.vupen.com/english/advisories/2011/0092 - http://www.advantechdirect.com/emarketingprograms/AStudio_Patch/AStudio_Patch.htm - http://secunia.com/advisories/42883 - http://www.securityfocus.com/bid/45783 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64678
CVE ID: CVE-2011-0489 State: PUBLISHED Published: 2011-01-18T17:00:00 Last Updated: 2024-08-06T21:51:09.167Z Vendors: n/a Products: n/a Problem Types: n/a Description: The server components in Objectivity/DB 10.0 do not require authentication for administrative commands, which allows remote attackers to modify data, obtain sensitive information, or cause a denial of service by sending requests over TCP to (1) the Lock Server or (2) the Advanced Multithreaded Server, as demonstrated by commands that are ordinarily sent by the (a) ookillls and (b) oostopams applications. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: Re
: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/42901 - http://www.exploit-db.com/exploits/15988 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64699 - http://osvdb.org/70424 - http://www.kb.cert.org/vuls/id/782567 - http://www.securityfocus.com/bid/45803 - http://www.vupen.com/english/advisories/2011/0127
CVE ID: CVE-2011-0490 State: PUBLISHED Published: 2011-01-19T11:00:00 Last Updated: 2024-08-06T21:51:08.860Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha makes calls to Libevent within Libevent log handlers, which might allow remote attackers to cause a denial of service (daemon crash) via vectors that trigger certain log messages. Additional Analyst Notes: - CVE Program Container: References: - http://archives.seul.org/or/announce/Jan-2011/msg00000.html - https://gitweb.torproject.org/tor.git/blob/refs/heads/release-0.2.2:/ChangeLog - http://blog.torproject.org/blog/tor-02129-released-security-patches - https://exchange.xfo
ds/release-0.2.2:/ChangeLog - http://blog.torproject.org/blog/tor-02129-released-security-patches - https://exchange.xforce.ibmcloud.com/vulnerabilities/64889 - https://trac.torproject.org/projects/tor/ticket/2190 - http://www.securityfocus.com/bid/45953
CVE ID: CVE-2011-0491 State: PUBLISHED Published: 2011-01-19T11:00:00 Last Updated: 2024-08-06T21:51:09.175Z Vendors: n/a Products: n/a Problem Types: n/a Description: The tor_realloc function in Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha does not validate a certain size value during memory allocation, which might allow remote attackers to cause a denial of service (daemon crash) via unspecified vectors, related to "underflow errors." Additional Analyst Notes: - CVE Program Container: References: - http://archives.seul.org/or/announce/Jan-2011/msg00000.html - https://gitweb.torproject.org/tor.git/blob/refs/heads/release-0.2.2:/ChangeLog - https://trac.torproject.org/projects/tor/t
ps://gitweb.torproject.org/tor.git/blob/refs/heads/release-0.2.2:/ChangeLog - https://trac.torproject.org/projects/tor/ticket/2324 - http://blog.torproject.org/blog/tor-02129-released-security-patches - https://exchange.xforce.ibmcloud.com/vulnerabilities/64888 - http://www.securityfocus.com/bid/45953
CVE ID: CVE-2011-0492 State: PUBLISHED Published: 2011-01-19T11:00:00 Last Updated: 2024-08-06T21:51:09.078Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha allows remote attackers to cause a denial of service (assertion failure and daemon exit) via blobs that trigger a certain file size, as demonstrated by the cached-descriptors.new file. Additional Analyst Notes: - CVE Program Container: References: - http://archives.seul.org/or/announce/Jan-2011/msg00000.html - https://gitweb.torproject.org/tor.git/blob/refs/heads/release-0.2.2:/ChangeLog - http://blog.torproject.org/blog/tor-02129-released-security-patches - https://exchang
s/heads/release-0.2.2:/ChangeLog - http://blog.torproject.org/blog/tor-02129-released-security-patches - https://exchange.xforce.ibmcloud.com/vulnerabilities/64867 - https://trac.torproject.org/projects/tor/ticket/2326 - http://www.securityfocus.com/bid/45953
CVE ID: CVE-2011-0493 State: PUBLISHED Published: 2011-01-19T11:00:00 Last Updated: 2024-08-06T21:58:24.443Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha might allow remote attackers to cause a denial of service (assertion failure and daemon exit) via vectors related to malformed router caches and improper handling of integer values. Additional Analyst Notes: - CVE Program Container: References: - http://archives.seul.org/or/announce/Jan-2011/msg00000.html - https://gitweb.torproject.org/tor.git/blob/refs/heads/release-0.2.2:/ChangeLog - https://trac.torproject.org/projects/tor/ticket/2352 - http://blog.torproject.org/blog/t
eads/release-0.2.2:/ChangeLog - https://trac.torproject.org/projects/tor/ticket/2352 - http://blog.torproject.org/blog/tor-02129-released-security-patches - https://exchange.xforce.ibmcloud.com/vulnerabilities/64864 - http://www.securityfocus.com/bid/45953
CVE ID: CVE-2011-0494 State: PUBLISHED Published: 2011-01-19T11:00:00 Last Updated: 2024-08-06T21:58:24.526Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in WebSEAL in IBM Tivoli Access Manager for e-business 5.1 before 5.1.0.39-TIV-AWS-IF0040, 6.0 before 6.0.0.25-TIV-AWS-IF0026, 6.1.0 before 6.1.0.5-TIV-AWS-IF0006, and 6.1.1 before 6.1.1-TIV-AWS-FP0001 has unspecified impact and attack vectors. NOTE: this might overlap CVE-2010-4622. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg24028861 - http://www-01.ibm.com/support/docview.wss?uid=swg24028829 - http://secunia.com/advisorie
t/docview.wss?uid=swg24028861 - http://www-01.ibm.com/support/docview.wss?uid=swg24028829 - http://secunia.com/advisories/42955 - http://www-01.ibm.com/support/docview.wss?uid=swg24025790 - http://www.securityfocus.com/bid/45836 - http://www-01.ibm.com/support/docview.wss?uid=swg1IZ87470 - http://www-01.ibm.com/support/docview.wss?uid=swg1IZ91620 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64737 - http://www-01.ibm.com/support/docview.wss?uid=swg1IZ91619 - http://www-01.ibm.com/support/docview.wss?uid=swg24028860 - http://www-01.ibm.com/support/docview.wss?uid=swg1IZ87328 - http://www.vupen.com/english/advisories/2011/0138 - http://www-01.ibm.com/support/docview.wss?uid=swg2145999
g1IZ87328 - http://www.vupen.com/english/advisories/2011/0138 - http://www-01.ibm.com/support/docview.wss?uid=swg21459999
CVE ID: CVE-2011-0495 State: PUBLISHED Published: 2011-01-20T18:00:00 Last Updated: 2024-08-06T21:58:24.451Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the ast_uri_encode function in main/utils.c in Asterisk Open Source before 1.4.38.1, 1.4.39.1, 1.6.1.21, 1.6.2.15.1, 1.6.2.16.1, 1.8.1.2, 1.8.2.; and Business Edition before C.3.6.2; when running in pedantic mode allows remote authenticated users to execute arbitrary code via crafted caller ID data in vectors involving the (1) SIP channel driver, (2) URIENCODE dialplan function, or (3) AGI dialplan function. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/eng
or (3) AGI dialplan function. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/0159 - http://lists.fedoraproject.org/pipermail/package-announce/2011-February/053713.html - http://downloads.asterisk.org/pub/security/AST-2011-001.html - http://secunia.com/advisories/43373 - http://www.vupen.com/english/advisories/2011/0449 - http://osvdb.org/70518 - http://www.securityfocus.com/bid/45839 - http://www.vupen.com/english/advisories/2011/0281 - http://lists.fedoraproject.org/pipermail/package-announce/2011-February/053689.html - http://www.debian.org/security/2011/dsa-2171 - http://secunia.com/advisories/43119 - https://exchange.xforce.
689.html - http://www.debian.org/security/2011/dsa-2171 - http://secunia.com/advisories/43119 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64831 - http://downloads.asterisk.org/pub/security/AST-2011-001-1.6.2.diff - http://www.securityfocus.com/archive/1/515781/100/0/threaded - http://secunia.com/advisories/42935
CVE ID: CVE-2011-0496 State: PUBLISHED Published: 2011-01-20T18:00:00 Last Updated: 2024-08-06T21:58:24.444Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Sybase EAServer 5.x and 6.x before 6.3 ESD#2, as used in Appeon, Replication Server Messaging Edition (RSME), and WorkSpace, allows remote attackers to install arbitrary web services and execute arbitrary code, related to a "design vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/42904 - http://osvdb.org/70428 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64697 - http://www.sybase.com/detail?id=1091057 - http://www.securityfocus
/exchange.xforce.ibmcloud.com/vulnerabilities/64697 - http://www.sybase.com/detail?id=1091057 - http://www.securityfocus.com/bid/45809 - http://www.vupen.com/english/advisories/2011/0125
CVE ID: CVE-2011-0497 State: PUBLISHED Published: 2011-01-20T18:00:00 Last Updated: 2024-08-06T21:58:24.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Sybase EAServer 6.x before 6.3 ESD#2, as used in Appeon, Replication Server Messaging Edition (RSME), and WorkSpace, allows remote attackers to read arbitrary files via "../\" (dot dot forward-slash backslash) sequences in a crafted request. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/64695 - http://secunia.com/advisories/42904 - http://www.sybase.com/detail?id=1091057 - http://www.securityfocus.com/bid/45809 - http:/
secunia.com/advisories/42904 - http://www.sybase.com/detail?id=1091057 - http://www.securityfocus.com/bid/45809 - http://osvdb.org/70427 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=889 - http://www.vupen.com/english/advisories/2011/0125
CVE ID: CVE-2011-0498 State: PUBLISHED Published: 2011-01-20T18:00:00Z Last Updated: 2024-09-17T00:55:53.629Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Nokia Multimedia Player 1.00.55.5010, and possibly other versions, allows user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long entry in a playlist (.npl) file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/42852 - http://www.exploit-db.com/exploits/15975 - http://www.vupen.com/english/advisories/2011/0083 - http://osvdb.org/70416
CVE ID: CVE-2011-0499 State: PUBLISHED Published: 2011-01-20T18:00:00 Last Updated: 2024-08-06T21:58:24.513Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in VideoSpirit Pro 1.6.8.1 and possibly earlier versions, and VideoSpirit Lite 1.4.0.1 and possibly other versions, allows user-assisted remote attackers to execute arbitrary code via a VideoSpirit project (.visprj) file containing a valitem element with a long "name" attribute. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/42876 - http://secunia.com
dditional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/42876 - http://secunia.com/advisories/42866 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64863
CVE ID: CVE-2011-0500 State: PUBLISHED Published: 2011-01-20T18:00:00Z Last Updated: 2024-09-16T17:04:14.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in VideoSpirit Pro 1.6.8.1, 1.68, and earlier; and VideoSpirit Lite 1.4.0.1 and possibly other versions; allows user-assisted remote attackers to execute arbitrary code via a VideoSpirit project (.visprj) file containing a valitem element with a long "value" attribute, as demonstrated using a valitem with the mp3 name. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/42876 - http://secunia.com/advisories/42866 - http://www.exploit-db.com/exploits/15936
CVE ID: CVE-2011-0501 State: PUBLISHED Published: 2011-01-20T18:00:00Z Last Updated: 2024-09-16T22:20:01.650Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Music Animation Machine MIDI Player 2006aug19 Release 035 and possibly other versions allows user-assisted remote attackers to execute arbitrary code via a long line in a .mamx file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/42790 - http://www.exploit-db.com/exploits/15901