Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-2639 State: PUBLISHED Published: 2009-07-28T19:06:00 Last Updated: 2024-08-07T05:59:56.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin.php in MRCGIGUY The Ticket System 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in a viewticket action. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/8917
CVE ID: CVE-2009-2640 State: PUBLISHED Published: 2009-07-28T19:06:00 Last Updated: 2024-08-07T05:59:56.213Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in cgi/admin.cgi in Interlogy Profile Manager Basic allow remote attackers to execute arbitrary SQL commands via a pmadm cookie in (1) an edittemp action or (2) a users action. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/8895 - http://packetstormsecurity.org/files/110437/Interlogy-Profile-Manager-Basic-Insecure-Cookie-Handling.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/73691 - https://exchange.xforce.ibmcloud.com/vul
ie-Handling.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/73691 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50992 - http://www.vupen.com/english/advisories/2009/1529
CVE ID: CVE-2009-2641 State: PUBLISHED Published: 2009-07-28T19:06:00 Last Updated: 2024-08-07T05:59:56.903Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in app_and_readme/navigator/index.php in School Data Navigator allows remote attackers to execute arbitrary PHP code via a URL in the page parameter. NOTE: this can also be leveraged to include and execute arbitrary local files via .. (dot dot) sequences. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/8924
CVE ID: CVE-2009-2642 State: PUBLISHED Published: 2009-07-28T19:06:00 Last Updated: 2024-08-07T05:59:56.199Z Vendors: n/a Products: n/a Problem Types: n/a Description: index.php in Desi Short URL Script 1.0 allows remote attackers to bypass authentication by setting the logged cookie to 1 and the uid cookie to an integer value, as demonstrated by a value of 13. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/8925
CVE ID: CVE-2009-2643 State: PUBLISHED Published: 2009-07-28T19:06:00 Last Updated: 2024-08-07T05:59:56.228Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the PDF distiller in the Attachment Service component in Research In Motion (RIM) BlackBerry Enterprise Server (BES) software 4.1.3 through 5.0 and BlackBerry Professional Software 4.1.4 allow user-assisted remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted .pdf file attachment, a different vulnerability than CVE-2008-3246 and CVE-2009-0219. Additional Analyst Notes: - CVE Program Container: References: - http://www.blackber
an CVE-2008-3246 and CVE-2009-0219. Additional Analyst Notes: - CVE Program Container: References: - http://www.blackberry.com/btsc/KB18327 - http://www.vupen.com/english/advisories/2009/1429 - http://secunia.com/advisories/35254 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50755 - http://www.securityfocus.com/bid/35102 - http://www.osvdb.org/54767 - http://www.securitytracker.com/id?1022295
CVE ID: CVE-2009-2644 State: PUBLISHED Published: 2009-07-29T17:00:00 Last Updated: 2024-08-07T05:59:56.555Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the Solaris Auditing subsystem in Sun Solaris 9 and 10 and OpenSolaris before snv_121, when extended file attributes are used, allows local users to cause a denial of service (panic) via vectors related to "pathnames for invalid fds." Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/2022 - http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020766.1-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6168
?assetkey=1-77-1020766.1-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6168 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-264429-1 - http://secunia.com/advisories/36042 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-122300-42-1 - http://www.securityfocus.com/bid/35835
CVE ID: CVE-2009-2645 State: REJECTED Published: 2009-07-30T18:00:00Z Last Updated: 2024-09-17T01:41:53.098Z Description: No description available.
CVE ID: CVE-2009-2646 State: PUBLISHED Published: 2009-07-30T19:00:00Z Last Updated: 2024-09-16T20:01:46.004Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the PDF distiller in the Attachment Service component in Research In Motion (RIM) BlackBerry Enterprise Server (BES) software 4.1.3 through 4.1.6 and BlackBerry Professional Software 4.1.4 allow user-assisted remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted .pdf file attachment, a different vulnerability than CVE-2008-3246 and CVE-2009-0219. Additional Analyst Notes: - CVE Program Container: References: - http://www.black
than CVE-2008-3246 and CVE-2009-0219. Additional Analyst Notes: - CVE Program Container: References: - http://www.blackberry.com/btsc/KB17953
CVE ID: CVE-2009-2647 State: PUBLISHED Published: 2009-07-30T19:00:00 Last Updated: 2024-08-07T05:59:56.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Kaspersky Anti-Virus 2010 and Kaspersky Internet Security 2010 before Critical Fix 9.0.0.463 allows remote attackers to disable the Kaspersky application via unknown attack vectors unrelated to "an external script." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/51986 - http://www.securityfocus.com/bid/35789 - http://osvdb.org/56351 - http://www.vupen.com/english/advisories/2009/1998 - http://secunia.com/advisories/35978 - http:
http://osvdb.org/56351 - http://www.vupen.com/english/advisories/2009/1998 - http://secunia.com/advisories/35978 - http://www.kaspersky.com/technews?id=203038755
CVE ID: CVE-2009-2648 State: PUBLISHED Published: 2009-07-30T19:00:00 Last Updated: 2024-08-07T05:59:56.592Z Vendors: n/a Products: n/a Problem Types: n/a Description: FlashDen Guestbook allows remote attackers to obtain configuration information via a direct request to amfphp/phpinfo.php, which calls the phpinfo function. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36000 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52001 - http://osvdb.org/56548 - http://packetstormsecurity.org/0907-exploits/flashden-disclose.txt
CVE ID: CVE-2009-2649 State: PUBLISHED Published: 2009-07-30T19:00:00 Last Updated: 2024-08-07T05:59:56.948Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IATA (ata) driver in FreeBSD 6.0 and 8.0, when read access to /dev is available, allows local users to cause a denial of service (kernel panic) via a certain IOCTL request with a large count, which triggers a malloc call with a large value. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1022538 - https://www.exploit-db.com/exploits/9134 - http://www.securityfocus.com/bid/35645
CVE ID: CVE-2009-2650 State: PUBLISHED Published: 2009-07-30T19:00:00 Last Updated: 2024-08-07T05:59:56.793Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Sorcerer Software MultiMedia Jukebox 4.0 Build 020124 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted (1) .m3u or possibly (2) .pst file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35860 - http://www.exploit-db.com/exploits/9173
CVE ID: CVE-2009-2651 State: PUBLISHED Published: 2009-07-30T19:08:00 Last Updated: 2024-08-07T05:59:56.882Z Vendors: n/a Products: n/a Problem Types: n/a Description: main/rtp.c in Asterisk Open Source 1.6.1 before 1.6.1.2 allows remote attackers to cause a denial of service (crash) via an RTP text frame without a certain delimiter, which triggers a NULL pointer dereference and the subsequent calculation of an invalid pointer. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1022608 - http://osvdb.org/56571 - http://downloads.digium.com/pub/security/AST-2009-004-1.6.1.diff.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/52046 - ht
ds.digium.com/pub/security/AST-2009-004-1.6.1.diff.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/52046 - http://downloads.asterisk.org/pub/security/AST-2009-004.html - http://www.securityfocus.com/bid/35837 - http://secunia.com/advisories/36039 - http://www.vupen.com/english/advisories/2009/2067
CVE ID: CVE-2009-2652 State: PUBLISHED Published: 2009-08-03T14:00:00 Last Updated: 2024-08-07T05:59:56.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Solaris Trusted Extensions in Sun Solaris 10, and OpenSolaris snv_37 through snv_120, allows remote attackers to cause a denial of service (panic) via vectors involving the parsing of labeled packets. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1022628 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-264808-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52129 - http://www.vupen.com/english/advisories/2009/2089 - http://secunia.c
xchange.xforce.ibmcloud.com/vulnerabilities/52129 - http://www.vupen.com/english/advisories/2009/2089 - http://secunia.com/advisories/36040 - http://www.securityfocus.com/bid/35882
CVE ID: CVE-2009-2653 State: PUBLISHED Published: 2009-08-03T14:00:00 Last Updated: 2024-08-07T05:59:56.236Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NtUserConsoleControl function in win32k.sys in Microsoft Windows XP SP2 and SP3, and Server 2003 before SP1, allows local administrators to bypass unspecified "security software" and gain privileges via a crafted call that triggers an overwrite of an arbitrary memory location. NOTE: the vendor disputes the significance of this report, stating that 'the Administrator to SYSTEM "escalation" is not a security boundary we defend. Additional Analyst Notes: - CVE Program Container: References: - http://www.ntinternals.org/index.
y boundary we defend. Additional Analyst Notes: - CVE Program Container: References: - http://www.ntinternals.org/index.html#09_07_30 - http://securitytracker.com/id?1022630 - http://blogs.technet.com/srd/archive/2009/06/11/latest-baidu-public-posting-requires-adminisrator-to-elevate.aspx - http://osvdb.org/56780 - http://www.exploit-db.com/exploits/9301 - http://hi.baidu.com/azy0922/blog/item/f950cbc2890729130ef47783.html
CVE ID: CVE-2009-2654 State: PUBLISHED Published: 2009-08-03T14:00:00 Last Updated: 2024-08-07T05:59:56.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 3.0.13, and 3.5.x before 3.5.2, allows remote attackers to spoof the address bar, and possibly conduct phishing attacks, via a crafted web page that calls window.open with an invalid character in the URL, makes document.write calls to the resulting object, and then calls the stop method during the loading of the error page. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/2142 - http://secunia.com/advisories/36141 - http://www.vupen.com/english
- http://www.vupen.com/english/advisories/2009/2142 - http://secunia.com/advisories/36141 - http://www.vupen.com/english/advisories/2009/2006 - http://www.securityfocus.com/archive/1/505265 - http://www.redhat.com/support/errata/RHSA-2009-1430.html - http://blog.mozilla.com/security/2009/07/28/url-bar-spoofing-vulnerability/ - http://sunsolve.sun.com/search/document.do?assetkey=1-66-266148-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=451898 - http://secunia.com/advisories/36001 - https://usn.ubuntu.com/811-1/ - http://www.securityfocus.com/bid/35803 - http://secunia.com/advisories/36670 - http://secunia.com/advisories/36669 - https://oval.cisecurity.org/repository/search/definition/oval%
/advisories/36670 - http://secunia.com/advisories/36669 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9686 - https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00261.html - http://secunia.com/advisories/36126 - http://www.redhat.com/support/errata/RHSA-2009-1432.html - http://www.mozilla.org/security/announce/2009/mfsa2009-44.html - https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00198.html - http://www.securityfocus.com/archive/1/505242/30/0/threaded - http://osvdb.org/56717 - http://www.securitytracker.com/id?1022603 - http://es.geocities.com/jplopezy/firefoxspoofing.html - http://www.debian.org/security/
securitytracker.com/id?1022603 - http://es.geocities.com/jplopezy/firefoxspoofing.html - http://www.debian.org/security/2009/dsa-1873 - http://www.redhat.com/support/errata/RHSA-2009-1431.html - http://secunia.com/advisories/36435
CVE ID: CVE-2009-2655 State: PUBLISHED Published: 2009-08-03T14:00:00 Last Updated: 2024-08-07T05:59:56.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: mshtml.dll in Microsoft Internet Explorer 7 and 8 on Windows XP SP3 allows remote attackers to cause a denial of service (application crash) by calling the JavaScript findText method with a crafted Unicode string in the first argument, and only one additional argument, as demonstrated by a second argument of -1. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35799 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52249 - https://oval.cisecurity.org/repository/search/defin
35799 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52249 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12700 - http://www.exploit-db.com/exploits/9253
CVE ID: CVE-2009-2656 State: PUBLISHED Published: 2009-08-03T18:00:00 Last Updated: 2024-08-07T05:59:56.189Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the com.android.phone process in Android 1.0, 1.1, and 1.5 allows remote attackers to cause a denial of service (network disconnection) via a crafted SMS message, as demonstrated by Collin Mulliner and Charlie Miller at Black Hat USA 2009. Additional Analyst Notes: - CVE Program Container: References: - http://www.blackhat.com/presentations/bh-usa-09/MILLER/BHUSA09-Miller-FuzzingPhone-PAPER.pdf - http://www.securityfocus.com/bid/35886 - http://osvdb.org/56750
CVE ID: CVE-2009-2657 State: PUBLISHED Published: 2009-08-04T16:13:00Z Last Updated: 2024-09-17T02:32:21.864Z Vendors: n/a Products: n/a Problem Types: n/a Description: nilfs-utils before 2.0.14 installs multiple programs with unnecessary setuid privileges, which allows local users to execute arbitrary commands via the device string in a -c command line option to mkfs.nilfs2. Additional Analyst Notes: - CVE Program Container: References: - http://www.nilfs.org/git/?p=nilfs2-utils.git%3Ba=commitdiff%3Bh=a5cb60e624e4863c8d6feaf2ea8791abb48d6f15 - http://www.nilfs.org/git/?p=nilfs2-utils.git%3Ba=commitdiff%3Bh=5c95a57102e23e6982467cbe23e922450d3f38ed - http://www.nilfs.org/git/?p=nilfs2-utils.g
ilfs2-utils.git%3Ba=commitdiff%3Bh=5c95a57102e23e6982467cbe23e922450d3f38ed - http://www.nilfs.org/git/?p=nilfs2-utils.git%3Ba=commitdiff%3Bh=d807e1c968c1f288486fb7d6f817434838fc12f7 - http://www.openwall.com/lists/oss-security/2009/07/24/4 - https://bugzilla.redhat.com/show_bug.cgi?id=505374
CVE ID: CVE-2009-2658 State: PUBLISHED Published: 2009-08-04T16:13:00 Last Updated: 2024-08-07T05:59:56.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in ZNC before 0.072 allows remote attackers to overwrite arbitrary files via a crafted DCC SEND request. Additional Analyst Notes: - CVE Program Container: References: - http://en.znc.in/w/index.php?title=ZNC&oldid=3209#WARNING - http://www.openwall.com/lists/oss-security/2009/07/21/5 - https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00965.html - http://znc.svn.sourceforge.net/viewvc/znc?view=rev&sortby=rev&sortdir=down&revision=1570 - http://en.znc.in/wiki/ChangeLog/0.072
nc.svn.sourceforge.net/viewvc/znc?view=rev&sortby=rev&sortdir=down&revision=1570 - http://en.znc.in/wiki/ChangeLog/0.072 - http://secunia.com/advisories/35916 - http://www.debian.org/security/2009/dsa-1848
CVE ID: CVE-2009-2659 State: PUBLISHED Published: 2009-08-04T16:13:00 Last Updated: 2024-08-07T05:59:56.995Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Admin media handler in core/servers/basehttp.py in Django 1.0 and 0.96 does not properly map URL requests to expected "static media files," which allows remote attackers to conduct directory traversal attacks and read arbitrary files via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2009/07/29/2 - http://www.securityfocus.com/bid/35859 - http://code.djangoproject.com/changeset/11353 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=539134 - https
/35859 - http://code.djangoproject.com/changeset/11353 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=539134 - https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00055.html - http://secunia.com/advisories/36137 - http://secunia.com/advisories/36153 - https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00069.html - http://www.djangoproject.com/weblog/2009/jul/28/security/
CVE ID: CVE-2009-2660 State: PUBLISHED Published: 2009-08-04T16:13:00 Last Updated: 2024-08-07T05:59:56.842Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in CamlImages 2.2 might allow context-dependent attackers to execute arbitrary code via images containing large width and height values that trigger a heap-based buffer overflow, related to (1) crafted GIF files (gifread.c) and (2) crafted JPEG files (jpegread.c), a different vulnerability than CVE-2009-2295. Additional Analyst Notes: - CVE Program Container: References: - http://security.debian.org/pool/updates/main/c/camlimages/camlimages_2.2.0-4+lenny3.diff.gz - http://www.securityfocus.com/bid/35
curity.debian.org/pool/updates/main/c/camlimages/camlimages_2.2.0-4+lenny3.diff.gz - http://www.securityfocus.com/bid/35999 - http://www.openwall.com/lists/oss-security/2009/07/25/2 - http://www.debian.org/security/2009/dsa-1857 - ftp://ftp.debian.org/debian/pool/main/c/camlimages/camlimages_3.0.1-3.diff.gz - http://www.debian.org/security/2009/dsa-1912 - http://secunia.com/advisories/37067 - ftp://ftp.debian.org/debian/pool/main/c/camlimages/camlimages_2.2.0-4+lenny2.diff.gz - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=540146 - http://security.debian.org/pool/updates/main/c/camlimages/camlimages_2.20-8+etch3.diff.gz - http://camlcvs.inria.fr/cgi-bin/cvsweb.cgi/bazar-ocaml/camlimages/s
/main/c/camlimages/camlimages_2.20-8+etch3.diff.gz - http://camlcvs.inria.fr/cgi-bin/cvsweb.cgi/bazar-ocaml/camlimages/src/jpegread.c.diff?r1=1.3%3Br2=1.4%3Bsortby=date%3Bf=h - https://bugs.gentoo.org/attachment.cgi?id=199108 - ftp://ftp.debian.org/debian/pool/main/c/camlimages/camlimages_2.20-8+etch2.diff.gz - https://bugs.gentoo.org/show_bug.cgi?id=276235 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52649
CVE ID: CVE-2009-2661 State: PUBLISHED Published: 2009-08-04T16:13:00 Last Updated: 2024-08-07T05:59:56.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: The asn1_length function in strongSwan 2.8 before 2.8.11, 4.2 before 4.2.17, and 4.3 before 4.3.3 does not properly handle X.509 certificates with crafted Relative Distinguished Names (RDNs), which allows remote attackers to cause a denial of service (pluto IKE daemon crash) via malformed ASN.1 data. NOTE: this is due to an incomplete fix for CVE-2009-2185. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2009/07/27/1 - http://download.strongswan.org/patches/07_asn1_le
eferences: - http://www.openwall.com/lists/oss-security/2009/07/27/1 - http://download.strongswan.org/patches/07_asn1_length_patch/strongswan-4.x.x_asn1_length.patch - http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html - http://secunia.com/advisories/36922 - http://www.debian.org/security/2009/dsa-1899 - http://www.vupen.com/english/advisories/2009/2247 - http://up2date.astaro.com/2009/08/up2date_7505_released.html - http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html - http://download.strongswan.org/patches/07_asn1_length_patch/strongswan-4.3.x_asn1_length.patch - https://lists.strongswan.org/pipermail/announce/2009-July/000056.html
CVE ID: CVE-2009-2662 State: PUBLISHED Published: 2009-08-04T16:13:00 Last Updated: 2024-08-07T05:59:56.234Z Vendors: n/a Products: n/a Problem Types: n/a Description: The browser engine in Mozilla Firefox 3.5.x before 3.5.2 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the TraceRecorder::snapshot function in js/src/jstracer.cpp, and unspecified other vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/2142 - http://www.mozilla.org/security/announce/2009/mfsa2009-45.html - http://sunsolve.sun.com/search/document.do?asset
2142 - http://www.mozilla.org/security/announce/2009/mfsa2009-45.html - http://sunsolve.sun.com/search/document.do?assetkey=1-66-266148-1 - https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00261.html - http://secunia.com/advisories/36126 - https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00198.html - https://bugzilla.mozilla.org/show_bug.cgi?id=502832 - http://www.securityfocus.com/bid/35927 - https://bugzilla.mozilla.org/show_bug.cgi?id=503144
CVE ID: CVE-2009-2663 State: PUBLISHED Published: 2009-08-04T16:13:00 Last Updated: 2024-08-07T05:59:56.959Z Vendors: n/a Products: n/a Problem Types: n/a Description: libvorbis before r16182, as used in Mozilla Firefox 3.5.x before 3.5.2 and other products, allows context-dependent attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted .ogg file. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/2142 - https://bugzilla.mozilla.org/show_bug.cgi?id=500254 - https://usn.ubuntu.com/825-1/ - http://www.mozilla.org/security/announce/2009/mfsa2009-45.html - http://
cgi?id=500254 - https://usn.ubuntu.com/825-1/ - http://www.mozilla.org/security/announce/2009/mfsa2009-45.html - http://sunsolve.sun.com/search/document.do?assetkey=1-66-266148-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52397 - http://secunia.com/advisories/36263 - https://bugzilla.redhat.com/show_bug.cgi?id=516259 - https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00261.html - http://www.vupen.com/english/advisories/2009/2223 - http://secunia.com/advisories/36126 - https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00198.html - https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00481.html - https://oval.cisecurity.o
198.html - https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00481.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9506 - http://www.securityfocus.com/bid/35927 - http://www.securityfocus.com/bid/36018 - http://secunia.com/advisories/36463 - http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html - http://secunia.com/advisories/36230