Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-1427 State: PUBLISHED Published: 2010-04-15T21:12:00 Last Updated: 2024-08-07T01:21:19.106Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the SearchHighlight plugin in MODx Evolution before 1.0.3 allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to AjaxSearch. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000013.html - http://secunia.com/advisories/39298 - https://exchange.xforce.ibmcloud.com/vulnerabilities/57635 - http://jvn.jp/en/jp/JVN46669729/index.html - http://modxcms.com/forums/index.php/topic%2C47759.msg
lnerabilities/57635 - http://jvn.jp/en/jp/JVN46669729/index.html - http://modxcms.com/forums/index.php/topic%2C47759.msg280304.html#msg280304
CVE ID: CVE-2010-1428 State: PUBLISHED Published: 2010-04-28T22:00:00.000Z Last Updated: 2025-10-22T00:05:52.450Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Web Console (aka web-console) in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 performs access control only for the GET and POST methods, which allows remote attackers to obtain sensitive information via an unspecified request that uses a different method. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://rhn.redhat.com/errata/RHSA-2010-0379.html - https://rhn.redhat.com/errata/RHSA-2010-
Vulnrichment: References: - https://rhn.redhat.com/errata/RHSA-2010-0379.html - https://rhn.redhat.com/errata/RHSA-2010-0378.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/58148 - http://marc.info/?l=bugtraq&m=132698550418872&w=2 - https://rhn.redhat.com/errata/RHSA-2010-0376.html - https://bugzilla.redhat.com/show_bug.cgi?id=585899 - https://rhn.redhat.com/errata/RHSA-2010-0377.html - http://marc.info/?l=bugtraq&m=132698550418872&w=2 - http://www.vupen.com/english/advisories/2010/0992 - http://securitytracker.com/id?1023917 - http://www.securityfocus.com/bid/39710 - http://secunia.com/advisories/39563
CVE ID: CVE-2010-1429 State: PUBLISHED Published: 2010-04-28T22:00:00 Last Updated: 2024-08-07T01:21:19.049Z Vendors: n/a Products: n/a Problem Types: n/a Description: Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 allows remote attackers to obtain sensitive information about "deployed web contexts" via a request to the status servlet, as demonstrated by a full=true query string. NOTE: this issue exists because of a CVE-2008-3273 regression. Additional Analyst Notes: - CVE Program Container: References: - https://rhn.redhat.com/errata/RHSA-2010-0379.html - https://rhn.redhat.com/errata/RHSA-2010-0378.html - http://marc.i
- https://rhn.redhat.com/errata/RHSA-2010-0379.html - https://rhn.redhat.com/errata/RHSA-2010-0378.html - http://marc.info/?l=bugtraq&m=132698550418872&w=2 - https://rhn.redhat.com/errata/RHSA-2010-0376.html - https://rhn.redhat.com/errata/RHSA-2010-0377.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/58149 - http://marc.info/?l=bugtraq&m=132698550418872&w=2 - http://www.vupen.com/english/advisories/2010/0992 - https://www.exploit-db.com/exploits/44009/ - http://www.securityfocus.com/bid/39710 - http://secunia.com/advisories/39563 - http://securitytracker.com/id?1023918 - https://bugzilla.redhat.com/show_bug.cgi?id=585900
CVE ID: CVE-2010-1430 State: REJECTED Published: 2017-07-24T16:00:00 Last Updated: 2017-07-24T15:57:01 Description: No description available.
CVE ID: CVE-2010-1431 State: PUBLISHED Published: 2010-05-04T15:00:00 Last Updated: 2024-08-07T01:21:19.034Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in templates_export.php in Cacti 0.8.7e and earlier allows remote attackers to execute arbitrary SQL commands via the export_item_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2010/Apr/272 - http://www.vupen.com/english/advisories/2010/0986 - http://www.debian.org/security/2010/dsa-2039 - http://www.cacti.net/downloads/patches/0.8.7e/sql_injection_template_export.patch - http://www.vupen.com/english/advisories/2010/1107 - http://lis
oads/patches/0.8.7e/sql_injection_template_export.patch - http://www.vupen.com/english/advisories/2010/1107 - http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html - http://secunia.com/advisories/41041 - http://secunia.com/advisories/39568 - https://rhn.redhat.com/errata/RHSA-2010-0635.html - http://www.mandriva.com/security/advisories?name=MDVSA-2010:092 - http://www.vupen.com/english/advisories/2010/2132 - http://www.securityfocus.com/bid/39653 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=578909 - http://secunia.com/advisories/39572 - http://www.exploit-db.com/sploits/Bonsai-SQL_Injection_in_Cacti.pdf
CVE ID: CVE-2010-1432 State: PUBLISHED Published: 2021-06-21T22:10:14 Last Updated: 2024-08-07T01:21:18.970Z Vendors: n/a Products: Joomla Problem Types: CWE-200 Description: Joomla! Core is prone to an information disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may help in launching further attacks. Joomla! Core versions 1.5.x ranging from 1.5.0 and up to and including 1.5.15 are vulnerable. Additional Analyst Notes: - CVE Program Container: References: - https://www.acunetix.com/vulnerabilities/web/joomla-core-1-5-x-information-disclosure-1-5-0-1-5-15/ - https://developer.joomla.org/security-centre/311-20100423-core-negative-values-for-limit-
ion-disclosure-1-5-0-1-5-15/ - https://developer.joomla.org/security-centre/311-20100423-core-negative-values-for-limit-and-offset.html
CVE ID: CVE-2010-1433 State: PUBLISHED Published: 2021-06-21T22:13:29 Last Updated: 2024-08-07T01:21:19.218Z Vendors: n/a Products: Joomla Problem Types: CWE-434 Description: Joomla! Core is prone to a vulnerability that lets attackers upload arbitrary files because the application fails to properly verify user-supplied input. An attacker can exploit this vulnerability to upload arbitrary code and run it in the context of the webserver process. This may facilitate unauthorized access or privilege escalation; other attacks are also possible. Joomla! Core versions 1.5.x ranging from 1.5.0 and up to and including 1.5.15 are vulnerable. Additional Analyst Notes: - CVE Program Container: Referenc
ng from 1.5.0 and up to and including 1.5.15 are vulnerable. Additional Analyst Notes: - CVE Program Container: References: - https://www.acunetix.com/vulnerabilities/web/joomla-core-1-5-x-arbitrary-file-upload-1-5-0-1-5-15/ - https://developer.joomla.org/security-centre/310-20100423-core-installer-migration-script.html
CVE ID: CVE-2010-1434 State: PUBLISHED Published: 2021-06-21T22:22:07 Last Updated: 2024-08-07T01:21:19.152Z Vendors: n/a Products: Joomla Problem Types: CWE-384 Description: Joomla! Core is prone to a session fixation vulnerability. An attacker may leverage this issue to hijack an arbitrary session and gain access to sensitive information, which may help in launching further attacks. Joomla! Core versions 1.5.x ranging from 1.5.0 and up to and including 1.5.15 are vulnerable. Additional Analyst Notes: - CVE Program Container: References: - https://developer.joomla.org/security-centre/309-20100423-core-sessation-fixation.html - https://www.acunetix.com/vulnerabilities/web/joomla-core-1-5-x-s
rity-centre/309-20100423-core-sessation-fixation.html - https://www.acunetix.com/vulnerabilities/web/joomla-core-1-5-x-session-fixation-1-5-0-1-5-15/
CVE ID: CVE-2010-1435 State: PUBLISHED Published: 2021-06-21T22:24:23 Last Updated: 2024-08-07T01:21:19.045Z Vendors: n/a Products: Joomla Problem Types: CWE-863 Description: Joomla! Core is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently retrieve password reset tokens from the database through an already existing SQL injection vector. Joomla! Core versions 1.5.x ranging from 1.5.0 and up to and including 1.5.15 are vulnerable. Additional Analyst Notes: - CVE Program Container: References: - https://developer.joomla.org/security-centre/308-20100423-core-password-reset-tokens.html - https://www.acunet
rences: - https://developer.joomla.org/security-centre/308-20100423-core-password-reset-tokens.html - https://www.acunetix.com/vulnerabilities/web/joomla-core-1-5-x-security-bypass-1-5-0-1-5-15/
CVE ID: CVE-2010-1436 State: PUBLISHED Published: 2010-05-21T17:00:00 Last Updated: 2024-08-07T01:21:19.084Z Vendors: n/a Products: n/a Problem Types: n/a Description: gfs2 in the Linux kernel 2.6.18, and possibly other versions, does not properly handle when the gfs2_quota struct occupies two separate pages, which allows local users to cause a denial of service (kernel panic) via certain manipulations that cause an out-of-bounds write, as demonstrated by writing from an ext3 file system to a gfs2 file system. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2010/04/27/1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/58839 -
http://www.openwall.com/lists/oss-security/2010/04/27/1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/58839 - http://www.openwall.com/lists/oss-security/2010/04/28/1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10652 - https://bugzilla.redhat.com/show_bug.cgi?id=586006 - http://secunia.com/advisories/43315 - http://www.vmware.com/security/advisories/VMSA-2011-0003.html - http://www.securityfocus.com/archive/1/516397/100/0/threaded
CVE ID: CVE-2010-1437 State: PUBLISHED Published: 2010-05-07T18:23:00 Last Updated: 2024-08-07T01:21:19.167Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the find_keyring_by_name function in security/keys/keyring.c in the Linux kernel 2.6.34-rc5 and earlier allows local users to cause a denial of service (memory corruption and system crash) or possibly have unspecified other impact via keyctl session commands that trigger access to a dead keyring that is undergoing deletion by the key_cleanup function. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2010/04/27/2 - http://lists.opensuse.org/opensuse-se
Container: References: - http://www.openwall.com/lists/oss-security/2010/04/27/2 - http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00006.html - http://marc.info/?l=linux-kernel&m=127292492727029&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9715 - https://patchwork.kernel.org/patch/94664/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/58254 - http://marc.info/?l=linux-kernel&m=127192182917857&w=2 - http://www.redhat.com/support/errata/RHSA-2010-0474.html - http://secunia.com/advisories/40645 - http://secunia.com/advisories/43315 - http://marc.info/?l=linux-kernel&m=127274294622730&w=2 - https://patchwork.kernel.org/patch/
unia.com/advisories/43315 - http://marc.info/?l=linux-kernel&m=127274294622730&w=2 - https://patchwork.kernel.org/patch/94038/ - http://www.openwall.com/lists/oss-security/2010/04/28/2 - http://secunia.com/advisories/40218 - http://www.vmware.com/security/advisories/VMSA-2011-0003.html - https://bugzilla.redhat.com/show_bug.cgi?id=585094 - http://www.debian.org/security/2010/dsa-2053 - http://www.securityfocus.com/bid/39719 - http://www.securityfocus.com/archive/1/516397/100/0/threaded - http://secunia.com/advisories/39830 - http://www.vupen.com/english/advisories/2010/1857
CVE ID: CVE-2010-1438 State: PUBLISHED Published: 2010-05-05T14:00:00Z Last Updated: 2024-09-16T22:40:44.693Z Vendors: n/a Products: n/a Problem Types: n/a Description: Web Application Finger Printer (WAFP) 0.01-26c3 uses fixed pathnames under /tmp for temporary files and directories, which (1) allows local users to cause a denial of service (application outage) by creating a file with a pathname that the product expects is available for its own internal use, (2) allows local users to overwrite arbitrary files via symlink attacks on certain files in /tmp, (3) might allow local users to delete arbitrary files and directories via a symlink attack on a directory under /tmp, and (4) might make i
cal users to delete arbitrary files and directories via a symlink attack on a directory under /tmp, and (4) might make it easier for local users to obtain sensitive information by reading files in a directory under /tmp, related to (a) lib/wafp_pidify.rb, (b) utils/generate_wafp_fingerprint.sh, (c) utils/online_update.sh, and (d) utils/extract_from_db.sh. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/webapplicationfingerprinter/issues/detail?id=8 - http://www.openwall.com/lists/oss-security/2010/04/28/3 - http://www.securityfocus.com/bid/39760 - http://www.openwall.com/lists/oss-security/2010/04/27/6
CVE ID: CVE-2010-1439 State: PUBLISHED Published: 2010-06-07T14:00:00 Last Updated: 2024-08-07T01:21:19.158Z Vendors: n/a Products: n/a Problem Types: n/a Description: yum-rhn-plugin in Red Hat Network Client Tools (aka rhn-client-tools) on Red Hat Enterprise Linux (RHEL) 5 and Fedora uses world-readable permissions for the /var/spool/up2date/loginAuth.pkl file, which allows local users to access the Red Hat Network profile, and possibly prevent future security updates, by leveraging authentication data from this file. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9232 - http://securityt
rences: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9232 - http://securitytracker.com/id?1024049 - http://secunia.com/advisories/39996 - https://bugzilla.redhat.com/show_bug.cgi?id=585386 - https://exchange.xforce.ibmcloud.com/vulnerabilities/59114 - http://www.securityfocus.com/bid/40492 - http://www.vupen.com/english/advisories/2010/1311 - http://www.redhat.com/support/errata/RHSA-2010-0449.html - http://www.osvdb.org/65063
CVE ID: CVE-2010-1440 State: PUBLISHED Published: 2010-05-07T17:43:00 Last Updated: 2024-08-07T01:21:19.046Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in dvipsk/dospecial.c in dvips in TeX Live 2009 and earlier, and teTeX, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a special command in a DVI file, related to the (1) predospecial and (2) bbdospecial functions, a different vulnerability than CVE-2010-0739. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-201206-28.xml - http://lists.opensuse.org/opensuse-security-announce/2010-06/m
s: - http://security.gentoo.org/glsa/glsa-201206-28.xml - http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html - https://bugzilla.redhat.com/show_bug.cgi?id=586819 - http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00002.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041573.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10068 - http://www.ubuntu.com/usn/USN-937-1
CVE ID: CVE-2010-1441 State: PUBLISHED Published: 2014-12-26T20:00:00 Last Updated: 2024-08-07T01:21:19.172Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple heap-based buffer overflows in VideoLAN VLC media player before 1.0.6 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted byte stream to the (1) A/52, (2) DTS, or (3) MPEG Audio decoder. Additional Analyst Notes: - CVE Program Container: References: - http://www.videolan.org/security/sa1003.html - http://openwall.com/lists/oss-security/2010/04/28/4
CVE ID: CVE-2010-1442 State: PUBLISHED Published: 2014-12-26T20:00:00 Last Updated: 2024-08-07T01:21:19.040Z Vendors: n/a Products: n/a Problem Types: n/a Description: VideoLAN VLC media player before 1.0.6 allows remote attackers to cause a denial of service (invalid memory access and application crash) or possibly execute arbitrary code via a crafted byte stream to the (1) AVI, (2) ASF, or (3) Matroska (aka MKV) demuxer. Additional Analyst Notes: - CVE Program Container: References: - http://www.videolan.org/security/sa1003.html - http://openwall.com/lists/oss-security/2010/04/28/4
CVE ID: CVE-2010-1443 State: PUBLISHED Published: 2014-12-26T20:00:00 Last Updated: 2024-08-07T01:21:19.109Z Vendors: n/a Products: n/a Problem Types: n/a Description: The parse_track_node function in modules/demux/playlist/xspf.c in the XSPF playlist parser in VideoLAN VLC media player before 1.0.6 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an empty location element in an XML Shareable Playlist Format (XSPF) document. Additional Analyst Notes: - CVE Program Container: References: - http://www.videolan.org/security/sa1003.html - http://openwall.com/lists/oss-security/2010/04/28/4 - http://git.videolan.org/?p=vlc/vlc-1.1.git%3Ba=c
ity/sa1003.html - http://openwall.com/lists/oss-security/2010/04/28/4 - http://git.videolan.org/?p=vlc/vlc-1.1.git%3Ba=commit%3Bh=8902488ba529c0cf4c903a8a84ff20b5737cc753
CVE ID: CVE-2010-1444 State: PUBLISHED Published: 2014-12-26T20:00:00 Last Updated: 2024-08-07T01:21:19.129Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ZIP archive decompressor in VideoLAN VLC media player before 1.0.6 allows remote attackers to cause a denial of service (invalid memory access and application crash) or possibly execute arbitrary code via a crafted archive. Additional Analyst Notes: - CVE Program Container: References: - http://www.videolan.org/security/sa1003.html - http://git.videolan.org/?p=vlc/vlc-1.1.git%3Ba=commit%3Bh=08813ee6f8eb0faf83790bd4247c0a97af75a1cf - http://openwall.com/lists/oss-security/2010/04/28/4
CVE ID: CVE-2010-1445 State: PUBLISHED Published: 2014-12-26T20:00:00 Last Updated: 2024-08-07T01:21:19.157Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in VideoLAN VLC media player before 1.0.6 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted byte stream in an RTMP session. Additional Analyst Notes: - CVE Program Container: References: - http://www.videolan.org/security/sa1003.html - http://openwall.com/lists/oss-security/2010/04/28/4
CVE ID: CVE-2010-1446 State: PUBLISHED Published: 2010-05-21T17:00:00 Last Updated: 2024-08-07T01:21:19.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: arch/powerpc/mm/fsl_booke_mmu.c in KGDB in the Linux kernel 2.6.30 and other versions before 2.6.33, when running on PowerPC, does not properly perform a security check for access to a kernel page, which allows local users to overwrite arbitrary kernel memory, related to Fsl booke. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00006.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/58840 - http://www.openwall.com/lists/oss-security/201
00006.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/58840 - http://www.openwall.com/lists/oss-security/2010/04/30/1 - http://secunia.com/advisories/40645 - http://www.openwall.com/lists/oss-security/2010/04/29/9 - http://lkml.org/lkml/2010/5/10/458 - http://www.debian.org/security/2010/dsa-2053 - http://secunia.com/advisories/39830 - http://www.openwall.com/lists/oss-security/2010/04/29/3 - http://www.vupen.com/english/advisories/2010/1857
CVE ID: CVE-2010-1447 State: PUBLISHED Published: 2010-05-19T18:13:00 Last Updated: 2024-08-07T01:21:19.216Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Safe (aka Safe.pm) module 2.26, and certain earlier versions, for Perl, as used in PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, 8.4 before 8.4.4, and 9.0 Beta before 9.0 Beta 2, allows context-dependent attackers to bypass intended (1) Safe::reval and (2) Safe::rdo access restrictions, and inject and execute arbitrary code, via vectors involving subroutine references and delayed execution. Additional Analyst Notes: - CVE Program Container: References: - http://ww
subroutine references and delayed execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2010:115 - http://www.debian.org/security/2011/dsa-2267 - http://security-tracker.debian.org/tracker/CVE-2010-1447 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7320 - http://www.postgresql.org/about/news.1203 - http://www.vupen.com/english/advisories/2010/1167 - http://secunia.com/advisories/39845 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11530 - https://bugs.launchpad.net/bugs/cve/2010-1447 - http://osvdb.org/64756 - http://www.redhat.com
itre.oval%3Adef%3A11530 - https://bugs.launchpad.net/bugs/cve/2010-1447 - http://osvdb.org/64756 - http://www.redhat.com/support/errata/RHSA-2010-0457.html - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 - http://secunia.com/advisories/40049 - http://secunia.com/advisories/40052 - http://www.redhat.com/support/errata/RHSA-2010-0458.html - http://www.securitytracker.com/id?1023988 - http://www.openwall.com/lists/oss-security/2010/05/20/5 - http://www.securityfocus.com/bid/40305 - https://bugzilla.redhat.com/show_bug.cgi?id=588269 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:116
CVE ID: CVE-2010-1448 State: PUBLISHED Published: 2010-06-23T18:00:00 Last Updated: 2024-08-07T01:21:19.167Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in lib/LXR/Common.pm in LXR Cross Referencer before 0.9.8 allows remote attackers to inject arbitrary web script or HTML via vectors related to a string in the search page's TITLE element, a different vulnerability than CVE-2009-4497 and CVE-2010-1625. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/58294 - http://sourceforge.net/projects/lxr/files/stable/lxr-0.9.8/lxr-0.9.8.tgz/download - http://www.openwall.com/list
58294 - http://sourceforge.net/projects/lxr/files/stable/lxr-0.9.8/lxr-0.9.8.tgz/download - http://www.openwall.com/lists/oss-security/2010/05/14/3 - http://marc.info/?l=oss-security&m=127316953819027&w=2 - http://www.openwall.com/lists/oss-security/2010/05/03/7 - http://www.openwall.com/lists/oss-security/2010/05/06/2 - http://marc.info/?l=oss-security&m=127289957223005&w=2 - http://secunia.com/advisories/39686 - http://www.securityfocus.com/bid/39865 - http://lxr.cvs.sourceforge.net/viewvc/lxr/lxr/lib/LXR/Common.pm?r1=1.63&r2=1.64 - http://lxr.cvs.sourceforge.net/viewvc/lxr/lxr/lib/LXR/Common.pm?view=log#rev1.64 - http://marc.info/?l=oss-security&m=127291817517567&w=2 - http://www.openwall
xr/lxr/lib/LXR/Common.pm?view=log#rev1.64 - http://marc.info/?l=oss-security&m=127291817517567&w=2 - http://www.openwall.com/lists/oss-security/2010/05/03/1 - http://www.osvdb.org/64216
CVE ID: CVE-2010-1449 State: PUBLISHED Published: 2010-05-27T19:00:00 Last Updated: 2024-08-07T01:21:19.041Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in rgbimgmodule.c in the rgbimg module in Python 2.5 allows remote attackers to have an unspecified impact via a large image that triggers a buffer overflow. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-3143.12. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43068 - http://support.apple.com/kb/HT4435 - http://www.vupen.com/english/advisories/2011/0212 - http://secunia.com/advisories/43364 - http://www.vupen.com/english/advisories/2011