Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ram Container: References: - http://downloads.asterisk.org/pub/security/AST-2012-001-10.diff - https://issues.asterisk.org/jira/browse/ASTERISK-19202 - http://downloads.asterisk.org/pub/security/AST-2012-001-1.8.diff - http://www.openwall.com/lists/oss-security/2012/01/20/16 - http://www.openwall.com/lists/oss-security/2012/01/20/18 - https://issues.asterisk.org/jira/secure/attachment/42202/issueA19202_crypto_if_uninited_text_or_video.patch - https://bugzilla.redhat.com/show_bug.cgi?id=783487 - http://downloads.asterisk.org/pub/security/AST-2012-001.html
CVE ID: CVE-2012-0891 State: PUBLISHED Published: 2014-03-14T16:00:00 Last Updated: 2024-08-06T18:38:15.060Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Puppet Dashboard 1.0 before 1.2.5 and Enterprise 1.0 before 1.2.5 and 2.x before 2.0.1 allow remote attackers to inject arbitrary web script or HTML via unspecified fields. Additional Analyst Notes: - CVE Program Container: References: - http://puppetlabs.com/security/cve/cve-2012-0891
CVE ID: CVE-2012-0895 State: PUBLISHED Published: 2012-01-20T17:00:00 Last Updated: 2024-08-06T18:38:15.065Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in map/map.php in the Count Per Day module before 3.1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the map parameter. Additional Analyst Notes: - CVE Program Container: References: - http://wordpress.org/extend/plugins/count-per-day/changelog/ - http://www.exploit-db.com/exploits/18355 - http://plugins.trac.wordpress.org/changeset/488883/count-per-day - http://secunia.com/advisories/47529 - http://osvdb.org/78271 - http://packetstormsecurity.org/fil
488883/count-per-day - http://secunia.com/advisories/47529 - http://osvdb.org/78271 - http://packetstormsecurity.org/files/108631/countperday-downloadxss.txt - http://www.securityfocus.com/bid/51402 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72384
CVE ID: CVE-2012-0896 State: PUBLISHED Published: 2012-01-20T17:00:00 Last Updated: 2024-08-06T18:38:15.073Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in download.php in the Count Per Day module before 3.1.1 for WordPress allows remote attackers to read arbitrary files via the f parameter. Additional Analyst Notes: - CVE Program Container: References: - http://wordpress.org/extend/plugins/count-per-day/changelog/ - http://www.exploit-db.com/exploits/18355 - http://osvdb.org/78270 - http://plugins.trac.wordpress.org/changeset/488883/count-per-day - http://secunia.com/advisories/47529 - https://exchange.xforce.ibmcloud.com/vulnerabilities/
geset/488883/count-per-day - http://secunia.com/advisories/47529 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72385 - http://packetstormsecurity.org/files/108631/countperday-downloadxss.txt - http://www.securityfocus.com/bid/51402
CVE ID: CVE-2012-0897 State: PUBLISHED Published: 2012-01-20T17:00:00 Last Updated: 2024-08-06T18:38:14.960Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the JPEG2000 plugin in IrfanView PlugIns before 4.33 allows remote attackers to execute arbitrary code via a JPEG2000 (JP2) file with a crafted Quantization Default (QCD) marker segment. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032529 - http://secunia.com/advisories/47360 - http://www.securityfocus.com/bid/51426 - http://osvdb.org/78333 - http://www.securitytracker.com/id/1032530 - http://www.irfanview.com/history_old.htm - https://exchan
/osvdb.org/78333 - http://www.securitytracker.com/id/1032530 - http://www.irfanview.com/history_old.htm - https://exchange.xforce.ibmcloud.com/vulnerabilities/72398
CVE ID: CVE-2012-0898 State: PUBLISHED Published: 2012-01-20T17:00:00 Last Updated: 2024-08-06T18:38:15.055Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in meb_download.php in the myEASYbackup plugin 1.0.8.1 for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the dwn_file parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/72404 - http://secunia.com/advisories/47594 - http://packetstormsecurity.org/files/view/108711/wpmyeasybackup-traversal.txt
CVE ID: CVE-2012-0899 State: PUBLISHED Published: 2012-01-20T17:00:00 Last Updated: 2024-08-06T18:38:14.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in referencement/sites_inscription.php in Annuaire PHP allows remote attackers to inject arbitrary web script or HTML via the url parameter and possibly the nom parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/files/view/108719/annuaire-xss.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/72407 - http://www.securityfocus.com/bid/51434
CVE ID: CVE-2012-0900 State: PUBLISHED Published: 2012-01-20T17:00:00 Last Updated: 2024-08-06T18:38:14.993Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Beehive Forum 1.0.1 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) forum/register.php or (2) forum/logon.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/72411 - http://www.darksecurity.de/advisories/SSCHADV2011-042.txt - http://secunia.com/advisories/47595 - http://www.securityfocus.com/bid/51424 - http://archives.neohapsis.com/archives/bugtraq/2012-01/0103.ht
visories/47595 - http://www.securityfocus.com/bid/51424 - http://archives.neohapsis.com/archives/bugtraq/2012-01/0103.html
CVE ID: CVE-2012-0901 State: PUBLISHED Published: 2012-01-20T17:00:00 Last Updated: 2024-08-06T18:38:14.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in yousaytoo.php in YouSayToo auto-publishing plugin 1.0 for WordPress allows remote attackers to inject arbitrary web script or HTML via the submit parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/files/view/108470/wpystap-xss.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/72271
CVE ID: CVE-2012-0902 State: PUBLISHED Published: 2012-01-20T17:00:00 Last Updated: 2024-08-06T18:38:14.939Z Vendors: n/a Products: n/a Problem Types: n/a Description: AirTies Air 4450 1.1.2.18 allows remote attackers to cause a denial of service (reboot) via a direct request to cgi-bin/loader. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/51320 - http://www.exploit-db.com/exploits/18336 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72200
CVE ID: CVE-2012-0903 State: PUBLISHED Published: 2012-01-20T17:00:00 Last Updated: 2024-08-06T18:38:14.923Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Zimbra Desktop 7.1.2 b10978 allow remote attackers to inject arbitrary web script or HTML via the (1) Username or (2) MailBox Name. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/files/view/108715/VL-378.txt - http://www.securityfocus.com/bid/51436 - http://www.vulnerability-lab.com/get_content.php?id=378 - http://seclists.org/fulldisclosure/2012/Jan/244 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72405
CVE ID: CVE-2012-0904 State: PUBLISHED Published: 2012-01-20T17:00:00 Last Updated: 2024-08-06T18:38:15.022Z Vendors: n/a Products: n/a Problem Types: n/a Description: VLC media player 1.1.11 allows remote attackers to cause a denial of service (crash) via a long string in an amr file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/72085 - http://archives.neohapsis.com/archives/bugtraq/2012-01/0033.html - http://www.exploit-db.com/exploits/18309 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14327 - http://www.securityfocus.com/bid/51255
CVE ID: CVE-2012-0905 State: PUBLISHED Published: 2012-01-20T17:00:00 Last Updated: 2024-08-06T18:38:15.061Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in deV!L'z Clanportal (DZCP) Gamebase addon allows remote attackers to execute arbitrary SQL commands via the gameid parameter in a detail action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18385 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72452 - http://secunia.com/advisories/47563
CVE ID: CVE-2012-0906 State: PUBLISHED Published: 2012-01-20T17:00:00 Last Updated: 2024-08-06T18:38:14.980Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Moviebase addon for deV!L'z Clanportal (DZCP) 1.5.5 allows remote attackers to execute arbitrary SQL commands via the id parameter in a showkat action to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/72453 - http://www.exploit-db.com/exploits/18386
CVE ID: CVE-2012-0907 State: PUBLISHED Published: 2012-01-20T17:00:00 Last Updated: 2024-08-06T18:38:14.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the web player in NeoAxis NeoAxis web player 1.4 and earlier allows user-assisted remote attackers to write arbitrary files via a .. (dot dot) in a filename in the neoaxis_web_application_win32.zip ZIP archive. Additional Analyst Notes: - CVE Program Container: References: - http://aluigi.altervista.org/adv/neoaxis_1-adv.txt - http://osvdb.org/78311 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72427
CVE ID: CVE-2012-0908 State: PUBLISHED Published: 2012-01-24T18:00:00 Last Updated: 2024-08-06T18:38:15.065Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in logout.php in SimpleSAMLphp 1.8.1 and possibly other versions before 1.8.2 allows remote attackers to inject arbitrary web script or HTML via the link_href parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/72313 - http://code.google.com/p/simplesamlphp/issues/detail?id=468 - http://osvdb.org/78255 - http://www.openwall.com/lists/oss-security/2012/01/20/20 - http://www.securityfocus.com/bid/51372 - http://s
org/78255 - http://www.openwall.com/lists/oss-security/2012/01/20/20 - http://www.securityfocus.com/bid/51372 - http://secunia.com/advisories/47491
CVE ID: CVE-2012-0909 State: PUBLISHED Published: 2012-01-24T18:00:00Z Last Updated: 2024-09-17T04:05:11.572Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Horde_Form in Horde Groupware Webmail Edition before 4.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to email verification. NOTE: Some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.horde.org/apps/webmail/docs/CHANGES - http://www.horde.org/apps/webmail/docs/RELEASE_NOTES - http://www.securityfocus.com/bid/51586 - http://www.openwall.com/list
://www.horde.org/apps/webmail/docs/RELEASE_NOTES - http://www.securityfocus.com/bid/51586 - http://www.openwall.com/lists/oss-security/2012/01/22/2 - http://secunia.com/advisories/47592
CVE ID: CVE-2012-0911 State: PUBLISHED Published: 2012-07-12T19:00:00 Last Updated: 2024-08-06T18:38:14.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: TikiWiki CMS/Groupware before 6.7 LTS and before 8.4 allows remote attackers to execute arbitrary PHP code via a crafted serialized object in the (1) cookieName to lib/banners/bannerlib.php; (2) printpages or (3) printstructures parameter to (a) tiki-print_multi_pages.php or (b) tiki-print_pages.php; or (4) sendpages, (5) sendstructures, or (6) sendarticles parameter to tiki-send_objects.php, which is not properly handled when processed by the unserialize function. Additional Analyst Notes: - CVE Program Container: References:
perly handled when processed by the unserialize function. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/19630 - http://www.exploit-db.com/exploits/19573 - http://info.tiki.org/article190-Tiki-Wiki-CMS-Groupware-Updates-Tiki-6-7-LTS - http://www.securityfocus.com/bid/54298 - http://dev.tiki.org/item4109 - http://osvdb.org/83534 - http://archives.neohapsis.com/archives/bugtraq/2012-07/0020.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/76758 - http://info.tiki.org/article191-Tiki-Releases-8-4
CVE ID: CVE-2012-0912 State: PUBLISHED Published: 2012-01-24T15:00:00Z Last Updated: 2024-09-16T20:32:20.824Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Stoneware webNetwork before 6.0.8.0 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.stone-ware.com/support/techdocs/kb/d1960/sb_6_0_8.pdf - http://www.stone-ware.com/swql.jsp?kb=d1960
CVE ID: CVE-2012-0913 State: PUBLISHED Published: 2012-01-24T18:00:00 Last Updated: 2024-08-06T18:38:14.855Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in checklogin.aspx in ICloudCenter ICTimeAttendance 1.0 allows remote attackers to execute arbitrary SQL commands via the passw parameter. NOTE: Some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/78444 - http://www.exploit-db.com/exploits/18394 - http://secunia.com/advisories/47660 - http://www.securityfocus.com/bid/51589 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72569
CVE ID: CVE-2012-0914 State: PUBLISHED Published: 2012-01-24T18:00:00 Last Updated: 2024-08-06T18:38:15.070Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in display_renderers/panels_renderer_editor.class.php in the admin view in the Panels module 6.x-2.x before 6.x-3.10 and 7.x-3.x before 7.x-3.0 for Drupal allows remote authenticated users with certain privileges to inject arbitrary web script or HTML via the Region title. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/47649 - http://www.securityfocus.com/bid/51568 - http://drupal.org/node/1409436 - http://drupalcode.org/project/panels.git
649 - http://www.securityfocus.com/bid/51568 - http://drupal.org/node/1409436 - http://drupalcode.org/project/panels.git/commit/d844942 - http://drupal.org/node/1409446 - http://drupalcode.org/project/panels.git/commit/2066d59 - http://www.madirish.net/content/drupal-panels-6x-39-xss-vulnerability - http://drupal.org/node/1409448 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72549 - http://osvdb.org/78367
CVE ID: CVE-2012-0915 State: PUBLISHED Published: 2012-01-24T18:00:00Z Last Updated: 2024-09-16T16:53:40.744Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in RenRen Talk 2.9 allows remote attackers to execute arbitrary code via crafted dimensions of a skin file, leading to a heap-based buffer overflow, as demonstrated using a BMP image. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/51585 - http://secunia.com/advisories/47314
CVE ID: CVE-2012-0916 State: PUBLISHED Published: 2012-01-24T18:00:00Z Last Updated: 2024-09-16T17:53:50.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in RenRen Talk 2.9 allows remote attackers to execute arbitrary code via a crafted image in a chat message, as demonstrated using a PNG file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/51585 - http://secunia.com/advisories/47314
CVE ID: CVE-2012-0917 State: PUBLISHED Published: 2012-01-24T18:00:00 Last Updated: 2024-08-06T18:38:15.141Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Hitachi IT Operations Analyzer 02-01, 02-51 through 02-51-01, and 02-53 through 02-53-02 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/47467 - http://osvdb.org/78221 - http://www.securityfocus.com/bid/51340 - http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS12-001/index.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/
jp/Prod/comp/soft1/global/security/info/vuls/HS12-001/index.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/72248
CVE ID: CVE-2012-0918 State: PUBLISHED Published: 2012-01-24T18:00:00 Last Updated: 2024-08-06T18:38:14.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Hitachi COBOL2002 Net Developer, Net Server Suite, and Net Client Suite 01-00, 01-01 through 01-01-/D, 01-02 through 01-02-/F, 01-03 through 01-03-/F, 02-00 through 02-00-/D, 02-01 through 02-01-/C, and possibly other versions before 02-01-/D allows remote attackers to execute arbitrary code via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/72558 - http://secunia.com/advisories/47643 - http://www.hitachi
- https://exchange.xforce.ibmcloud.com/vulnerabilities/72558 - http://secunia.com/advisories/47643 - http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS12-002/index.html - http://secunia.com/advisories/47612 - http://www.securityfocus.com/bid/51580
CVE ID: CVE-2012-0919 State: PUBLISHED Published: 2012-01-24T18:00:00 Last Updated: 2024-08-06T18:38:15.217Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Hitachi IT Operations Director 02-50-01 through 02-50-07, 03-00 through 03-00-04, and possibly other versions before 03-00-06, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/47490 - http://www.securityfocus.com/bid/51340 - http://osvdb.org/78215 - http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS12-001/index.html - https://exchang
vdb.org/78215 - http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS12-001/index.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/72248
CVE ID: CVE-2012-0920 State: PUBLISHED Published: 2012-06-05T22:00:00 Last Updated: 2024-08-06T18:38:15.055Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Dropbear SSH Server 0.52 through 2012.54, when command restriction and public key authentication are enabled, allows remote authenticated users to execute arbitrary code and bypass command restrictions via multiple crafted command requests, related to "channels concurrency." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/73444 - http://secunia.com/advisories/48147 - http://www.debian.org/security/2012/dsa-2456 - http://www.os
lnerabilities/73444 - http://secunia.com/advisories/48147 - http://www.debian.org/security/2012/dsa-2456 - http://www.osvdb.org/79590 - http://matt.ucc.asn.au/dropbear/CHANGES - http://www.securityfocus.com/bid/52159 - https://secure.ucc.asn.au/hg/dropbear/rev/818108bf7749 - https://www.mantor.org/~northox/misc/CVE-2012-0920.html - http://secunia.com/advisories/48929
CVE ID: CVE-2012-0922 State: PUBLISHED Published: 2012-02-08T15:00:00 Last Updated: 2024-08-06T18:38:14.998Z Vendors: n/a Products: n/a Problem Types: n/a Description: rvrender.dll in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via crafted flags in an RMFF file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/47896 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73018 - http://service.real.com/realplayer/security/02062012_player/en/ - http://osvdb.org/78911 - http://www.securityfocus.com/bid/51883
CVE ID: CVE-2012-0923 State: PUBLISHED Published: 2012-02-08T15:00:00 Last Updated: 2024-08-06T18:38:15.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RV20 codec in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, does not properly handle the frame size array, which allows remote attackers to execute arbitrary code via a crafted RV20 RealVideo video stream. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/47896 - http://service.real.com/realplayer/security/02062012_player/en/ - http://osvdb.org/78912 - http://www.securityfocus.com/bid/51884
CVE ID: CVE-2012-0924 State: PUBLISHED Published: 2012-02-08T15:00:00 Last Updated: 2024-08-06T18:38:15.059Z Vendors: n/a Products: n/a Problem Types: n/a Description: RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via vectors involving a VIDOBJ_START_CODE code in a header within a video stream. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/47896 - http://service.real.com/realplayer/security/02062012_player/en/
CVE ID: CVE-2012-0925 State: PUBLISHED Published: 2012-02-08T15:00:00 Last Updated: 2024-08-06T18:38:15.048Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the RV40 codec in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via a crafted RV40 RealVideo video stream. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/47896 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73021 - http://service.real.com/realplayer/security/02062012_player/en/ - http://www.securityfocus.com/bid/51887 - http://osvdb.org/78914
CVE ID: CVE-2012-0926 State: PUBLISHED Published: 2012-02-08T15:00:00 Last Updated: 2024-08-06T18:38:15.063Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RV10 codec in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, does not properly handle height and width values, which allows remote attackers to execute arbitrary code via a crafted RV10 RealVideo video stream. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/47896 - http://service.real.com/realplayer/security/02062012_player/en/
CVE ID: CVE-2012-0927 State: PUBLISHED Published: 2012-02-08T15:00:00 Last Updated: 2024-08-06T18:38:15.049Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via vectors involving the coded_frame_size value in a RealAudio audio stream. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/47896 - http://service.real.com/realplayer/security/02062012_player/en/
CVE ID: CVE-2012-0928 State: PUBLISHED Published: 2012-02-08T15:00:00Z Last Updated: 2024-09-16T23:22:15.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ATRAC codec in RealNetworks RealPlayer 11.x and 14.x through 14.0.7, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer 12.x before 12.0.0.1703 does not properly decode samples, which allows remote attackers to execute arbitrary code via a crafted ATRAC audio file. Additional Analyst Notes: - CVE Program Container: References: - http://service.real.com/realplayer/security/02062012_player/en/