Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
tp://www.opera.com/docs/changelogs/unix/1101/ - http://www.securityfocus.com/bid/46036 - http://www.opera.com/docs/changelogs/mac/1101/ - http://osvdb.org/70728 - http://www.opera.com/support/kb/view/982/ - https://www.alternativ-testing.fr/blog/index.php?post/2011/%5BCVE-XXXX-XXXX%5D-Opera-11-Integer-Truncation-Vulnerability - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12636 - http://secunia.com/advisories/43023
CVE ID: CVE-2011-0683 State: PUBLISHED Published: 2011-01-31T20:00:00 Last Updated: 2024-08-06T21:58:26.083Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera before 11.01 does not properly restrict the use of opera: URLs, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://www.opera.com/docs/changelogs/windows/1101/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11641 - http://www.opera.com/support/kb/view/983/ - http://www.vupen.com/english/advisories/2011/0231 - http://www.opera.com/docs/changelogs/unix/1101/ - http
b/view/983/ - http://www.vupen.com/english/advisories/2011/0231 - http://www.opera.com/docs/changelogs/unix/1101/ - http://www.securityfocus.com/bid/46036 - http://www.opera.com/docs/changelogs/mac/1101/ - http://osvdb.org/70729 - http://secunia.com/advisories/43023
CVE ID: CVE-2011-0684 State: PUBLISHED Published: 2011-01-31T20:00:00 Last Updated: 2024-08-06T21:58:26.121Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera before 11.01 does not properly handle redirections and unspecified other HTTP responses, which allows remote web servers to obtain sufficient access to local files to use these files as page resources, and consequently obtain potentially sensitive information from the contents of the files, via an unknown response manipulation. Additional Analyst Notes: - CVE Program Container: References: - http://www.opera.com/docs/changelogs/windows/1101/ - http://www.vupen.com/english/advisories/2011/0231 - http://www.opera.com/docs/
opera.com/docs/changelogs/windows/1101/ - http://www.vupen.com/english/advisories/2011/0231 - http://www.opera.com/docs/changelogs/unix/1101/ - http://www.securityfocus.com/bid/46036 - http://www.opera.com/docs/changelogs/mac/1101/ - http://osvdb.org/70730 - http://www.opera.com/support/kb/view/984/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12296 - http://secunia.com/advisories/43023
CVE ID: CVE-2011-0685 State: PUBLISHED Published: 2011-01-31T20:00:00 Last Updated: 2024-08-06T21:58:26.086Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Delete Private Data feature in Opera before 11.01 does not properly implement the "Clear all email account passwords" option, which might allow physically proximate attackers to access an e-mail account via an unattended workstation. Additional Analyst Notes: - CVE Program Container: References: - http://www.opera.com/docs/changelogs/windows/1101/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12507 - http://www.opera.com/support/kb/view/986/ - http://www.vupen.com/english/advisori
/oval%3Aorg.mitre.oval%3Adef%3A12507 - http://www.opera.com/support/kb/view/986/ - http://www.vupen.com/english/advisories/2011/0231 - http://www.opera.com/docs/changelogs/unix/1101/ - http://www.securityfocus.com/bid/46036 - http://www.opera.com/docs/changelogs/mac/1101/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/65018 - http://osvdb.org/70731 - http://secunia.com/advisories/43023
CVE ID: CVE-2011-0686 State: PUBLISHED Published: 2011-01-31T20:00:00 Last Updated: 2024-08-06T21:58:26.175Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Opera before 11.01 allows remote attackers to cause a denial of service (application crash) via unknown content on a web page, as demonstrated by vkontakte.ru. Additional Analyst Notes: - CVE Program Container: References: - http://www.opera.com/docs/changelogs/windows/1101/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11878 - http://www.vupen.com/english/advisories/2011/0231 - http://www.opera.com/docs/changelogs/unix/1101/ - http://www.securityfocus.com
.vupen.com/english/advisories/2011/0231 - http://www.opera.com/docs/changelogs/unix/1101/ - http://www.securityfocus.com/bid/46036 - http://osvdb.org/70732 - http://www.opera.com/docs/changelogs/mac/1101/ - http://secunia.com/advisories/43023
CVE ID: CVE-2011-0687 State: PUBLISHED Published: 2011-01-31T20:00:00 Last Updated: 2024-08-06T21:58:26.135Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera before 11.01 does not properly implement Wireless Application Protocol (WAP) dropdown lists, which allows user-assisted remote attackers to cause a denial of service (application crash) via a crafted WAP document. Additional Analyst Notes: - CVE Program Container: References: - http://www.opera.com/docs/changelogs/windows/1101/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12563 - http://www.vupen.com/english/advisories/2011/0231 - http://www.opera.com/docs/changelogs/unix/1101/
oval%3Adef%3A12563 - http://www.vupen.com/english/advisories/2011/0231 - http://www.opera.com/docs/changelogs/unix/1101/ - http://www.securityfocus.com/bid/46036 - http://osvdb.org/70733 - http://www.opera.com/docs/changelogs/mac/1101/ - http://secunia.com/advisories/43023
CVE ID: CVE-2011-0688 State: PUBLISHED Published: 2011-01-31T20:00:00 Last Updated: 2024-08-06T21:58:26.105Z Vendors: n/a Products: n/a Problem Types: n/a Description: Intel Alert Management System (aka AMS or AMS2), as used in Symantec Antivirus Corporate Edition (SAVCE) 10.x before 10.1 MR10, Symantec System Center (SSC) 10.x, and Symantec Quarantine Server 3.5 and 3.6, allows remote attackers to execute arbitrary commands via crafted messages over TCP, as discovered by Junaid Bohio, a different vulnerability than CVE-2010-0110 and CVE-2010-0111. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://se
ls are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43099 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65071 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2011&suid=20110126_00 - http://securitytracker.com/id?1024996 - http://www.securityfocus.com/bid/45936 - http://www.vupen.com/english/advisories/2011/0234
CVE ID: CVE-2011-0694 State: PUBLISHED Published: 2011-02-21T17:00:00 Last Updated: 2024-08-06T21:58:26.094Z Vendors: n/a Products: n/a Problem Types: n/a Description: RealNetworks RealPlayer 11.0 through 11.1, SP 1.0 through 1.1.5, and 14.0.0 through 14.0.1, and Enterprise 2.0 through 2.1.4, uses predictable names for temporary files, which allows remote attackers to conduct cross-domain scripting attacks and execute arbitrary code via the OpenURLinPlayerBrowser function. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/70849 - http://service.real.com/realplayer/security/02082011_player/en/ - http://securityreason.com/securityalert/8098 - http://docs.real.co
ce.real.com/realplayer/security/02082011_player/en/ - http://securityreason.com/securityalert/8098 - http://docs.real.com/docs/security/SecurityUpdate020811RPE.pdf - http://www.zerodayinitiative.com/advisories/ZDI-11-076 - http://secunia.com/advisories/43268 - http://www.securitytracker.com/id?1025058 - http://www.securityfocus.com/archive/1/516318/100/0/threaded
CVE ID: CVE-2011-0695 State: PUBLISHED Published: 2011-03-15T17:00:00 Last Updated: 2024-08-06T21:58:26.160Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the cm_work_handler function in the InfiniBand driver (drivers/infiniband/core/cma.c) in Linux kernel 2.6.x allows remote attackers to cause a denial of service (panic) by sending an InfiniBand request while other request handlers are still running, which triggers an invalid pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1146-1 - http://rhn.redhat.com/errata/RHSA-2011-0927.html - http://www.spinics.net/lists/linux-rdma/msg07448.html - https:
46-1 - http://rhn.redhat.com/errata/RHSA-2011-0927.html - http://www.spinics.net/lists/linux-rdma/msg07448.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/66056 - http://www.openwall.com/lists/oss-security/2011/03/11/1 - http://secunia.com/advisories/43693 - http://www.spinics.net/lists/linux-rdma/msg07447.html - http://www.securityfocus.com/bid/46839
CVE ID: CVE-2011-0696 State: PUBLISHED Published: 2011-02-14T20:00:00 Last Updated: 2024-08-06T21:58:26.098Z Vendors: n/a Products: n/a Problem Types: n/a Description: Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 does not properly validate HTTP requests that contain an X-Requested-With header, which makes it easier for remote attackers to conduct cross-site request forgery (CSRF) attacks via forged AJAX requests that leverage a "combination of browser plugins and redirects," a related issue to CVE-2011-0447. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43297 - http://secunia.com/advisories/43382 - http://www.vupen.com/english/advisories/2
- http://secunia.com/advisories/43297 - http://secunia.com/advisories/43382 - http://www.vupen.com/english/advisories/2011/0439 - http://www.vupen.com/english/advisories/2011/0429 - http://openwall.com/lists/oss-security/2011/02/09/6 - http://secunia.com/advisories/43230 - http://secunia.com/advisories/43426 - https://bugzilla.redhat.com/show_bug.cgi?id=676357 - http://www.vupen.com/english/advisories/2011/0372 - http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054207.html - http://www.vupen.com/english/advisories/2011/0441 - http://www.ubuntu.com/usn/USN-1066-1 - http://www.securityfocus.com/bid/46296 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:031
n/USN-1066-1 - http://www.securityfocus.com/bid/46296 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:031 - http://www.debian.org/security/2011/dsa-2163 - http://www.djangoproject.com/weblog/2011/feb/08/security/ - http://www.vupen.com/english/advisories/2011/0388 - http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054208.html
CVE ID: CVE-2011-0697 State: PUBLISHED Published: 2011-02-14T20:00:00 Last Updated: 2024-08-06T21:58:26.093Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 might allow remote attackers to inject arbitrary web script or HTML via a filename associated with a file upload. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43297 - http://secunia.com/advisories/43382 - http://www.vupen.com/english/advisories/2011/0439 - http://www.vupen.com/english/advisories/2011/0429 - http://openwall.com/lists/oss-security/2011/02/09/6 - http://secunia.com/advisor
upen.com/english/advisories/2011/0429 - http://openwall.com/lists/oss-security/2011/02/09/6 - http://secunia.com/advisories/43230 - http://secunia.com/advisories/43426 - https://bugzilla.redhat.com/show_bug.cgi?id=676359 - http://www.vupen.com/english/advisories/2011/0372 - http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054207.html - http://www.vupen.com/english/advisories/2011/0441 - http://www.ubuntu.com/usn/USN-1066-1 - http://www.securityfocus.com/bid/46296 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:031 - http://www.debian.org/security/2011/dsa-2163 - http://www.djangoproject.com/weblog/2011/feb/08/security/ - http://www.vupen.com/english/advis
/security/2011/dsa-2163 - http://www.djangoproject.com/weblog/2011/feb/08/security/ - http://www.vupen.com/english/advisories/2011/0388 - http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054208.html
CVE ID: CVE-2011-0698 State: PUBLISHED Published: 2011-02-14T20:00:00 Last Updated: 2024-08-06T21:58:26.134Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 on Windows might allow remote attackers to read or execute files via a / (slash) character in a key in a session cookie, related to session replays. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/0439 - http://openwall.com/lists/oss-security/2011/02/09/6 - http://secunia.com/advisories/43230 - http://www.vupen.com/english/advisories/2011/0372 - http://www.securityfocus.com/bid/462
/secunia.com/advisories/43230 - http://www.vupen.com/english/advisories/2011/0372 - http://www.securityfocus.com/bid/46296 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:031 - http://www.djangoproject.com/weblog/2011/feb/08/security/
CVE ID: CVE-2011-0699 State: PUBLISHED Published: 2020-02-20T17:18:53 Last Updated: 2024-08-06T21:58:26.164Z Vendors: n/a Products: Linux kernel Problem Types: Integer Signedness Error Description: Integer signedness error in the btrfs_ioctl_space_info function in the Linux kernel 2.6.37 allows local users to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted slot value. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=oss-security&m=129726743519620&w=2 - http://marc.info/?l=linux-kernel&m=129726078708425&w=2 - https://github.com/BlankOn/linux-debian/blob/master/debian/changelog.BlankOn - http://v
x-kernel&m=129726078708425&w=2 - https://github.com/BlankOn/linux-debian/blob/master/debian/changelog.BlankOn - http://vulnfactory.org/vulns/
CVE ID: CVE-2011-0700 State: PUBLISHED Published: 2011-03-14T19:00:00 Last Updated: 2024-08-06T21:58:26.127Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in WordPress before 3.0.5 allow remote authenticated users to inject arbitrary web script or HTML via vectors related to (1) the Quick/Bulk Edit title (aka post title or post_title), (2) post_status, (3) comment_status, (4) ping_status, and (5) escaping of tags within the tags meta box. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2011-March/057003.html - http://codex.wordpress.org/Version_3.0.5 - h
lists.fedoraproject.org/pipermail/package-announce/2011-March/057003.html - http://codex.wordpress.org/Version_3.0.5 - http://www.vupen.com/english/advisories/2011/0658 - http://secunia.com/advisories/43729 - http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056412.html - http://www.securityfocus.com/bid/46249 - http://core.trac.wordpress.org/changeset/17412 - http://core.trac.wordpress.org/changeset/17401 - http://www.wordpress.org/news/2011/02/wordpress-3-0-5/ - http://openwall.com/lists/oss-security/2011/02/09/13 - http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056998.html - http://openwall.com/lists/oss-security/2011/02/08/7 - http://www.vupen.com
ail/package-announce/2011-March/056998.html - http://openwall.com/lists/oss-security/2011/02/08/7 - http://www.vupen.com/english/advisories/2011/0721 - http://core.trac.wordpress.org/changeset/17406 - http://www.debian.org/security/2011/dsa-2190 - http://core.trac.wordpress.org/changeset/17397
CVE ID: CVE-2011-0701 State: PUBLISHED Published: 2011-03-14T19:00:00 Last Updated: 2024-08-06T21:58:26.134Z Vendors: n/a Products: n/a Problem Types: n/a Description: wp-admin/async-upload.php in the media uploader in WordPress before 3.0.5 allows remote authenticated users to read (1) draft posts or (2) private posts via a modified attachment_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2011-March/057003.html - http://codex.wordpress.org/Version_3.0.5 - http://www.vupen.com/english/advisories/2011/0658 - http://secunia.com/advisories/43729 - http://lists.fedoraproject.org/pipermail/package-announce/
/advisories/2011/0658 - http://secunia.com/advisories/43729 - http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056412.html - http://www.securityfocus.com/bid/46249 - http://www.wordpress.org/news/2011/02/wordpress-3-0-5/ - http://openwall.com/lists/oss-security/2011/02/09/13 - http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056998.html - http://openwall.com/lists/oss-security/2011/02/08/7 - http://www.vupen.com/english/advisories/2011/0721 - http://www.debian.org/security/2011/dsa-2190 - http://core.trac.wordpress.org/changeset/17393
CVE ID: CVE-2011-0702 State: PUBLISHED Published: 2011-02-14T20:00:00Z Last Updated: 2024-09-16T18:24:55.628Z Vendors: n/a Products: n/a Problem Types: n/a Description: The feh_unique_filename function in utils.c in feh before 1.11.2 might allow local users to overwrite arbitrary files via a symlink attack on a /tmp/feh_ temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=612035 - http://openwall.com/lists/oss-security/2011/02/09/1 - https://github.com/derf/feh/issues/#issue/32 - https://derf.homelinux.org/git/feh/commit/?id=29ab0855f044ef2fe9c295b72abefcb37f0861a5 - http://secunia.com/advisories/43221 - https://bu
linux.org/git/feh/commit/?id=29ab0855f044ef2fe9c295b72abefcb37f0861a5 - http://secunia.com/advisories/43221 - https://bugs.launchpad.net/ubuntu/+source/feh/+bug/607328 - https://bugzilla.redhat.com/show_bug.cgi?id=676389 - http://openwall.com/lists/oss-security/2011/02/09/14 - https://derf.homelinux.org/git/feh/commit/?id=23421a86cc826dd30f3dc4f62057fafb04b3ac40
CVE ID: CVE-2011-0703 State: PUBLISHED Published: 2019-11-15T16:09:29 Last Updated: 2024-08-06T21:58:26.088Z Vendors: gksu-polkit Products: gksu-polkit Problem Types: UNKNOWN_TYPE Description: In gksu-polkit before 0.0.3, the source file for xauth may contain arbitrary commands that may allow an attacker to overtake an administrator X11 session. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2011-0703 - https://access.redhat.com/security/cve/cve-2011-0703
CVE ID: CVE-2011-0704 State: PUBLISHED Published: 2018-05-04T20:00:00 Last Updated: 2024-08-06T21:58:26.092Z Vendors: n/a Products: n/a Problem Types: n/a Description: 389 Directory Server 1.2.7.5, when built with mozldap, allows remote attackers to cause a denial of service (replica crash) by sending an empty modify request. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=675320 - https://bugzilla.redhat.com/show_bug.cgi?id=676876
CVE ID: CVE-2011-0705 State: REJECTED Published: N/A Last Updated: 2023-02-12T00:00:00 Description: No description available.
CVE ID: CVE-2011-0706 State: PUBLISHED Published: 2011-02-18T23:00:00 Last Updated: 2024-08-06T21:58:26.128Z Vendors: n/a Products: n/a Problem Types: n/a Description: The JNLPClassLoader class in IcedTea-Web before 1.0.1, as used in OpenJDK Runtime Environment 1.6.0, allows remote attackers to gain privileges via unknown vectors related to multiple signers and the assignment of "an inappropriate security descriptor." Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054115.html - http://security.gentoo.org/glsa/glsa-201406-32.xml - http://lists.fedoraproject.org/pipermail/package-announce/2011-February/05
security.gentoo.org/glsa/glsa-201406-32.xml - http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054134.html - http://www.securityfocus.com/bid/46439 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65534 - http://dbhole.wordpress.com/2011/02/15/icedtea-web-1-0-1-released/ - http://secunia.com/advisories/43350 - http://www.debian.org/security/2011/dsa-2224 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14117 - https://bugzilla.redhat.com/show_bug.cgi?id=677332 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:054
CVE ID: CVE-2011-0707 State: PUBLISHED Published: 2011-02-22T18:00:00 Last Updated: 2024-08-06T21:58:26.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Cgi/confirm.py in GNU Mailman 2.1.14 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) full name or (2) username field in a confirmation message. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/0487 - http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056387.html - http://www.redhat.com/support/errata/RHSA-2011-0307.html - http://osvdb.org/70936 - http://secu
2011-March/056387.html - http://www.redhat.com/support/errata/RHSA-2011-0307.html - http://osvdb.org/70936 - http://secunia.com/advisories/43294 - http://www.vupen.com/english/advisories/2011/0720 - http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html - http://www.vupen.com/english/advisories/2011/0435 - http://www.vupen.com/english/advisories/2011/0460 - http://lists.opensuse.org/opensuse-updates/2011-05/msg00000.html - http://www.debian.org/security/2011/dsa-2170 - http://mail.python.org/pipermail/mailman-announce/2011-February/000157.html - http://www.ubuntu.com/usn/USN-1069-1 - http://www.redhat.com/support/errata/RHSA-2011-0308.html - http://www.vupen.com/english/a
ww.ubuntu.com/usn/USN-1069-1 - http://www.redhat.com/support/errata/RHSA-2011-0308.html - http://www.vupen.com/english/advisories/2011/0436 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html - http://www.mandriva.com/security/advisories?name=MDVSA-2011:036 - http://mail.python.org/pipermail/mailman-announce/2011-February/000158.html - http://www.securityfocus.com/bid/46464 - http://www.securitytracker.com/id?1025106 - http://secunia.com/advisories/43829 - http://secunia.com/advisories/43425 - http://www.vupen.com/english/advisories/2011/0542 - http://support.apple.com/kb/HT5002 - http://secunia.com/advisories/43389 - https://exchange.xforce.ibmcloud.com/vulnerabiliti
//support.apple.com/kb/HT5002 - http://secunia.com/advisories/43389 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65538 - http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056363.html - http://secunia.com/advisories/43580 - http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056399.html - http://secunia.com/advisories/43549
CVE ID: CVE-2011-0708 State: PUBLISHED Published: 2011-03-20T01:00:00 Last Updated: 2024-08-06T21:58:26.128Z Vendors: n/a Products: n/a Problem Types: n/a Description: exif.c in the Exif extension in PHP before 5.3.6 on 64-bit platforms performs an incorrect cast, which allows remote attackers to cause a denial of service (application crash) via an image with a crafted Image File Directory (IFD) that triggers a buffer over-read. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=133469208622507&w=2 - http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057709.html - http://www.vupen.com/english/advisories/2011/0764 - http://lists.fe
/pipermail/package-announce/2011-April/057709.html - http://www.vupen.com/english/advisories/2011/0764 - http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056642.html - http://www.exploit-db.com/exploits/16261/ - https://bugzilla.redhat.com/show_bug.cgi?id=680972 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:053 - http://www.debian.org/security/2011/dsa-2266 - http://www.vupen.com/english/advisories/2011/0890 - http://www.php.net/releases/5_3_6.php - http://www.php.net/ChangeLog-5.php - http://www.php.net/archive/2011.php - http://marc.info/?l=bugtraq&m=133469208622507&w=2 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html - http://