Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-7313 State: PUBLISHED Published: 2017-03-31T15:00:00 Last Updated: 2024-08-07T12:03:37.083Z Vendors: n/a Products: n/a Problem Types: n/a Description: The _httpsrequest function in Snoopy allows remote attackers to execute arbitrary commands. NOTE: this issue exists dues to an incomplete fix for CVE-2008-4796. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2014/07/09/11 - http://www.openwall.com/lists/oss-security/2014/07/18/2 - http://www.securityfocus.com/bid/68776 - http://www.openwall.com/lists/oss-security/2014/07/16/10 - https://exchange.xforce.ibmcloud.com/vulnerabilities/94737 - https://www-01.ibm.com/suppo
s/oss-security/2014/07/16/10 - https://exchange.xforce.ibmcloud.com/vulnerabilities/94737 - https://www-01.ibm.com/support/docview.wss?uid=isg3T1024264 - https://rhn.redhat.com/errata/RHSA-2017-0213.html - https://rhn.redhat.com/errata/RHSA-2017-0211.html - https://rhn.redhat.com/errata/RHSA-2017-0212.html - http://snoopy.cvs.sourceforge.net/viewvc/snoopy/Snoopy/Snoopy.class.php?view=log#rev1.27 - https://bugzilla.redhat.com/show_bug.cgi?id=1121497 - https://security.gentoo.org/glsa/201702-26 - https://rhn.redhat.com/errata/RHSA-2017-0214.html
CVE ID: CVE-2008-7314 State: PUBLISHED Published: 2020-01-23T14:48:47 Last Updated: 2024-08-07T12:03:36.319Z Vendors: mIRC Products: mIRC Problem Types: Other Description: mIRC before 6.35 allows attackers to cause a denial of service (crash) via a long nickname. Additional Analyst Notes: - CVE Program Container: References: - http://www.mirc.com/news.html - https://www.mirc.com/versions.txt
CVE ID: CVE-2008-7315 State: PUBLISHED Published: 2017-10-10T16:00:00 Last Updated: 2024-08-07T12:03:36.586Z Vendors: n/a Products: n/a Problem Types: n/a Description: UI-Dialog 1.09 and earlier allows remote attackers to execute arbitrary commands. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496448 - https://security-tracker.debian.org/tracker/CVE-2008-7315/ - http://www.securityfocus.com/bid/77031/info - https://rt.cpan.org/Public/Bug/Display.html?id=107364 - http://www.openwall.com/lists/oss-security/2015/10/08/6
CVE ID: CVE-2008-7316 State: PUBLISHED Published: 2016-05-02T10:00:00 Last Updated: 2024-08-07T12:03:36.468Z Vendors: n/a Products: n/a Problem Types: n/a Description: mm/filemap.c in the Linux kernel before 2.6.25 allows local users to cause a denial of service (infinite loop) via a writev system call that triggers an iovec of zero length, followed by a page fault for an iovec of nonzero length. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/01/24/6 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=124d3b7041f9a0ca7c43a6293e1cae4576c32fd5 - https://github.com/torvalds/linux/commit/124d3b7041f9a0ca7c4
x.git/commit/?id=124d3b7041f9a0ca7c43a6293e1cae4576c32fd5 - https://github.com/torvalds/linux/commit/124d3b7041f9a0ca7c43a6293e1cae4576c32fd5 - https://bugzilla.redhat.com/show_bug.cgi?id=1302009 - http://mirror.linux.org.au/linux/kernel/v2.6/ChangeLog-2.6.25
CVE ID: CVE-2008-7319 State: PUBLISHED Published: 2017-11-07T21:00:00Z Last Updated: 2024-09-17T00:51:37.142Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Net::Ping::External extension through 0.15 for Perl does not properly sanitize arguments (e.g., invalid hostnames) containing shell metacharacters before use of backticks in External.pm, allowing for shell command injection and arbitrary command execution if untrusted input is used. Additional Analyst Notes: - CVE Program Container: References: - https://rt.cpan.org/Public/Bug/Display.html?id=33230 - https://bugs.debian.org/881097 - http://www.openwall.com/lists/oss-security/2017/11/07/4 - http://matthias.sdfeu.org/devel/
ps://bugs.debian.org/881097 - http://www.openwall.com/lists/oss-security/2017/11/07/4 - http://matthias.sdfeu.org/devel/net-ping-external-cmd-injection.patch
CVE ID: CVE-2008-7320 State: PUBLISHED Published: 2018-11-18T19:00:00Z Last Updated: 2024-09-16T20:57:22.175Z Vendors: n/a Products: n/a Problem Types: n/a Description: GNOME Seahorse through 3.30 allows physically proximate attackers to read plaintext passwords by using the quickAllow dialog at an unattended workstation, if the keyring is unlocked. NOTE: this is disputed by a software maintainer because the behavior represents a design decision Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/ubuntu/+source/seahorse/+bug/189774/comments/13 - https://www.bountysource.com/issues/3849352-seahorse-shows-passwords-without-verification - https://bugs.lau
mments/13 - https://www.bountysource.com/issues/3849352-seahorse-shows-passwords-without-verification - https://bugs.launchpad.net/ubuntu/+source/seahorse/+bug/189774 - https://bugzilla.gnome.org/show_bug.cgi?id=551036
CVE ID: CVE-2008-7321 State: PUBLISHED Published: 2019-08-22T13:13:41 Last Updated: 2024-08-07T12:03:37.277Z Vendors: n/a Products: n/a Problem Types: n/a Description: The tubepress plugin before 1.6.5 for WordPress has XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/tubepress/#developers
CVE ID: CVE-2009-0001 State: PUBLISHED Published: 2009-01-21T20:00:00 Last Updated: 2024-08-07T04:17:10.172Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (application termination) and possibly execute arbitrary code via a crafted RTSP URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33385 - http://www.us-cert.gov/cas/techalerts/TA09-022A.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/48154 - http://lists.apple.com/archives/security-announce/2009/Jan/msg00000.html - http://www.vupen.com/english/advisories
154 - http://lists.apple.com/archives/security-announce/2009/Jan/msg00000.html - http://www.vupen.com/english/advisories/2009/0212 - http://support.apple.com/kb/HT3403 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6135 - http://secunia.com/advisories/33632
CVE ID: CVE-2009-0002 State: PUBLISHED Published: 2009-01-21T20:00:00 Last Updated: 2024-08-07T04:17:10.146Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (application termination) and possibly execute arbitrary code via a QTVR movie file with crafted THKD atoms. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33384 - http://www.us-cert.gov/cas/techalerts/TA09-022A.html - http://archives.neohapsis.com/archives/bugtraq/2009-01/0210.html - http://lists.apple.com/archives/security-announce/2009/Jan/msg00000.html - http://www
chives/bugtraq/2009-01/0210.html - http://lists.apple.com/archives/security-announce/2009/Jan/msg00000.html - http://www.vupen.com/english/advisories/2009/0212 - http://osvdb.org/51525 - http://support.apple.com/kb/HT3403 - http://secunia.com/advisories/33632 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5646 - http://www.zerodayinitiative.com/advisories/ZDI-09-005/
CVE ID: CVE-2009-0003 State: PUBLISHED Published: 2009-01-21T20:00:00 Last Updated: 2024-08-07T04:17:10.327Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (application termination) and execute arbitrary code via an AVI movie file with an invalid nBlockAlign value in the _WAVEFORMATEX structure. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-09-006/ - http://www.us-cert.gov/cas/techalerts/TA09-022A.html - http://osvdb.org/51526 - http://lists.apple.com/archives/security-announce/2009/Jan/msg00000.html - htt
TA09-022A.html - http://osvdb.org/51526 - http://lists.apple.com/archives/security-announce/2009/Jan/msg00000.html - http://www.vupen.com/english/advisories/2009/0212 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6218 - http://www.securityfocus.com/bid/33387 - http://support.apple.com/kb/HT3403 - http://secunia.com/advisories/33632
CVE ID: CVE-2009-0004 State: PUBLISHED Published: 2009-01-21T20:00:00 Last Updated: 2024-08-07T04:17:10.322Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (application termination) and possibly execute arbitrary code via a crafted MP3 audio file. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6211 - http://www.us-cert.gov/cas/techalerts/TA09-022A.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/48157 - http://lists.apple.com/archives/security-announce/2009/Jan/msg0000
/exchange.xforce.ibmcloud.com/vulnerabilities/48157 - http://lists.apple.com/archives/security-announce/2009/Jan/msg00000.html - http://www.vupen.com/english/advisories/2009/0212 - http://support.apple.com/kb/HT3403 - http://secunia.com/advisories/33632
CVE ID: CVE-2009-0005 State: PUBLISHED Published: 2009-01-21T20:00:00 Last Updated: 2024-08-07T04:17:10.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (application termination) and possibly execute arbitrary code via a crafted H.263 encoded movie file that triggers memory corruption. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33386 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48158 - http://www.us-cert.gov/cas/techalerts/TA09-022A.html - http://lists.apple.com/archives/security-announce/2009/Jan/msg00000
tp://www.us-cert.gov/cas/techalerts/TA09-022A.html - http://lists.apple.com/archives/security-announce/2009/Jan/msg00000.html - http://www.vupen.com/english/advisories/2009/0212 - http://support.apple.com/kb/HT3403 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6187 - http://secunia.com/advisories/33632
CVE ID: CVE-2009-0006 State: PUBLISHED Published: 2009-01-21T20:00:00 Last Updated: 2024-08-07T04:17:10.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (application termination) and possibly execute arbitrary code via a Cinepak encoded movie file with a crafted MDAT atom that triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2009-01/0215.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6153 - http://osvdb.org/51529 - http://ww
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6153 - http://osvdb.org/51529 - http://www.us-cert.gov/cas/techalerts/TA09-022A.html - http://www.securityfocus.com/archive/1/500391/100/0/threaded - http://lists.apple.com/archives/security-announce/2009/Jan/msg00000.html - http://www.zerodayinitiative.com/advisories/ZDI-09-007/ - http://www.vupen.com/english/advisories/2009/0212 - http://support.apple.com/kb/HT3403 - http://www.securityfocus.com/bid/33388 - http://secunia.com/advisories/33632
CVE ID: CVE-2009-0007 State: PUBLISHED Published: 2009-01-21T20:00:00 Last Updated: 2024-08-07T04:17:10.457Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (application termination) and possibly execute arbitrary code via a QuickTime movie file containing invalid image width data in JPEG atoms within STSD atoms. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/51530 - http://www.us-cert.gov/cas/techalerts/TA09-022A.html - http://www.zerodayinitiative.com/advisories/ZDI-09-008/ - http://lists.apple.com/archives/security-announce/2009/Jan/ms
http://www.zerodayinitiative.com/advisories/ZDI-09-008/ - http://lists.apple.com/archives/security-announce/2009/Jan/msg00000.html - http://www.vupen.com/english/advisories/2009/0212 - http://support.apple.com/kb/HT3403 - http://www.securityfocus.com/bid/33390 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6132 - http://secunia.com/advisories/33632
CVE ID: CVE-2009-0008 State: PUBLISHED Published: 2009-01-22T18:00:00 Last Updated: 2024-08-07T04:17:10.343Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Apple QuickTime MPEG-2 Playback Component before 7.60.92.0 on Windows allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a crafted MPEG-2 movie. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce//2009/Jan/msg00001.html - http://www.securityfocus.com/bid/33393 - http://support.apple.com/kb/HT3404 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48162 - https://oval.cisecurity.or
://support.apple.com/kb/HT3404 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48162 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5974 - http://secunia.com/advisories/33642 - http://www.securitytracker.com/id?1021621 - http://www.vupen.com/english/advisories/2009/0211
CVE ID: CVE-2009-0009 State: PUBLISHED Published: 2009-02-13T00:00:00 Last Updated: 2024-08-07T04:17:10.526Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Pixlet codec in Apple Mac OS X 10.4.11 and 10.5.6 allows remote attackers to cause a denial of service (application termination) and possibly execute arbitrary code via a crafted movie file that triggers memory corruption. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33937 - http://www.securityfocus.com/bid/33759 - http://support.apple.com/kb/HT3438 - http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html - https://exchange.xfo
rt.apple.com/kb/HT3438 - http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/48713 - http://www.vupen.com/english/advisories/2009/0422 - http://osvdb.org/51980 - http://securitytracker.com/alerts/2009/Feb/1021718.html
CVE ID: CVE-2009-0010 State: PUBLISHED Published: 2009-05-13T15:14:00 Last Updated: 2024-08-07T04:17:10.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer underflow in QuickDraw Manager in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7, and Apple QuickTime before 7.6.2, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a PICT image with a crafted 0x77 Poly tag and a crafted length field, which triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-09-021/ - http://secunia.com/advisories/35091 - http://support.apple.com/kb/HT
/www.zerodayinitiative.com/advisories/ZDI-09-021/ - http://secunia.com/advisories/35091 - http://support.apple.com/kb/HT3549 - http://support.apple.com/kb/HT3591 - http://secunia.com/advisories/35074 - http://www.vupen.com/english/advisories/2009/1407 - http://www.securitytracker.com/id?1022209 - http://lists.apple.com/archives/security-announce/2009/May/msg00002.html - http://www.securityfocus.com/archive/1/503878/100/0/threaded - http://www.vupen.com/exploits/Apple_QuickTime_PICT_Poly_Tag_Parsing_Heap_Overflow_PoC_Exploit_1407144.php - http://www.zerodayinitiative.com/advisories/ZDI-09-021 - http://www.securityfocus.com/bid/34926 - http://www.us-cert.gov/cas/techalerts/TA09-133A.html - htt
isories/ZDI-09-021 - http://www.securityfocus.com/bid/34926 - http://www.us-cert.gov/cas/techalerts/TA09-133A.html - http://www.securityfocus.com/bid/34938 - http://www.vupen.com/english/advisories/2009/1297 - http://lists.apple.com/archives/security-announce/2009/Jun/msg00000.html
CVE ID: CVE-2009-0011 State: PUBLISHED Published: 2009-02-13T00:00:00 Last Updated: 2024-08-07T04:17:10.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certificate Assistant in Apple Mac OS X 10.5.6 allows local users to overwrite arbitrary files via unknown vectors related to an "insecure file operation" on a temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33937 - http://www.securityfocus.com/bid/33759 - http://support.apple.com/kb/HT3438 - http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html - http://osvdb.org/51979 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48715 - http://www.vup
Feb/msg00000.html - http://osvdb.org/51979 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48715 - http://www.vupen.com/english/advisories/2009/0422 - http://securitytracker.com/alerts/2009/Feb/1021720.html
CVE ID: CVE-2009-0012 State: PUBLISHED Published: 2009-02-13T00:00:00 Last Updated: 2024-08-07T04:17:10.426Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in CoreText in Apple Mac OS X 10.5.6 allows remote attackers to execute arbitrary code via a crafted Unicode string. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33937 - http://www.securityfocus.com/bid/33759 - http://support.apple.com/kb/HT3438 - http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html - http://osvdb.org/51977 - http://www.vupen.com/english/advisories/2009/0422 - http://www.securityfocus.com/bid/33809
CVE ID: CVE-2009-0013 State: PUBLISHED Published: 2009-02-13T00:00:00 Last Updated: 2024-08-07T04:17:10.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: dscl in DS Tools in Apple Mac OS X 10.4.11 and 10.5.6 requires that passwords must be provided as command line arguments, which allows local users to gain privileges by listing process information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33937 - http://securitytracker.com/alerts/2009/Feb/1021722.html - http://www.securityfocus.com/bid/33759 - http://support.apple.com/kb/HT3438 - http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html - https://exchange.xfo
rt.apple.com/kb/HT3438 - http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/48717 - http://www.vupen.com/english/advisories/2009/0422 - http://www.securityfocus.com/bid/33815
CVE ID: CVE-2009-0014 State: PUBLISHED Published: 2009-02-13T00:00:00 Last Updated: 2024-08-07T04:17:10.327Z Vendors: n/a Products: n/a Problem Types: n/a Description: Folder Manager in Apple Mac OS X 10.5.6 uses insecure default permissions when recreating a Downloads folder after it has been deleted, which allows local users to bypass intended access restrictions and read the Downloads folder. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33820 - http://secunia.com/advisories/33937 - http://www.securityfocus.com/bid/33759 - http://support.apple.com/kb/HT3438 - http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html - http
9 - http://support.apple.com/kb/HT3438 - http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html - http://www.vupen.com/english/advisories/2009/0422
CVE ID: CVE-2009-0015 State: PUBLISHED Published: 2009-02-13T00:00:00 Last Updated: 2024-08-07T04:17:10.515Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in fseventsd in the FSEvents framework in Apple Mac OS X 10.5.6 allows local users to obtain sensitive information (filesystem activities and directory names) via unknown vectors related to "credential management." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33937 - http://www.securityfocus.com/bid/33759 - http://www.securityfocus.com/bid/33821 - http://support.apple.com/kb/HT3438 - http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.h
m/bid/33821 - http://support.apple.com/kb/HT3438 - http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html - http://www.vupen.com/english/advisories/2009/0422
CVE ID: CVE-2009-0016 State: PUBLISHED Published: 2009-03-14T18:00:00 Last Updated: 2024-08-07T04:17:10.429Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple iTunes before 8.1 on Windows allows remote attackers to cause a denial of service (infinite loop) via a Digital Audio Access Protocol (DAAP) message with a crafted Content-Length header. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1021842 - http://www.securityfocus.com/archive/1/501758/100/0/threaded - http://osvdb.org/52578 - http://www.securityfocus.com/bid/34094 - http://www.fortiguardcenter.com/advisory/FGA-2009-11.html - https://exchange.xforce.ibmcloud.com/vulnerab
om/bid/34094 - http://www.fortiguardcenter.com/advisory/FGA-2009-11.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/49200 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6001 - http://www.vupen.com/english/advisories/2009/0702 - http://archives.neohapsis.com/archives/fulldisclosure/2009-03/0236.html - http://secunia.com/advisories/34254 - http://lists.apple.com/archives/security-announce//2009/Mar/msg00001.html - http://support.apple.com/kb/HT3487
CVE ID: CVE-2009-0017 State: PUBLISHED Published: 2009-02-13T00:00:00 Last Updated: 2024-08-07T04:17:10.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: csregprinter in the Printing component in Apple Mac OS X 10.4.11 and 10.5.6 does not properly handle error conditions, which allows local users to execute arbitrary code via unknown vectors that trigger a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33937 - http://www.securityfocus.com/bid/33759 - http://www.securityfocus.com/bid/33811 - http://support.apple.com/kb/HT3438 - http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html - ht
811 - http://support.apple.com/kb/HT3438 - http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html - http://www.vupen.com/english/advisories/2009/0422
CVE ID: CVE-2009-0018 State: PUBLISHED Published: 2009-02-13T00:00:00 Last Updated: 2024-08-07T04:17:10.426Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Remote Apple Events server in Apple Mac OS X 10.4.11 and 10.5.6 does not properly initialize a buffer, which allows remote attackers to read portions of memory. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33937 - http://www.securityfocus.com/bid/33759 - http://support.apple.com/kb/HT3438 - http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html - http://www.vupen.com/english/advisories/2009/0422 - http://www.securityfocus.com/bid/33816
CVE ID: CVE-2009-0019 State: PUBLISHED Published: 2009-02-13T00:00:00 Last Updated: 2024-08-07T04:17:10.317Z Vendors: n/a Products: n/a Problem Types: n/a Description: Remote Apple Events in Apple Mac OS X 10.4.11 and 10.5.6 allows remote attackers to cause a denial of service (application termination) or obtain sensitive information via unspecified vectors that trigger an out-of-bounds memory access. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33759 - http://support.apple.com/kb/HT3438 - http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html - http://www.securityfocus.com/bid/33814 - http://www.vupen.com/english/advisor
security-announce/2009/Feb/msg00000.html - http://www.securityfocus.com/bid/33814 - http://www.vupen.com/english/advisories/2009/0422