Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
010-04/msg00006.html - http://marc.info/?l=bugtraq&m=130497311408250&w=2 - http://site.pi3.com.pl/adv/mod_proxy.txt - http://www.securityfocus.com/bid/37966 - http://packetstormsecurity.org/1001-exploits/modproxy-overflow.txt - http://www.securitytracker.com/id?1023533 - http://www.vupen.com/english/advisories/2010/1001 - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/reb7c64aeea604bf948467d9d1cab8ff23fa7d002be1964bcc275aae7%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E
s://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r2295080a257bad27ea68ca0af12fc715577f9e84801eae116a33107e%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rad2acee3ab838b52c04a0698b1728a9a43467bf365bd481c993c535d%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2010-0011 State: PUBLISHED Published: 2010-02-25T19:00:00 Last Updated: 2024-08-07T00:37:52.445Z Vendors: n/a Products: n/a Problem Types: n/a Description: The eval_js function in uzbl-core.c in Uzbl before 2010.01.05 exposes the run method of the Uzbl object, which allows remote attackers to execute arbitrary commands via JavaScript code. Additional Analyst Notes: - CVE Program Container: References: - http://lists.uzbl.org/pipermail/uzbl-dev-uzbl.org/2010-January/000586.html - http://github.com/Dieterbe/uzbl/commit/1958b52d41cba96956dc1995660de49525ed1047 - http://github.com/Dieterbe/uzbl/downloads - http://www.uzbl.org/news.php?id=22 - https://exchange.xforce.ibmcloud.com/vuln
tp://github.com/Dieterbe/uzbl/downloads - http://www.uzbl.org/news.php?id=22 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56612 - http://www.openwall.com/lists/oss-security/2010/01/06/1 - http://www.openwall.com/lists/oss-security/2010/01/06/3
CVE ID: CVE-2010-0012 State: PUBLISHED Published: 2010-01-08T17:00:00 Last Updated: 2024-08-07T00:37:52.483Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in libtransmission/metainfo.c in Transmission 1.22, 1.34, 1.75, and 1.76 allows remote attackers to overwrite arbitrary files via a .. (dot dot) in a pathname within a .torrent file. Additional Analyst Notes: - CVE Program Container: References: - http://trac.transmissionbt.com/wiki/Changes#version-1.77 - http://www.openwall.com/lists/oss-security/2010/01/06/4 - https://launchpad.net/bugs/500625 - http://security.debian.org/pool/updates/main/t/transmission/transmission_1.22-1+lenny2.diff.gz -
hpad.net/bugs/500625 - http://security.debian.org/pool/updates/main/t/transmission/transmission_1.22-1+lenny2.diff.gz - http://trac.transmissionbt.com/changeset/9829/ - http://secunia.com/advisories/38005 - http://www.vupen.com/english/advisories/2010/0071 - http://www.debian.org/security/2010/dsa-1967 - https://exchange.xforce.ibmcloud.com/vulnerabilities/55454 - http://www.openwall.com/lists/oss-security/2010/01/06/2 - http://secunia.com/advisories/37993 - http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html - http://www.mail-archive.com/debian-devel-changes%40lists.debian.org/msg264483.html
CVE ID: CVE-2010-0013 State: PUBLISHED Published: 2010-01-09T18:00:00 Last Updated: 2024-08-07T00:37:52.483Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in slp.c in the MSN protocol plugin in libpurple in Pidgin 2.6.4 and Adium 1.3.8 allows remote attackers to read arbitrary files via a .. (dot dot) in an application/x-msnmsgrp2p MSN emoticon (aka custom smiley) request, a related issue to CVE-2004-0122. NOTE: it could be argued that this is resultant from a vulnerability in which an emoticon download request is processed even without a preceding text/x-mms-emoticon message that announced availability of the emoticon. Additional Analyst Notes:
n without a preceding text/x-mms-emoticon message that announced availability of the emoticon. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2010/01/02/1 - http://secunia.com/advisories/37953 - http://d.pidgin.im/viewmtn/revision/info/3d02401cf232459fc80c0837d31e05fae7ae5467 - https://bugzilla.redhat.com/show_bug.cgi?id=552483 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-277450-1 - http://secunia.com/advisories/37954 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:085 - http://www.openwall.com/lists/oss-security/2010/01/07/1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ova
wall.com/lists/oss-security/2010/01/07/1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17620 - http://sunsolve.sun.com/search/document.do?assetkey=1-77-1022203.1-1 - http://www.vupen.com/english/advisories/2009/3663 - http://developer.pidgin.im/viewmtn/revision/diff/3d02401cf232459fc80c0837d31e05fae7ae5467/with/c64a1adc8bda2b4aeaae1f273541afbc4f71b810/libpurple/protocols/msn/slp.c - http://lists.fedoraproject.org/pipermail/package-announce/2010-January/033771.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-January/033848.html - http://www.vupen.com/english/advisories/2010/1020 - http://lists.opensuse.org/opensuse-security-annou
uary/033848.html - http://www.vupen.com/english/advisories/2010/1020 - http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10333 - http://events.ccc.de/congress/2009/Fahrplan/events/3596.en.html - http://d.pidgin.im/viewmtn/revision/info/4be2df4f72bd8a55cdae7f2554b73342a497c92f - http://www.vupen.com/english/advisories/2009/3662 - http://d.pidgin.im/viewmtn/revision/info/c64a1adc8bda2b4aeaae1f273541afbc4f71b810 - http://www.openwall.com/lists/oss-security/2010/01/07/2 - http://secunia.com/advisories/37961 - http://secunia.com/advisories/38915
CVE ID: CVE-2010-0014 State: PUBLISHED Published: 2010-01-14T18:00:00Z Last Updated: 2024-09-16T20:47:31.841Z Vendors: n/a Products: n/a Problem Types: n/a Description: System Security Services Daemon (SSSD) before 1.0.1, when the krb5 auth_provider is configured but the KDC is unreachable, allows physically proximate attackers to authenticate, via an arbitrary password, to the screen-locking program on a workstation that has any user's Kerberos ticket-granting ticket (TGT); and might allow remote attackers to bypass intended access restrictions via vectors involving an arbitrary password in conjunction with a valid TGT. Additional Analyst Notes: - CVE Program Container: References: - http:/
itrary password in conjunction with a valid TGT. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38160 - http://www.securityfocus.com/bid/37747 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.0.1 - https://bugzilla.redhat.com/show_bug.cgi?id=553233
CVE ID: CVE-2010-0015 State: PUBLISHED Published: 2010-01-14T18:00:00 Last Updated: 2024-08-07T00:37:52.443Z Vendors: n/a Products: n/a Problem Types: n/a Description: nis/nss_nis/nis-pwd.c in the GNU C Library (aka glibc or libc6) 2.7 and Embedded GLIBC (EGLIBC) 2.10.2 adds information from the passwd.adjunct.byname map to entries in the passwd map, which allows remote attackers to obtain the encrypted passwords of NIS accounts by calling the getpwnam function. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2010:111 - http://www.openwall.com/lists/oss-security/2010/01/08/2 - http://www.openwall.com/lists/oss-security/2
=MDVSA-2010:111 - http://www.openwall.com/lists/oss-security/2010/01/08/2 - http://www.openwall.com/lists/oss-security/2010/01/07/3 - http://www.openwall.com/lists/oss-security/2010/01/11/6 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=560333 - http://www.openwall.com/lists/oss-security/2010/01/08/1 - https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00007.html - http://svn.debian.org/viewsvn/pkg-glibc/glibc-package/trunk/debian/patches/any/submitted-nis-shadow.diff?revision=4062&view=markup - http://www.mandriva.com/security/advisories?name=MDVSA-2010:112 - http://marc.info/?l=oss-security&m=126320570505651&w=2 - http://sourceware.org/bugzilla/show_bug.cgi?id=11134 - htt
12 - http://marc.info/?l=oss-security&m=126320570505651&w=2 - http://sourceware.org/bugzilla/show_bug.cgi?id=11134 - http://marc.info/?l=oss-security&m=126320356003425&w=2
CVE ID: CVE-2010-0016 State: PUBLISHED Published: 2010-02-10T18:00:00 Last Updated: 2024-08-07T00:37:52.482Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SMB client implementation in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not properly validate response fields, which allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code via a crafted response, aka "SMB Client Pool Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8278 - http://www.us-cert.gov/cas/techalerts/TA10-040A.html - https://docs.mi
h/definition/oval%3Aorg.mitre.oval%3Adef%3A8278 - http://www.us-cert.gov/cas/techalerts/TA10-040A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-006
CVE ID: CVE-2010-0017 State: PUBLISHED Published: 2010-02-10T18:00:00 Last Updated: 2024-08-07T00:37:52.500Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the SMB client implementation in Microsoft Windows Server 2008 R2 and Windows 7 allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code, and in the SMB client implementation in Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 allows local users to gain privileges, via a crafted SMB Negotiate response, aka "SMB Client Race Condition Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/o
itional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8298 - http://www.us-cert.gov/cas/techalerts/TA10-040A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-006
CVE ID: CVE-2010-0018 State: PUBLISHED Published: 2010-01-13T19:00:00 Last Updated: 2024-08-07T00:37:53.588Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the Embedded OpenType (EOT) Font Engine (t2embed.dll) in Microsoft Windows 2000 SP4; Windows XP SP2 and SP3; Windows Server 2003 SP2; Windows Vista Gold, SP1, and SP2; Windows Server 2008 Gold, SP2, and R2; and Windows 7 allows remote attackers to execute arbitrary code via compressed data that represents a crafted EOT font, aka "Microtype Express Compressed Fonts Integer Flaw in the LZCOMP Decompressor Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.c
P Decompressor Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-001 - http://blogs.technet.com/srd/archive/2010/01/12/ms10-001-font-file-decompression-vulnerability.aspx - http://www.securitytracker.com/id?1023432 - http://secunia.com/advisories/35457 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8324 - http://www.us-cert.gov/cas/techalerts/TA10-012B.html - http://www.vupen.com/english/advisories/2010/0095 - http://www.securityfocus.com/bid/37671 - http://osvdb.org/61651
CVE ID: CVE-2010-0019 State: PUBLISHED Published: 2010-08-11T18:00:00 Last Updated: 2024-08-07T00:37:53.440Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Silverlight 3 before 3.0.50611.0 on Windows, and before 3.0.41130.0 on Mac OS X, does not properly handle pointers, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and framework outage) via a crafted web site, aka "Microsoft Silverlight Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA10-222A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms
.us-cert.gov/cas/techalerts/TA10-222A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-060
CVE ID: CVE-2010-0020 State: PUBLISHED Published: 2010-02-10T18:00:00 Last Updated: 2024-08-07T00:37:53.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SMB implementation in the Server service in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate request fields, which allows remote authenticated users to execute arbitrary code via a malformed request, aka "SMB Pathname Overflow Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval
s: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8438 - http://www.us-cert.gov/cas/techalerts/TA10-040A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-012
CVE ID: CVE-2010-0021 State: PUBLISHED Published: 2010-02-10T18:00:00 Last Updated: 2025-01-21T16:49:29.744Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple race conditions in the SMB implementation in the Server service in Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allow remote attackers to cause a denial of service (system hang) via a crafted (1) SMBv1 or (2) SMBv2 Negotiate packet, aka "SMB Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.us-cert.gov/cas/techalerts/TA10-040A.html - https://docs.microsoft.com/en-us/security-updates/
References: - http://www.us-cert.gov/cas/techalerts/TA10-040A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-012 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8524
CVE ID: CVE-2010-0022 State: PUBLISHED Published: 2010-02-10T18:00:00 Last Updated: 2024-08-07T00:37:52.442Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SMB implementation in the Server service in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate the share and servername fields in SMB packets, which allows remote attackers to cause a denial of service (system hang) via a crafted packet, aka "SMB Null Pointer Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/d
ility." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8314 - http://www.us-cert.gov/cas/techalerts/TA10-040A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-012
CVE ID: CVE-2010-0023 State: PUBLISHED Published: 2010-02-10T18:00:00 Last Updated: 2024-08-07T00:37:52.906Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Client/Server Run-time Subsystem (CSRSS) in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not properly kill processes after a logout, which allows local users to obtain sensitive information or gain privileges via a crafted application that continues to execute throughout the logout of one user and the login session of the next user, aka "CSRSS Local Privilege Elevation Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/defin
y." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8304 - http://www.us-cert.gov/cas/techalerts/TA10-040A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-011 - http://secunia.com/advisories/38509
CVE ID: CVE-2010-0024 State: PUBLISHED Published: 2010-04-14T15:44:00 Last Updated: 2024-08-07T00:37:52.990Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SMTP component in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, and Server 2008 Gold, SP2, and R2, and Exchange Server 2003 SP2, does not properly parse MX records, which allows remote DNS servers to cause a denial of service (service outage) via a crafted response to a DNS MX record query, aka "SMTP Server MX Record Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7067 - https://docs.micros
ces: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7067 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-024 - http://www.us-cert.gov/cas/techalerts/TA10-103A.html
CVE ID: CVE-2010-0025 State: PUBLISHED Published: 2010-04-14T15:44:00 Last Updated: 2024-08-07T00:37:53.063Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SMTP component in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, and Server 2008 Gold, SP2, and R2, and Exchange Server 2000 SP3, does not properly allocate memory for SMTP command replies, which allows remote attackers to read fragments of e-mail messages by sending a series of invalid commands and then sending a STARTTLS command, aka "SMTP Memory Allocation Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39253 - https://docs.microsoft.com/en-us/
st Notes: - CVE Program Container: References: - http://secunia.com/advisories/39253 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-024 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12175 - http://www.us-cert.gov/cas/techalerts/TA10-103A.html
CVE ID: CVE-2010-0026 State: PUBLISHED Published: 2010-02-10T18:00:00 Last Updated: 2024-08-07T00:37:54.077Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Hyper-V server implementation in Microsoft Windows Server 2008 Gold, SP2, and R2 on the x64 platform allows guest OS users to cause a denial of service (host OS hang) via a crafted application that executes a malformed series of machine instructions, aka "Hyper-V Instruction Set Validation Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-010 - http://www.us-cert.gov/cas/techalerts/TA10-040A.html - https://oval.cise
urity-updates/securitybulletins/2010/ms10-010 - http://www.us-cert.gov/cas/techalerts/TA10-040A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8006
CVE ID: CVE-2010-0027 State: PUBLISHED Published: 2010-01-22T21:20:00 Last Updated: 2024-08-07T00:37:53.828Z Vendors: n/a Products: n/a Problem Types: n/a Description: The URL validation functionality in Microsoft Internet Explorer 5.01, 6, 6 SP1, 7 and 8, and the ShellExecute API function in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2, does not properly process input parameters, which allows remote attackers to execute arbitrary local programs via a crafted URL, aka "URL Validation Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8464 - https://docs.microsoft.com/
ttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8464 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-007 - http://www.us-cert.gov/cas/techalerts/TA10-040A.html - http://www.securityfocus.com/archive/1/509470/100/0/threaded - http://www.zerodayinitiative.com/advisories/ZDI-10-016/ - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-002 - https://exchange.xforce.ibmcloud.com/vulnerabilities/55773
CVE ID: CVE-2010-0028 State: PUBLISHED Published: 2010-02-10T18:00:00 Last Updated: 2024-08-07T00:37:53.005Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in Microsoft Paint in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted JPEG (.JPG) file, aka "MS Paint Integer Overflow Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-005 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8429 - http://www.us-cert.gov/cas/techalerts/TA10-040A.html - http://secun
arch/definition/oval%3Aorg.mitre.oval%3Adef%3A8429 - http://www.us-cert.gov/cas/techalerts/TA10-040A.html - http://secunia.com/advisories/36634
CVE ID: CVE-2010-0029 State: PUBLISHED Published: 2010-02-10T18:00:00 Last Updated: 2024-08-07T00:37:53.359Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Microsoft Office PowerPoint 2002 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka "PowerPoint File Path Handling Buffer Overflow Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8410 - http://www.us-cert.gov/cas/techalerts/TA10-040A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-004 - http://www.securitytracker
0A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-004 - http://www.securitytracker.com/id?1023563
CVE ID: CVE-2010-0030 State: PUBLISHED Published: 2010-02-10T18:00:00 Last Updated: 2024-08-07T00:37:52.929Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Microsoft Office PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka "PowerPoint LinkedSlideAtom Heap Overflow Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8050 - http://www.us-cert.gov/cas/techalerts/TA10-040A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-004 - http://
/techalerts/TA10-040A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-004 - http://www.securitytracker.com/id?1023563
CVE ID: CVE-2010-0031 State: PUBLISHED Published: 2010-02-10T18:00:00 Last Updated: 2024-08-07T00:37:53.204Z Vendors: n/a Products: n/a Problem Types: n/a Description: Array index error in Microsoft Office PowerPoint 2002 SP3 and 2003 SP3, and PowerPoint in Office 2004 for Mac, allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka "PowerPoint OEPlaceholderAtom 'placementId' Invalid Array Indexing Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8081 - http://www.us-cert.gov/cas/techalerts/TA10-040A.html - https://docs.microsoft.com/en-us/se
org.mitre.oval%3Adef%3A8081 - http://www.us-cert.gov/cas/techalerts/TA10-040A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-004 - http://www.securitytracker.com/id?1023563