Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
http://www.securityfocus.com/archive/1/515545/100/0/threaded - http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 - http://secunia.com/advisories/40639 - http://secunia.com/advisories/42787 - http://www.vupen.com/english/advisories/2011/0025 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10735
CVE ID: CVE-2010-0213 State: PUBLISHED Published: 2010-07-27T22:00:00 Last Updated: 2024-08-07T00:37:54.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: BIND 9.7.1 and 9.7.1-P1, when a recursive validating server has a trust anchor that is configured statically or via DNSSEC Lookaside Validation (DLV), allows remote attackers to cause a denial of service (infinite loop) via a query for an RRSIG record whose answer is not in the cache, which causes BIND to repeatedly send RRSIG queries to the authoritative servers. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00001.html - http://www.securityfocu
iner: References: - http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00001.html - http://www.securityfocus.com/bid/41730 - http://www.securitytracker.com/id?1024217 - http://www.kb.cert.org/vuls/id/211905 - http://secunia.com/advisories/40709 - http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044445.html - http://secunia.com/advisories/40652 - http://www.vupen.com/english/advisories/2010/1884 - http://www.isc.org/software/bind/advisories/cve-2010-0213
CVE ID: CVE-2010-0214 State: PUBLISHED Published: 2011-01-12T00:00:00 Last Updated: 2024-08-07T00:37:54.145Z Vendors: n/a Products: n/a Problem Types: n/a Description: The administrative interface on the PolyVision RoomWizard with firmware 3.2.3 places the Sync Connector Active Directory (AD) credentials in a web form that is accessed over HTTP on port 80, which allows remote attackers to obtain sensitive information by reading the HTML source code corresponding to the /admin/sign/DeviceSynch URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/870601 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64543 - http://www.vupen.com/english/ad
b.cert.org/vuls/id/870601 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64543 - http://www.vupen.com/english/advisories/2011/0059 - http://packetstormsecurity.org/files/view/97291/roomwizard-disclose.txt - http://seclists.org/fulldisclosure/2011/Jan/58 - http://www.securityfocus.com/bid/45699
CVE ID: CVE-2010-0215 State: PUBLISHED Published: 2011-01-07T22:00:00Z Last Updated: 2024-09-17T04:00:14.664Z Vendors: n/a Products: n/a Problem Types: n/a Description: ActiveCollab before 2.3.2 allows remote authenticated users to bypass intended access restrictions, and (1) delete an attachment or (2) subscribe to an object, via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/236703 - http://www.activecollab.com/docs/manuals/admin/release-notes/activecollab-2-3-2
CVE ID: CVE-2010-0216 State: PUBLISHED Published: 2011-05-10T19:00:00 Last Updated: 2024-08-07T00:37:54.277Z Vendors: n/a Products: n/a Problem Types: n/a Description: authenticate_ad_setup_finished.cfm in MediaCAST 8 and earlier allows remote attackers to discover usernames and cleartext passwords by reading the error messages returned for requests that use the UserID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/72079 - http://secunia.com/advisories/44182 - http://www.securityfocus.com/bid/47572 - http://www.packetninjas.net/storage/advisories/MediaCast-PWDump-FINAL.txt - http://securityreason.com/securityalert/8245 - https://exchange.xfor
net/storage/advisories/MediaCast-PWDump-FINAL.txt - http://securityreason.com/securityalert/8245 - https://exchange.xforce.ibmcloud.com/vulnerabilities/67082
CVE ID: CVE-2010-0217 State: PUBLISHED Published: 2011-05-20T22:00:00 Last Updated: 2024-08-07T00:37:54.288Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zeacom Chat Server before 5.1 uses too short a random string for the JSESSIONID value, which makes it easier for remote attackers to hijack sessions or cause a denial of service (Chat Server crash or Tomcat daemon crash) via a brute-force attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/518037/100/0/threaded - http://www.packetninjas.net/storage/advisories/Zeacom-CVE-2010-0217.txt - http://securityreason.com/securityalert/8255 - http://www.securityfocus.com/bid/479
dvisories/Zeacom-CVE-2010-0217.txt - http://securityreason.com/securityalert/8255 - http://www.securityfocus.com/bid/47910 - https://exchange.xforce.ibmcloud.com/vulnerabilities/67540
CVE ID: CVE-2010-0218 State: PUBLISHED Published: 2010-10-05T21:00:00Z Last Updated: 2024-09-16T18:14:29.798Z Vendors: n/a Products: n/a Problem Types: n/a Description: ISC BIND 9.7.2 through 9.7.2-P1 uses an incorrect ACL to restrict the ability of Recursion Desired (RD) queries to access the cache, which allows remote attackers to obtain potentially sensitive information via a DNS query. Additional Analyst Notes: - CVE Program Container: References: - https://lists.isc.org/pipermail/bind-announce/2010-September/000655.html - http://ftp.isc.org/isc/bind9/9.7.2-P2/RELEASE-NOTES-BIND-9.7.2-P2.html - http://www.kb.cert.org/vuls/id/784855
CVE ID: CVE-2010-0219 State: PUBLISHED Published: 2010-10-18T16:00:00 Last Updated: 2024-08-07T00:45:10.633Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache Axis2, as used in dswsbobje.war in SAP BusinessObjects Enterprise XI 3.2, CA ARCserve D2D r15, and other products, has a default password of axis2 for the admin account, which makes it easier for remote attackers to execute arbitrary code by uploading a crafted web service. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/41799 - https://kb.juniper.net/KB27373 - http://retrogod.altervista.org/9sg_ca_d2d.html - http://www.osvdb.org/70233 - http://www.exploit-db.com/exploits/1
373 - http://retrogod.altervista.org/9sg_ca_d2d.html - http://www.osvdb.org/70233 - http://www.exploit-db.com/exploits/15869 - http://spl0it.org/files/talks/source_barcelona10/Hacking%20SAP%20BusinessObjects.pdf - http://www.vupen.com/english/advisories/2010/2673 - http://www.securityfocus.com/archive/1/514284/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/62523 - http://secunia.com/advisories/42763 - http://www.rapid7.com/security-center/advisories/R7-0037.jsp - http://www.kb.cert.org/vuls/id/989719 - http://www.securitytracker.com/id?1024929 - https://service.sap.com/sap/support/notes/1432881
CVE ID: CVE-2010-0220 State: PUBLISHED Published: 2010-01-07T19:00:00 Last Updated: 2024-08-07T00:45:11.278Z Vendors: n/a Products: n/a Problem Types: n/a Description: The nsObserverList::FillObserverArray function in xpcom/ds/nsObserverList.cpp in Mozilla Firefox before 3.5.7 allows remote attackers to cause a denial of service (application crash) via a crafted web site that triggers memory consumption and an accompanying Low Memory alert dialog, and also triggers attempted removal of an observer from an empty observers array. Additional Analyst Notes: - CVE Program Container: References: - http://isc.sans.org/diary.html?storyid=7897 - http://www.mandriva.com/security/advisories?name=MDVSA-
ner: References: - http://isc.sans.org/diary.html?storyid=7897 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:000 - https://exchange.xforce.ibmcloud.com/vulnerabilities/55550 - http://hg.mozilla.org/mozilla-central/rev/51396f6c9f20 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8292 - http://www.mozilla.com/en-US/firefox/3.5.7/releasenotes/ - https://bugzilla.mozilla.org/show_bug.cgi?id=507114
CVE ID: CVE-2010-0221 State: PUBLISHED Published: 2010-01-07T19:00:00 Last Updated: 2024-08-07T00:45:10.630Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kingston DataTraveler BlackBox (DTBB), DataTraveler Secure Privacy Edition (DTSP), and DataTraveler Elite Privacy Edition (DTEP) USB flash drives validate passwords with a program running on the host computer rather than the device hardware, which allows physically proximate attackers to access the cleartext drive contents via a modified program. Additional Analyst Notes: - CVE Program Container: References: - http://www.kingston.com/driveupdate/ - http://www.syss.de/index.php?id=108&tx_ttnews%5Btt_news%5D=528&cHash=8d16fa63d9
- http://www.kingston.com/driveupdate/ - http://www.syss.de/index.php?id=108&tx_ttnews%5Btt_news%5D=528&cHash=8d16fa63d9 - http://securitytracker.com/id?1023410 - http://it.slashdot.org/story/10/01/05/1734242/ - http://news.zdnet.co.uk/security/0%2C1000000189%2C39963327%2C00.htm - http://www.h-online.com/security/news/item/NIST-certified-USB-Flash-drives-with-hardware-encryption-cracked-895308.html - http://blogs.zdnet.com/hardware/?p=6655 - https://exchange.xforce.ibmcloud.com/vulnerabilities/55477 - http://www.syss.de/fileadmin/ressources/040_veroeffentlichungen/dokumente/SySS_knackt_Kingston_USB-Stick.pdf - http://www.vupen.com/english/advisories/2010/0080 - https://www.ironkey.com/usb-fl
/SySS_knackt_Kingston_USB-Stick.pdf - http://www.vupen.com/english/advisories/2010/0080 - https://www.ironkey.com/usb-flash-drive-flaw-exposed
CVE ID: CVE-2010-0222 State: PUBLISHED Published: 2010-01-07T19:00:00 Last Updated: 2024-08-07T00:45:10.665Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kingston DataTraveler BlackBox (DTBB), DataTraveler Secure Privacy Edition (DTSP), and DataTraveler Elite Privacy Edition (DTEP) USB flash drives use a fixed 256-bit key for obtaining access to the cleartext drive contents, which makes it easier for physically proximate attackers to read or modify data by determining and providing this key. Additional Analyst Notes: - CVE Program Container: References: - http://www.kingston.com/driveupdate/ - http://www.syss.de/index.php?id=108&tx_ttnews%5Btt_news%5D=528&cHash=8d16fa63d9 - htt
://www.kingston.com/driveupdate/ - http://www.syss.de/index.php?id=108&tx_ttnews%5Btt_news%5D=528&cHash=8d16fa63d9 - http://it.slashdot.org/story/10/01/05/1734242/ - http://news.zdnet.co.uk/security/0%2C1000000189%2C39963327%2C00.htm - http://www.h-online.com/security/news/item/NIST-certified-USB-Flash-drives-with-hardware-encryption-cracked-895308.html - http://blogs.zdnet.com/hardware/?p=6655 - http://www.syss.de/fileadmin/ressources/040_veroeffentlichungen/dokumente/SySS_knackt_Kingston_USB-Stick.pdf - http://www.vupen.com/english/advisories/2010/0080 - https://www.ironkey.com/usb-flash-drive-flaw-exposed
CVE ID: CVE-2010-0223 State: PUBLISHED Published: 2010-01-07T19:00:00 Last Updated: 2024-08-07T00:45:11.056Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kingston DataTraveler BlackBox (DTBB), DataTraveler Secure Privacy Edition (DTSP), and DataTraveler Elite Privacy Edition (DTEP) USB flash drives do not prevent password replay attacks, which allows physically proximate attackers to access the cleartext drive contents by providing a key that was captured in a USB data stream at an earlier time. Additional Analyst Notes: - CVE Program Container: References: - http://www.kingston.com/driveupdate/ - http://www.syss.de/index.php?id=108&tx_ttnews%5Btt_news%5D=528&cHash=8d16fa63d9 -
http://www.kingston.com/driveupdate/ - http://www.syss.de/index.php?id=108&tx_ttnews%5Btt_news%5D=528&cHash=8d16fa63d9 - http://www.syss.de/fileadmin/ressources/040_veroeffentlichungen/dokumente/SySS_knackt_Kingston_USB-Stick.pdf - http://www.vupen.com/english/advisories/2010/0080 - https://www.ironkey.com/usb-flash-drive-flaw-exposed
CVE ID: CVE-2010-0224 State: PUBLISHED Published: 2010-01-07T19:00:00 Last Updated: 2024-08-07T00:45:11.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: SanDisk Cruzer Enterprise USB flash drives validate passwords with a program running on the host computer rather than the device hardware, which allows physically proximate attackers to access the cleartext drive contents via a modified program. Additional Analyst Notes: - CVE Program Container: References: - http://www.syss.de/index.php?id=108&tx_ttnews%5Btt_news%5D=528&cHash=8d16fa63d9 - http://securitytracker.com/id?1023408 - http://www.sandisk.com/business-solutions/enterprise/technical-support/security-bulletin-december-2
ker.com/id?1023408 - http://www.sandisk.com/business-solutions/enterprise/technical-support/security-bulletin-december-2009 - http://it.slashdot.org/story/10/01/05/1734242/ - http://www.h-online.com/security/news/item/NIST-certified-USB-Flash-drives-with-hardware-encryption-cracked-895308.html - http://blogs.zdnet.com/hardware/?p=6655 - http://www.syss.de/fileadmin/ressources/040_veroeffentlichungen/dokumente/SySS_knackt_SanDisk_USB-Stick.pdf - http://www.vupen.com/english/advisories/2010/0078 - http://www.securityfocus.com/bid/37677 - https://exchange.xforce.ibmcloud.com/vulnerabilities/55475 - https://www.ironkey.com/usb-flash-drive-flaw-exposed
CVE ID: CVE-2010-0225 State: PUBLISHED Published: 2010-01-07T19:00:00 Last Updated: 2024-08-07T00:45:11.236Z Vendors: n/a Products: n/a Problem Types: n/a Description: SanDisk Cruzer Enterprise USB flash drives use a fixed 256-bit key for obtaining access to the cleartext drive contents, which makes it easier for physically proximate attackers to read or modify data by determining and providing this key. Additional Analyst Notes: - CVE Program Container: References: - http://www.syss.de/index.php?id=108&tx_ttnews%5Btt_news%5D=528&cHash=8d16fa63d9 - http://www.sandisk.com/business-solutions/enterprise/technical-support/security-bulletin-december-2009 - http://it.slashdot.org/story/10/01/05/17
siness-solutions/enterprise/technical-support/security-bulletin-december-2009 - http://it.slashdot.org/story/10/01/05/1734242/ - http://www.h-online.com/security/news/item/NIST-certified-USB-Flash-drives-with-hardware-encryption-cracked-895308.html - http://blogs.zdnet.com/hardware/?p=6655 - http://www.syss.de/fileadmin/ressources/040_veroeffentlichungen/dokumente/SySS_knackt_SanDisk_USB-Stick.pdf - http://www.vupen.com/english/advisories/2010/0078 - http://www.securityfocus.com/bid/37677 - https://www.ironkey.com/usb-flash-drive-flaw-exposed
CVE ID: CVE-2010-0226 State: PUBLISHED Published: 2010-01-07T19:00:00 Last Updated: 2024-08-07T00:45:11.156Z Vendors: n/a Products: n/a Problem Types: n/a Description: SanDisk Cruzer Enterprise USB flash drives do not prevent password replay attacks, which allows physically proximate attackers to access the cleartext drive contents by providing a key that was captured in a USB data stream at an earlier time. Additional Analyst Notes: - CVE Program Container: References: - http://www.syss.de/index.php?id=108&tx_ttnews%5Btt_news%5D=528&cHash=8d16fa63d9 - http://www.sandisk.com/business-solutions/enterprise/technical-support/security-bulletin-december-2009 - http://www.syss.de/fileadmin/ressour
m/business-solutions/enterprise/technical-support/security-bulletin-december-2009 - http://www.syss.de/fileadmin/ressources/040_veroeffentlichungen/dokumente/SySS_knackt_SanDisk_USB-Stick.pdf - http://www.vupen.com/english/advisories/2010/0078 - http://www.securityfocus.com/bid/37677 - https://www.ironkey.com/usb-flash-drive-flaw-exposed
CVE ID: CVE-2010-0227 State: PUBLISHED Published: 2010-01-07T19:00:00Z Last Updated: 2024-09-16T16:53:29.208Z Vendors: n/a Products: n/a Problem Types: n/a Description: Verbatim Corporate Secure and Corporate Secure FIPS Edition USB flash drives validate passwords with a program running on the host computer rather than the device hardware, which allows physically proximate attackers to access the cleartext drive contents via a modified program. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1023409 - http://it.slashdot.org/story/10/01/05/1734242/ - http://www.h-online.com/security/news/item/NIST-certified-USB-Flash-drives-with-hardware-encrypti
ry/10/01/05/1734242/ - http://www.h-online.com/security/news/item/NIST-certified-USB-Flash-drives-with-hardware-encryption-cracked-895308.html - http://www.verbatim.com/security/security-update.cfm - http://blogs.zdnet.com/hardware/?p=6655 - https://www.ironkey.com/usb-flash-drive-flaw-exposed
CVE ID: CVE-2010-0228 State: PUBLISHED Published: 2010-01-07T19:00:00Z Last Updated: 2024-09-16T16:33:40.607Z Vendors: n/a Products: n/a Problem Types: n/a Description: Verbatim Corporate Secure and Corporate Secure FIPS Edition USB flash drives use a fixed 256-bit key for obtaining access to the cleartext drive contents, which makes it easier for physically proximate attackers to read or modify data by determining and providing this key. Additional Analyst Notes: - CVE Program Container: References: - http://it.slashdot.org/story/10/01/05/1734242/ - http://www.h-online.com/security/news/item/NIST-certified-USB-Flash-drives-with-hardware-encryption-cracked-895308.html - http://www.verbatim.c
/security/news/item/NIST-certified-USB-Flash-drives-with-hardware-encryption-cracked-895308.html - http://www.verbatim.com/security/security-update.cfm - http://blogs.zdnet.com/hardware/?p=6655 - https://www.ironkey.com/usb-flash-drive-flaw-exposed
CVE ID: CVE-2010-0229 State: PUBLISHED Published: 2010-01-07T19:00:00Z Last Updated: 2024-09-16T18:08:04.665Z Vendors: n/a Products: n/a Problem Types: n/a Description: Verbatim Corporate Secure and Corporate Secure FIPS Edition USB flash drives do not prevent password replay attacks, which allows physically proximate attackers to access the cleartext drive contents by providing a key that was captured in a USB data stream at an earlier time. Additional Analyst Notes: - CVE Program Container: References: - http://www.verbatim.com/security/security-update.cfm - https://www.ironkey.com/usb-flash-drive-flaw-exposed
CVE ID: CVE-2010-0230 State: PUBLISHED Published: 2010-01-22T21:00:00 Last Updated: 2024-08-07T00:45:11.782Z Vendors: n/a Products: n/a Problem Types: n/a Description: SUSE Linux Enterprise 10 SP3 (SLE10-SP3) and openSUSE 11.2 configures postfix to listen on all network interfaces, which might allow remote attackers to bypass intended access restrictions. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00007.html - http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00004.html
CVE ID: CVE-2010-0231 State: PUBLISHED Published: 2010-02-10T18:00:00 Last Updated: 2024-08-07T00:45:11.121Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SMB implementation in the Server service in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not use a sufficient source of entropy, which allows remote attackers to obtain access to files and other SMB resources via a large number of authentication requests, related to server-generated challenges, certain "duplicate values," and spoofing of an authentication token, aka "SMB NTLM Authentication Lack of En
challenges, certain "duplicate values," and spoofing of an authentication token, aka "SMB NTLM Authentication Lack of Entropy Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7751 - http://www.us-cert.gov/cas/techalerts/TA10-040A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-012
CVE ID: CVE-2010-0232 State: PUBLISHED Published: 2010-01-21T19:00:00.000Z Last Updated: 2025-10-22T00:05:53.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel in Microsoft Windows NT 3.1 through Windows 7, including Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, and Windows Server 2008 Gold and SP2, when access to 16-bit applications is enabled on a 32-bit x86 platform, does not properly validate certain BIOS calls, which allows local users to gain privileges by crafting a VDM_TIB data structure in the Thread Environment Block (TEB), and then calling the NtVdmControl function to start the Windows Virtual DOS Machi
in the Thread Environment Block (TEB), and then calling the NtVdmControl function to start the Windows Virtual DOS Machine (aka NTVDM) subsystem, leading to improperly handled exceptions involving the #GP trap handler (nt!KiTrap0D), aka "Windows Kernel Exception Handler Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://lists.immunitysec.com/pipermail/dailydave/2010-January/006000.html - http://lock.cmpxchg8b.com/c0af0967d904cef2ad4db766a00bc6af/KiTrap0D.zip - http://blogs.technet.com/msrc/archive/2010/01/20/security-advisory-979682-released.aspx - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-015 -
rity-advisory-979682-released.aspx - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-015 - http://www.microsoft.com/technet/security/advisory/979682.mspx - http://www.us-cert.gov/cas/techalerts/TA10-040A.html - http://securitytracker.com/id?1023471 - http://seclists.org/fulldisclosure/2010/Jan/341 - http://www.vupen.com/english/advisories/2010/0179 - http://www.securityfocus.com/bid/37864 - http://secunia.com/advisories/38265 - http://www.securityfocus.com/archive/1/509106/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/55742 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8344
CVE ID: CVE-2010-0233 State: PUBLISHED Published: 2010-02-10T18:00:00 Last Updated: 2024-08-07T00:45:11.910Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows local users to gain privileges via a crafted application, aka "Windows Kernel Double Free Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-015 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8392 - http://www.us-cer
10-015 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8392 - http://www.us-cert.gov/cas/techalerts/TA10-040A.html
CVE ID: CVE-2010-0234 State: PUBLISHED Published: 2010-04-14T15:44:00 Last Updated: 2024-08-07T00:45:11.346Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 does not properly validate a registry-key argument to an unspecified system call, which allows local users to cause a denial of service (reboot) via a crafted application, aka "Windows Kernel Null Pointer Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39374 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval
: - http://secunia.com/advisories/39374 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6814 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-021 - http://www.us-cert.gov/cas/techalerts/TA10-103A.html - http://secunia.com/advisories/39373 - http://www.securitytracker.com/id?1023850