Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-1038 State: PUBLISHED Published: 2009-03-20T18:00:00 Last Updated: 2024-08-07T04:57:17.501Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in YAP Blog 1.1.1 allow remote attackers to execute arbitrary SQL commands via the (1) image_id parameter to comments.php, and remote authenticated administrators to execute arbitrary SQL commands via the (2) user parameter in a modif action to admin/index.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8217 - http://osvdb.org/52762 - http://osvdb.org/52761 - http://www.securityfocus.com/bid/34274
CVE ID: CVE-2009-1039 State: PUBLISHED Published: 2009-03-20T18:00:00 Last Updated: 2024-08-07T04:57:17.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in CDex 1.70b2 allows remote attackers to execute arbitrary code via a crafted Info header in an Ogg Vorbis (.ogg) file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34164 - https://www.exploit-db.com/exploits/8231 - http://retrogod.altervista.org/9sg_cdex_ogg.html - http://www.securityfocus.com/archive/1/501928/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/49304 - http://osvdb.org/52812
CVE ID: CVE-2009-1040 State: PUBLISHED Published: 2009-03-20T18:00:00 Last Updated: 2024-08-07T04:57:17.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in WinAsm Studio 5.1.5.0 allows user-assisted remote attackers to execute arbitrary code via a crafted project (.wap) file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/49266 - http://www.securityfocus.com/bid/34132 - https://www.exploit-db.com/exploits/8224 - http://osvdb.org/52776 - http://secunia.com/advisories/34309
CVE ID: CVE-2009-1041 State: PUBLISHED Published: 2009-03-24T19:00:00 Last Updated: 2024-08-07T04:57:17.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ktimer feature (sys/kern/kern_time.c) in FreeBSD 7.0, 7.1, and 7.2 allows local users to overwrite arbitrary kernel memory via an out-of-bounds timer value. Additional Analyst Notes: - CVE Program Container: References: - http://security.freebsd.org/advisories/FreeBSD-SA-09:06.ktimer.asc - https://www.exploit-db.com/exploits/8261 - http://www.securitytracker.com/id?1021882 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49362 - http://www.securityfocus.com/bid/34196
CVE ID: CVE-2009-1042 State: PUBLISHED Published: 2009-03-23T14:00:00 Last Updated: 2024-08-07T04:57:17.568Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Apple Safari on Mac OS X 10.5.6 allows remote attackers to execute arbitrary code via unknown vectors triggered by clicking on a link, as demonstrated by Nils during a PWN2OWN competition at CanSecWest 2009. Additional Analyst Notes: - CVE Program Container: References: - http://dvlabs.tippingpoint.com/blog/2009/03/18/pwn2own-2009-day-1---safari-internet-explorer-and-firefox-taken-down-by-four-zero-day-exploits - https://exchange.xforce.ibmcloud.com/vulnerabilities/49388 - http://www.securityfocus.
-down-by-four-zero-day-exploits - https://exchange.xforce.ibmcloud.com/vulnerabilities/49388 - http://www.securityfocus.com/bid/34183 - http://cansecwest.com/index.html - http://osvdb.org/52888 - http://www.securitytracker.com/id?1021879 - http://twitter.com/tippingpoint1/status/1351485521 - http://news.cnet.com/8301-1009_3-10199652-83.html - http://blogs.zdnet.com/security/?p=2934 - http://www.h-online.com/security/Pwn2Own-2009-Safari-IE-8-and-Firefox-exploited--/news/112889 - http://dvlabs.tippingpoint.com/blog/2009/02/25/pwn2own-2009
CVE ID: CVE-2009-1043 State: PUBLISHED Published: 2009-03-23T14:00:00 Last Updated: 2024-08-07T04:57:17.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Microsoft Internet Explorer 8 on Windows 7 allows remote attackers to execute arbitrary code via unknown vectors triggered by clicking on a link, as demonstrated by Nils during a PWN2OWN competition at CanSecWest 2009. Additional Analyst Notes: - CVE Program Container: References: - http://dvlabs.tippingpoint.com/blog/2009/03/18/pwn2own-2009-day-1---safari-internet-explorer-and-firefox-taken-down-by-four-zero-day-exploits - http://www.securitytracker.com/id?1021880 - http://dvlabs.tippingpoint.com/
refox-taken-down-by-four-zero-day-exploits - http://www.securitytracker.com/id?1021880 - http://dvlabs.tippingpoint.com/blog/2009/03/20/pwn2own-day-2 - http://cansecwest.com/index.html - http://www.securityfocus.com/bid/34182 - http://news.cnet.com/8301-1009_3-10199652-83.html - http://blogs.zdnet.com/security/?p=2934 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49389 - http://www.h-online.com/security/Pwn2Own-2009-Safari-IE-8-and-Firefox-exploited--/news/112889 - http://dvlabs.tippingpoint.com/blog/2009/02/25/pwn2own-2009 - http://osvdb.org/52892
CVE ID: CVE-2009-1044 State: PUBLISHED Published: 2009-03-23T14:00:00 Last Updated: 2024-08-07T04:57:17.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox 3.0.7 on Windows 7 allows remote attackers to execute arbitrary code via unknown vectors related to the _moveToEdgeShift XUL tree method, which triggers garbage collection on objects that are still in use, as demonstrated by Nils during a PWN2OWN competition at CanSecWest 2009. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1021878 - http://dvlabs.tippingpoint.com/blog/2009/03/18/pwn2own-2009-day-1---safari-internet-explorer-and-firefox-taken-down-by-four-zero
vlabs.tippingpoint.com/blog/2009/03/18/pwn2own-2009-day-1---safari-internet-explorer-and-firefox-taken-down-by-four-zero-day-exploits - http://twitter.com/tippingpoint1/status/1351635812 - http://secunia.com/advisories/34510 - https://www.redhat.com/archives/fedora-package-announce/2009-March/msg01077.html - http://secunia.com/advisories/34511 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:084 - http://www.redhat.com/support/errata/RHSA-2009-0397.html - http://cansecwest.com/index.html - http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00008.html - http://secunia.com/advisories/34505 - http://secunia.com/advisories/34521 - http://www.redhat.com/support/errata/RH
ml - http://secunia.com/advisories/34505 - http://secunia.com/advisories/34521 - http://www.redhat.com/support/errata/RHSA-2009-0398.html - http://www.securityfocus.com/archive/1/502303/100/0/threaded - http://secunia.com/advisories/34471 - http://www.mozilla.org/security/announce/2009/mfsa2009-13.html - http://www.ubuntu.com/usn/usn-745-1 - http://secunia.com/advisories/34527 - http://www.securityfocus.com/bid/34181 - http://www.debian.org/security/2009/dsa-1756 - http://secunia.com/advisories/34792 - http://news.cnet.com/8301-1009_3-10199652-83.html - http://blogs.zdnet.com/security/?p=2934 - http://www.zerodayinitiative.com/advisories/ZDI-09-015 - https://oval.cisecurity.org/repository/se
om/security/?p=2934 - http://www.zerodayinitiative.com/advisories/ZDI-09-015 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11368 - http://osvdb.org/52896 - http://www.vupen.com/english/advisories/2009/0864 - https://www.redhat.com/archives/fedora-package-announce/2009-March/msg01040.html - http://www.h-online.com/security/Pwn2Own-2009-Safari-IE-8-and-Firefox-exploited--/news/112889 - http://secunia.com/advisories/34549 - http://secunia.com/advisories/34550 - http://support.avaya.com/elmodocs2/security/ASA-2009-113.htm - http://dvlabs.tippingpoint.com/blog/2009/02/25/pwn2own-2009 - https://www.redhat.com/archives/fedora-package-announce/2009-March/ms
bs.tippingpoint.com/blog/2009/02/25/pwn2own-2009 - https://www.redhat.com/archives/fedora-package-announce/2009-March/msg01023.html - https://bugzilla.mozilla.org/show_bug.cgi?id=484320 - http://blogs.zdnet.com/security/?p=2941
CVE ID: CVE-2009-1045 State: PUBLISHED Published: 2009-03-23T16:00:00 Last Updated: 2024-08-07T04:57:17.506Z Vendors: n/a Products: n/a Problem Types: n/a Description: requests/status.xml in VLC 0.9.8a allows remote attackers to cause a denial of service (stack consumption and crash) via a long input argument in an in_play action. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/49249 - https://www.exploit-db.com/exploits/8213 - http://bugs.gentoo.org/show_bug.cgi?id=262708 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14357 - http://www.openwall.com/lists/oss-security/2009/03/17/4
pository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14357 - http://www.openwall.com/lists/oss-security/2009/03/17/4 - http://www.securityfocus.com/bid/34126
CVE ID: CVE-2009-1046 State: PUBLISHED Published: 2009-03-23T16:00:00 Last Updated: 2024-08-07T04:57:17.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: The console selection feature in the Linux kernel 2.6.28 before 2.6.28.4, 2.6.25, and possibly earlier versions, when the UTF-8 console is used, allows physically proximate attackers to cause a denial of service (memory corruption) by selecting a small number of 3-byte UTF-8 characters, which triggers an "off-by-two memory error." NOTE: it is not clear whether this issue crosses privilege boundaries. Additional Analyst Notes: - CVE Program Container: References: - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.4
al Analyst Notes: - CVE Program Container: References: - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.4 - http://www.openwall.com/lists/oss-security/2009/02/12/9 - http://www.openwall.com/lists/oss-security/2009/02/12/10 - http://www.securityfocus.com/bid/33672 - http://www.ubuntu.com/usn/usn-751-1 - http://lists.openwall.net/linux-kernel/2009/02/02/364 - http://secunia.com/advisories/34981 - http://www.debian.org/security/2009/dsa-1800 - http://www.openwall.com/lists/oss-security/2009/02/12/11 - http://secunia.com/advisories/34917 - http://www.debian.org/security/2009/dsa-1787 - http://www.redhat.com/support/errata/RHSA-2009-0451.html - http://lists.openwall.net/linux-kernel
curity/2009/dsa-1787 - http://www.redhat.com/support/errata/RHSA-2009-0451.html - http://lists.openwall.net/linux-kernel/2009/01/30/333 - http://secunia.com/advisories/35121
CVE ID: CVE-2009-1047 State: PUBLISHED Published: 2009-03-23T19:26:00 Last Updated: 2024-08-07T04:57:17.526Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Send by e-mail module in the "Printer, e-mail and PDF versions" module 5.x before 5.x-4.4 and 6.x before 6.x-1.4, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via vectors involving outbound HTML e-mail. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/52852 - http://drupal.org/node/406516
CVE ID: CVE-2009-1048 State: PUBLISHED Published: 2009-08-14T15:00:00 Last Updated: 2024-08-07T04:57:17.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web interface on the snom VoIP phones snom 300, snom 320, snom 360, snom 370, and snom 820 with firmware 6.5 before 6.5.20, 7.1 before 7.1.39, and 7.3 before 7.3.14 allows remote attackers to bypass authentication, and reconfigure the phone or make arbitrary use of the phone, via a (1) http or (2) https request with 127.0.0.1 in the Host header. Additional Analyst Notes: - CVE Program Container: References: - http://www.csnc.ch/misc/files/advisories/cve-2009-1048.txt - http://secunia.com/advisories/36293 - http://www.secur
s: - http://www.csnc.ch/misc/files/advisories/cve-2009-1048.txt - http://secunia.com/advisories/36293 - http://www.securityfocus.com/archive/1/505723/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/52424
CVE ID: CVE-2009-1049 State: PUBLISHED Published: 2009-03-24T14:00:00 Last Updated: 2024-08-07T04:57:17.577Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in articleCall.php in Bloginator 1A allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8244 - http://secunia.com/advisories/34395 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49325 - http://www.securityfocus.com/bid/34187 - https://www.exploit-db.com/exploits/8243 - http://osvdb.org/52839
CVE ID: CVE-2009-1050 State: PUBLISHED Published: 2009-03-24T14:00:00 Last Updated: 2024-08-07T04:57:17.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bloginator 1A allows remote attackers to bypass authentication and gain administrative access by setting the identifyYourself cookie. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/52838 - http://secunia.com/advisories/34395 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49324 - http://www.securityfocus.com/bid/34187 - https://www.exploit-db.com/exploits/8243
CVE ID: CVE-2009-1051 State: PUBLISHED Published: 2009-03-24T14:00:00 Last Updated: 2024-08-07T04:57:17.566Z Vendors: n/a Products: n/a Problem Types: n/a Description: FubarForum 1.6 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing user credentials via a direct request for user.tsv. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/501902/100/0/threaded - http://secunia.com/advisories/34358 - http://e-rdc.org/v1/news.php?readmore=131
CVE ID: CVE-2009-1052 State: PUBLISHED Published: 2009-03-24T14:00:00 Last Updated: 2024-08-07T04:57:17.541Z Vendors: n/a Products: n/a Problem Types: n/a Description: FireAnt 1.3 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing user credentials via a direct request for user.tsv. Additional Analyst Notes: - CVE Program Container: References: - http://e-rdc.org/v1/news.php?readmore=130 - http://secunia.com/advisories/34359 - http://www.securityfocus.com/archive/1/501905/100/0/threaded
CVE ID: CVE-2009-1053 State: PUBLISHED Published: 2009-03-24T14:00:00 Last Updated: 2024-08-07T04:57:17.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: chaozzDB 1.2 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing user credentials via a direct request for user.tsv. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/501901/100/0/threaded - http://e-rdc.org/v1/news.php?readmore=129
CVE ID: CVE-2009-1054 State: PUBLISHED Published: 2009-03-24T14:00:00 Last Updated: 2024-08-07T04:57:17.535Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in JustSystems Ichitaro 13, 2004 through 2008, Lite2, and Ichitaro viewer 5.1.5.0 and earlier allows remote attackers to execute arbitrary code via a crafted file, as exploited in the wild by Trojan.Tarodrop.H in March 2009. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34138 - http://www.symantec.com/business/security_response/writeup.jsp?docid=2009-031608-2424-99 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49280 - http://www.vupen.com/en
eup.jsp?docid=2009-031608-2424-99 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49280 - http://www.vupen.com/english/advisories/2009/0769 - http://www.justsystems.com/jp/info/js09001.html - http://secunia.com/advisories/34405
CVE ID: CVE-2009-1055 State: PUBLISHED Published: 2009-03-24T14:00:00 Last Updated: 2024-08-07T04:57:17.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the web service in Sitecore CMS 5.3.1 rev. 071114 allows remote authenticated users to gain access to security databases, and obtain administrative and user credentials, via unknown vectors related to SOAP and XML requests. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/501929/100/0/threaded - http://www.vupen.com/english/advisories/2009/0753 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49298 - http://www.securityfocus.com/bid/34162
visories/2009/0753 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49298 - http://www.securityfocus.com/bid/34162 - http://sdn5.sitecore.net/Products/Sitecore%20V5/Sitecore%20CMS%205%2C-d-%2C3/ReleaseNotes/V5%2C-d-%2C3%2C-d-%2C2/ChangeLog.aspx - http://secunia.com/advisories/34356
CVE ID: CVE-2009-1056 State: PUBLISHED Published: 2009-03-24T14:00:00 Last Updated: 2024-08-07T04:57:17.713Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Rational AppScan Enterprise before 5.5 FP1 allows remote attackers to read arbitrary exported reports by "forcefully browsing." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/34349 - http://www.securitytracker.com/id?1021863 - http://osvdb.org/52764 - http://www-01.ibm.com/support/docview.wss?uid=swg1PK79991 - http://www.securityfocus.com/bid/34163 - http://www.vupen.com/english/advisories/2009/0768
CVE ID: CVE-2009-1057 State: PUBLISHED Published: 2009-03-24T14:00:00 Last Updated: 2024-08-07T04:57:17.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: MicroSmarts Enterprise ZipItFast! 3.0 allows remote attackers to execute arbitrary code via a crafted .zip file that triggers memory corruption, related to a "format string buffer overflow." NOTE: CVE has not investigated whether the specified file.zip file can be used for exploitation of this product. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/52550 - http://secunia.com/advisories/34223 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49491 - https://www.exploit-db.com/exploits/818
/advisories/34223 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49491 - https://www.exploit-db.com/exploits/8180
CVE ID: CVE-2009-1058 State: PUBLISHED Published: 2009-03-24T14:00:00 Last Updated: 2024-08-07T04:57:17.555Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in ZipGenius might allow remote attackers to execute arbitrary code via a crafted .zip file that triggers an SEH overwrite. NOTE: it is possible that this overlaps CVE-2005-3317. NOTE: CVE has not investigated whether the specified file.zip file can be used for exploitation of this product. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/49490 - https://www.exploit-db.com/exploits/8180
CVE ID: CVE-2009-1059 State: PUBLISHED Published: 2009-03-24T14:00:00 Last Updated: 2024-08-07T04:57:17.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Trident PowerZip 7.2 might allow remote attackers to execute arbitrary code via a crafted .zip file. NOTE: CVE has not investigated whether the specified file.zip file can be used for exploitation of this product. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8180 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49492
CVE ID: CVE-2009-1060 State: PUBLISHED Published: 2009-03-24T14:00:00 Last Updated: 2024-08-07T04:57:17.534Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Apple Safari on Mac OS X 10.5.6 allows remote attackers to execute arbitrary code via unknown vectors triggered by clicking on a link, as demonstrated by Charlie Miller during a PWN2OWN competition at CanSecWest 2009. Additional Analyst Notes: - CVE Program Container: References: - http://dvlabs.tippingpoint.com/blog/2009/03/18/pwn2own-2009-day-1---safari-internet-explorer-and-firefox-taken-down-by-four-zero-day-exploits - http://cansecwest.com/index.html - http://www.securityfocus.com/bid/34179 -
efox-taken-down-by-four-zero-day-exploits - http://cansecwest.com/index.html - http://www.securityfocus.com/bid/34179 - http://osvdb.org/52888 - http://www.securitytracker.com/id?1021879 - http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9129978 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49463 - http://news.cnet.com/8301-1009_3-10199652-83.html - http://dvlabs.tippingpoint.com/blog/2009/02/25/pwn2own-2009
CVE ID: CVE-2009-1061 State: PUBLISHED Published: 2009-03-25T01:00:00 Last Updated: 2024-08-07T04:57:17.533Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Adobe Acrobat Reader 9 before 9.1, 8 before 8.1.4, and 7 before 7.1.1 might allow remote attackers to execute arbitrary code via unknown attack vectors related to JBIG2 and "input validation," a different vulnerability than CVE-2009-0193 and CVE-2009-1062. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/34790 - http://www.adobe.com/support/security/bulletins/apsb09-04.html - http://www.securityfocus.com/bid/34229 - http://secunia.com/advisories/34490 -
pport/security/bulletins/apsb09-04.html - http://www.securityfocus.com/bid/34229 - http://secunia.com/advisories/34490 - http://www.securitytracker.com/id?1021892 - http://www.redhat.com/support/errata/RHSA-2009-0376.html - http://secunia.com/advisories/34392 - http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00005.html - http://secunia.com/advisories/34706 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-256788-1 - http://security.gentoo.org/glsa/glsa-200904-17.xml - http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html - http://www.vupen.com/english/advisories/2009/1019
CVE ID: CVE-2009-1062 State: PUBLISHED Published: 2009-03-25T01:00:00 Last Updated: 2024-08-07T04:57:17.666Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Acrobat Reader 9 before 9.1, 8 before 8.1.4, and 7 before 7.1.1 might allow remote attackers to trigger memory corruption and possibly execute arbitrary code via unknown attack vectors related to JBIG2, a different vulnerability than CVE-2009-0193 and CVE-2009-1061. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/34790 - http://www.adobe.com/support/security/bulletins/apsb09-04.html - http://www.securityfocus.com/bid/34229 - http://secunia.com/advisories/34490 - http://www.s
y/bulletins/apsb09-04.html - http://www.securityfocus.com/bid/34229 - http://secunia.com/advisories/34490 - http://www.securitytracker.com/id?1021892 - http://www.redhat.com/support/errata/RHSA-2009-0376.html - http://secunia.com/advisories/34392 - http://www.ivizsecurity.com/security-advisory-iviz-sr-09001.html - http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00005.html - http://secunia.com/advisories/34706 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-256788-1 - http://security.gentoo.org/glsa/glsa-200904-17.xml - http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html - http://www.vupen.com/english/advisories/2009/1019
CVE ID: CVE-2009-1063 State: PUBLISHED Published: 2009-03-24T19:00:00 Last Updated: 2024-08-07T04:57:17.713Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in eXeScope 6.50 allows user-assisted remote attackers to execute arbitrary code via a crafted executable (.exe) file. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/52868 - http://www.vupen.com/english/advisories/2009/0821 - http://secunia.com/advisories/34413 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49379 - http://www.securityfocus.com/bid/34219 - https://www.exploit-db.com/exploits/8270