Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
009/May/msg00002.html - http://secunia.com/advisories/35065 - http://www.redhat.com/support/errata/RHSA-2009-0480.html - http://www.securityfocus.com/bid/34568 - http://www.securityfocus.com/archive/1/502750/100/0/threaded - http://www.vupen.com/english/advisories/2010/1040 - http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html - http://rhn.redhat.com/errata/RHSA-2009-0458.html - https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html - http://secunia.com/advisories/34991 - http://wiki.rpath.com/Advisories:rPSA-2009-0059 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:101 - http://www.mandriva.com/security/advisories?name=MDVSA-2010
//www.mandriva.com/security/advisories?name=MDVSA-2009:101 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:087 - http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html - http://www.us-cert.gov/cas/techalerts/TA09-133A.html - http://secunia.com/advisories/35685 - http://secunia.com/advisories/34756 - http://secunia.com/advisories/34291 - http://secunia.com/advisories/34755 - http://www.vupen.com/english/advisories/2009/1297 - http://www.securityfocus.com/archive/1/502761/100/0/threaded - http://secunia.com/advisories/34852 - http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html - https://www.redhat.com/archives/fedora-package-announce/200
nsuse.org/opensuse-security-announce/2009-07/msg00002.html - https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html - https://bugzilla.redhat.com/show_bug.cgi?id=490614 - http://secunia.com/advisories/34959 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9941 - http://www.redhat.com/support/errata/RHSA-2009-0429.html - http://www.securitytracker.com/id?1022073
CVE ID: CVE-2009-0148 State: PUBLISHED Published: 2009-05-05T17:00:00 Last Updated: 2024-08-07T04:24:17.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in Cscope before 15.7a allow remote attackers to execute arbitrary code via long strings in input such as (1) source-code tokens and (2) pathnames, related to integer overflows in some cases. NOTE: this issue exists because of an incomplete fix for CVE-2004-2541. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2009/05/06/9 - http://secunia.com/advisories/35462 - http://support.apple.com/kb/HT3549 - http://www.redhat.com/support/errata/RHSA-20
http://secunia.com/advisories/35462 - http://support.apple.com/kb/HT3549 - http://www.redhat.com/support/errata/RHSA-2009-1101.html - http://sourceforge.net/mailarchive/forum.php?thread_name=E1LsGx3-00015K-TN%40ddv4jf1.ch3.sourceforge.com&forum_name=cscope-cvs - http://secunia.com/advisories/35074 - http://lists.apple.com/archives/security-announce/2009/May/msg00002.html - http://www.vupen.com/english/advisories/2009/1238 - http://secunia.com/advisories/35214 - http://www.redhat.com/support/errata/RHSA-2009-1102.html - http://security.gentoo.org/glsa/glsa-200905-02.xml - http://www.us-cert.gov/cas/techalerts/TA09-133A.html - http://secunia.com/advisories/35213 - http://www.vupen.com/english
ttp://www.us-cert.gov/cas/techalerts/TA09-133A.html - http://secunia.com/advisories/35213 - http://www.vupen.com/english/advisories/2009/1297 - http://www.securityfocus.com/bid/34805 - http://sourceforge.net/forum/forum.php?forum_id=947983 - http://www.securitytracker.com/id?1022218 - http://www.debian.org/security/2009/dsa-1806 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9633 - http://secunia.com/advisories/34978 - http://sourceforge.net/project/shownotes.php?group_id=4664&release_id=679527 - https://bugzilla.redhat.com/show_bug.cgi?id=490667
CVE ID: CVE-2009-0149 State: PUBLISHED Published: 2009-05-13T15:14:00 Last Updated: 2024-08-07T04:24:18.055Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 allows local users to gain privileges or cause a denial of service (application crash) by attempting to mount a crafted sparse disk image that triggers memory corruption. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT3549 - http://www.securityfocus.com/bid/34942 - http://secunia.com/advisories/35074 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50484 - http://lists.apple.com/archives/security-announce/2009/May/msg00002.html
ge.xforce.ibmcloud.com/vulnerabilities/50484 - http://lists.apple.com/archives/security-announce/2009/May/msg00002.html - http://www.securityfocus.com/bid/34926 - http://www.us-cert.gov/cas/techalerts/TA09-133A.html - http://www.vupen.com/english/advisories/2009/1297 - http://www.securitytracker.com/id?1022217
CVE ID: CVE-2009-0150 State: PUBLISHED Published: 2009-05-13T15:14:00 Last Updated: 2024-08-07T04:24:17.632Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Apple Mac OS X 10.5 before 10.5.7 allows local users to gain privileges or cause a denial of service (application crash) by attempting to mount a crafted sparse disk image. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT3549 - http://secunia.com/advisories/35074 - http://lists.apple.com/archives/security-announce/2009/May/msg00002.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/50483 - http://www.securityfocus.com/bid/34926 - http://www.
html - https://exchange.xforce.ibmcloud.com/vulnerabilities/50483 - http://www.securityfocus.com/bid/34926 - http://www.us-cert.gov/cas/techalerts/TA09-133A.html - http://www.vupen.com/english/advisories/2009/1297 - http://www.securitytracker.com/id?1022217
CVE ID: CVE-2009-0151 State: PUBLISHED Published: 2009-08-06T15:00:00 Last Updated: 2024-08-07T04:24:17.586Z Vendors: n/a Products: n/a Problem Types: n/a Description: The screen saver in Dock in Apple Mac OS X 10.5 before 10.5.8 does not prevent four-finger Multi-Touch gestures, which allows physically proximate attackers to bypass locking and "manage applications or use Expose" via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT3757 - http://osvdb.org/56847 - http://secunia.com/advisories/36096 - http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html - http://www.securityfocus.com/bid/35954 - https://exc
lists.apple.com/archives/security-announce/2009/Aug/msg00001.html - http://www.securityfocus.com/bid/35954 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52421 - http://www.vupen.com/english/advisories/2009/2172 - http://www.us-cert.gov/cas/techalerts/TA09-218A.html
CVE ID: CVE-2009-0152 State: PUBLISHED Published: 2009-05-13T15:14:00 Last Updated: 2024-08-07T04:24:17.761Z Vendors: n/a Products: n/a Problem Types: n/a Description: iChat in Apple Mac OS X 10.5 before 10.5.7 disables SSL for AOL Instant Messenger (AIM) communication in certain circumstances that are inconsistent with the Require SSL setting, which allows remote attackers to obtain sensitive information by sniffing the network. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT3549 - http://secunia.com/advisories/35074 - http://lists.apple.com/archives/security-announce/2009/May/msg00002.html - https://exchange.xforce.ibmcloud.com/vulnerabilitie
/lists.apple.com/archives/security-announce/2009/May/msg00002.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/50487 - http://www.securityfocus.com/bid/34926 - http://www.securitytracker.com/id?1022212 - http://www.us-cert.gov/cas/techalerts/TA09-133A.html - http://www.vupen.com/english/advisories/2009/1297
CVE ID: CVE-2009-0153 State: PUBLISHED Published: 2009-05-13T15:14:00 Last Updated: 2024-08-07T04:24:17.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: International Components for Unicode (ICU) 4.0, 3.6, and other 3.x versions, as used in Apple Mac OS X 10.5 before 10.5.7, iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Fedora 9 and 10, and possibly other operating systems, does not properly handle invalid byte sequences during Unicode conversion, which might allow remote attackers to conduct cross-site scripting (XSS) attacks. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT3639 - http://www.vupen.com/e
tional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT3639 - http://www.vupen.com/english/advisories/2009/1621 - http://support.apple.com/kb/HT3549 - http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html - http://www.redhat.com/support/errata/RHSA-2009-1122.html - http://secunia.com/advisories/35074 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50488 - http://www.vupen.com/english/advisories/2009/1522 - http://www.securityfocus.com/bid/34974 - http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html - http://lists.apple.com/archives/security-announce/2009/May/msg00002.html - http://bugs.icu-project.org/trac/tick
.html - http://lists.apple.com/archives/security-announce/2009/May/msg00002.html - http://bugs.icu-project.org/trac/ticket/5691 - https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00336.html - http://secunia.com/advisories/35379 - http://www.securityfocus.com/bid/34926 - http://secunia.com/advisories/35498 - http://www.us-cert.gov/cas/techalerts/TA09-133A.html - http://secunia.com/advisories/35584 - http://www.vupen.com/english/advisories/2009/1297 - https://bugzilla.redhat.com/show_bug.cgi?id=503071 - http://secunia.com/advisories/35436 - http://support.apple.com/kb/HT3613 - https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00478.html - https://oval.cis
apple.com/kb/HT3613 - https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00478.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11366
CVE ID: CVE-2009-0154 State: PUBLISHED Published: 2009-05-13T15:14:00 Last Updated: 2024-08-07T04:24:17.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Apple Type Services (ATS) in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 allows remote attackers to execute arbitrary code via a crafted Compact Font Format (CFF) font. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT3549 - http://secunia.com/advisories/35074 - http://lists.apple.com/archives/security-announce/2009/May/msg00002.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/50478 - http://www.securityfocus.com/bid/34926 - http://www.zer
l - https://exchange.xforce.ibmcloud.com/vulnerabilities/50478 - http://www.securityfocus.com/bid/34926 - http://www.zerodayinitiative.com/advisories/ZDI-09-023 - http://www.us-cert.gov/cas/techalerts/TA09-133A.html - http://www.vupen.com/english/advisories/2009/1297 - http://www.securitytracker.com/id?1022218 - http://www.securityfocus.com/archive/1/503597/100/0/threaded
CVE ID: CVE-2009-0155 State: PUBLISHED Published: 2009-05-13T15:14:00 Last Updated: 2024-08-07T04:24:18.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer underflow in CoreGraphics in Apple Mac OS X 10.5 before 10.5.7, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF file that triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT3639 - http://www.vupen.com/english/advisories/2009/1621 - http://support.apple.com/kb/HT3549 - http://secunia.com/advisori
9 - http://www.vupen.com/english/advisories/2009/1621 - http://support.apple.com/kb/HT3549 - http://secunia.com/advisories/35074 - http://www.securitytracker.com/id?1022209 - http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html - http://lists.apple.com/archives/security-announce/2009/May/msg00002.html - http://www.securityfocus.com/bid/34926 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50482 - http://www.us-cert.gov/cas/techalerts/TA09-133A.html - http://www.vupen.com/english/advisories/2009/1297
CVE ID: CVE-2009-0156 State: PUBLISHED Published: 2009-05-13T15:14:00 Last Updated: 2024-08-07T04:24:18.134Z Vendors: n/a Products: n/a Problem Types: n/a Description: Launch Services in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 allows remote attackers to cause a denial of service (persistent Finder crash) via a crafted Mach-O executable that triggers an out-of-bounds memory read. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT3549 - http://secunia.com/advisories/35074 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50490 - http://lists.apple.com/archives/security-announce/2009/May/msg00002.html - http://www.securityfocus.com/bid/349
/50490 - http://lists.apple.com/archives/security-announce/2009/May/msg00002.html - http://www.securityfocus.com/bid/34932 - http://www.securityfocus.com/bid/34926 - http://www.us-cert.gov/cas/techalerts/TA09-133A.html - http://www.securitytracker.com/id?1022215 - http://www.vupen.com/english/advisories/2009/1297
CVE ID: CVE-2009-0157 State: PUBLISHED Published: 2009-05-13T15:14:00 Last Updated: 2024-08-07T04:24:17.803Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in CFNetwork in Apple Mac OS X 10.5 before 10.5.7 allows remote web servers to execute arbitrary code or cause a denial of service (application crash) via long HTTP headers. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/50480 - http://support.apple.com/kb/HT3549 - http://secunia.com/advisories/35074 - http://lists.apple.com/archives/security-announce/2009/May/msg00002.html - http://www.securityfocus.com/bid/34926 - http://www.us-
ts.apple.com/archives/security-announce/2009/May/msg00002.html - http://www.securityfocus.com/bid/34926 - http://www.us-cert.gov/cas/techalerts/TA09-133A.html - http://www.vupen.com/english/advisories/2009/1297 - http://www.securitytracker.com/id?1022211
CVE ID: CVE-2009-0158 State: PUBLISHED Published: 2009-05-13T15:14:00 Last Updated: 2024-08-07T04:24:17.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in telnet in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a long hostname for a telnet server. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT3549 - http://secunia.com/advisories/35074 - http://lists.apple.com/archives/security-announce/2009/May/msg00002.html - http://marc.info/?l=bugtraq&m=136482797910018&w=2 - http://www.securityfocus.com/bid/34926
unce/2009/May/msg00002.html - http://marc.info/?l=bugtraq&m=136482797910018&w=2 - http://www.securityfocus.com/bid/34926 - http://www.us-cert.gov/cas/techalerts/TA09-133A.html - http://www.vupen.com/english/advisories/2009/1297 - http://marc.info/?l=bugtraq&m=136482797910018&w=2
CVE ID: CVE-2009-0159 State: PUBLISHED Published: 2009-04-14T15:00:00 Last Updated: 2024-08-07T04:24:18.219Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the cookedprint function in ntpq/ntpq.c in ntpq in NTP before 4.2.4p7-RC2 allows remote NTP servers to execute arbitrary code via a crafted response. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/777-1/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9634 - http://secunia.com/advisories/35137 - http://secunia.com/advisories/34608 - http://secunia.com/advisories/35166 - https://bugzilla.redhat.com/show_bug.cgi?id=49
tp://secunia.com/advisories/34608 - http://secunia.com/advisories/35166 - https://bugzilla.redhat.com/show_bug.cgi?id=490617 - http://support.apple.com/kb/HT3549 - http://secunia.com/advisories/37471 - http://www.debian.org/security/2009/dsa-1801 - https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01449.html - http://secunia.com/advisories/35308 - http://bugs.pardus.org.tr/show_bug.cgi?id=9532 - http://secunia.com/advisories/35253 - http://www.vmware.com/security/advisories/VMSA-2009-0016.html - http://secunia.com/advisories/35074 - http://www.securityfocus.com/bid/34481 - http://secunia.com/advisories/35138 - http://lists.apple.com/archives/security-announce/2009/May/msg00
s.com/bid/34481 - http://secunia.com/advisories/35138 - http://lists.apple.com/archives/security-announce/2009/May/msg00002.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8386 - http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.566238 - http://marc.info/?l=bugtraq&m=136482797910018&w=2 - https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01414.html - http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19392 - http://secunia.com/advisories/35630 - http://www.securityfocus.com/arch
definition/oval%3Aorg.mitre.oval%3Adef%3A19392 - http://secunia.com/advisories/35630 - http://www.securityfocus.com/archive/1/507985/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/49838 - http://osvdb.org/53593 - http://www.securitytracker.com/id?1022033 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8665 - http://www.us-cert.gov/cas/techalerts/TA09-133A.html - https://rhn.redhat.com/errata/RHSA-2009-1651.html - http://www.vupen.com/english/advisories/2009/1297 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5411 - http://rhn.redhat.com/errata/RHSA-2009-1040.html - http://www.mandriva.co
efinition/oval%3Aorg.mitre.oval%3Adef%3A5411 - http://rhn.redhat.com/errata/RHSA-2009-1040.html - http://www.mandriva.com/security/advisories?name=MDVSA-2009:092 - http://secunia.com/advisories/35416 - https://support.ntp.org/bugs/show_bug.cgi?id=1144 - http://marc.info/?l=bugtraq&m=136482797910018&w=2 - http://secunia.com/advisories/35336 - ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-006.txt.asc - http://rhn.redhat.com/errata/RHSA-2009-1039.html - http://secunia.com/advisories/35169 - http://www.gentoo.org/security/en/glsa/glsa-200905-08.xml - http://www.vupen.com/english/advisories/2009/0999 - http://www.vupen.com/english/advisories/2009/3316 - http://ntp.bkbits.net:8
www.vupen.com/english/advisories/2009/0999 - http://www.vupen.com/english/advisories/2009/3316 - http://ntp.bkbits.net:8080/ntp-stable/?PAGE=gnupatch&REV=1.1565
CVE ID: CVE-2009-0160 State: PUBLISHED Published: 2009-05-13T15:14:00 Last Updated: 2024-08-07T04:24:17.720Z Vendors: n/a Products: n/a Problem Types: n/a Description: QuickDraw Manager in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PICT image that triggers memory corruption. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT3549 - http://www.securityfocus.com/bid/34937 - http://secunia.com/advisories/35074 - http://www.securitytracker.com/id?1022209 - http://lists.apple.com/archives/security-announce/2009/May/msg00002.html - http://w
www.securitytracker.com/id?1022209 - http://lists.apple.com/archives/security-announce/2009/May/msg00002.html - http://www.securityfocus.com/bid/34926 - http://www.us-cert.gov/cas/techalerts/TA09-133A.html - http://www.vupen.com/english/advisories/2009/1297
CVE ID: CVE-2009-0161 State: PUBLISHED Published: 2009-05-13T15:14:00 Last Updated: 2024-08-07T04:24:18.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: The OpenSSL::OCSP module for Ruby in Apple Mac OS X 10.5 before 10.5.7 misinterprets an unspecified invalid response as a successful OCSP certificate validation, which might allow remote attackers to spoof certificate authentication via a revoked certificate. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT3549 - http://secunia.com/advisories/35074 - http://lists.apple.com/archives/security-announce/2009/May/msg00002.html - http://www.securityfocus.com/bid/34926 - http://www.us-ce
.apple.com/archives/security-announce/2009/May/msg00002.html - http://www.securityfocus.com/bid/34926 - http://www.us-cert.gov/cas/techalerts/TA09-133A.html - http://www.vupen.com/english/advisories/2009/1297 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50592
CVE ID: CVE-2009-0162 State: PUBLISHED Published: 2009-05-13T15:14:00 Last Updated: 2024-08-07T04:24:18.157Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Safari before 3.2.3, and 4 Public Beta, on Apple Mac OS X 10.5 before 10.5.7 and Windows allows remote attackers to inject arbitrary web script or HTML via a crafted feed: URL. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT3549 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50476 - http://www.vupen.com/english/advisories/2009/1298 - http://secunia.com/advisories/35074 - http://lists.apple.com/archives/security-announce/2009/May
/advisories/2009/1298 - http://secunia.com/advisories/35074 - http://lists.apple.com/archives/security-announce/2009/May/msg00002.html - http://secunia.com/advisories/35056 - http://lists.apple.com/archives/security-announce/2009/May/msg00000.html - http://lists.apple.com/archives/security-announce/2009/May/msg00001.html - http://www.securityfocus.com/bid/34925 - http://www.us-cert.gov/cas/techalerts/TA09-133A.html - http://www.vupen.com/english/advisories/2009/1297 - http://support.apple.com/kb/HT3550 - http://www.securitytracker.com/id?1022206
CVE ID: CVE-2009-0163 State: PUBLISHED Published: 2009-04-23T17:00:00 Last Updated: 2024-08-07T04:24:17.776Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the TIFF image decoding routines in CUPS 1.3.9 and earlier allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via a crafted TIFF image, which is not properly handled by the (1) _cupsImageReadTIFF function in the imagetops filter and (2) imagetoraster filter, leading to a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-200904-20.xml - http://www.cups.org/articles.php?L582 - h
Container: References: - http://security.gentoo.org/glsa/glsa-200904-20.xml - http://www.cups.org/articles.php?L582 - http://www.ubuntu.com/usn/usn-760-1 - http://secunia.com/advisories/34481 - http://www.redhat.com/support/errata/RHSA-2009-0428.html - http://www.securityfocus.com/bid/34571 - http://wiki.rpath.com/Advisories:rPSA-2009-0061 - http://secunia.com/advisories/34747 - http://www.securityfocus.com/archive/1/502750/100/0/threaded - http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11546 - http://www.securitytracker.com/id?1022070 - http://secunia.com/advisories/34756 -
oval%3Aorg.mitre.oval%3Adef%3A11546 - http://www.securitytracker.com/id?1022070 - http://secunia.com/advisories/34756 - http://secunia.com/advisories/34852 - http://www.cups.org/str.php?L3031 - https://bugzilla.redhat.com/show_bug.cgi?id=490596 - http://secunia.com/advisories/34722 - http://www.debian.org/security/2009/dsa-1773 - http://www.redhat.com/support/errata/RHSA-2009-0429.html