Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
- http://secunia.com/advisories/38832 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10673 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11225 - http://support.avaya.com/css/P8/documents/100071808 - http://secunia.com/advisories/38794 - http://lists.vmware.com/pipermail/security-announce/2010/000082.html - https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00809.html - https://bugzilla.redhat.com/show_bug.cgi?id=531213 - http://secunia.com/advisories/38764 - http://support.ntp.org/bin/view/Main/SecurityNotice#DoS_attack_from_certain_NTP_mode - http://www.kb.cert.org/vuls/id/MAPG-7X7V6J - https://oval.cisecurity.org
curityNotice#DoS_attack_from_certain_NTP_mode - http://www.kb.cert.org/vuls/id/MAPG-7X7V6J - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19376 - http://www.securityfocus.com/bid/37255 - http://marc.info/?l=bugtraq&m=136482797910018&w=2 - http://secunia.com/advisories/39593 - http://www-01.ibm.com/support/docview.wss?uid=isg1IZ71047 - http://www.vupen.com/english/advisories/2010/0993 - http://www.debian.org/security/2009/dsa-1948 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=560074 - http://aix.software.ibm.com/aix/efixes/security/xntpd_advisory.asc - http://marc.info/?l=bugtraq&m=130168580504508&w=2 - http://sunsolve.sun.com/search/document.do?
ity/xntpd_advisory.asc - http://marc.info/?l=bugtraq&m=130168580504508&w=2 - http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021781.1-1 - http://www-01.ibm.com/support/docview.wss?uid=isg1IZ68659 - http://marc.info/?l=bugtraq&m=130168580504508&w=2 - https://support.ntp.org/bugs/show_bug.cgi?id=1331 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7076 - http://secunia.com/advisories/37922 - ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2010-005.txt.asc - http://secunia.com/advisories/38834 - https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00763.html - http://security-tracker.debian.org/tracker/CVE-2009-
.com/archives/fedora-package-announce/2009-December/msg00763.html - http://security-tracker.debian.org/tracker/CVE-2009-3563 - http://securitytracker.com/id?1023298 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12141 - https://rhn.redhat.com/errata/RHSA-2009-1651.html - http://secunia.com/advisories/37629 - https://rhn.redhat.com/errata/RHSA-2010-0095.html - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10691 - http://marc.info/?l=bugtraq&m=136482797910018&w=2 - https://lists.ntp.org/pipermail/announce/2009-December/000086.html - http://www.vupen.com/english/advisories/2010/0510 - https://rhn.redhat.com/errata/RHSA-2009-1648.html - http:
086.html - http://www.vupen.com/english/advisories/2010/0510 - https://rhn.redhat.com/errata/RHSA-2009-1648.html - http://www.kb.cert.org/vuls/id/MAPG-7X7VD7 - http://www.vupen.com/english/advisories/2010/0528 - https://www.kb.cert.org/vuls/id/417980
CVE ID: CVE-2009-3564 State: PUBLISHED Published: 2009-10-06T17:22:00 Last Updated: 2024-08-07T06:31:10.575Z Vendors: n/a Products: n/a Problem Types: n/a Description: puppetmasterd in puppet 0.24.6 does not reset supplementary groups when it switches to a different user, which might allow local users to access restricted files. Additional Analyst Notes: - CVE Program Container: References: - https://puppet.com/security/cve/cve-2009-3564 - http://projects.reductivelabs.com/issues/1806 - https://bugzilla.redhat.com/show_bug.cgi?id=475201
CVE ID: CVE-2009-3565 State: PUBLISHED Published: 2009-11-13T15:00:00 Last Updated: 2024-08-07T06:31:10.485Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in intruvert/jsp/module/Login.jsp in McAfee IntruShield Network Security Manager (NSM) before 5.1.11.6 allow remote attackers to inject arbitrary web script or HTML via the (1) iaction or (2) node parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1023171 - http://www.vupen.com/english/advisories/2009/3226 - http://kc.mcafee.com/corporate/index?page=content&id=SB10004 - http://www.securityfocus.com/bid/37003 - https://exc
26 - http://kc.mcafee.com/corporate/index?page=content&id=SB10004 - http://www.securityfocus.com/bid/37003 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54250 - http://secunia.com/advisories/37178 - http://www.securityfocus.com/archive/1/507820/100/0/threaded - http://www.secureworks.com/ctu/advisories/SWRX-2009-001 - http://www.osvdb.org/59911
CVE ID: CVE-2009-3566 State: PUBLISHED Published: 2009-11-13T15:00:00 Last Updated: 2024-08-07T06:31:10.476Z Vendors: n/a Products: n/a Problem Types: n/a Description: McAfee IntruShield Network Security Manager (NSM) before 5.1.11.8.1 does not include the HTTPOnly flag in the Set-Cookie header for the session identifier, which allows remote attackers to hijack a session by leveraging a cross-site scripting (XSS) vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10005 - http://www.vupen.com/english/advisories/2009/3226 - http://securitytracker.com/id?1023172 - http://www.securityfocus.com/bid/37004 - https:
m/english/advisories/2009/3226 - http://securitytracker.com/id?1023172 - http://www.securityfocus.com/bid/37004 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54251 - http://www.osvdb.org/59912 - http://www.securityfocus.com/archive/1/507822/100/0/threaded - http://secunia.com/advisories/37178 - http://www.secureworks.com/ctu/advisories/SWRX-2009-002
CVE ID: CVE-2009-3567 State: PUBLISHED Published: 2009-10-06T20:19:00 Last Updated: 2024-08-07T06:31:10.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in modules/tickets/functions_ticketsui.php in Kayako SupportSuite and eSupport 3.60.04 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in the staff control panel, a different vector than CVE-2007-1145. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36807 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53558 - http://osvdb.org/58516 - http://blog.kayako.com/2009/09/security-bulletin-
e.xforce.ibmcloud.com/vulnerabilities/53558 - http://osvdb.org/58516 - http://blog.kayako.com/2009/09/security-bulletin-supportsuite-and-esupport/ - http://www.securityfocus.com/bid/36568
CVE ID: CVE-2009-3568 State: PUBLISHED Published: 2009-10-06T20:19:00Z Last Updated: 2024-09-16T22:46:46.541Z Vendors: n/a Products: n/a Problem Types: n/a Description: Comment RSS 5.x before 5.x-2.2 and 6.x before 6.x-2.2, a module for Drupal, does not properly enforce permissions when a link is added to the RSS feed, which allows remote attackers to obtain the node title and possibly other sensitive content by reading the feed. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/579292 - http://secunia.com/advisories/36787 - http://drupal.org/node/579280 - http://www.securityfocus.com/bid/36429 - http://www.osvdb.org/58177 - http://drupal.org/node/579290
CVE ID: CVE-2009-3569 State: PUBLISHED Published: 2009-10-06T20:19:00 Last Updated: 2024-08-07T06:31:10.454Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in OpenOffice.org (OOo) allows remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.8, aka "Client-side stack overflow exploit." NOTE: as of 20091005, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityf
identifier for tracking purposes. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36285 - http://www.securitytracker.com/id?1022832 - http://secunia.com/advisories/35036 - http://intevydis.com/vd-list.shtml
CVE ID: CVE-2009-3570 State: PUBLISHED Published: 2009-10-06T20:19:00 Last Updated: 2024-08-07T06:31:10.433Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in OpenOffice.org (OOo) has unspecified impact and remote attack vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.9. NOTE: as of 20091005, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36285 - http://secunia.com/advisories/35036 - http://www
ogram Container: References: - http://www.securityfocus.com/bid/36285 - http://secunia.com/advisories/35036 - http://www.securitytracker.com/id?1022828 - http://intevydis.com/vd-list.shtml
CVE ID: CVE-2009-3571 State: PUBLISHED Published: 2009-10-06T20:19:00 Last Updated: 2024-08-07T06:31:10.630Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in OpenOffice.org (OOo) has unknown impact and client-side attack vector, as demonstrated by a certain module in VulnDisco Pack Professional 8.8, aka "Client-side exploit." NOTE: as of 20091005, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36285 - http://www.securitytr
nal Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36285 - http://www.securitytracker.com/id?1022832 - http://secunia.com/advisories/35036 - http://intevydis.com/vd-list.shtml
CVE ID: CVE-2009-3572 State: PUBLISHED Published: 2009-10-06T20:19:00Z Last Updated: 2024-09-17T03:38:01.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenBSD 4.4, 4.5, and 4.6, when running on an i386 kernel, does not properly handle XMM exceptions, which allows local users to cause a denial of service (kernel panic) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.openbsd.org/errata45.html - http://www.openbsd.org/errata46.html - http://www.openbsd.org/errata44.html - http://www.securityfocus.com/bid/36589 - http://secunia.com/advisories/36956 - http://marc.info/?l=openbsd-security-announce&m=125474331811594
CVE ID: CVE-2009-3573 State: PUBLISHED Published: 2009-10-06T20:19:00 Last Updated: 2024-08-07T06:31:10.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple insecure method vulnerabilities in the PDIControl.PDI.1 ActiveX control (PDIControl.dll) 2.2.3160.0 in EMC Captiva PixTools Distributed Imaging 2.2 allow remote attackers to create or overwrite arbitrary files via the (1) SetLogFileName and (2) WriteToLog methods. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/2808 - http://www.shinnai.net/xplits/TXT_17zVMhRhsRE6qC6DAj52.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/53555 - http://www.securit
t/xplits/TXT_17zVMhRhsRE6qC6DAj52.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/53555 - http://www.securityfocus.com/bid/36566 - http://secunia.com/advisories/36896
CVE ID: CVE-2009-3574 State: PUBLISHED Published: 2009-10-06T20:19:00 Last Updated: 2024-08-07T06:31:10.474Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tuniac 090517c allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long File1 argument in a .pls playlist file, possibly a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9671
CVE ID: CVE-2009-3575 State: PUBLISHED Published: 2009-10-07T17:00:00 Last Updated: 2024-08-07T06:31:10.575Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in DHTRoutingTableDeserializer.cc in aria2 0.15.3, 1.2.0, and other versions allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36332 - http://secunia.com/advisories/37971 - http://www.debian.org/security/2009/dsa-1957 - https://qa.mandriva.com/show_bug.cgi?id=52840 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:226
CVE ID: CVE-2009-3576 State: PUBLISHED Published: 2009-11-24T17:00:00 Last Updated: 2024-08-07T06:31:10.651Z Vendors: n/a Products: n/a Problem Types: n/a Description: Autodesk Softimage 7.x and Softimage XSI 6.x allow remote attackers to execute arbitrary JavaScript code via a scene package containing a Scene Table of Contents (aka .scntoc) file with a Script_Content element, as demonstrated by code that loads the WScript.Shell ActiveX control. Additional Analyst Notes: - CVE Program Container: References: - http://www.coresecurity.com/content/softimage-arbitrary-command-execution - http://www.securityfocus.com/archive/1/508011/100/0/threaded - http://securitytracker.com/id?1023229 - http:/
xecution - http://www.securityfocus.com/archive/1/508011/100/0/threaded - http://securitytracker.com/id?1023229 - http://www.securityfocus.com/bid/36637
CVE ID: CVE-2009-3577 State: PUBLISHED Published: 2009-11-24T17:00:00 Last Updated: 2024-08-07T06:31:10.678Z Vendors: n/a Products: n/a Problem Types: n/a Description: Autodesk 3D Studio Max (3DSMax) 6 through 9 and 2008 through 2010 allows remote attackers to execute arbitrary code via a .max file with a MAXScript statement that calls the DOSCommand method, related to "application callbacks." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/508012/100/0/threaded - http://securitytracker.com/id?1023230 - http://www.coresecurity.com/content/3dsmax-arbitrary-command-execution - http://www.securityfocus.com/bid/36634
CVE ID: CVE-2009-3578 State: PUBLISHED Published: 2009-11-24T17:00:00 Last Updated: 2024-08-07T06:31:10.634Z Vendors: n/a Products: n/a Problem Types: n/a Description: Autodesk Maya 8.0, 8.5, 2008, 2009, and 2010 and Alias Wavefront Maya 6.5 and 7.0 allow remote attackers to execute arbitrary code via a (1) .ma or (2) .mb file that uses the Maya Embedded Language (MEL) python command or unspecified other MEL commands, related to "Script Nodes." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36636 - http://www.coresecurity.com/content/maya-arbitrary-command-execution - http://securitytracker.com/id?1023228 - http://www.securityfocus.com/archi
om/content/maya-arbitrary-command-execution - http://securitytracker.com/id?1023228 - http://www.securityfocus.com/archive/1/508013/100/0/threaded
CVE ID: CVE-2009-3579 State: PUBLISHED Published: 2009-10-07T17:00:00 Last Updated: 2024-08-07T06:31:10.632Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the CookieDump.java sample application in Mort Bay Jetty 6.1.19 and 6.1.20 allows remote attackers to inject arbitrary web script or HTML via the Value parameter in a GET request to cookie/. Additional Analyst Notes: - CVE Program Container: References: - http://www.coresecurity.com/content/jetty-persistent-xss - http://www.securityfocus.com/archive/1/507013/100/0/threaded - http://www.ush.it/team/ush/hack-jetty6x7x/jetty-adv.txt
CVE ID: CVE-2009-3580 State: PUBLISHED Published: 2009-12-23T18:00:00 Last Updated: 2024-08-07T06:31:10.630Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in am.pl in SQL-Ledger 2.8.24 allows remote attackers to hijack the authentication of arbitrary users for requests that change a password via the login, new_password, and confirm_password parameters in a preferences action. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/54964 - http://www.securityfocus.com/archive/1/508559/100/0/threaded - http://secunia.com/advisories/37877
CVE ID: CVE-2009-3581 State: PUBLISHED Published: 2009-12-23T18:00:00 Last Updated: 2024-08-07T06:31:10.622Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in SQL-Ledger 2.8.24 allow remote authenticated users to inject arbitrary web script or HTML via (1) the DCN Description field in the Accounts Receivables menu item for Add Transaction, (2) the Description field in the Accounts Payable menu item for Add Transaction, or the name field in (3) the Customers menu item for Add Customer or (4) the Vendor menu item for Add Vendor. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/v
for Add Vendor. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/54965 - http://www.securityfocus.com/archive/1/508559/100/0/threaded - http://secunia.com/advisories/37877 - http://www.securityfocus.com/bid/37431
CVE ID: CVE-2009-3582 State: PUBLISHED Published: 2009-12-23T18:00:00 Last Updated: 2024-08-07T06:31:10.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the delete subroutine in SQL-Ledger 2.8.24 allow remote authenticated users to execute arbitrary SQL commands via the (1) id and possibly (2) db parameters in a Delete action to the output of a Vendors>Reports>Search search operation. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/508559/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/54966 - http://secunia.com/advisories/37877 - http://www.securityfocus.com
/exchange.xforce.ibmcloud.com/vulnerabilities/54966 - http://secunia.com/advisories/37877 - http://www.securityfocus.com/bid/37431
CVE ID: CVE-2009-3583 State: PUBLISHED Published: 2009-12-23T18:00:00 Last Updated: 2024-08-07T06:31:10.652Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Preferences menu item in SQL-Ledger 2.8.24 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the countrycode field. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/54967 - http://www.securityfocus.com/archive/1/508559/100/0/threaded - http://secunia.com/advisories/37877 - http://www.securityfocus.com/bid/37431
CVE ID: CVE-2009-3584 State: PUBLISHED Published: 2009-12-23T18:00:00 Last Updated: 2024-08-07T06:31:10.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL-Ledger 2.8.24 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/508559/100/0/threaded - http://secunia.com/advisories/37877 - http://www.securityfocus.com/bid/37431 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54968
CVE ID: CVE-2009-3585 State: PUBLISHED Published: 2009-12-02T16:00:00 Last Updated: 2024-08-07T06:31:10.609Z Vendors: n/a Products: n/a Problem Types: n/a Description: Session fixation vulnerability in html/Elements/SetupSessionCookie in Best Practical Solutions RT 3.0.0 through 3.6.9 and 3.8.x through 3.8.5 allows remote attackers to hijack web sessions by setting the session identifier via a manipulation that leverages a second web server within the same domain. Additional Analyst Notes: - CVE Program Container: References: - http://lists.bestpractical.com/pipermail/rt-announce/2009-November/000177.html - https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00761.html -
nounce/2009-November/000177.html - https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00761.html - http://bestpractical.typepad.com/files/rt-3.6.2-3.6.3-session_fixation.v3.patch - http://secunia.com/advisories/37546 - http://bestpractical.typepad.com/files/rt-3.6.4-3.6.9-session_fixation.v2.patch - https://exchange.xforce.ibmcloud.com/vulnerabilities/54472 - http://lists.bestpractical.com/pipermail/rt-announce/2009-November/000176.html - https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00794.html - http://bestpractical.typepad.com/files/rt-3.0.0-session_fixation.v3.patch - http://bestpractical.typepad.com/files/rt-3.0.1-3.0.6-session_fixation.v3
com/files/rt-3.0.0-session_fixation.v3.patch - http://bestpractical.typepad.com/files/rt-3.0.1-3.0.6-session_fixation.v3.patch - http://secunia.com/advisories/37728 - http://bestpractical.typepad.com/files/rt-3.0.7-3.6.1-session_fixation.v3.patch - https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00832.html - http://blog.bestpractical.com/2009/11/session-fixation-vulnerability.html - http://bestpractical.typepad.com/files/rt-3.8-session_fixation.patch - http://www.securityfocus.com/bid/37162
CVE ID: CVE-2009-3586 State: PUBLISHED Published: 2009-12-08T18:00:00 Last Updated: 2024-08-07T06:31:10.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one error in src/http.c in CoreHTTP 0.5.3.1 and earlier allows remote attackers to cause a denial of service or possibly execute arbitrary code via an HTTP request with a long first line that triggers a buffer overflow. NOTE: this vulnerability reportedly exists because of an incorrect fix for CVE-2007-4060. Additional Analyst Notes: - CVE Program Container: References: - http://census-labs.com/media/corex.txt - http://www.securityfocus.com/archive/1/508272/100/0/threaded - http://census-labs.com/news/2009/12/02/corehtt
orex.txt - http://www.securityfocus.com/archive/1/508272/100/0/threaded - http://census-labs.com/news/2009/12/02/corehttp-web-server/
CVE ID: CVE-2009-3587 State: PUBLISHED Published: 2009-10-13T10:00:00 Last Updated: 2024-08-07T06:31:10.544Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.1 through r8.1; Anti-Virus 2007 (v8) through 2009; eTrust EZ Antivirus r7.1; Internet Security Suite 2007 (v3) through Plus 2009; and other CA products allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted RAR archive file that triggers heap corruption, a different vulnerability than CVE-2009-3588. Additional Analyst Notes: - CVE Program Co
that triggers heap corruption, a different vulnerability than CVE-2009-3588. Additional Analyst Notes: - CVE Program Container: References: - http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=218878 - http://osvdb.org/58691 - http://secunia.com/advisories/36976 - http://www.securitytracker.com/id?1022999 - http://www.vupen.com/english/advisories/2009/2852 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53697 - http://www.securityfocus.com/archive/1/507068/100/0/threaded - http://www.securityfocus.com/bid/36653
CVE ID: CVE-2009-3588 State: PUBLISHED Published: 2009-10-13T10:00:00 Last Updated: 2024-08-07T06:31:10.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.1 through r8.1; Anti-Virus 2007 (v8) through 2009; eTrust EZ Antivirus r7.1; Internet Security Suite 2007 (v3) through Plus 2009; and other CA products allows remote attackers to cause a denial of service via a crafted RAR archive file that triggers stack corruption, a different vulnerability than CVE-2009-3587. Additional Analyst Notes: - CVE Program Container: References: - https://exch