Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-0797 State: PUBLISHED Published: 2010-03-02T20:00:00Z Last Updated: 2024-09-16T17:34:15.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the T3BLOG extension 0.6.2 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/38030 - http://secunia.com/advisories/38388 - http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-002/ - http://typo3.org/extensions/repository/view/t3blog/0.8.0/
CVE ID: CVE-2010-0798 State: PUBLISHED Published: 2010-03-02T20:00:00Z Last Updated: 2024-09-16T18:48:34.766Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the T3BLOG extension 0.6.2 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/38030 - http://secunia.com/advisories/38388 - http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-002/ - http://typo3.org/extensions/repository/view/t3blog/0.8.0/
CVE ID: CVE-2010-0799 State: PUBLISHED Published: 2010-03-02T20:00:00 Last Updated: 2024-08-07T00:59:39.084Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in misc/tell_a_friend/tell.php in phpunity.newsmanager allows remote attackers to read arbitrary files via a .. (dot dot) in the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/11290 - http://secunia.com/advisories/38409 - http://packetstormsecurity.org/1001-exploits/phpunity-lfi.txt - http://osvdb.org/62036
CVE ID: CVE-2010-0800 State: PUBLISHED Published: 2010-03-02T20:00:00 Last Updated: 2024-08-07T00:59:39.087Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Ossolution Team Documents Seller (aka DMS) (com_dms) component 2.5.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the category_id parameter in a view_category action to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/56006 - http://www.securityfocus.com/bid/38017 - http://www.exploit-db.com/exploits/11289 - http://www.securityfocus.com/bid/38024 - http://secunia.com/advisories/38410 -
ttp://www.exploit-db.com/exploits/11289 - http://www.securityfocus.com/bid/38024 - http://secunia.com/advisories/38410 - http://osvdb.org/62040
CVE ID: CVE-2010-0801 State: PUBLISHED Published: 2010-03-02T20:00:00Z Last Updated: 2024-09-16T18:33:54.872Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the AutartiTarot (com_autartitarot) component 1.0.3 for Joomla! allows remote authenticated users, with "Public Back-end" group permissions, to read arbitrary files via directory traversal sequences in the controller parameter in an edit task to administrator/index.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/38034 - http://osvdb.org/62041 - http://secunia.com/ad
Program Container: References: - http://www.securityfocus.com/bid/38034 - http://osvdb.org/62041 - http://secunia.com/advisories/38434 - http://packetstormsecurity.org/1001-exploits/joomlaautartitarot-traversal.txt
CVE ID: CVE-2010-0802 State: PUBLISHED Published: 2010-03-02T20:00:00 Last Updated: 2024-08-07T00:59:39.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in (nv2) Awards 1.1.0, a modification for Invision Power Board, allows remote attackers to execute arbitrary SQL commands via the id parameter in a view action. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38407 - http://www.exploit-db.com/exploits/11297 - http://packetstormsecurity.org/1001-exploits/ipbawards-sql.txt
CVE ID: CVE-2010-0803 State: PUBLISHED Published: 2010-03-02T20:00:00 Last Updated: 2024-08-07T00:59:39.234Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the jVideoDirect (com_jvideodirect) component 1.1 RC3b for Joomla! allows remote attackers to execute arbitrary SQL commands via the v parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/11280 - http://osvdb.org/62042 - http://packetstormsecurity.org/1001-exploits/joomlajvideodirect-sql.txt - http://www.securityfocus.com/bid/37990 - https://exchange.xforce.ibmcloud.com/vulnerabilities/55957 - http://secunia.com/advisories/384
rityfocus.com/bid/37990 - https://exchange.xforce.ibmcloud.com/vulnerabilities/55957 - http://secunia.com/advisories/38436
CVE ID: CVE-2010-0804 State: PUBLISHED Published: 2010-03-02T20:00:00 Last Updated: 2024-08-07T00:59:39.246Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in iBoutique 4.0 allows remote attackers to inject arbitrary web script or HTML via the key parameter in a products action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/509126/100/0/threaded - http://packetstormsecurity.org/1001-exploits/iboutique-xss.txt - http://secunia.com/advisories/31871
CVE ID: CVE-2010-0805 State: PUBLISHED Published: 2010-03-31T19:00:00 Last Updated: 2024-08-07T00:59:39.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Tabular Data Control (TDC) ActiveX control in Microsoft Internet Explorer 5.01 SP4, 6 on Windows XP SP2 and SP3, and 6 SP1 allows remote attackers to execute arbitrary code via a long URL (DataURL parameter) that triggers memory corruption in the CTDCCtl::SecurityCHeckDataURL function, aka "Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/39025 - http://www.us-cert.gov/cas/techalerts/TA10-089A.html - http://www.securityfocus.com/archive/1/51
tyfocus.com/bid/39025 - http://www.us-cert.gov/cas/techalerts/TA10-089A.html - http://www.securityfocus.com/archive/1/510507/100/0/threaded - http://www.zerodayinitiative.com/advisories/ZDI-10-034 - http://www.us-cert.gov/cas/techalerts/TA10-068A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-018 - http://www.vupen.com/english/advisories/2010/0744 - http://securitytracker.com/id?1023773 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8080
CVE ID: CVE-2010-0806 State: PUBLISHED Published: 2010-03-10T22:00:00 Last Updated: 2024-08-07T00:59:39.106Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the Peer Objects component (aka iepeers.dll) in Microsoft Internet Explorer 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via vectors involving access to an invalid pointer after the deletion of an object, as exploited in the wild in March 2010, aka "Uninitialized Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/62810 - http://www.us-cert.gov/cas/techalerts/TA10-089A.html - http://www.securityfocus.com/bid/386
: - http://osvdb.org/62810 - http://www.us-cert.gov/cas/techalerts/TA10-089A.html - http://www.securityfocus.com/bid/38615 - http://www.vupen.com/english/advisories/2010/0567 - http://secunia.com/advisories/38860 - http://www.us-cert.gov/cas/techalerts/TA10-068A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-018 - http://www.microsoft.com/technet/security/advisory/981374.mspx - https://exchange.xforce.ibmcloud.com/vulnerabilities/56772 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8446 - http://www.vupen.com/english/advisories/2010/0744 - http://blogs.technet.com/msrc/archive/2010/03/09/security-advisory-981374-
/www.vupen.com/english/advisories/2010/0744 - http://blogs.technet.com/msrc/archive/2010/03/09/security-advisory-981374-released.aspx - http://www.kb.cert.org/vuls/id/744549
CVE ID: CVE-2010-0807 State: PUBLISHED Published: 2010-03-31T19:00:00 Last Updated: 2024-08-07T00:59:39.160Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 7 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, leading to memory corruption, aka "HTML Rendering Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA10-089A.html - http://www.us-cert.gov/cas/techalerts/TA10-068A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-018 - https://oval.cisecurity.org/
.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-018 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8532 - http://www.vupen.com/english/advisories/2010/0744 - http://www.securityfocus.com/bid/39024 - http://securitytracker.com/id?1023773
CVE ID: CVE-2010-0808 State: PUBLISHED Published: 2010-10-13T18:00:00 Last Updated: 2024-08-07T00:59:39.316Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 and 7 on Windows XP and Vista does not prevent script from simulating user interaction with the AutoComplete feature, which allows remote attackers to obtain sensitive form information via a crafted web site, aka "AutoComplete Information Disclosure Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-071 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A
ecuritybulletins/2010/ms10-071 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6889 - http://support.avaya.com/css/P8/documents/100113324
CVE ID: CVE-2010-0809 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2010-0810 State: PUBLISHED Published: 2010-04-14T15:44:00 Last Updated: 2024-10-17T18:19:31.188Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel in Microsoft Windows Vista Gold, SP1, and SP2, and Windows Server 2008 Gold and SP2, does not properly handle unspecified exceptions, which allows local users to cause a denial of service (reboot) via a crafted application, aka "Windows Kernel Exception Handler Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7012 - https://docs.microsoft.com/en-us/security-updates/securityb
itory/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7012 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-021 - http://www.us-cert.gov/cas/techalerts/TA10-103A.html - http://secunia.com/advisories/39373 - http://www.securitytracker.com/id?1023850
CVE ID: CVE-2010-0811 State: PUBLISHED Published: 2010-06-08T22:00:00 Last Updated: 2024-08-07T00:59:39.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the Microsoft Internet Explorer 8 Developer Tools ActiveX control in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allow remote attackers to execute arbitrary code via unknown vectors that "corrupt the system state," aka "Microsoft Internet Explorer 8 Developer Tools Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://ova
Explorer 8 Developer Tools Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7492 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-027 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12534 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-034 - http://www.us-cert.gov/cas/techalerts/TA10-159B.html
CVE ID: CVE-2010-0812 State: PUBLISHED Published: 2010-04-14T15:44:00 Last Updated: 2024-08-07T00:59:39.152Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allow remote attackers to bypass intended IPv4 source-address restrictions via a mismatched IPv6 source address in a tunneled ISATAP packet, aka "ISATAP IPv6 Source Address Spoofing Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7574 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2
ch/definition/oval%3Aorg.mitre.oval%3Adef%3A7574 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-029 - http://secunia.com/advisories/39382 - http://www.us-cert.gov/cas/techalerts/TA10-103A.html
CVE ID: CVE-2010-0813 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2010-0814 State: PUBLISHED Published: 2010-07-14T18:31:00 Last Updated: 2024-08-07T00:59:39.416Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Microsoft Access Wizard Controls in ACCWIZ.dll in Microsoft Office Access 2003 SP3 and 2007 SP1 and SP2 do not properly interact with the memory-allocation approach used by Internet Explorer during instantiation, which allows remote attackers to execute arbitrary code via a web site that references multiple ActiveX controls, as demonstrated by the ImexGrid and FieldList controls, aka "Access ActiveX Control Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/reposito
ol Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11907 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-044 - http://www.us-cert.gov/cas/techalerts/TA10-194A.html
CVE ID: CVE-2010-0815 State: PUBLISHED Published: 2010-05-12T01:00:00 Last Updated: 2024-08-07T00:59:39.272Z Vendors: n/a Products: n/a Problem Types: n/a Description: VBE6.DLL in Microsoft Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Visual Basic for Applications (VBA), and VBA SDK 6.3 through 6.5 does not properly search for ActiveX controls that are embedded in documents, which allows remote attackers to execute arbitrary code via a crafted document, aka "VBE6.DLL Stack Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA10-131A.html - https://docs.microsoft.com/en-us/securi
Container: References: - http://www.us-cert.gov/cas/techalerts/TA10-131A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-031 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7074
CVE ID: CVE-2010-0816 State: PUBLISHED Published: 2010-05-12T01:00:00 Last Updated: 2024-08-07T00:59:39.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in inetcomm.dll in Microsoft Outlook Express 5.5 SP2, 6, and 6 SP1; Windows Live Mail on Windows XP SP2 and SP3, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7; and Windows Mail on Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows remote e-mail servers and man-in-the-middle attackers to execute arbitrary code via a crafted (1) POP3 or (2) IMAP response, as demonstrated by a certain +OK response on TCP port 110, aka "Outlook Express and Windo
(1) POP3 or (2) IMAP response, as demonstrated by a certain +OK response on TCP port 110, aka "Outlook Express and Windows Mail Integer Overflow Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.protekresearchlab.com/index.php?option=com_content&view=article&id=13&Itemid=13 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-030 - http://www.us-cert.gov/cas/techalerts/TA10-131A.html - http://archives.neohapsis.com/archives/bugtraq/2010-05/0068.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6734 - http://www.securityfocus.com/bid/40052
CVE ID: CVE-2010-0817 State: PUBLISHED Published: 2010-04-29T21:00:00 Last Updated: 2024-08-07T00:59:39.332Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in _layouts/help.aspx in Microsoft SharePoint Server 2007 12.0.0.6421 and possibly earlier, and SharePoint Services 3.0 SP1 and SP2, versions, allows remote attackers to inject arbitrary web script or HTML via the cid0 parameter. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-039 - http://www.securityfocus.com/archive/1/511021/100/0/threaded - http://www.us-cert.gov/cas/techalerts/TA10-159B.h
0-039 - http://www.securityfocus.com/archive/1/511021/100/0/threaded - http://www.us-cert.gov/cas/techalerts/TA10-159B.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7468 - http://www.htbridge.ch/advisory/xss_in_microsoft_sharepoint_server_2007.html
CVE ID: CVE-2010-0818 State: PUBLISHED Published: 2010-09-15T18:00:00 Last Updated: 2024-08-07T00:59:39.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MPEG-4 codec in the Windows Media codecs in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, and Server 2008 Gold and SP2 does not properly handle crafted media content with MPEG-4 video encoding, which allows remote attackers to execute arbitrary code via a file in an unspecified "supported format," aka "MPEG-4 Codec Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7318 - https://docs
References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7318 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-062
CVE ID: CVE-2010-0819 State: PUBLISHED Published: 2010-06-08T20:00:00 Last Updated: 2024-08-07T00:59:39.188Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Windows OpenType Compact Font Format (CFF) driver in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 SP2 and R2, and Windows 7 allows local users to execute arbitrary code via unknown vectors related to improper validation when copying data from user mode to kernel mode, aka "OpenType CFF Font Driver Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/5
Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/58884 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-037 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7072 - http://www.securityfocus.com/bid/40572 - http://www.us-cert.gov/cas/techalerts/TA10-159B.html
CVE ID: CVE-2010-0820 State: PUBLISHED Published: 2010-09-15T18:00:00 Last Updated: 2024-10-17T20:19:02.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the Local Security Authority Subsystem Service (LSASS), as used in Active Directory in Microsoft Windows Server 2003 SP2 and Windows Server 2008 Gold, SP2, and R2; Active Directory Application Mode (ADAM) in Windows XP SP2 and SP3 and Windows Server 2003 SP2; and Active Directory Lightweight Directory Service (AD LDS) in Windows Vista SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7, allows remote authenticated users to execute arbitrary code via malformed LDAP messages, aka "LSASS Heap O
nd Windows 7, allows remote authenticated users to execute arbitrary code via malformed LDAP messages, aka "LSASS Heap Overflow Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-068 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7120
CVE ID: CVE-2010-0821 State: PUBLISHED Published: 2010-06-08T20:00:00 Last Updated: 2024-08-07T00:59:39.312Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Microsoft Office Excel 2002 SP3, 2003 SP3, 2007 SP1 and SP2; Office 2004 for mac; Office 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer SP1 and SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2; allows remote attackers to execute arbitrary code via an Excel file with a crafted SxView record, related to improper validation of unspecified structures, aka "Excel Record Parsing Memory Corruption Vulnerability," a different vulner
per validation of unspecified structures, aka "Excel Record Parsing Memory Corruption Vulnerability," a different vulnerability than CVE-2010-0824 and CVE-2010-1245. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/511729/100/0/threaded - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-038 - http://www.zerodayinitiative.com/advisories/ZDI-10-104 - http://www.us-cert.gov/cas/techalerts/TA10-159B.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6771
CVE ID: CVE-2010-0822 State: PUBLISHED Published: 2010-06-08T20:00:00 Last Updated: 2024-08-07T00:59:39.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Microsoft Office Excel 2002 SP3, Office 2004 for Mac, Office 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via an Excel file with a crafted OBJ (0x5D) record, aka "Excel Object Stack Overflow Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/511752/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7265 - https://do
00/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7265 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-038 - http://www.securityfocus.com/bid/40520 - http://osvdb.org/65236 - http://www.us-cert.gov/cas/techalerts/TA10-159B.html
CVE ID: CVE-2010-0823 State: PUBLISHED Published: 2010-06-08T20:00:00 Last Updated: 2024-08-07T00:59:39.333Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Microsoft Office Excel 2002 SP3, 2003 SP3, 2007 SP1 and SP2; Office 2004 for mac; Office 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer SP1 and SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2; allows remote attackers to execute arbitrary code via a crafted Excel file, aka "Excel Memory Corruption Vulnerability," a different vulnerability than CVE-2010-1247 and CVE-2010-1249. Additional Analyst Notes: - CVE Program Container