Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-3289 State: PUBLISHED Published: 2010-10-22T22:00:00 Last Updated: 2024-08-07T03:03:18.923Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in HP Systems Insight Manager (SIM) before 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/62679 - http://www.securityfocus.com/bid/44262 - http://marc.info/?l=bugtraq&m=128768031706686&w=2 - http://marc.info/?l=bugtraq&m=128768031706686&w=2 - http://www.securitytracker.com/id?1024622
CVE ID: CVE-2010-3290 State: PUBLISHED Published: 2010-10-22T22:00:00 Last Updated: 2024-08-07T03:03:19.053Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP Systems Insight Manager (SIM) before 6.2 allows remote authenticated users to gain privileges via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/62680 - http://marc.info/?l=bugtraq&m=128768031706686&w=2 - http://marc.info/?l=bugtraq&m=128768031706686&w=2 - http://www.securitytracker.com/id?1024622 - http://www.securityfocus.com/bid/44265
CVE ID: CVE-2010-3291 State: PUBLISHED Published: 2010-10-21T18:12:00 Last Updated: 2024-08-07T03:03:18.872Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in HP AssetCenter 5.0x through AC_5.03, and AssetManager 5.1x through AM_5.12 and 5.2x through AM_5.22, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/41901 - http://www.securitytracker.com/id?1024615 - http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02535850 - http://www.securityfocus.com/bid/44261 - http://www.itrc.hp.com/service/cki/do
ki/docDisplay.do?docId=emr_na-c02535850 - http://www.securityfocus.com/bid/44261 - http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02535850 - http://www.vupen.com/english/advisories/2010/2737
CVE ID: CVE-2010-3292 State: PUBLISHED Published: 2019-11-12T20:37:57 Last Updated: 2024-08-07T03:03:18.920Z Vendors: mailscanner Products: mailscanner Problem Types: may use spoofed data Description: The update{_bad,}_phishing_sites scripts in mailscanner 4.79.11-2 downloads files and trusts them without using encryption (e.g., https) or digital signature checking which could allow an attacker to replace certain configuration files (e.g., phishing whitelist) via dns/packet spoofing. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2010-3292 - https://access.redhat.com/security/cve/cve-2010-3292 - https://www.openwall.com/lists/
ebian.org/tracker/CVE-2010-3292 - https://access.redhat.com/security/cve/cve-2010-3292 - https://www.openwall.com/lists/oss-security/2010/09/13/9 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=596396
CVE ID: CVE-2010-3293 State: PUBLISHED Published: 2019-10-28T14:08:51 Last Updated: 2024-08-07T03:03:18.929Z Vendors: n/a Products: n/a Problem Types: virus updates DoS Description: mailscanner can allow local users to prevent virus signatures from being updated Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2010-3293 - https://access.redhat.com/security/cve/cve-2010-3293 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=596397 - https://www.openwall.com/lists/oss-security/2010/09/13/9
CVE ID: CVE-2010-3294 State: PUBLISHED Published: 2010-09-24T18:00:00 Last Updated: 2024-08-07T03:03:18.918Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in apc.php in the Alternative PHP Cache (APC) extension before 3.1.4 for PHP allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://pecl.php.net/package-changelog.php?package=APC&release=3.1.4 - http://www.vupen.com/english/advisories/2010/2406 - http://www.openwall.com/lists/oss-security/2010/09/14/6 - http://rhn.redhat.com/errata/RHSA-2012-0811.html - http://www.openwall.com/lists/
.com/lists/oss-security/2010/09/14/6 - http://rhn.redhat.com/errata/RHSA-2012-0811.html - http://www.openwall.com/lists/oss-security/2010/09/14/1 - http://www.openwall.com/lists/oss-security/2010/09/14/8
CVE ID: CVE-2010-3295 State: REJECTED Published: 2020-01-23T15:36:46 Last Updated: 2020-01-23T15:36:46 Description: No description available.
CVE ID: CVE-2010-3296 State: PUBLISHED Published: 2010-09-30T14:00:00 Last Updated: 2024-08-07T03:03:18.938Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cxgb_extension_ioctl function in drivers/net/cxgb3/cxgb3_main.c in the Linux kernel before 2.6.36-rc5 does not properly initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via a CHELSIO_GET_QSET_NUM ioctl call. Additional Analyst Notes: - CVE Program Container: References: - http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.36-rc5 - http://www.securityfocus.com/archive/1/520102/100/0/threaded - http://www.redhat.com/support/err
/ChangeLog-2.6.36-rc5 - http://www.securityfocus.com/archive/1/520102/100/0/threaded - http://www.redhat.com/support/errata/RHSA-2011-0017.html - http://secunia.com/advisories/46397 - http://www.openwall.com/lists/oss-security/2010/09/14/7 - http://www.openwall.com/lists/oss-security/2010/09/14/2 - http://lkml.org/lkml/2010/9/11/170 - http://git.kernel.org/?p=linux/kernel/git/davem/net-2.6.git%3Ba=commit%3Bh=49c37c0334a9b85d30ab3d6b5d1acb05ef2ef6de - http://www.ubuntu.com/usn/USN-1041-1 - https://bugzilla.redhat.com/show_bug.cgi?id=633149 - http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html - http://www.vupen.com/english/advisories/2011/0298 - http://lists.opensuse.or
e-security-announce/2011-02/msg00000.html - http://www.vupen.com/english/advisories/2011/0298 - http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00003.html - http://www.vmware.com/security/advisories/VMSA-2011-0012.html - http://secunia.com/advisories/42758 - http://secunia.com/advisories/42884 - http://www.vupen.com/english/advisories/2011/0070 - http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00000.html - http://secunia.com/advisories/41440 - http://www.securityfocus.com/bid/43221 - http://www.debian.org/security/2010/dsa-2126
CVE ID: CVE-2010-3297 State: PUBLISHED Published: 2010-09-30T14:00:00 Last Updated: 2024-08-07T03:03:18.866Z Vendors: n/a Products: n/a Problem Types: n/a Description: The eql_g_master_cfg function in drivers/net/eql.c in the Linux kernel before 2.6.36-rc5 does not properly initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via an EQL_GETMASTRCFG ioctl call. Additional Analyst Notes: - CVE Program Container: References: - http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.36-rc5 - http://www.securityfocus.com/bid/43229 - http://www.redhat.com/support/errata/RHSA-2010-0771.html - http://www.openwa
- http://www.securityfocus.com/bid/43229 - http://www.redhat.com/support/errata/RHSA-2010-0771.html - http://www.openwall.com/lists/oss-security/2010/09/14/7 - http://www.openwall.com/lists/oss-security/2010/09/14/2 - http://git.kernel.org/?p=linux/kernel/git/davem/net-2.6.git%3Ba=commit%3Bh=44467187dc22fdd33a1a06ea0ba86ce20be3fe3c - http://www.ubuntu.com/usn/USN-1041-1 - http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html - http://www.vupen.com/english/advisories/2011/0298 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:051 - http://www.vupen.com/english/advisories/2011/0280 - http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00003.html -
w.vupen.com/english/advisories/2011/0280 - http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00003.html - http://secunia.com/advisories/42758 - http://lkml.org/lkml/2010/9/11/168 - http://www.ubuntu.com/usn/USN-1057-1 - http://www.vupen.com/english/advisories/2011/0070 - http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00000.html - http://secunia.com/advisories/41440 - https://bugzilla.redhat.com/show_bug.cgi?id=633145 - http://secunia.com/advisories/43161 - http://www.debian.org/security/2010/dsa-2126
CVE ID: CVE-2010-3298 State: PUBLISHED Published: 2010-09-30T14:00:00 Last Updated: 2024-08-07T03:03:18.853Z Vendors: n/a Products: n/a Problem Types: n/a Description: The hso_get_count function in drivers/net/usb/hso.c in the Linux kernel before 2.6.36-rc5 does not properly initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via a TIOCGICOUNT ioctl call. Additional Analyst Notes: - CVE Program Container: References: - http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.36-rc5 - http://git.kernel.org/?p=linux/kernel/git/davem/net-2.6.git%3Ba=commit%3Bh=7011e660938fc44ed86319c18a5954e95a82ab3e - htt
ttp://git.kernel.org/?p=linux/kernel/git/davem/net-2.6.git%3Ba=commit%3Bh=7011e660938fc44ed86319c18a5954e95a82ab3e - http://www.openwall.com/lists/oss-security/2010/09/14/7 - http://www.openwall.com/lists/oss-security/2010/09/14/2 - http://www.ubuntu.com/usn/USN-1041-1 - http://www.redhat.com/support/errata/RHSA-2011-0007.html - http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html - http://lkml.org/lkml/2010/9/11/167 - http://www.vupen.com/english/advisories/2011/0298 - http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00003.html - http://secunia.com/advisories/42758 - http://secunia.com/advisories/42890 - https://bugzilla.redhat.com/show_bug.cgi?id=633140
/secunia.com/advisories/42758 - http://secunia.com/advisories/42890 - https://bugzilla.redhat.com/show_bug.cgi?id=633140 - http://www.securityfocus.com/bid/43226 - http://www.vupen.com/english/advisories/2011/0070 - http://secunia.com/advisories/41440
CVE ID: CVE-2010-3299 State: PUBLISHED Published: 2019-11-12T20:55:04 Last Updated: 2024-08-07T03:03:18.926Z Vendors: rails Products: rails Problem Types: on rails: padding oracle attack Description: The encrypt/decrypt functions in Ruby on Rails 2.3 are vulnerable to padding oracle attacks. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2010-3299 - https://access.redhat.com/security/cve/cve-2010-3299 - https://seclists.org/oss-sec/2010/q3/357 - https://www.usenix.org/legacy/events/woot10/tech/full_papers/Rizzo.pdf
CVE ID: CVE-2010-3300 State: PUBLISHED Published: 2021-06-22T11:56:27 Last Updated: 2024-08-07T03:03:18.948Z Vendors: n/a Products: OWASP ESAPI Problem Types: CWE-649 Description: It was found that all OWASP ESAPI for Java up to version 2.0 RC2 are vulnerable to padding oracle attacks. Additional Analyst Notes: - CVE Program Container: References: - https://www.usenix.org/legacy/events/woot10/tech/full_papers/Rizzo.pdf - https://seclists.org/oss-sec/2010/q3/357
CVE ID: CVE-2010-3301 State: PUBLISHED Published: 2010-09-22T18:00:00 Last Updated: 2024-08-07T03:03:18.920Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IA32 system call emulation functionality in arch/x86/ia32/ia32entry.S in the Linux kernel before 2.6.36-rc4-git2 on the x86_64 platform does not zero extend the %eax register after the 32-bit entry path to ptrace is used, which allows local users to gain privileges by triggering an out-of-bounds access to the system call table using the %rax register. NOTE: this vulnerability exists because of a CVE-2007-4573 regression. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-secu
4573 regression. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2010/09/16/3 - http://www.openwall.com/lists/oss-security/2010/09/16/1 - http://www.vupen.com/english/advisories/2010/3117 - https://bugzilla.redhat.com/show_bug.cgi?id=634449 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:198 - http://sota.gen.nz/compat2/ - http://www.ubuntu.com/usn/USN-1041-1 - http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html - http://www.redhat.com/support/errata/RHSA-2010-0842.html - http://www.mandriva.com/security/advisories?name=MDVSA-2010:247 - http://www.vupen.com/english/advisories/2011/0298 - http://w
/www.mandriva.com/security/advisories?name=MDVSA-2010:247 - http://www.vupen.com/english/advisories/2011/0298 - http://www.kernel.org/pub/linux/kernel/v2.6/snapshots/patch-2.6.36-rc4-git2.log - http://secunia.com/advisories/42758 - http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=eefdca043e8391dcd719711716492063030b55ac - http://www.vupen.com/english/advisories/2011/0070 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=36d001c70d8a0144ac1d038f6876c484849a74de
CVE ID: CVE-2010-3302 State: PUBLISHED Published: 2010-10-05T21:00:00 Last Updated: 2024-08-07T03:03:18.957Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in programs/pluto/xauth.c in the client in Openswan 2.6.25 through 2.6.28 might allow remote authenticated gateways to execute arbitrary code or cause a denial of service via long (1) cisco_dns_info or (2) cisco_domain_info data in a packet. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/41769 - http://www.vupen.com/english/advisories/2010/2526 - http://www.openswan.org/download/CVE-2010-3302/CVE-2010-3302.txt - http://www.securityfocus.com/bid/43588 - http://www.
http://www.openswan.org/download/CVE-2010-3302/CVE-2010-3302.txt - http://www.securityfocus.com/bid/43588 - http://www.redhat.com/support/errata/RHSA-2010-0892.html - http://www.securitytracker.com/id?1024749 - http://www.openswan.org/download/CVE-2010-3308/openswan-2.6.26-2.6.28-CVE-2010-330x.patch - http://www.openswan.org/download/CVE-2010-3302/openswan-2.6.25-CVE-2010-3302.patch - http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049053.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-October/048999.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049073.html
CVE ID: CVE-2010-3303 State: PUBLISHED Published: 2010-10-05T21:00:00 Last Updated: 2024-08-07T03:03:18.924Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in MantisBT before 1.2.3 allow remote authenticated administrators to inject arbitrary web script or HTML via (1) a plugin name, related to manage_plugin_uninstall.php; (2) an enumeration value or (3) a String value of a custom field, related to core/cfdefs/cfdef_standard.php; or a (4) project or (5) category name to print_all_bug_page_word.php. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2010-Sept
nalyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2010-September/048639.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-September/048659.html - http://security.gentoo.org/glsa/glsa-201211-01.xml - http://secunia.com/advisories/41653 - http://www.mantisbt.org/bugs/view.php?id=12234 - http://www.mantisbt.org/bugs/view.php?id=12231 - http://www.openwall.com/lists/oss-security/2010/09/14/19 - http://www.vupen.com/english/advisories/2010/2535 - http://www.openwall.com/lists/oss-security/2010/09/14/12 - http://lists.fedoraproject.org/pipermail/package-announce/2010-September/048548.html - http://secunia.com/advisori
/12 - http://lists.fedoraproject.org/pipermail/package-announce/2010-September/048548.html - http://secunia.com/advisories/51199 - http://www.openwall.com/lists/oss-security/2010/09/14/13 - http://www.openwall.com/lists/oss-security/2010/09/16/16 - http://www.mantisbt.org/bugs/changelog_page.php?version_id=111 - http://www.securityfocus.com/bid/43604 - http://www.mantisbt.org/bugs/view.php?id=12232 - http://www.mantisbt.org/bugs/view.php?id=12238
CVE ID: CVE-2010-3304 State: PUBLISHED Published: 2010-09-24T18:00:00 Last Updated: 2024-08-07T03:03:18.915Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ACL plugin in Dovecot 1.2.x before 1.2.13 propagates INBOX ACLs to newly created mailboxes in certain configurations, which might allow remote attackers to read mailboxes that have unintended weak ACLs. Additional Analyst Notes: - CVE Program Container: References: - http://www.dovecot.org/list/dovecot-news/2010-July/000163.html - http://www.openwall.com/lists/oss-security/2010/09/16/17 - http://www.ubuntu.com/usn/USN-1059-1 - http://www.securityfocus.com/bid/41964 - http://www.openwall.com/lists/oss-security/2010/09/16/14
u.com/usn/USN-1059-1 - http://www.securityfocus.com/bid/41964 - http://www.openwall.com/lists/oss-security/2010/09/16/14 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:217 - http://secunia.com/advisories/43220 - http://www.vupen.com/english/advisories/2011/0301 - http://www.vupen.com/english/advisories/2010/2840 - http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html
CVE ID: CVE-2010-3305 State: PUBLISHED Published: 2019-11-12T21:09:43 Last Updated: 2024-08-07T03:03:18.964Z Vendors: pixelpost Products: pixelpost Problem Types: CSRF Description: Cross-site request forgery (CSRF) vulnerability in pixelpost 1.7.3 could allow remote attackers to change the admin password. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2010-3305 - https://access.redhat.com/security/cve/cve-2010-3305 - https://www.exploit-db.com/exploits/15014 - https://www.openwall.com/lists/oss-security/2010/09/17/7
CVE ID: CVE-2010-3306 State: PUBLISHED Published: 2010-09-24T18:00:00Z Last Updated: 2024-09-16T16:53:45.733Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the modURL function in instance.c in Weborf before 0.12.3 allows remote attackers to read arbitrary files via ..%2f sequences in a URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2010/09/17/3 - http://www.osvdb.org/67840 - http://secunia.com/advisories/41286 - http://code.google.com/p/weborf/source/detail?r=464 - http://www.openwall.com/lists/oss-security/2010/09/17/8 - http://www.exploit-db.com/exploits/14925/ - http://galil
464 - http://www.openwall.com/lists/oss-security/2010/09/17/8 - http://www.exploit-db.com/exploits/14925/ - http://galileo.dmi.unict.it/wiki/weborf/doku.php?id=news:released_0.12.3
CVE ID: CVE-2010-3307 State: PUBLISHED Published: 2010-10-05T17:00:00Z Last Updated: 2024-09-16T16:42:25.595Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in themes/default/index.php in Free Simple CMS 1.0 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the (1) body, (2) footer, (3) header, (4) menu_left, or (5) menu_right parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2010/09/17/11 - http://secunia.com/advisories/41001 - http://www.openwall.com/lists/oss-security/2010/09/17/4 - http://www.ocert.org/advisories/ocert-2010-003.ht
ries/41001 - http://www.openwall.com/lists/oss-security/2010/09/17/4 - http://www.ocert.org/advisories/ocert-2010-003.html
CVE ID: CVE-2010-3308 State: PUBLISHED Published: 2010-10-05T21:00:00 Last Updated: 2024-08-07T03:03:18.859Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in programs/pluto/xauth.c in the client in Openswan 2.6.26 through 2.6.28 might allow remote authenticated gateways to execute arbitrary code or cause a denial of service via a long cisco_banner (aka server_banner) field. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/41769 - http://www.vupen.com/english/advisories/2010/2526 - http://www.securityfocus.com/bid/43588 - http://www.redhat.com/support/errata/RHSA-2010-0892.html - http://www.securitytracker.com/id?10247
focus.com/bid/43588 - http://www.redhat.com/support/errata/RHSA-2010-0892.html - http://www.securitytracker.com/id?1024749 - http://www.openswan.org/download/CVE-2010-3308/openswan-2.6.26-2.6.28-CVE-2010-330x.patch - http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049053.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-October/048999.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049073.html - http://www.openswan.org/download/CVE-2010-3308/CVE-2010-3308.txt
CVE ID: CVE-2010-3309 State: REJECTED Published: 2017-07-24T16:00:00 Last Updated: 2017-07-24T15:57:01 Description: No description available.
CVE ID: CVE-2010-3310 State: PUBLISHED Published: 2010-09-29T16:00:00 Last Updated: 2024-08-07T03:03:18.941Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer signedness errors in net/rose/af_rose.c in the Linux kernel before 2.6.36-rc5-next-20100923 allow local users to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via a rose_getname function call, related to the rose_bind and rose_connect functions. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1000-1 - http://www.openwall.com/lists/oss-security/2010/09/21/2 - http://marc.info/?l=linux-netdev&m=128502238927086&w=2 - htt
- http://www.openwall.com/lists/oss-security/2010/09/21/2 - http://marc.info/?l=linux-netdev&m=128502238927086&w=2 - http://www.osvdb.org/68163 - http://secunia.com/advisories/41493 - http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html - http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.html - http://www.openwall.com/lists/oss-security/2010/09/21/1 - http://www.kernel.org/pub/linux/kernel/v2.6/next/patch-v2.6.36-rc5-next-20100923.bz2 - http://www.securityfocus.com/bid/43368 - http://www.vupen.com/english/advisories/2011/0298 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:051 - http://lists.opensuse.org/opensuse-security-announce/2010-
://www.mandriva.com/security/advisories?name=MDVSA-2011:051 - http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00003.html - http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00004.html - http://www.vupen.com/english/advisories/2011/0375 - http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00002.html - http://www.mandriva.com/security/advisories?name=MDVSA-2011:029 - https://exchange.xforce.ibmcloud.com/vulnerabilities/61953 - http://secunia.com/advisories/43291 - http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00000.html - http://git.kernel.org/?p=linux/kernel/git/davem/net-2.6.git%3Ba=commit%3Bh=9828e6e6e3f19efcb476c567b9999891d051f5
html - http://git.kernel.org/?p=linux/kernel/git/davem/net-2.6.git%3Ba=commit%3Bh=9828e6e6e3f19efcb476c567b9999891d051f52f - http://www.debian.org/security/2010/dsa-2126
CVE ID: CVE-2010-3311 State: PUBLISHED Published: 2011-01-07T22:00:00 Last Updated: 2024-08-07T03:03:19.006Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in base/ftstream.c in libXft (aka the X FreeType library) in FreeType before 2.4 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted Compact Font Format (CFF) font file that triggers a heap-based buffer overflow, related to an "input stream position error" issue, a different vulnerability than CVE-2010-1797. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/43700 - http://www.debian.org/securit