Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-1306 State: PUBLISHED Published: 2013-05-15T01:00:00 Last Updated: 2024-08-06T14:57:04.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer Use After Free Vulnerability," a different vulnerability than CVE-2013-1313. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16398 - http://packetstormsecurity.com/files/140092/Microsoft-Internet-Explorer-9-MSHTML-CDispNode-Inse
tre.oval%3Adef%3A16398 - http://packetstormsecurity.com/files/140092/Microsoft-Internet-Explorer-9-MSHTML-CDispNode-InsertSiblingNode-Use-After-Free.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-037 - http://www.us-cert.gov/ncas/alerts/TA13-134A - http://blog.skylined.nl/20161208001.html - https://www.exploit-db.com/exploits/40894/
CVE ID: CVE-2013-1307 State: PUBLISHED Published: 2013-05-15T01:00:00 Last Updated: 2024-08-06T14:57:05.107Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer Use After Free Vulnerability," a different vulnerability than CVE-2013-0811. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-037 - http://www.us-cert.gov/ncas/alerts/TA13-134A - https://oval.cisecurity.org/repository/search/definit
ins/2013/ms13-037 - http://www.us-cert.gov/ncas/alerts/TA13-134A - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16650
CVE ID: CVE-2013-1308 State: PUBLISHED Published: 2013-05-15T01:00:00 Last Updated: 2024-08-06T14:57:05.121Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer Use After Free Vulnerability," a different vulnerability than CVE-2013-1309 and CVE-2013-2551. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-037 - http://www.us-cert.gov/ncas/alerts/TA13-134A - https://oval.cisecurity.org/re
-updates/securitybulletins/2013/ms13-037 - http://www.us-cert.gov/ncas/alerts/TA13-134A - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16415
CVE ID: CVE-2013-1309 State: PUBLISHED Published: 2013-05-15T01:00:00 Last Updated: 2024-08-06T14:57:04.930Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer Use After Free Vulnerability," a different vulnerability than CVE-2013-1308 and CVE-2013-2551. Additional Analyst Notes: - CVE Program Container: References: - http://blog.skylined.nl/20161207001.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-037 - http://www.us-cert.gov/ncas/alerts
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-037 - http://www.us-cert.gov/ncas/alerts/TA13-134A - https://www.exploit-db.com/exploits/40893/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16738 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16396 - http://packetstormsecurity.com/files/140094/Microsoft-Internet-Explorer-MSHTML-CDispNode-InsertSiblingNode-Use-After-Free.html
CVE ID: CVE-2013-1310 State: PUBLISHED Published: 2013-05-15T01:00:00 Last Updated: 2024-08-06T14:57:05.105Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Microsoft Internet Explorer 6 and 7 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer Use After Free Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-037 - http://www.us-cert.gov/ncas/alerts/TA13-134A - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16689
CVE ID: CVE-2013-1311 State: PUBLISHED Published: 2013-05-15T01:00:00 Last Updated: 2024-08-06T14:57:05.141Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer Use After Free Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-037 - http://www.us-cert.gov/ncas/alerts/TA13-134A
CVE ID: CVE-2013-1312 State: PUBLISHED Published: 2013-05-15T01:00:00 Last Updated: 2024-08-06T14:57:05.108Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer Use After Free Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-037 - http://www.us-cert.gov/ncas/alerts/TA13-134A - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16328
CVE ID: CVE-2013-1313 State: PUBLISHED Published: 2013-02-13T11:00:00 Last Updated: 2024-08-06T14:57:05.118Z Vendors: n/a Products: n/a Problem Types: n/a Description: Object Linking and Embedding (OLE) Automation in Microsoft Windows XP SP3 does not properly allocate memory, which allows remote attackers to execute arbitrary code via a crafted RTF document, aka "OLE Automation Remote Code Execution Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-037 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16385 - http://www.us-cert.gov/cas/techalerts
.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16385 - http://www.us-cert.gov/cas/techalerts/TA13-043B.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-020
CVE ID: CVE-2013-1314 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-1315 State: PUBLISHED Published: 2013-09-11T10:00:00 Last Updated: 2024-08-06T14:57:04.977Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013; Office Web Apps 2010; Excel 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Office for Mac 2011; Excel Viewer; and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%
nal Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18950 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-073 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18333 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18543 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-067 - http://www.us-cert.gov/ncas/alerts/TA13-253A
CVE ID: CVE-2013-1316 State: PUBLISHED Published: 2013-05-15T01:00:00 Last Updated: 2024-08-06T14:57:05.047Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Publisher 2003 SP3 does not properly validate the size of an unspecified array, which allows remote attackers to execute arbitrary code via a crafted Publisher file, aka "Publisher Negative Value Allocation Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/ncas/alerts/TA13-134A - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-042 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16584
CVE ID: CVE-2013-1317 State: PUBLISHED Published: 2013-05-15T01:00:00 Last Updated: 2024-08-06T14:57:05.124Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file that triggers an improper allocation-size calculation, aka "Publisher Integer Overflow Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/ncas/alerts/TA13-134A - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16548 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-042
CVE ID: CVE-2013-1318 State: PUBLISHED Published: 2013-05-15T01:00:00 Last Updated: 2024-08-06T14:57:05.139Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file that triggers access to an invalid pointer, aka "Publisher Corrupt Interface Pointer Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/ncas/alerts/TA13-134A - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16682 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-042
CVE ID: CVE-2013-1319 State: PUBLISHED Published: 2013-05-15T01:00:00 Last Updated: 2024-08-06T14:57:05.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Publisher 2003 SP3 does not properly check the return value of an unspecified method, which allows remote attackers to execute arbitrary code via a crafted Publisher file, aka "Publisher Return Value Handling Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/ncas/alerts/TA13-134A - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16749 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-042
CVE ID: CVE-2013-1320 State: PUBLISHED Published: 2013-05-15T01:00:00 Last Updated: 2024-08-06T14:57:05.046Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file, aka "Publisher Buffer Overflow Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16776 - http://www.us-cert.gov/ncas/alerts/TA13-134A - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-042
CVE ID: CVE-2013-1321 State: PUBLISHED Published: 2013-05-15T01:00:00 Last Updated: 2024-08-06T14:57:04.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Publisher 2003 SP3 does not properly check the data type of an unspecified return value, which allows remote attackers to execute arbitrary code via a crafted Publisher file, aka "Publisher Return Value Validation Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16525 - http://www.us-cert.gov/ncas/alerts/TA13-134A - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-042
CVE ID: CVE-2013-1322 State: PUBLISHED Published: 2013-05-15T01:00:00 Last Updated: 2024-08-06T14:57:05.033Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Publisher 2003 SP3 does not properly check table range data, which allows remote attackers to execute arbitrary code via a crafted Publisher file, aka "Publisher Invalid Range Check Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/ncas/alerts/TA13-134A - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16669 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-042
CVE ID: CVE-2013-1323 State: PUBLISHED Published: 2013-05-15T01:00:00 Last Updated: 2024-08-06T14:57:05.030Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Publisher 2003 SP3 does not properly handle NULL values for unspecified data items, which allows remote attackers to execute arbitrary code via a crafted Publisher file, aka "Publisher Incorrect NULL Value Handling Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/ncas/alerts/TA13-134A - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-042 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16733
CVE ID: CVE-2013-1324 State: PUBLISHED Published: 2013-11-13T00:00:00 Last Updated: 2024-08-06T14:57:04.875Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Microsoft Office 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT allows remote attackers to execute arbitrary code via a crafted WordPerfect document (.wpd) file, aka "Word Stack Buffer Overwrite Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/ncas/alerts/TA13-317A - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19162 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/m
inition/oval%3Aorg.mitre.oval%3Adef%3A19162 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-091
CVE ID: CVE-2013-1325 State: PUBLISHED Published: 2013-11-13T00:00:00 Last Updated: 2024-08-06T14:57:05.089Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Microsoft Office 2003 SP3 and 2007 SP3 allows remote attackers to execute arbitrary code via a crafted WordPerfect document (.wpd) file, aka "Word Heap Overwrite Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/ncas/alerts/TA13-317A - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19321 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-091
CVE ID: CVE-2013-1326 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-1327 State: PUBLISHED Published: 2013-05-15T01:00:00 Last Updated: 2024-08-06T14:57:05.028Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file that triggers an improper memory allocation, aka "Publisher Signed Integer Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/ncas/alerts/TA13-134A - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-042 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16355
CVE ID: CVE-2013-1328 State: PUBLISHED Published: 2013-05-15T01:00:00 Last Updated: 2024-08-06T14:57:05.097Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Publisher 2003 SP3, 2007 SP3, and 2010 SP1 allows remote attackers to execute arbitrary code via a crafted Publisher file that triggers incorrect pointer handling, aka "Publisher Pointer Handling Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/ncas/alerts/TA13-134A - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16765 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-042
CVE ID: CVE-2013-1329 State: PUBLISHED Published: 2013-05-15T01:00:00 Last Updated: 2024-08-06T14:57:05.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file that triggers a buffer underflow, aka "Publisher Buffer Underflow Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/ncas/alerts/TA13-134A - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16554 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-042
CVE ID: CVE-2013-1330 State: PUBLISHED Published: 2013-09-11T10:00:00 Last Updated: 2024-08-06T14:57:05.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of Microsoft SharePoint Portal Server 2003 SP3, SharePoint Server 2007 SP3 and 2010 SP1 and SP2, and Office Web Apps 2010 does not set the EnableViewStateMac attribute, which allows remote attackers to execute arbitrary code by leveraging an unassigned workflow, aka "MAC Disabled Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19040 - https://docs.microsoft.com/en-us/security-updates
org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19040 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-105 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-067 - http://www.us-cert.gov/ncas/alerts/TA13-253A
CVE ID: CVE-2013-1331 State: PUBLISHED Published: 2013-06-12T01:00:00.000Z Last Updated: 2025-10-22T00:05:41.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Microsoft Office 2003 SP3 and Office 2011 for Mac allows remote attackers to execute arbitrary code via crafted PNG data in an Office document, leading to improper memory allocation, aka "Office Buffer Overflow Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16713 - http://www.us-cert.gov/ncas/alerts/TA13-168A - https://oval.cisecurity.org/repository/search/def
re.oval%3Adef%3A16713 - http://www.us-cert.gov/ncas/alerts/TA13-168A - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16732 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-051
CVE ID: CVE-2013-1332 State: PUBLISHED Published: 2013-05-15T01:00:00 Last Updated: 2024-08-06T14:57:05.124Z Vendors: n/a Products: n/a Problem Types: n/a Description: dxgkrnl.sys (aka the DirectX graphics kernel subsystem) in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT does not properly handle objects in memory, which allows local users to gain privileges via a crafted application, aka "DirectX Graphics Kernel Subsystem Double Fetch Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/ncas/alerts/TA13-134A - https://oval.cisecurity.
st Notes: - CVE Program Container: References: - http://www.us-cert.gov/ncas/alerts/TA13-134A - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16332 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-046 - http://secunia.com/advisories/53385
CVE ID: CVE-2013-1333 State: PUBLISHED Published: 2013-05-15T01:00:00 Last Updated: 2024-08-06T14:57:05.025Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in win32k.sys in the kernel-mode drivers in Microsoft Windows 7 SP1 allows local users to gain privileges via a crafted application that leverages improper handling of objects in memory, aka "Win32k Buffer Overflow Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/ncas/alerts/TA13-134A - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-046 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16
uritybulletins/2013/ms13-046 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16769 - http://secunia.com/advisories/53385
CVE ID: CVE-2013-1334 State: PUBLISHED Published: 2013-05-15T01:00:00 Last Updated: 2024-08-06T14:57:04.989Z Vendors: n/a Products: n/a Problem Types: n/a Description: win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT does not properly handle objects in memory, which allows local users to gain privileges via a crafted application, aka "Win32k Window Handle Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/ncas/alerts/TA13-134A - https://docs.microsoft.com/en-us/security-upda
m Container: References: - http://www.us-cert.gov/ncas/alerts/TA13-134A - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-046 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16091 - http://secunia.com/advisories/53385
CVE ID: CVE-2013-1335 State: PUBLISHED Published: 2013-05-15T01:00:00 Last Updated: 2024-08-06T14:57:04.767Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Word 2003 SP3 and Word Viewer allow remote attackers to execute arbitrary code via crafted shape data in a Word document, aka "Word Shape Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16229 - http://www.us-cert.gov/ncas/alerts/TA13-134A - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-043
CVE ID: CVE-2013-1336 State: PUBLISHED Published: 2013-05-15T01:00:00 Last Updated: 2024-08-06T14:57:05.116Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Common Language Runtime (CLR) in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly check signatures, which allows remote attackers to make undetected changes to signed XML documents via unspecified vectors that preserve signature validity, aka "XML Digital Signature Spoofing Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/ncas/alerts/TA13-134A - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-040 - https://oval.ci
s/alerts/TA13-134A - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-040 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16559
CVE ID: CVE-2013-1337 State: PUBLISHED Published: 2013-05-15T01:00:00 Last Updated: 2024-08-06T14:57:05.151Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft .NET Framework 4.5 does not properly create policy requirements for custom Windows Communication Foundation (WCF) endpoint authentication in certain situations involving passwords over HTTPS, which allows remote attackers to bypass authentication by sending queries to an endpoint, aka "Authentication Bypass Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/ncas/alerts/TA13-134A - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-040 - h