Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
rivilege boundaries. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=818386 - https://bitbucket.org/shlomif/perl-config-inifiles/changeset/a08fa26f4f59 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75328 - http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080713.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-May/081207.html - http://secunia.com/advisories/48990 - http://www.ubuntu.com/usn/USN-1543-1 - http://www.osvdb.org/81671 - http://www.openwall.com/lists/oss-security/2012/05/02/6 - http://www.securityfocus.com/bid/53361 - http://lists.fedoraproject.org/pipermail/package-announce
curity/2012/05/02/6 - http://www.securityfocus.com/bid/53361 - http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080716.html
CVE ID: CVE-2012-2452 State: PUBLISHED Published: 2020-02-11T19:22:00 Last Updated: 2024-08-06T19:34:25.766Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in pragmaMx 1.x before 1.12.2 allow remote attackers to inject arbitrary web script or HTML via the (1) name parameter to modules.php or (2) img_url to includes/wysiwyg/spaw/editor/plugins/imgpopup/img_popup.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.htbridge.com/advisory/HTB23090 - http://www.pragmamx.org/Forum-topic-33554.html - http://www.pragmamx.org/News-pragmaMx-1.12-Servicepack2-item-706.html
CVE ID: CVE-2012-2455 State: PUBLISHED Published: 2012-11-10T00:00:00Z Last Updated: 2024-09-16T17:49:29.867Z Vendors: n/a Products: n/a Problem Types: n/a Description: Advanced Productivity Software DTE Axiom before 12.3.3 does not validate the registration ID, which allows remote attackers to bypass authentication and read or modify data about users, customers, and projects via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2012/Sep/62 - http://secunia.com/advisories/50508 - http://www.osvdb.org/85499
CVE ID: CVE-2012-2456 State: REJECTED Published: 2017-11-13T15:00:00 Last Updated: 2017-11-13T14:57:01 Description: No description available.
CVE ID: CVE-2012-2459 State: PUBLISHED Published: 2012-08-06T16:00:00Z Last Updated: 2024-09-16T17:08:30.742Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in bitcoind and Bitcoin-Qt before 0.4.6, 0.5.x before 0.5.5, 0.6.0.x before 0.6.0.7, and 0.6.x before 0.6.2 allows remote attackers to cause a denial of service (block-processing outage and incorrect block count) via unknown behavior on a Bitcoin network. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.gentoo.org/show_bug.cgi?id=415973 - https://bitcointalk.org/?topic=81749 - https://en.bitcoin.it/wiki/CVEs
CVE ID: CVE-2012-2469 State: PUBLISHED Published: 2012-08-06T17:00:00 Last Updated: 2024-08-06T19:34:25.876Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco NX-OS 4.2, 5.0, 5.1, and 5.2 on Nexus 7000 series switches, when the High Availability (HA) policy is configured for Reset, allows remote attackers to cause a denial of service (device reset) via a malformed Cisco Discovery Protocol (CDP) packet, aka Bug IDs CSCtk34535 and CSCtk19132. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/docs/switches/datacenter/sw/5_x/nx-os/release/notes/52_nx-os_release_note.html - http://www.securitytracker.com/id?1027352 - http://www.4salesbyself
5_x/nx-os/release/notes/52_nx-os_release_note.html - http://www.securitytracker.com/id?1027352 - http://www.4salesbyself.com/troubleshooting-random-nexus-reboots.aspx
CVE ID: CVE-2012-2472 State: PUBLISHED Published: 2012-08-06T17:00:00Z Last Updated: 2024-09-16T23:16:32.693Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2 and 8.4, when SIP inspection is enabled, create many identical pre-allocated secondary pinholes, which might allow remote attackers to cause a denial of service (CPU consumption) via crafted SIP traffic, aka Bug ID CSCtz63143. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/docs/security/asa/asa84/release/notes/asarn84.html
CVE ID: CVE-2012-2474 State: PUBLISHED Published: 2012-08-06T17:00:00Z Last Updated: 2024-09-17T03:43:35.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2 through 8.4 allows remote authenticated users to cause a denial of service (memory consumption and blank response page) by using the clientless WebVPN feature, aka Bug ID CSCth34278. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/web/software/280775065/45357/ASA-825-Interim-Release-Notes.html
CVE ID: CVE-2012-2486 State: PUBLISHED Published: 2012-07-12T10:00:00Z Last Updated: 2024-09-17T04:25:44.077Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Cisco Discovery Protocol (CDP) implementation on Cisco TelePresence Multipoint Switch before 1.9.0, Cisco TelePresence Immersive Endpoint Devices before 1.9.1, Cisco TelePresence Manager before 1.9.0, and Cisco TelePresence Recording Server before 1.8.1 allows remote attackers to execute arbitrary code by leveraging certain adjacency and sending a malformed CDP packet, aka Bug IDs CSCtz40953, CSCtz40947, CSCtz40965, and CSCtz40953. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/sec
CSCtz40965, and CSCtz40953. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120711-ctms - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120711-ctsman - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120711-cts - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120711-ctrs
CVE ID: CVE-2012-2488 State: PUBLISHED Published: 2012-05-31T10:00:00 Last Updated: 2024-08-06T19:34:25.772Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS XR before 4.2.1 on ASR 9000 series devices and CRS series devices allows remote attackers to cause a denial of service (packet transmission outage) via a crafted packet, aka Bug IDs CSCty94537 and CSCtz62593. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/49329 - http://www.securitytracker.com/id?1027104 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120530-iosxr - http://www.securityfocus.com/bid/53728
CVE ID: CVE-2012-2490 State: PUBLISHED Published: 2012-08-06T17:00:00Z Last Updated: 2024-09-17T00:17:32.087Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IP Communicator 8.6 allows man-in-the-middle attackers to modify the Certificate Trust List via unspecified vectors, aka Bug ID CSCtz01471. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/docs/voice_ip_comm/cipc/8_5/english/release_notes/CIPC8x_RN.html
CVE ID: CVE-2012-2493 State: PUBLISHED Published: 2012-06-20T20:00:00Z Last Updated: 2024-09-16T23:15:33.099Z Vendors: n/a Products: n/a Problem Types: n/a Description: The VPN downloader implementation in the WebLaunch feature in Cisco AnyConnect Secure Mobility Client 2.x before 2.5 MR6 on Windows, and 2.x before 2.5 MR6 and 3.x before 3.0 MR8 on Mac OS X and Linux, does not properly validate binaries that are received by the downloader process, which allows remote attackers to execute arbitrary code via vectors involving (1) ActiveX or (2) Java components, aka Bug ID CSCtw47523. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content
tw47523. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120620-ac
CVE ID: CVE-2012-2494 State: PUBLISHED Published: 2012-06-20T20:00:00Z Last Updated: 2024-09-16T16:33:58.139Z Vendors: n/a Products: n/a Problem Types: n/a Description: The VPN downloader implementation in the WebLaunch feature in Cisco AnyConnect Secure Mobility Client 2.x before 2.5 MR6 and 3.x before 3.0 MR8 does not compare the timestamp of offered software to the timestamp of installed software, which allows remote attackers to force a version downgrade by using (1) ActiveX or (2) Java components to offer signed code that corresponds to an older software release, aka Bug ID CSCtw48681. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/cente
ug ID CSCtw48681. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120620-ac
CVE ID: CVE-2012-2495 State: PUBLISHED Published: 2012-06-20T20:00:00Z Last Updated: 2024-09-16T18:28:53.930Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HostScan downloader implementation in Cisco AnyConnect Secure Mobility Client 3.x before 3.0 MR8 and Cisco Secure Desktop before 3.6.6020 does not compare the timestamp of offered software to the timestamp of installed software, which allows remote attackers to force a version downgrade by using (1) ActiveX or (2) Java components to offer signed code that corresponds to an older software release, aka Bug ID CSCtx74235. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/
ID CSCtx74235. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120620-ac
CVE ID: CVE-2012-2496 State: PUBLISHED Published: 2012-06-20T20:00:00Z Last Updated: 2024-09-17T02:47:01.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: A certain Java applet in the VPN downloader implementation in the WebLaunch feature in Cisco AnyConnect Secure Mobility Client 3.x before 3.0 MR7 on 64-bit Linux platforms does not properly restrict use of Java components, which allows remote attackers to execute arbitrary code via a crafted web site, aka Bug ID CSCty45925. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120620-ac
CVE ID: CVE-2012-2497 State: REJECTED Published: 2013-10-02T16:00:00Z Last Updated: 2024-09-16T18:04:05.793Z Description: No description available.
CVE ID: CVE-2012-2498 State: PUBLISHED Published: 2012-08-06T17:00:00Z Last Updated: 2024-09-16T16:43:55.494Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco AnyConnect Secure Mobility Client 3.0 through 3.0.08066 does not ensure that authentication makes use of a legitimate certificate, which allows user-assisted man-in-the-middle attackers to spoof servers via a crafted certificate, aka Bug ID CSCtz29197. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/docs/security/vpn_client/anyconnect/anyconnect30/release/notes/anyconnect30rn.html
CVE ID: CVE-2012-2499 State: PUBLISHED Published: 2012-08-06T17:00:00Z Last Updated: 2024-09-17T01:06:42.253Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IPsec implementation in Cisco AnyConnect Secure Mobility Client 3.0 before 3.0.08057 does not verify the certificate name in an X.509 certificate, which allows man-in-the-middle attackers to spoof servers via a crafted certificate, aka Bug ID CSCtz26985. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/docs/security/vpn_client/anyconnect/anyconnect30/release/notes/anyconnect30rn.html
CVE ID: CVE-2012-2500 State: PUBLISHED Published: 2012-08-06T17:00:00Z Last Updated: 2024-09-16T23:36:46.853Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco AnyConnect Secure Mobility Client 3.0 before 3.0.08057 does not verify the certificate name in an X.509 certificate during WebLaunch of IPsec, which allows man-in-the-middle attackers to spoof servers via a crafted certificate, aka Bug ID CSCtz29470. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/docs/security/vpn_client/anyconnect/anyconnect30/release/notes/anyconnect30rn.html
CVE ID: CVE-2012-2511 State: PUBLISHED Published: 2012-05-15T01:00:00 Last Updated: 2024-08-06T19:34:25.846Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DiagTraceAtoms function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0 EHP1 and EHP2 allows remote attackers to cause a denial of service (daemon crash) via a crafted SAP Diag packet. Additional Analyst Notes: - CVE Program Container: References: - https://service.sap.com/sap/support/notes/1687910 - http://scn.sap.com/docs/DOC-8218 - http://www.coresecurity.com/content/sap-netweaver-dispatcher-multiple-vulnerabilities - http://www.securitytracker.com/id?1027052 - https://excha
om/content/sap-netweaver-dispatcher-multiple-vulnerabilities - http://www.securitytracker.com/id?1027052 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75453
CVE ID: CVE-2012-2512 State: PUBLISHED Published: 2012-05-15T01:00:00 Last Updated: 2024-08-06T19:34:25.809Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DiagTraceStreamI function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0 EHP1 and EHP2 allows remote attackers to cause a denial of service (daemon crash) via a crafted SAP Diag packet. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/75454 - https://service.sap.com/sap/support/notes/1687910 - http://scn.sap.com/docs/DOC-8218 - http://www.coresecurity.com/content/sap-netweaver-dispatcher-multiple-vulnerabilit
- http://scn.sap.com/docs/DOC-8218 - http://www.coresecurity.com/content/sap-netweaver-dispatcher-multiple-vulnerabilities - http://www.securitytracker.com/id?1027052
CVE ID: CVE-2012-2513 State: PUBLISHED Published: 2012-05-15T01:00:00 Last Updated: 2024-08-06T19:34:25.797Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Diaginput function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0 EHP1 and EHP2 allows remote attackers to cause a denial of service (daemon crash) via a crafted SAP Diag packet. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/75455 - https://service.sap.com/sap/support/notes/1687910 - http://scn.sap.com/docs/DOC-8218 - http://www.coresecurity.com/content/sap-netweaver-dispatcher-multiple-vulnerabilities - h
://scn.sap.com/docs/DOC-8218 - http://www.coresecurity.com/content/sap-netweaver-dispatcher-multiple-vulnerabilities - http://www.securitytracker.com/id?1027052
CVE ID: CVE-2012-2514 State: PUBLISHED Published: 2012-05-15T01:00:00 Last Updated: 2024-08-06T19:34:25.886Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DiagiEventSource function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0 EHP1 and EHP2 allows remote attackers to cause a denial of service (daemon crash) via a crafted SAP Diag packet. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/75456 - https://service.sap.com/sap/support/notes/1687910 - http://scn.sap.com/docs/DOC-8218 - http://www.coresecurity.com/content/sap-netweaver-dispatcher-multiple-vulnerabilit
CVE ID: CVE-2012-2515 State: PUBLISHED Published: 2012-07-05T01:00:00Z Last Updated: 2024-09-16T17:37:55.554Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in the KeyHelp.KeyCtrl.1 ActiveX control in KeyHelp.ocx 1.2.312 in KeyWorks KeyHelp Module (aka the HTML Help component), as used in EMC Documentum ApplicationXtender Desktop 5.4; EMC Captiva Quickscan Pro 4.6 SP1; GE Intelligent Platforms Proficy Historian 3.1, 3.5, 4.0, and 4.5; GE Intelligent Platforms Proficy HMI/SCADA iFIX 5.0 and 5.1; GE Intelligent Platforms Proficy Pulse 1.0; GE Intelligent Platforms Proficy Batch Execution 5.6; GE Intelligent Platforms SI7 I/O Driver 7.20 through
cy Pulse 1.0; GE Intelligent Platforms Proficy Batch Execution 5.6; GE Intelligent Platforms SI7 I/O Driver 7.20 through 7.42; and other products, allow remote attackers to execute arbitrary code via a long string in the second argument to the (1) JumpMappedID or (2) JumpURL method. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/2795 - http://www.vupen.com/english/advisories/2009/2793 - http://www.securityfocus.com/bid/36546 - http://support.ge-ip.com/support/resources/sites/GE_FANUC_SUPPORT/content/live/KB/14000/KB14863/en_US/GEIP12-04%20Security%20Advisory%20-%20Proficy%20HTML%20Help.pdf - http://secunia.com/advisories/36914 -
0/KB14863/en_US/GEIP12-04%20Security%20Advisory%20-%20Proficy%20HTML%20Help.pdf - http://secunia.com/advisories/36914 - http://secunia.com/advisories/36905 - http://www.us-cert.gov/control_systems/pdf/ICSA-12-131-02.pdf - http://retrogod.altervista.org/9sg_emc_keyhelp.html
CVE ID: CVE-2012-2516 State: PUBLISHED Published: 2012-07-05T01:00:00Z Last Updated: 2024-09-16T21:03:23.845Z Vendors: n/a Products: n/a Problem Types: n/a Description: An ActiveX control in KeyHelp.ocx in KeyWorks KeyHelp Module (aka the HTML Help component), as used in GE Intelligent Platforms Proficy Historian 3.1, 3.5, 4.0, and 4.5; Proficy HMI/SCADA iFIX 5.0 and 5.1; Proficy Pulse 1.0; Proficy Batch Execution 5.6; SI7 I/O Driver 7.20 through 7.42; and other products, allows remote attackers to execute arbitrary commands via crafted input, related to a "command injection vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://support.ge-ip.com/support/reso
n vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://support.ge-ip.com/support/resources/sites/GE_FANUC_SUPPORT/content/live/KB/14000/KB14863/en_US/GEIP12-04%20Security%20Advisory%20-%20Proficy%20HTML%20Help.pdf - http://www.us-cert.gov/control_systems/pdf/ICSA-12-131-02.pdf
CVE ID: CVE-2012-2517 State: PUBLISHED Published: 2020-02-11T19:12:09 Last Updated: 2024-08-06T19:34:25.860Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in PrestaShop before 1.4.9 allows remote attackers to inject arbitrary web script or HTML via the index of the product[] parameter to ajax.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.htbridge.com/advisory/HTB23091 - https://www.prestashop.com/download/old/changelog_1.4.9.0.txt
CVE ID: CVE-2012-2518 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2012-2519 State: PUBLISHED Published: 2012-11-14T00:00:00 Last Updated: 2024-08-06T19:34:25.888Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in Entity Framework in ADO.NET in Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, and 4 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .NET application, aka ".NET Framework Insecure Library Loading Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15520 - http://www.
References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15520 - http://www.us-cert.gov/cas/techalerts/TA12-318A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-074 - http://secunia.com/advisories/51236 - http://www.securitytracker.com/id?1027753
CVE ID: CVE-2012-2520 State: PUBLISHED Published: 2012-10-09T21:00:00 Last Updated: 2024-08-06T19:34:25.841Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Microsoft InfoPath 2007 SP2 and SP3 and 2010 SP1, Communicator 2007 R2, Lync 2010 and 2010 Attendee, SharePoint Server 2007 SP2 and SP3 and 2010 SP1, Groove Server 2010 SP1, Windows SharePoint Services 3.0 SP2, SharePoint Foundation 2010 SP1, and Office Web Apps 2010 SP1 allows remote attackers to inject arbitrary web script or HTML via a crafted string, aka "HTML Sanitization Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.co
anitization Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/55797 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14976 - http://www.securitytracker.com/id?1027628 - http://www.securitytracker.com/id?1027626 - http://www.securitytracker.com/id?1027629 - http://www.securitytracker.com/id?1027627 - http://www.us-cert.gov/cas/techalerts/TA12-283A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-066 - http://www.securitytracker.com/id?1027625
CVE ID: CVE-2012-2521 State: PUBLISHED Published: 2012-08-15T01:00:00 Last Updated: 2024-08-06T19:34:25.812Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "Asynchronous NULL Object Access Remote Code Execution Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-052 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15742 - http://www.us-cert.gov/cas/techalerts/TA12
curity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15742 - http://www.us-cert.gov/cas/techalerts/TA12-227A.html
CVE ID: CVE-2012-2522 State: PUBLISHED Published: 2012-08-15T01:00:00 Last Updated: 2024-08-06T19:34:25.765Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a malformed virtual function table after this table's deletion, aka "Virtual Function Table Corruption Remote Code Execution Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-052 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15
uritybulletins/2012/ms12-052 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15498 - http://www.us-cert.gov/cas/techalerts/TA12-227A.html
CVE ID: CVE-2012-2523 State: PUBLISHED Published: 2012-08-15T01:00:00 Last Updated: 2024-08-06T19:34:25.771Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in Microsoft Internet Explorer 8 and 9, JScript 5.8, and VBScript 5.8 on 64-bit platforms allows remote attackers to execute arbitrary code by leveraging an incorrect size calculation during object copying, aka "JavaScript Integer Overflow Remote Code Execution Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-052 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-056 - http
curitybulletins/2012/ms12-052 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-056 - http://www.us-cert.gov/cas/techalerts/TA12-227A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15790