Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-0869 State: PUBLISHED Published: 2009-03-10T20:00:00Z Last Updated: 2024-09-17T03:28:04.357Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the client in IBM Tivoli Storage Manager (TSM) HSM 5.3.2.0 through 5.3.5.0, 5.4.0.0 through 5.4.2.5, and 5.5.0.0 through 5.5.1.4 on Windows allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1021820 - http://secunia.com/advisories/34189 - http://www-1.ibm.com/support/docview.wss?uid=swg1IC59481 - http://www.vupen.com/english/advisori
.com/advisories/34189 - http://www-1.ibm.com/support/docview.wss?uid=swg1IC59481 - http://www.vupen.com/english/advisories/2009/0638 - http://www.securityfocus.com/bid/34034 - http://www-01.ibm.com/support/docview.wss?uid=swg21329223
CVE ID: CVE-2009-0870 State: PUBLISHED Published: 2009-03-10T20:00:00 Last Updated: 2024-08-07T04:48:52.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NFSv4 Server module in the kernel in Sun Solaris 10, and OpenSolaris before snv_111, allow local users to cause a denial of service (infinite loop and system hang) by accessing an hsfs filesystem that is shared through NFSv4, related to the rfs4_op_readdir function. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/0765 - http://www.vupen.com/english/advisories/2009/0635 - http://support.avaya.com/elmodocs2/security/ASA-2009-090.htm - http://sunsolve.sun.com/searc
lish/advisories/2009/0635 - http://support.avaya.com/elmodocs2/security/ASA-2009-090.htm - http://sunsolve.sun.com/search/document.do?assetkey=1-66-252469-1 - http://securitytracker.com/id?1021819 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-139462-02-1 - http://secunia.com/advisories/34371 - http://www.securityfocus.com/bid/34031 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49133 - http://secunia.com/advisories/34193
CVE ID: CVE-2009-0871 State: PUBLISHED Published: 2009-03-11T14:00:00 Last Updated: 2024-08-07T04:48:52.606Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SIP channel driver in Asterisk Open Source 1.4.22, 1.4.23, and 1.4.23.1; 1.6.0 before 1.6.0.6; 1.6.1 before 1.6.1.0-rc2; and Asterisk Business Edition C.2.3, with the pedantic option enabled, allows remote authenticated users to cause a denial of service (crash) via a SIP INVITE request without any headers, which triggers a NULL pointer dereference in the (1) sip_uri_headers_cmp and (2) sip_uri_params_cmp functions. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/52568 - http://www.securit
functions. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/52568 - http://www.securityfocus.com/bid/34070 - http://www.securitytracker.com/id?1021834 - http://www.securityfocus.com/archive/1/501656/100/0/threaded - http://bugs.digium.com/view.php?id=14417 - http://bugs.digium.com/view.php?id=13547 - http://downloads.digium.com/pub/security/AST-2009-002.html - http://www.vupen.com/english/advisories/2009/0667 - http://secunia.com/advisories/34229
CVE ID: CVE-2009-0872 State: PUBLISHED Published: 2009-03-11T14:00:00 Last Updated: 2024-08-07T04:48:52.592Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NFS server in Sun Solaris 10, and OpenSolaris before snv_111, does not properly implement the AUTH_NONE (aka sec=none) security mode in combination with other security modes, which allows remote attackers to bypass intended access restrictions and read or modify files, as demonstrated by a combination of the AUTH_NONE and AUTH_SYS security modes. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-66-253588-1 - http://support.avaya.com/elmodocs2/security/AS
es: - http://sunsolve.sun.com/search/document.do?assetkey=1-66-253588-1 - http://support.avaya.com/elmodocs2/security/ASA-2009-093.htm - http://osvdb.org/52559 - http://securitytracker.com/id?1021833 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49170 - http://www.vupen.com/english/advisories/2009/0658 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-139462-02-1 - http://www.securityfocus.com/bid/34063 - http://secunia.com/advisories/34429 - http://secunia.com/advisories/34213 - http://www.vupen.com/english/advisories/2009/0798
CVE ID: CVE-2009-0873 State: PUBLISHED Published: 2009-03-11T14:00:00 Last Updated: 2024-08-07T04:48:52.630Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NFS daemon (aka nfsd) in Sun Solaris 10 and OpenSolaris before snv_106, when NFSv3 is used, does not properly implement combinations of security modes, which allows remote attackers to bypass intended access restrictions and read or modify files, as demonstrated by a combination of the sec=sys and sec=krb5 security modes, related to modes that "override each other." Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/0814 - http://secunia.com/advisories/34435 - http
Container: References: - http://www.vupen.com/english/advisories/2009/0814 - http://secunia.com/advisories/34435 - http://securitytracker.com/id?1021832 - http://support.avaya.com/elmodocs2/security/ASA-2009-096.htm - http://sunsolve.sun.com/search/document.do?assetkey=1-21-139462-02-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49171 - http://www.vupen.com/english/advisories/2009/0657 - http://www.securityfocus.com/bid/34062 - http://secunia.com/advisories/34225 - http://osvdb.org/52560 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-250306-1
CVE ID: CVE-2009-0874 State: PUBLISHED Published: 2009-03-12T15:00:00 Last Updated: 2024-08-07T04:48:52.628Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the Doors subsystem in the kernel in Sun Solaris 8 through 10, and OpenSolaris before snv_94, allow local users to cause a denial of service (process hang), or possibly bypass file permissions or gain kernel-context privileges, via vectors including ones related to (1) an argument handling deadlock in a door server and (2) watchpoint problems in the door_call function. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1021840 - http://suns
Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1021840 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-242486-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-117350-61-1 - http://support.avaya.com/elmodocs2/security/ASA-2009-095.htm - http://www.vupen.com/english/advisories/2009/0673 - http://secunia.com/advisories/34227 - http://www.vupen.com/english/advisories/2009/0766 - http://secunia.com/advisories/34375 - http://www.securityfocus.com/bid/34081
CVE ID: CVE-2009-0875 State: PUBLISHED Published: 2009-03-12T15:00:00 Last Updated: 2024-08-07T04:48:52.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the Doors subsystem in the kernel in Sun Solaris 8 through 10, and OpenSolaris before snv_94, allows local users to cause a denial of service (process hang), or possibly bypass file permissions or gain kernel-context privileges, via vectors involving the time at which control is transferred from a caller to a door server. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1021840 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-242486-1 - http://sunsol
//www.securitytracker.com/id?1021840 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-242486-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-117350-61-1 - http://osvdb.org/52561 - http://support.avaya.com/elmodocs2/security/ASA-2009-095.htm - http://www.vupen.com/english/advisories/2009/0673 - http://secunia.com/advisories/34227 - http://www.vupen.com/english/advisories/2009/0766 - http://secunia.com/advisories/34375 - http://www.securityfocus.com/bid/34081
CVE ID: CVE-2009-0876 State: PUBLISHED Published: 2009-03-12T15:00:00 Last Updated: 2024-08-07T04:48:52.644Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sun xVM VirtualBox 2.0.0, 2.0.2, 2.0.4, 2.0.6r39760, 2.1.0, 2.1.2, and 2.1.4r42893 on Linux allows local users to gain privileges via a hardlink attack, which preserves setuid/setgid bits on Linux, related to DT_RPATH:$ORIGIN. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34080 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49193 - http://www.vupen.com/english/advisories/2009/0674 - http://www.openwall.com/lists/oss-security/2009/03/15/1 - https://bugs.gentoo.org/show
om/english/advisories/2009/0674 - http://www.openwall.com/lists/oss-security/2009/03/15/1 - https://bugs.gentoo.org/show_bug.cgi?id=260331 - http://www.openwall.com/lists/oss-security/2009/03/17/2 - http://www.virtualbox.org/ticket/3444 - http://www.securitytracker.com/id?1021841 - http://secunia.com/advisories/34232 - http://osvdb.org/52580 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-254568-1
CVE ID: CVE-2009-0877 State: PUBLISHED Published: 2009-03-12T15:00:00 Last Updated: 2024-08-07T04:48:52.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Communications Express allow remote attackers to inject arbitrary web script or HTML via the (1) Full Name or (2) Subject field. Additional Analyst Notes: - CVE Program Container: References: - http://sosoblood.freehostia.com/SJSC/html_injection.gif - http://www.securityfocus.com/archive/1/501672/100/0/threaded - http://www.securityfocus.com/bid/34083 - http://osvdb.org/52718
CVE ID: CVE-2009-0878 State: PUBLISHED Published: 2009-03-12T15:00:00 Last Updated: 2024-08-07T04:48:52.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: The read_game_map function in src/terrain_translation.cpp in Wesnoth before r32987 allows remote attackers to cause a denial of service (memory consumption and daemon hang) via a map with a large (1) width or (2) height. Additional Analyst Notes: - CVE Program Container: References: - http://launchpad.net/bugs/336396 - http://packages.debian.org/changelogs/pool/main/w/wesnoth/wesnoth_1.5.12-1/changelog - https://exchange.xforce.ibmcloud.com/vulnerabilities/49294 - http://packages.debian.org/changelogs/pool/main/w/wesnoth/wesno
s://exchange.xforce.ibmcloud.com/vulnerabilities/49294 - http://packages.debian.org/changelogs/pool/main/w/wesnoth/wesnoth_1.4.7-4/changelog - http://svn.gna.org/viewcvs/wesnoth/trunk/src/terrain_translation.cpp?r2=32987&rev=32987&r1=31859&dir_pagestart=200 - http://svn.gna.org/viewcvs/wesnoth/trunk/src/terrain_translation.cpp?rev=33078&dir_pagestart=200&view=log - https://gna.org/bugs/index.php?13031 - http://launchpad.net/bugs/335089
CVE ID: CVE-2009-0879 State: PUBLISHED Published: 2009-03-12T15:00:00 Last Updated: 2024-08-07T04:48:52.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CIM server in IBM Director before 5.20.3 Service Update 2 on Windows allows remote attackers to cause a denial of service (daemon crash) via a long consumer name, as demonstrated by an M-POST request to a long /CIMListener/ URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/0656 - http://osvdb.org/52615 - http://www.securityfocus.com/archive/1/501638/100/0/threaded - http://secunia.com/advisories/34212 - https://www14.software.ibm.com/webapp/iwm/web/reg/downlo
1/501638/100/0/threaded - http://secunia.com/advisories/34212 - https://www14.software.ibm.com/webapp/iwm/web/reg/download.do?source=dmp&S_PKG=director_x_520&S_TACT=sms&lang=en_US&cp=UTF-8 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49285 - http://securitytracker.com/id?1021825 - http://www.securityfocus.com/bid/34061 - https://www.exploit-db.com/exploits/8190 - https://www.sec-consult.com/files/20090305-1_IBM_director_DoS.txt
CVE ID: CVE-2009-0880 State: PUBLISHED Published: 2009-03-12T15:00:00 Last Updated: 2024-08-07T04:48:52.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the CIM server in IBM Director before 5.20.3 Service Update 2 on Windows allows remote attackers to load and execute arbitrary local DLL code via a .. (dot dot) in a /CIMListener/ URI in an M-POST request. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/0656 - http://osvdb.org/52616 - http://www.securityfocus.com/archive/1/501639/100/0/threaded - http://www.securityfocus.com/bid/34065 - https://www.sec-consult.com/files/20090305-
m/archive/1/501639/100/0/threaded - http://www.securityfocus.com/bid/34065 - https://www.sec-consult.com/files/20090305-2_IBM_director_privilege_escalation.txt - http://secunia.com/advisories/34212 - https://www14.software.ibm.com/webapp/iwm/web/reg/download.do?source=dmp&S_PKG=director_x_520&S_TACT=sms&lang=en_US&cp=UTF-8 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49286
CVE ID: CVE-2009-0881 State: PUBLISHED Published: 2009-03-12T15:00:00 Last Updated: 2024-08-07T04:48:52.669Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in ejemplo/paises.php in isiAJAX 1 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/49113 - https://www.exploit-db.com/exploits/8167
CVE ID: CVE-2009-0882 State: PUBLISHED Published: 2009-03-12T15:00:00 Last Updated: 2024-08-07T04:48:52.645Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in nForum 1.5 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to showtheme.php and the (2) user parameter to userinfo.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34030 - http://www.securityfocus.com/archive/1/501560/100/0/threaded
CVE ID: CVE-2009-0883 State: PUBLISHED Published: 2009-03-12T15:00:00 Last Updated: 2024-08-07T04:48:52.697Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Blue Eye CMS 1.0.0 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the BlueEyeCMS_login cookie parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/49104 - http://www.securityfocus.com/bid/34022 - https://www.exploit-db.com/exploits/8165
CVE ID: CVE-2009-0884 State: PUBLISHED Published: 2009-03-12T15:00:00 Last Updated: 2024-08-07T04:48:52.672Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in FileZilla Server before 0.9.31 allows remote attackers to cause a denial of service via unspecified vectors related to SSL/TLS packets. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?release_id=665428 - http://www.securityfocus.com/bid/34006 - http://www.securitytracker.com/id?1021812 - http://secunia.com/advisories/34089 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49107 - http://filezilla-project.org/index.php - http://www.vupen.com/e
s://exchange.xforce.ibmcloud.com/vulnerabilities/49107 - http://filezilla-project.org/index.php - http://www.vupen.com/english/advisories/2009/0603
CVE ID: CVE-2009-0885 State: PUBLISHED Published: 2009-03-12T15:00:00 Last Updated: 2024-08-07T04:48:52.606Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple heap-based buffer overflows in Media Commands 1.0 allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a long string in a (1) M3U, (2) M3l, (3) TXT, and (4) LRC playlist file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33958 - http://www.securityfocus.com/data/vulnerabilities/exploits/33958-2.py - http://www.vupen.com/english/advisories/2009/0583 - http://osvdb.org/52346 - https://exchange.xforce.ibmcloud.com/vulner
http://www.vupen.com/english/advisories/2009/0583 - http://osvdb.org/52346 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49035 - http://www.securityfocus.com/data/vulnerabilities/exploits/33958.rb - http://www.securityfocus.com/data/vulnerabilities/exploits/33958.py - http://secunia.com/advisories/34122 - https://www.exploit-db.com/exploits/8135
CVE ID: CVE-2009-0886 State: PUBLISHED Published: 2009-03-12T15:00:00 Last Updated: 2024-08-07T04:48:52.663Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in login.php in OneOrZero Helpdesk 1.6.5.7 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the default_language parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8169 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49114 - http://www.securityfocus.com/bid/34029 - https://www.exploit-db.com/exploits/8168
CVE ID: CVE-2009-0887 State: PUBLISHED Published: 2009-03-12T15:00:00 Last Updated: 2024-08-07T04:48:52.627Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in the _pam_StrTok function in libpam/pam_misc.c in Linux-PAM (aka pam) 1.0.3 and earlier, when a configuration file contains non-ASCII usernames, might allow remote attackers to cause a denial of service, and might allow remote authenticated users to obtain login access with a different user's non-ASCII username, via a login attempt. Additional Analyst Notes: - CVE Program Container: References: - http://pam.cvs.sourceforge.net/viewvc/pam/Linux-PAM/libpam/pam_misc.c?r1=1.9&amp%3Br2=1.10&amp%3Bview=pat
References: - http://pam.cvs.sourceforge.net/viewvc/pam/Linux-PAM/libpam/pam_misc.c?r1=1.9&amp%3Br2=1.10&amp%3Bview=patch - http://www.mandriva.com/security/advisories?name=MDVSA-2009:077 - http://openwall.com/lists/oss-security/2009/03/05/1 - https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00398.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/49110 - http://pam.cvs.sourceforge.net/viewvc/pam/Linux-PAM/libpam/pam_misc.c?view=log - http://www.securityfocus.com/bid/34010 - https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00420.html - http://secunia.com/advisories/34733
CVE ID: CVE-2009-0888 State: PUBLISHED Published: 2009-06-11T15:00:00 Last Updated: 2024-08-07T04:48:52.661Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the JBIG2 filter in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 might allow remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2009-0510, CVE-2009-0511, CVE-2009-0512, and CVE-2009-0889. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35274 - http://www.vupen.com/english/advisories/2009/1547 - http://www.us-cer
rences: - http://www.securityfocus.com/bid/35274 - http://www.vupen.com/english/advisories/2009/1547 - http://www.us-cert.gov/cas/techalerts/TA09-161A.html - http://secunia.com/advisories/35734 - http://www.redhat.com/support/errata/RHSA-2009-1109.html - http://www.adobe.com/support/security/bulletins/apsb09-07.html - http://securitytracker.com/id?1022361 - http://security.gentoo.org/glsa/glsa-200907-06.xml - http://secunia.com/advisories/34580 - http://secunia.com/advisories/35496
CVE ID: CVE-2009-0889 State: PUBLISHED Published: 2009-06-11T15:00:00 Last Updated: 2024-08-07T04:48:52.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the JBIG2 filter in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 might allow remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2009-0510, CVE-2009-0511, CVE-2009-0512, and CVE-2009-0888. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35274 - http://www.vupen.com/english/advisories/2009/1547 - http://www.us-cer
CVE ID: CVE-2009-0891 State: PUBLISHED Published: 2009-03-25T01:00:00 Last Updated: 2024-08-07T04:48:52.633Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Web Services Security component in IBM WebSphere Application Server 7.0 before Fix Pack 1 (7.0.0.1), 6.1 before Fix Pack 23 (6.1.0.23),and 6.0.2 before Fix Pack 33 (6.0.2.33) does not properly enforce (1) nonce and (2) timestamp expiration values in WS-Security bindings as stored in the com.ibm.wsspi.wssecurity.core custom property, which allows remote authenticated users to conduct session hijacking attacks. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg2
cks. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg27007951 - http://secunia.com/advisories/34131 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49391 - http://www-01.ibm.com/support/docview.wss?uid=swg27006876 - http://www-01.ibm.com/support/docview.wss?uid=swg27014463 - http://www-1.ibm.com/support/search.wss?rs=0&q=PK66676&apar=only
CVE ID: CVE-2009-0892 State: PUBLISHED Published: 2009-03-31T10:00:00 Last Updated: 2024-08-07T04:48:52.707Z Vendors: n/a Products: n/a Problem Types: n/a Description: The administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.23 and 7.0 before 7.0.0.3 allows attackers to hijack user sessions in "specific scenarios" related to a forced logout. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg27007951 - http://www-01.ibm.com/support/docview.wss?uid=swg1PK74966 - http://www.securityfocus.com/bid/34501 - http://secunia.com/advisories/34131 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49499 - ht
us.com/bid/34501 - http://secunia.com/advisories/34131 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49499 - http://www-01.ibm.com/support/docview.wss?uid=swg27014463
CVE ID: CVE-2009-0893 State: PUBLISHED Published: 2009-06-02T18:00:00Z Last Updated: 2024-09-16T23:30:59.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple heap-based buffer overflows in xvidcore/src/decoder.c in the xvidcore library in Xvid before 1.2.2, as used by Windows Media Player and other applications, allow remote attackers to execute arbitrary code by providing a crafted macroblock (aka MBlock) number in a video stream in a crafted movie file that triggers heap memory corruption, related to a "missing resync marker range check" and the (1) decoder_iframe, (2) decoder_pframe, and (3) decoder_bframe functions. Additional Analyst Notes: - CVE Program Container: R
coder_iframe, (2) decoder_pframe, and (3) decoder_bframe functions. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35274 - http://www.vupen.com/english/advisories/2009/1468 - https://www.it-isac.org/postings/cyber/alertdetail.php?id=4634&selyear=2009&menutype=menupublic - http://www.securityfocus.com/bid/35156 - http://cvs.xvid.org/cvs/viewvc.cgi/xvidcore/src/decoder.c - http://cvs.xvid.org/cvs/viewvc.cgi/xvidcore/src/decoder.c?r1=1.80&r2=1.81 - http://www.xvid.org/News.64.0.html?&cHash=0170b4e439&tx_ttnews%5BbackPid%5D=64&tx_ttnews%5Btt_news%5D=7