Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-3985 State: PUBLISHED Published: 2009-12-17T17:00:00 Last Updated: 2024-08-07T06:45:50.919Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote attackers to associate spoofed content with an invalid URL by setting document.location to this URL, and then writing arbitrary web script or HTML to the associated blank document, a related issue to CVE-2009-2654. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1023343 - http://secunia.com/advisories/37704 - http://secunia.com/advisories/37699 - https://oval.cisecurity.org/repository/s
3 - http://secunia.com/advisories/37704 - http://secunia.com/advisories/37699 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8480 - http://securitytracker.com/id?1023342 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54808 - http://www.vupen.com/english/advisories/2009/3547 - http://secunia.com/advisories/37881 - https://bugzilla.mozilla.org/show_bug.cgi?id=514232 - https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01034.html - http://secunia.com/advisories/37785 - https://bugzilla.redhat.com/show_bug.cgi?id=546726 - http://www.ubuntu.com/usn/USN-874-1 - http://secunia.com/advisories/37813 - https://www.redhat.com/archi
cgi?id=546726 - http://www.ubuntu.com/usn/USN-874-1 - http://secunia.com/advisories/37813 - https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00995.html - http://www.ubuntu.com/usn/USN-873-1 - http://www.securityfocus.com/bid/37349 - https://rhn.redhat.com/errata/RHSA-2009-1674.html - https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01041.html - http://www.debian.org/security/2009/dsa-1956 - http://www.mozilla.org/security/announce/2009/mfsa2009-69.html - http://secunia.com/advisories/37856 - http://www.securityfocus.com/bid/37370 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9911 - http://www.novell.co
370 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9911 - http://www.novell.com/linux/security/advisories/2009_63_firefox.html
CVE ID: CVE-2009-3986 State: PUBLISHED Published: 2009-12-17T17:00:00 Last Updated: 2024-08-07T06:45:50.896Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote attackers to execute arbitrary JavaScript with chrome privileges by leveraging a reference to a chrome window from a content window, related to the window.opener property. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37704 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8489 - http://secunia.com/advisories/37699 - https://oval.cisecurity.org/r
arch/definition/oval%3Aorg.mitre.oval%3Adef%3A8489 - http://secunia.com/advisories/37699 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11568 - http://www.vupen.com/english/advisories/2009/3547 - http://secunia.com/advisories/37881 - https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01034.html - http://secunia.com/advisories/37785 - http://securitytracker.com/id?1023345 - http://www.mozilla.org/security/announce/2009/mfsa2009-70.html - http://www.ubuntu.com/usn/USN-874-1 - http://secunia.com/advisories/37813 - https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00995.html - https://bugzilla.mozilla.org/show
https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00995.html - https://bugzilla.mozilla.org/show_bug.cgi?id=522430 - http://www.ubuntu.com/usn/USN-873-1 - https://bugzilla.redhat.com/show_bug.cgi?id=546724 - http://www.securityfocus.com/bid/37365 - http://www.securityfocus.com/bid/37349 - https://rhn.redhat.com/errata/RHSA-2009-1674.html - https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01041.html - http://www.debian.org/security/2009/dsa-1956 - http://secunia.com/advisories/37856 - http://securitytracker.com/id?1023344 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54803 - http://www.novell.com/linux/security/advisories/2009_63_firefo
ps://exchange.xforce.ibmcloud.com/vulnerabilities/54803 - http://www.novell.com/linux/security/advisories/2009_63_firefox.html
CVE ID: CVE-2009-3987 State: PUBLISHED Published: 2009-12-17T17:00:00 Last Updated: 2024-08-07T06:45:50.904Z Vendors: n/a Products: n/a Problem Types: n/a Description: The GeckoActiveXObject function in Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, generates different exception messages depending on whether the referenced COM object is listed in the registry, which allows remote attackers to obtain potentially sensitive information about installed software by making multiple calls that specify the ProgID values of different COM objects. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37699 - https://bugzilla.m
dditional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37699 - https://bugzilla.mozilla.org/show_bug.cgi?id=503451 - http://www.vupen.com/english/advisories/2009/3547 - http://secunia.com/advisories/37785 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7958 - https://bugzilla.redhat.com/show_bug.cgi?id=546729 - http://www.securityfocus.com/bid/37349 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54798 - http://securitytracker.com/id?1023347 - http://www.securityfocus.com/bid/37360 - http://securitytracker.com/id?1023346 - http://www.mozilla.org/security/announce/2009/mfsa2009-71.html
CVE ID: CVE-2009-3988 State: PUBLISHED Published: 2010-02-21T17:00:00 Last Updated: 2024-08-07T06:45:51.012Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly restrict read access to object properties in showModalDialog, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via crafted dialogArguments values. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-895-1 - http://secunia.com/advisories/38847 - http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00001.html -
-1 - http://secunia.com/advisories/38847 - http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00001.html - http://www.mandriva.com/security/advisories?name=MDVSA-2010:042 - http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035367.html - http://www.redhat.com/support/errata/RHSA-2010-0112.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035346.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8355 - http://www.debian.org/security/2010/dsa-1999 - http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035426.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/563
ject.org/pipermail/package-announce/2010-February/035426.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/56362 - http://www.ubuntu.com/usn/USN-896-1 - http://www.vupen.com/english/advisories/2010/0405 - http://secunia.com/advisories/37242 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9384 - http://www.mozilla.org/security/announce/2010/mfsa2010-04.html - https://bugzilla.mozilla.org/show_bug.cgi?id=504862
CVE ID: CVE-2009-3989 State: PUBLISHED Published: 2010-02-03T19:00:00 Last Updated: 2024-08-07T06:45:50.966Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bugzilla before 3.0.11, 3.2.x before 3.2.6, 3.4.x before 3.4.5, and 3.5.x before 3.5.3 does not block access to files and directories that are used by custom installations, which allows remote attackers to obtain sensitive information via requests for (1) CVS/, (2) contrib/, (3) docs/en/xml/, (4) t/, or (5) old-params.txt. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=314871 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56003 - https://bugzilla.mozilla.or
la.org/show_bug.cgi?id=314871 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56003 - https://bugzilla.mozilla.org/show_bug.cgi?id=434801 - http://www.vupen.com/english/advisories/2010/0261 - http://www.securityfocus.com/bid/38025 - http://www.securityfocus.com/archive/1/509282/100/0/threaded - http://secunia.com/advisories/38443
CVE ID: CVE-2009-3990 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2009-3991 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2009-3992 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2009-3993 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2009-3994 State: PUBLISHED Published: 2009-12-08T17:00:00 Last Updated: 2024-08-07T06:45:50.962Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the GetUID function in src-IL/src/il_dicom.c in DevIL 1.7.8 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a crafted DICOM file. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2010-January/033809.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-January/033806.html - http://www.securityfocus.com/archive/1/508217/100/0/threaded - http://secunia.com
ge-announce/2010-January/033806.html - http://www.securityfocus.com/archive/1/508217/100/0/threaded - http://secunia.com/secunia_research/2009-51/ - http://sourceforge.net/tracker/download.php?group_id=4470&atid=304470&file_id=353841&aid=2908728 - http://secunia.com/advisories/37955 - http://secunia.com/advisories/37507 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54547 - http://www.securityfocus.com/bid/37207 - http://sourceforge.net/tracker/?func=detail&aid=2908728&group_id=4470&atid=304470
CVE ID: CVE-2009-3995 State: PUBLISHED Published: 2009-12-18T18:00:00 Last Updated: 2024-08-07T06:45:51.031Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple heap-based buffer overflows in IN_MOD.DLL (aka the Module Decoder Plug-in) in Winamp before 5.57, and libmikmod 3.1.12, might allow remote attackers to execute arbitrary code via (1) crafted samples or (2) crafted instrument definitions in an Impulse Tracker file. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2010:151 - http://secunia.com/secunia_research/2009-53/ - http://se
tp://www.mandriva.com/security/advisories?name=MDVSA-2010:151 - http://secunia.com/secunia_research/2009-53/ - http://secunia.com/secunia_research/2009-52/ - http://forums.winamp.com/showthread.php?threadid=315355 - http://www.vupen.com/english/advisories/2010/1107 - http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html - http://www.securityfocus.com/bid/37374 - http://www.vupen.com/english/advisories/2010/1957 - http://secunia.com/advisories/37495 - http://www.vupen.com/english/advisories/2009/3575 - http://www.securityfocus.com/archive/1/508527/100/0/threaded - http://secunia.com/advisories/40799 - http://www.securityfocus.com/archive/1/508526/100/0/threaded - http://s
threaded - http://secunia.com/advisories/40799 - http://www.securityfocus.com/archive/1/508526/100/0/threaded - http://secunia.com/secunia_research/2009-55/
CVE ID: CVE-2009-3996 State: PUBLISHED Published: 2009-12-18T19:00:00 Last Updated: 2024-08-07T06:45:51.134Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in IN_MOD.DLL (aka the Module Decoder Plug-in) in Winamp before 5.57, and libmikmod 3.1.12, might allow remote attackers to execute arbitrary code via an Ultratracker file. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2010:151 - http://forums.winamp.com/showthread.php?threadid=315355 - http://www.vupen.com/english/advisories/2010/1107 - http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html - http://www.sec
glish/advisories/2010/1107 - http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html - http://www.securityfocus.com/bid/37374 - http://secunia.com/advisories/37495 - http://www.vupen.com/english/advisories/2009/3575 - http://www.securityfocus.com/archive/1/508528/100/0/threaded - http://secunia.com/secunia_research/2009-56/ - http://secunia.com/secunia_research/2009-55/
CVE ID: CVE-2009-3997 State: PUBLISHED Published: 2009-12-18T18:00:00 Last Updated: 2024-08-07T06:45:50.964Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in IN_MOD.DLL (aka the Module Decoder Plug-in) in Winamp before 5.57 might allow remote attackers to execute arbitrary code via an Oktalyzer file that triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://forums.winamp.com/showthread.php?threadid=315355 - http://www.securityfocus.com/archive/1/508524/100/0/threaded - http://www.securityfocus.com/bid/37374 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15715 - htt
focus.com/bid/37374 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15715 - http://secunia.com/advisories/37495 - http://www.vupen.com/english/advisories/2009/3575 - http://secunia.com/secunia_research/2009-57/
CVE ID: CVE-2009-3999 State: PUBLISHED Published: 2010-01-20T22:00:00 Last Updated: 2024-08-07T06:45:50.879Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in goform/formExportDataLogs in HP Power Manager before 4.2.10 allows remote attackers to execute arbitrary code via a long fileName parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/secunia_research/2009-47/ - http://securityreason.com/securityalert/8482 - http://secunia.com/advisories/37280 - http://marc.info/?l=bugtraq&m=126393370331959&w=2 - http://securitytracker.com/id?1023470 - http://marc.info/?l=bugtraq&m=126393370331959&w=2 - http://www.security
59&w=2 - http://securitytracker.com/id?1023470 - http://marc.info/?l=bugtraq&m=126393370331959&w=2 - http://www.securityfocus.com/bid/37867
CVE ID: CVE-2009-4000 State: PUBLISHED Published: 2010-01-20T22:00:00Z Last Updated: 2024-09-16T17:09:00.730Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in goform/formExportDataLogs in HP Power Manager before 4.2.10 allows remote attackers to overwrite arbitrary files, and execute arbitrary code, via directory traversal sequences in the fileName parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37280 - http://secunia.com/secunia_research/2009-48/ - http://marc.info/?l=bugtraq&m=126393370331959&w=2 - http://securitytracker.com/id?1023470 - http://marc.info/?l=bugtraq&m=126393370331959&w=2
ugtraq&m=126393370331959&w=2 - http://securitytracker.com/id?1023470 - http://marc.info/?l=bugtraq&m=126393370331959&w=2 - http://www.securityfocus.com/bid/37873
CVE ID: CVE-2009-4001 State: PUBLISHED Published: 2010-03-12T20:00:00 Last Updated: 2024-08-07T06:45:50.924Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in XnView before 1.97.2 might allow remote attackers to execute arbitrary code via a DICOM image with crafted dimensions, leading to a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/secunia_research/2009-60/ - http://www.securityfocus.com/archive/1/509999/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/56802 - http://www.securityfocus.com/bid/38629 - http://newsgroup.xnview.com/viewtopic.php?f=35&t=19469 - http://www.osvdb.o
2 - http://www.securityfocus.com/bid/38629 - http://newsgroup.xnview.com/viewtopic.php?f=35&t=19469 - http://www.osvdb.org/62829
CVE ID: CVE-2009-4002 State: PUBLISHED Published: 2010-01-21T19:00:00 Last Updated: 2024-08-07T06:45:50.986Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Adobe Shockwave Player before 11.5.6.606 allows remote attackers to execute arbitrary code via a crafted 3D model in a Shockwave file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/37870 - http://www.securityfocus.com/archive/1/509062/100/0/threaded - http://secunia.com/advisories/37888 - https://exchange.xforce.ibmcloud.com/vulnerabilities/55758 - http://securitytracker.com/id?1023481 - https://oval.cisecurity.org/repository/search/definition/ov
nerabilities/55758 - http://securitytracker.com/id?1023481 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8311 - http://www.vupen.com/english/advisories/2010/0171 - http://secunia.com/secunia_research/2009-61/ - http://www.adobe.com/support/security/bulletins/apsb10-03.html
CVE ID: CVE-2009-4003 State: PUBLISHED Published: 2010-01-21T19:00:00 Last Updated: 2024-08-07T06:45:50.940Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in Adobe Shockwave Player before 11.5.6.606 allow remote attackers to execute arbitrary code via (1) an unspecified block type in a Shockwave file, leading to a heap-based buffer overflow; and might allow remote attackers to execute arbitrary code via (2) an unspecified 3D block in a Shockwave file, leading to memory corruption; or (3) a crafted 3D model in a Shockwave file, leading to heap memory corruption. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.co
to heap memory corruption. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/509053/100/0/threaded - http://secunia.com/secunia_research/2009-63/ - http://secunia.com/advisories/37888 - http://securitytracker.com/id?1023481 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8538 - http://secunia.com/secunia_research/2010-1/ - http://www.securityfocus.com/archive/1/509055/100/0/threaded - http://www.securityfocus.com/bid/37872 - http://secunia.com/secunia_research/2009-62/ - http://www.vupen.com/english/advisories/2010/0171 - http://www.adobe.com/support/security/bulletins/apsb10-03.html - http://www.
ww.vupen.com/english/advisories/2010/0171 - http://www.adobe.com/support/security/bulletins/apsb10-03.html - http://www.securityfocus.com/archive/1/509058/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/55759
CVE ID: CVE-2009-4004 State: PUBLISHED Published: 2009-11-20T02:00:00 Last Updated: 2024-08-07T06:45:51.065Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the kvm_vcpu_ioctl_x86_setup_mce function in arch/x86/kvm/x86.c in the KVM subsystem in the Linux kernel before 2.6.32-rc7 allows local users to cause a denial of service (memory corruption) or possibly gain privileges via a KVM_X86_SETUP_MCE IOCTL request that specifies a large number of Machine Check Exception (MCE) banks. Additional Analyst Notes: - CVE Program Container: References: - http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.32-rc7 - http://www.securityfocus.com/bid/37035 - http:
ttp://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.32-rc7 - http://www.securityfocus.com/bid/37035 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a9e38c3e01ad242fe2a625354cf065c34b01e3aa - http://www.vupen.com/english/advisories/2009/3267 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54302 - http://secunia.com/advisories/37357
CVE ID: CVE-2009-4005 State: PUBLISHED Published: 2009-11-20T02:00:00 Last Updated: 2024-08-07T06:45:50.945Z Vendors: n/a Products: n/a Problem Types: n/a Description: The collect_rx_frame function in drivers/isdn/hisax/hfc_usb.c in the Linux kernel before 2.6.32-rc7 allows attackers to have an unspecified impact via a crafted HDLC packet that arrives over ISDN and triggers a buffer under-read. Additional Analyst Notes: - CVE Program Container: References: - http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.32-rc7 - http://secunia.com/advisories/38276 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:030 - http://www.securityfocus.com/bid/37036 - https://exchange.
://www.mandriva.com/security/advisories?name=MDVSA-2010:030 - http://www.securityfocus.com/bid/37036 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54310 - http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00002.html - http://www.ubuntu.com/usn/usn-864-1 - http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html - http://secunia.com/advisories/37720 - http://secunia.com/advisories/37909 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11155 - http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.html - http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00007.html - http://www.vupen.co
2009-12/msg00005.html - http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00007.html - http://www.vupen.com/english/advisories/2009/3267 - http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00005.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=286e633ef0ff5bb63c07b4516665da8004966fec - http://www.debian.org/security/2010/dsa-2005 - https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00777.html - http://secunia.com/advisories/38017
CVE ID: CVE-2009-4006 State: PUBLISHED Published: 2009-11-20T11:00:00 Last Updated: 2024-08-07T06:45:51.054Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the TEA decoding algorithm in RhinoSoft Serv-U FTP server 7.0.0.1, 9.0.0.5, and other versions before 9.1.0.0 allows remote attackers to execute arbitrary code via a long hexadecimal string. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/60427 - http://www.securitytracker.com/id?1023199 - http://www.securityfocus.com/archive/1/507955/100/0/threaded - http://secunia.com/secunia_research/2009-46/ - https://oval.cisecurity.org/repository/search/definition/oval%
threaded - http://secunia.com/secunia_research/2009-46/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6142 - http://www.vupen.com/english/advisories/2009/3277 - http://www.serv-u.com/releasenotes/ - http://secunia.com/advisories/37228 - http://www.securityfocus.com/bid/37051 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54322
CVE ID: CVE-2009-4007 State: PUBLISHED Published: 2009-12-28T19:00:00 Last Updated: 2024-08-07T06:45:50.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the NormaliseTrainConsist function in src/train_cmd.cpp in OpenTTD before 0.7.5-RC1 allows remote attackers to cause a denial of service (daemon crash) via certain game actions involving a wagon and a dual-headed engine. Additional Analyst Notes: - CVE Program Container: References: - http://vcs.openttd.org/svn/changeset/18462/trunk/src/train_cmd.cpp - http://www.securityfocus.com/bid/37487 - http://binaries.openttd.org/releases/0.7.5/changelog.txt - http://osvdb.org/61356 - http://www.openttd.org/