Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2011-3918 State: PUBLISHED Published: 2012-10-07T15:00:00Z Last Updated: 2024-09-16T17:44:12.890Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Zygote process in Android 4.0.3 and earlier accepts fork requests from processes with arbitrary UIDs, which allows remote attackers to cause a denial of service (reboot loop) via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://www.ai-lab.it/merlo/publications/DoSAndroid.pdf - https://code.google.com/p/android-source-browsing/source/detail?repo=platform--system--core&r=e7fd911fd42b
CVE ID: CVE-2011-3919 State: PUBLISHED Published: 2012-01-07T11:00:00 Last Updated: 2024-08-06T23:53:32.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in libxml2, as used in Google Chrome before 16.0.912.75, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/51300 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14504 - http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00002.html - http://lists.apple.com/archives/security-announce/2012
s.opensuse.org/opensuse-security-announce/2013-11/msg00002.html - http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html - http://support.apple.com/kb/HT5503 - http://rhn.redhat.com/errata/RHSA-2013-0217.html - http://googlechromereleases.blogspot.com/2012/01/stable-channel-update.html - http://code.google.com/p/chromium/issues/detail?id=107128 - http://secunia.com/advisories/55568 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:005 - http://www.securitytracker.com/id?1026487 - http://secunia.com/advisories/47449 - http://support.apple.com/kb/HT5281 - http://lists.apple.com/archives/security-announce/2012/May/msg00001.html - http://www.debian.org/security/2012
CVE ID: CVE-2011-3921 State: PUBLISHED Published: 2012-01-07T11:00:00 Last Updated: 2024-08-06T23:53:32.347Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Google Chrome before 16.0.912.75 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving animation frames. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/51300 - http://code.google.com/p/chromium/issues/detail?id=106672 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13995 - http://googlechromereleases.blogspot.com/2012/01/stable-channel-update.
definition/oval%3Aorg.mitre.oval%3Adef%3A13995 - http://googlechromereleases.blogspot.com/2012/01/stable-channel-update.html - http://www.securitytracker.com/id?1026487 - http://secunia.com/advisories/47449
CVE ID: CVE-2011-3922 State: PUBLISHED Published: 2012-01-07T11:00:00 Last Updated: 2024-08-06T23:53:31.668Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Google Chrome before 16.0.912.75 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to glyph handling. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/51300 - http://googlechromereleases.blogspot.com/2012/01/stable-channel-update.html - http://code.google.com/p/chromium/issues/detail?id=108006 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A148
ium/issues/detail?id=108006 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14871 - http://www.securitytracker.com/id?1026487 - http://secunia.com/advisories/47449
CVE ID: CVE-2011-3923 State: PUBLISHED Published: 2019-11-01T13:57:37 Last Updated: 2024-08-06T23:53:32.156Z Vendors: Apache Products: Struts Problem Types: Other Description: Apache Struts before 2.3.1.2 allows remote attackers to bypass security protections in the ParameterInterceptor class and execute arbitrary commands. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/24874 - http://www.securityfocus.com/bid/51628 - https://security-tracker.debian.org/tracker/CVE-2011-3923 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-3923 - http://seclists.org/fulldisclosure/2014/Jul/38 - http://www.securitytracker.com/id?1026575 - https://exch
VE-2011-3923 - http://seclists.org/fulldisclosure/2014/Jul/38 - http://www.securitytracker.com/id?1026575 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72585
CVE ID: CVE-2011-3924 State: PUBLISHED Published: 2012-01-24T02:00:00 Last Updated: 2024-08-06T23:53:32.162Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Google Chrome before 16.0.912.77 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to DOM selections. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2012/01/stable-channel-update_23.html - http://support.apple.com/kb/HT5485 - http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html - http://support.apple.com/kb/HT5503 - http://code.google.com/p/chromium/issu
s/security-announce/2012/Sep/msg00003.html - http://support.apple.com/kb/HT5503 - http://code.google.com/p/chromium/issues/detail?id=106484 - http://www.securitytracker.com/id?1026569 - http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html - http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html - http://support.apple.com/kb/HT5400 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13887 - http://secunia.com/advisories/47694
CVE ID: CVE-2011-3925 State: PUBLISHED Published: 2012-01-24T02:00:00 Last Updated: 2024-08-06T23:53:32.219Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the Safe Browsing feature in Google Chrome before 16.0.912.75 allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via vectors related to a navigation entry and an interstitial page. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2012/01/stable-channel-update_23.html - http://code.google.com/p/chromium/issues/detail?id=107182 - https://oval.cisecurity.org/repository/searc
pdate_23.html - http://code.google.com/p/chromium/issues/detail?id=107182 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14538 - http://www.securitytracker.com/id?1026487 - http://secunia.com/advisories/47449
CVE ID: CVE-2011-3926 State: PUBLISHED Published: 2012-01-24T02:00:00 Last Updated: 2024-08-06T23:53:32.128Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the tree builder in Google Chrome before 16.0.912.77 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2012/01/stable-channel-update_23.html - http://code.google.com/p/chromium/issues/detail?id=109556 - http://support.apple.com/kb/HT5485 - http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html - http://support.
support.apple.com/kb/HT5485 - http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html - http://support.apple.com/kb/HT5503 - http://www.securitytracker.com/id?1026569 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14552 - http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html - http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html - http://support.apple.com/kb/HT5400 - http://secunia.com/advisories/47694
CVE ID: CVE-2011-3927 State: PUBLISHED Published: 2012-01-24T02:00:00 Last Updated: 2024-08-06T23:53:32.285Z Vendors: n/a Products: n/a Problem Types: n/a Description: Skia, as used in Google Chrome before 16.0.912.77, does not perform all required initialization of values, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2012/01/stable-channel-update_23.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13948 - http://www.securitytracker.com/id?1026569 - http://code.google
y/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13948 - http://www.securitytracker.com/id?1026569 - http://code.google.com/p/chromium/issues/detail?id=108605 - http://secunia.com/advisories/47694
CVE ID: CVE-2011-3928 State: PUBLISHED Published: 2012-01-24T02:00:00 Last Updated: 2024-08-06T23:53:32.466Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Google Chrome before 16.0.912.77 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to DOM handling. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2012/01/stable-channel-update_23.html - http://www.securitytracker.com/id?1026774 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14441 - http://www.securitytracker.com/id?1026569 - http:/
rg/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14441 - http://www.securitytracker.com/id?1026569 - http://secunia.com/advisories/48377 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73809 - http://lists.apple.com/archives/security-announce/2012/Mar/msg00003.html - http://code.google.com/p/chromium/issues/detail?id=108461 - http://secunia.com/advisories/47694 - http://secunia.com/advisories/48288 - http://lists.apple.com/archives/security-announce/2012/Mar/msg00001.html
CVE ID: CVE-2011-3929 State: PUBLISHED Published: 2012-08-20T18:00:00 Last Updated: 2024-08-06T23:53:32.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: The avpriv_dv_produce_packet function in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) and possibly execute arbitrary code via a crafted DV file. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1479-1 - http://git.libav.org/?p=libav.git%3Ba=commitdiff%3Bh=5a396bb3a66a
: References: - http://www.ubuntu.com/usn/USN-1479-1 - http://git.libav.org/?p=libav.git%3Ba=commitdiff%3Bh=5a396bb3a66a61a68b80f2369d0249729bf85e04 - http://secunia.com/advisories/49089 - http://ffmpeg.org/ - http://www.debian.org/security/2012/dsa-2471 - http://libav.org/ - http://git.libav.org/?p=libav.git%3Ba=commit%3Bh=635bcfccd439480003b74a665b5aa7c872c1ad6b
CVE ID: CVE-2011-3934 State: PUBLISHED Published: 2013-12-09T11:00:00 Last Updated: 2024-08-06T23:53:32.528Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in the vp3_update_thread_context function in libavcodec/vp3.c in FFmpeg before 0.10 allows remote attackers to have an unspecified impact via crafted vp3 data. Additional Analyst Notes: - CVE Program Container: References: - http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=247d30a7dba6684ccce4508424f35fd58465e535 - http://www.ffmpeg.org/security.html
CVE ID: CVE-2011-3935 State: PUBLISHED Published: 2013-12-09T11:00:00 Last Updated: 2024-08-06T23:53:32.062Z Vendors: n/a Products: n/a Problem Types: n/a Description: The codec_get_buffer function in ffmpeg.c in FFmpeg before 0.10 allows remote attackers to have an unspecified impact via vectors related to a crafted image size. Additional Analyst Notes: - CVE Program Container: References: - http://www.ffmpeg.org/security.html - http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=668494acd8b20f974c7722895d4a6a14c1005f1e
CVE ID: CVE-2011-3936 State: PUBLISHED Published: 2012-08-20T18:00:00 Last Updated: 2024-08-06T23:53:32.222Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dv_extract_audio function in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted DV file. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1479-1 - http://secunia.com/advisories/49089 - http://ffmpeg.org/ - http://www.debian.org/security/2012/dsa-2471 - http://li
-1 - http://secunia.com/advisories/49089 - http://ffmpeg.org/ - http://www.debian.org/security/2012/dsa-2471 - http://libav.org/ - http://git.libav.org/?p=libav.git%3Ba=commit%3Bh=635bcfccd439480003b74a665b5aa7c872c1ad6b - http://git.libav.org/?p=libav.git%3Ba=commitdiff%3Bh=2d1c0dea5f6b91bec7f5fa53ec050913d851e366
CVE ID: CVE-2011-3937 State: PUBLISHED Published: 2013-01-05T00:00:00 Last Updated: 2024-08-06T23:53:32.223Z Vendors: n/a Products: n/a Problem Types: n/a Description: The H.263 codec (libavcodec/h263dec.c) in FFmpeg 0.7.x before 0.7.12, 0.8.x before 0.8.11, and unspecified versions before 0.10, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1 has unspecified impact and attack vectors related to "width/height changing with frame threads." Additional Analyst Notes: - CVE Program Container: References: - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=71db86d53b5c6872cea31bf714a1a38ec78feaba - http://www.mandriva.com/security/advisories?name=
p=ffmpeg.git%3Ba=commit%3Bh=71db86d53b5c6872cea31bf714a1a38ec78feaba - http://www.mandriva.com/security/advisories?name=MDVSA-2013:079 - http://ffmpeg.org/security.html - http://git.libav.org/?p=libav.git%3Ba=commit%3Bh=71db86d53b5c6872cea31bf714a1a38ec78feaba - http://libav.org/news.html
CVE ID: CVE-2011-3940 State: PUBLISHED Published: 2012-08-20T18:00:00 Last Updated: 2024-08-06T23:53:32.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: nsvdec.c in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1, allows remote attackers to cause a denial of service (out-of-bounds read and write) via a crafted NSV file that triggers "use of uninitialized streams." Additional Analyst Notes: - CVE Program Container: References: - http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=c898431ca5ef2a997fe9388b650f658fb60783e5 - http://git.videolan.org/?p=ffmpeg.git%3
.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=c898431ca5ef2a997fe9388b650f658fb60783e5 - http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=8fd8a48263ff1437f9d02d7e78dc63efb9b5ed3a - http://www.ubuntu.com/usn/USN-1479-1 - http://secunia.com/advisories/49089 - http://ffmpeg.org/ - http://www.debian.org/security/2012/dsa-2471 - http://libav.org/ - http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=5c011706bc752d34bc6ada31d7df2ca0c9af7c6b
CVE ID: CVE-2011-3941 State: PUBLISHED Published: 2013-12-09T11:00:00 Last Updated: 2024-08-06T23:53:32.226Z Vendors: n/a Products: n/a Problem Types: n/a Description: The decode_mb function in libavcodec/error_resilience.c in FFmpeg before 0.10 allows remote attackers to have an unspecified impact via vectors related to an uninitialized block index, which triggers an out-of-bounds write. Additional Analyst Notes: - CVE Program Container: References: - http://www.ffmpeg.org/security.html - http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=c77be3a35a0160d6af88056b0899f120f2eef38e
CVE ID: CVE-2011-3944 State: PUBLISHED Published: 2013-12-09T11:00:00 Last Updated: 2024-08-06T23:53:32.217Z Vendors: n/a Products: n/a Problem Types: n/a Description: The smacker_decode_header_tree function in libavcodec/smacker.c in FFmpeg before 0.10 allows remote attackers to have an unspecified impact via crafted Smacker data. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2014/dsa-2855 - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=1285baaab550e3e761590ef6dfb1d9bd9d1332e4 - http://www.ffmpeg.org/security.html
CVE ID: CVE-2011-3945 State: PUBLISHED Published: 2012-08-20T20:00:00Z Last Updated: 2024-09-17T04:09:43.998Z Vendors: n/a Products: n/a Problem Types: n/a Description: The decode_frame function in the KVG1 decoder (kgv1dec.c) in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted media file. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2012:076 - http://git.libav.org/?p=libav.git%3Ba=commit%3Bh=a02e
http://www.mandriva.com/security/advisories?name=MDVSA-2012:076 - http://git.libav.org/?p=libav.git%3Ba=commit%3Bh=a02e8df973f5478ec82f4c507f5b5b191a5ecb6b - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=807a045ab7f51993a2c1b3116016cbbd4f3d20d6 - http://ffmpeg.org/ - http://libav.org/
CVE ID: CVE-2011-3946 State: PUBLISHED Published: 2013-12-09T11:00:00 Last Updated: 2024-08-06T23:53:32.309Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ff_h264_decode_sei function in libavcodec/h264_sei.c in FFmpeg before 0.10 allows remote attackers to have an unspecified impact via crafted Supplemental enhancement information (SEI) data, which triggers an infinite loop. Additional Analyst Notes: - CVE Program Container: References: - http://www.ffmpeg.org/security.html - http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=9decfc17bb76da34734296048d390b176abf404c
CVE ID: CVE-2011-3947 State: PUBLISHED Published: 2012-08-20T18:00:00 Last Updated: 2024-08-06T23:53:32.316Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in mjpegbdec.c in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted MJPEG-B file. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1479-1 - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=b57d262412204e54a7ef8fa1b23ff4dcede622e5 - http://git
/USN-1479-1 - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=b57d262412204e54a7ef8fa1b23ff4dcede622e5 - http://git.libav.org/?p=libav.git%3Ba=commit%3Bh=b57d262412204e54a7ef8fa1b23ff4dcede622e5 - http://secunia.com/advisories/49089 - http://ffmpeg.org/ - http://www.debian.org/security/2012/dsa-2471 - http://libav.org/
CVE ID: CVE-2011-3949 State: PUBLISHED Published: 2013-12-09T11:00:00 Last Updated: 2024-08-06T23:53:32.227Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dirac_unpack_idwt_params function in libavcodec/diracdec.c in FFmpeg before 0.10 allows remote attackers to have an unspecified impact via crafted Dirac data. Additional Analyst Notes: - CVE Program Container: References: - http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=e2291ea1534d17306f685b8c8abc8585bbed87bf - http://www.ffmpeg.org/security.html
CVE ID: CVE-2011-3950 State: PUBLISHED Published: 2013-12-09T11:00:00 Last Updated: 2024-08-06T23:53:32.463Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dirac_decode_data_unit function in libavcodec/diracdec.c in FFmpeg before 0.10 allows remote attackers to have an unspecified impact via a crafted value in the reference pictures number. Additional Analyst Notes: - CVE Program Container: References: - http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=ddf0c1d86ad8e1df5ab3265206aef493a1bdc813 - http://www.ffmpeg.org/security.html
CVE ID: CVE-2011-3951 State: PUBLISHED Published: 2012-08-20T18:00:00Z Last Updated: 2024-09-17T04:20:11.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dpcm_decode_frame function in dpcm.c in libavcodec in FFmpeg before 0.10 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.6, and 0.8.x before 0.8.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted stereo stream in a media file. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1479-1 - http://www.debian.org/security/2012/dsa-2494 - http://ffmpeg.org/ - http://libav.org/ - http://git.l
om/usn/USN-1479-1 - http://www.debian.org/security/2012/dsa-2494 - http://ffmpeg.org/ - http://libav.org/ - http://git.libav.org/?p=libav.git%3Ba=commit%3Bh=ce7aee9b733134649a6ce2fa743e51733f33e67e
CVE ID: CVE-2011-3952 State: PUBLISHED Published: 2012-08-20T18:00:00Z Last Updated: 2024-09-16T16:53:20.903Z Vendors: n/a Products: n/a Problem Types: n/a Description: The decode_init function in kmvc.c in libavcodec in FFmpeg before 0.10 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.6, and 0.8.x before 0.8.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a large palette size in a KMVC encoded file. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1479-1 - http://www.debian.org/security/2012/dsa-2494 - http://ffmpeg.org/ - http://git.libav.org/?p=libav.git%
/usn/USN-1479-1 - http://www.debian.org/security/2012/dsa-2494 - http://ffmpeg.org/ - http://git.libav.org/?p=libav.git%3Ba=commit%3Bh=386741f887714d3e46c9e8fe577e326a7964037b - http://libav.org/
CVE ID: CVE-2011-3953 State: PUBLISHED Published: 2012-02-09T02:00:00 Last Updated: 2024-08-06T23:53:32.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 17.0.963.46 does not prevent monitoring of the clipboard after a paste event, which has unspecified impact and remote attack vectors. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14392 - http://googlechromereleases.blogspot.com/2012/02/stable-channel-update.html - http://code.google.com/p/chromium/issues/detail?id=73478
CVE ID: CVE-2011-3954 State: PUBLISHED Published: 2012-02-09T02:00:00 Last Updated: 2024-08-06T23:53:32.322Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of service (application crash) via vectors that trigger a large amount of database usage. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2012/02/stable-channel-update.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14970 - http://code.google.com/p/chromium/issues/detail?id=92550
CVE ID: CVE-2011-3955 State: PUBLISHED Published: 2012-02-09T02:00:00 Last Updated: 2024-08-06T23:53:32.544Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via vectors that trigger the aborting of an IndexedDB transaction. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2012/02/stable-channel-update.html - http://code.google.com/p/chromium/issues/detail?id=93106 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14905