Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-0953 State: PUBLISHED Published: 2014-08-12T01:00:00 Last Updated: 2024-08-06T09:34:40.373Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0.0 through 6.1.0.6 CF27, 6.1.5.0 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF28, and 8.0.0 before 8.0.0.1 CF12 allows remote attackers to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/92626 - http://www-01.ibm.com/support/docview.wss?uid=swg21680230 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI16127 - http://www.securitytr
/support/docview.wss?uid=swg21680230 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI16127 - http://www.securitytracker.com/id/1030669
CVE ID: CVE-2014-0954 State: PUBLISHED Published: 2014-05-22T10:00:00 Last Updated: 2024-08-06T09:34:40.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF28, and 8.0 before 8.0.0.1 CF12 does not validate JSP includes, which allows remote attackers to obtain sensitive information, bypass intended request-dispatcher access restrictions, or cause a denial of service (memory consumption) via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21672572 - https://exchange.xforce.ibmcloud.com/vulnerabilities/926
: - http://www-01.ibm.com/support/docview.wss?uid=swg21672572 - https://exchange.xforce.ibmcloud.com/vulnerabilities/92627 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI15723
CVE ID: CVE-2014-0955 State: PUBLISHED Published: 2014-05-22T10:00:00 Last Updated: 2024-08-06T09:34:40.473Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.0 before 8.0.0.1 CF12, when Social Rendering in Connections integration is enabled, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1PI15583 - http://www-01.ibm.com/support/docview.wss?uid=swg21672572 - https://exchange.xforce.ibmcloud.com/vulnerabilities/92628
CVE ID: CVE-2014-0956 State: PUBLISHED Published: 2014-05-22T10:00:00 Last Updated: 2024-08-06T09:34:41.060Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in googlemap.jsp in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF28, and 8.0 before 8.0.0.1 CF12 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21672572 - https://exchange.xforce.ibmcloud.com/vulnerabilities/92629 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI16040
CVE ID: CVE-2014-0957 State: PUBLISHED Published: 2014-07-18T01:00:00 Last Updated: 2024-08-06T09:34:40.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Business Process Manager 7.5 through 8.5.5, and WebSphere Lombardi Edition 7.2, allows remote attackers to inject arbitrary web script or HTML via a crafted URL that triggers a service failure. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1JR49990 - http://www-01.ibm.com/support/docview.wss?uid=swg21679064 - http://secunia.com/advisories/59557 - https://exchange.xforce.ibmcloud.com/vulnerabilities/92738
CVE ID: CVE-2014-0958 State: PUBLISHED Published: 2014-05-22T10:00:00 Last Updated: 2024-08-06T09:34:41.019Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF28, and 8.0 before 8.0.0.1 CF12 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21672572 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI15689 - https://exchange.xforce.ibmcloud.com/vulnerabilities/92739
CVE ID: CVE-2014-0959 State: PUBLISHED Published: 2014-05-22T10:00:00 Last Updated: 2024-08-06T09:34:40.516Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF28, and 8.0 before 8.0.0.1 CF12 allows remote authenticated users to cause a denial of service (infinite loop) via a login redirect. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21672572 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI16462 - https://exchange.xforce.ibmcloud.com/vulnerabilities/92741
CVE ID: CVE-2014-0960 State: PUBLISHED Published: 2014-06-14T10:00:00 Last Updated: 2024-08-06T09:34:40.533Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM PureApplication System 1.0 before 1.0.0.4 cfix8 and 1.1 before 1.1.0.4 IF1 allows remote authenticated users to bypass intended access restrictions by establishing an SSH session from a deployed virtual machine. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21675216 - https://exchange.xforce.ibmcloud.com/vulnerabilities/92743 - http://secunia.com/advisories/59254
CVE ID: CVE-2014-0961 State: PUBLISHED Published: 2014-06-08T18:00:00 Last Updated: 2024-08-06T09:34:40.314Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in IBM Tivoli Identity Manager (ITIM) 5.0 before 5.0.0.15 and 5.1 before 5.1.0.15 and IBM Security Identity Manager (ISIM) 6.0 before 6.0.0.2 allows remote authenticated users to hijack the authentication of arbitrary users for requests that insert XSS sequences. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/92747 - http://secunia.com/advisories/59080 - http://www-01.ibm.com/support/docview.wss?uid=swg2167475
m/vulnerabilities/92747 - http://secunia.com/advisories/59080 - http://www-01.ibm.com/support/docview.wss?uid=swg21674754 - http://www.securityfocus.com/bid/67909
CVE ID: CVE-2014-0963 State: PUBLISHED Published: 2014-05-08T10:00:00 Last Updated: 2024-08-06T09:34:39.675Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Reverse Proxy feature in IBM Global Security Kit (aka GSKit) in IBM Security Access Manager (ISAM) for Web 7.0 before 7.0.0-ISS-SAM-IF0006 and 8.0 before 8.0.0.3-ISS-WGA-IF0002 allows remote attackers to cause a denial of service (infinite loop) via crafted SSL messages. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/59249 - https://exchange.xforce.ibmcloud.com/vulnerabilities/92844 - http://www-01.ibm.com/support/docview.wss?uid=swg21676092 - http://secunia.com/advisories/58
com/vulnerabilities/92844 - http://www-01.ibm.com/support/docview.wss?uid=swg21676092 - http://secunia.com/advisories/58845 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV59660 - http://secunia.com/advisories/59245 - http://www-01.ibm.com/support/docview.wss?uid=swg21672192 - http://www.securitytracker.com/id/1030707 - http://www.ibm.com/support/docview.wss?uid=swg21675496 - http://www.securityfocus.com/bid/67238 - http://www-01.ibm.com/support/docview.wss?uid=swg21676091 - http://www-304.ibm.com/support/docview.wss?uid=swg21680803
CVE ID: CVE-2014-0964 State: PUBLISHED Published: 2014-05-16T10:00:00 Last Updated: 2024-08-06T09:34:41.056Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Application Server (WAS) 6.1.0.0 through 6.1.0.47 and 6.0.2.0 through 6.0.2.43 allows remote attackers to cause a denial of service via crafted TLS traffic, as demonstrated by traffic from a CVE-2014-0160 vulnerability-assessment tool. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21671835 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI14306 - http://www-304.ibm.com/support/docview.wss?uid=swg21673808 - https://exchange.xforce.ibmcloud.com
.wss?uid=swg1PI14306 - http://www-304.ibm.com/support/docview.wss?uid=swg21673808 - https://exchange.xforce.ibmcloud.com/vulnerabilities/92877 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI17128 - http://www.securitytracker.com/id/1030280 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI16981
CVE ID: CVE-2014-0965 State: PUBLISHED Published: 2014-08-22T01:00:00 Last Updated: 2024-08-06T09:34:40.366Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Application Server (WAS) 7.0.x before 7.0.0.33, 8.0.x before 8.0.0.9, and 8.5.x before 8.5.5.3 allows remote attackers to obtain sensitive information via a crafted SOAP response. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21676092 - https://exchange.xforce.ibmcloud.com/vulnerabilities/92878 - http://www.securityfocus.com/bid/68210 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI11434 - http://www-01.ibm.com/support/docview.wss?uid=swg21
/68210 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI11434 - http://www-01.ibm.com/support/docview.wss?uid=swg21676091 - http://www-01.ibm.com/support/docview.wss?uid=swg21681249
CVE ID: CVE-2014-0966 State: PUBLISHED Published: 2014-08-17T23:00:00 Last Updated: 2024-08-06T09:34:40.632Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.x and 11.x before 11.0-FP5 and InfoSphere Master Data Management Server for Product Information Management 9.x through 11.x before 11.3-IF2 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21681651 - http://secunia.com/advisories/60693 - http://secunia.com/
- http://www-01.ibm.com/support/docview.wss?uid=swg21681651 - http://secunia.com/advisories/60693 - http://secunia.com/advisories/60679 - http://secunia.com/advisories/60695 - https://exchange.xforce.ibmcloud.com/vulnerabilities/92880
CVE ID: CVE-2014-0967 State: PUBLISHED Published: 2014-07-19T01:00:00 Last Updated: 2024-08-06T09:34:40.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.x and 11.x before 11.0 FP4 and InfoSphere Master Data Management Server for Product Information Management 9.0 and 9.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21677300 - https://exchange.xforce.ibmcloud.com/vulnerabilities/92882
CVE ID: CVE-2014-0968 State: PUBLISHED Published: 2014-07-19T01:00:00 Last Updated: 2024-08-06T09:34:39.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.x and 11.x before 11.0 FP4 and InfoSphere Master Data Management Server for Product Information Management 9.0 and 9.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL for an MHTML document. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21677301 - https://exchange.xforce.ibmcloud.com/vulnera
: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21677301 - https://exchange.xforce.ibmcloud.com/vulnerabilities/92884
CVE ID: CVE-2014-0969 State: PUBLISHED Published: 2014-08-17T23:00:00 Last Updated: 2024-08-06T09:34:40.424Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.x and 11.x before 11.0-FP5 and InfoSphere Master Data Management Server for Product Information Management 9.x through 11.x before 11.3-IF2 allows remote authenticated users to hijack the authentication of arbitrary users. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/60693 - http://www.securityfocus.com/bid/69262 - https://exchange.xforce.ibmc
eferences: - http://secunia.com/advisories/60693 - http://www.securityfocus.com/bid/69262 - https://exchange.xforce.ibmcloud.com/vulnerabilities/92885 - http://secunia.com/advisories/60679 - http://secunia.com/advisories/60695 - http://www-01.ibm.com/support/docview.wss?uid=swg21681649
CVE ID: CVE-2014-0970 State: PUBLISHED Published: 2014-07-19T01:00:00 Last Updated: 2024-08-06T09:34:40.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: The GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.x and 11.x before 11.0 FP4 and InfoSphere Master Data Management Server for Product Information Management 9.0 and 9.1 allows remote authenticated users to inject links via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21677304 - https://exchange.xforce.ibmcloud.com/vulnerabilities/92950
CVE ID: CVE-2014-0972 State: PUBLISHED Published: 2014-08-01T10:00:00 Last Updated: 2024-08-06T09:34:40.748Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kgsl graphics driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, does not properly prevent write access to IOMMU context registers, which allows local users to select a custom page table, and consequently write to arbitrary memory locations, by using a crafted GPU command stream to modify the contents of a certain register. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/projects/security-advisor
r. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/projects/security-advisories/unprivileged-gpu-command-streams-can-change-the-iommu-page-table-cve-2014-0972
CVE ID: CVE-2014-0973 State: PUBLISHED Published: 2014-08-25T01:00:00 Last Updated: 2024-08-06T09:34:40.470Z Vendors: n/a Products: n/a Problem Types: n/a Description: The image_verify function in platform/msm_shared/image_verify.c in the Little Kernel (LK) bootloader, as distributed with Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, does not check whether a certain digest size is consistent with the RSA_public_decrypt API specification, which makes it easier for attackers to bypass boot-image authentication requirements via trailing data. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin
iling data. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-07-01.html - https://www.codeaurora.org/projects/security-advisories/incomplete-signature-parsing-during-boot-image-authentication-leads-to-signature-forgery-cve-2014-0973
CVE ID: CVE-2014-0974 State: PUBLISHED Published: 2014-08-25T01:00:00 Last Updated: 2024-08-06T09:34:40.425Z Vendors: n/a Products: n/a Problem Types: n/a Description: The boot_linux_from_mmc function in app/aboot/aboot.c in the Little Kernel (LK) bootloader, as distributed with Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, does not properly validate a certain address value, which allows attackers to write data to a controllable memory location by leveraging the ability to initiate an attempted boot of an arbitrary image. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/projects/security-advisories/lk-in
onal Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/projects/security-advisories/lk-insufficient-verification-tagaddr-when-loading-device-tree-cve-2014-0974 - http://source.android.com/security/bulletin/2016-07-01.html
CVE ID: CVE-2014-0977 State: PUBLISHED Published: 2014-01-10T17:00:00 Last Updated: 2024-08-06T09:34:40.415Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Rich Text Editor in Movable Type 5.0x, 5.1x before 5.161, 5.2.x before 5.2.9, and 6.0.x before 6.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1029588 - http://movabletype.org/news/2013/11/movable_type_601_529_and_5161_released_to_close_security_vul.html - http://secunia.com/advisories/56405 - http://bugs.debian.org/cgi-bin/bugreport.cgi
released_to_close_security_vul.html - http://secunia.com/advisories/56405 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=734304 - http://secunia.com/advisories/56295 - http://www.debian.org/security/2014/dsa-2841 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90095 - http://seclists.org/oss-sec/2014/q1/24 - http://seclists.org/oss-sec/2014/q1/36 - http://www.securityfocus.com/bid/64657
CVE ID: CVE-2014-0978 State: PUBLISHED Published: 2014-01-10T17:00:00 Last Updated: 2024-08-06T09:34:40.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the yyerror function in lib/cgraph/scan.l in Graphviz 2.34.0 allows remote attackers to have unspecified impact via a long line in a dot file. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2014:024 - http://www.securityfocus.com/bid/64674 - https://bugzilla.redhat.com/show_bug.cgi?id=1049165 - https://security.gentoo.org/glsa/201702-06 - https://github.com/ellson/graphviz/commit/7aaddf52cd98589fb0c3ab72a393f8411838438a - ht
rity.gentoo.org/glsa/201702-06 - https://github.com/ellson/graphviz/commit/7aaddf52cd98589fb0c3ab72a393f8411838438a - https://exchange.xforce.ibmcloud.com/vulnerabilities/90085 - http://seclists.org/oss-sec/2014/q1/28 - http://www.debian.org/security/2014/dsa-2843 - https://bugs.gentoo.org/show_bug.cgi?id=497274 - http://seclists.org/oss-sec/2014/q1/38 - http://secunia.com/advisories/55666 - http://secunia.com/advisories/56244
CVE ID: CVE-2014-0979 State: PUBLISHED Published: 2014-01-23T01:00:00 Last Updated: 2024-08-06T09:34:40.438Z Vendors: n/a Products: n/a Problem Types: n/a Description: The start_authentication function in lightdm-gtk-greeter.c in LightDM GTK+ Greeter before 1.7.1 does not properly handle the return value from the lightdm_greeter_get_authentication_user function, which allows local users to cause a denial of service (NULL pointer dereference) via an empty username. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/64679 - http://lists.fedoraproject.org/pipermail/package-announce/2014-February/128150.html - https://bugzilla.novell.com/show_bug.cg
//lists.fedoraproject.org/pipermail/package-announce/2014-February/128150.html - https://bugzilla.novell.com/show_bug.cgi?id=857303 - http://www.openwall.com/lists/oss-security/2014/01/07/15 - http://lists.fedoraproject.org/pipermail/package-announce/2014-February/128117.html - http://lists.opensuse.org/opensuse-updates/2014-01/msg00048.html - http://secunia.com/advisories/56211 - https://bugs.launchpad.net/lightdm-gtk-greeter/+bug/1266449 - http://secunia.com/advisories/56423
CVE ID: CVE-2014-0980 State: PUBLISHED Published: 2014-02-11T17:00:00 Last Updated: 2024-08-06T09:34:40.668Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Poster Software PUBLISH-iT 3.6d allows remote attackers to execute arbitrary code via a crafted PUI file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/90989 - http://seclists.org/fulldisclosure/2014/Feb/34 - http://packetstormsecurity.com/files/125089 - http://www.coresecurity.com/advisories/publish-it-buffer-overflow-vulnerability - http://www.exploit-db.com/exploits/31461 - http://www.securityfocus.com/bid/65366 - http://osvdb.org/102
vulnerability - http://www.exploit-db.com/exploits/31461 - http://www.securityfocus.com/bid/65366 - http://osvdb.org/102911 - http://www.securityfocus.com/archive/1/530943/100/0/threaded - http://secunia.com/advisories/56618
CVE ID: CVE-2014-0981 State: PUBLISHED Published: 2014-03-28T21:00:00 Last Updated: 2024-08-06T09:34:40.679Z Vendors: n/a Products: n/a Problem Types: n/a Description: VBox/GuestHost/OpenGL/util/net.c in Oracle VirtualBox before 3.2.22, 4.0.x before 4.0.24, 4.1.x before 4.1.32, 4.2.x before 4.2.24, and 4.3.x before 4.3.8, when using 3D Acceleration allows local guest OS users to execute arbitrary code on the Chromium server via crafted Chromium network pointer in a (1) CR_MESSAGE_READBACK or (2) CR_MESSAGE_WRITEBACK message to the VBoxSharedCrOpenGL service, which triggers an arbitrary pointer dereference and memory corruption. NOTE: this issue was MERGED with CVE-2014-0982 because it is the
an arbitrary pointer dereference and memory corruption. NOTE: this issue was MERGED with CVE-2014-0982 because it is the same type of vulnerability affecting the same set of versions. All CVE users should reference CVE-2014-0981 instead of CVE-2014-0982. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/32208 - https://security.gentoo.org/glsa/201612-27 - http://secunia.com/advisories/57384 - http://www.securityfocus.com/archive/1/531418/100/0/threaded - http://www.debian.org/security/2014/dsa-2904 - http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html - https://www.virtualbox.org/changeset/50437/vbox - http://seclists.or
chnetwork/topics/security/cpuapr2014-1972952.html - https://www.virtualbox.org/changeset/50437/vbox - http://seclists.org/fulldisclosure/2014/Mar/95 - http://www.coresecurity.com/advisories/oracle-virtualbox-3d-acceleration-multiple-memory-corruption-vulnerabilities
CVE ID: CVE-2014-0982 State: REJECTED Published: 2014-03-28T21:00:00 Last Updated: 2014-03-28T20:57:00 Description: No description available.
CVE ID: CVE-2014-0983 State: PUBLISHED Published: 2014-03-28T21:00:00 Last Updated: 2024-08-06T09:34:40.477Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple array index errors in programs that are automatically generated by VBox/HostServices/SharedOpenGL/crserverlib/server_dispatch.py in Oracle VirtualBox 4.2.x through 4.2.20 and 4.3.x before 4.3.8, when using 3D Acceleration, allow local guest OS users to execute arbitrary code on the Chromium server via certain CR_MESSAGE_OPCODES messages with a crafted index, which are not properly handled by the (1) CR_VERTEXATTRIB4NUBARB_OPCODE to the crServerDispatchVertexAttrib4NubARB function, (2) CR_VERTEXATTRIB1DARB_OPCODE to th
CR_VERTEXATTRIB4NUBARB_OPCODE to the crServerDispatchVertexAttrib4NubARB function, (2) CR_VERTEXATTRIB1DARB_OPCODE to the crServerDispatchVertexAttrib1dARB function, (3) CR_VERTEXATTRIB1FARB_OPCODE to the crServerDispatchVertexAttrib1fARB function, (4) CR_VERTEXATTRIB1SARB_OPCODE to the crServerDispatchVertexAttrib1sARB function, (5) CR_VERTEXATTRIB2DARB_OPCODE to the crServerDispatchVertexAttrib2dARB function, (6) CR_VERTEXATTRIB2FARB_OPCODE to the crServerDispatchVertexAttrib2fARB function, (7) CR_VERTEXATTRIB2SARB_OPCODE to the crServerDispatchVertexAttrib2sARB function, (8) CR_VERTEXATTRIB3DARB_OPCODE to the crServerDispatchVertexAttrib3dARB function, (9) CR_VERTEXATTRIB3FARB_OPCODE to t