deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2011-2613
Published: 2011-07-01
Description: The Array.prototype.join method in Opera before 11.50 allows remote attackers to cause a denial of service (application crash) via a non-array object that contains initial holes.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://www.opera.com/docs/changelogs/mac/1150/; http://www.opera.com/docs/changelogs/unix/1150/; http://www.opera.com/docs/changelogs/windows/1150/
CVE: CVE-2011-2614
Published: 2011-07-01
Description: The SVG implementation in Opera before 11.50 allows remote attackers to cause a denial of service (application crash) via vectors involving a path on which many characters are drawn.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://www.opera.com/docs/changelogs/mac/1150/; http://www.opera.com/docs/changelogs/unix/1150/; http://www.opera.com/docs/changelogs/windows/1150/
CVE: CVE-2011-2615
Published: 2011-07-01
Description: Unspecified vulnerability in Opera before 11.50 allows remote attackers to cause a denial of service (application hang) via unknown content on a web page, as demonstrated by domiteca.com.
CVSS Score: 5.0 (MEDIUM)
References: http://www.opera.com/docs/changelogs/mac/1150/; http://www.opera.com/docs/changelogs/unix/1150/; http://www.opera.com/docs/changelogs/windows/1150/
CVE: CVE-2011-2616
Published: 2011-07-01
Description: Unspecified vulnerability in Opera before 11.50 allows remote attackers to cause a denial of service (memory consumption) via unknown content on a web page, as demonstrated by test262.ecmascript.org.
CVSS Score: 5.0 (MEDIUM)
References: http://www.opera.com/docs/changelogs/mac/1150/; http://www.opera.com/docs/changelogs/unix/1150/; http://www.opera.com/docs/changelogs/windows/1150/
CVE: CVE-2011-2617
Published: 2011-07-01
Description: Unspecified vulnerability in Opera before 11.50 allows remote attackers to cause a denial of service (application crash) via vectors related to selecting a text node, and closed pop-up windows, removed pop-up windows, and IFRAME elements.
CVSS Score: 5.0 (MEDIUM)
References: http://www.opera.com/docs/changelogs/mac/1150/; http://www.opera.com/docs/changelogs/unix/1150/; http://www.opera.com/docs/changelogs/windows/1150/
CVE: CVE-2011-2618
Published: 2011-07-01
Description: Opera before 11.50 allows remote attackers to cause a denial of service (application crash) via web script that moves a (1) AUDIO element or (2) VIDEO element between windows.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://www.opera.com/docs/changelogs/mac/1150/; http://www.opera.com/docs/changelogs/unix/1150/; http://www.opera.com/docs/changelogs/windows/1150/
CVE: CVE-2011-2619
Published: 2011-07-01
Description: Opera before 11.50 allows remote attackers to cause a denial of service (application crash) via a gradient with many stops, related to the implementation of CANVAS elements, SVG, and Cascading Style Sheets (CSS).
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://www.opera.com/docs/changelogs/mac/1150/; http://www.opera.com/docs/changelogs/unix/1150/; http://www.opera.com/docs/changelogs/windows/1150/
CVE: CVE-2011-2620
Published: 2011-07-01
Description: Unspecified vulnerability in Opera before 11.50 allows remote attackers to cause a denial of service (application crash) via vectors involving SVG animation.
CVSS Score: 5.0 (MEDIUM)
References: http://www.opera.com/docs/changelogs/mac/1150/; http://www.opera.com/docs/changelogs/unix/1150/; http://www.opera.com/docs/changelogs/windows/1150/
CVE: CVE-2011-2621
Published: 2011-07-01
Description: Unspecified vulnerability in Opera before 11.50 allows remote attackers to cause a denial of service (application crash) via vectors related to form layout.
CVSS Score: 5.0 (MEDIUM)
References: http://www.opera.com/docs/changelogs/mac/1150/; http://www.opera.com/docs/changelogs/unix/1150/; http://www.opera.com/docs/changelogs/windows/1150/
CVE: CVE-2011-2622
Published: 2011-07-01
Description: Unspecified vulnerability in the Web Workers implementation in Opera before 11.50 allows remote attackers to cause a denial of service (application crash) via unknown vectors.
CVSS Score: 5.0 (MEDIUM)
References: http://www.opera.com/docs/changelogs/mac/1150/; http://www.opera.com/docs/changelogs/unix/1150/; http://www.opera.com/docs/changelogs/windows/1150/
CVE: CVE-2011-2623
Published: 2011-07-01
Description: Unspecified vulnerability in the SVG BiDi implementation in Opera before 11.50 allows remote attackers to cause a denial of service (application crash or hang) via unknown vectors.
CVSS Score: 5.0 (MEDIUM)
References: http://www.opera.com/docs/changelogs/mac/1150/; http://www.opera.com/docs/changelogs/unix/1150/; http://www.opera.com/docs/changelogs/windows/1150/
CVE: CVE-2011-2624
Published: 2011-07-01
Description: Opera before 11.50 allows user-assisted remote attackers to cause a denial of service (application hang) via a large table, which is not properly handled during a print preview.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-399
References: http://www.opera.com/docs/changelogs/mac/1150/; http://www.opera.com/docs/changelogs/unix/1150/; http://www.opera.com/docs/changelogs/windows/1150/
CVE: CVE-2011-2625
Published: 2011-07-01
Description: Opera before 11.50 allows remote attackers to cause a denial of service (application crash) via a SELECT element that contains many OPTION elements.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://www.opera.com/docs/changelogs/mac/1150/; http://www.opera.com/docs/changelogs/unix/1150/; http://www.opera.com/docs/changelogs/windows/1150/
CVE: CVE-2011-2626
Published: 2011-07-01
Description: Opera before 11.50 allows remote attackers to cause a denial of service (application crash) by using "injected script" to set the SRC attribute of an IFRAME element.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://www.opera.com/docs/changelogs/mac/1150/; http://www.opera.com/docs/changelogs/unix/1150/; http://www.opera.com/docs/changelogs/windows/1150/
CVE: CVE-2011-2627
Published: 2011-07-01
Description: Unspecified vulnerability in the DOM implementation in Opera before 11.50 allows remote attackers to cause a denial of service (application crash) via unknown content on a web page, as demonstrated by live.com.
CVSS Score: 5.0 (MEDIUM)
References: http://www.opera.com/docs/changelogs/mac/1150/; http://www.opera.com/docs/changelogs/unix/1150/; http://www.opera.com/docs/changelogs/windows/1150/
CVE: CVE-2011-2628
Published: 2011-07-01
Description: Opera before 11.11 does not properly implement FRAMESET elements, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via vectors related to page unload.
CVSS Score: 10.0 (HIGH)
CWE: CWE-20
References: http://securityreason.com/securityalert/8425; http://www.opera.com/docs/changelogs/mac/1111/; http://www.opera.com/docs/changelogs/unix/1111/
CVE: CVE-2011-2629
Published: 2011-07-01
Description: Unspecified vulnerability in Opera before 11.11 allows remote attackers to cause a denial of service (application crash) via unknown content on a web page, as demonstrated by www.falk.de.
CVSS Score: 5.0 (MEDIUM)
References: http://www.opera.com/docs/changelogs/mac/1111/; http://www.opera.com/docs/changelogs/unix/1111/; http://www.opera.com/docs/changelogs/windows/1111/
CVE: CVE-2011-2630
Published: 2011-07-01
Description: Opera before 11.11 allows user-assisted remote attackers to cause a denial of service (application crash) via a crafted web page that is not properly handled during a reload occurring after the opening of a popup of the Easy Sticky Note extension.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://www.opera.com/docs/changelogs/mac/1111/; http://www.opera.com/docs/changelogs/unix/1111/; http://www.opera.com/docs/changelogs/windows/1111/
CVE: CVE-2011-2631
Published: 2011-07-01
Description: The Cascading Style Sheets (CSS) implementation in Opera before 11.11 does not properly handle the column-count property, which allows remote attackers to cause a denial of service (infinite repaint loop and application hang) via a web page, as demonstrated by an unspecified Wikipedia page.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://www.opera.com/docs/changelogs/mac/1111/; http://www.opera.com/docs/changelogs/unix/1111/; http://www.opera.com/docs/changelogs/windows/1111/
CVE: CVE-2011-2632
Published: 2011-07-01
Description: Opera before 11.11 does not properly handle destruction of a Silverlight instance, which allows remote attackers to cause a denial of service (application crash) via a web page, as demonstrated by vod.onet.pl.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://www.opera.com/docs/changelogs/mac/1111/; http://www.opera.com/docs/changelogs/unix/1111/; http://www.opera.com/docs/changelogs/windows/1111/
CVE: CVE-2011-2633
Published: 2011-07-01
Description: Unspecified vulnerability in Opera before 11.11 allows remote attackers to cause a denial of service (application crash) via vectors involving a Certificate Revocation List (CRL) file, as demonstrated by the multicert-ca-02.crl file.
CVSS Score: 5.0 (MEDIUM)
References: http://www.opera.com/docs/changelogs/mac/1111/; http://www.opera.com/docs/changelogs/unix/1111/; http://www.opera.com/docs/changelogs/windows/1111/
CVE: CVE-2011-2634
Published: 2011-07-01
Description: Opera before 11.10 allows remote attackers to hijack (1) searches and (2) customizations via unspecified third party applications.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://www.opera.com/docs/changelogs/mac/1110/; http://www.opera.com/docs/changelogs/unix/1110/; http://www.opera.com/docs/changelogs/windows/1110/
CVE: CVE-2011-2635
Published: 2011-07-01
Description: The Cascading Style Sheets (CSS) implementation in Opera before 11.10 allows remote attackers to cause a denial of service (application crash) via vectors involving use of the :hover pseudo-class, in conjunction with transforms, for a floated element.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://www.opera.com/docs/changelogs/mac/1110/; http://www.opera.com/docs/changelogs/unix/1110/; http://www.opera.com/docs/changelogs/windows/1110/
CVE: CVE-2011-2636
Published: 2011-07-01
Description: Unspecified vulnerability in Opera before 11.10 allows remote attackers to cause a denial of service (application crash) via unknown content on a web page, as demonstrated by a certain Tomato Firmware page.
CVSS Score: 5.0 (MEDIUM)
References: http://www.opera.com/docs/changelogs/mac/1110/; http://www.opera.com/docs/changelogs/unix/1110/; http://www.opera.com/docs/changelogs/windows/1110/
CVE: CVE-2011-2637
Published: 2011-07-01
Description: Unspecified vulnerability in Opera before 11.10 allows remote attackers to cause a denial of service (application crash) via unknown content on a web page, as demonstrated by futura-sciences.com, seoptimise.com, and mitosyfraudes.org.
CVSS Score: 5.0 (MEDIUM)
References: http://www.opera.com/docs/changelogs/mac/1110/; http://www.opera.com/docs/changelogs/unix/1110/; http://www.opera.com/docs/changelogs/windows/1110/
CVE: CVE-2011-2638
Published: 2011-07-01
Description: Unspecified vulnerability in Opera before 11.10 allows remote attackers to cause a denial of service (application crash) via unknown content on a web page, as demonstrated by games on zylom.com.
CVSS Score: 5.0 (MEDIUM)
References: http://www.opera.com/docs/changelogs/mac/1110/; http://www.opera.com/docs/changelogs/unix/1110/; http://www.opera.com/docs/changelogs/windows/1110/
CVE: CVE-2011-2639
Published: 2011-07-01
Description: Opera before 11.10 does not properly handle hidden animated GIF images, which allows remote attackers to cause a denial of service (CPU consumption) via an image file that triggers continual repaints.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://www.opera.com/docs/changelogs/mac/1110/; http://www.opera.com/docs/changelogs/unix/1110/; http://www.opera.com/docs/changelogs/windows/1110/
CVE: CVE-2011-2640
Published: 2011-07-01
Description: Opera before 11.10 allows remote attackers to cause a denial of service (application crash) via an HTML document that has an empty parameter value for an embedded Java applet.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://www.opera.com/docs/changelogs/mac/1110/; http://www.opera.com/docs/changelogs/unix/1110/; http://www.opera.com/docs/changelogs/windows/1110/
CVE: CVE-2011-2641
Published: 2011-07-01
Description: Opera 11.11 allows remote attackers to cause a denial of service (application crash) by setting the FACE attribute of a FONT element within an IFRAME element after changing the SRC attribute of this IFRAME element to an about:blank value.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://www.exploit-db.com/exploits/17396; http://www.exploit-db.com/exploits/17396
CVE: CVE-2011-2529
Published: 2011-07-06
Description: chan_sip.c in the SIP channel driver in Asterisk Open Source 1.6.x before 1.6.2.18.1 and 1.8.x before 1.8.4.3 does not properly handle '\0' characters in SIP packets, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted packet.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://downloads.asterisk.org/pub/security/AST-2011-008.diff; http://downloads.asterisk.org/pub/security/AST-2011-008.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062628.html
CVE: CVE-2011-2535
Published: 2011-07-06
Description: chan_iax2.c in the IAX2 channel driver in Asterisk Open Source 1.4.x before 1.4.41.1, 1.6.2.x before 1.6.2.18.1, and 1.8.x before 1.8.4.3, and Asterisk Business Edition C.3 before C.3.7.3, accesses a memory address contained in an option control frame, which allows remote attackers to cause a denial of service (daemon crash) or possibly have unspecified other impact via a crafted frame.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://downloads.asterisk.org/pub/security/AST-2011-010-1.8.diff; http://downloads.asterisk.org/pub/security/AST-2011-010.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062628.html
CVE: CVE-2011-2536
Published: 2011-07-06
Description: chan_sip.c in the SIP channel driver in Asterisk Open Source 1.4.x before 1.4.41.2, 1.6.2.x before 1.6.2.18.2, and 1.8.x before 1.8.4.4, and Asterisk Business Edition C.3.x before C.3.7.3, disregards the alwaysauthreject option and generates different responses for invalid SIP requests depending on whether the user account exists, which allows remote attackers to enumerate account names via a series of requests.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://downloads.asterisk.org/pub/security/AST-2011-011-1.8.diff; http://downloads.asterisk.org/pub/security/AST-2011-011.html; http://www.securitytracker.com/id?1025734
CVE: CVE-2011-2665
Published: 2011-07-06
Description: reqresp_parser.c in the SIP channel driver in Asterisk Open Source 1.8.x before 1.8.4.3 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a SIP packet with a Contact header that lacks a < (less than) character.
CVSS Score: 5.0 (MEDIUM)
References: http://downloads.asterisk.org/pub/security/AST-2011-009-1.8.diff; http://downloads.asterisk.org/pub/security/AST-2011-009.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062628.html
CVE: CVE-2011-2666
Published: 2011-07-06
Description: The default configuration of the SIP channel driver in Asterisk Open Source 1.4.x through 1.4.41.2 and 1.6.2.x through 1.6.2.18.2 does not enable the alwaysauthreject option, which allows remote attackers to enumerate account names by making a series of invalid SIP requests and observing the differences in the responses for different usernames, a different vulnerability than CVE-2011-2536.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-16
References: http://downloads.asterisk.org/pub/security/AST-2011-011.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/68472; http://downloads.asterisk.org/pub/security/AST-2011-011.html
CVE: CVE-2011-1336
Published: 2011-07-07
Description: Buffer overflow in ALZip 8.21 and earlier allows remote attackers to execute arbitrary code via a crafted mim file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://jvn.jp/en/jp/JVN01547302/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2011-000048; http://secunia.com/advisories/45108
CVE: CVE-2011-2597
Published: 2011-07-07
Description: The Lucent/Ascend file parser in Wireshark 1.2.x before 1.2.18, 1.4.x through 1.4.7, and 1.6.0 allows remote attackers to cause a denial of service (infinite loop) via malformed packets.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-399
References: http://lists.fedoraproject.org/pipermail/package-announce/2011-August/063586.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-August/063591.html; http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00021.html
CVE: CVE-2011-2678
Published: 2011-07-07
Description: The Cisco VPN Client 5.0.7.0240 and 5.0.7.0290 on 64-bit Windows platforms uses weak permissions (NT AUTHORITY\INTERACTIVE:F) for cvpnd.exe, which allows local users to gain privileges by replacing this executable file with an arbitrary program, aka Bug ID CSCtn50645. NOTE: this vulnerability exists because of a CVE-2007-4415 regression.
CVSS Score: 6.8 (MEDIUM)
References: http://isc.sans.edu/diary.html?storyid=11125; http://securityreason.com/securityalert/8297; http://www.cisco.com/warp/public/707/cisco-sa-20070815-vpnclient.shtml
CVE: CVE-2011-2679
Published: 2011-07-07
Description: Cross-site scripting (XSS) vulnerability in IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/73547; http://secunia.com/advisories/45119; http://www-01.ibm.com/support/docview.wss?uid=swg1PM34961
CVE: CVE-2011-2680
Published: 2011-07-07
Description: Unspecified vulnerability in IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 has unknown impact and remote attack vectors related to the "server error response."
CVSS Score: 10.0 (HIGH)
References: http://osvdb.org/73548; http://secunia.com/advisories/45119; http://www-01.ibm.com/support/docview.wss?uid=swg1PM34964
CVE: CVE-2011-2681
Published: 2011-07-07
Description: IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 does not properly handle exceptions, which has unspecified impact and remote attack vectors.
CVSS Score: 10.0 (HIGH)
CWE: CWE-20
References: http://osvdb.org/73549; http://secunia.com/advisories/45119; http://www-01.ibm.com/support/docview.wss?uid=swg1PM34972
CVE: CVE-2011-2682
Published: 2011-07-07
Description: The Login component in IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 allows remote authenticated users to cause a denial of service (license consumption) by trying to login to DOORS Web Access with a new user account that has never been used for a DOORS login.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-399
References: http://www-01.ibm.com/support/docview.wss?uid=swg1PM38477; http://www.ibm.com/support/docview.wss?uid=swg27020404; http://www.securityfocus.com/bid/48520
CVE: CVE-2011-1224
Published: 2011-07-07
Description: IBM WebSphere MQ 6.0 before 6.0.2.11 and 7.0 before 7.0.1.5 does not use the CRL Distribution Points (CDP) certificate extension, which might allow man-in-the-middle attackers to spoof an SSL partner via a revoked certificate for a (1) client, (2) queue manager, or (3) application.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-264
References: http://www-01.ibm.com/support/docview.wss?uid=swg27007069; http://www-01.ibm.com/support/docview.wss?uid=swg27014224; http://www.ibm.com/support/docview.wss?uid=swg1IZ92813
CVE: CVE-2011-1498
Published: 2011-07-07
Description: Apache HttpClient 4.x before 4.1.1 in Apache HttpComponents, when used with an authenticating proxy server, sends the Proxy-Authorization header to the origin server, which allows remote web servers to obtain sensitive information by logging this header.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061440.html; http://marc.info/?l=httpclient-users&m=[PII_REDACTED]5461&w=2; http://marc.info/?l=httpclient-users&m=[PII_REDACTED]1586&w=2
CVE: CVE-2011-1931
Published: 2011-07-07
Description: sp5xdec.c in the Sunplus SP5X JPEG decoder in libavcodec in FFmpeg before 0.6.3 and libav through 0.6.2, as used in VideoLAN VLC media player 1.1.9 and earlier and other products, performs a write operation outside the bounds of an unspecified array, which allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a malformed AMV file.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=624339; http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=89f903b3d5ec38c9c5d90fba7e626fa0eda61a32; http://securityreason.com/securityalert/8299
CVE: CVE-2011-1946
Published: 2011-07-07
Description: gnomesu-pam-backend in libgnomesu 1.0.0 prints an error message but proceeds with the non-error code path upon failure of the setgid or setuid function, which allows local users to gain privileges by leveraging access to two unprivileged user accounts, and running many processes under one of these accounts.
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://openwall.com/lists/oss-security/2011/05/30/2; http://openwall.com/lists/oss-security/2011/05/31/11; http://www.securityfocus.com/bid/48035
CVE: CVE-2011-2192
Published: 2011-07-07
Description: The Curl_input_negotiate function in http_negotiate.c in libcurl 7.10.6 through 7.21.6, as used in curl and other products, always performs credential delegation during GSSAPI authentication, which allows remote servers to impersonate clients via GSSAPI requests.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-255
References: http://curl.haxx.se/curl-gssapi-delegation.patch; http://curl.haxx.se/docs/adv_20110623.html; http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html
CVE: CVE-2011-1001
Published: 2011-07-08
Description: dexdump in Android SDK before 2.3 does not properly perform structural verification, which allows user-assisted remote attackers to cause a denial of service (dexdump crash) and possibly execute arbitrary code via a malformed APK or dex file that calls a method using more arguments than the number of register that have been declared for that method.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://android.git.kernel.org/?p=platform/dalvik.git%3Ba=commit%3Bh=4b0750e8df91220690bb417f45d7ae8b7851b220; http://seclists.org/fulldisclosure/2011/Mar/329; http://android.git.kernel.org/?p=platform/dalvik.git%3Ba=commit%3Bh=4b0750e8df91220690bb417f45d7ae8b7851b220
CVE: CVE-2011-2344
Published: 2011-07-08
Description: Android Picasa in Android 3.0 and 2.x through 2.3.4 uses a cleartext HTTP session when transmitting the authToken obtained from ClientLogin, which allows remote attackers to gain privileges and access private pictures and web albums by sniffing the token from connections with picasaweb.google.com.
CVSS Score: 10.0 (HIGH)
CWE: CWE-310
References: http://android.git.kernel.org/?p=platform/packages/apps/Gallery3D.git%3Ba=commit%3Bh=7a763db1c15bb6436be85a3f23382e4171970b6e; http://android.git.kernel.org/?p=platform/packages/apps/Gallery3D.git%3Ba=commit%3Bh=9a418de454e5ce078c98f41b5c18e3bb9175bd20; http://www.uni-ulm.de/en/in/mi/staff/koenings/catching-authtokens.html
CVE: CVE-2011-2464
Published: 2011-07-08
Description: Unspecified vulnerability in ISC BIND 9 9.6.x before 9.6-ESV-R4-P3, 9.7.x before 9.7.3-P3, and 9.8.x before 9.8.0-P4 allows remote attackers to cause a denial of service (named daemon crash) via a crafted UPDATE request.
CVSS Score: 5.0 (MEDIUM)
References: http://blogs.oracle.com/sunsecurity/entry/cve_2011_2464_remote_denial; http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062522.html