deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2011-0608
Published: 2011-02-10
Description: Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0559, CVE-2011-0560, CVE-2011-0561, CVE-2011-0571, CVE-2011-0572, CVE-2011-0573, CVE-2011-0574, CVE-2011-0578, and CVE-2011-0607.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_adobe_flash2; http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00003.html; http://osvdb.org/70923
CVE: CVE-2010-3718
Published: 2011-02-10
Description: Apache Tomcat 7.0.0 through 7.0.3, 6.0.x, and 5.5.x, when running within a SecurityManager, does not make the ServletContext attribute read-only, which allows local web applications to read or write files outside of the intended working directory, as demonstrated using a directory traversal attack.
CVSS Score: 1.2 (LOW)
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]3566&w=2
CVE: CVE-2010-4022
Published: 2011-02-10
Description: The do_standalone function in the MIT krb5 KDC database propagation daemon (kpropd) in Kerberos 1.7, 1.8, and 1.9, when running in standalone mode, does not properly handle when a worker child process "exits abnormally," which allows remote attackers to cause a denial of service (listening process termination, no new connections, and lack of updates in slave KVC) via unspecified vectors.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00004.html; http://secunia.com/advisories/43260; http://secunia.com/advisories/43275
CVE: CVE-2010-4327
Published: 2011-02-10
Description: Unspecified vulnerability in the NCP service in Novell eDirectory 8.8.5 before 8.8.5.6 and 8.8.6 before 8.8.6.2 allows remote attackers to cause a denial of service (hang) via a malformed FileSetLock request to port 524.
CVSS Score: 5.0 (MEDIUM)
References: http://dvlabs.tippingpoint.com/blog/2011/02/07/zdi-disclosure-novell; http://secunia.com/advisories/43186; http://securityreason.com/securityalert/8071
CVE: CVE-2011-0281
Published: 2011-02-10
Description: The unparse implementation in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.6.x through 1.9, when an LDAP backend is used, allows remote attackers to cause a denial of service (file descriptor exhaustion and daemon hang) via a principal name that triggers use of a backslash escape sequence, as demonstrated by a \n sequence.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-310
References: http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00004.html; http://mailman.mit.edu/pipermail/kerberos/2010-December/016800.html; http://secunia.com/advisories/43260
CVE: CVE-2011-0282
Published: 2011-02-10
Description: The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.6.x through 1.9, when an LDAP backend is used, allows remote attackers to cause a denial of service (NULL pointer dereference or buffer over-read, and daemon crash) via a crafted principal name.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00004.html; http://secunia.com/advisories/43260; http://secunia.com/advisories/43273
CVE: CVE-2011-0283
Published: 2011-02-10
Description: The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.9 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a malformed request packet that does not trigger a response packet.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/43260; http://securityreason.com/securityalert/8073; http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2011-002.txt
CVE: CVE-2011-0534
Published: 2011-02-10
Description: Apache Tomcat 7.0.0 through 7.0.6 and 6.0.0 through 6.0.30 does not enforce the maxHttpHeaderSize limit for requests involving the NIO HTTP connector, which allows remote attackers to cause a denial of service (OutOfMemoryError) via a crafted request.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2337&w=2
CVE: CVE-2011-0539
Published: 2011-02-10
Description: The key_certify function in usr.bin/ssh/key.c in OpenSSH 5.6 and 5.7, when generating legacy certificates using the -t command-line option in ssh-keygen, does not initialize the nonce field, which might allow remote attackers to obtain sensitive stack memory contents or make it easier to conduct hash collision attacks.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02794777; http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10673; http://secunia.com/advisories/43181
CVE: CVE-2011-0562
Published: 2011-02-10
Description: Untrusted search path vulnerability in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows allows local users to gain privileges via a Trojan horse DLL in the current working directory, a different vulnerability than CVE-2011-0570 and CVE-2011-0588.
CVSS Score: 6.9 (MEDIUM)
References: http://secunia.com/advisories/43470; http://www.acrossecurity.com/aspr/ASPR-2011-02-11-1-PUB.txt; http://www.adobe.com/support/security/bulletins/apsb11-03.html
CVE: CVE-2011-0563
Published: 2011-02-10
Description: Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0589 and CVE-2011-0606.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/43470; http://www.adobe.com/support/security/bulletins/apsb11-03.html; http://www.redhat.com/support/errata/RHSA-2011-0301.html
CVE: CVE-2011-0564
Published: 2011-02-10
Description: Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows use weak permissions for unspecified files, which allows attackers to gain privileges via unknown vectors.
CVSS Score: 9.3 (HIGH)
CWE: CWE-264
References: http://www.adobe.com/support/security/bulletins/apsb11-03.html; http://www.securitytracker.com/id?1025033; http://www.vupen.com/english/advisories/2011/0337
CVE: CVE-2011-0565
Published: 2011-02-10
Description: Unspecified vulnerability in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allows attackers to cause a denial of service or possibly execute arbitrary code via unknown vectors, a different vulnerability than CVE-2011-0585.
CVSS Score: 9.3 (HIGH)
References: http://secunia.com/advisories/43470; http://www.adobe.com/support/security/bulletins/apsb11-03.html; http://www.redhat.com/support/errata/RHSA-2011-0301.html
CVE: CVE-2011-0566
Published: 2011-02-10
Description: Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted image, a different vulnerability than CVE-2011-0567 and CVE-2011-0603.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/43470; http://www.adobe.com/support/security/bulletins/apsb11-03.html; http://www.redhat.com/support/errata/RHSA-2011-0301.html
CVE: CVE-2011-0567
Published: 2011-02-10
Description: AcroRd32.dll in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted image that triggers an incorrect pointer calculation, leading to heap memory corruption, a different vulnerability than CVE-2011-0566 and CVE-2011-0603.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/43470; http://www.adobe.com/support/security/bulletins/apsb11-03.html; http://www.redhat.com/support/errata/RHSA-2011-0301.html
CVE: CVE-2011-0568
Published: 2011-02-10
Description: Unspecified vulnerability in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Mac OS X allows attackers to cause a denial of service or possibly execute arbitrary code via unknown vectors.
CVSS Score: 6.8 (MEDIUM)
References: http://www.adobe.com/support/security/bulletins/apsb11-03.html; http://www.securitytracker.com/id?1025033; http://www.vupen.com/english/advisories/2011/0337
CVE: CVE-2011-0570
Published: 2011-02-10
Description: Untrusted search path vulnerability in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows allows local users to gain privileges via a Trojan horse DLL in the current working directory, a different vulnerability than CVE-2011-0562 and CVE-2011-0588.
CVSS Score: 6.9 (MEDIUM)
References: http://www.adobe.com/support/security/bulletins/apsb11-03.html; http://www.securityfocus.com/bid/46255; http://www.securitytracker.com/id?1025033
CVE: CVE-2011-0585
Published: 2011-02-10
Description: Unspecified vulnerability in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allows attackers to cause a denial of service or possibly execute arbitrary code via unknown vectors, a different vulnerability than CVE-2011-0565.
CVSS Score: 9.3 (HIGH)
References: http://secunia.com/advisories/43470; http://www.adobe.com/support/security/bulletins/apsb11-03.html; http://www.redhat.com/support/errata/RHSA-2011-0301.html
CVE: CVE-2011-0586
Published: 2011-02-10
Description: Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X do not properly validate unspecified input data, which allows attackers to execute arbitrary code via unknown vectors.
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://secunia.com/advisories/43470; http://www.adobe.com/support/security/bulletins/apsb11-03.html; http://www.redhat.com/support/errata/RHSA-2011-0301.html
CVE: CVE-2011-0587
Published: 2011-02-10
Description: Cross-site scripting (XSS) vulnerability in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2011-0604.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/43470; http://www.adobe.com/support/security/bulletins/apsb11-03.html; http://www.redhat.com/support/errata/RHSA-2011-0301.html
CVE: CVE-2011-0588
Published: 2011-02-10
Description: Untrusted search path vulnerability in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows allows local users to gain privileges via a Trojan horse DLL in the current working directory, a different vulnerability than CVE-2011-0562 and CVE-2011-0570.
CVSS Score: 6.9 (MEDIUM)
References: http://www.adobe.com/support/security/bulletins/apsb11-03.html; http://www.securityfocus.com/bid/46254; http://www.securitytracker.com/id?1025033
CVE: CVE-2011-0589
Published: 2011-02-10
Description: Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0563 and CVE-2011-0606.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00006.html; http://secunia.com/advisories/43470; http://www.adobe.com/support/security/bulletins/apsb11-03.html
CVE: CVE-2011-0590
Published: 2011-02-10
Description: Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via a 3D file, a different vulnerability than CVE-2011-0591, CVE-2011-0592, CVE-2011-0593, CVE-2011-0595, and CVE-2011-0600.
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://secunia.com/advisories/43470; http://www.adobe.com/support/security/bulletins/apsb11-03.html; http://www.redhat.com/support/errata/RHSA-2011-0301.html
CVE: CVE-2011-0591
Published: 2011-02-10
Description: Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via a crafted Universal 3D (U3D) file that triggers a buffer overflow during decompression, related to Texture and rgba, a different vulnerability than CVE-2011-0590, CVE-2011-0592, CVE-2011-0593, CVE-2011-0595, and CVE-2011-0600.
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://secunia.com/advisories/43470; http://www.adobe.com/support/security/bulletins/apsb11-03.html; http://www.redhat.com/support/errata/RHSA-2011-0301.html
CVE: CVE-2011-0592
Published: 2011-02-10
Description: Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via a crafted Universal 3D (U3D) file that triggers a buffer overflow during decompression, related to "Texture bmp," a different vulnerability than CVE-2011-0590, CVE-2011-0591, CVE-2011-0593, CVE-2011-0595, and CVE-2011-0600.
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://secunia.com/advisories/43470; http://www.adobe.com/support/security/bulletins/apsb11-03.html; http://www.redhat.com/support/errata/RHSA-2011-0301.html
CVE: CVE-2011-0593
Published: 2011-02-10
Description: Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via a crafted Universal 3D (U3D) file that triggers a buffer overflow during decompression, a different vulnerability than CVE-2011-0590, CVE-2011-0591, CVE-2011-0592, CVE-2011-0595, and CVE-2011-0600.
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://secunia.com/advisories/43470; http://www.adobe.com/support/security/bulletins/apsb11-03.html; http://www.redhat.com/support/errata/RHSA-2011-0301.html
CVE: CVE-2011-0594
Published: 2011-02-10
Description: Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via a font.
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://secunia.com/advisories/43470; http://www.adobe.com/support/security/bulletins/apsb11-03.html; http://www.redhat.com/support/errata/RHSA-2011-0301.html
CVE: CVE-2011-0595
Published: 2011-02-10
Description: Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via a crafted Universal 3D (U3D) file that triggers a buffer overflow during decompression, a different vulnerability than CVE-2011-0590, CVE-2011-0591, CVE-2011-0592, CVE-2011-0593, and CVE-2011-0600.
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://secunia.com/advisories/43470; http://www.adobe.com/support/security/bulletins/apsb11-03.html; http://www.redhat.com/support/errata/RHSA-2011-0301.html
CVE: CVE-2011-0596
Published: 2011-02-10
Description: The Bitmap parsing component in 2d.dll in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via an image with crafted (1) height and (2) width values for an RLE_8 compressed bitmap, which triggers a heap-based buffer overflow, a different vulnerability than CVE-2011-0598, CVE-2011-0599, and CVE-2011-0602.
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://secunia.com/advisories/43470; http://www.adobe.com/support/security/bulletins/apsb11-03.html; http://www.redhat.com/support/errata/RHSA-2011-0301.html
CVE: CVE-2011-0598
Published: 2011-02-10
Description: Integer overflow in ACE.dll in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allows remote attackers to execute arbitrary code via crafted ICC data, a different vulnerability than CVE-2011-0596, CVE-2011-0599, and CVE-2011-0602.
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: http://secunia.com/advisories/43470; http://www.adobe.com/support/security/bulletins/apsb11-03.html; http://www.redhat.com/support/errata/RHSA-2011-0301.html
CVE: CVE-2011-0599
Published: 2011-02-10
Description: The Bitmap parsing component in rt3d.dll in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via a crafted image that causes an invalid pointer calculation related to 4/8-bit RLE compression, a different vulnerability than CVE-2011-0596, CVE-2011-0598, and CVE-2011-0602.
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://secunia.com/advisories/43470; http://www.adobe.com/support/security/bulletins/apsb11-03.html; http://www.redhat.com/support/errata/RHSA-2011-0301.html
CVE: CVE-2011-0600
Published: 2011-02-10
Description: The U3D component in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via a 3D file with an invalid Parent Node count that triggers an incorrect size calculation and memory corruption, a different vulnerability than CVE-2011-0590, CVE-2011-0591, CVE-2011-0592, CVE-2011-0593, and CVE-2011-0595.
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://secunia.com/advisories/43470; http://www.adobe.com/support/security/bulletins/apsb11-03.html; http://www.redhat.com/support/errata/RHSA-2011-0301.html
CVE: CVE-2011-0602
Published: 2011-02-10
Description: Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via crafted JP2K record types in a JPEG2000 image in a PDF file, which causes heap corruption, a different vulnerability than CVE-2011-0596, CVE-2011-0598, and CVE-2011-0599.
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=891; http://secunia.com/advisories/43470; http://www.adobe.com/support/security/bulletins/apsb11-03.html
CVE: CVE-2011-0603
Published: 2011-02-10
Description: Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted image, a different vulnerability than CVE-2011-0566 and CVE-2011-0567.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/43470; http://www.adobe.com/support/security/bulletins/apsb11-03.html; http://www.redhat.com/support/errata/RHSA-2011-0301.html
CVE: CVE-2011-0604
Published: 2011-02-10
Description: Cross-site scripting (XSS) vulnerability in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2011-0587.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/43470; http://www.adobe.com/support/security/bulletins/apsb11-03.html; http://www.redhat.com/support/errata/RHSA-2011-0301.html
CVE: CVE-2011-0605
Published: 2011-02-10
Description: Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://www.adobe.com/support/security/bulletins/apsb11-03.html; http://www.securityfocus.com/bid/46200; http://www.securitytracker.com/id?1025033
CVE: CVE-2011-0606
Published: 2011-02-10
Description: Stack-based buffer overflow in rt3d.dll in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors related to a crafted length value, a different vulnerability than CVE-2011-0563 and CVE-2011-0589.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/43470; http://www.adobe.com/support/security/bulletins/apsb11-03.html; http://www.redhat.com/support/errata/RHSA-2011-0301.html
CVE: CVE-2011-0647
Published: 2011-02-10
Description: The irccd.exe service in EMC Replication Manager Client before 5.3 and NetWorker Module for Microsoft Applications 2.1.x and 2.2.x allows remote attackers to execute arbitrary commands via the RunProgram function to TCP port 6542.
CVSS Score: 10.0 (HIGH)
CWE: CWE-20
References: http://osvdb.org/70853; http://secunia.com/advisories/43164; http://www.securityfocus.com/archive/1/516260
CVE: CVE-2011-0758
Published: 2011-02-10
Description: The eCS component (ECSQdmn.exe) in CA ETrust Secure Content Manager 8.0 and CA Gateway Security 8.1 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a crafted request to port 1882, involving an incorrect integer calculation and a heap-based buffer overflow.
CVSS Score: 10.0 (HIGH)
CWE: CWE-189
References: http://dvlabs.tippingpoint.com/blog/2011/02/07/zdi-disclosure-ca; http://osvdb.org/70840; http://secunia.com/advisories/43200
CVE: CVE-2011-0975
Published: 2011-02-10
Description: Stack-based buffer overflow in BMC PATROL Agent Service Daemon for in Performance Analysis for Servers, Performance Assurance for Servers, and Performance Assurance for Virtual Servers 7.4.00 through 7.5.10; Performance Analyzer and Performance Predictor for Servers 7.4.00 through 7.5.10; and Capacity Management Essentials 1.2.00 (7.4.15) allows remote attackers to execute arbitrary code via a crafted length value in a BGS_MULTIPLE_READS command to TCP port 6768.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://osvdb.org/70788; http://secunia.com/advisories/43177; http://securityreason.com/securityalert/8076
CVE: CVE-2011-0976
Published: 2011-02-10
Description: Microsoft PowerPoint 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2; and PowerPoint Viewer 2007 SP2 do not properly handle Office Art containers that have invalid records, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a PowerPoint document with a container that triggers certain access to an uninitialized object, aka "OfficeArt Atom RCE Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-264
References: http://dvlabs.tippingpoint.com/blog/2011/02/07/zdi-disclosure-microsoft; http://secunia.com/advisories/43213; http://www.securityfocus.com/archive/1/516233/100/0/threaded
CVE: CVE-2011-0977
Published: 2011-02-10
Description: Use-after-free vulnerability in Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via malformed shape data in the Office drawing file format, aka "Microsoft Office Graphic Object Dereferencing Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://dvlabs.tippingpoint.com/blog/2011/02/07/zdi-disclosure-microsoft; http://secunia.com/advisories/43216; http://secunia.com/advisories/44015