deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2011-2447
Published: 2011-11-08
Description: Adobe Shockwave Player before 11.6.3.633 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://www.adobe.com/support/security/bulletins/apsb11-27.html; http://www.securitytracker.com/id?1026288; http://www.adobe.com/support/security/bulletins/apsb11-27.html
CVE: CVE-2011-2448
Published: 2011-11-08
Description: The DIRapi library in Adobe Shockwave Player before 11.6.3.633 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2446.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://www.adobe.com/support/security/bulletins/apsb11-27.html; http://www.securitytracker.com/id?1026288; http://www.adobe.com/support/security/bulletins/apsb11-27.html
CVE: CVE-2011-2449
Published: 2011-11-08
Description: The TextXtra module in Adobe Shockwave Player before 11.6.3.633 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://www.adobe.com/support/security/bulletins/apsb11-27.html; http://www.securitytracker.com/id?1026288; http://www.adobe.com/support/security/bulletins/apsb11-27.html
CVE: CVE-2011-4000
Published: 2011-11-08
Description: Buffer overflow in ChaSen 2.4.x allows remote attackers to execute arbitrary code via a crafted string.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://jvn.jp/en/jp/JVN16901583/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2011-000099; http://secunia.com/advisories/47458
CVE: CVE-2011-3647
Published: 2011-11-09
Description: The JSSubScriptLoader in Mozilla Firefox before 3.6.24 and Thunderbird before 3.1.6 does not properly handle XPCNativeWrappers during calls to the loadSubScript method in an add-on, which makes it easier for remote attackers to gain privileges via a crafted web site that leverages certain unwrapping behavior, a related issue to CVE-2011-3004.
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00020.html; http://www.mozilla.org/security/announce/2011/mfsa2011-46.html; http://www.redhat.com/support/errata/RHSA-2011-1439.html
CVE: CVE-2011-3648
Published: 2011-11-09
Description: Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 3.6.24 and 4.x through 7.0 and Thunderbird before 3.1.6 and 5.0 through 7.0 allows remote attackers to inject arbitrary web script or HTML via crafted text with Shift JIS encoding.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00020.html; http://www.mozilla.org/security/announce/2011/mfsa2011-47.html; http://www.redhat.com/support/errata/RHSA-2011-1439.html
CVE: CVE-2011-3649
Published: 2011-11-09
Description: Mozilla Firefox 7.0 and Thunderbird 7.0, when the Direct2D (aka D2D) API is used on Windows in conjunction with the Azure graphics back-end, allow remote attackers to bypass the Same Origin Policy, and obtain sensitive image data from a different domain, by inserting this data into a canvas.  NOTE: this issue exists because of a CVE-2011-2986 regression.
CVSS Score: 2.6 (LOW)
CWE: CWE-200
References: http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00020.html; http://www.mozilla.org/security/announce/2011/mfsa2011-50.html; http://www.securityfocus.com/bid/50591
CVE: CVE-2011-3650
Published: 2011-11-09
Description: Mozilla Firefox before 3.6.24 and 4.x through 7.0 and Thunderbird before 3.1.6 and 5.0 through 7.0 do not properly handle JavaScript files that contain many functions, which allows user-assisted remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via a crafted file that is accessed by debugging APIs, as demonstrated by Firebug.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00020.html; http://www.mozilla.org/security/announce/2011/mfsa2011-49.html; http://www.redhat.com/support/errata/RHSA-2011-1439.html
CVE: CVE-2011-3651
Published: 2011-11-09
Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 7.0 and Thunderbird 7.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00020.html; http://secunia.com/advisories/49055; http://www.mozilla.org/security/announce/2011/mfsa2011-48.html
CVE: CVE-2011-3652
Published: 2011-11-09
Description: The browser engine in Mozilla Firefox before 8.0 and Thunderbird before 8.0 does not properly allocate memory, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/49055; http://www.mozilla.org/security/announce/2011/mfsa2011-48.html; https://bugzilla.mozilla.org/show_bug.cgi?id=682727
CVE: CVE-2011-3653
Published: 2011-11-09
Description: Mozilla Firefox before 8.0 and Thunderbird before 8.0 on Mac OS X do not properly interact with the GPU memory behavior of a certain driver for Intel integrated GPUs, which allows remote attackers to bypass the Same Origin Policy and read image data via vectors related to WebGL textures.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00020.html; http://www.mozilla.org/security/announce/2011/mfsa2011-51.html; https://bugzilla.mozilla.org/show_bug.cgi?id=684882
CVE: CVE-2011-3654
Published: 2011-11-09
Description: The browser engine in Mozilla Firefox before 8.0 and Thunderbird before 8.0 does not properly handle links from SVG mpath elements to non-SVG elements, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/49055; http://www.mozilla.org/security/announce/2011/mfsa2011-48.html; https://bugzilla.mozilla.org/show_bug.cgi?id=694953
CVE: CVE-2011-3655
Published: 2011-11-09
Description: Mozilla Firefox 4.x through 7.0 and Thunderbird 5.0 through 7.0 perform access control without checking for use of the NoWaiverWrapper wrapper, which allows remote attackers to gain privileges via a crafted web site.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00020.html; http://secunia.com/advisories/49055; http://www.mozilla.org/security/announce/2011/mfsa2011-52.html
CVE: CVE-2011-3997
Published: 2011-11-09
Description: Opengear console servers with firmware before 2.2.1 allow remote attackers to bypass authentication, and modify settings or access connected equipment, via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: http://jvn.jp/en/jp/JVN71349007/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2011-000096; http://jvn.jp/en/jp/JVN71349007/index.html
CVE: CVE-2011-3998
Published: 2011-11-09
Description: Cross-site scripting (XSS) vulnerability in Apple WebObjects 5.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN37223351/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2011-000097; http://jvn.jp/en/jp/JVN37223351/index.html
CVE: CVE-2011-3999
Published: 2011-11-09
Description: Cross-site scripting (XSS) vulnerability in the RSS/Atom feed-reader implementation in Iwate Portal Bar allows remote attackers to inject arbitrary web script or HTML via a crafted feed.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN33861625/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2011-000098; http://jvn.jp/en/jp/JVN33861625/index.html
CVE: CVE-2011-1373
Published: 2011-11-09
Description: Unspecified vulnerability in IBM DB2 9.7 before FP5 on UNIX, when the Self Tuning Memory Manager (STMM) feature and the AUTOMATIC DATABASE_MEMORY setting are configured, allows local users to cause a denial of service (daemon crash) via unknown vectors.
CVSS Score: 1.5 (LOW)
References: http://www-01.ibm.com/support/docview.wss?uid=swg1IC70473; https://exchange.xforce.ibmcloud.com/vulnerabilities/71043; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14720
CVE: CVE-2011-2739
Published: 2011-11-09
Description: The file-blocking feature in EMC Documentum eRoom 7.3.x and 7.4.x before 7.4.3.g does not properly restrict the uploading and opening of files with dangerous file types, which allows remote authenticated users to execute arbitrary code via an uploaded file.
CVSS Score: 8.5 (HIGH)
CWE: CWE-264
References: http://securityreason.com/securityalert/8528; http://www.securityfocus.com/archive/1/520372; http://securityreason.com/securityalert/8528
CVE: CVE-2011-2740
Published: 2011-11-09
Description: EMC RSA Key Manager (RKM) Appliance 2.7 SP1 before 2.7.1.6, when Firefox 4.x or 5.0 is used, does not properly terminate a user session upon a logout action, which makes it easier for remote attackers to execute arbitrary code by leveraging an unattended workstation.
CVSS Score: 9.3 (HIGH)
CWE: CWE-264
References: http://securityreason.com/securityalert/8529; http://www.securityfocus.com/archive/1/520381; http://www.securitytracker.com/id?1026276
CVE: CVE-2011-3985
Published: 2011-11-09
Description: Cross-site scripting (XSS) vulnerability in Plume before 1.2.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 2.6 (LOW)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN08307791/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2011-000083; http://jvn.jp/en/jp/JVN08307791/index.html
CVE: CVE-2011-4431
Published: 2011-11-10
Description: Directory traversal vulnerability in main.php in Merethis Centreon before 2.3.2 allows remote authenticated users to execute arbitrary commands via a .. (dot dot) in the command_name parameter.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: http://securityreason.com/securityalert/8530; https://www.trustwave.com/spiderlabs/advisories/TWSL2011-017.txt; http://securityreason.com/securityalert/8530
CVE: CVE-2011-4432
Published: 2011-11-10
Description: www/include/configuration/nconfigObject/contact/DB-Func.php in Merethis Centreon before 2.3.2 does not use a salt during calculation of a password hash, which makes it easier for context-dependent attackers to determine cleartext passwords via a rainbow-table approach.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-310
References: http://securityreason.com/securityalert/8530; https://www.trustwave.com/spiderlabs/advisories/TWSL2011-017.txt; http://securityreason.com/securityalert/8530
CVE: CVE-2011-3892
Published: 2011-11-11
Description: Double free vulnerability in the Theora decoder in Google Chrome before 15.0.874.120 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted stream.
CVSS Score: 7.5 (HIGH)
CWE: CWE-415
References: http://code.google.com/p/chromium/issues/detail?id=100465; http://googlechromereleases.blogspot.com/2011/11/stable-channel-update.html; http://secunia.com/advisories/46933
CVE: CVE-2011-3893
Published: 2011-11-11
Description: Google Chrome before 15.0.874.120 does not properly implement the MKV and Vorbis media handlers, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-125
References: http://code.google.com/p/chromium/issues/detail?id=100492; http://code.google.com/p/chromium/issues/detail?id=100543; http://googlechromereleases.blogspot.com/2011/11/stable-channel-update.html
CVE: CVE-2011-3894
Published: 2011-11-11
Description: Google Chrome before 15.0.874.120 does not properly perform VP8 decoding, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted stream.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://code.google.com/p/chromium/issues/detail?id=101172; http://googlechromereleases.blogspot.com/2011/11/stable-channel-update.html; http://secunia.com/advisories/46933
CVE: CVE-2011-3895
Published: 2011-11-11
Description: Heap-based buffer overflow in the Vorbis decoder in Google Chrome before 15.0.874.120 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted stream.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: http://code.google.com/p/chromium/issues/detail?id=101458; http://googlechromereleases.blogspot.com/2011/11/stable-channel-update.html; http://secunia.com/advisories/46933
CVE: CVE-2011-3896
Published: 2011-11-11
Description: Buffer overflow in Google Chrome before 15.0.874.120 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to shader variable mapping.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: http://code.google.com/p/chromium/issues/detail?id=101624; http://googlechromereleases.blogspot.com/2011/11/stable-channel-update.html; http://secunia.com/advisories/46933
CVE: CVE-2011-3897
Published: 2011-11-11
Description: Use-after-free vulnerability in Google Chrome before 15.0.874.120 allows user-assisted remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to editing.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-416
References: http://code.google.com/p/chromium/issues/detail?id=102242; http://googlechromereleases.blogspot.com/2011/11/stable-channel-update.html; http://lists.apple.com/archives/security-announce/2012/Mar/msg00000.html
CVE: CVE-2011-3898
Published: 2011-11-11
Description: Google Chrome before 15.0.874.120, when Java Runtime Environment (JRE) 7 is used, does not request user confirmation before applet execution begins, which allows remote attackers to have an unspecified impact via a crafted applet.
CVSS Score: 7.5 (HIGH)
CWE: CWE-269
References: http://code.google.com/p/chromium/issues/detail?id=102461; http://googlechromereleases.blogspot.com/2011/11/stable-channel-update.html; http://secunia.com/advisories/46933
CVE: CVE-2011-2445
Published: 2011-11-11
Description: Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2451, CVE-2011-2452, CVE-2011-2453, CVE-2011-2454, CVE-2011-2455, CVE-2011-2459, and CVE-2011-2460.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00014.html; http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00017.html; http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00019.html
CVE: CVE-2011-2450
Published: 2011-11-11
Description: Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00014.html; http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00017.html; http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00019.html
CVE: CVE-2011-2451
Published: 2011-11-11
Description: Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2445, CVE-2011-2452, CVE-2011-2453, CVE-2011-2454, CVE-2011-2455, CVE-2011-2459, and CVE-2011-2460.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00014.html; http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00017.html; http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00019.html
CVE: CVE-2011-2452
Published: 2011-11-11
Description: Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2445, CVE-2011-2451, CVE-2011-2453, CVE-2011-2454, CVE-2011-2455, CVE-2011-2459, and CVE-2011-2460.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00014.html; http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00017.html; http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00019.html
CVE: CVE-2011-2453
Published: 2011-11-11
Description: Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2445, CVE-2011-2451, CVE-2011-2452, CVE-2011-2454, CVE-2011-2455, CVE-2011-2459, and CVE-2011-2460.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00014.html; http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00017.html; http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00019.html
CVE: CVE-2011-2454
Published: 2011-11-11
Description: Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2445, CVE-2011-2451, CVE-2011-2452, CVE-2011-2453, CVE-2011-2455, CVE-2011-2459, and CVE-2011-2460.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00014.html; http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00017.html; http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00019.html
CVE: CVE-2011-2455
Published: 2011-11-11
Description: Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2445, CVE-2011-2451, CVE-2011-2452, CVE-2011-2453, CVE-2011-2454, CVE-2011-2459, and CVE-2011-2460.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00014.html; http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00017.html; http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00019.html
CVE: CVE-2011-2456
Published: 2011-11-11
Description: Buffer overflow in Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code via unspecified vectors.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00014.html; http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00017.html; http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00019.html
CVE: CVE-2011-2457
Published: 2011-11-11
Description: Stack-based buffer overflow in Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code via unspecified vectors.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00014.html; http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00017.html; http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00019.html
CVE: CVE-2011-2458
Published: 2011-11-11
Description: Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, when Internet Explorer is used, allows remote attackers to bypass the cross-domain policy via a crafted web site.
CVSS Score: 9.3 (HIGH)
CWE: CWE-264
References: http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00014.html; http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00017.html; http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00019.html
CVE: CVE-2011-2459
Published: 2011-11-11
Description: Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2445, CVE-2011-2451, CVE-2011-2452, CVE-2011-2453, CVE-2011-2454, CVE-2011-2455, and CVE-2011-2460.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00014.html; http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00017.html; http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00019.html
CVE: CVE-2011-2460
Published: 2011-11-11
Description: Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2445, CVE-2011-2451, CVE-2011-2452, CVE-2011-2453, CVE-2011-2454, CVE-2011-2455, and CVE-2011-2459.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00014.html; http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00017.html; http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00019.html
CVE: CVE-2011-3439
Published: 2011-11-11
Description: FreeType in CoreGraphics in Apple iOS before 5.0.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font in a document.
CVSS Score: 9.3 (HIGH)
CWE: CWE-787
References: http://lists.apple.com/archives/Security-announce/2011/Nov/msg00001.html; http://lists.opensuse.org/opensuse-security-announce/2011-12/msg00008.html; http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00003.html
CVE: CVE-2011-3440
Published: 2011-11-11
Description: The Passcode Lock feature in Apple iOS before 5.0.1 on the iPad 2 does not properly implement the locked state, which allows physically proximate attackers to access data by opening a Smart Cover during power-off confirmation.
CVSS Score: 1.2 (LOW)
CWE: CWE-264
References: http://lists.apple.com/archives/Security-announce/2011/Nov/msg00001.html; http://support.apple.com/kb/HT5052; http://lists.apple.com/archives/Security-announce/2011/Nov/msg00001.html