deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2010-2566
Published: 2010-08-11
Description: The Secure Channel (aka SChannel) security package in Microsoft Windows XP SP2 and SP3, and Windows Server 2003 SP2, does not properly validate certificate request messages from TLS and SSL servers, which allows remote servers to execute arbitrary code via a crafted SSL response, aka "SChannel Malformed Certificate Request Remote Code Execution Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://www.us-cert.gov/cas/techalerts/TA10-222A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-049; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11787
CVE: CVE-2010-2861
Published: 2010-08-11
Description: Multiple directory traversal vulnerabilities in the administrator console in Adobe ColdFusion 9.0.1 and earlier allow remote attackers to read arbitrary files via the locale parameter to (1) CFIDE/administrator/settings/mappings.cfm, (2) logging/settings.cfm, (3) datasources/index.cfm, (4) j2eepackaging/editarchive.cfm, and (5) enter.cfm in CFIDE/administrator/.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22, CWE-22
References: http://securityreason.com/securityalert/8137; http://securityreason.com/securityalert/8148; http://www.adobe.com/support/security/bulletins/apsb10-18.html
CVE: CVE-2010-2990
Published: 2010-08-11
Description: Citrix Online Plug-in for Windows for XenApp & XenDesktop before 11.2, Citrix Online Plug-in for Mac for XenApp & XenDesktop before 11.0, Citrix ICA Client for Linux before 11.100, Citrix ICA Client for Solaris before 8.63, and Citrix Receiver for Windows Mobile before 11.5 allow remote attackers to execute arbitrary code via (1) a crafted HTML document, (2) a crafted .ICA file, or (3) a crafted type field in an ICA graphics packet, related to a "heap offset overflow" issue.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://archives.neohapsis.com/archives/fulldisclosure/2010-08/0040.html; http://secunia.com/advisories/40808; http://support.citrix.com/article/CTX125975
CVE: CVE-2010-2991
Published: 2010-08-11
Description: The IICAClient interface in the ICAClient library in the ICA Client ActiveX Object (aka ICO) component in Citrix Online Plug-in for Windows for XenApp & XenDesktop before 12.0.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted HTML document that triggers the reading of a .ICA file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=875; http://secunia.com/advisories/40819; http://secunia.com/advisories/40821
CVE: CVE-2010-2992
Published: 2010-08-13
Description: packet-gsm_a_rr.c in the GSM A RR dissector in Wireshark 1.2.2 through 1.2.9 allows remote attackers to cause a denial of service (crash) via unknown vectors that trigger a NULL pointer dereference.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html; http://secunia.com/advisories/42877
CVE: CVE-2010-2993
Published: 2010-08-13
Description: The IPMI dissector in Wireshark 1.2.0 through 1.2.9 allows remote attackers to cause a denial of service (infinite loop) via unknown vectors.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html; http://secunia.com/advisories/42877
CVE: CVE-2010-2994
Published: 2010-08-13
Description: Stack-based buffer overflow in the ASN.1 BER dissector in Wireshark 0.10.13 through 1.0.14 and 1.2.0 through 1.2.9 has unknown impact and remote attack vectors.  NOTE: this issue exists because of a CVE-2010-2284 regression.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html; http://secunia.com/advisories/42877
CVE: CVE-2010-2995
Published: 2010-08-13
Description: The SigComp Universal Decompressor Virtual Machine (UDVM) in Wireshark 0.10.8 through 1.0.14 and 1.2.0 through 1.2.9 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to sigcomp-udvm.c and an off-by-one error, which triggers a buffer overflow, different vulnerabilities than CVE-2010-2287.
CVSS Score: 10.0 (HIGH)
CWE: CWE-189
References: http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html; http://secunia.com/advisories/42877
CVE: CVE-2010-1519
Published: 2010-08-16
Description: Multiple integer overflows in glpng.c in glpng 1.45 allow context-dependent attackers to execute arbitrary code via a crafted PNG image, related to (1) the pngLoadRawF function and (2) the pngLoadF function, leading to heap-based buffer overflows.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-189
References: http://secunia.com/advisories/40354; http://secunia.com/secunia_research/2010-87/; http://www.mandriva.com/security/advisories?name=MDVSA-2010:179
CVE: CVE-2010-2756
Published: 2010-08-16
Description: Search.pm in Bugzilla 2.19.1 through 3.2.7, 3.3.1 through 3.4.7, 3.5.1 through 3.6.1, and 3.7 through 3.7.2 allows remote attackers to determine the group memberships of arbitrary users via vectors involving the Search interface, boolean charts, and group-based pronouns.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://lists.fedoraproject.org/pipermail/package-announce/2010-August/046518.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-August/046534.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-August/046546.html
CVE: CVE-2010-2757
Published: 2010-08-16
Description: The sudo feature in Bugzilla 2.22rc1 through 3.2.7, 3.3.1 through 3.4.7, 3.5.1 through 3.6.1, and 3.7 through 3.7.2 does not properly send impersonation notifications, which makes it easier for remote authenticated users to impersonate other users without discovery.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-310
References: http://lists.fedoraproject.org/pipermail/package-announce/2010-August/046518.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-August/046534.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-August/046546.html
CVE: CVE-2010-2758
Published: 2010-08-16
Description: Bugzilla 2.17.1 through 3.2.7, 3.3.1 through 3.4.7, 3.5.1 through 3.6.1, and 3.7 through 3.7.2 generates different error messages depending on whether a product exists, which makes it easier for remote attackers to guess product names via unspecified use of the (1) Reports or (2) Duplicates page.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://lists.fedoraproject.org/pipermail/package-announce/2010-August/046518.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-August/046534.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-August/046546.html
CVE: CVE-2010-2759
Published: 2010-08-16
Description: Bugzilla 2.23.1 through 3.2.7, 3.3.1 through 3.4.7, 3.5.1 through 3.6.1, and 3.7 through 3.7.2, when PostgreSQL is used, does not properly handle large integers in (1) bug and (2) attachment phrases, which allows remote authenticated users to cause a denial of service (bug invisibility) via a crafted comment.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-189
References: http://lists.fedoraproject.org/pipermail/package-announce/2010-August/046518.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-August/046534.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-August/046546.html
CVE: CVE-2010-2577
Published: 2010-08-16
Description: Multiple SQL injection vulnerabilities in Pligg before 1.1.1 allow remote attackers to execute arbitrary SQL commands via the title parameter to (1) storyrss.php or (2) story.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/40931; http://secunia.com/secunia_research/2010-111/; http://www.osvdb.org/67067
CVE: CVE-2010-3013
Published: 2010-08-16
Description: SQL injection vulnerability in groupadmin.php in Pligg before 1.1.1 allows remote attackers to execute arbitrary SQL commands via the role parameter, a different vulnerability than CVE-2010-2577.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://pligg.svn.sourceforge.net/viewvc/pligg/trunk/groupadmin.php?r1=1532&r2=2143&pathrev=2143; http://pligg.svn.sourceforge.net/viewvc/pligg/trunk/groupadmin.php?view=log&pathrev=2143; http://secunia.com/advisories/40931
CVE: CVE-2010-1797
Published: 2010-08-16
Description: Multiple stack-based buffer overflows in the cff_decoder_parse_charstrings function in the CFF Type2 CharStrings interpreter in cff/cffgload.c in FreeType before 2.4.2, as used in Apple iOS before 4.0.2 on the iPhone and iPod touch and before 3.2.2 on the iPad, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted CFF opcodes in embedded fonts in a PDF document, as demonstrated by JailbreakMe. NOTE: some of these details are obtained from third party information.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://freetype.sourceforge.net/index2.html#release-freetype-2.4.2; http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=018f5c27813dd7eef4648fe254632ecea0c85a50; http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=11d65e8a1f1f14e56148fd991965424d9bd1cdbc
CVE: CVE-2010-1799
Published: 2010-08-16
Description: Stack-based buffer overflow in the error-logging functionality in Apple QuickTime before 7.6.7 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2010//Aug/msg00002.html; http://support.apple.com/kb/HT4290; http://www.securityfocus.com/bid/41962
CVE: CVE-2010-1886
Published: 2010-08-16
Description: Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 SP2 and R2, and Windows 7 allow local users to gain privileges by leveraging access to a process with NetworkService credentials, as demonstrated by TAPI Server, SQL Server, and IIS processes, and related to the Windows Service Isolation feature.  NOTE: the vendor states that privilege escalation from NetworkService to LocalSystem does not cross a "security boundary."
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-264
References: http://support.microsoft.com/kb/2264072; http://support.microsoft.com/kb/982316; http://www.microsoft.com/technet/security/advisory/2264072.mspx
CVE: CVE-2010-2576
Published: 2010-08-16
Description: Opera before 10.61 does not properly suppress clicks on download dialogs that became visible after a recent tab change, which allows remote attackers to conduct clickjacking attacks, and consequently execute arbitrary code, via vectors involving (1) closing a tab or (2) hiding a tab, a related issue to CVE-2005-2407.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://secunia.com/secunia_research/2010-110/; http://www.opera.com/docs/changelogs/mac/1061/; http://www.opera.com/docs/changelogs/unix/1061/
CVE: CVE-2010-2827
Published: 2010-08-16
Description: Cisco IOS 15.1(2)T allows remote attackers to cause a denial of service (resource consumption and TCP outage) via spoofed TCP packets, related to embryonic TCP connections that remain in the SYN_RCVD or SYN_SENT state, aka Bug ID CSCti18193.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://www.cisco.com/en/US/products/products_security_advisory09186a0080b4095e.shtml; http://www.securityfocus.com/bid/42426; http://www.cisco.com/en/US/products/products_security_advisory09186a0080b4095e.shtml
CVE: CVE-2010-3019
Published: 2010-08-16
Description: Heap-based buffer overflow in Opera before 10.61 allows remote attackers to execute arbitrary code or cause a denial of service (application crash or hang) via vectors related to HTML5 canvas painting operations that occur during the application of transformations.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.opera.com/docs/changelogs/mac/1061/; http://www.opera.com/docs/changelogs/unix/1061/; http://www.opera.com/docs/changelogs/windows/1061/
CVE: CVE-2010-3020
Published: 2010-08-16
Description: The news-feed preview feature in Opera before 10.61 does not properly remove scripts, which allows remote attackers to force subscriptions to arbitrary feeds via crafted content.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://www.opera.com/docs/changelogs/mac/1061/; http://www.opera.com/docs/changelogs/unix/1061/; http://www.opera.com/docs/changelogs/windows/1061/
CVE: CVE-2010-3021
Published: 2010-08-16
Description: Unspecified vulnerability in Opera before 10.61 allows remote attackers to cause a denial of service (CPU consumption and application hang) via an animated PNG image.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-399
References: http://www.opera.com/docs/changelogs/mac/1061/; http://www.opera.com/docs/changelogs/unix/1061/; http://www.opera.com/docs/changelogs/windows/1061/
CVE: CVE-2009-4269
Published: 2010-08-16
Description: The password hash generation algorithm in the BUILTIN authentication functionality for Apache Derby before 10.6.1.0 performs a transformation that reduces the size of the set of inputs to SHA-1, which produces a small search space that makes it easier for local and possibly remote attackers to crack passwords by generating hash collisions, related to password substitution.
CVSS Score: 2.1 (LOW)
CWE: CWE-310
References: http://blogs.sun.com/kah/entry/derby_10_6_1_has; http://db.apache.org/derby/releases/release-10.6.1.0.cgi#Fix+for+Security+Bug+CVE-2009-4269; http://marc.info/?l=apache-db-general&m=[PII_REDACTED]5504&w=1
CVE: CVE-2010-3022
Published: 2010-08-16
Description: Cross-site scripting (XSS) vulnerability in the Performance logging module in the Devel module 5.x before 5.x-1.3 and 6.x before 6.x-1.21 for Drupal allows remote authenticated users, with add url aliases and report access permissions, to inject arbitrary web script or HTML via crafted node paths in a URL.
CVSS Score: 2.6 (LOW)
CWE: CWE-79
References: http://drupal.org/node/874116; http://drupal.org/node/874130; http://drupal.org/node/874132
CVE: CVE-2010-3023
Published: 2010-08-16
Description: Multiple cross-site scripting (XSS) vulnerabilities in DiamondList 0.1.6, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) category[description] parameter to user/main/update_category, which is not properly handled by _app/views/categories/index.html.erb; and the (2) setting[site_title] parameter to user/main/update_settings, which is not properly handled by _app/views/settings/_list_settings.rhtml.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://dev.hulihanapplications.com/issues/show/211; http://dev.hulihanapplications.com/issues/show/213; http://packetstormsecurity.org/1008-exploits/diamondlist-xssxsrf.txt
CVE: CVE-2010-3024
Published: 2010-08-16
Description: Multiple cross-site request forgery (CSRF) vulnerabilities in user/main/update_user in DiamondList 0.1.6, and possibly earlier, allow remote attackers to hijack the authentication of administrators for requests that (1) change the administrative password or (2) change the site's configuration.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://dev.hulihanapplications.com/issues/show/212; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9426&w=2; http://osvdb.org/66918
CVE: CVE-2010-3025
Published: 2010-08-16
Description: Multiple cross-site scripting (XSS) vulnerabilities in Tomaz Muraus Open Blog 1.2.1, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) excerpt parameter to application/modules/admin/controllers/posts.php, as reachable by admin/posts/edit; and the (2) content parameter to application/modules/admin/controllers/pages.php, as reachable by admin/posts/edit.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.org/1008-exploits/openblog-xssxsrf.txt; http://secunia.com/advisories/40876; http://www.htbridge.ch/advisory/xss_vulnerability_in_open_blog.html
CVE: CVE-2010-3026
Published: 2010-08-16
Description: Cross-site request forgery (CSRF) vulnerability in application/modules/admin/controllers/users.php in Tomaz Muraus Open Blog 1.2.1, and possibly earlier, allows remote attackers to hijack the authentication of administrators for requests to admin/users/edit that grant administrative privileges.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: http://osvdb.org/66925; http://packetstormsecurity.org/1008-exploits/openblog-xssxsrf.txt; http://secunia.com/advisories/40876
CVE: CVE-2010-3027
Published: 2010-08-16
Description: SQL injection vulnerability in index.php in Tycoon Baseball Script 1.0.9 allows remote attackers to execute arbitrary SQL commands via the game_id parameter in a game_player action.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.org/1008-exploits/tycoonrecord-sql.txt; http://secunia.com/advisories/40920; http://www.exploit-db.com/exploits/14572
CVE: CVE-2010-3028
Published: 2010-08-16
Description: The Aardvertiser component before 2.2.1 for Joomla! uses insecure permissions (777) in unspecified folders, which allows local users to modify, create, or delete certain files.
CVSS Score: 3.6 (LOW)
CWE: CWE-264
References: http://secunia.com/advisories/40882; http://sourceforge.net/projects/aardvertiser/forums/forum/989030/topic/3788365; http://www.osvdb.org/66924
CVE: CVE-2010-3029
Published: 2010-08-16
Description: SQL injection vulnerability in statistics.php in PHPKick 0.8 allows remote attackers to execute arbitrary SQL commands via the gameday parameter in an overview action.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.exploit-db.com/exploits/14578; http://www.exploit-db.com/exploits/14578
CVE: CVE-2010-2822
Published: 2010-08-17
Description: Unspecified vulnerability in the RTSP inspection feature on the Cisco Application Control Engine (ACE) Module with software before A2(3.2) for Catalyst 6500 series switches and 7600 series routers, and the Cisco Application Control Engine (ACE) 4710 appliance with software before A3(2.6), allows remote attackers to cause a denial of service (device reload) via crafted RTSP packets over TCP, aka Bug IDs CSCta85227 and CSCtg14858.
CVSS Score: 7.8 (HIGH)
References: http://www.cisco.com/en/US/products/products_security_advisory09186a0080b4091d.shtml; http://www.cisco.com/en/US/products/products_security_advisory09186a0080b4091d.shtml
CVE: CVE-2010-2823
Published: 2010-08-17
Description: Unspecified vulnerability in the deep packet inspection feature on the Cisco Application Control Engine (ACE) 4710 appliance with software before A3(2.6) allows remote attackers to cause a denial of service (device reload) via crafted HTTP packets, related to HTTP, RTSP, and SIP inspection, aka Bug ID CSCtb54493.
CVSS Score: 7.8 (HIGH)
References: http://www.cisco.com/en/US/products/products_security_advisory09186a0080b4091d.shtml; http://www.cisco.com/en/US/products/products_security_advisory09186a0080b4091d.shtml
CVE: CVE-2010-2824
Published: 2010-08-17
Description: Unspecified vulnerability on the Cisco Application Control Engine (ACE) Module with software A2(1.x) before A2(1.6), A2(2.x) before A2(2.3), and A2(3.x) before A2(3.1) for Catalyst 6500 series switches and 7600 series routers allows remote attackers to cause a denial of service (device reload) via a sequence of SSL packets, aka Bug ID CSCta20756.
CVSS Score: 7.8 (HIGH)
References: http://www.cisco.com/en/US/products/products_security_advisory09186a0080b4091d.shtml; http://www.cisco.com/en/US/products/products_security_advisory09186a0080b4091d.shtml
CVE: CVE-2010-2825
Published: 2010-08-17
Description: Unspecified vulnerability in the SIP inspection feature on the Cisco Application Control Engine (ACE) Module with software A2(1.x) before A2(1.6), A2(2.x) before A2(2.3), and A2(3.x) before A2(3.1) for Catalyst 6500 series switches and 7600 series routers, and the Cisco Application Control Engine (ACE) 4710 appliance with software before A3(2.4), allows remote attackers to cause a denial of service (device reload) via crafted SIP packets over (1) TCP or (2) UDP, aka Bug IDs CSCta65603 and CSCta71569.
CVSS Score: 7.8 (HIGH)
References: http://www.cisco.com/en/US/products/products_security_advisory09186a0080b4091d.shtml; http://www.cisco.com/en/US/products/products_security_advisory09186a0080b4091d.shtml
CVE: CVE-2010-2826
Published: 2010-08-17
Description: SQL injection vulnerability in Cisco Wireless Control System (WCS) 6.0.x before 6.0.196.0 allows remote authenticated users to execute arbitrary SQL commands via vectors related to the ORDER BY clause of the Client List screens, aka Bug ID CSCtf37019.
CVSS Score: 9.0 (HIGH)
CWE: CWE-89
References: http://www.cisco.com/en/US/products/products_security_advisory09186a0080b4091e.shtml; http://www.cisco.com/en/US/products/products_security_advisory09186a0080b4091e.shtml
CVE: CVE-2010-3016
Published: 2010-08-17
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2010-2803.  Reason: This candidate is a reservation duplicate of CVE-2010-2803.  Notes: All CVE users should reference CVE-2010-2803 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2009-3737
Published: 2010-08-17
Description: The Oracle Siebel Option Pack for IE ActiveX control does not properly initialize memory that is used by the NewBusObj method, which allows remote attackers to execute arbitrary code via a crafted HTML document.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://secunia.com/advisories/40804; http://www.kb.cert.org/vuls/id/174089; http://www.osvdb.org/66926
CVE: CVE-2010-0126
Published: 2010-08-17
Description: Heap-based buffer overflow in an unspecified library in Autonomy KeyView 10.4 and 10.9, as used in multiple IBM, Symantec, and other products, allows remote attackers to execute arbitrary code via a crafted compound file, as demonstrated using a Quattro Pro file, which is not properly handled by the Quattro speed reader (qpssr.dll).
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/secunia_research/2010-16/; http://www-01.ibm.com/support/docview.wss?uid=swg21440812; http://www.securityfocus.com/bid/41928
CVE: CVE-2010-0131
Published: 2010-08-17
Description: Stack-based buffer overflow in the SpreadSheet Lotus 123 reader (wkssr.dll), as used in Autonomy KeyView 10.4 and 10.9, Symantec Mail Security, and possibly other products, allows remote attackers to execute arbitrary code via unspecified vectors related to floating point conversion in unknown record types.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/secunia_research/2010-23/; http://secunia.com/secunia_research/2010-25/; http://www-01.ibm.com/support/docview.wss?uid=swg21440812
CVE: CVE-2010-0133
Published: 2010-08-17
Description: Multiple stack-based buffer overflows in the SpreadSheet Lotus 123 reader (wkssr.dll) in Autonomy KeyView 10.4 and 10.9, as used in multiple IBM, Symantec, and other products, allow remote attackers to execute arbitrary code via unspecified vectors related to "certain records."
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/secunia_research/2010-28/; http://www-01.ibm.com/support/docview.wss?uid=swg21440812; http://www.securityfocus.com/bid/41928
CVE: CVE-2010-0134
Published: 2010-08-17
Description: Integer signedness error in rtfsr.dll in Autonomy KeyView 10.4 and 10.9, as used in multiple IBM, Symantec, and other products, allows remote attackers to execute arbitrary code via a crafted \ls keyword in a list override table entry in an RTF file, which triggers a buffer overflow.
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: http://secunia.com/secunia_research/2010-27/; http://www-01.ibm.com/support/docview.wss?uid=swg21440812; http://www.securityfocus.com/bid/41928