deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2011-2201
Published: 2011-09-14
Description: The Data::FormValidator module 4.66 and earlier for Perl, when untaint_all_constraints is enabled, does not properly preserve the taint attribute of data, which might allow remote attackers to bypass the taint protection mechanism via form input.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-264
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=629511; http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065416.html; http://www.openwall.com/lists/oss-security/2011/06/12/3
CVE: CVE-2011-2581
Published: 2011-09-14
Description: The ACL implementation in Cisco NX-OS 5.0(2) and 5.0(3) before 5.0(3)N2(1) on Nexus 5000 series switches, and NX-OS before 5.0(3)U1(2a) on Nexus 3000 series switches, does not properly handle comments in conjunction with deny statements, which allows remote attackers to bypass intended access restrictions in opportunistic circumstances by sending packets, aka Bug IDs CSCto09813 and CSCtr61490.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://secunia.com/advisories/45883; http://www.cisco.com/en/US/products/products_security_advisory09186a0080b9250c.shtml; http://www.securitytracker.com/id?1026019
CVE: CVE-2011-2595
Published: 2011-09-14
Description: Multiple stack-based buffer overflows in ACDSee FotoSlate 4.0 Build 146 allow remote attackers to execute arbitrary code via a long id parameter in a (1) String or (2) Int tag in a FotoSlate Project (aka PLP) file.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://osvdb.org/75425; http://secunia.com/advisories/44722; http://www.securityfocus.com/bid/49558
CVE: CVE-2011-3208
Published: 2011-09-14
Description: Stack-based buffer overflow in the split_wildmats function in nntpd.c in nntpd in Cyrus IMAP Server before 2.3.17 and 2.4.x before 2.4.11 allows remote attackers to execute arbitrary code via a crafted NNTP command.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://asg.andrew.cmu.edu/archive/message.php?mailbox=archive.cyrus-announce&msg=199; http://asg.andrew.cmu.edu/archive/message.php?mailbox=archive.cyrus-announce&msg=200; http://git.cyrusimap.org/cyrus-imapd/commit/?id=0f8f026699829b65733c3081657b24e2174f4f4d
CVE: CVE-2011-3481
Published: 2011-09-14
Description: The index_get_ids function in index.c in imapd in Cyrus IMAP Server before 2.4.11, when server-side threading is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted References header in an e-mail message.
CVSS Score: 4.3 (MEDIUM)
References: http://bugzilla.cyrusimap.org/show_bug.cgi?id=2772; http://bugzilla.cyrusimap.org/show_bug.cgi?id=3463; http://git.cyrusimap.org/cyrus-imapd/commit/?id=6e776956a1a9dfa58eacdd0ddd52644009eac9e5
CVE: CVE-2011-0653
Published: 2011-09-15
Description: Cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint Server 2010 Gold and SP1, and SharePoint Foundation 2010, allows remote attackers to inject arbitrary web script or HTML via the URI, aka "XSS in SharePoint Calendar Vulnerability."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.us-cert.gov/cas/techalerts/TA11-256A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-074; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12835
CVE: CVE-2011-1353
Published: 2011-09-15
Description: Unspecified vulnerability in Adobe Reader 10.x before 10.1.1 on Windows allows local users to gain privileges via unknown vectors.
CVSS Score: 6.9 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00012.html; http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00013.html; http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00025.html
CVE: CVE-2011-1890
Published: 2011-09-15
Description: Cross-site scripting (XSS) vulnerability in EditForm.aspx in Microsoft Office SharePoint Server 2010 and SharePoint Foundation 2010 allows remote attackers to inject arbitrary web script or HTML via a post, aka "Editform Script Injection Vulnerability."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.us-cert.gov/cas/techalerts/TA11-256A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-074; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12788
CVE: CVE-2011-1891
Published: 2011-09-15
Description: Cross-site scripting (XSS) vulnerability in Microsoft Windows SharePoint Services 3.0 SP2, and SharePoint Foundation 2010 Gold and SP1, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters in a request to a script, aka "Contact Details Reflected XSS Vulnerability."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.us-cert.gov/cas/techalerts/TA11-256A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-074; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12864
CVE: CVE-2011-1892
Published: 2011-09-15
Description: Microsoft Office Groove 2007 SP2, SharePoint Workspace 2010 Gold and SP1, Office Forms Server 2007 SP2, Office SharePoint Server 2007 SP2, Office SharePoint Server 2010 Gold and SP1, Office Groove Data Bridge Server 2007 SP2, Office Groove Management Server 2007 SP2, Groove Server 2010 Gold and SP1, Windows SharePoint Services 3.0 SP2, SharePoint Foundation 2010, and Office Web Apps 2010 Gold and SP1 do not properly handle Web Parts containing XML classes referencing external entities, which allows remote authenticated users to read arbitrary files via a crafted XML and XSL file, aka "SharePoint Remote File Disclosure Vulnerability."
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-200
References: http://securityreason.com/securityalert/8386; http://www.us-cert.gov/cas/techalerts/TA11-256A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-074
CVE: CVE-2011-1893
Published: 2011-09-15
Description: Cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint Server 2010, Windows SharePoint Services 2.0 and 3.0 SP2, and SharePoint Foundation 2010 allows remote attackers to inject arbitrary web script or HTML via the URI, aka "SharePoint XSS Vulnerability."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.us-cert.gov/cas/techalerts/TA11-256A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-074; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12676
CVE: CVE-2011-1980
Published: 2011-09-15
Description: Untrusted search path vulnerability in Microsoft Office 2003 SP3 and 2007 SP2 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .doc, .ppt, or .xls file, aka "Office Component Insecure Library Loading Vulnerability."
CVSS Score: 9.3 (HIGH)
References: http://www.us-cert.gov/cas/techalerts/TA11-256A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-073; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12694
CVE: CVE-2011-1982
Published: 2011-09-15
Description: Microsoft Office 2007 SP2, and 2010 Gold and SP1, does not initialize an unspecified object pointer during the opening of Word documents, which allows remote attackers to execute arbitrary code via a crafted document, aka "Office Uninitialized Object Pointer Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://www.kb.cert.org/vuls/id/909022; http://www.us-cert.gov/cas/techalerts/TA11-256A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-073
CVE: CVE-2011-1984
Published: 2011-09-15
Description: WINS in Microsoft Windows Server 2003 SP2 and Server 2008 SP2, R2, and R2 SP1 allows local users to gain privileges by sending crafted packets over the loopback interface, aka "WINS Local Elevation of Privilege Vulnerability."
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://securityreason.com/securityalert/8378; http://www.us-cert.gov/cas/techalerts/TA11-256A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-070
CVE: CVE-2011-1986
Published: 2011-09-15
Description: Use-after-free vulnerability in Microsoft Excel 2003 SP3 allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel Use after Free WriteAV Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://www.us-cert.gov/cas/techalerts/TA11-256A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-072; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12345
CVE: CVE-2011-1987
Published: 2011-09-15
Description: Array index error in Microsoft Excel 2003 SP3 and 2007 SP2; Excel in Office 2007 SP2; Excel 2010 Gold and SP1; Excel in Office 2010 Gold and SP1; Office 2004, 2008, and 2011 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel Out of Bounds Array Indexing Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.us-cert.gov/cas/techalerts/TA11-256A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-072; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12953
CVE: CVE-2011-1988
Published: 2011-09-15
Description: Microsoft Excel 2003 SP3 and 2007 SP2; Excel in Office 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 do not properly parse records in Excel spreadsheets, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel Heap Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.us-cert.gov/cas/techalerts/TA11-256A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-072; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12836
CVE: CVE-2011-1989
Published: 2011-09-15
Description: Microsoft Excel 2003 SP3 and 2007 SP2; Excel in Office 2007 SP2; Excel 2010 Gold and SP1; Excel in Office 2010 Gold and SP1; Office 2004, 2008, and 2011 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2; Excel Services on Office SharePoint Server 2007 SP2; Excel Services on Office SharePoint Server 2010 Gold and SP1; and Excel Web App 2010 Gold and SP1 do not properly parse conditional expressions associated with formatting requirements, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel Conditional Expression Parsing Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://www.us-cert.gov/cas/techalerts/TA11-256A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-072; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12974
CVE: CVE-2011-1990
Published: 2011-09-15
Description: Microsoft Excel 2007 SP2; Excel in Office 2007 SP2; Excel Viewer SP2; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2; and Excel Services on Office SharePoint Server 2007 SP2 do not properly validate the sign of an unspecified array index, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel Out of Bounds Array Indexing Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.us-cert.gov/cas/techalerts/TA11-256A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-072; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11982
CVE: CVE-2011-1991
Published: 2011-09-15
Description: Multiple untrusted search path vulnerabilities in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allow local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .doc, .rtf, or .txt file, related to (1) deskpan.dll in the Display Panning CPL Extension, (2) EAPHost Authenticator Service, (3) Folder Redirection, (4) HyperTerminal, (5) the Japanese Input Method Editor (IME), and (6) Microsoft Management Console (MMC), aka "Windows Components Insecure Library Loading Vulnerability."
CVSS Score: 9.3 (HIGH)
References: http://www.us-cert.gov/cas/techalerts/TA11-256A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-071; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12871
CVE: CVE-2011-2431
Published: 2011-09-15
Description: Adobe Reader and Acrobat 8.x before 8.3.1, 9.x before 9.4.6, and 10.x before 10.1.1 allow attackers to execute arbitrary code via unspecified vectors, related to a "security bypass vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-264
References: http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00012.html; http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00013.html; http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00025.html
CVE: CVE-2011-2432
Published: 2011-09-15
Description: Buffer overflow in the U3D TIFF Resource in Adobe Reader and Acrobat 8.x before 8.3.1, 9.x before 9.4.6, and 10.x before 10.1.1 allows attackers to execute arbitrary code via unspecified vectors.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00012.html; http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00013.html; http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00025.html
CVE: CVE-2011-2433
Published: 2011-09-15
Description: Heap-based buffer overflow in Adobe Reader and Acrobat 8.x before 8.3.1, 9.x before 9.4.6, and 10.x before 10.1.1 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-2434 and CVE-2011-2437.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00012.html; http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00013.html; http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00025.html
CVE: CVE-2011-2434
Published: 2011-09-15
Description: Heap-based buffer overflow in Adobe Reader and Acrobat 8.x before 8.3.1, 9.x before 9.4.6, and 10.x before 10.1.1 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-2433 and CVE-2011-2437.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00012.html; http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00013.html; http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00025.html
CVE: CVE-2011-2435
Published: 2011-09-15
Description: Buffer overflow in Adobe Reader and Acrobat 8.x before 8.3.1, 9.x before 9.4.6, and 10.x before 10.1.1 allows attackers to execute arbitrary code via unspecified vectors.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00012.html; http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00013.html; http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00025.html
CVE: CVE-2011-2436
Published: 2011-09-15
Description: Heap-based buffer overflow in the image-parsing library in Adobe Reader and Acrobat 8.x before 8.3.1, 9.x before 9.4.6, and 10.x before 10.1.1 allows attackers to execute arbitrary code via unspecified vectors.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00012.html; http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00013.html; http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00025.html
CVE: CVE-2011-2437
Published: 2011-09-15
Description: Heap-based buffer overflow in Adobe Reader and Acrobat 8.x before 8.3.1, 9.x before 9.4.6, and 10.x before 10.1.1 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-2433 and CVE-2011-2434.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00012.html; http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00013.html; http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00025.html
CVE: CVE-2011-2438
Published: 2011-09-15
Description: Multiple stack-based buffer overflows in the image-parsing library in Adobe Reader and Acrobat 8.x before 8.3.1, 9.x before 9.4.6, and 10.x before 10.1.1 allow attackers to execute arbitrary code via unspecified vectors.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00012.html; http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00013.html; http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00025.html
CVE: CVE-2011-2439
Published: 2011-09-15
Description: Adobe Reader and Acrobat 8.x before 8.3.1, 9.x before 9.4.6, and 10.x before 10.1.1 allow attackers to execute arbitrary code via unspecified vectors, related to a "memory leakage condition vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00012.html; http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00013.html; http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00025.html
CVE: CVE-2011-2440
Published: 2011-09-15
Description: Use-after-free vulnerability in Adobe Reader and Acrobat 8.x before 8.3.1, 9.x before 9.4.6, and 10.x before 10.1.1 allows attackers to execute arbitrary code via unspecified vectors.
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00012.html; http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00013.html; http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00025.html
CVE: CVE-2011-2441
Published: 2011-09-15
Description: Multiple stack-based buffer overflows in CoolType.dll in Adobe Reader and Acrobat 8.x before 8.3.1, 9.x before 9.4.6, and 10.x before 10.1.1 allow attackers to execute arbitrary code via unspecified vectors.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00012.html; http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00013.html; http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00025.html
CVE: CVE-2011-2442
Published: 2011-09-15
Description: Adobe Reader and Acrobat 8.x before 8.3.1, 9.x before 9.4.6, and 10.x before 10.1.1 allow attackers to execute arbitrary code via unspecified vectors, related to a "logic error vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00012.html; http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00013.html; http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00025.html
CVE: CVE-2011-3393
Published: 2011-09-15
Description: Multiple cross-site scripting (XSS) vulnerabilities in findagent.php in MYRE Real Estate Software allow remote attackers to inject arbitrary web script or HTML via the (1) country1, (2) state1, or (3) city1 parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secpod.org/advisories/SECPOD_MRS_SQL_XSS_Vuln.txt; http://securityreason.com/securityalert/8376; http://secpod.org/advisories/SECPOD_MRS_SQL_XSS_Vuln.txt
CVE: CVE-2011-3394
Published: 2011-09-15
Description: SQL injection vulnerability in findagent.php in MYRE Real Estate Software allows remote attackers to execute arbitrary SQL commands via the page parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secpod.org/advisories/SECPOD_MRS_SQL_XSS_Vuln.txt; http://securityreason.com/securityalert/8376; http://secpod.org/advisories/SECPOD_MRS_SQL_XSS_Vuln.txt
CVE: CVE-2011-2671
Published: 2011-09-15
Description: Unspecified vulnerability in Megalith 12th edition through 27th edition allows remote attackers to gain administrative privileges via unknown vectors.
CVSS Score: 7.5 (HIGH)
References: http://9.dotpp.net/software/megalith/JVN45458289/; http://jvn.jp/en/jp/JVN45458289/index.html; http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000073.html
CVE: CVE-2011-3322
Published: 2011-09-15
Description: Core Server HMI Service (Coreservice.exe) in Scadatec Limited Procyon SCADA 1.06, and other versions before 1.14, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long password to the Telnet (TCP/23) port, which triggers an out-of-bounds read or write, leading to a stack-based buffer overflow.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://osvdb.org/75371; http://secunia.com/advisories/45866; http://securityreason.com/securityalert/8374
CVE: CVE-2011-3211
Published: 2011-09-16
Description: The server in Bcfg2 1.1.2 and earlier, and 1.2 prerelease, allows remote attackers to execute arbitrary commands via shell metacharacters in data received from a client.
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://article.gmane.org/gmane.comp.sysutils.bcfg2.devel/4318; http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=640028; http://lists.fedoraproject.org/pipermail/package-announce/2011-September/066070.html
CVE: CVE-2011-3321
Published: 2011-09-16
Description: Heap-based buffer overflow in the Siemens WinCC Runtime Advanced Loader, as used in SIMATIC WinCC flexible Runtime and SIMATIC WinCC (TIA Portal) Runtime Advanced, allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted packet to TCP port 2308.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://cache.automation.siemens.com/dnl/jI/jI0NDY5AAAA_29054992_FAQ/Siemens_Security_Advisory_SSA-460621_V1_2.pdf; http://secunia.com/advisories/46011; http://support.automation.siemens.com/WW/view/en/29054992
CVE: CVE-2011-3486
Published: 2011-09-16
Description: Beckhoff TwinCAT 2.11.0.2004 and earlier allows remote attackers to cause a denial of service via a crafted request to UDP port 48899, which triggers an out-of-bounds read.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://aluigi.altervista.org/adv/twincat_1-adv.txt; http://osvdb.org/75495; http://securityreason.com/securityalert/8380
CVE: CVE-2011-3487
Published: 2011-09-16
Description: Directory traversal vulnerability in CarelDataServer.exe in Carel PlantVisor 2.4.4 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in an HTTP GET request.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://aluigi.altervista.org/adv/plantvisor_1-adv.txt; http://securityreason.com/securityalert/8384; https://exchange.xforce.ibmcloud.com/vulnerabilities/69762
CVE: CVE-2011-3488
Published: 2011-09-16
Description: Use-after-free vulnerability in Equis MetaStock 11 and earlier allows remote attackers to execute arbitrary code via a malformed (1) mwc chart, (2) mws chart, (3) mwt template, or (4) mwl layout.
CVSS Score: 10.0 (HIGH)
CWE: CWE-399
References: http://aluigi.altervista.org/adv/metastock_1-adv.txt; http://aluigi.altervista.org/adv/metastock_1-adv.txt
CVE: CVE-2011-3489
Published: 2011-09-16
Description: RnaUtility.dll in RsvcHost.exe 2.30.0.23 in Rockwell RSLogix 19 and earlier allows remote attackers to cause a denial of service (crash) via a crafted rna packet with a long string to TCP port 4446 that triggers (1) "a memset zero overflow" or (2) an out-of-bounds read, related to improper handling of a 32-bit size field.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://aluigi.altervista.org/adv/rslogix_1-adv.txt; http://securityreason.com/securityalert/8383; http://www.securityfocus.com/bid/49608