deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2009-2204
Published: 2009-08-03
Description: Unspecified vulnerability in the CoreTelephony component in Apple iPhone OS before 3.0.1 allows remote attackers to execute arbitrary code, obtain GPS coordinates, or enable the microphone via an SMS message that triggers memory corruption, as demonstrated by Charlie Miller at SyScan '09 Singapore.
CVSS Score: 10.0 (HIGH)
References: http://lists.apple.com/archives/security-announce/2009/Jul/msg00001.html; http://news.cnet.com/8301-1009_3-10278472-83.html; http://secunia.com/advisories/36070
CVE: CVE-2009-2656
Published: 2009-08-03
Description: Unspecified vulnerability in the com.android.phone process in Android 1.0, 1.1, and 1.5 allows remote attackers to cause a denial of service (network disconnection) via a crafted SMS message, as demonstrated by Collin Mulliner and Charlie Miller at Black Hat USA 2009.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/56750; http://www.blackhat.com/presentations/bh-usa-09/MILLER/BHUSA09-Miller-FuzzingPhone-PAPER.pdf; http://www.securityfocus.com/bid/35886
CVE: CVE-2009-2198
Published: 2009-08-04
Description: Apple GarageBand before 5.1 reconfigures Safari to accept all cookies regardless of domain name, which makes it easier for remote web servers to track users.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-264
References: http://lists.apple.com/archives/security-announce/2009/Aug/msg00000.html; http://osvdb.org/56738; http://secunia.com/advisories/36114
CVE: CVE-2009-2470
Published: 2009-08-04
Description: Mozilla Firefox before 3.0.12, and 3.5.x before 3.5.2, allows remote SOCKS5 proxy servers to cause a denial of service (data stream corruption) via a long domain name in a reply.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://secunia.com/advisories/36126; http://sunsolve.sun.com/search/document.do?assetkey=1-66-266148-1; http://www.mozilla.org/security/announce/2009/mfsa2009-38.html
CVE: CVE-2009-2657
Published: 2009-08-04
Description: nilfs-utils before 2.0.14 installs multiple programs with unnecessary setuid privileges, which allows local users to execute arbitrary commands via the device string in a -c command line option to mkfs.nilfs2.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-264
References: http://www.nilfs.org/git/?p=nilfs2-utils.git%3Ba=commitdiff%3Bh=5c95a57102e23e6982467cbe23e922450d3f38ed; http://www.nilfs.org/git/?p=nilfs2-utils.git%3Ba=commitdiff%3Bh=a5cb60e624e4863c8d6feaf2ea8791abb48d6f15; http://www.nilfs.org/git/?p=nilfs2-utils.git%3Ba=commitdiff%3Bh=d807e1c968c1f288486fb7d6f817434838fc12f7
CVE: CVE-2009-2658
Published: 2009-08-04
Description: Directory traversal vulnerability in ZNC before 0.072 allows remote attackers to overwrite arbitrary files via a crafted DCC SEND request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://en.znc.in/w/index.php?title=ZNC&oldid=3209#WARNING; http://en.znc.in/wiki/ChangeLog/0.072; http://secunia.com/advisories/35916
CVE: CVE-2009-2659
Published: 2009-08-04
Description: The Admin media handler in core/servers/basehttp.py in Django 1.0 and 0.96 does not properly map URL requests to expected "static media files," which allows remote attackers to conduct directory traversal attacks and read arbitrary files via a crafted URL.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=539134; http://code.djangoproject.com/changeset/11353; http://secunia.com/advisories/36137
CVE: CVE-2009-2660
Published: 2009-08-04
Description: Multiple integer overflows in CamlImages 2.2 might allow context-dependent attackers to execute arbitrary code via images containing large width and height values that trigger a heap-based buffer overflow, related to (1) crafted GIF files (gifread.c) and (2) crafted JPEG files (jpegread.c), a different vulnerability than CVE-2009-2295.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-189
References: ftp://ftp.debian.org/debian/pool/main/c/camlimages/camlimages_2.2.0-4+lenny2.diff.gz; ftp://ftp.debian.org/debian/pool/main/c/camlimages/camlimages_2.20-8+etch2.diff.gz; ftp://ftp.debian.org/debian/pool/main/c/camlimages/camlimages_3.0.1-3.diff.gz
CVE: CVE-2009-2661
Published: 2009-08-04
Description: The asn1_length function in strongSwan 2.8 before 2.8.11, 4.2 before 4.2.17, and 4.3 before 4.3.3 does not properly handle X.509 certificates with crafted Relative Distinguished Names (RDNs), which allows remote attackers to cause a denial of service (pluto IKE daemon crash) via malformed ASN.1 data.  NOTE: this is due to an incomplete fix for CVE-2009-2185.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-310
References: http://download.strongswan.org/patches/07_asn1_length_patch/strongswan-4.3.x_asn1_length.patch; http://download.strongswan.org/patches/07_asn1_length_patch/strongswan-4.x.x_asn1_length.patch; http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html
CVE: CVE-2009-2662
Published: 2009-08-04
Description: The browser engine in Mozilla Firefox 3.5.x before 3.5.2 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the TraceRecorder::snapshot function in js/src/jstracer.cpp, and unspecified other vectors.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/36126; http://sunsolve.sun.com/search/document.do?assetkey=1-66-266148-1; http://www.mozilla.org/security/announce/2009/mfsa2009-45.html
CVE: CVE-2009-2663
Published: 2009-08-04
Description: libvorbis before r16182, as used in Mozilla Firefox 3.5.x before 3.5.2 and other products, allows context-dependent attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted .ogg file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html; http://secunia.com/advisories/36126; http://secunia.com/advisories/36230
CVE: CVE-2009-2664
Published: 2009-08-04
Description: The js_watch_set function in js/src/jsdbgapi.cpp in the JavaScript engine in Mozilla Firefox before 3.0.12 allows remote attackers to cause a denial of service (assertion failure and application exit) or possibly execute arbitrary code via a crafted .js file, related to a "memory safety bug." NOTE: this was originally reported as affecting versions before 3.0.13.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://secunia.com/advisories/36126; http://sunsolve.sun.com/search/document.do?assetkey=1-66-266148-1; http://www.mozilla.org/security/announce/2009/mfsa2009-45.html
CVE: CVE-2009-2665
Published: 2009-08-04
Description: The nsDocument::SetScriptGlobalObject function in content/base/src/nsDocument.cpp in Mozilla Firefox 3.5.x before 3.5.2, when certain add-ons are enabled, does not properly handle a Link HTTP header, which allows remote attackers to execute arbitrary JavaScript with chrome privileges via a crafted web page, related to an incorrect security wrapper.
CVSS Score: 10.0 (HIGH)
CWE: CWE-94
References: http://secunia.com/advisories/36126; http://sunsolve.sun.com/search/document.do?assetkey=1-66-266148-1; http://www.mozilla.org/security/announce/2009/mfsa2009-46.html
CVE: CVE-2009-2579
Published: 2009-08-05
Description: SQL injection vulnerability in reward_points.post.php in the Reward points addon in CS-Cart before 2.0.6 allows remote authenticated users to execute arbitrary SQL commands via the sort_order parameter in a reward_points.userlog action to index.php, a different vulnerability than CVE-2005-4429.2.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: http://secunia.com/advisories/36112; http://www.bonsai-sec.com/research/vulnerabilities/cs-cart_SQL-injection-0100.txt; http://www.cs-cart.com/changelog206.html
CVE: CVE-2009-2667
Published: 2009-08-05
Description: Unspecified vulnerability in IBM Tivoli Key Lifecycle Manager (TKLM) 1.0 has unknown impact and attack vectors, related to a "password security vulnerability."
CVSS Score: 10.0 (HIGH)
References: http://www-01.ibm.com/support/docview.wss?uid=swg21395577; http://www.securityfocus.com/bid/35938; http://www.vupen.com/english/advisories/2009/2144
CVE: CVE-2009-2668
Published: 2009-08-05
Description: Microsoft Internet Explorer 6 through 6.0.2900.2180 and 7 through 7.0.6000.16473 allows remote attackers to cause a denial of service (CPU consumption) via an XML document composed of a long series of start-tags with no corresponding end-tags, a related issue to CVE-2009-1232.
CVSS Score: 7.8 (HIGH)
CWE: CWE-399
References: http://archives.neohapsis.com/archives/bugtraq/2009-07/0193.html; http://websecurity.com.ua/3216/; http://archives.neohapsis.com/archives/bugtraq/2009-07/0193.html
CVE: CVE-2009-2669
Published: 2009-08-05
Description: A certain debugging component in IBM AIX 5.3 and 6.1 does not properly handle the (1) _LIB_INIT_DBG and (2) _LIB_INIT_DBG_FILE environment variables, which allows local users to gain privileges by leveraging a setuid-root program to create an arbitrary root-owned file with world-writable permissions, related to libC.a (aka the XL C++ runtime library) in AIX 5.3 and libc.a in AIX 6.1.
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://aix.software.ibm.com/aix/efixes/security/libC_advisory.asc; http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=815; http://secunia.com/advisories/36156
CVE: CVE-2009-2670
Published: 2009-08-05
Description: The audio system in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, does not prevent access to java.lang.System properties by (1) untrusted applets and (2) Java Web Start applications, which allows context-dependent attackers to obtain sensitive information by reading these properties.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://java.sun.com/j2se/1.5.0/ReleaseNotes.html#150_20; http://java.sun.com/javase/6/webnotes/6u15.html; http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html
CVE: CVE-2009-2671
Published: 2009-08-05
Description: The SOCKS proxy implementation in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, allows remote attackers to discover the username of the account that invoked an untrusted (1) applet or (2) Java Web Start application via unspecified vectors.
CVSS Score: 5.0 (MEDIUM)
References: http://java.sun.com/j2se/1.5.0/ReleaseNotes.html#150_20; http://java.sun.com/javase/6/webnotes/6u15.html; http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html
CVE: CVE-2009-2672
Published: 2009-08-05
Description: The proxy mechanism implementation in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, does not prevent access to browser cookies by untrusted (1) applets and (2) Java Web Start applications, which allows remote attackers to hijack web sessions via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://java.sun.com/j2se/1.5.0/ReleaseNotes.html#150_20; http://java.sun.com/javase/6/webnotes/6u15.html; http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html
CVE: CVE-2009-2673
Published: 2009-08-05
Description: The proxy mechanism implementation in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, allows remote attackers to bypass intended access restrictions and connect to arbitrary sites via unspecified vectors, related to a declaration that lacks the final keyword.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://java.sun.com/j2se/1.5.0/ReleaseNotes.html#150_20; http://java.sun.com/javase/6/webnotes/6u15.html; http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html
CVE: CVE-2009-2674
Published: 2009-08-05
Description: Integer overflow in javaws.exe in Sun Java Web Start in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15 allows context-dependent attackers to execute arbitrary code via a crafted JPEG image that is not properly handled during display to a splash screen, which triggers a heap-based buffer overflow.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html; http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html
CVE: CVE-2009-2675
Published: 2009-08-05
Description: Integer overflow in the unpack200 utility in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, allows context-dependent attackers to gain privileges via unspecified length fields in the header of a Pack200-compressed JAR file, which leads to a heap-based buffer overflow during decompression.
CVSS Score: 10.0 (HIGH)
CWE: CWE-264
References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=814; http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html; http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00003.html
CVE: CVE-2009-2676
Published: 2009-08-05
Description: Unspecified vulnerability in JNLPAppletlauncher in Sun Java SE, and SE for Business, in JDK and JRE 6 Update 14 and earlier and JDK and JRE 5.0 Update 19 and earlier; and Java SE for Business in SDK and JRE 1.4.2_21 and earlier; allows remote attackers to create or modify arbitrary files via vectors involving an untrusted Java applet that accesses an old version of JNLPAppletLauncher.
CVSS Score: 6.8 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00002.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9737&w=2
CVE: CVE-2009-2687
Published: 2009-08-05
Description: The exif_read_data function in the Exif module in PHP before 5.2.10 allows remote attackers to cause a denial of service (crash) via a malformed JPEG image with invalid offset fields, a different issue than CVE-2005-3353.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://bugs.php.net/bug.php?id=48378; http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]5735&w=2
CVE: CVE-2009-2688
Published: 2009-08-05
Description: Multiple integer overflows in glyphs-eimage.c in XEmacs 21.4.22, when running on Windows, allow remote attackers to cause a denial of service (crash) or execute arbitrary code via (1) the tiff_instantiate function processing a crafted TIFF file, (2) the png_instantiate function processing a crafted PNG file, and (3) the jpeg_instantiate function processing a crafted JPEG file, all which trigger a heap-based buffer overflow.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 10.0 (HIGH)
CWE: CWE-189
References: http://osvdb.org/55298; http://secunia.com/advisories/35348; http://tracker.xemacs.org/XEmacs/its/issue534
CVE: CVE-2008-6897
Published: 2009-08-05
Description: Multiple buffer overflows in Getleft.exe in Andres Garcia Getleft 1.2 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long (1) "a" HTML tag; a long src attribute in (2) embed, (3) img, or (4) script tags; (5) a long background attribute in a body tag; and other unspecified tags.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/32994; https://exchange.xforce.ibmcloud.com/vulnerabilities/47597; https://www.exploit-db.com/exploits/7564
CVE: CVE-2008-6898
Published: 2009-08-05
Description: Buffer overflow in the XHTTP Module 4.1.0.0 in the ActiveX control for SaschArt SasCam Webcam Server 2.6.5 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a long argument to the Get method and other unspecified methods.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.exploit-db.com/exploits/14195; http://www.securityfocus.com/bid/33053; https://exchange.xforce.ibmcloud.com/vulnerabilities/47654
CVE: CVE-2008-6899
Published: 2009-08-05
Description: Multiple buffer overflows in freeSSHd 1.2.1 allow remote authenticated users to cause a denial of service (crash) and execute arbitrary code via a long (1) open, (2) unlink, (3) mkdir, (4) rmdir, or (5) stat SFTP command.
CVSS Score: 9.0 (HIGH)
CWE: CWE-119
References: http://www.bmgsec.com.au/advisories/freeSSHd-bof.txt; http://www.securityfocus.com/archive/1/499486/100/0/threaded; http://www.securityfocus.com/bid/32972
CVE: CVE-2008-6900
Published: 2009-08-06
Description: Unrestricted file upload vulnerability in "Add Pen/Author Name" feature in addpen.php in AvailScript Article Script allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in photos/.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-94
References: http://secunia.com/advisories/31816; http://www.securityfocus.com/bid/32821; https://exchange.xforce.ibmcloud.com/vulnerabilities/47374
CVE: CVE-2008-6901
Published: 2009-08-06
Description: Multiple directory traversal vulnerabilities in 2532designs 2532|Gigs 1.2.2 Stable, when register_globals is enabled and magic_quotes_gpc is disabled, allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the language parameter to (1) settings.php, (2) deleteuser.php, (3) mini_calendar.php, (4) manage_venues.php, and (5) manage_gigs.php, a different vector than CVE-2007-4585.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-22
References: http://secunia.com/advisories/26585; http://www.securityfocus.com/bid/32911; https://exchange.xforce.ibmcloud.com/vulnerabilities/47465
CVE: CVE-2008-6902
Published: 2009-08-06
Description: Unrestricted file upload vulnerability in upload_flyer.php in 2532designs 2532|Gigs 1.2.2 Stable allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in flyers/.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://secunia.com/advisories/26585; http://www.securityfocus.com/bid/32911; https://exchange.xforce.ibmcloud.com/vulnerabilities/47466
CVE: CVE-2008-6903
Published: 2009-08-06
Description: Sophos Anti-Virus for Windows before 7.6.3, Anti-Virus for Windows NT/9x before 4.7.18, Anti-Virus for OS X before 4.9.18, Anti-Virus for Linux before 6.4.5, Anti-Virus for UNIX before 7.0.5, Anti-Virus for Unix and Netware before 4.37.0, Sophos EM Library, and Sophos small business solutions, when CAB archive scanning is enabled, allows remote attackers to cause a denial of service (segmentation fault) via a "fuzzed" CAB archive file, as demonstrated by the OUSPG PROTOS GENOME test suite for Archive Formats.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-399
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6489&w=2; http://osvdb.org/50863; http://secunia.com/advisories/33177
CVE: CVE-2008-6904
Published: 2009-08-06
Description: Multiple unspecified vulnerabilities in Sophos SAVScan 4.33.0 for Linux, and possibly other products and versions, allow remote attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via crafted files that have been packed with (1) armadillo, (2) asprotect, or (3) asprotectSKE.
CVSS Score: 10.0 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6489&w=2; http://www.ivizsecurity.com/security-advisory-iviz-sr-08015.html; http://www.securityfocus.com/bid/32748
CVE: CVE-2009-0151
Published: 2009-08-06
Description: The screen saver in Dock in Apple Mac OS X 10.5 before 10.5.8 does not prevent four-finger Multi-Touch gestures, which allows physically proximate attackers to bypass locking and "manage applications or use Expose" via unspecified vectors.
CVSS Score: 7.2 (HIGH)
References: http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html; http://osvdb.org/56847; http://secunia.com/advisories/36096
CVE: CVE-2009-1723
Published: 2009-08-06
Description: CFNetwork in Apple Mac OS X 10.5 before 10.5.8 places an incorrect URL in a certificate warning in certain 302 redirection scenarios, which makes it easier for remote attackers to trick a user into visiting an arbitrary https web site by leveraging an open redirect vulnerability, a different issue than CVE-2009-2062.
CVSS Score: 4.3 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html; http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html; http://osvdb.org/56846
CVE: CVE-2009-2412
Published: 2009-08-06
Description: Multiple integer overflows in the Apache Portable Runtime (APR) library and the Apache Portable Utility library (aka APR-util) 0.9.x and 1.3.x allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors that trigger crafted calls to the (1) allocator_alloc or (2) apr_palloc function in memory/unix/apr_pools.c in APR; or crafted calls to the (3) apr_rmm_malloc, (4) apr_rmm_calloc, or (5) apr_rmm_realloc function in misc/apr_rmm.c in APR-util; leading to buffer overflows.  NOTE: some of these details are obtained from third party information.
CVSS Score: 10.0 (HIGH)
CWE: CWE-189
References: http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html; http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00006.html; http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html
CVE: CVE-2009-2625
Published: 2009-08-06
Description: XMLScanner.java in Apache Xerces2 Java, as used in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15 and JDK and JRE 5.0 before Update 20, and in other products, allows remote attackers to cause a denial of service (infinite loop and application hang) via malformed XML input, as demonstrated by the Codenomicon XML fuzzing framework.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html; http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html; http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html
CVE: CVE-2009-1726
Published: 2009-08-06
Description: Heap-based buffer overflow in ColorSync in Apple Mac OS X 10.4.11 and 10.5 before 10.5.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted image containing an embedded ColorSync profile.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html; http://lists.apple.com/archives/security-announce/2010//Jun/msg00002.html; http://lists.apple.com/archives/security-announce/2010/Jun/msg00000.html
CVE: CVE-2009-1727
Published: 2009-08-06
Description: Incomplete blacklist vulnerability in CoreTypes in Apple Mac OS X 10.5 before 10.5.8 makes it easier for user-assisted remote attackers to execute arbitrary JavaScript via a web page that offers a download with a Content-Type value that is not on the list of possibly unsafe content types for Safari.
CVSS Score: 6.8 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html; http://osvdb.org/56844; http://secunia.com/advisories/36096
CVE: CVE-2009-1728
Published: 2009-08-06
Description: Stack-based buffer overflow in Image RAW in Apple Mac OS X 10.5 before 10.5.8, and 10.4 before Digital Camera RAW Compatibility Update 2.6, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted Canon RAW image.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html; http://osvdb.org/56843; http://secunia.com/advisories/36096
CVE: CVE-2009-2188
Published: 2009-08-06
Description: Buffer overflow in ImageIO in Apple Mac OS X 10.5 before 10.5.8, and Safari before 4.0.3, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via an image with crafted EXIF metadata.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html; http://lists.apple.com/archives/security-announce/2009/Aug/msg00002.html; http://osvdb.org/56842