deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2012-3381
Published: 2012-08-17
Description: sfcb in sblim-sfcb places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.
CVSS Score: 4.4 (MEDIUM)
References: http://sourceforge.net/tracker/index.php?func=detail&aid=3541554&group_id=128809&atid=712784; http://www.openwall.com/lists/oss-security/2012/07/06/7; http://www.openwall.com/lists/oss-security/2012/07/06/8
CVE: CVE-2012-2206
Published: 2012-08-17
Description: The Web Gateway component in IBM WebSphere MQ File Transfer Edition 7.0.4 and earlier allows remote authenticated users to read files of arbitrary users via vectors involving a username in a URI, as demonstrated by a modified metadata=fteSamplesUser field to the /transfer URI.
CVSS Score: 3.5 (LOW)
CWE: CWE-264
References: http://www-01.ibm.com/support/docview.wss?uid=swg1IC82761; http://www.exploit-db.com/exploits/20478/; http://www.ibm.com/support/docview.wss?uid=swg21607481
CVE: CVE-2012-3294
Published: 2012-08-17
Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the Web Gateway component in IBM WebSphere MQ File Transfer Edition 7.0.4 and earlier, and WebSphere MQ - Managed File Transfer 7.5, allow remote attackers to hijack the authentication of arbitrary users for requests that (1) add user accounts via the /wmqfteconsole/Filespaces URI, (2) modify permissions via the /wmqfteconsole/FileSpacePermisssions URI, or (3) add MQ Message Descriptor (MQMD) user accounts via the /wmqfteconsole/UploadUsers URI.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://www-01.ibm.com/support/docview.wss?uid=swg1IC85516; http://www.exploit-db.com/exploits/20477/; http://www.ibm.com/support/docview.wss?uid=swg21607482
CVE: CVE-2012-3308
Published: 2012-08-17
Description: Cross-site scripting (XSS) vulnerability in IBM Sametime 8.0.2 through 8.5.2.1 allows remote attackers to inject arbitrary web script or HTML via an IM chat.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=swg21599114; http://www.ibm.com/support/docview.wss?uid=swg21607903; http://www.securitytracker.com/id?1027402
CVE: CVE-2012-0744
Published: 2012-08-17
Description: IBM Rational ClearQuest 7.1.x through 7.1.2.7 and 8.x through 8.0.0.3 allows remote attackers to obtain potentially sensitive information via a request to a (1) snoop, (2) hello, (3) ivt/, (4) hitcount, (5) HitCount.jsp, (6) HelloHTMLError.jsp, (7) HelloHTML.jsp, (8) HelloVXMLError.jsp, (9) HelloVXML.jsp, (10) HelloWMLError.jsp, (11) HelloWML.jsp, or (12) cqweb/j_security_check sample script.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://www-01.ibm.com/support/docview.wss?uid=swg1PM66896; http://www.ibm.com/support/docview.wss?uid=swg21599361; http://www.ibm.com/support/docview.wss?uid=swg21606317
CVE: CVE-2012-2164
Published: 2012-08-17
Description: The Web client in IBM Rational ClearQuest 7.1.x before 7.1.2.7 and 8.x before 8.0.0.3 allows remote authenticated users to bypass intended access restrictions, and use the Site Administration menu to modify system settings, via a parameter-tampering attack.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-264
References: http://www-01.ibm.com/support/docview.wss?uid=swg1PM62735; http://www.ibm.com/support/docview.wss?uid=swg21606318; https://exchange.xforce.ibmcloud.com/vulnerabilities/75039
CVE: CVE-2012-2165
Published: 2012-08-17
Description: IBM Rational ClearQuest 7.1.x before 7.1.2.7 and 8.x before 8.0.0.3, when ClearQuest Authentication is enabled, allows remote authenticated users to read password hashes via a user query.
CVSS Score: 3.5 (LOW)
CWE: CWE-200
References: http://www-01.ibm.com/support/docview.wss?uid=swg1PM62740; http://www.ibm.com/support/docview.wss?uid=swg21606385; https://exchange.xforce.ibmcloud.com/vulnerabilities/75040
CVE: CVE-2012-2168
Published: 2012-08-17
Description: IBM Rational ClearQuest 7.1.x before 7.1.2.7 and 8.x before 8.0.0.3 allows remote authenticated users to obtain sensitive stack-trace information from CM server error messages via an invalid parameter.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-200
References: http://www-01.ibm.com/support/docview.wss?uid=swg1PM61822; http://www.ibm.com/support/docview.wss?uid=swg21606319; https://exchange.xforce.ibmcloud.com/vulnerabilities/75048
CVE: CVE-2012-2169
Published: 2012-08-17
Description: Cross-site scripting (XSS) vulnerability in the file-upload functionality in the Web client in IBM Rational ClearQuest 7.1.x before 7.1.2.7 allows remote authenticated users to inject arbitrary web script or HTML via the File Description field.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://www-01.ibm.com/support/docview.wss?uid=swg1PM62762; http://www.ibm.com/support/docview.wss?uid=swg21607783; https://exchange.xforce.ibmcloud.com/vulnerabilities/75049
CVE: CVE-2012-2205
Published: 2012-08-17
Description: Cross-site scripting (XSS) vulnerability in IBM Rational ClearQuest 7.1.x before 7.1.2.7 and 8.x before 8.0.0.3 allows remote authenticated users to inject arbitrary web script or HTML via a workspace query.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://www-01.ibm.com/support/docview.wss?uid=swg1PM61670; http://www.ibm.com/support/docview.wss?uid=swg21605838; https://exchange.xforce.ibmcloud.com/vulnerabilities/77094
CVE: CVE-2012-3296
Published: 2012-08-17
Description: Cross-site scripting (XSS) vulnerability in the Help link in the login panel in IBM Power Hardware Management Console (HMC) 7R7.1.0 before SP4, 7R7.2.0 before SP2, and 7R7.3.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/50376; http://www.ibm.com/connections/blogs/PSIRT/entry/security_bulletin_the_help_link_on_the_power_hmc_login_panel_is_susceptible_to_reflected_cross_site_scripting_cve_2012_329617; http://www.ibm.com/support/docview.wss?uid=isg1MB03488
CVE: CVE-2012-4006
Published: 2012-08-17
Description: The GREE application before 1.4.0, GREE Tanken Dorirando application before 1.0.7, GREE Tsurisuta application before 1.5.0, GREE Monpura application before 1.1.1, GREE Kaizokuoukoku Columbus application before 1.3.5, GREE haconiwa application before 1.1.0, GREE Seisen Cerberus application before 1.1.0, and KDDI&GREE GREE Market application before 2.1.2 for Android do not properly implement the WebView class, which allows remote attackers to obtain sensitive information via a crafted application.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://jvn.jp/en/jp/JVN99192898/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2012-000077; http://jvn.jp/en/jp/JVN99192898/index.html
CVE: CVE-2012-4007
Published: 2012-08-17
Description: The mixi application before 4.3.0 for Android allows remote attackers to read potentially sensitive information in friends' comments via a crafted application that leverages the storage of these comments on an SD card.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://jvn.jp/en/jp/JVN92038939/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2012-000078; http://jvn.jp/en/jp/JVN92038939/index.html
CVE: CVE-2012-4353
Published: 2012-08-19
Description: Stack-based buffer overflow in RunTime.exe in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 allows remote attackers to execute arbitrary code via a crafted port-46824 TCP packet that triggers an incorrect file-open attempt by the _TCPIPS_BinOpenFileFP function, a different vulnerability than CVE-2012-3815.  NOTE: some of these details are obtained from third party information.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://aluigi.org/adv/winlog_2-adv.txt; http://secunia.com/advisories/49395; http://www.sielcosistemi.com/en/news/index.html?id=69
CVE: CVE-2012-4354
Published: 2012-08-19
Description: TCPIPS_Story.dll in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 allows remote attackers to execute arbitrary code via a port-46824 TCP packet with a crafted positive integer after the opcode, triggering incorrect function-pointer processing that can lead to a buffer overflow.  NOTE: some of these details are obtained from third party information.
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: http://aluigi.org/adv/winlog_2-adv.txt; http://secunia.com/advisories/49395; http://www.sielcosistemi.com/en/news/index.html?id=69
CVE: CVE-2012-4355
Published: 2012-08-19
Description: TCPIPS_Story.dll in Sielco Sistemi Winlog Pro SCADA before 2.07.18 and Winlog Lite SCADA before 2.07.18 allows remote attackers to execute arbitrary code via a port-46824 TCP packet with a crafted negative integer after the opcode, triggering incorrect function-pointer processing that can lead to a buffer overflow.  NOTE: some of these details are obtained from third party information.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-4354.
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: http://aluigi.org/adv/winlog_2-adv.txt; http://secunia.com/advisories/49395; http://www.sielcosistemi.com/en/news/index.html?id=70
CVE: CVE-2012-4356
Published: 2012-08-19
Description: Multiple directory traversal vulnerabilities in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 allow remote attackers to read arbitrary files via port-46824 TCP packets specifying a file-open operation with opcode 0x78 and a .. (dot dot) in a pathname, followed by a file-read operation with opcode (1) 0x96, (2) 0x97, or (3) 0x98.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-22
References: http://aluigi.org/adv/winlog_2-adv.txt; http://secunia.com/advisories/49395; http://www.sielcosistemi.com/en/news/index.html?id=69
CVE: CVE-2012-4357
Published: 2012-08-19
Description: Array index error in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 might allow remote attackers to execute arbitrary code by referencing, within a port-46824 TCP packet, an invalid file-pointer index that leads to execution of an EnterCriticalSection code block.
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://aluigi.org/adv/winlog_2-adv.txt; http://secunia.com/advisories/49395; http://www.sielcosistemi.com/en/news/index.html?id=69
CVE: CVE-2012-4358
Published: 2012-08-19
Description: Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 do not validate the return value of the realloc function, which allows remote attackers to cause a denial of service (invalid 0x00 write operation and daemon crash) or possibly have unspecified other impact via a port-46824 TCP packet with a crafted positive integer after the opcode.
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://aluigi.org/adv/winlog_2-adv.txt; http://secunia.com/advisories/49395; http://www.sielcosistemi.com/en/news/index.html?id=69
CVE: CVE-2012-4359
Published: 2012-08-19
Description: Sielco Sistemi Winlog Pro SCADA before 2.07.18 and Winlog Lite SCADA before 2.07.18 do not validate the return value of the realloc function, which allows remote attackers to cause a denial of service (invalid 0x00 write operation and daemon crash) or possibly have unspecified other impact via a port-46824 TCP packet with a crafted negative integer after the opcode.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-4358.
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://aluigi.org/adv/winlog_2-adv.txt; http://secunia.com/advisories/49395; http://www.sielcosistemi.com/en/news/index.html?id=70
CVE: CVE-2011-3929
Published: 2012-08-20
Description: The avpriv_dv_produce_packet function in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) and possibly execute arbitrary code via a crafted DV file.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://ffmpeg.org/; http://git.libav.org/?p=libav.git%3Ba=commit%3Bh=635bcfccd439480003b74a665b5aa7c872c1ad6b; http://git.libav.org/?p=libav.git%3Ba=commitdiff%3Bh=5a396bb3a66a61a68b80f2369d0249729bf85e04
CVE: CVE-2011-3936
Published: 2012-08-20
Description: The dv_extract_audio function in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted DV file.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://ffmpeg.org/; http://git.libav.org/?p=libav.git%3Ba=commit%3Bh=635bcfccd439480003b74a665b5aa7c872c1ad6b; http://git.libav.org/?p=libav.git%3Ba=commitdiff%3Bh=2d1c0dea5f6b91bec7f5fa53ec050913d851e366
CVE: CVE-2011-3940
Published: 2012-08-20
Description: nsvdec.c in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1, allows remote attackers to cause a denial of service (out-of-bounds read and write) via a crafted NSV file that triggers "use of uninitialized streams."
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://ffmpeg.org/; http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=5c011706bc752d34bc6ada31d7df2ca0c9af7c6b; http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=8fd8a48263ff1437f9d02d7e78dc63efb9b5ed3a
CVE: CVE-2011-3947
Published: 2012-08-20
Description: Buffer overflow in mjpegbdec.c in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted MJPEG-B file.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://ffmpeg.org/; http://git.libav.org/?p=libav.git%3Ba=commit%3Bh=b57d262412204e54a7ef8fa1b23ff4dcede622e5; http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=b57d262412204e54a7ef8fa1b23ff4dcede622e5
CVE: CVE-2011-3951
Published: 2012-08-20
Description: The dpcm_decode_frame function in dpcm.c in libavcodec in FFmpeg before 0.10 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.6, and 0.8.x before 0.8.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted stereo stream in a media file.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://ffmpeg.org/; http://git.libav.org/?p=libav.git%3Ba=commit%3Bh=ce7aee9b733134649a6ce2fa743e51733f33e67e; http://libav.org/
CVE: CVE-2011-3952
Published: 2012-08-20
Description: The decode_init function in kmvc.c in libavcodec in FFmpeg before 0.10 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.6, and 0.8.x before 0.8.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a large palette size in a KMVC encoded file.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: http://ffmpeg.org/; http://git.libav.org/?p=libav.git%3Ba=commit%3Bh=386741f887714d3e46c9e8fe577e326a7964037b; http://libav.org/
CVE: CVE-2012-0851
Published: 2012-08-20
Description: The ff_h264_decode_seq_parameter_set function in h264_ps.c in libavcodec in FFmpeg before 0.9.1 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.6, and 0.8.x before 0.8.3 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted H.264 file, related to the chroma_format_idc value.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://ffmpeg.org/security.html; http://ffmpeg.org/trac/ffmpeg/ticket/758; http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=7fff64e00d886fde11d61958888c82b461cf99b9
CVE: CVE-2012-0852
Published: 2012-08-20
Description: The adpcm_decode_frame function in adpcm.c in libavcodec in FFmpeg before 0.9.1 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.6, and 0.8.x before 0.8.3 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via an ADPCM file with the number of channels not equal to two.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://ffmpeg.org/security.html; http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=608708009f69ba4cecebf05120c696167494c897; http://libav.org/
CVE: CVE-2012-0853
Published: 2012-08-20
Description: The decodeTonalComponents function in the Actrac3 codec (atrac3.c) in libavcodec in FFmpeg 0.7.x before 0.7.12, and 0.8.x before 0.8.11; and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1 allows remote attackers to cause a denial of service (infinite loop and crash) and possibly execute arbitrary code via a large component count in an Atrac 3 file.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: http://ffmpeg.org/trac/ffmpeg/ticket/780; http://git.libav.org/?p=libav.git%3Ba=commit%3Bh=c509f4f74713b035a06f79cb4d00e708f5226bc5; http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=9af6abdc17deb95c9b1f1d9242ba49b8b5e0b016
CVE: CVE-2012-0858
Published: 2012-08-20
Description: The Shorten codec (shorten.c) in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted Shorten file, related to an "invalid free".
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-399
References: http://ffmpeg.org/; http://git.libav.org/?p=libav.git%3Ba=commitdiff%3Bh=204cb29b3c84a74cbcd059d353c70c8bdc567d98; http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=204cb29b3c84a74cbcd059d353c70c8bdc567d98
CVE: CVE-2012-0859
Published: 2012-08-20
Description: The render_line function in the vorbis codec (vorbis.c) in libavcodec in FFmpeg before 0.9.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted Vorbis file, related to a large multiplier.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-3893.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://ffmpeg.org/security.html; http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=6fcf2bb8af0e7d6bb179e71e67e5fab8ef0d2ec2; http://www.openwall.com/lists/oss-security/2012/02/14/4
CVE: CVE-2012-0947
Published: 2012-08-20
Description: Heap-based buffer overflow in the vqa_decode_chunk function in the VQA codec (vqavideo.c) in libavcodec in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.6, and 0.8.x before 0.8.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted VQA media file in which the image size is not a multiple of the block size.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://git.libav.org/?p=libav.git%3Ba=commit%3Bh=58b2e0f0f2fc96c1158e04f8aba95cbe6157a1a3; http://libav.org/; http://secunia.com/advisories/49089
CVE: CVE-2012-2132
Published: 2012-08-20
Description: libsoup 2.32.2 and earlier does not validate certificates or clear the trust flag when the ssl-ca-file does not exist, which allows remote attackers to bypass authentication by connecting with a SSL connection.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-287
References: http://www.openwall.com/lists/oss-security/2012/04/24/13; http://www.openwall.com/lists/oss-security/2012/04/24/3; http://www.openwall.com/lists/oss-security/2012/04/30/7
CVE: CVE-2012-2387
Published: 2012-08-20
Description: devotee 0.1 patch 2 uses a 32-bit seed for generating 48-bit random numbers, which makes it easier for remote attackers to obtain the secret monikers via a brute force attack.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://www.openwall.com/lists/oss-security/2012/05/18/15; http://www.openwall.com/lists/oss-security/2012/05/21/2; http://www.openwall.com/lists/oss-security/2012/05/22/11
CVE: CVE-2012-3447
Published: 2012-08-20
Description: virt/disk/api.py in OpenStack Compute (Nova) 2012.1.x before 2012.1.2 and Folsom before Folsom-3 allows remote authenticated users to overwrite arbitrary files via a symlink attack on a file in an image that uses a symlink that is only readable by root.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-3361.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-264
References: http://www.openwall.com/lists/oss-security/2012/08/07/1; http://www.securityfocus.com/bid/54869; https://bugs.launchpad.net/nova/+bug/1031311
CVE: CVE-2012-3456
Published: 2012-08-20
Description: Heap-based buffer overflow in the read function in filters/words/msword-odf/wv2/src/styles.cpp in the Microsoft import filter in Calligra 2.4.3 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted ODF style in an ODF document.  NOTE: this is the same vulnerability as CVE-2012-3455, but it was SPLIT by the CNA even though Calligra and KOffice share the same codebase.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00026.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]5494&w=2; http://media.blackhat.com/bh-us-12/Briefings/C_Miller/BH_US_12_Miller_NFC_attack_surface_WP.pdf
CVE: CVE-2012-0847
Published: 2012-08-20
Description: Heap-based buffer overflow in the avfilter_filter_samples function in libavfilter/avfilter.c in FFmpeg before 0.9.1 allows remote attackers to cause a denial of service (application crash) via a crafted media file.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-119
References: http://ffmpeg.org/security.html; http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=ae21776207e8a2bbe268e7c9e203f7599dd87ddb; http://www.openwall.com/lists/oss-security/2012/02/01/11
CVE: CVE-2012-0848
Published: 2012-08-20
Description: Heap-based buffer overflow in the ws_snd_decode_frame function in libavcodec/ws-snd1.c in FFmpeg 0.9.1 allows remote attackers to cause a denial of service (application crash) via a crafted media file, related to an incorrect calculation, aka "wrong samples count."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-119
References: http://ffmpeg.org/security.html; http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=5257743aee0c3982f0079e6553aabc6aa39401d2; http://www.openwall.com/lists/oss-security/2012/02/01/11
CVE: CVE-2012-0850
Published: 2012-08-20
Description: The sbr_qmf_synthesis function in libavcodec/aacsbr.c in FFmpeg before 0.9.1 allows remote attackers to cause a denial of service (application crash) via a crafted mpg file that triggers memory corruption involving the v_off variable, probably a buffer underflow.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-119
References: http://ffmpeg.org/security.html; http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=944f5b2779e4aa63f7624df6cd4de832a53db81b; http://www.openwall.com/lists/oss-security/2012/02/01/11
CVE: CVE-2012-0854
Published: 2012-08-20
Description: The dpcm_decode_frame function in libavcodec/dpcm.c in FFmpeg before 0.9.1 does not use the proper pointer after an audio API change, which allows remote attackers to cause a denial of service (application crash) via unspecified vectors, which triggers a heap-based buffer overflow.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://ffmpeg.org/security.html; http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=6d8e6fe9dbc365f50521cf0c4a5ffee97c970cb5; http://www.openwall.com/lists/oss-security/2012/02/01/11
CVE: CVE-2012-0856
Published: 2012-08-20
Description: Heap-based buffer overflow in the MPV_frame_start function in libavcodec/mpegvideo.c in FFmpeg before 0.9.1, when the lowres option is enabled, allows remote attackers to cause a denial of service (application crash) via a crafted H263 media file.  NOTE: this vulnerability exists because of a regression error.
CVSS Score: 2.6 (LOW)
CWE: CWE-119
References: http://ffmpeg.org/security.html; http://ffmpeg.org/trac/ffmpeg/ticket/757; http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=21270cffaeab2f67a613907516b2b0cd6c9eacf4