deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2014-6179
Published: 2014-12-24
Description: Cross-site scripting (XSS) vulnerability in the Web UI in IBM WebSphere Service Registry and Repository (WSRR) 7.5.x before 7.5.0.4 and 8.0.x before 8.0.0.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www-01.ibm.com/support/docview.wss?uid=swg1IV51859; http://www.ibm.com/support/docview.wss?uid=swg21693384; http://www.ibm.com/support/docview.wss?uid=swg21693387
CVE: CVE-2014-6180
Published: 2014-12-24
Description: Cross-site scripting (XSS) vulnerability in the Web UI in IBM WebSphere Service Registry and Repository (WSRR) 7.0.x before 7.0.0.5 and 7.5.x before 7.5.0.1 allows remote authenticated users to inject arbitrary web script or HTML via the HTTP User-Agent header.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://www-01.ibm.com/support/docview.wss?uid=swg1IV01657; http://www.ibm.com/support/docview.wss?uid=swg21693381; http://www.ibm.com/support/docview.wss?uid=swg21693384
CVE: CVE-2014-6181
Published: 2014-12-24
Description: IBM WebSphere Service Registry and Repository (WSRR) 7.0.x before 7.0.0.5 does not perform access-control checks for contained objects, which allows remote authenticated users to obtain sensitive information via unspecified vectors.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-264
References: http://www-01.ibm.com/support/docview.wss?uid=swg1IV25285; http://www.ibm.com/support/docview.wss?uid=swg21693381; https://exchange.xforce.ibmcloud.com/vulnerabilities/98517
CVE: CVE-2014-6186
Published: 2014-12-24
Description: IBM WebSphere Service Registry and Repository (WSRR) 6.3.x before 6.3.0.5, 7.0.x through 7.0.0.5, 7.5.x before 7.5.0.3, and 8.0.x before 8.0.0.1 allows remote authenticated users to bypass intended object-access restrictions via the datagraph.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-264
References: http://www-01.ibm.com/support/docview.wss?uid=swg1IV26309; http://www.ibm.com/support/docview.wss?uid=swg21693379; http://www.ibm.com/support/docview.wss?uid=swg21693381
CVE: CVE-2014-6187
Published: 2014-12-24
Description: Multiple cross-site request forgery (CSRF) vulnerabilities in IBM WebSphere Service Registry and Repository (WSRR) 6.3.x before 6.3.0.5, 7.0.x before 7.0.0.5, 7.5.x before 7.5.0.3, and 8.0.x before 8.0.0.2 allow remote authenticated users to hijack the authentication of unspecified victims via unknown vectors.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-352
References: http://www-01.ibm.com/support/docview.wss?uid=swg1IV26727; http://www.ibm.com/support/docview.wss?uid=swg21693379; http://www.ibm.com/support/docview.wss?uid=swg21693381
CVE: CVE-2014-6188
Published: 2014-12-24
Description: Multiple cross-site scripting (XSS) vulnerabilities in IBM WebSphere Service Registry and Repository (WSRR) 6.3.x before 6.3.0.5, 7.0.x through 7.0.0.5, 7.5.x before 7.5.0.3, and 8.0.x before 8.0.0.2 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://www-01.ibm.com/support/docview.wss?uid=swg1IV26727; http://www.ibm.com/support/docview.wss?uid=swg21693379; http://www.ibm.com/support/docview.wss?uid=swg21693381
CVE: CVE-2014-4322
Published: 2014-12-24
Description: drivers/misc/qseecom.c in the QSEECOM driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, does not validate certain offset, length, and base values within an ioctl call, which allows attackers to gain privileges or cause a denial of service (memory corruption) via a crafted application.
CVSS Score: 7.2 (HIGH)
CWE: CWE-787
References: https://www.codeaurora.org/projects/security-advisories/memory-corruption-qseecom-driver-cve-2014-4322; https://www.codeaurora.org/projects/security-advisories/memory-corruption-qseecom-driver-cve-2014-4322
CVE: CVE-2004-2771
Published: 2014-12-24
Description: The expand function in fio.c in Heirloom mailx 12.5 and earlier and BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in an email address.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://linux.oracle.com/errata/ELSA-2014-1999.html; http://rhn.redhat.com/errata/RHSA-2014-1999.html; http://seclists.org/oss-sec/2014/q4/1066
CVE: CVE-2014-8137
Published: 2014-12-24
Description: Double free vulnerability in the jas_iccattrval_destroy function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted ICC color profile in a JPEG 2000 image file.
CVSS Score: 6.8 (MEDIUM)
References: http://advisories.mageia.org/MGASA-2014-0539.html; http://lists.opensuse.org/opensuse-updates/2015-01/msg00013.html; http://lists.opensuse.org/opensuse-updates/2015-01/msg00014.html
CVE: CVE-2014-8138
Published: 2014-12-24
Description: Heap-based buffer overflow in the jp2_decode function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted JPEG 2000 file.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://advisories.mageia.org/MGASA-2014-0539.html; http://lists.opensuse.org/opensuse-updates/2015-01/msg00013.html; http://lists.opensuse.org/opensuse-updates/2015-01/msg00014.html
CVE: CVE-2014-8809
Published: 2014-12-24
Description: Multiple cross-site scripting (XSS) vulnerabilities in the WP Symposium plugin before 14.11 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) text parameter in an addComment action to ajax/profile_functions.php, (2) compose_text parameter in a sendMail action to ajax/mail_functions.php, (3) comment parameter in an add_comment action to ajax/lounge_functions.php, or (4) name parameter in a create_album action to ajax/gallery_functions.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://security.szurek.pl/wp-symposium-1410-multiple-xss-and-sql-injection.html; http://www.wpsymposium.com/release-information-for-v14-11/; http://security.szurek.pl/wp-symposium-1410-multiple-xss-and-sql-injection.html
CVE: CVE-2014-8810
Published: 2014-12-24
Description: SQL injection vulnerability in ajax/mail_functions.php in the WP Symposium plugin before 14.11 for WordPress allows remote authenticated users to execute arbitrary SQL commands via the tray parameter in a getMailMessage action.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: http://secunia.com/advisories/62643; http://security.szurek.pl/wp-symposium-1410-multiple-xss-and-sql-injection.html; http://www.exploit-db.com/exploits/35505
CVE: CVE-2014-9222
Published: 2014-12-24
Description: AllegroSoft RomPager 4.34 and earlier, as used in Huawei Home Gateway products and other vendors and products, allows remote attackers to gain privileges via a crafted cookie that triggers memory corruption, aka the "Misfortune Cookie" vulnerability.
CVSS Score: 10.0 (HIGH)
CWE: CWE-17
References: http://mis.fortunecook.ie/; http://seclists.org/fulldisclosure/2014/Dec/87; http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-407666.htm
CVE: CVE-2014-9223
Published: 2014-12-24
Description: Multiple buffer overflows in AllegroSoft RomPager, as used in Huawei Home Gateway products and other vendors and products, allow remote attackers to cause a denial of service or possibly execute arbitrary code via unspecified vectors related to authorization.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://mis.fortunecook.ie/; http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-407666.htm; https://www.allegrosoft.com/allegro-software-urges-manufacturers-to-maintain-firmware-for-highest-level-of-embedded-device-security/news-press.html
CVE: CVE-2014-9334
Published: 2014-12-24
Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the Bird Feeder plugin 1.2.3 for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the (1) user or (2) password parameter in the bird-feeder page to wp-admin/options-general.php.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://packetstormsecurity.com/files/129623/WordPress-Bird-Feeder-1.2.3-CSRF-XSS.html; http://seclists.org/fulldisclosure/2014/Dec/69; http://www.vulnerability-lab.com/get_content.php?id=1372
CVE: CVE-2014-9413
Published: 2014-12-24
Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the IP Ban (simple-ip-ban) plugin 1.2.3 for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the (1) ip_list, (2) user_agent_list, or (3) redirect_url parameter in the simple-ip-ban page to wp-admin/options-general.php.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://packetstormsecurity.com/files/129500/WordPress-IP-Ban-1.2.3-CSRF-XSS.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/99503; https://wordpress.org/plugins/simple-ip-ban/changelog/
CVE: CVE-2014-9414
Published: 2014-12-24
Description: The W3 Total Cache plugin before 0.9.4.1 for WordPress does not properly handle empty nonces, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks and hijack the authentication of administrators for requests that change the mobile site redirect URI via the mobile_groups[*][redirect] parameter and an empty _wpnonce parameter in the w3tc_mobile page to wp-admin/admin.php.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://mazinahmed1.blogspot.com/2014/12/w3-total-caches-w3totalfail.html; http://packetstormsecurity.com/files/129512/W3-Total-Cache-0.9.4-Cross-Site-Request-Forgery.html; http://seclists.org/fulldisclosure/2014/Dec/67
CVE: CVE-2014-9415
Published: 2014-12-24
Description: Huawei eSpace Desktop before V100R001C03 allows local users to cause a denial of service (program exit) via a crafted QES file.
CVSS Score: 1.9 (LOW)
CWE: CWE-20
References: http://packetstormsecurity.com/files/152965/Huawei-eSpace-1.1.11.103-Unicode-Stack-Buffer-Overflow.html; http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-406589.htm; http://packetstormsecurity.com/files/152965/Huawei-eSpace-1.1.11.103-Unicode-Stack-Buffer-Overflow.html
CVE: CVE-2014-9416
Published: 2014-12-24
Description: Multiple untrusted search path vulnerabilities in Huawei eSpace Desktop before V200R003C00 allow local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse (1) mfc71enu.dll, (2) mfc71loc.dll, (3) tcapi.dll, or (4) airpcap.dll.
CVSS Score: 4.4 (MEDIUM)
References: http://packetstormsecurity.com/files/152966/Huawei-eSpace-1.1.11.103-DLL-Hijacking.html; http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-406589.htm; http://packetstormsecurity.com/files/152966/Huawei-eSpace-1.1.11.103-DLL-Hijacking.html
CVE: CVE-2014-9417
Published: 2014-12-24
Description: The Meeting component in Huawei eSpace Desktop before V100R001C03 allows local users to cause a denial of service (program exit) via a crafted image.
CVSS Score: 2.1 (LOW)
CWE: CWE-20
References: http://packetstormsecurity.com/files/152967/Huawei-eSpace-1.1.11.103-Meeting-Image-File-Format-Handling-Buffer-Overflow.html; http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-406589.htm; http://packetstormsecurity.com/files/152967/Huawei-eSpace-1.1.11.103-Meeting-Image-File-Format-Handling-Buffer-Overflow.html
CVE: CVE-2014-9418
Published: 2014-12-24
Description: The eSpace Meeting ActiveX control (eSpaceStatusCtrl.dll) in Huawei eSpace Desktop before V200R001C03 allows local users to cause a denial of service (memory overflow) via unspecified vectors.
CVSS Score: 2.1 (LOW)
CWE: CWE-119
References: http://packetstormsecurity.com/files/152968/Huawei-eSpace-1.1.11.103-Meeting-Heap-Overflow.html; http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-406589.htm; http://packetstormsecurity.com/files/152968/Huawei-eSpace-1.1.11.103-Meeting-Heap-Overflow.html
CVE: CVE-2014-3971
Published: 2014-12-25
Description: The CmdAuthenticate::_authenticateX509 function in db/commands/authentication_commands.cpp in mongod in MongoDB 2.6.x before 2.6.2 allows remote attackers to cause a denial of service (daemon crash) by attempting authentication with an invalid X.509 client certificate.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: https://github.com/mongodb/mongo/commit/c151e0660b9736fe66b224f1129a[PII_REDACTED]b; https://jira.mongodb.org/browse/SERVER-13753; https://github.com/mongodb/mongo/commit/c151e0660b9736fe66b224f1129a[PII_REDACTED]b
CVE: CVE-2014-7193
Published: 2014-12-25
Description: The Crumb plugin before 3.0.0 for Node.js does not properly restrict token access in situations where a hapi route handler has CORS enabled, which allows remote attackers to obtain sensitive information, and potentially obtain the ability to spoof requests to non-CORS routes, via a crafted web site that is visited by an application consumer.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-284
References: https://github.com/hapijs/crumb/commit/5e6d4f5c81677fe9e362837ffd4a02394303db3c; https://nodesecurity.io/advisories/crumb_cors_token_disclosure; https://github.com/hapijs/crumb/commit/5e6d4f5c81677fe9e362837ffd4a02394303db3c
CVE: CVE-2014-1449
Published: 2014-12-25
Description: The Maxthon Cloud Browser application before 4.1.6.2000 for Android allows remote attackers to spoof the address bar via crafted JavaScript code that uses the history API.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-284
References: http://browser-shredders.blogspot.com/2014/01/cve-2014-1449-maxthon-cloud-browser-for.html; http://www.maxthon.com/android/changelog/; http://browser-shredders.blogspot.com/2014/01/cve-2014-1449-maxthon-cloud-browser-for.html
CVE: CVE-2014-2217
Published: 2014-12-25
Description: Absolute path traversal vulnerability in the RadAsyncUpload control in the RadControls in Telerik UI for ASP.NET AJAX before Q3 2012 SP2 allows remote attackers to write to arbitrary files, and consequently execute arbitrary code, via a full pathname in the UploadID metadata value.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://itq.nl/arbitrary-file-write-in-telerik-ui-for-asp-net-ajax/; http://itq.nl/arbitrary-file-write-in-telerik-ui-for-asp-net-ajax/
CVE: CVE-2014-7300
Published: 2014-12-25
Description: GNOME Shell 3.14.x before 3.14.1, when the Screen Lock feature is used, does not limit the aggregate memory consumption of all active PrtSc requests, which allows physically proximate attackers to execute arbitrary commands on an unattended workstation by making many PrtSc requests and leveraging a temporary lock outage, and the resulting temporary shell availability, caused by the Linux kernel OOM killer.
CVSS Score: 7.2 (HIGH)
CWE: CWE-399
References: http://openwall.com/lists/oss-security/2014/09/29/17; http://rhn.redhat.com/errata/RHSA-2015-0535.html; https://bugzilla.gnome.org/show_bug.cgi?id=737456
CVE: CVE-2014-9419
Published: 2014-12-26
Description: The __switch_to function in arch/x86/kernel/process_64.c in the Linux kernel through 3.18.1 does not ensure that Thread Local Storage (TLS) descriptors are loaded before proceeding with other steps, which makes it easier for local users to bypass the ASLR protection mechanism via a crafted application that reads a TLS base address.
CVSS Score: 2.1 (LOW)
CWE: CWE-200
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f647d7c155f069c1a068030255c[PII_REDACTED]20e; http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147864.html; http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147973.html
CVE: CVE-2014-9420
Published: 2014-12-26
Description: The rock_continue function in fs/isofs/rock.c in the Linux kernel through 3.18.1 does not restrict the number of Rock Ridge continuation entries, which allows local users to cause a denial of service (infinite loop, and system crash or hang) via a crafted iso9660 image.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-399
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f54e18f1b831c92f6512d2eedb224cd63d607d3d; http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147864.html; http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147973.html
CVE: CVE-2011-1793
Published: 2014-12-26
Description: rendering/svg/RenderSVGResourceFilter.cpp in WebCore in WebKit in Google Chrome before 11.0.696.65 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted SVG document that leads to a "stale pointer."
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://crbug.com/67923; http://launchpad.net/bugs/778822; http://trac.webkit.org/changeset/85406
CVE: CVE-2011-1794
Published: 2014-12-26
Description: Integer overflow in the FilterEffect::copyImageBytes function in platform/graphics/filters/FilterEffect.cpp in the SVG filter implementation in WebCore in WebKit in Google Chrome before 11.0.696.65 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via crafted dimensions.
CVSS Score: 7.5 (HIGH)
CWE: CWE-189
References: http://crbug.com/78327; http://launchpad.net/bugs/778822; http://trac.webkit.org/changeset/84422
CVE: CVE-2011-1795
Published: 2014-12-26
Description: Integer underflow in the HTMLFormElement::removeFormElement function in html/HTMLFormElement.cpp in WebCore in WebKit in Google Chrome before 11.0.696.65 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted HTML document containing a FORM element.
CVSS Score: 7.5 (HIGH)
CWE: CWE-189
References: http://crbug.com/78948; http://launchpad.net/bugs/778822; http://trac.webkit.org/changeset/83690
CVE: CVE-2011-1796
Published: 2014-12-26
Description: Use-after-free vulnerability in the FrameView::calculateScrollbarModesForLayout function in page/FrameView.cpp in WebCore in WebKit in Google Chrome before 11.0.696.65 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via crafted JavaScript code that calls the removeChild method during interaction with a FRAME element.
CVSS Score: 7.5 (HIGH)
References: http://crbug.com/79055; http://launchpad.net/bugs/778822; http://trac.webkit.org/changeset/84300
CVE: CVE-2011-1798
Published: 2014-12-26
Description: rendering/svg/RenderSVGText.cpp in WebCore in WebKit in Google Chrome before 11.0.696.65 does not properly perform a cast of an unspecified variable during an attempt to handle a block child, which allows remote attackers to cause a denial of service (application crash) or possibly have unknown other impact via a crafted text element in an SVG document.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://crbug.com/79595; http://launchpad.net/bugs/778822; http://trac.webkit.org/changeset/84085
CVE: CVE-2011-3591
Published: 2014-12-26
Description: Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 3.4.x before 3.4.5 allow remote authenticated users to inject arbitrary web script or HTML via a crafted row that triggers an improperly constructed confirmation message after inline-editing and save operations, related to (1) js/functions.js and (2) js/tbl_structure.js.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2011/09/30/8; http://www.phpmyadmin.net/home_page/security/PMASA-2011-14.php; https://bugzilla.redhat.com/show_bug.cgi?id=738681
CVE: CVE-2011-3592
Published: 2014-12-26
Description: Multiple cross-site scripting (XSS) vulnerabilities in the PMA_unInlineEditRow function in js/sql.js in phpMyAdmin 3.4.x before 3.4.5 allow remote authenticated users to inject arbitrary web script or HTML via a (1) database name, (2) table name, or (3) column name that is not properly handled after an inline-editing operation.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2011/09/30/8; http://www.phpmyadmin.net/home_page/security/PMASA-2011-14.php; https://bugzilla.redhat.com/show_bug.cgi?id=738681
CVE: CVE-2009-5027
Published: 2014-12-26
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2010-2062.  Reason: This candidate is a reservation duplicate of CVE-2010-2062.  Notes: All CVE users should reference CVE-2010-2062 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2010-1441
Published: 2014-12-26
Description: Multiple heap-based buffer overflows in VideoLAN VLC media player before 1.0.6 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted byte stream to the (1) A/52, (2) DTS, or (3) MPEG Audio decoder.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://openwall.com/lists/oss-security/2010/04/28/4; http://www.videolan.org/security/sa1003.html; http://openwall.com/lists/oss-security/2010/04/28/4
CVE: CVE-2010-1442
Published: 2014-12-26
Description: VideoLAN VLC media player before 1.0.6 allows remote attackers to cause a denial of service (invalid memory access and application crash) or possibly execute arbitrary code via a crafted byte stream to the (1) AVI, (2) ASF, or (3) Matroska (aka MKV) demuxer.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://openwall.com/lists/oss-security/2010/04/28/4; http://www.videolan.org/security/sa1003.html; http://openwall.com/lists/oss-security/2010/04/28/4
CVE: CVE-2010-1443
Published: 2014-12-26
Description: The parse_track_node function in modules/demux/playlist/xspf.c in the XSPF playlist parser in VideoLAN VLC media player before 1.0.6 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an empty location element in an XML Shareable Playlist Format (XSPF) document.
CVSS Score: 5.0 (MEDIUM)
References: http://git.videolan.org/?p=vlc/vlc-1.1.git%3Ba=commit%3Bh=8902488ba529c0cf4c903a8a84ff20b5737cc753; http://openwall.com/lists/oss-security/2010/04/28/4; http://www.videolan.org/security/sa1003.html
CVE: CVE-2010-1444
Published: 2014-12-26
Description: The ZIP archive decompressor in VideoLAN VLC media player before 1.0.6 allows remote attackers to cause a denial of service (invalid memory access and application crash) or possibly execute arbitrary code via a crafted archive.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://git.videolan.org/?p=vlc/vlc-1.1.git%3Ba=commit%3Bh=08813ee6f8eb0faf83790bd4247c0a97af75a1cf; http://openwall.com/lists/oss-security/2010/04/28/4; http://www.videolan.org/security/sa1003.html
CVE: CVE-2010-1445
Published: 2014-12-26
Description: Heap-based buffer overflow in VideoLAN VLC media player before 1.0.6 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted byte stream in an RTMP session.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://openwall.com/lists/oss-security/2010/04/28/4; http://www.videolan.org/security/sa1003.html; http://openwall.com/lists/oss-security/2010/04/28/4
CVE: CVE-2010-2062
Published: 2014-12-26
Description: Integer underflow in the real_get_rdt_chunk function in real.c, as used in modules/access/rtsp/real.c in VideoLAN VLC media player before 1.0.1 and stream/realrtsp/real.c in MPlayer before r29447, allows remote attackers to execute arbitrary code via a crafted length value in an RDT chunk header.
CVSS Score: 7.5 (HIGH)
CWE: CWE-189
References: http://git.videolan.org/?p=vlc.git%3Ba=commit%3Bh=dc74600c97eb834c08674676e209afa842053aca; http://openwall.com/lists/oss-security/2010/06/04/4; http://seclists.org/fulldisclosure/2009/Jul/418