deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2012-1710
Published: 2012-05-03
Description: Unspecified vulnerability in the Oracle WebCenter Forms Recognition component in Oracle Fusion Middleware 10.1.3.5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Designer, a different vulnerability than CVE-2012-1709.
CVSS Score: 9.8 (CRITICAL)
References: http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html; http://www.securitytracker.com/id?1026949
CVE: CVE-2011-3620
Published: 2012-05-03
Description: Apache Qpid 0.12 does not properly verify credentials during the joining of a cluster, which allows remote attackers to obtain access to the messaging functionality and job functionality of a cluster by leveraging knowledge of a cluster-username.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: http://secunia.com/advisories/49000; http://www.securitytracker.com/id?1026990; https://bugzilla.redhat.com/show_bug.cgi?id=747078
CVE: CVE-2012-1328
Published: 2012-05-03
Description: Cisco Unified IP Phones 9900 series devices with firmware 9.1 and 9.2 do not properly handle downloads of configuration information to an RT phone, which allows local users to gain privileges via unspecified injected data, aka Bug ID CSCts32237.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-94
References: http://www.cisco.com/en/US/docs/voice_ip_comm/cuipph/9971_9951_8961/firmware/9_2_3/release_notes/9900_8900_923.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/75412; http://www.cisco.com/en/US/docs/voice_ip_comm/cuipph/9971_9951_8961/firmware/9_2_3/release_notes/9900_8900_923.html
CVE: CVE-2012-0202
Published: 2012-05-04
Description: Multiple stack-based buffer overflows in tm1admsd.exe in the Admin Server in IBM Cognos TM1 9.4.x and 9.5.x before 9.5.2 FP2 allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via crafted data.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://www-01.ibm.com/support/docview.wss?uid=swg21590314; http://www-01.ibm.com/support/docview.wss?uid=swg24032164; http://www-01.ibm.com/support/docview.wss?uid=swg24032165
CVE: CVE-2012-0745
Published: 2012-05-04
Description: The getpwnam function in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.1.0.10 through 2.2.1.3 does not properly interact with customer-extended LDAP user filtering, which allows local users to gain privileges via unspecified vectors.
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://aix.software.ibm.com/aix/efixes/security/ldapauth_advisory2.asc; http://osvdb.org/81683; http://secunia.com/advisories/49073
CVE: CVE-2012-1516
Published: 2012-05-04
Description: The VMX process in VMware ESXi 3.5 through 4.1 and ESX 3.5 through 4.1 does not properly handle RPC commands, which allows guest OS users to cause a denial of service (memory overwrite and process crash) or possibly execute arbitrary code on the host OS via vectors involving data pointers.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/53369; http://www.securitytracker.com/id?1027018; http://www.vmware.com/security/advisories/VMSA-2012-0009.html
CVE: CVE-2012-1517
Published: 2012-05-04
Description: The VMX process in VMware ESXi 4.1 and ESX 4.1 does not properly handle RPC commands, which allows guest OS users to cause a denial of service (memory overwrite and process crash) or possibly execute arbitrary code on the host OS via vectors involving function pointers.
CVSS Score: 9.0 (HIGH)
CWE: CWE-119
References: http://osvdb.org/81692; http://www.securityfocus.com/bid/53369; http://www.securitytracker.com/id?1027018
CVE: CVE-2012-2448
Published: 2012-05-04
Description: VMware ESXi 3.5 through 5.0 and ESX 3.5 through 4.1 allow remote attackers to execute arbitrary code or cause a denial of service (memory overwrite) via NFS traffic.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://osvdb.org/81693; http://www.securityfocus.com/bid/53371; http://www.securitytracker.com/id?1027018
CVE: CVE-2012-2449
Published: 2012-05-04
Description: VMware Workstation 8.x before 8.0.3, VMware Player 4.x before 4.0.3, VMware Fusion 4.x through 4.1.2, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 do not properly configure the virtual floppy device, which allows guest OS users to cause a denial of service (out-of-bounds write operation and VMX process crash) or possibly execute arbitrary code on the host OS by leveraging administrative privileges on the guest OS.
CVSS Score: 9.0 (HIGH)
CWE: CWE-119
References: http://osvdb.org/81694; http://secunia.com/advisories/49032; http://www.securityfocus.com/bid/53369
CVE: CVE-2012-2450
Published: 2012-05-04
Description: VMware Workstation 8.x before 8.0.3, VMware Player 4.x before 4.0.3, VMware Fusion 4.x before 4.1.2, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 do not properly register SCSI devices, which allows guest OS users to cause a denial of service (invalid write operation and VMX process crash) or possibly execute arbitrary code on the host OS by leveraging administrative privileges on the guest OS.
CVSS Score: 9.0 (HIGH)
References: http://osvdb.org/81695; http://secunia.com/advisories/49032; http://www.securityfocus.com/bid/53369
CVE: CVE-2012-0779
Published: 2012-05-04
Description: Adobe Flash Player before 10.3.183.19 and 11.x before 11.2.202.235 on Windows, Mac OS X, and Linux; before 11.1.111.9 on Android 2.x and 3.x; and before 11.1.115.8 on Android 4.x allows remote attackers to execute arbitrary code via a crafted file, related to an "object confusion vulnerability," as exploited in the wild in May 2012.
CVSS Score: 9.3 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00004.html; http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00005.html; http://osvdb.org/81656
CVE: CVE-2012-0672
Published: 2012-05-08
Description: WebKit in Apple iOS before 5.1.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2012/Jun/msg00000.html; http://lists.apple.com/archives/security-announce/2012/May/msg00000.html; http://lists.apple.com/archives/security-announce/2012/May/msg00002.html
CVE: CVE-2012-0674
Published: 2012-05-08
Description: Safari in Apple iOS before 5.1.1 allows remote attackers to spoof the location bar's URL via a crafted web site.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://lists.apple.com/archives/security-announce/2012/May/msg00000.html; http://lists.apple.com/archives/security-announce/2012/May/msg00000.html
CVE: CVE-2012-1675
Published: 2012-05-08
Description: The TNS Listener, as used in Oracle Database 11g 11.1.0.7, 11.2.0.2, and 11.2.0.3, and 10g 10.2.0.3, 10.2.0.4, and 10.2.0.5, as used in Oracle Fusion Middleware, Enterprise Manager, E-Business Suite, and possibly other products, allows remote attackers to execute arbitrary database commands by performing a remote registration of a database (1) instance or (2) service name that already exists, then conducting a man-in-the-middle (MITM) attack to hijack database connections, aka "TNS Poison."
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://lists.opensuse.org/opensuse-security-announce/2012-06/msg00018.html; http://seclists.org/fulldisclosure/2012/Apr/204; http://seclists.org/fulldisclosure/2012/Apr/343
CVE: CVE-2012-0018
Published: 2012-05-09
Description: Microsoft Visio Viewer 2010 Gold and SP1 does not properly validate attributes in Visio files, which allows remote attackers to execute arbitrary code via a crafted file, aka "VSD File Format Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://osvdb.org/81731; http://secunia.com/advisories/49113; http://www.securityfocus.com/bid/53328
CVE: CVE-2012-0141
Published: 2012-05-09
Description: Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Office 2011 for Mac; Excel Viewer; and Office Compatibility Pack SP2 and SP3 do not properly handle memory during the opening of files, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel File Format Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/49112; http://www.securityfocus.com/bid/53342; http://www.securitytracker.com/id?1027041
CVE: CVE-2012-0142
Published: 2012-05-09
Description: Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Office 2008 for Mac; Excel Viewer; and Office Compatibility Pack SP2 and SP3 do not properly handle memory during the opening of files, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel File Format Memory Corruption in OBJECTLINK Record Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://secunia.com/advisories/49112; http://www.securityfocus.com/bid/53373; http://www.securitytracker.com/id?1027041
CVE: CVE-2012-0143
Published: 2012-05-09
Description: Microsoft Excel 2003 SP3 and Office 2008 for Mac do not properly handle memory during the opening of files, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel Memory Corruption Using Various Modified Bytes Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://secunia.com/advisories/49112; http://www.securityfocus.com/bid/53374; http://www.securitytracker.com/id?1027041
CVE: CVE-2012-0159
Published: 2012-05-09
Description: Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, and Windows 8 Consumer Preview; Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Silverlight 4 before 4.1.10329; and Silverlight 5 before 5.1.10411 allow remote attackers to execute arbitrary code via a crafted TrueType font (TTF) file, aka "TrueType Font Parsing Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://secunia.com/advisories/49121; http://secunia.com/advisories/49122; http://www.securityfocus.com/bid/53335
CVE: CVE-2012-0160
Published: 2012-05-09
Description: Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.0 SP2, 3.5 SP1, 3.5.1, and 4 does not properly serialize input data, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP) or (2) a crafted .NET Framework application, aka ".NET Framework Serialization Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://secunia.com/advisories/49117; http://www.securityfocus.com/bid/53356; http://www.securitytracker.com/id?1027036
CVE: CVE-2012-0161
Published: 2012-05-09
Description: Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.0 SP2, 3.5 SP1, 3.5.1, and 4 does not properly handle an unspecified exception during use of partially trusted assemblies to serialize input data, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP) or (2) a crafted .NET Framework application, aka ".NET Framework Serialization Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://secunia.com/advisories/49117; http://www.securityfocus.com/bid/53357; http://www.securitytracker.com/id?1027036
CVE: CVE-2012-0162
Published: 2012-05-09
Description: Microsoft .NET Framework 4 does not properly allocate buffers, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP) or (2) a crafted .NET Framework application, aka ".NET Framework Buffer Allocation Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/53358; http://www.us-cert.gov/cas/techalerts/TA12-129A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-034
CVE: CVE-2012-0164
Published: 2012-05-09
Description: Microsoft .NET Framework 4 does not properly compare index values, which allows remote attackers to cause a denial of service (application hang) via crafted requests to a Windows Presentation Foundation (WPF) application, aka ".NET Framework Index Comparison Vulnerability."
CVSS Score: 5.0 (MEDIUM)
References: http://www.securityfocus.com/bid/53363; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-034; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15580
CVE: CVE-2012-0165
Published: 2012-05-09
Description: GDI+ in Microsoft Windows Vista SP2 and Server 2008 SP2 and Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1 does not properly validate record types in EMF images, which allows remote attackers to execute arbitrary code via a crafted image, aka "GDI+ Record Type Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://secunia.com/advisories/49121; http://www.securityfocus.com/bid/53347; http://www.securitytracker.com/id?1027038
CVE: CVE-2012-0167
Published: 2012-05-09
Description: Heap-based buffer overflow in the Office GDI+ library in Microsoft Office 2003 SP3 and 2007 SP2 and SP3 allows remote attackers to execute arbitrary code via a crafted EMF image in an Office document, aka "GDI+ Heap Overflow Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://secunia.com/advisories/49121; http://www.securityfocus.com/bid/53351; http://www.securitytracker.com/id?1027038
CVE: CVE-2012-0174
Published: 2012-05-09
Description: Windows Firewall in tcpip.sys in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly enforce firewall rules for outbound broadcast packets, which allows remote attackers to obtain potentially sensitive information by observing broadcast traffic on a local network, aka "Windows Firewall Bypass Vulnerability."
CVSS Score: 1.7 (LOW)
CWE: CWE-264
References: http://osvdb.org/81730; http://secunia.com/advisories/49114; http://www.securityfocus.com/bid/53352
CVE: CVE-2012-0176
Published: 2012-05-09
Description: Double free vulnerability in Microsoft Silverlight 4 before 4.1.10329 on Windows allows remote attackers to execute arbitrary code via vectors involving crafted XAML glyphs, aka "Silverlight Double-Free Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://secunia.com/advisories/49122; http://www.securityfocus.com/bid/53360; http://www.securitytracker.com/id?1027040
CVE: CVE-2012-0178
Published: 2012-05-09
Description: Race condition in partmgr.sys in Windows Partition Manager in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that makes multiple simultaneous Plug and Play (PnP) Configuration Manager function calls, aka "Plug and Play (PnP) Configuration Manager Vulnerability."
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://osvdb.org/81735; http://secunia.com/advisories/49115; http://www.securityfocus.com/bid/53378
CVE: CVE-2012-0179
Published: 2012-05-09
Description: Double free vulnerability in tcpip.sys in Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that binds an IPv6 address to a local interface, aka "TCP/IP Double Free Vulnerability."
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://osvdb.org/81729; http://secunia.com/advisories/49114; http://www.securityfocus.com/bid/53349
CVE: CVE-2012-0180
Published: 2012-05-09
Description: win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, and Windows 8 Consumer Preview does not properly handle user-mode input passed to kernel mode for (1) windows and (2) messages, which allows local users to gain privileges via a crafted application, aka "Windows and Messages Vulnerability."
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/53324; http://www.securitytracker.com/id?1027039; http://www.us-cert.gov/cas/techalerts/TA12-129A.html
CVE: CVE-2012-0181
Published: 2012-05-09
Description: win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, and Windows 8 Consumer Preview does not properly manage Keyboard Layout files, which allows local users to gain privileges via a crafted application, aka "Keyboard Layout File Vulnerability."
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://www.securitytracker.com/id?1027039; http://www.us-cert.gov/cas/techalerts/TA12-129A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-034
CVE: CVE-2012-0183
Published: 2012-05-09
Description: Microsoft Word 2003 SP3 and 2007 SP2 and SP3, Office 2008 and 2011 for Mac, and Office Compatibility Pack SP2 and SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted RTF data, aka "RTF Mismatch Vulnerability."
CVSS Score: 9.3 (HIGH)
References: http://secunia.com/advisories/49111; http://www.securityfocus.com/bid/53344; http://www.securitytracker.com/id?1027035
CVE: CVE-2012-0184
Published: 2012-05-09
Description: Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Office 2008 and 2011 for Mac; Excel Viewer; and Office Compatibility Pack SP2 and SP3 do not properly handle memory during the opening of files, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel SXLI Record Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-264
References: http://secunia.com/advisories/49112; http://www.securityfocus.com/bid/53375; http://www.securitytracker.com/id?1027041
CVE: CVE-2012-0185
Published: 2012-05-09
Description: Heap-based buffer overflow in Microsoft Excel 2007 SP2 and SP3 and 2010 Gold and SP1, Excel Viewer, and Office Compatibility Pack SP2 and SP3 allows remote attackers to execute arbitrary code via a crafted spreadsheet that triggers incorrect handling of memory during opening, aka "Excel MergeCells Record Heap Overflow Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-264
References: http://secunia.com/advisories/49112; http://www.securitytracker.com/id?1027041; http://www.us-cert.gov/cas/techalerts/TA12-129A.html
CVE: CVE-2012-1847
Published: 2012-05-09
Description: Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Office 2008 and 2011 for Mac; Excel Viewer; and Office Compatibility Pack SP2 and SP3 do not properly handle memory during the opening of files, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel Series Record Parsing Type Mismatch Could Result in Remote Code Execution Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-264
References: http://secunia.com/advisories/49112; http://www.securityfocus.com/bid/53379; http://www.securitytracker.com/id?1027041
CVE: CVE-2012-1848
Published: 2012-05-09
Description: win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, and Windows 8 Consumer Preview does not properly handle user-mode input passed to kernel mode, which allows local users to gain privileges via a crafted application, aka "Scrollbar Calculation Vulnerability."
CVSS Score: 7.2 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/53327; http://www.securitytracker.com/id?1027039; http://www.us-cert.gov/cas/techalerts/TA12-129A.html
CVE: CVE-2012-0778
Published: 2012-05-09
Description: Buffer overflow in Adobe Flash Professional before CS6 allows attackers to execute arbitrary code via unspecified vectors.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://www.adobe.com/support/security/bulletins/apsb12-12.html; http://www.securityfocus.com/bid/53419; http://www.securitytracker.com/id?1027045
CVE: CVE-2012-0780
Published: 2012-05-09
Description: Adobe Illustrator before CS6 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2023, CVE-2012-2024, CVE-2012-2025, and CVE-2012-2026.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://www.adobe.com/support/security/bulletins/apsb12-10.html; http://www.securityfocus.com/bid/53422; http://www.securitytracker.com/id?1027047
CVE: CVE-2012-2023
Published: 2012-05-09
Description: Adobe Illustrator before CS6 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-0780, CVE-2012-2024, CVE-2012-2025, and CVE-2012-2026.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://www.adobe.com/support/security/bulletins/apsb12-10.html; http://www.securityfocus.com/bid/53422; http://www.securitytracker.com/id?1027047
CVE: CVE-2012-2024
Published: 2012-05-09
Description: Adobe Illustrator before CS6 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-0780, CVE-2012-2023, CVE-2012-2025, and CVE-2012-2026.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://osvdb.org/81756; http://www.adobe.com/support/security/bulletins/apsb12-10.html; http://www.securityfocus.com/bid/53422
CVE: CVE-2012-2025
Published: 2012-05-09
Description: Adobe Illustrator before CS6 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-0780, CVE-2012-2023, CVE-2012-2024, and CVE-2012-2026.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://osvdb.org/81757; http://www.adobe.com/support/security/bulletins/apsb12-10.html; http://www.securityfocus.com/bid/53422
CVE: CVE-2012-2026
Published: 2012-05-09
Description: Adobe Illustrator before CS6 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-0780, CVE-2012-2023, CVE-2012-2024, and CVE-2012-2025.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://www.adobe.com/support/security/bulletins/apsb12-10.html; http://www.securityfocus.com/bid/53422; http://www.securitytracker.com/id?1027047
CVE: CVE-2012-2027
Published: 2012-05-09
Description: Use-after-free vulnerability in Adobe Photoshop CS5 12.x before 12.0.5 and CS5.1 12.1.x before 12.1.1 allows remote attackers to execute arbitrary code via a crafted TIFF (aka .TIF) file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://www.adobe.com/support/security/bulletins/apsb12-11.html; http://www.securityfocus.com/bid/52634; http://www.adobe.com/support/security/bulletins/apsb12-11.html
CVE: CVE-2012-2028
Published: 2012-05-09
Description: Buffer overflow in Adobe Photoshop CS5 12.x before 12.0.5 and CS5.1 12.1.x before 12.1.1 allows remote attackers to execute arbitrary code via unspecified vectors.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.adobe.com/support/security/bulletins/apsb12-11.html; http://www.securityfocus.com/bid/53421; http://www.securitytracker.com/id?1027046
CVE: CVE-2012-2029
Published: 2012-05-09
Description: Adobe Shockwave Player before 11.6.5.635 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2030, CVE-2012-2031, CVE-2012-2032, and CVE-2012-2033.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/49086; http://www.adobe.com/support/security/bulletins/apsb12-13.html; http://www.securityfocus.com/bid/53420
CVE: CVE-2012-2030
Published: 2012-05-09
Description: Adobe Shockwave Player before 11.6.5.635 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2029, CVE-2012-2031, CVE-2012-2032, and CVE-2012-2033.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/49086; http://www.adobe.com/support/security/bulletins/apsb12-13.html; http://www.securityfocus.com/bid/53420