deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2014-2309
Published: 2014-03-11
Description: The ip6_route_add function in net/ipv6/route.c in the Linux kernel through 3.13.6 does not properly count the addition of routes, which allows remote attackers to cause a denial of service (memory consumption) via a flood of ICMPv6 Router Advertisement packets.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-119
References: http://git.kernel.org/cgit/linux/kernel/git/davem/net.git/commit/?id=c88507fbad8055297c1d1e21e599f46960cbee39; http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html; http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html
CVE: CVE-2014-2321
Published: 2014-03-11
Description: web_shell_cmd.gch on ZTE F460 and F660 cable modems allows remote attackers to obtain administrative access via sendcmd requests, as demonstrated by using "set TelnetCfg" commands to enable a TELNET service with specified credentials.
CVSS Score: 10.0 (HIGH)
CWE: CWE-264
References: http://www.kb.cert.org/vuls/id/600724; http://www.myxzy.com/post-411.html; https://community.rapid7.com/community/infosec/blog/2014/03/03/disclosure-r7-2013-18-zte-f460-and-zte-f660-webshellcmdgch-backdoor
CVE: CVE-2013-7334
Published: 2014-03-11
Description: Cross-site request forgery (CSRF) vulnerability in ImageCMS before 4.2 allows remote attackers to hijack the authentication of administrators for requests that conduct SQL injection attacks via the q parameter, related to CVE-2012-6290.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://archives.neohapsis.com/archives/bugtraq/2013-01/0105.html; http://forum.imagecms.net/viewtopic.php?id=1436; http://osvdb.org/show/osvdb/89512
CVE: CVE-2012-6290
Published: 2014-03-11
Description: SQL injection vulnerability in ImageCMS before 4.2 allows remote authenticated administrators to execute arbitrary SQL commands via the q parameter to admin/admin_search/.  NOTE: this can be leveraged using CSRF to allow remote unauthenticated attackers to execute arbitrary SQL commands.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: http://archives.neohapsis.com/archives/bugtraq/2013-01/0105.html; http://forum.imagecms.net/viewtopic.php?id=1436; http://osvdb.org/89513
CVE: CVE-2013-2289
Published: 2014-03-11
Description: Cross-site scripting (XSS) vulnerability in admin/templates/default.php in Batavi 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the QUERY_STRING to admin/index.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/52464; https://exchange.xforce.ibmcloud.com/vulnerabilities/82583; https://www.dognaedis.com/vulns/DGS-SEC-18.html
CVE: CVE-2013-2754
Published: 2014-03-11
Description: Cross-site request forgery (CSRF) vulnerability in Umisoft UMI.CMS before 2.9 build 21905 allows remote attackers to hijack the authentication of administrators for requests that add administrator accounts via a request to admin/users/add/user/do/.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://archives.neohapsis.com/archives/bugtraq/2013-05/0029.html; http://osvdb.org/93104; http://packetstormsecurity.com/files/121564/UMI.CMS-2.9-Cross-Site-Request-Forgery.html
CVE: CVE-2013-3928
Published: 2014-03-11
Description: Stack-based buffer overflow in the ReadFile function in flt_BMP.dll in Chasys Draw IES before 4.11.02 allows remote attackers to execute arbitrary code via crafted biPlanes and biBitCount fields in a BMP file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://longinox.blogspot.com/2013/08/explot-stack-based-overflow-bypassing.html; http://packetstormsecurity.com/files/122810/Chasys-Draw-IES-Buffer-Overflow.html; http://secunia.com/advisories/53773
CVE: CVE-2013-3961
Published: 2014-03-11
Description: SQL injection vulnerability in edit_event.php in Simple PHP Agenda before 2.2.9 allows remote authenticated users to execute arbitrary SQL commands via the eventid parameter.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: http://osvdb.org/94141; http://packetstormsecurity.com/files/121978/Simple-PHP-Agenda-2.2.8-SQL-Injection.html; http://seclists.org/fulldisclosure/2013/Jun/67
CVE: CVE-2013-4188
Published: 2014-03-11
Description: traverser.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allows remote attackers with administrator privileges to cause a denial of service (infinite loop and resource consumption) via unspecified vectors related to "retrieving information for certain resources."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-399
References: http://plone.org/products/plone-hotfix/releases/20130618; http://plone.org/products/plone/security/advisories/20130618-announcement; http://seclists.org/oss-sec/2013/q3/261
CVE: CVE-2013-4189
Published: 2014-03-11
Description: Multiple unspecified vulnerabilities in (1) dataitems.py, (2) get.py, and (3) traverseName.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allow remote authenticated users with administrator access to a subtree to access nodes above the subtree via unknown vectors.
CVSS Score: 6.5 (MEDIUM)
References: http://plone.org/products/plone-hotfix/releases/20130618; http://plone.org/products/plone/security/advisories/20130618-announcement; http://seclists.org/oss-sec/2013/q3/261
CVE: CVE-2013-4190
Published: 2014-03-11
Description: Multiple cross-site scripting (XSS) vulnerabilities in (1) spamProtect.py, (2) pts.py, and (3) request.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://plone.org/products/plone-hotfix/releases/20130618; http://plone.org/products/plone/security/advisories/20130618-announcement; http://seclists.org/oss-sec/2013/q3/261
CVE: CVE-2013-4191
Published: 2014-03-11
Description: zip.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 does not properly enforce access restrictions when including content in a zip archive, which allows remote attackers to obtain sensitive information by reading a generated archive.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-264
References: http://plone.org/products/plone-hotfix/releases/20130618; http://plone.org/products/plone/security/advisories/20130618-announcement; http://seclists.org/oss-sec/2013/q3/261
CVE: CVE-2013-4192
Published: 2014-03-11
Description: sendto.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allows remote authenticated users to spoof emails via unspecified vectors.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-20
References: http://plone.org/products/plone-hotfix/releases/20130618; http://plone.org/products/plone/security/advisories/20130618-announcement; http://seclists.org/oss-sec/2013/q3/261
CVE: CVE-2013-4193
Published: 2014-03-11
Description: typeswidget.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 does not properly enforce the immutable setting on unspecified content edit forms, which allows remote attackers to hide fields on the forms via a crafted URL.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-264
References: http://plone.org/products/plone-hotfix/releases/20130618; http://plone.org/products/plone/security/advisories/20130618-announcement; http://seclists.org/oss-sec/2013/q3/261
CVE: CVE-2013-4194
Published: 2014-03-11
Description: The WYSIWYG component (wysiwyg.py) in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allows remote attackers to obtain sensitive information via a crafted URL, which reveals the installation path in an error message.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://plone.org/products/plone-hotfix/releases/20130618; http://plone.org/products/plone/security/advisories/20130618-announcement; http://seclists.org/oss-sec/2013/q3/261
CVE: CVE-2013-4195
Published: 2014-03-11
Description: Multiple open redirect vulnerabilities in (1) marmoset_patch.py, (2) publish.py, and (3) principiaredirect.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-20
References: http://plone.org/products/plone-hotfix/releases/20130618; http://plone.org/products/plone/security/advisories/20130618-announcement; http://seclists.org/oss-sec/2013/q3/261
CVE: CVE-2013-4196
Published: 2014-03-11
Description: The object manager implementation (objectmanager.py) in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 does not properly restrict access to internal methods, which allows remote attackers to obtain sensitive information via a crafted request.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://plone.org/products/plone-hotfix/releases/20130618; http://plone.org/products/plone/security/advisories/20130618-announcement; http://seclists.org/oss-sec/2013/q3/261
CVE: CVE-2013-4197
Published: 2014-03-11
Description: member_portrait.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allows remote authenticated users to modify or delete portraits of other users via unspecified vectors.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: http://plone.org/products/plone-hotfix/releases/20130618; http://plone.org/products/plone/security/advisories/20130618-announcement; http://seclists.org/oss-sec/2013/q3/261
CVE: CVE-2013-4198
Published: 2014-03-11
Description: mail_password.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allows remote authenticated users to bypass the prohibition on password changes via the forgotten password email functionality.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-264
References: http://plone.org/products/plone-hotfix/releases/20130618; http://plone.org/products/plone/security/advisories/20130618-announcement; http://seclists.org/oss-sec/2013/q3/261
CVE: CVE-2013-4199
Published: 2014-03-11
Description: (1) cb_decode.py and (2) linkintegrity.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allow remote authenticated users to cause a denial of service (resource consumption) via a large zip archive, which is expanded (decompressed).
CVSS Score: 3.5 (LOW)
CWE: CWE-20
References: http://plone.org/products/plone-hotfix/releases/20130618; http://plone.org/products/plone/security/advisories/20130618-announcement; http://seclists.org/oss-sec/2013/q3/261
CVE: CVE-2013-4413
Published: 2014-03-11
Description: Directory traversal vulnerability in controller/concerns/render_redirect.rb in the Wicked gem before 1.0.1 for Ruby allows remote attackers to read arbitrary files via a %2E%2E%2F (encoded dot dot slash) in the step.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://seclists.org/oss-sec/2013/q4/43; http://secunia.com/advisories/55151; http://www.securityfocus.com/bid/62891
CVE: CVE-2013-4433
Published: 2014-03-11
Description: Cross-site scripting (XSS) vulnerability in XHProf before 0.9.4 allows remote attackers to inject arbitrary web script or HTML via the run parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://pecl.php.net/package-changelog.php?package=xhprof&release=0.9.4; http://www.openwall.com/lists/oss-security/2013/10/16/10; http://www.securityfocus.com/bid/62928
CVE: CVE-2013-4467
Published: 2014-03-11
Description: Multiple SQL injection vulnerabilities in the agent interface (agc/) in VICIDIAL dialer (aka Asterisk GUI client) 2.8-403a, 2.7, 2.7RC1, and earlier allow (1) remote attackers to execute arbitrary SQL commands via the campaign variable in SCRIPT_multirecording_AJAX.php, (2) remote authenticated users to execute arbitrary SQL commands via the server_ip parameter to manager_send.php, or (3) other unspecified vectors.  NOTE: some of these details are obtained from third party information.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: http://osvdb.org/98903; http://seclists.org/oss-sec/2013/q4/171; http://seclists.org/oss-sec/2013/q4/175
CVE: CVE-2013-5639
Published: 2014-03-11
Description: Directory traversal vulnerability in users/login.php in Gnew 2013.1 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the gnew_language cookie.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://packetstormsecurity.com/files/123482; http://www.exploit-db.com/exploits/28684; https://www.htbridge.com/advisory/HTB23171
CVE: CVE-2014-0004
Published: 2014-03-11
Description: Stack-based buffer overflow in udisks before 1.0.5 and 2.x before 2.1.3 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a long mount point.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-119
References: http://lists.freedesktop.org/archives/devkit-devel/2014-March/001568.html; http://lists.opensuse.org/opensuse-updates/2014-03/msg00051.html; http://lists.opensuse.org/opensuse-updates/2014-03/msg00052.html
CVE: CVE-2014-0106
Published: 2014-03-11
Description: Sudo 1.6.9 before 1.8.5, when env_reset is disabled, does not properly check environment variables for the env_delete restriction, which allows local users with sudo permissions to bypass intended command restrictions via a crafted environment variable.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-20
References: http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html; http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00003.html; http://rhn.redhat.com/errata/RHSA-2014-0266.html
CVE: CVE-2014-1838
Published: 2014-03-11
Description: The (1) extract_keys_from_pdf and (2) fill_pdf functions in pdf_ext.py in logilab-commons before 0.61.0 allows local users to overwrite arbitrary files and possibly have other unspecified impact via a symlink attack on /tmp/toto.fdf.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-59
References: http://comments.gmane.org/gmane.comp.security.oss.general/11986; http://lists.opensuse.org/opensuse-updates/2014-02/msg00085.html; http://secunia.com/advisories/57209
CVE: CVE-2014-1839
Published: 2014-03-11
Description: The Execute class in shellutils in logilab-commons before 0.61.0 uses tempfile.mktemp, which allows local users to have an unspecified impact by pre-creating the temporary file.
CVSS Score: 4.4 (MEDIUM)
References: http://comments.gmane.org/gmane.comp.security.oss.general/11986; http://lists.opensuse.org/opensuse-updates/2014-02/msg00085.html; http://secunia.com/advisories/57209
CVE: CVE-2014-2311
Published: 2014-03-11
Description: SQL injection vulnerability in modx.class.php in MODX Revolution 2.0.0 before 2.2.13 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://forums.modx.com/thread/89486/modx-revolution-2-x-sql-injection; http://modx.com/blog/2014/03/07/revolution-2.2.13/; http://www.openwall.com/lists/oss-security/2014/03/09/3
CVE: CVE-2014-0297
Published: 2014-03-12
Description: Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-0308, CVE-2014-0312, and CVE-2014-0324.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-012; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-012
CVE: CVE-2014-0298
Published: 2014-03-12
Description: Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-012; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-012
CVE: CVE-2014-0299
Published: 2014-03-12
Description: Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-0305 and CVE-2014-0311.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-012; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-012
CVE: CVE-2014-0300
Published: 2014-03-12
Description: win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability."
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-015; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-015
CVE: CVE-2014-0301
Published: 2014-03-12
Description: Double free vulnerability in qedit.dll in DirectShow in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote attackers to execute arbitrary code via a crafted JPEG image, aka "DirectShow Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-415
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-013; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-013
CVE: CVE-2014-0302
Published: 2014-03-12
Description: Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-0303.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-012; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-012
CVE: CVE-2014-0303
Published: 2014-03-12
Description: Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-0302.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-012; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-012
CVE: CVE-2014-0304
Published: 2014-03-12
Description: Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-012; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-012
CVE: CVE-2014-0305
Published: 2014-03-12
Description: Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-0299 and CVE-2014-0311.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-012; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-012
CVE: CVE-2014-0306
Published: 2014-03-12
Description: Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-012; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-012
CVE: CVE-2014-0307
Published: 2014-03-12
Description: Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a certain sequence of manipulations of a TextRange element, aka "Internet Explorer Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-119, CWE-416
References: http://www.exploit-db.com/exploits/32438; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-012; http://www.exploit-db.com/exploits/32438
CVE: CVE-2014-0308
Published: 2014-03-12
Description: Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-0297, CVE-2014-0312, and CVE-2014-0324.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-012; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-012
CVE: CVE-2014-0309
Published: 2014-03-12
Description: Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-012; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-012
CVE: CVE-2014-0311
Published: 2014-03-12
Description: Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-0299 and CVE-2014-0305.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-012; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-012
CVE: CVE-2014-0312
Published: 2014-03-12
Description: Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-0297, CVE-2014-0308, and CVE-2014-0324.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-012; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-012
CVE: CVE-2014-0313
Published: 2014-03-12
Description: Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-0321.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-012; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-012
CVE: CVE-2014-0314
Published: 2014-03-12
Description: Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-012; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-012