deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2013-0947
Published: 2013-06-07
Description: EMC RSA Authentication Manager 8.0 before P1 allows local users to discover cleartext operating-system passwords, HTTP plug-in proxy passwords, and SNMP communities by reading a (1) log file or (2) configuration file.
CVSS Score: 2.1 (LOW)
CWE: CWE-255
References: http://archives.neohapsis.com/archives/bugtraq/2013-05/0115.html; http://archives.neohapsis.com/archives/bugtraq/2013-05/0115.html
CVE: CVE-2011-1180
Published: 2013-06-08
Description: Multiple stack-based buffer overflows in the iriap_getvaluebyclass_indication function in net/irda/iriap.c in the Linux kernel before 2.6.39 allow remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging connectivity to an IrDA infrared network and sending a large integer value for a (1) name length or (2) attribute length.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39; http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d370af0ef7951188daeb15bae75db7ba57c67846; http://www.openwall.com/lists/oss-security/2011/03/22/11
CVE: CVE-2011-1585
Published: 2013-06-08
Description: The cifs_find_smb_ses function in fs/cifs/connect.c in the Linux kernel before 2.6.36 does not properly determine the associations between users and sessions, which allows local users to bypass CIFS share authentication by leveraging a mount of a share by a different user.
CVSS Score: 3.3 (LOW)
CWE: CWE-264
References: http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.36; http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=4ff67b720c02c36e54d55b88c2931879b7db1cd2; http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html
CVE: CVE-2011-2482
Published: 2013-06-08
Description: A certain Red Hat patch to the sctp_sock_migrate function in net/sctp/socket.c in the Linux kernel before 2.6.21, as used in Red Hat Enterprise Linux (RHEL) 5, allows remote attackers to cause a denial of service (NULL pointer dereference and OOPS) via a crafted SCTP packet.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.21; http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ea2bc483ff5caada7c4aa0d5fbf87d3a6590273d; http://rhn.redhat.com/errata/RHSA-2011-1212.html
CVE: CVE-2011-2693
Published: 2013-06-08
Description: The perf subsystem in the kernel package 2.6.32-122.el6.x86_64 in Red Hat Enterprise Linux (RHEL) 6 does not properly handle NMIs, which might allow local users to cause a denial of service (excessive log messages) via unspecified vectors.
CVSS Score: 1.9 (LOW)
References: https://bugzilla.redhat.com/show_bug.cgi?id=688547; https://oss.oracle.com/git/?p=redpatch.git%3Ba=commit%3Bh=fadca7bdc43b02f518585d[PII_REDACTED]415cadfd; https://bugzilla.redhat.com/show_bug.cgi?id=688547
CVE: CVE-2011-2942
Published: 2013-06-08
Description: A certain Red Hat patch to the __br_deliver function in net/bridge/br_forward.c in the Linux kernel 2.6.18 on Red Hat Enterprise Linux (RHEL) 5 allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by leveraging connectivity to a network interface that uses an Ethernet bridge device.
CVSS Score: 6.8 (MEDIUM)
References: http://www.openwall.com/lists/oss-security/2011/10/24/3; https://bugzilla.redhat.com/show_bug.cgi?id=730917; http://www.openwall.com/lists/oss-security/2011/10/24/3
CVE: CVE-2011-3347
Published: 2013-06-08
Description: A certain Red Hat patch to the be2net implementation in the kernel package before 2.6.32-218.el6 on Red Hat Enterprise Linux (RHEL) 6, when promiscuous mode is enabled, allows remote attackers to cause a denial of service (system crash) via non-member VLAN packets.
CVSS Score: 4.6 (MEDIUM)
References: https://bugzilla.redhat.com/show_bug.cgi?id=736425; https://oss.oracle.com/git/?p=redpatch.git%3Ba=commit%3Bh=fadca7bdc43b02f518585d[PII_REDACTED]415cadfd; https://bugzilla.redhat.com/show_bug.cgi?id=736425
CVE: CVE-2011-3593
Published: 2013-06-08
Description: A certain Red Hat patch to the vlan_hwaccel_do_receive function in net/8021q/vlan_core.c in the Linux kernel 2.6.32 on Red Hat Enterprise Linux (RHEL) 6 allows remote attackers to cause a denial of service (system crash) via priority-tagged VLAN frames.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-399
References: http://www.openwall.com/lists/oss-security/2012/03/05/3; https://bugzilla.redhat.com/show_bug.cgi?id=742846; https://oss.oracle.com/git/?p=redpatch.git%3Ba=commit%3Bh=0e48f8daac293335e16e007663b9f4d248f89f0c
CVE: CVE-2011-3619
Published: 2013-06-08
Description: The apparmor_setprocattr function in security/apparmor/lsm.c in the Linux kernel before 3.0 does not properly handle invalid parameters, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact by writing to a /proc/#####/attr/current file.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-20
References: http://ftp.osuosl.org/pub/linux/kernel/v3.0/ChangeLog-3.0; http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a5b2c5b2ad5853591a6cac6134cd0f599a720865; http://www.openwall.com/lists/oss-security/2011/10/17/6
CVE: CVE-2011-4087
Published: 2013-06-08
Description: The br_parse_ip_options function in net/bridge/br_netfilter.c in the Linux kernel before 2.6.39 does not properly initialize a certain data structure, which allows remote attackers to cause a denial of service by leveraging connectivity to a network interface that uses an Ethernet bridge device.
CVSS Score: 7.5 (HIGH)
CWE: CWE-665
References: http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39; http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f8e9881c2aef1e982e5abc25c046820cd0b7cf64; http://www.openwall.com/lists/oss-security/2011/10/28/14
CVE: CVE-2011-4098
Published: 2013-06-08
Description: The fallocate implementation in the GFS2 filesystem in the Linux kernel before 3.2 relies on the page cache, which might allow local users to cause a denial of service by preallocating blocks in certain situations involving insufficient memory.
CVSS Score: 1.9 (LOW)
CWE: CWE-119
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=64dd153c83743af81f20924c6343652d731eeecb; http://www.kernel.org/pub/linux/kernel/v3.x/patch-3.2.bz2; https://github.com/torvalds/linux/commit/64dd153c83743af81f20924c6343652d731eeecb
CVE: CVE-2011-4347
Published: 2013-06-08
Description: The kvm_vm_ioctl_assign_device function in virt/kvm/assigned-dev.c in the KVM subsystem in the Linux kernel before 3.1.10 does not verify permission to access PCI configuration space and BAR resources, which allows host OS users to assign PCI devices and cause a denial of service (host OS crash) via a KVM_ASSIGN_PCI_DEVICE operation.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-264
References: http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1.10; http://www.openwall.com/lists/oss-security/2011/11/24/7; https://bugzilla.redhat.com/show_bug.cgi?id=756084
CVE: CVE-2011-4348
Published: 2013-06-08
Description: Race condition in the sctp_rcv function in net/sctp/input.c in the Linux kernel before 2.6.29 allows remote attackers to cause a denial of service (system hang) via SCTP packets.  NOTE: in some environments, this issue exists because of an incomplete fix for CVE-2011-2482.
CVSS Score: 7.1 (HIGH)
CWE: CWE-362
References: http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.29; http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ae53b5bd77719fed58086c5be60ce4f22bffe1c6; http://www.openwall.com/lists/oss-security/2012/03/05/2
CVE: CVE-2013-4074
Published: 2013-06-09
Description: The dissect_capwap_data function in epan/dissectors/packet-capwap.c in the CAPWAP dissector in Wireshark 1.6.x before 1.6.16 and 1.8.x before 1.8.8 incorrectly uses a -1 data value to represent an error condition, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-189
References: http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-capwap.c?r1=43716&r2=43715&pathrev=43716; http://anonsvn.wireshark.org/viewvc?view=revision&revision=43716; http://lists.opensuse.org/opensuse-updates/2013-06/msg00194.html
CVE: CVE-2013-4075
Published: 2013-06-09
Description: epan/dissectors/packet-gmr1_bcch.c in the GMR-1 BCCH dissector in Wireshark 1.8.x before 1.8.8 does not properly initialize memory, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-gmr1_bcch.c?r1=44674&r2=44673&pathrev=44674; http://anonsvn.wireshark.org/viewvc?view=revision&revision=44674; http://lists.opensuse.org/opensuse-updates/2013-06/msg00194.html
CVE: CVE-2013-4076
Published: 2013-06-09
Description: Buffer overflow in the dissect_iphc_crtp_fh function in epan/dissectors/packet-ppp.c in the PPP dissector in Wireshark 1.8.x before 1.8.8 allows remote attackers to cause a denial of service (application crash) via a crafted packet.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-ppp.c?r1=46128&r2=46127&pathrev=46128; http://anonsvn.wireshark.org/viewvc?view=revision&revision=46128; http://lists.opensuse.org/opensuse-updates/2013-06/msg00194.html
CVE: CVE-2013-4077
Published: 2013-06-09
Description: Array index error in the NBAP dissector in Wireshark 1.8.x before 1.8.8 allows remote attackers to cause a denial of service (application crash) via a crafted packet, related to nbap.cnf and packet-nbap.c.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://anonsvn.wireshark.org/viewvc?view=revision&revision=49418; http://lists.opensuse.org/opensuse-updates/2013-06/msg00194.html; http://lists.opensuse.org/opensuse-updates/2013-06/msg00196.html
CVE: CVE-2013-4078
Published: 2013-06-09
Description: epan/dissectors/packet-rdp.c in the RDP dissector in Wireshark 1.8.x before 1.8.8 does not validate return values during checks for data availability, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://anonsvn.wireshark.org/viewvc?view=revision&revision=45566; http://anonsvn.wireshark.org/viewvc?view=revision&revision=46158; http://lists.opensuse.org/opensuse-updates/2013-06/msg00194.html
CVE: CVE-2013-4079
Published: 2013-06-09
Description: The dissect_schedule_message function in epan/dissectors/packet-gsm_cbch.c in the GSM CBCH dissector in Wireshark 1.8.x before 1.8.8 allows remote attackers to cause a denial of service (infinite loop and application hang) via a crafted packet.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-gsm_cbch.c?r1=49686&r2=49685&pathrev=49686; http://anonsvn.wireshark.org/viewvc?view=revision&revision=49686; http://lists.opensuse.org/opensuse-updates/2013-06/msg00194.html
CVE: CVE-2013-4080
Published: 2013-06-09
Description: The dissect_r3_upstreamcommand_queryconfig function in epan/dissectors/packet-assa_r3.c in the Assa Abloy R3 dissector in Wireshark 1.8.x before 1.8.8 does not properly handle a zero-length item, which allows remote attackers to cause a denial of service (infinite loop, and CPU and memory consumption) via a crafted packet.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-assa_r3.c?r1=49744&r2=49743&pathrev=49744; http://anonsvn.wireshark.org/viewvc?view=revision&revision=49744; http://lists.opensuse.org/opensuse-updates/2013-06/msg00194.html
CVE: CVE-2013-4081
Published: 2013-06-09
Description: The http_payload_subdissector function in epan/dissectors/packet-http.c in the HTTP dissector in Wireshark 1.6.x before 1.6.16 and 1.8.x before 1.8.8 does not properly determine when to use a recursive approach, which allows remote attackers to cause a denial of service (stack consumption) via a crafted packet.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-http.c?r1=49623&r2=49622&pathrev=49623; http://anonsvn.wireshark.org/viewvc?view=revision&revision=49623; http://lists.opensuse.org/opensuse-updates/2013-06/msg00194.html
CVE: CVE-2013-4082
Published: 2013-06-09
Description: The vwr_read function in wiretap/vwr.c in the Ixia IxVeriWave file parser in Wireshark 1.8.x before 1.8.8 does not validate the relationship between a record length and a trailer length, which allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) via a crafted packet.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://anonsvn.wireshark.org/viewvc/trunk/wiretap/vwr.c?r1=49739&r2=49738&pathrev=49739; http://anonsvn.wireshark.org/viewvc?view=revision&revision=49739; http://lists.opensuse.org/opensuse-updates/2013-06/msg00194.html
CVE: CVE-2013-4083
Published: 2013-06-09
Description: The dissect_pft function in epan/dissectors/packet-dcp-etsi.c in the DCP ETSI dissector in Wireshark 1.6.x before 1.6.16, 1.8.x before 1.8.8, and 1.10.0 does not validate a certain fragment length value, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-dcp-etsi.c?r1=49802&r2=49801&pathrev=49802; http://anonsvn.wireshark.org/viewvc?view=revision&revision=49802; http://lists.opensuse.org/opensuse-updates/2013-06/msg00194.html
CVE: CVE-2013-3670
Published: 2013-06-10
Description: The rle_unpack function in vmdav.c in libavcodec in FFmpeg git 20130328 through 20130501 does not properly use the bytestream2 API, which allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) via crafted RLE data.  NOTE: the vendor has listed this as an issue fixed in 1.2.1, but the issue is actually in new code that was not shipped with the 1.2.1 release or any earlier release.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-119
References: http://ffmpeg.org/security.html; http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=0baa0a5a02e16ef097ed9f72bc8a7d7b585c7652; http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=c1f2c4c3b49277d65b71ccdd3b6b2878f1b593eb
CVE: CVE-2013-3671
Published: 2013-06-10
Description: The format_line function in log.c in libavutil in FFmpeg before 1.2.1 uses inapplicable offset data during a certain category calculation, which allows remote attackers to cause a denial of service (invalid pointer dereference and application crash) via crafted data that triggers a log message.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-189
References: http://ffmpeg.org/security.html; http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=7edb984dd051b6919d7d8471c70499273f31b0fa; http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=cc0dd86580b3257f22a4981a79eb5fa6804182b6
CVE: CVE-2013-3672
Published: 2013-06-10
Description: The mm_decode_inter function in mmvideo.c in libavcodec in FFmpeg before 1.2.1 does not validate the relationship between a horizontal coordinate and a width value, which allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) via crafted American Laser Games (ALG) MM Video data.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://ffmpeg.org/security.html; http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=7fa6db2545643efb4fe2e0bb501fa50af35a6330; http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=8d3c99e825317b7efda5fd12e69896b47c700303
CVE: CVE-2013-3673
Published: 2013-06-10
Description: The gif_decode_frame function in gifdec.c in libavcodec in FFmpeg before 1.2.1 does not properly manage the disposal methods of frames, which allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) via crafted GIF data.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-119
References: http://ffmpeg.org/security.html; http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=7ee5e97c46e30fb3d6f9f78cc3313dbc06528b37; http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=d23b8462b5a4a9da78ed45c4a7a3b35d538df909
CVE: CVE-2013-3674
Published: 2013-06-10
Description: The cdg_decode_frame function in cdgraphics.c in libavcodec in FFmpeg before 1.2.1 does not validate the presence of non-header data in a buffer, which allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) via crafted CD Graphics Video data.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://ffmpeg.org/security.html; http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=7ef2dbd2392e3e4d430e0173e1e5c4df9f18b6dd; http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=ad002e1a13a8df934bd6cb2c84175a4780ab8942
CVE: CVE-2013-3675
Published: 2013-06-10
Description: The process_frame_obj function in sanm.c in libavcodec in FFmpeg before 1.2.1 does not validate width and height values, which allows remote attackers to cause a denial of service (integer overflow, out-of-bounds array access, and application crash) via crafted LucasArts Smush video data.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://ffmpeg.org/security.html; http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=524d0d2cfc7bab1b348f85e7c0369859e63781cf; http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=9dd04f6d8cdd1c10c28b2cb4252c1a41df581915
CVE: CVE-2013-1862
Published: 2013-06-10
Description: mod_rewrite.c in the mod_rewrite module in the Apache HTTP Server 2.2.x before 2.2.25 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to execute arbitrary commands via an HTTP request containing an escape sequence for a terminal emulator.
CVSS Score: 5.1 (MEDIUM)
References: http://lists.opensuse.org/opensuse-updates/2013-08/msg00026.html; http://lists.opensuse.org/opensuse-updates/2013-08/msg00029.html; http://lists.opensuse.org/opensuse-updates/2013-08/msg00030.html
CVE: CVE-2013-2319
Published: 2013-06-10
Description: FileMaker Pro before 12 and Pro Advanced before 12 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-310
References: http://jvn.jp/en/jp/JVN85812843/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2013-000048; http://jvn.jp/en/jp/JVN85812843/index.html
CVE: CVE-2013-3640
Published: 2013-06-10
Description: Cross-site scripting (XSS) vulnerability in the Instant Web Publish function in FileMaker Pro before 12 and Pro Advanced before 12 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN53579095/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2013-000049; http://jvn.jp/en/jp/JVN53579095/index.html
CVE: CVE-2013-3641
Published: 2013-06-10
Description: The Pizza Hut Japan Official Order application before 1.1.1.a for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-310
References: http://jvn.jp/en/jp/JVN39218538/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2013-000054; https://play.google.com/store/apps/details?id=jp.pizzahut.aorder
CVE: CVE-2013-1331
Published: 2013-06-12
Description: Buffer overflow in Microsoft Office 2003 SP3 and Office 2011 for Mac allows remote attackers to execute arbitrary code via crafted PNG data in an Office document, leading to improper memory allocation, aka "Office Buffer Overflow Vulnerability."
CVSS Score: 7.8 (HIGH)
CWE: CWE-120, CWE-120
References: http://www.us-cert.gov/ncas/alerts/TA13-168A; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-051; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16713
CVE: CVE-2013-1339
Published: 2013-06-12
Description: The Print Spooler in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT does not properly manage memory during deletion of printer connections, which allows remote authenticated users to execute arbitrary code via a crafted request, aka "Print Spooler Vulnerability."
CVSS Score: 9.0 (HIGH)
CWE: CWE-399
References: http://www.us-cert.gov/ncas/alerts/TA13-168A; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-050; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16837
CVE: CVE-2013-3110
Published: 2013-06-12
Description: Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3141.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.us-cert.gov/ncas/alerts/TA13-168A; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-047; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16507
CVE: CVE-2013-3111
Published: 2013-06-12
Description: Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3123.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://blog.skylined.nl/[PII_REDACTED]1.html; http://packetstormsecurity.com/files/140124/Microsoft-Internet-Explorer-9-IEFRAME-CSelectionInteractButtonBehavior-_UpdateButtonLocation-Use-After-Free.html; http://www.us-cert.gov/ncas/alerts/TA13-168A
CVE: CVE-2013-3112
Published: 2013-06-12
Description: Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3113, CVE-2013-3121, CVE-2013-3139, and CVE-2013-3142.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.us-cert.gov/ncas/alerts/TA13-168A; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-047; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16477
CVE: CVE-2013-3113
Published: 2013-06-12
Description: Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3112, CVE-2013-3121, CVE-2013-3139, and CVE-2013-3142.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.us-cert.gov/ncas/alerts/TA13-168A; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-047; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16824
CVE: CVE-2013-3114
Published: 2013-06-12
Description: Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3119.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.us-cert.gov/ncas/alerts/TA13-168A; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-047; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16763