deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2011-1258
Published: 2011-06-16
Description: Microsoft Internet Explorer 6 through 8 does not properly restrict web script, which allows user-assisted remote attackers to obtain sensitive information from a different (1) domain or (2) zone via vectors involving a drag-and-drop operation, aka "Drag and Drop Information Disclosure Vulnerability."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-668
References: http://blogs.technet.com/b/msrc/archive/2011/06/09/june-advance-notification-service-and-10-immutable-laws-revisited.aspx; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-050; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12495
CVE: CVE-2011-1260
Published: 2011-06-16
Description: Microsoft Internet Explorer 8 and 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, aka "Layout Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://securityreason.com/securityalert/8275; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-050; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12308
CVE: CVE-2011-1261
Published: 2011-06-16
Description: Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, aka "Selection Object Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-908
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-050; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12755; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-050
CVE: CVE-2011-1262
Published: 2011-06-16
Description: Microsoft Internet Explorer 7 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, aka "HTTP Redirect Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-908
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-050; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12405; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-050
CVE: CVE-2011-1264
Published: 2011-06-16
Description: Cross-site scripting (XSS) vulnerability in Active Directory Certificate Services Web Enrollment in Microsoft Windows Server 2003 SP2 and Server 2008 Gold, SP2, R2, and R2 SP1 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka "Active Directory Certificate Services Vulnerability."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-051; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12749; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-051
CVE: CVE-2011-1266
Published: 2011-06-16
Description: The Vector Markup Language (VML) implementation in vgx.dll in Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, aka "VML Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-908
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-052; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12593; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-052
CVE: CVE-2011-1267
Published: 2011-06-16
Description: The SMB server in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to cause a denial of service (system hang) via a crafted (1) SMBv1 or (2) SMBv2 request, aka "SMB Request Parsing Vulnerability."
CVSS Score: 7.8 (HIGH)
CWE: CWE-399
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-048; https://exchange.xforce.ibmcloud.com/vulnerabilities/67724; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12654
CVE: CVE-2011-1268
Published: 2011-06-16
Description: The SMB client in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote SMB servers to execute arbitrary code via a crafted (1) SMBv1 or (2) SMBv2 response, aka "SMB Response Parsing Vulnerability."
CVSS Score: 10.0 (HIGH)
CWE: CWE-20
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-043; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12746; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-043
CVE: CVE-2011-1272
Published: 2011-06-16
Description: Microsoft Excel 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 do not properly validate record structures during parsing of Excel spreadsheets, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel Insufficient Record Validation Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/48157; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-045; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12139
CVE: CVE-2011-1273
Published: 2011-06-16
Description: Microsoft Excel 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004, 2008, and 2011 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 do not properly validate record information during parsing of Excel spreadsheets, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted spreadsheet, aka "Excel Improper Record Parsing Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://osvdb.org/72921; http://secunia.com/advisories/44931/; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-045
CVE: CVE-2011-1274
Published: 2011-06-16
Description: Microsoft Excel 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 do not properly validate record information during parsing of Excel spreadsheets, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted spreadsheet, aka "Excel Out of Bounds Array Access Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-045; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12538; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-045
CVE: CVE-2011-1275
Published: 2011-06-16
Description: Microsoft Excel 2002 SP3; Office 2004, 2008, and 2011 for Mac; and Open XML File Format Converter for Mac do not properly validate record information during parsing of Excel spreadsheets, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted spreadsheet, aka "Excel Memory Heap Overwrite Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-045; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12736; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-045
CVE: CVE-2011-1276
Published: 2011-06-16
Description: Buffer overflow in Microsoft Excel 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Excel spreadsheet, related to improper validation of record information, aka "Excel Buffer Overrun Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://osvdb.org/72924; http://securityreason.com/securityalert/8330; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-045
CVE: CVE-2011-1277
Published: 2011-06-16
Description: Microsoft Excel 2002 SP3, Office 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate record information during parsing of Excel spreadsheets, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted spreadsheet, aka "Excel Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/48162; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-045; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12291
CVE: CVE-2011-1278
Published: 2011-06-16
Description: Microsoft Excel 2002 SP3 and Office 2004 for Mac do not properly validate record information during parsing of Excel spreadsheets, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted spreadsheet, aka "Excel WriteAV Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/48163; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-045; https://exchange.xforce.ibmcloud.com/vulnerabilities/67716
CVE: CVE-2011-1279
Published: 2011-06-16
Description: Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate record information during parsing of Excel spreadsheets, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted spreadsheet, aka "Excel Out of Bounds WriteAV Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/48164; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-045; https://exchange.xforce.ibmcloud.com/vulnerabilities/67717
CVE: CVE-2011-1280
Published: 2011-06-16
Description: The XML Editor in Microsoft InfoPath 2007 SP2 and 2010; SQL Server 2005 SP3 and SP4 and 2008 SP1, SP2, and R2; SQL Server Management Studio Express (SSMSE) 2005; and Visual Studio 2005 SP1, 2008 SP1, and 2010 does not properly handle external entities, which allows remote attackers to read arbitrary files via a crafted .disco (Web Service Discovery) file, aka "XML External Entities Resolution Vulnerability."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://secunia.com/advisories/44912; http://www.securityfocus.com/bid/48196; http://www.securitytracker.com/id?1025646
CVE: CVE-2011-1868
Published: 2011-06-16
Description: The Distributed File System (DFS) implementation in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly validate fields in DFS responses, which allows remote DFS servers to execute arbitrary code via a crafted response, aka "DFS Memory Corruption Vulnerability."
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/44894; http://www.securityfocus.com/bid/48180; http://www.securitytracker.com/id?1025639
CVE: CVE-2011-1869
Published: 2011-06-16
Description: The Distributed File System (DFS) implementation in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote DFS servers to cause a denial of service (system hang) via a crafted referral response, aka "DFS Referral Response Vulnerability."
CVSS Score: 7.8 (HIGH)
CWE: CWE-399
References: http://secunia.com/advisories/44894; http://secunia.com/advisories/44948; http://www.securityfocus.com/bid/48187
CVE: CVE-2011-1872
Published: 2011-06-16
Description: Hyper-V in Microsoft Windows Server 2008 Gold, SP2, R2, and R2 SP1 allows guest OS users to cause a denial of service (host OS infinite loop) via malformed machine instructions in a VMBus packet, aka "VMBus Persistent DoS Vulnerability."
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-399
References: http://www.securityfocus.com/bid/48179; http://www.securitytracker.com/id?1025644; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-047
CVE: CVE-2011-1873
Published: 2011-06-16
Description: win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 on 64-bit platforms does not properly validate pointers during the parsing of OpenType (aka OTF) fonts, which allows remote attackers to execute arbitrary code via a crafted font file, aka "Win32k OTF Validation Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://secunia.com/advisories/44893; http://www.securityfocus.com/bid/48183; http://www.securitytracker.com/id?1025638
CVE: CVE-2011-1889
Published: 2011-06-16
Description: The NSPLookupServiceNext function in the client in Microsoft Forefront Threat Management Gateway (TMG) 2010 allows remote attackers to execute arbitrary code via vectors involving unspecified requests, aka "TMG Firewall Client Memory Corruption Vulnerability."
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119, CWE-119
References: http://secunia.com/advisories/44857; http://www.securityfocus.com/bid/48181; http://www.securitytracker.com/id?1025637
CVE: CVE-2011-1894
Published: 2011-06-16
Description: The MHTML protocol handler in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly handle a MIME format in a request for embedded content in an HTML document, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted EMBED element in a web page that is visited in Internet Explorer, aka "MHTML Mime-Formatted Request Vulnerability."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/48205; http://www.securitytracker.com/id?1025655; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-037
CVE: CVE-2011-0317
Published: 2011-06-16
Description: Dirapi.dll in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0318, CVE-2011-0319, CVE-2011-0320, CVE-2011-0335, CVE-2011-2119, and CVE-2011-2122.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.adobe.com/support/security/bulletins/apsb11-17.html; http://www.us-cert.gov/cas/techalerts/TA11-166A.html; http://www.adobe.com/support/security/bulletins/apsb11-17.html
CVE: CVE-2011-0318
Published: 2011-06-16
Description: Dirapi.dll in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0317, CVE-2011-0319, CVE-2011-0320, CVE-2011-0335, CVE-2011-2119, and CVE-2011-2122.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.adobe.com/support/security/bulletins/apsb11-17.html; http://www.us-cert.gov/cas/techalerts/TA11-166A.html; http://www.adobe.com/support/security/bulletins/apsb11-17.html
CVE: CVE-2011-0319
Published: 2011-06-16
Description: Dirapi.dll in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0317, CVE-2011-0318, CVE-2011-0320, CVE-2011-0335, CVE-2011-2119, and CVE-2011-2122.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.adobe.com/support/security/bulletins/apsb11-17.html; http://www.us-cert.gov/cas/techalerts/TA11-166A.html; http://www.adobe.com/support/security/bulletins/apsb11-17.html
CVE: CVE-2011-0320
Published: 2011-06-16
Description: Dirapi.dll in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0317, CVE-2011-0318, CVE-2011-0319, CVE-2011-0335, CVE-2011-2119, and CVE-2011-2122.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.adobe.com/support/security/bulletins/apsb11-17.html; http://www.us-cert.gov/cas/techalerts/TA11-166A.html; http://www.adobe.com/support/security/bulletins/apsb11-17.html
CVE: CVE-2011-0335
Published: 2011-06-16
Description: Dirapi.dll in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0317, CVE-2011-0318, CVE-2011-0319, CVE-2011-0320, CVE-2011-2119, and CVE-2011-2122.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.adobe.com/support/security/bulletins/apsb11-17.html; http://www.us-cert.gov/cas/techalerts/TA11-166A.html; http://www.adobe.com/support/security/bulletins/apsb11-17.html
CVE: CVE-2011-0629
Published: 2011-06-16
Description: Cross-site request forgery (CSRF) vulnerability in Adobe ColdFusion 8.0, 8.0.1, 9.0, and 9.0.1 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://www.adobe.com/support/security/bulletins/apsb11-14.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/68027; http://www.adobe.com/support/security/bulletins/apsb11-14.html
CVE: CVE-2011-2091
Published: 2011-06-16
Description: Unspecified vulnerability in Adobe ColdFusion 8.0, 8.0.1, 9.0, and 9.0.1 allows remote attackers to cause a denial of service via unknown vectors.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/73050; http://www.adobe.com/support/security/bulletins/apsb11-14.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/68028
CVE: CVE-2011-2092
Published: 2011-06-16
Description: Adobe LiveCycle Data Services 3.1 and earlier, LiveCycle 9.0.0.2 and earlier, and BlazeDS 4.0.1 and earlier do not properly restrict creation of classes during deserialization of (1) AMF and (2) AMFX data, which allows attackers to have an unspecified impact via unknown vectors, related to a "deserialization vulnerability."
CVSS Score: 10.0 (HIGH)
CWE: CWE-20
References: http://www.adobe.com/support/security/bulletins/apsb11-15.html; http://www.securitytracker.com/id?1025656; http://www.securitytracker.com/id?1025657
CVE: CVE-2011-2093
Published: 2011-06-16
Description: Adobe LiveCycle Data Services 3.1 and earlier, LiveCycle 9.0.0.2 and earlier, and BlazeDS 4.0.1 and earlier do not properly handle object graphs, which allows attackers to cause a denial of service via unspecified vectors, related to a "complex object graph vulnerability."
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://osvdb.org/73009; http://www.adobe.com/support/security/bulletins/apsb11-15.html; http://www.securityfocus.com/bid/48267
CVE: CVE-2011-2094
Published: 2011-06-16
Description: Buffer overflow in Adobe Reader and Acrobat 8.x before 8.3, 9.x before 9.4.5, and 10.x before 10.1 on Windows and Mac OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-2095 and CVE-2011-2097.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.adobe.com/support/security/bulletins/apsb11-16.html; http://www.securitytracker.com/id?1025658; http://www.us-cert.gov/cas/techalerts/TA11-166A.html
CVE: CVE-2011-2095
Published: 2011-06-16
Description: Buffer overflow in Adobe Reader and Acrobat 8.x before 8.3, 9.x before 9.4.5, and 10.x before 10.1 on Windows and Mac OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-2094 and CVE-2011-2097.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.adobe.com/support/security/bulletins/apsb11-16.html; http://www.securitytracker.com/id?1025658; http://www.us-cert.gov/cas/techalerts/TA11-166A.html
CVE: CVE-2011-2096
Published: 2011-06-16
Description: Heap-based buffer overflow in Adobe Reader and Acrobat 8.x before 8.3, 9.x before 9.4.5, and 10.x before 10.1 on Windows and Mac OS X allows attackers to execute arbitrary code via unspecified vectors.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://osvdb.org/73057; http://www.adobe.com/support/security/bulletins/apsb11-16.html; http://www.securityfocus.com/bid/48243
CVE: CVE-2011-2097
Published: 2011-06-16
Description: Buffer overflow in Adobe Reader and Acrobat 8.x before 8.3, 9.x before 9.4.5, and 10.x before 10.1 on Windows and Mac OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-2094 and CVE-2011-2095.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.adobe.com/support/security/bulletins/apsb11-16.html; http://www.securityfocus.com/bid/48244; http://www.securitytracker.com/id?1025658
CVE: CVE-2011-2098
Published: 2011-06-16
Description: Adobe Reader and Acrobat 8.x before 8.3, 9.x before 9.4.5, and 10.x before 10.1 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2099.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://osvdb.org/73059; http://www.adobe.com/support/security/bulletins/apsb11-16.html; http://www.securityfocus.com/bid/48245
CVE: CVE-2011-2099
Published: 2011-06-16
Description: Adobe Reader and Acrobat 8.x before 8.3, 9.x before 9.4.5, and 10.x before 10.1 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2098.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://osvdb.org/73061; http://www.adobe.com/support/security/bulletins/apsb11-16.html; http://www.securityfocus.com/bid/48246
CVE: CVE-2011-2100
Published: 2011-06-16
Description: Untrusted search path vulnerability in Adobe Reader and Acrobat 8.x before 8.3, 9.x before 9.4.5, and 10.x before 10.1 on Windows allows local users to gain privileges via a Trojan horse DLL in the current working directory.
CVSS Score: 6.9 (MEDIUM)
References: http://osvdb.org/73062; http://www.adobe.com/support/security/bulletins/apsb11-16.html; http://www.securityfocus.com/bid/48252
CVE: CVE-2011-2101
Published: 2011-06-16
Description: Adobe Reader and Acrobat 8.x before 8.3, 9.x before 9.4.5, and 10.x before 10.1 on Windows and Mac OS X do not properly restrict script, which allows attackers to execute arbitrary code via a crafted document, related to a "cross document script execution vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://osvdb.org/73063; http://www.adobe.com/support/security/bulletins/apsb11-16.html; http://www.securityfocus.com/bid/48255
CVE: CVE-2011-2102
Published: 2011-06-16
Description: Unspecified vulnerability in Adobe Reader and Acrobat before 10.1 on Windows and Mac OS X allows attackers to bypass intended access restrictions via unknown vectors.
CVSS Score: 9.3 (HIGH)
References: http://osvdb.org/73064; http://www.adobe.com/support/security/bulletins/apsb11-16.html; http://www.securityfocus.com/bid/48253