deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2010-2842
Published: 2010-09-10
Description: Cisco Wireless LAN Controller (WLC) software, possibly 4.2 through 6.0, allows remote authenticated users to bypass intended access restrictions and modify the configuration, and possibly obtain administrative privileges, via unspecified vectors, a different vulnerability than CVE-2010-2843 and CVE-2010-3033.
CVSS Score: 9.0 (HIGH)
CWE: CWE-264
References: http://tools.cisco.com/security/center/viewAlert.x?alertId=21290; http://www.cisco.com/en/US/products/products_security_advisory09186a0080b466e9.shtml; http://tools.cisco.com/security/center/viewAlert.x?alertId=21290
CVE: CVE-2010-2843
Published: 2010-09-10
Description: Cisco Wireless LAN Controller (WLC) software, possibly 4.2 through 6.0, allows remote authenticated users to bypass intended access restrictions and modify the configuration, and possibly obtain administrative privileges, via unspecified vectors, a different vulnerability than CVE-2010-2842 and CVE-2010-3033.
CVSS Score: 9.0 (HIGH)
CWE: CWE-264
References: http://tools.cisco.com/security/center/viewAlert.x?alertId=21290; http://www.cisco.com/en/US/products/products_security_advisory09186a0080b466e9.shtml; http://tools.cisco.com/security/center/viewAlert.x?alertId=21290
CVE: CVE-2010-2957
Published: 2010-09-10
Description: Cross-site scripting (XSS) vulnerability in Serendipity before 1.5.4, when "Remember me" logins are enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 2.6 (LOW)
CWE: CWE-79
References: http://blog.s9y.org/archives/223-Serendipity-1.5.4-released.html; http://www.htbridge.ch/advisory/xss_vulnerability_in_serendipity.html; http://www.openwall.com/lists/oss-security/2010/08/29/3
CVE: CVE-2010-3003
Published: 2010-09-10
Description: Cross-site scripting (XSS) vulnerability in HP Insight Diagnostics Online Edition before 8.5.0-11 on Linux allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02492472; http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr10-05; http://www.vupen.com/english/advisories/2010/2245
CVE: CVE-2010-3033
Published: 2010-09-10
Description: Cisco Wireless LAN Controller (WLC) software, possibly 4.2 through 6.0, allows remote authenticated users to bypass intended access restrictions and modify the configuration, and possibly obtain administrative privileges, via unspecified vectors, a different vulnerability than CVE-2010-2842 and CVE-2010-2843.
CVSS Score: 9.0 (HIGH)
CWE: CWE-264
References: http://tools.cisco.com/security/center/viewAlert.x?alertId=21290; http://www.cisco.com/en/US/products/products_security_advisory09186a0080b466e9.shtml; http://tools.cisco.com/security/center/viewAlert.x?alertId=21290
CVE: CVE-2010-3034
Published: 2010-09-10
Description: Cisco Wireless LAN Controller (WLC) software, possibly 6.0.x or possibly 4.1 through 6.0.x, allows remote attackers to bypass ACLs in the controller CPU, and consequently send network traffic to unintended segments or devices, via unspecified vectors, a different vulnerability than CVE-2010-0575.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://tools.cisco.com/security/center/viewAlert.x?alertId=21291; http://www.cisco.com/en/US/products/products_security_advisory09186a0080b466e9.shtml; http://tools.cisco.com/security/center/viewAlert.x?alertId=21291
CVE: CVE-2010-3278
Published: 2010-09-10
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2010-3110.  Reason: This candidate is a reservation duplicate of CVE-2010-3110.  Notes: All CVE users should reference CVE-2010-3110 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2010-1805
Published: 2010-09-10
Description: Untrusted search path vulnerability in Apple Safari 4.x before 4.1.2 and 5.x before 5.0.2 on Windows allows local users to gain privileges via a Trojan horse explorer.exe (aka Windows Explorer) program in a directory containing a file that had been downloaded by Safari.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-264
References: http://lists.apple.com/archives/security-announce/2010//Sep/msg00001.html; http://support.apple.com/kb/HT4333; http://www.securityfocus.com/bid/43048
CVE: CVE-2010-1806
Published: 2010-09-10
Description: Use-after-free vulnerability in Apple Safari 4.x before 4.1.2 and 5.x before 5.0.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via run-in styling in an element, related to object pointers.
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html; http://lists.apple.com/archives/security-announce/2010//Sep/msg00001.html; http://secunia.com/advisories/42314
CVE: CVE-2010-1807
Published: 2010-09-10
Description: WebKit in Apple Safari 4.x before 4.1.2 and 5.x before 5.0.2; Android before 2.2; and webkitgtk before 1.2.6; does not properly validate floating-point data, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted HTML document, related to non-standard NaN representation.
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html; http://lists.apple.com/archives/security-announce/2010//Sep/msg00001.html; http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
CVE: CVE-2010-2948
Published: 2010-09-10
Description: Stack-based buffer overflow in the bgp_route_refresh_receive function in bgp_packet.c in bgpd in Quagga before 0.99.17 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a malformed Outbound Route Filtering (ORF) record in a BGP ROUTE-REFRESH (RR) message.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: http://code.quagga.net/?p=quagga.git%3Ba=commit%3Bh=d64379e8f3c0636df53ed08d5b2f1946cfedd0e3; http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00006.html; http://lists.opensuse.org/opensuse-security-announce/2011-12/msg00009.html
CVE: CVE-2010-2949
Published: 2010-09-10
Description: bgpd in Quagga before 0.99.17 does not properly parse AS paths, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an unknown AS type in an AS path attribute in a BGP UPDATE message.
CVSS Score: 5.0 (MEDIUM)
References: http://code.quagga.net/?p=quagga.git%3Ba=commit%3Bh=cddb8112b80fa9867156c637d63e6e79eeac67bb; http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00006.html; http://lists.opensuse.org/opensuse-security-announce/2011-12/msg00009.html
CVE: CVE-2010-2956
Published: 2010-09-10
Description: Sudo 1.7.0 through 1.7.4p3, when a Runas group is configured, does not properly handle use of the -u option in conjunction with the -g option, which allows local users to gain privileges via a command line containing a "-u root" sequence.
CVSS Score: 6.2 (MEDIUM)
References: http://lists.fedoraproject.org/pipermail/package-announce/2010-September/047516.html; http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html; http://secunia.com/advisories/40508
CVE: CVE-2010-3006
Published: 2010-09-10
Description: Unspecified vulnerability on the HP ProLiant G6 Lights-Out 100 Remote Management card with firmware before 4.06 allows remote attackers to cause a denial of service via unknown vectors.
CVSS Score: 7.8 (HIGH)
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02498412; http://securitytracker.com/id?1024398; http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02498412
CVE: CVE-2010-3199
Published: 2010-09-10
Description: Untrusted search path vulnerability in TortoiseSVN 1.6.10, Build 19898 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a file that is processed by Tortoise.  NOTE: this is only a vulnerability when a file extension is associated with TortoiseProc or TortoiseMerge, which is not the default.
CVSS Score: 9.3 (HIGH)
CWE: CWE-264
References: http://tortoisesvn.tigris.org/ds/viewMessage.do?dsForumId=4061&dsMessageId=2653163; http://tortoisesvn.tigris.org/ds/viewMessage.do?dsForumId=4061&dsMessageId=2653202&orderBy=createDate&orderType=desc; http://www.securityfocus.com/archive/1/513442/100/0/threaded
CVE: CVE-2010-3263
Published: 2010-09-10
Description: Cross-site scripting (XSS) vulnerability in setup/frames/index.inc.php in the setup script in phpMyAdmin 3.x before 3.3.7 allows remote attackers to inject arbitrary web script or HTML via a server name.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/41210; http://www.mandriva.com/security/advisories?name=MDVSA-2010:186; http://www.phpmyadmin.net/home_page/security/PMASA-2010-7.php
CVE: CVE-2010-2366
Published: 2010-09-13
Description: Cross-site scripting (XSS) vulnerability in futomi CGI Cafe Access Analyzer CGI Professional, and Standard 4.0.2 and earlier, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN35605523/index.html; http://jvndb.jvn.jp/en/contents/2010/JVNDB-2010-000035.html; http://www.futomi.com/library/info/2010/20100910.html
CVE: CVE-2010-2952
Published: 2010-09-13
Description: Apache Traffic Server before 2.0.1, and 2.1.x before 2.1.2-unstable, does not properly choose DNS source ports and transaction IDs, and does not properly use DNS query fields to validate responses, which makes it easier for man-in-the-middle attackers to poison the internal DNS cache via a crafted response.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://secunia.com/advisories/41356; http://securitytracker.com/id?1024417; http://trafficserver.apache.org/
CVE: CVE-2010-3008
Published: 2010-09-13
Description: Unspecified vulnerability in HP Data Protector Express, and Data Protector Express Single Server Edition (SSE), 3.x before build 56936 and 4.x before build 56906 on Windows allows local users to gain privileges or cause a denial of service via unknown vectors, a different vulnerability than CVE-2010-3007.
CVSS Score: 7.2 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9349&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9349&w=2
CVE: CVE-2010-3202
Published: 2010-09-13
Description: Cross-site scripting (XSS) vulnerability in Flock Browser 3.0.0.3989 allows remote attackers to inject arbitrary web script or HTML via a crafted bookmark.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://archives.neohapsis.com/archives/bugtraq/2010-09/0111.html; http://flock.com/security/; http://lostmon.blogspot.com/2010/08/flock-browser-3003989-malformed.html
CVE: CVE-2010-3317
Published: 2010-09-13
Description: Cross-site scripting (XSS) vulnerability in IBM Records Manager (RM) 4.5.x before 4.5.1.1-IER-FP001 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/41344; http://www-01.ibm.com/support/docview.wss?uid=swg1PJ37426; http://www.securityfocus.com/bid/43136
CVE: CVE-2010-3318
Published: 2010-09-13
Description: IBM Records Manager (RM) 4.5.x before 4.5.1.1-IER-FP001 transmits passwords in cleartext, which allows remote attackers to obtain sensitive information by sniffing the network.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-255
References: http://secunia.com/advisories/41344; http://www-01.ibm.com/support/docview.wss?uid=swg1PJ37426; http://www.securityfocus.com/bid/43136
CVE: CVE-2010-3319
Published: 2010-09-13
Description: IBM Records Manager (RM) 4.5.x before 4.5.1.1-IER-FP001 places a session token in the URI, which might allow remote attackers to obtain sensitive information by reading a Referer log file.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-255
References: http://www-01.ibm.com/support/docview.wss?uid=swg1PJ37426; http://www.securityfocus.com/bid/43136; http://www-01.ibm.com/support/docview.wss?uid=swg1PJ37426
CVE: CVE-2010-3320
Published: 2010-09-13
Description: Open redirect vulnerability in IBM Records Manager (RM) 4.5.x before 4.5.1.1-IER-FP001 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: http://secunia.com/advisories/41344; http://www-01.ibm.com/support/docview.wss?uid=swg1PJ37426; http://www.securityfocus.com/bid/43136
CVE: CVE-2010-0152
Published: 2010-09-14
Description: Multiple cross-site scripting (XSS) vulnerabilities in the Local Management Interface (LMI) on the IBM Proventia Network Mail Security System (PNMSS) appliance with firmware before 2.5.0.2 allow remote attackers to inject arbitrary web script or HTML via (1) the date1 parameter to pvm_messagestore.php, (2) the userfilter parameter to pvm_user_management.php, (3) the ping parameter to sys_tools.php in a sys_ping.php action, (4) the action parameter to pvm_cert_commaction.php, (5) the action parameter to pvm_cert_serveraction.php, (6) the action parameter to pvm_smtpstore.php, (7) the l parameter to sla/index.php, or (8) unspecified stored data; and allow remote authenticated users to inject arbitrary web script or HTML via (9) saved search filters.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/archive/1/513629/100/0/threaded; http://www.ventuneac.net/security-advisories/MVSA-10-007; http://www.securityfocus.com/archive/1/513629/100/0/threaded
CVE: CVE-2010-0153
Published: 2010-09-14
Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the Local Management Interface (LMI) on the IBM Proventia Network Mail Security System (PNMSS) appliance with firmware before 2.5.0.2 allow remote attackers to hijack the authentication of administrators for requests that (1) change settings or (2) conduct denial of service attacks.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://www.securityfocus.com/archive/1/513627/100/0/threaded; http://www.ventuneac.net/security-advisories/MVSA-10-006; http://www.securityfocus.com/archive/1/513627/100/0/threaded
CVE: CVE-2010-0154
Published: 2010-09-14
Description: Directory traversal vulnerability in sla/index.php in the Local Management Interface (LMI) on the IBM Proventia Network Mail Security System (PNMSS) appliance with firmware before 2.5 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the l parameter, related to an "Insecure Direct Object Reference vulnerability."
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-22
References: http://www.securityfocus.com/archive/1/513637/100/0/threaded; http://www.ventuneac.net/security-advisories/MVSA-10-008; http://www.securityfocus.com/archive/1/513637/100/0/threaded
CVE: CVE-2010-0155
Published: 2010-09-14
Description: CRLF injection vulnerability in load.php in the Local Management Interface (LMI) on the IBM Proventia Network Mail Security System (PNMSS) appliance with firmware before 2.5 allows remote authenticated users to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the javaVersion parameter.
CVSS Score: 3.5 (LOW)
CWE: CWE-94
References: http://www.securityfocus.com/archive/1/513636/100/0/threaded; http://www.ventuneac.net/security-advisories/MVSA-10-009; http://www.securityfocus.com/archive/1/513636/100/0/threaded
CVE: CVE-2010-3322
Published: 2010-09-14
Description: The XML parser in Splunk 4.0.0 through 4.1.4 allows remote authenticated users to obtain sensitive information and gain privileges via an XML External Entity (XXE) attack to unknown vectors.
CVSS Score: 8.8 (HIGH)
CWE: CWE-611
References: http://www.splunk.com/view/SP-CAAAFQ6; http://www.splunk.com/view/SP-CAAAFQ6
CVE: CVE-2010-3323
Published: 2010-09-14
Description: Splunk 4.0.0 through 4.1.4 allows remote attackers to conduct session hijacking attacks and obtain the splunkd session key via vectors related to the SPLUNKD_SESSION_KEY parameter.
CVSS Score: 4.6 (MEDIUM)
References: http://www.splunk.com/view/SP-CAAAFQ6; http://www.splunk.com/view/SP-CAAAFQ6
CVE: CVE-2010-2953
Published: 2010-09-14
Description: Untrusted search path vulnerability in a certain Debian GNU/Linux patch for the couchdb script in CouchDB 0.8.0 allows local users to gain privileges via a crafted shared library in the current working directory.
CVSS Score: 6.9 (MEDIUM)
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=594412; http://secunia.com/advisories/41383; http://www.debian.org/security/2010/dsa-2107
CVE: CVE-2010-2961
Published: 2010-09-14
Description: mountall.c in mountall before 2.15.2 uses 0666 permissions for the root.rules file, which allows local users to gain privileges by modifying this file.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-362
References: http://secunia.com/advisories/41351; http://www.osvdb.org/67914; http://www.ubuntu.com/usn/USN-985-1
CVE: CVE-2010-3082
Published: 2010-09-14
Description: Cross-site scripting (XSS) vulnerability in Django 1.2.x before 1.2.2 allows remote attackers to inject arbitrary web script or HTML via a csrfmiddlewaretoken (aka csrf_token) cookie.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://marc.info/?l=oss-security&m=[PII_REDACTED]0444&w=2; http://www.djangoproject.com/weblog/2010/sep/08/security-release/; http://www.securityfocus.com/bid/43116
CVE: CVE-2010-2799
Published: 2010-09-14
Description: Stack-based buffer overflow in the nestlex function in nestlex.c in Socat 1.5.0.0 through 1.7.1.2 and 2.0.0-b1 through 2.0.0-b3, when bidirectional data relay is enabled, allows context-dependent attackers to execute arbitrary code via long command-line arguments.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=591443; http://bugs.gentoo.org/show_bug.cgi?id=330785; http://www.debian.org/security/2010/dsa-2090
CVE: CVE-2010-1326
Published: 2010-09-15
Description: perms.cpp in March Hare Software CVSNT 2.0.58, 2.5.01, 2.5.02, 2.5.03 before build 3736, 2.5.04 before build 2862; CVS Suite 2.5.03, 2008 before build 3736, and 2009 before 3729 allows remote attackers to bypass the permissions check, modify arbitrary modules and directories within CVSROOT, and execute arbitrary code via a crafted branch name ACL, possibly related to incorrect inheritance.
CVSS Score: 9.3 (HIGH)
CWE: CWE-264
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=593884; http://customer.march-hare.com/webtools/bugzilla/attachment.cgi?tt=1&id=1790&action=view; http://march-hare.com/cvspro/vuln.htm
CVE: CVE-2010-2580
Published: 2010-09-15
Description: The SMTP service (MESMTPC.exe) in MailEnable 3.x and 4.25 does not properly perform a length check, which allows remote attackers to cause a denial of service (crash) via a long (1) email address in the MAIL FROM command, or (2) domain name in the RCPT TO command, which triggers an "unhandled invalid parameter error."
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://secunia.com/advisories/41175; http://secunia.com/secunia_research/2010-112/; http://www.mailenable.com/Enterprise-ReleaseNotes.txt
CVE: CVE-2010-2600
Published: 2010-09-15
Description: Untrusted search path vulnerability in BlackBerry Desktop Software before 6.0.0.47 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse DLL that is located in the same folder as a file that is processed by Blackberry.
CVSS Score: 9.3 (HIGH)
References: http://secunia.com/advisories/41346; http://secunia.com/advisories/41398; http://www.blackberry.com/btsc/KB24242
CVE: CVE-2010-2884
Published: 2010-09-15
Description: Adobe Flash Player 10.1.82.76 and earlier on Windows, Mac OS X, Linux, and Solaris and 10.1.92.10 on Android; authplay.dll in Adobe Reader and Acrobat 9.x before 9.4; and authplay.dll in Adobe Reader and Acrobat 8.x before 8.2.5 on Windows and Mac OS X allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, as exploited in the wild in September 2010.
CVSS Score: 9.3 (HIGH)
References: http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html; http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00001.html; http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html
CVE: CVE-2010-3009
Published: 2010-09-15
Description: Unspecified vulnerability in HP System Management Homepage (SMH) for Linux 6.0 and 6.1 allows remote authenticated users to obtain sensitive information and gain root privileges via unknown vectors.
CVSS Score: 9.0 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3011&w=2; http://secunia.com/advisories/41427; http://www.securityfocus.com/bid/43208
CVE: CVE-2010-3069
Published: 2010-09-15
Description: Stack-based buffer overflow in the (1) sid_parse and (2) dom_sid_parse functions in Samba before 3.5.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted Windows Security ID (SID) on a file share.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html; http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-September/047650.html
CVE: CVE-2010-3396
Published: 2010-09-15
Description: Buffer overflow in kavfm.sys in Kingsoft Antivirus 2010.04.26.648 and earlier allows local users to execute arbitrary code via a long argument to IOCTL 0x80030004.  NOTE: some of these details are obtained from third party information.
CVSS Score: 7.2 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/41393; http://www.exploit-db.com/exploits/14987; http://www.securityfocus.com/bid/43173
CVE: CVE-2010-3397
Published: 2010-09-15
Description: Untrusted search path vulnerability in PGP Desktop 9.9.0 Build 397, 9.10.x, 10.0.0 Build 2732, and probably other versions allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse tsp.dll or tvttsp.dll that is located in the same folder as a .p12, .pem, .pgp, .prk, .prvkr, .pubkr, .rnd, or .skr file.
CVSS Score: 9.3 (HIGH)
References: http://secunia.com/advisories/41135; http://www.securityfocus.com/archive/1/513596/100/0/threaded; http://www.securityfocus.com/bid/42856
CVE: CVE-2010-0818
Published: 2010-09-15
Description: The MPEG-4 codec in the Windows Media codecs in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, and Server 2008 Gold and SP2 does not properly handle crafted media content with MPEG-4 video encoding, which allows remote attackers to execute arbitrary code via a file in an unspecified "supported format," aka "MPEG-4 Codec Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-062; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7318; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-062
CVE: CVE-2010-0820
Published: 2010-09-15
Description: Heap-based buffer overflow in the Local Security Authority Subsystem Service (LSASS), as used in Active Directory in Microsoft Windows Server 2003 SP2 and Windows Server 2008 Gold, SP2, and R2; Active Directory Application Mode (ADAM) in Windows XP SP2 and SP3 and Windows Server 2003 SP2; and Active Directory Lightweight Directory Service (AD LDS) in Windows Vista SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7, allows remote authenticated users to execute arbitrary code via malformed LDAP messages, aka "LSASS Heap Overflow Vulnerability."
CVSS Score: 8.8 (HIGH)
CWE: CWE-119, CWE-120
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-068; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7120; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-068