deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2009-0194
Published: 2009-05-11
Description: The domain-locking implementation in the GARMINAXCONTROL.GarminAxControl_t.1 ActiveX control in npGarmin.dll in the Garmin Communicator Plug-In 2.6.4.0 does not properly enforce the restrictions that (1) download and (2) upload requests come from a web site specified by the user, which allows remote attackers to obtain sensitive information or reconfigure Garmin GPS devices via unspecified vectors related to a "synchronisation error."
CVSS Score: 9.3 (HIGH)
CWE: CWE-264
References: http://osvdb.org/54258; http://secunia.com/advisories/34326; http://secunia.com/secunia_research/2009-16/
CVE: CVE-2009-1194
Published: 2009-05-11
Description: Integer overflow in the pango_glyph_string_set_size function in pango/glyphstring.c in Pango before 1.24 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long glyph string that triggers a heap-based buffer overflow, as demonstrated by a long document.location value in Firefox.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-189
References: http://github.com/bratsche/pango/commit/4de30e5500eaeb49f4bf0b7a07f718e149a2ed5e; http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html; http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00005.html
CVE: CVE-2009-1597
Published: 2009-05-11
Description: Mozilla Firefox executes DOM calls in response to a javascript: URI in the target attribute of a submit element within a form contained in an inline PDF file, which might allow remote attackers to bypass intended Adobe Acrobat JavaScript restrictions on accessing the document object, as demonstrated by a web site that permits PDF uploads by untrusted users, and therefore has a shared document.domain between the web site and this javascript: URI.  NOTE: the researcher reports that Adobe's position is "a PDF file is active content."
CVSS Score: 9.3 (HIGH)
CWE: CWE-264
References: http://secniche.org/papers/SNS_09_03_PDF_Silent_Form_Re_Purp_Attack.pdf; http://www.securityfocus.com/archive/1/503183/100/0/threaded; http://secniche.org/papers/SNS_09_03_PDF_Silent_Form_Re_Purp_Attack.pdf
CVE: CVE-2009-1598
Published: 2009-05-11
Description: Google Chrome executes DOM calls in response to a javascript: URI in the target attribute of a submit element within a form contained in an inline PDF file, which might allow remote attackers to bypass intended Adobe Acrobat JavaScript restrictions on accessing the document object, as demonstrated by a web site that permits PDF uploads by untrusted users, and therefore has a shared document.domain between the web site and this javascript: URI.  NOTE: the researcher reports that Adobe's position is "a PDF file is active content."
CVSS Score: 9.3 (HIGH)
References: http://secniche.org/papers/SNS_09_03_PDF_Silent_Form_Re_Purp_Attack.pdf; http://www.securityfocus.com/archive/1/503183/100/0/threaded; http://secniche.org/papers/SNS_09_03_PDF_Silent_Form_Re_Purp_Attack.pdf
CVE: CVE-2009-1599
Published: 2009-05-11
Description: Opera executes DOM calls in response to a javascript: URI in the target attribute of a submit element within a form contained in an inline PDF file, which might allow remote attackers to bypass intended Adobe Acrobat JavaScript restrictions on accessing the document object, as demonstrated by a web site that permits PDF uploads by untrusted users, and therefore has a shared document.domain between the web site and this javascript: URI.  NOTE: the researcher reports that Adobe's position is "a PDF file is active content."
CVSS Score: 9.3 (HIGH)
CWE: CWE-264
References: http://secniche.org/papers/SNS_09_03_PDF_Silent_Form_Re_Purp_Attack.pdf; http://www.securityfocus.com/archive/1/503183/100/0/threaded; http://secniche.org/papers/SNS_09_03_PDF_Silent_Form_Re_Purp_Attack.pdf
CVE: CVE-2009-1600
Published: 2009-05-11
Description: Apple Safari executes DOM calls in response to a javascript: URI in the target attribute of a submit element within a form contained in an inline PDF file, which might allow remote attackers to bypass intended Adobe Acrobat JavaScript restrictions on accessing the document object, as demonstrated by a web site that permits PDF uploads by untrusted users, and therefore has a shared document.domain between the web site and this javascript: URI.  NOTE: the researcher reports that Adobe's position is "a PDF file is active content."
CVSS Score: 9.3 (HIGH)
CWE: CWE-264
References: http://secniche.org/papers/SNS_09_03_PDF_Silent_Form_Re_Purp_Attack.pdf; http://www.securityfocus.com/archive/1/503183/100/0/threaded; http://secniche.org/papers/SNS_09_03_PDF_Silent_Form_Re_Purp_Attack.pdf
CVE: CVE-2009-1601
Published: 2009-05-11
Description: The Ubuntu clamav-milter.init script in clamav-milter before 0.95.1+dfsg-1ubuntu1.2 in Ubuntu 9.04 sets the ownership of the current working directory to the clamav account, which might allow local users to bypass intended access restrictions via read or write operations involving this directory.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-264
References: http://secunia.com/advisories/35000; http://www.securityfocus.com/bid/34818; http://www.ubuntu.com/usn/USN-770-1
CVE: CVE-2009-1602
Published: 2009-05-11
Description: Pablo Software Solutions Quick 'n Easy Mail Server 3.3 allows remote attackers to cause a denial of service (daemon outage or CPU consumption) via multiple long SMTP commands, as demonstrated by HELO commands.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://osvdb.org/54215; http://secunia.com/advisories/34992; http://www.securityfocus.com/bid/34814
CVE: CVE-2009-1603
Published: 2009-05-11
Description: src/tools/pkcs11-tool.c in pkcs11-tool in OpenSC 0.11.7, when used with unspecified third-party PKCS#11 modules, generates RSA keys with incorrect public exponents, which allows attackers to read the cleartext form of messages that were intended to be encrypted.
CVSS Score: 7.5 (HIGH)
CWE: CWE-312
References: http://secunia.com/advisories/35035; http://secunia.com/advisories/35293; http://secunia.com/advisories/35309
CVE: CVE-2009-1604
Published: 2009-05-11
Description: Unspecified vulnerability in LimeSurvey before 1.82 allows remote attackers to execute commands and obtain sensitive data via unknown attack vectors related to /admin/remotecontrol/.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/34946; http://www.limesurvey.org/content/view/169/1/lang%2Cen/; http://www.securityfocus.com/bid/34785
CVE: CVE-2009-1605
Published: 2009-05-11
Description: Heap-based buffer overflow in the loadexponentialfunc function in mupdf/pdf_function.c in MuPDF in the mupdf-20090223-win32 package, as used in SumatraPDF 0.9.3 and earlier, allows remote attackers to execute arbitrary code via a crafted PDF file.  NOTE: some of these details are obtained from third party information.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-119
References: http://archives.neohapsis.com/archives/fulldisclosure/2009-04/0258.html; http://secunia.com/advisories/34916; http://www.vupen.com/english/advisories/2009/1185
CVE: CVE-2009-1606
Published: 2009-05-11
Description: Multiple stack-based and heap-based buffer overflows in Dafolo DafoloControl ActiveX control (DafoloFFControl.dll) 1.108.6.195 allow remote attackers to execute arbitrary code via long (1) baseurl, (2) kommune, (3) felter, (4) afdeling, (5) Flags, (6) HelpURL, (7) caburl, or (8) filename properties; or (9) a long argument to the Open method. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/35017; http://www.securityfocus.com/bid/34900; https://exchange.xforce.ibmcloud.com/vulnerabilities/50420
CVE: CVE-2009-1607
Published: 2009-05-11
Description: Cross-site scripting (XSS) vulnerability in the administrator panel in phpForm.net LinkBase 2.0 allows remote attackers to inject arbitrary web script or HTML via the username in a registration, which is not properly handled when the administrator accesses the Users menu.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/34844; https://exchange.xforce.ibmcloud.com/vulnerabilities/50338; https://www.exploit-db.com/exploits/8618
CVE: CVE-2009-1608
Published: 2009-05-11
Description: Multiple buffer overflows in Microchip MPLAB IDE 8.30 and possibly earlier versions allow user-assisted remote attackers to execute arbitrary code via a .MCP project file with long (1) FILE_INFO, (2) CAT_FILTERS, and possibly other fields.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://osvdb.org/54370; http://secunia.com/advisories/35054; http://security.bkis.vn/?p=654
CVE: CVE-2009-1609
Published: 2009-05-11
Description: Unrestricted file upload vulnerability in admin/uploadform.asp in Battle Blog 1.25 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: http://secunia.com/advisories/35023; http://www.securityfocus.com/bid/34887; http://www.vupen.com/english/advisories/2009/1280
CVE: CVE-2009-1610
Published: 2009-05-11
Description: admin/changepassword.php in Job Script Job Board Software 2.0 allows remote attackers to change the administrator password and gain administrator privileges via a direct request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://osvdb.org/54281; http://secunia.com/advisories/35029; http://www.securityfocus.com/bid/34874
CVE: CVE-2009-1611
Published: 2009-05-11
Description: Stack-based buffer overflow in ElectraSoft 32bit FTP 09.04.24 allows remote FTP servers to execute arbitrary code via a long 257 reply to a CWD command.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/34822; http://www.securityfocus.com/bid/34838; http://www.vupen.com/english/advisories/2009/1263
CVE: CVE-2008-6803
Published: 2009-05-11
Description: SQL injection vulnerability in diziler.asp in Yigit Aybuga Dizi Portali allows remote attackers to execute arbitrary SQL commands via the id parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.securityfocus.com/bid/31849; https://exchange.xforce.ibmcloud.com/vulnerabilities/46310; http://www.securityfocus.com/bid/31849
CVE: CVE-2008-6804
Published: 2009-05-11
Description: Tribiq CMS 5.0.9a beta allows remote attackers to bypass authentication and gain administrative access by setting the COOKIE_LAST_ADMIN_USER and COOKIE_LAST_ADMIN_LANG cookies.  NOTE: a third party reports that the vendor disputes the existence of this issue
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: http://www.securityfocus.com/bid/32001; https://exchange.xforce.ibmcloud.com/vulnerabilities/46237; https://www.exploit-db.com/exploits/6886
CVE: CVE-2008-6805
Published: 2009-05-11
Description: Multiple SQL injection vulnerabilities in Mic_Blog 0.0.3, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) cat parameter to category.php, the (2) user parameter to login.php, and the (3) site parameter to register.php.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-89
References: http://secunia.com/advisories/32310; http://www.osvdb.org/49186; http://www.osvdb.org/49187
CVE: CVE-2009-1612
Published: 2009-05-11
Description: Stack-based buffer overflow in the MPS.StormPlayer.1 ActiveX control in mps.dll 3.9.4.27 in Baofeng Storm allows remote attackers to execute arbitrary code via a long argument to the OnBeforeVideoDownload method, as exploited in the wild in April and May 2009. NOTE: some of these details are obtained from third party information. NOTE: it was later reported that 3.09.04.17 and earlier are also affected.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/34944; http://www.cisrt.org/enblog/read.php?245; http://www.securityfocus.com/bid/34789
CVE: CVE-2009-1613
Published: 2009-05-11
Description: Multiple SQL injection vulnerabilities in leap.php in Leap CMS 0.1.4, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) searchterm or (2) email parameter.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-89
References: http://secunia.com/advisories/34943; https://www.exploit-db.com/exploits/8576; https://www.exploit-db.com/exploits/8577
CVE: CVE-2009-1614
Published: 2009-05-11
Description: Multiple cross-site scripting (XSS) vulnerabilities in Leap CMS 0.1.4 allow remote attackers to inject arbitrary web script or HTML via (1) the msg parameter (aka the message in an article comment) or (2) the searchterm parameter (aka the search post form).  NOTE: some of these details are obtained from third party information.
CVSS Score: 2.6 (LOW)
CWE: CWE-79
References: http://secunia.com/advisories/34943; https://www.exploit-db.com/exploits/8577; http://secunia.com/advisories/34943
CVE: CVE-2009-1615
Published: 2009-05-11
Description: Unrestricted file upload vulnerability in Leap CMS 0.1.4 allows remote attackers to execute arbitrary code by uploading a file with an executable extension via an admin.system.files (aka Manage Files) request to the default URI, then accessing the file via a direct request.
CVSS Score: 6.8 (MEDIUM)
References: https://www.exploit-db.com/exploits/8577; https://www.exploit-db.com/exploits/8577
CVE: CVE-2009-1616
Published: 2009-05-11
Description: Cross-site scripting (XSS) vulnerability in docs/showdoc.php in Coppermine Photo Gallery (CPG) before 1.4.22 allows remote attackers to inject arbitrary web script or HTML via the css parameter, a different vector than CVE-2008-0505.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://forum.coppermine-gallery.net/index.php/topic%2C59237.0.html; http://forum.coppermine-gallery.net/index.php/topic%2C59247.0.html; http://osvdb.org/54145
CVE: CVE-2008-6806
Published: 2009-05-12
Description: Unrestricted file upload vulnerability in includes/imageupload.php in 7Shop 1.1 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in images/artikel/.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/bid/31978; http://www.vupen.com/english/advisories/2008/2965; https://exchange.xforce.ibmcloud.com/vulnerabilities/46184
CVE: CVE-2008-6807
Published: 2009-05-12
Description: PHP remote file inclusion vulnerability in ListRecords.php in osprey 1.0a4.1 allows remote attackers to execute arbitrary PHP code via a URL in the xml_dir parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.  NOTE: the lib_dir vector is already covered by CVE-2006-6630.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://www.securityfocus.com/bid/31883; https://exchange.xforce.ibmcloud.com/vulnerabilities/46066; http://www.securityfocus.com/bid/31883
CVE: CVE-2008-6808
Published: 2009-05-12
Description: SQL injection vulnerability in links.php in Scripts for Sites (SFS) EZ Link Directory allows remote attackers to execute arbitrary SQL commands via the cat_id parameter in a list action.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/49549; http://www.securityfocus.com/bid/32034; https://www.exploit-db.com/exploits/6908
CVE: CVE-2009-1617
Published: 2009-05-12
Description: Teraway LinkTracker 1.0 allows remote attackers to bypass authentication and gain administrative access via a userid=1&lvl=1 value for the twLTadmin cookie.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: http://secunia.com/advisories/34903; http://www.securityfocus.com/bid/34735; https://www.exploit-db.com/exploits/8550
CVE: CVE-2009-1618
Published: 2009-05-12
Description: Teraway LiveHelp 2.0 allows remote attackers to bypass authentication and gain administrative access via a pwd=&lvl=1&usr=&alias=admin&userid=1 value for the TWLHadmin cookie.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: http://secunia.com/advisories/34802; http://www.securityfocus.com/bid/34735; https://www.exploit-db.com/exploits/8552
CVE: CVE-2009-1619
Published: 2009-05-12
Description: Teraway FileStream 1.0 allows remote attackers to bypass authentication and gain administrative access by setting the twFSadmin cookie to 1.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: http://secunia.com/advisories/34818; http://www.securityfocus.com/bid/34735; https://www.exploit-db.com/exploits/8551
CVE: CVE-2009-1620
Published: 2009-05-12
Description: Multiple cross-site scripting (XSS) vulnerabilities in input.php in MataChat allow remote attackers to inject arbitrary web script or HTML via the (1) nickname and (2) color parameters.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/archive/1/503014/100/0/threaded; http://www.securityfocus.com/bid/34722; http://www.securityfocus.com/archive/1/503014/100/0/threaded
CVE: CVE-2009-1621
Published: 2009-05-12
Description: Directory traversal vulnerability in index.php in OpenCart 1.1.8 allows remote attackers to read arbitrary files via a .. (dot dot) in the route parameter.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://secunia.com/advisories/34313; http://www.securityfocus.com/archive/1/532233/100/0/threaded; http://www.securityfocus.com/bid/34724
CVE: CVE-2009-1622
Published: 2009-05-12
Description: SQL injection vulnerability in user.php in EcShop 2.5.0 allows remote attackers to execute arbitrary SQL commands via the order_sn parameter in an order_query action.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.securityfocus.com/bid/34733; https://www.exploit-db.com/exploits/8548; http://www.securityfocus.com/bid/34733
CVE: CVE-2009-1623
Published: 2009-05-12
Description: Cross-site scripting (XSS) vulnerability in index.php in Dew-NewPHPLinks 2.0 allows remote attackers to inject arbitrary web script or HTML via the PID parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/34732; https://www.exploit-db.com/exploits/8545; http://www.securityfocus.com/bid/34732
CVE: CVE-2009-1624
Published: 2009-05-12
Description: Directory traversal vulnerability in index.php in Dew-NewPHPLinks 2.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the show parameter.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://www.securityfocus.com/bid/34732; https://www.exploit-db.com/exploits/8545; http://www.securityfocus.com/bid/34732
CVE: CVE-2009-1625
Published: 2009-05-12
Description: Directory traversal vulnerability in index.php in Thickbox Gallery 2 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the ln parameter.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-22
References: http://secunia.com/advisories/34906; http://www.securityfocus.com/bid/34741; https://www.exploit-db.com/exploits/8546
CVE: CVE-2009-1626
Published: 2009-05-12
Description: SQL injection vulnerability in public/specific.php in EZ-Blog before Beta 2 20090427, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the category parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://sourceforge.net/project/shownotes.php?release_id=678562&group_id=243152; http://www.securityfocus.com/bid/34729; https://www.exploit-db.com/exploits/8547
CVE: CVE-2009-1627
Published: 2009-05-12
Description: Stack-based buffer overflow in Streaming Download Project (SDP) Downloader 2.3.0 allows remote attackers to execute arbitrary code via a long .asf URL in the HREF attribute of a REF element in a .asx file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://osvdb.org/54090; http://secunia.com/advisories/34883; http://www.securityfocus.com/bid/34712
CVE: CVE-2009-0220
Published: 2009-05-12
Description: Multiple stack-based buffer overflows in the PowerPoint 4.0 importer (PP4X32.DLL) in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allow remote attackers to execute arbitrary code via crafted formatting data for paragraphs in a file that uses a PowerPoint 4.0 native file format, related to (1) an incorrect calculation from a record header, or (2) an interget that is used to specify the number of bytes to copy, aka "Legacy File Format Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=790; http://osvdb.org/54386; http://secunia.com/advisories/32428
CVE: CVE-2009-0221
Published: 2009-05-12
Description: Integer overflow in Microsoft Office PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a PowerPoint file containing a crafted record type for "collaboration information for different slides" that contains a field that specifies a large number of records, which triggers an under-allocated buffer and a heap-based buffer overflow, aka "Integer Overflow Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=796; http://osvdb.org/54394; http://secunia.com/advisories/32428
CVE: CVE-2009-0222
Published: 2009-05-12
Description: Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via crafted sound data in a file that uses a PowerPoint 4.0 native file format, leading to a "pointer overwrite" and memory corruption, aka "Legacy File Format Vulnerability," a different vulnerability than CVE-2009-0223, CVE-2009-0226, CVE-2009-0227, and CVE-2009-1137.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://osvdb.org/54382; http://secunia.com/advisories/32428; http://www.securityfocus.com/bid/34831
CVE: CVE-2009-0223
Published: 2009-05-12
Description: Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via crafted sound data in a file that uses a PowerPoint 4.0 native file format, leading to memory corruption, aka "Legacy File Format Vulnerability," a different vulnerability than CVE-2009-0222, CVE-2009-0226, CVE-2009-0227, and CVE-2009-1137.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://secunia.com/advisories/32428; http://www.securityfocus.com/bid/34834; http://www.securitytracker.com/id?1022205
CVE: CVE-2009-0224
Published: 2009-05-12
Description: Microsoft Office PowerPoint 2000 SP3, 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; PowerPoint Viewer 2003 and 2007 SP1 and SP2; PowerPoint in Microsoft Office 2004 for Mac and 2008 for Mac; Open XML File Format Converter for Mac; Microsoft Works 8.5 and 9.0; and Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 do not properly validate PowerPoint files, which allows remote attackers to execute arbitrary code via multiple crafted BuildList records that include ChartBuild containers, which triggers memory corruption, aka "Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=793; http://secunia.com/advisories/32428; http://www.securityfocus.com/bid/34879
CVE: CVE-2009-0225
Published: 2009-05-12
Description: Microsoft Office PowerPoint 2002 SP3 allows remote attackers to execute arbitrary code via crafted sound data in a file that uses a PowerPoint 95 native file format, leading to improper "array indexing" and memory corruption, aka "PP7 Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://osvdb.org/54388; http://secunia.com/advisories/32428; http://www.securityfocus.com/bid/34880
CVE: CVE-2009-0226
Published: 2009-05-12
Description: Stack-based buffer overflow in the PowerPoint 4.2 conversion filter in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via a long string in sound data in a file that uses a PowerPoint 4.0 native file format, leading to memory corruption, aka "Legacy File Format Vulnerability," a different vulnerability than CVE-2009-0222, CVE-2009-0223, CVE-2009-0227, and CVE-2009-1137.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=789; http://secunia.com/advisories/32428; http://www.securityfocus.com/bid/34881