deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2011-2421
Published: 2011-08-11
Description: Dirapi.dll in Adobe Shockwave Player before 11.6.1.629 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted .dir media file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.adobe.com/support/security/bulletins/apsb11-19.html; http://www.us-cert.gov/cas/techalerts/TA11-222A.html; http://www.adobe.com/support/security/bulletins/apsb11-19.html
CVE: CVE-2011-2422
Published: 2011-08-11
Description: Textra.x32 in Adobe Shockwave Player before 11.6.1.629 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://www.adobe.com/support/security/bulletins/apsb11-19.html; http://www.us-cert.gov/cas/techalerts/TA11-222A.html; http://www.adobe.com/support/security/bulletins/apsb11-19.html
CVE: CVE-2011-2423
Published: 2011-08-11
Description: msvcr90.dll in Adobe Shockwave Player before 11.6.1.629 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://osvdb.org/74429; http://www.adobe.com/support/security/bulletins/apsb11-19.html; http://www.us-cert.gov/cas/techalerts/TA11-222A.html
CVE: CVE-2008-7299
Published: 2011-08-12
Description: IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.2 uses an incomplete SAML 1.x browser-artifact, which allows remote OpenID providers to spoof assertions via vectors related to the Issuer field.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://www-01.ibm.com/support/docview.wss?uid=swg1IZ35742; http://www.ibm.com/support/docview.wss?uid=swg24029497; http://www-01.ibm.com/support/docview.wss?uid=swg1IZ35742
CVE: CVE-2009-5083
Published: 2011-08-12
Description: IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.2, when configured as an OpenID relying party, does not perform the expected login rejection upon receiving an OP-Identifier from an OpenID provider, which allows remote attackers to bypass authentication via unspecified vectors.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-287
References: http://www-01.ibm.com/support/docview.wss?uid=swg1IZ44571; http://www.ibm.com/support/docview.wss?uid=swg24029497; http://www-01.ibm.com/support/docview.wss?uid=swg1IZ44571
CVE: CVE-2009-5084
Published: 2011-08-12
Description: IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.2, when com.tivoli.am.fim.infocard.delegates.InfoCardSTSDelegate tracing is enabled, creates a cleartext log entry containing a password, which might allow local users to obtain sensitive information by reading the log data.
CVSS Score: 1.9 (LOW)
CWE: CWE-310
References: http://www-01.ibm.com/support/docview.wss?uid=swg1IZ44560; http://www.ibm.com/support/docview.wss?uid=swg24029497; http://www-01.ibm.com/support/docview.wss?uid=swg1IZ44560
CVE: CVE-2009-5085
Published: 2011-08-12
Description: IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.2, when configured as an OpenID provider, does not delete the site information cookie in response to a user's deletion of a relying-party trust entry, which allows user-assisted remote attackers to bypass intended trust restrictions via vectors that trigger absence of the consent-to-authenticate page.
CVSS Score: 2.6 (LOW)
CWE: CWE-264
References: http://www-01.ibm.com/support/docview.wss?uid=swg1IZ44555; http://www.ibm.com/support/docview.wss?uid=swg24029497; http://www-01.ibm.com/support/docview.wss?uid=swg1IZ44555
CVE: CVE-2011-3135
Published: 2011-08-12
Description: Unspecified vulnerability in the Runtime in IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.9 and Tivoli Federated Identity Manager Business Gateway (TFIMBG) 6.2.0 before 6.2.0.9 has unknown impact and attack vectors.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/45555; http://www-01.ibm.com/support/docview.wss?uid=swg1IV03074; http://www.ibm.com/support/docview.wss?uid=swg24029497
CVE: CVE-2011-3136
Published: 2011-08-12
Description: Unspecified vulnerability in the Management Console in IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.9 and Tivoli Federated Identity Manager Business Gateway (TFIMBG) 6.2.0 before 6.2.0.9 has unknown impact and attack vectors, aka APAR IV03048.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/45555; http://www-01.ibm.com/support/docview.wss?uid=swg1IV03048; http://www.ibm.com/support/docview.wss?uid=swg24029497
CVE: CVE-2011-3137
Published: 2011-08-12
Description: Unspecified vulnerability in the Management Console in IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.9 and Tivoli Federated Identity Manager Business Gateway (TFIMBG) 6.2.0 before 6.2.0.9 has unknown impact and attack vectors, aka APAR IV03050.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/45555; http://www-01.ibm.com/support/docview.wss?uid=swg1IV03050; http://www.ibm.com/support/docview.wss?uid=swg24029497
CVE: CVE-2011-3138
Published: 2011-08-12
Description: The LTPA STS module support implementation in IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.9 and Tivoli Federated Identity Manager Business Gateway (TFIMBG) 6.2.0 before 6.2.0.9 relies on a static instance of a Java Development Kit (JDK) class, which might allow attackers to bypass LTPA token signature verification by leveraging lack of thread safety.
CVSS Score: 5.0 (MEDIUM)
References: http://www-01.ibm.com/support/docview.wss?uid=swg1IV01318; http://www.ibm.com/support/docview.wss?uid=swg24029497; http://www.ibm.com/support/docview.wss?uid=swg24029498
CVE: CVE-2011-1583
Published: 2011-08-12
Description: Multiple integer overflows in tools/libxc/xc_dom_bzimageloader.c in Xen 3.2, 3.3, 4.0, and 4.1 allow local users to cause a denial of service and possibly execute arbitrary code via a crafted paravirtualised guest kernel image that triggers (1) a buffer overflow during a decompression loop or (2) an out-of-bounds read in the loader involving unspecified length fields.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-189
References: http://lists.xensource.com/archives/html/xen-devel/2011-05/msg00483.html; http://lists.xensource.com/archives/html/xen-devel/2011-05/msg00491.html; http://rhn.redhat.com/errata/RHSA-2011-0496.html
CVE: CVE-2011-1898
Published: 2011-08-12
Description: Xen 4.1 before 4.1.1 and 4.0 before 4.0.2, when using PCI passthrough on Intel VT-d chipsets that do not have interrupt remapping, allows guest OS users to gain host OS privileges by "using DMA to generate MSI interrupts by writing to the interrupt injection registers."
CVSS Score: 7.4 (HIGH)
CWE: CWE-264
References: http://lists.fedoraproject.org/pipermail/package-announce/2011-June/062112.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-June/062139.html; http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00017.html
CVE: CVE-2011-2357
Published: 2011-08-12
Description: Cross-application scripting vulnerability in the Browser URL loading functionality in Android 2.3.4 and 3.1 allows local applications to bypass the sandbox and execute arbitrary Javascript in arbitrary domains by (1) causing the MAX_TAB number of tabs to be opened, then loading a URI to the targeted domain into the current tab, or (2) making two startActivity function calls beginning with the targeted domain's URI followed by the malicious Javascript while the UI focus is still associated with the targeted domain.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://android.git.kernel.org/?p=platform/cts.git%3Ba=commit%3Bh=7e48fb87d48d27e65942b53b7918288c8d740e17; http://android.git.kernel.org/?p=platform/packages/apps/Browser.git%3B%20a=commit%3Bh=096bae248453abe83cbb2e5a2c744bd62cdb620b; http://android.git.kernel.org/?p=platform/packages/apps/Browser.git%3B%20a=commit%3Bh=afa4ab1e4c1d645e34bd408ce04cadfd2e5dae1e
CVE: CVE-2011-0527
Published: 2011-08-15
Description: VMware vFabric tc Server (aka SpringSource tc Server) 2.0.x before 2.0.6.RELEASE and 2.1.x before 2.1.2.RELEASE accepts obfuscated passwords during JMX authentication, which makes it easier for context-dependent attackers to obtain access by leveraging an ability to read stored passwords.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-287
References: http://archives.neohapsis.com/archives/fulldisclosure/2011-08/0122.html; http://securitytracker.com/id?1025923; http://www.securityfocus.com/bid/49122
CVE: CVE-2011-0550
Published: 2011-08-15
Description: Multiple cross-site scripting (XSS) vulnerabilities in the Web Interface in the Endpoint Protection Manager in Symantec Endpoint Protection (SEP) 11.0.600x through 11.0.6300 allow remote attackers to inject arbitrary web script or HTML via (1) the token parameter to portal/Help.jsp or (2) the URI in a console/apps/sepm request.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/43662; http://securitytracker.com/id?1025919; http://www.osvdb.org/74465
CVE: CVE-2011-0551
Published: 2011-08-15
Description: Cross-site request forgery (CSRF) vulnerability in the Web Interface in the Endpoint Protection Manager in Symantec Endpoint Protection (SEP) 11.0.600x through 11.0.6300 allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://secunia.com/advisories/43662; http://securitytracker.com/id?1025919; http://www.osvdb.org/74467
CVE: CVE-2011-2907
Published: 2011-08-15
Description: Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) 3.0.1 and earlier allows remote attackers to bypass host-based authentication and submit arbitrary jobs via a modified PBS_O_HOST variable to the qsub program.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: http://secunia.com/advisories/45524; http://www.clusterresources.com/pipermail/torqueusers/2011-August/013194.html; http://www.openwall.com/lists/oss-security/2011/08/11/1
CVE: CVE-2011-3011
Published: 2011-08-15
Description: BaseServiceImpl.class in CA ARCserve D2D r15 does not properly handle sessions, which allows remote attackers to obtain credentials, and consequently execute arbitrary commands, via unspecified vectors.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://securityreason.com/securityalert/8338; http://www.securityfocus.com/archive/1/519234/100/0/threaded; http://www.securityfocus.com/bid/48897
CVE: CVE-2011-0256
Published: 2011-08-15
Description: Integer overflow in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted track run atoms in a QuickTime movie file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: http://support.apple.com/kb/HT4826; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16097; http://support.apple.com/kb/HT4826
CVE: CVE-2011-0257
Published: 2011-08-15
Description: Integer signedness error in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PnSize opcode in a PICT file that triggers a stack-based buffer overflow.
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: http://securityreason.com/securityalert/8365; http://support.apple.com/kb/HT4826; http://www.exploit-db.com/exploits/17777
CVE: CVE-2011-2424
Published: 2011-08-15
Description: Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted SWF file, as demonstrated by "about 400 unique crash signatures."
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://blogs.adobe.com/asset/2011/08/how-did-you-get-to-that-number.html; http://googleonlinesecurity.blogspot.com/2011/08/fuzzing-at-scale.html; http://twitter.com/taviso/statuses/[PII_REDACTED]7521409
CVE: CVE-2011-2481
Published: 2011-08-15
Description: Apache Tomcat 7.0.x before 7.0.17 permits web applications to replace an XML parser used for other web applications, which allows local users to read or modify the (1) web.xml, (2) context.xml, or (3) tld files of arbitrary web applications via a crafted application that is loaded earlier than the target application.  NOTE: this vulnerability exists because of a CVE-2009-0783 regression.
CVSS Score: 4.6 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2337&w=2; http://secunia.com/advisories/57126; http://securitytracker.com/id?1025924
CVE: CVE-2011-2729
Published: 2011-08-15
Description: native/unix/native/jsvc-unix.c in jsvc in the Daemon component 1.0.3 through 1.0.6 in Apache Commons, as used in Apache Tomcat 5.5.32 through 5.5.33, 6.0.30 through 6.0.32, and 7.0.x before 7.0.20 on Linux, does not drop capabilities, which allows remote attackers to bypass read permissions for files via a request to an application.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://lists.opensuse.org/opensuse-security-announce/2011-09/msg00024.html; http://mail-archives.apache.org/mod_mbox/commons-dev/201108.mbox/%3C4E451B2B.9090108%40apache.org%3E; http://mail-archives.apache.org/mod_mbox/tomcat-announce/201108.mbox/%3C4E45221D.1020306%40apache.org%3E
CVE: CVE-2011-2748
Published: 2011-08-15
Description: The server in ISC DHCP 3.x and 4.x before 4.2.2, 3.1-ESV before 3.1-ESV-R3, and 4.1-ESV before 4.1-ESV-R3 allows remote attackers to cause a denial of service (daemon exit) via a crafted DHCP packet.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10761; http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065176.html; http://lists.opensuse.org/opensuse-updates/2011-09/msg00014.html
CVE: CVE-2011-2749
Published: 2011-08-15
Description: The server in ISC DHCP 3.x and 4.x before 4.2.2, 3.1-ESV before 3.1-ESV-R3, and 4.1-ESV before 4.1-ESV-R3 allows remote attackers to cause a denial of service (daemon exit) via a crafted BOOTP packet.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10761; http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065176.html; http://lists.opensuse.org/opensuse-updates/2011-09/msg00014.html
CVE: CVE-2011-3140
Published: 2011-08-15
Description: IBM Web Application Firewall, as used on the G400 IPS-G400-IB-1 and GX4004 IPS-GX4004-IB-2 appliances with update 31.030, does not properly handle query strings with multiple instances of the same parameter, which allows remote attackers to bypass intended intrusion prevention by dividing a dangerous parameter value into substrings, as demonstrated by a SQL statement that is split across multiple iid parameters and then sent to a .aspx file on an IIS web server.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://securityreason.com/securityalert/8339; http://securitytracker.com/id?1025683; http://www.iss.net/security_center/reference/vuln/HTTP_Parameter_Abuse.htm
CVE: CVE-2011-3141
Published: 2011-08-16
Description: Buffer overflow in the InBatch BatchField ActiveX control for Invensys Wonderware InBatch 8.1 SP1, 9.0, and 9.0 SP1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://iom.invensys.com/EN/pdfLibrary/Final.Tech.Alert.141.pdf; http://secunia.com/advisories/44336; http://www.osvdb.org/72182
CVE: CVE-2011-3142
Published: 2011-08-16
Description: Stack-based buffer overflow in an ActiveX control in KVWebSvr.dll in WellinTech KingView 6.52 and 6.53 allows remote attackers to execute arbitrary code via a long second argument to the ValidateUser method.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://www.cnvd.org.cn/vulnerability/CNVD-2011-04541; http://www.exploit-db.com/exploits/16936; http://www.kingview.com/news/detail.aspx?contentid=537
CVE: CVE-2011-3143
Published: 2011-08-16
Description: Use-after-free vulnerability in Control Microsystems ClearSCADA 2005, 2007, and 2009 before R2.3 and R1.4, as used in SCX before 67 R4.5 and 68 R3.9, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified long strings that trigger heap memory corruption.
CVSS Score: 10.0 (HIGH)
CWE: CWE-399
References: http://secunia.com/advisories/44955; http://www.digitalbond.com/scadapedia/vulnerability-notes/heap-overflow-vulnerability/; http://www.osvdb.org/72989
CVE: CVE-2011-3144
Published: 2011-08-16
Description: Cross-site scripting (XSS) vulnerability in Control Microsystems ClearSCADA 2005, 2007, and 2009 before R2.3 and R1.4, as used in SCX before 67 R4.5 and 68 R3.9, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/44955; http://www.digitalbond.com/scadapedia/vulnerability-notes/control-microsystems-cross-site-scripting-vulnerability/; http://www.osvdb.org/72987
CVE: CVE-2011-0084
Published: 2011-08-18
Description: The SVGTextElement.getCharNumAtPosition function in Mozilla Firefox before 3.6.20, and 4.x through 5; Thunderbird 3.x before 3.1.12 and other versions before 6; SeaMonkey 2.x before 2.3; and possibly other products does not properly handle SVG text, which allows remote attackers to execute arbitrary code via unspecified vectors that lead to a "dangling pointer."
CVSS Score: 10.0 (HIGH)
CWE: CWE-94
References: http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00023.html; http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00027.html; http://www.debian.org/security/2011/dsa-2295
CVE: CVE-2011-1624
Published: 2011-08-18
Description: Cisco IOS 12.2(58)SE, when a login banner is configured, allows remote attackers to cause a denial of service (device reload) by establishing two SSH2 sessions, aka Bug ID CSCto62631.
CVSS Score: 7.8 (HIGH)
CWE: CWE-399
References: http://www.cisco.com/en/US/docs/switches/lan/cisco_ie3000/software/release/12.2_58_se/release/notes/OL24335.html; https://supportforums.cisco.com/message/3356210; http://www.cisco.com/en/US/docs/switches/lan/cisco_ie3000/software/release/12.2_58_se/release/notes/OL24335.html
CVE: CVE-2011-1625
Published: 2011-08-18
Description: Cisco IOS 12.2, 12.3, 12.4, 15.0, and 15.1, when the data-link switching (DLSw) feature is configured, allows remote attackers to cause a denial of service (device crash) by sending a sequence of malformed packets and leveraging a "narrow timing window," aka Bug ID CSCtf74999, a different vulnerability than CVE-2007-0199, CVE-2008-1152, and CVE-2009-0629.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-362
References: http://www.cisco.com/en/US/docs/cable/cmts/release/notes/12_2sc/uBR7200/122_33_SCF/caveats.html; http://www.cisco.com/en/US/docs/cable/cmts/release/notes/12_2sc/uBR7200/122_33_SCF/caveats.html
CVE: CVE-2011-2378
Published: 2011-08-18
Description: The appendChild function in Mozilla Firefox before 3.6.20, Thunderbird 3.x before 3.1.12, SeaMonkey 2.x, and possibly other products does not properly handle DOM objects, which allows remote attackers to execute arbitrary code via unspecified vectors that lead to dereferencing of a "dangling pointer."
CVSS Score: 10.0 (HIGH)
CWE: CWE-94
References: http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00023.html; http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00027.html; http://www.debian.org/security/2011/dsa-2295
CVE: CVE-2011-2980
Published: 2011-08-18
Description: Untrusted search path vulnerability in the ThinkPadSensor::Startup function in Mozilla Firefox before 3.6.20, Thunderbird 3.x before 3.1.12, allows local users to gain privileges by leveraging write access in an unspecified directory to place a Trojan horse DLL that is loaded into the running Firefox process.
CVSS Score: 7.2 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00023.html; http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00027.html; http://www.mandriva.com/security/advisories?name=MDVSA-2011:127
CVE: CVE-2011-2981
Published: 2011-08-18
Description: The event-management implementation in Mozilla Firefox before 3.6.20, SeaMonkey 2.x, Thunderbird 3.x before 3.1.12, and possibly other products does not properly select the context for script to run in, which allows remote attackers to bypass the Same Origin Policy or execute arbitrary JavaScript code with chrome privileges via a crafted web site.
CVSS Score: 9.3 (HIGH)
CWE: CWE-16
References: http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00023.html; http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00027.html; http://www.debian.org/security/2011/dsa-2295
CVE: CVE-2011-2982
Published: 2011-08-18
Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.6.20, Thunderbird 2.x and 3.x before 3.1.12, SeaMonkey 1.x and 2.x, and possibly other products allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00023.html; http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00027.html; http://www.debian.org/security/2011/dsa-2295
CVE: CVE-2011-2983
Published: 2011-08-18
Description: Mozilla Firefox before 3.6.20, Thunderbird 2.x and 3.x before 3.1.12, SeaMonkey 1.x and 2.x, and possibly other products does not properly handle the RegExp.input property, which allows remote attackers to bypass the Same Origin Policy and read data from a different domain via a crafted web site, possibly related to a use-after-free.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00023.html; http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00027.html; http://www.debian.org/security/2011/dsa-2295
CVE: CVE-2011-2984
Published: 2011-08-18
Description: Mozilla Firefox before 3.6.20, SeaMonkey 2.x, Thunderbird 3.x before 3.1.12, and possibly other products does not properly handle the dropping of a tab element, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges by establishing a content area and registering for drop events.
CVSS Score: 10.0 (HIGH)
CWE: CWE-94
References: http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00023.html; http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00027.html; http://www.debian.org/security/2011/dsa-2295
CVE: CVE-2011-2985
Published: 2011-08-18
Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 5, Thunderbird before 6, SeaMonkey 2.x before 2.3, and possibly other products allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00023.html; http://secunia.com/advisories/49055; http://www.mozilla.org/security/announce/2011/mfsa2011-29.html
CVE: CVE-2011-2986
Published: 2011-08-18
Description: Mozilla Firefox 4.x through 5, Thunderbird before 6, SeaMonkey 2.x before 2.3, and possibly other products, when the Direct2D (aka D2D) API is used on Windows, allows remote attackers to bypass the Same Origin Policy, and obtain sensitive image data from a different domain, by inserting this data into a canvas.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00023.html; http://secunia.com/advisories/49055; http://www.mozilla.org/security/announce/2011/mfsa2011-29.html