deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2008-7176
Published: 2009-09-08
Description: Multiple directory traversal vulnerabilities in Facil CMS 0.1RC allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) change_lang parameter to index.php or (2) modload parameter to modules.php.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-22
References: http://www.securityfocus.com/bid/29692; https://exchange.xforce.ibmcloud.com/vulnerabilities/43037; https://www.exploit-db.com/exploits/5792
CVE: CVE-2008-7177
Published: 2009-09-08
Description: Buffer overflow in the listing module in Netwide Assembler (NASM) before 2.03.01 has unknown impact and attack vectors, a different vulnerability than CVE-2008-2719.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/30836; http://sourceforge.net/project/shownotes.php?release_id=607497; http://www.securityfocus.com/bid/29955
CVE: CVE-2008-7178
Published: 2009-09-08
Description: Directory traversal vulnerability in Uploader module 1.1 for XOOPS allows remote attackers to read arbitrary files via a .. (dot dot) in the filename parameter in a downloadfile action to index.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://www.securityfocus.com/bid/29600; https://exchange.xforce.ibmcloud.com/vulnerabilities/42925; https://www.exploit-db.com/exploits/5756
CVE: CVE-2008-7179
Published: 2009-09-08
Description: OTManager CMS 2.4 allows remote attackers to bypass authentication and gain administrator privileges by setting the ADMIN_Hora, ADMIN_Logado, and ADMIN_Nome cookies to certain values, as reachable in Admin/index.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: http://www.securityfocus.com/bid/29999; https://www.exploit-db.com/exploits/5959; http://www.securityfocus.com/bid/29999
CVE: CVE-2008-7180
Published: 2009-09-08
Description: del_query1.php in Telephone Directory 2008 allows remote attackers to delete arbitrary contacts via a direct request with a modified id variable.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/42973; https://www.exploit-db.com/exploits/5769; https://exchange.xforce.ibmcloud.com/vulnerabilities/42973
CVE: CVE-2008-7181
Published: 2009-09-08
Description: Butterfly Organizer 2.0.0 allows remote attackers to (1) delete arbitrary categories via a modified tablehere parameter to category-delete.php with the is_js_confirmed parameter set to 1, or (2) delete arbitrary accounts via the mytable parameter to delete.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/29703; https://exchange.xforce.ibmcloud.com/vulnerabilities/43067; https://www.exploit-db.com/exploits/5800
CVE: CVE-2008-7182
Published: 2009-09-08
Description: Buffer overflow in the IMAP service in NetWin Surgemail 3.9e, and possibly other versions before 3.9g2, allows remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via a long first argument to the APPEND command, a different vector than CVE-2008-1497 and CVE-2008-1498.  NOTE: due to lack of details, it is not certain whether this is the same issue as CVE-2008-2859.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-119
References: http://www.netwinsite.com/surgemail/help/updates.htm; http://www.securityfocus.com/archive/1/496482; http://www.securityfocus.com/bid/30000
CVE: CVE-2009-2346
Published: 2009-09-08
Description: The IAX2 protocol implementation in Asterisk Open Source 1.2.x before 1.2.35, 1.4.x before 1.4.26.2, 1.6.0.x before 1.6.0.15, and 1.6.1.x before 1.6.1.6; Business Edition B.x.x before B.2.5.10, C.2.x before C.2.4.3, and C.3.x before C.3.1.1; and s800i 1.3.x before 1.3.0.3 allows remote attackers to cause a denial of service (call-number exhaustion) by initiating many IAX2 message exchanges, a related issue to CVE-2008-3263.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://downloads.asterisk.org/pub/security/AST-2009-006.html; http://secunia.com/advisories/36593; http://securitytracker.com/id?1022819
CVE: CVE-2009-2701
Published: 2009-09-08
Description: Unspecified vulnerability in the Zope Enterprise Objects (ZEO) storage-server functionality in Zope Object Database (ZODB) 3.8 before 3.8.3 and 3.9.x before 3.9.0c2, when certain ZEO database sharing and blob support are enabled, allows remote authenticated users to read or delete arbitrary files via unknown vectors.
CVSS Score: 6.0 (MEDIUM)
References: http://pypi.python.org/pypi/ZODB3/3.8.3; http://pypi.python.org/pypi/ZODB3/3.9.0c2; http://www.vupen.com/english/advisories/2009/2534
CVE: CVE-2009-2702
Published: 2009-09-08
Description: KDE KSSL in kdelibs 3.5.4, 4.2.4, and 4.3 does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.
CVSS Score: 7.5 (HIGH)
CWE: CWE-310
References: http://secunia.com/advisories/36468; http://www.mandriva.com/security/advisories?name=MDVSA-2009:330; http://www.mandriva.com/security/advisories?name=MDVSA-2011:162
CVE: CVE-2009-2703
Published: 2009-09-08
Description: libpurple/protocols/irc/msgs.c in the IRC protocol plugin in libpurple in Pidgin before 2.6.2 allows remote IRC servers to cause a denial of service (NULL pointer dereference and application crash) via a TOPIC message that lacks a topic string.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://developer.pidgin.im/viewmtn/revision/info/ad2c6ee53ec9122b25aeb1f918db53be69bdeac3; http://secunia.com/advisories/36601; http://www.pidgin.im/news/security/index.php?id=40
CVE: CVE-2009-3009
Published: 2009-09-08
Description: Cross-site scripting (XSS) vulnerability in Ruby on Rails 2.x before 2.2.3, and 2.3.x before 2.3.4, allows remote attackers to inject arbitrary web script or HTML by placing malformed Unicode strings into a form helper.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=545063; http://groups.google.com/group/rubyonrails-security/msg/7f57cd7794e1d1b4?dmode=source; http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html
CVE: CVE-2009-3083
Published: 2009-09-08
Description: The msn_slp_sip_recv function in libpurple/protocols/msn/slp.c in the MSN protocol plugin in libpurple in Pidgin before 2.6.2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an SLP invite message that lacks certain required fields, as demonstrated by a malformed message from a KMess client.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://developer.pidgin.im/ticket/10159; http://developer.pidgin.im/viewmtn/revision/diff/6d3fc30a0a0a379281efc5a6872a9c1d7c24c650/with/b4a95ea62b81a06ffc[PII_REDACTED]c511b786efdd/libpurple/protocols/msn/slp.c; http://developer.pidgin.im/viewmtn/revision/info/b4a95ea62b81a06ffc[PII_REDACTED]c511b786efdd
CVE: CVE-2009-3084
Published: 2009-09-08
Description: The msn_slp_process_msg function in libpurple/protocols/msn/slpcall.c in the MSN protocol plugin in libpurple 2.6.0 and 2.6.1, as used in Pidgin before 2.6.2, allows remote attackers to cause a denial of service (application crash) via a handwritten (aka Ink) message, related to an uninitialized variable and the incorrect "UTF16-LE" charset name.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://developer.pidgin.im/viewmtn/revision/diff/92ce3e48744b40fb0fea89e3de5e44bedb100c07/with/567e16cbc46168f52482e5ec27626c48e7a5ba95/libpurple/protocols/msn/slpcall.c; http://developer.pidgin.im/viewmtn/revision/info/567e16cbc46168f52482e5ec27626c48e7a5ba95; http://secunia.com/advisories/36601
CVE: CVE-2009-3085
Published: 2009-09-08
Description: The XMPP protocol plugin in libpurple in Pidgin before 2.6.2 does not properly handle an error IQ stanza during an attempted fetch of a custom smiley, which allows remote attackers to cause a denial of service (application crash) via XHTML-IM content with cid: images.
CVSS Score: 5.0 (MEDIUM)
References: http://developer.pidgin.im/viewmtn/revision/info/fd5955618eddcd84d522b30ff11102f9601f38c8; http://secunia.com/advisories/36601; http://www.pidgin.im/news/security/index.php?id=37
CVE: CVE-2009-3086
Published: 2009-09-08
Description: A certain algorithm in Ruby on Rails 2.1.0 through 2.2.2, and 2.3.x before 2.3.4, leaks information about the complexity of message-digest signature verification in the cookie store, which might allow remote attackers to forge a digest via multiple attempts.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html; http://secunia.com/advisories/36600; http://weblog.rubyonrails.org/2009/9/4/timing-weakness-in-ruby-on-rails
CVE: CVE-2009-3087
Published: 2009-09-08
Description: Unspecified vulnerability in nserver.exe in the server in IBM Lotus Domino 8.0 on Windows Server 2003 allows remote attackers to cause a denial of service (daemon crash) via unknown vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.11.  NOTE: as of 20090903, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes.
CVSS Score: 5.0 (MEDIUM)
References: http://intevydis.com/vd-list.shtml; http://secunia.com/advisories/36556; http://intevydis.com/vd-list.shtml
CVE: CVE-2009-3088
Published: 2009-09-08
Description: Heap-based buffer overflow in ibmdiradm in IBM Tivoli Directory Server (TDS) 6.0 on Linux allows remote attackers to have an unspecified impact via unknown vectors that trigger heap corruption, as demonstrated by a certain module in VulnDisco Pack Professional 8.11. NOTE: as of 20090903, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://intevydis.com/vd-list.shtml; http://secunia.com/advisories/36565; http://intevydis.com/vd-list.shtml
CVE: CVE-2009-3089
Published: 2009-09-08
Description: IBM Tivoli Directory Server (TDS) 6.0 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via unspecified vectors, related to (1) the ibmslapd.exe daemon on Windows and (2) the ibmdiradm daemon in the administration server on Linux, as demonstrated by certain modules in VulnDisco Pack Professional 8.11, a different vulnerability than CVE-2006-0717.  NOTE: as of 20090903, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes.
CVSS Score: 7.8 (HIGH)
References: http://intevydis.com/vd-list.shtml; http://secunia.com/advisories/36565; http://intevydis.com/vd-list.shtml
CVE: CVE-2009-3090
Published: 2009-09-08
Description: Unspecified vulnerability in IBM Tivoli Directory Server (TDS) 6.0 on Linux allows remote attackers to cause a denial of service via unknown vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.11.  NOTE: as of 20090903, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes.
CVSS Score: 5.0 (MEDIUM)
References: http://intevydis.com/vd-list.shtml; http://secunia.com/advisories/36565; http://intevydis.com/vd-list.shtml
CVE: CVE-2009-3091
Published: 2009-09-08
Description: Unspecified vulnerability on the ASUS WL-330gE has unknown impact and remote attack vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.11.  NOTE: as of 20090903, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes.
CVSS Score: 10.0 (HIGH)
References: http://intevydis.com/vd-list.shtml; http://intevydis.com/vd-list.shtml
CVE: CVE-2009-3092
Published: 2009-09-08
Description: Buffer overflow on the ASUS WL-500W wireless router has unknown impact and remote attack vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.11.  NOTE: as of 20090903, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes.
CVSS Score: 10.0 (HIGH)
References: http://intevydis.com/vd-list.shtml; http://secunia.com/advisories/36439; http://www.securityfocus.com/bid/36236
CVE: CVE-2009-3093
Published: 2009-09-08
Description: Unspecified vulnerability on the ASUS WL-500W wireless router has unknown impact and remote attack vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.11.  NOTE: as of 20090903, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes.
CVSS Score: 10.0 (HIGH)
References: http://intevydis.com/vd-list.shtml; http://secunia.com/advisories/36439; http://www.securityfocus.com/bid/36236
CVE: CVE-2009-3094
Published: 2009-09-08
Description: The ap_proxy_ftp_handler function in modules/proxy/proxy_ftp.c in the mod_proxy_ftp module in the Apache HTTP Server 2.0.63 and 2.2.13 allows remote FTP servers to cause a denial of service (NULL pointer dereference and child process crash) via a malformed reply to an EPSV command.
CVSS Score: 2.6 (LOW)
CWE: CWE-476
References: http://intevydis.com/vd-list.shtml; http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00006.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2511&w=2
CVE: CVE-2009-3095
Published: 2009-09-08
Description: The mod_proxy_ftp module in the Apache HTTP Server allows remote attackers to bypass intended access restrictions and send arbitrary commands to an FTP server via vectors related to the embedding of these commands in the Authorization HTTP header, as demonstrated by a certain module in VulnDisco Pack Professional 8.11.
CVSS Score: 5.0 (MEDIUM)
References: http://intevydis.com/vd-list.shtml; http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html; http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00006.html
CVE: CVE-2009-3096
Published: 2009-09-08
Description: Multiple unspecified vulnerabilities in HP Performance Insight 5.3 allow remote attackers to have an unknown impact, related to (1) a "Remote exploit" on Windows platforms, and (2) a "Remote preauthentication exploit" on the Windows Server 2003 SP2 platform, as demonstrated by certain modules in VulnDisco Pack Professional 8.11. NOTE: as of 20090903, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes.
CVSS Score: 10.0 (HIGH)
References: http://intevydis.com/vd-list.shtml; http://secunia.com/advisories/36520; http://intevydis.com/vd-list.shtml
CVE: CVE-2009-3097
Published: 2009-09-08
Description: Multiple unspecified vulnerabilities in HP Performance Insight 5.3 on Windows allow attackers to obtain sensitive information via unknown vectors, as demonstrated by certain modules in VulnDisco Pack Professional 8.11.  NOTE: as of 20090903, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes.
CVSS Score: 7.8 (HIGH)
CWE: CWE-200
References: http://intevydis.com/vd-list.shtml; http://secunia.com/advisories/36520; http://intevydis.com/vd-list.shtml
CVE: CVE-2009-3098
Published: 2009-09-08
Description: Unspecified vulnerability in the Portal in HP Operations Dashboard 2.1 on Windows Server 2003 SP2 allows remote attackers to have an unknown impact, related to a "Remote exploit," as demonstrated by a certain module in VulnDisco Pack Professional 8.11.  NOTE: as of 20090903, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes.
CVSS Score: 10.0 (HIGH)
References: http://intevydis.com/vd-list.shtml; http://secunia.com/advisories/36535; http://intevydis.com/vd-list.shtml
CVE: CVE-2009-3099
Published: 2009-09-08
Description: Unspecified vulnerability in HP OpenView Operations Manager 8.1 on Windows Server 2003 SP2 allows remote attackers to have an unknown impact, related to a "Remote exploit," as demonstrated by a certain module in VulnDisco Pack Professional 8.11, a different vulnerability than CVE-2007-3872.  NOTE: as of 20090903, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes.
CVSS Score: 10.0 (HIGH)
References: http://intevydis.com/vd-list.shtml; http://secunia.com/advisories/36541; http://intevydis.com/vd-list.shtml
CVE: CVE-2009-3100
Published: 2009-09-08
Description: xscreensaver (aka Gnome-XScreenSaver) in Sun Solaris 9 and 10, OpenSolaris snv_109 through snv_122, and X11 6.4.1 on Solaris 8 does not properly handle Accessibility support, which allows local users to cause a denial of service (system hang) by locking the screen and then attempting to launch an Accessibility pop-up window, related to a regression in certain Solaris and OpenSolaris patches.
CVSS Score: 4.0 (MEDIUM)
References: http://bugs.opensolaris.org/view_bug.do?bug_id=6839026; http://sunsolve.sun.com/search/document.do?assetkey=1-66-266469-1; http://bugs.opensolaris.org/view_bug.do?bug_id=6839026
CVE: CVE-2009-3101
Published: 2009-09-08
Description: xscreensaver (aka Gnome-XScreenSaver) in Sun Solaris 10, and OpenSolaris snv_109 through snv_122, does not properly handle Trusted Extensions, which allows local users to cause a denial of service (CPU consumption and console hang) by locking the screen, related to a regression in certain Solaris and OpenSolaris patches.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-399
References: http://bugs.opensolaris.org/view_bug.do?bug_id=6839026; http://sunsolve.sun.com/search/document.do?assetkey=1-66-266469-1; http://bugs.opensolaris.org/view_bug.do?bug_id=6839026
CVE: CVE-2009-3102
Published: 2009-09-08
Description: The doHotCopy subroutine in socket-server.pl in Zmanda Recovery Manager (ZRM) for MySQL 2.x before 2.1.1 allows remote attackers to execute arbitrary commands via vectors involving a crafted $MYSQL_BINPATH variable.
CVSS Score: 10.0 (HIGH)
CWE: CWE-20
References: http://forums.zmanda.com/showthread.php?p=8068; http://secunia.com/advisories/36424; http://secunia.com/advisories/36429
CVE: CVE-2009-0199
Published: 2009-09-08
Description: Heap-based buffer overflow in the VMnc media codec in vmnc.dll in VMware Movie Decoder before 6.5.3 build 185404, VMware Workstation 6.5.x before 6.5.3 build 185404, VMware Player 2.5.x before 2.5.3 build 185404, and VMware ACE 2.5.x before 2.5.3 build 185404 on Windows might allow remote attackers to execute arbitrary code via a video file with crafted dimensions (aka framebuffer parameters).
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.vmware.com/pipermail/security-announce/2009/000065.html; http://secunia.com/advisories/34938; http://secunia.com/secunia_research/2009-25/
CVE: CVE-2009-1132
Published: 2009-09-08
Description: Heap-based buffer overflow in the Wireless LAN AutoConfig Service (aka Wlansvc) in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via a malformed wireless frame, aka "Wireless Frame Parsing Remote Code Execution Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.us-cert.gov/cas/techalerts/TA09-251A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-049; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6389
CVE: CVE-2009-1920
Published: 2009-09-08
Description: The JScript scripting engine 5.1, 5.6, 5.7, and 5.8 in JScript.dll in Microsoft Windows, as used in Internet Explorer, does not properly load decoded scripts into memory before execution, which allows remote attackers to execute arbitrary code via a crafted web site that triggers memory corruption, aka "JScript Remote Code Execution Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://www.us-cert.gov/cas/techalerts/TA09-251A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-045; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6316
CVE: CVE-2009-1925
Published: 2009-09-08
Description: The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 does not properly manage state information, which allows remote attackers to execute arbitrary code by sending packets to a listening service, and thereby triggering misinterpretation of an unspecified field as a function pointer, aka "TCP/IP Timestamps Code Execution Vulnerability."
CVSS Score: 10.0 (HIGH)
CWE: CWE-94
References: http://www.us-cert.gov/cas/techalerts/TA09-251A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-048; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6374
CVE: CVE-2009-1926
Published: 2009-09-08
Description: Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allow remote attackers to cause a denial of service (TCP outage) via a series of TCP sessions that have pending data and a (1) small or (2) zero receive window size, and remain in the FIN-WAIT-1 or FIN-WAIT-2 state indefinitely, aka "TCP/IP Orphaned Connections Vulnerability."
CVSS Score: 7.8 (HIGH)
References: http://osvdb.org/57797; http://www.recurity-labs.com/content/pub/Microsoft_Windows_CVE-2009-1926; http://www.securityfocus.com/archive/1/506331/100/0/threaded
CVE: CVE-2009-2498
Published: 2009-09-08
Description: Microsoft Windows Media Format Runtime 9.0, 9.5, and 11 and Windows Media Services 9.1 and 2008 do not properly parse malformed headers in Advanced Systems Format (ASF) files, which allows remote attackers to execute arbitrary code via a crafted (1) .asf, (2) .wmv, or (3) .wma file, aka "Windows Media Header Parsing Invalid Free Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://www.us-cert.gov/cas/techalerts/TA09-251A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-047; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6257
CVE: CVE-2009-2499
Published: 2009-09-08
Description: Microsoft Windows Media Format Runtime 9.0, 9.5, and 11; and Microsoft Media Foundation on Windows Vista Gold, SP1, and SP2 and Server 2008; allows remote attackers to execute arbitrary code via an MP3 file with crafted metadata that triggers memory corruption, aka "Windows Media Playback Memory Corruption Vulnerability."
CVSS Score: 8.5 (HIGH)
CWE: CWE-94
References: http://www.us-cert.gov/cas/techalerts/TA09-251A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-047; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5531
CVE: CVE-2009-2519
Published: 2009-09-08
Description: The DHTML Editing Component ActiveX control in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not properly format HTML markup, which allows remote attackers to execute arbitrary code via a crafted web site that triggers "system state" corruption, aka "DHTML Editing Component ActiveX Control Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://secunia.com/advisories/36592; http://www.securityfocus.com/bid/36280; http://www.securitytracker.com/id?1022843