deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2010-1882
Published: 2010-08-11
Description: Multiple buffer overflows in the MPEG Layer-3 Audio Codec for Microsoft DirectShow in l3codecx.ax in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allow remote attackers to execute arbitrary code via an MPEG Layer-3 audio stream in (1) a crafted media file or (2) crafted streaming content, aka "MPEG Layer-3 Audio Decoder Buffer Overflow Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.us-cert.gov/cas/techalerts/TA10-222A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-052; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11585
CVE: CVE-2010-1887
Published: 2010-08-11
Description: The Windows kernel-mode drivers in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 do not properly validate an unspecified system-call argument, which allows local users to cause a denial of service (system hang) via a crafted application, aka "Win32k Bounds Checking Vulnerability."
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-20
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-048; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11020; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-048
CVE: CVE-2010-1888
Published: 2010-08-11
Description: Race condition in the kernel in Microsoft Windows XP SP3 allows local users to gain privileges via vectors involving thread creation, aka "Windows Kernel Data Initialization Vulnerability."
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-362
References: http://www.us-cert.gov/cas/techalerts/TA10-222A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-047; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11825
CVE: CVE-2010-1889
Published: 2010-08-11
Description: Double free vulnerability in the kernel in Microsoft Windows Vista SP1 and SP2, and Windows Server 2008 Gold and SP2, allows local users to gain privileges via a crafted application, related to object initialization during error handling, aka "Windows Kernel Double Free Vulnerability."
CVSS Score: 7.8 (HIGH)
CWE: CWE-399
References: http://www.us-cert.gov/cas/techalerts/TA10-222A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-047; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11044
CVE: CVE-2010-1890
Published: 2010-08-11
Description: The kernel in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate ACLs on kernel objects, which allows local users to cause a denial of service (reboot) via a crafted application, aka "Windows Kernel Improper Validation Vulnerability."
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-20
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-047; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11789; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-047
CVE: CVE-2010-1892
Published: 2010-08-11
Description: The TCP/IP stack in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly handle malformed IPv6 packets, which allows remote attackers to cause a denial of service (system hang) via multiple crafted packets, aka "IPv6 Memory Corruption Vulnerability."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.us-cert.gov/cas/techalerts/TA10-222A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-058; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11845
CVE: CVE-2010-1893
Published: 2010-08-11
Description: Integer overflow in the TCP/IP stack in Microsoft Windows Vista SP1, Windows Server 2008 Gold and R2, and Windows 7 allows local users to gain privileges via a buffer of user-mode data that is copied to kernel mode, aka "Integer Overflow in Windows Networking Vulnerability."
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-189
References: http://www.us-cert.gov/cas/techalerts/TA10-222A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-058; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12087
CVE: CVE-2010-1894
Published: 2010-08-11
Description: The Windows kernel-mode drivers in win32k.sys in Microsoft Windows XP SP2 and SP3, and Windows Server 2003 SP2, do not properly handle unspecified exceptions, which allows local users to gain privileges via a crafted application, aka "Win32k Exception Handling Vulnerability."
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://www.us-cert.gov/cas/techalerts/TA10-222A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-048; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11769
CVE: CVE-2010-1895
Published: 2010-08-11
Description: The Windows kernel-mode drivers in win32k.sys in Microsoft Windows XP SP2 and SP3, and Windows Server 2003 SP2, do not properly perform memory allocation before copying user-mode data to kernel mode, which allows local users to gain privileges via a crafted application, aka "Win32k Pool Overflow Vulnerability."
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://www.us-cert.gov/cas/techalerts/TA10-222A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-048; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11844
CVE: CVE-2010-1896
Published: 2010-08-11
Description: The Windows kernel-mode drivers in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, and Windows Server 2008 Gold and SP2 do not properly validate user-mode input passed to kernel mode, which allows local users to gain privileges via a crafted application, aka "Win32k User Input Validation Vulnerability."
CVSS Score: 8.4 (HIGH)
CWE: CWE-20
References: http://www.us-cert.gov/cas/techalerts/TA10-222A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-048; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12006
CVE: CVE-2010-1897
Published: 2010-08-11
Description: The Windows kernel-mode drivers in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 do not properly validate pseudo-handle values in callback parameters during window creation, which allows local users to gain privileges via a crafted application, aka "Win32k Window Creation Vulnerability."
CVSS Score: 7.2 (HIGH)
CWE: CWE-20
References: http://www.us-cert.gov/cas/techalerts/TA10-222A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-048; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11663
CVE: CVE-2010-1898
Published: 2010-08-11
Description: The Common Language Runtime (CLR) in Microsoft .NET Framework 2.0 SP1, 2.0 SP2, 3.5, 3.5 SP1, and 3.5.1, and Microsoft Silverlight 2 and 3 before 3.0.50611.0 on Windows and before 3.0.41130.0 on Mac OS X, does not properly handle interfaces and delegations to virtual methods, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET application, or (3) a crafted .NET Framework application, aka "Microsoft Silverlight and Microsoft .NET Framework CLR Virtual Method Delegate Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://www.us-cert.gov/cas/techalerts/TA10-222A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-060; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12033
CVE: CVE-2010-1900
Published: 2010-08-11
Description: Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP2; Microsoft Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Word Viewer; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2; and Works 9 do not properly handle malformed records in a Word file, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted file, aka "Word Record Parsing Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://www.us-cert.gov/cas/techalerts/TA10-222A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-056; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11490
CVE: CVE-2010-1901
Published: 2010-08-11
Description: Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP2; Microsoft Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Word Viewer; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 do not properly handle unspecified properties in rich text data, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted RTF document, aka "Word RTF Parsing Engine Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://www.us-cert.gov/cas/techalerts/TA10-222A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-056; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11612
CVE: CVE-2010-1902
Published: 2010-08-11
Description: Buffer overflow in Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP2; Microsoft Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Word Viewer; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 allows remote attackers to execute arbitrary code via unspecified properties in the data in a crafted RTF document, aka "Word RTF Parsing Buffer Overflow Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.us-cert.gov/cas/techalerts/TA10-222A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-056; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11472
CVE: CVE-2010-1903
Published: 2010-08-11
Description: Microsoft Office Word 2002 SP3 and 2003 SP3, and Office Word Viewer, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a malformed record in a Word file, aka "Word HTML Linked Objects Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://www.us-cert.gov/cas/techalerts/TA10-222A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-056; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12039
CVE: CVE-2010-2213
Published: 2010-08-11
Description: Adobe Flash Player before 9.0.280 and 10.x before 10.1.82.76, and Adobe AIR before 2.0.3, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2010-0209, CVE-2010-2214, and CVE-2010-2216.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2751&w=2; http://secunia.com/advisories/43026
CVE: CVE-2010-2214
Published: 2010-08-11
Description: Adobe Flash Player before 9.0.280 and 10.x before 10.1.82.76, and Adobe AIR before 2.0.3, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2010-0209, CVE-2010-2213, and CVE-2010-2216.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2751&w=2; http://secunia.com/advisories/43026
CVE: CVE-2010-2215
Published: 2010-08-11
Description: Adobe Flash Player before 9.0.280 and 10.x before 10.1.82.76, and Adobe AIR before 2.0.3, allows attackers to trick a user into (1) selecting a link or (2) completing a dialog, related to a "click-jacking" issue.
CVSS Score: 4.3 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2751&w=2; http://secunia.com/advisories/43026
CVE: CVE-2010-2216
Published: 2010-08-11
Description: Adobe Flash Player before 9.0.280 and 10.x before 10.1.82.76, and Adobe AIR before 2.0.3, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2010-0209, CVE-2010-2213, and CVE-2010-2214.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2751&w=2; http://secunia.com/advisories/43026
CVE: CVE-2010-2217
Published: 2010-08-11
Description: Adobe Flash Media Server (FMS) before 3.0.6, and 3.5.x before 3.5.4, allows attackers to execute arbitrary code via unspecified vectors, related to a "JS method vulnerability."
CVSS Score: 10.0 (HIGH)
CWE: CWE-94
References: http://www.adobe.com/support/security/bulletins/apsb10-19.html; http://www.adobe.com/support/security/bulletins/apsb10-19.html
CVE: CVE-2010-2218
Published: 2010-08-11
Description: Adobe Flash Media Server (FMS) before 3.0.6, and 3.5.x before 3.5.4, allows attackers to cause a denial of service via unspecified vectors, related to a "JS method issue."
CVSS Score: 5.0 (MEDIUM)
References: http://www.adobe.com/support/security/bulletins/apsb10-19.html; http://www.adobe.com/support/security/bulletins/apsb10-19.html
CVE: CVE-2010-2219
Published: 2010-08-11
Description: Unspecified vulnerability in Adobe Flash Media Server (FMS) before 3.0.6, and 3.5.x before 3.5.4, allows attackers to cause a denial of service (memory consumption) via unknown vectors.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://www.adobe.com/support/security/bulletins/apsb10-19.html; http://www.adobe.com/support/security/bulletins/apsb10-19.html
CVE: CVE-2010-2220
Published: 2010-08-11
Description: Adobe Flash Media Server (FMS) before 3.0.6, and 3.5.x before 3.5.4, allows attackers to cause a denial of service via unspecified vectors, related to an "input validation issue."
CVSS Score: 5.0 (MEDIUM)
References: http://www.adobe.com/support/security/bulletins/apsb10-19.html; http://www.adobe.com/support/security/bulletins/apsb10-19.html
CVE: CVE-2010-2542
Published: 2010-08-11
Description: Stack-based buffer overflow in the is_git_directory function in setup.c in Git before 1.7.2.1 allows local users to gain privileges via a long gitdir: field in a .git file in a working copy.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: http://git.kernel.org/?p=git/git.git%3Ba=commit%3Bh=3c9d0414ed2db0167e6c828b547be8fc9f88fccc; http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00004.html; http://secunia.com/advisories/43457
CVE: CVE-2010-2550
Published: 2010-08-11
Description: The SMB Server in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate fields in an SMB request, which allows remote attackers to execute arbitrary code via a crafted SMB packet, aka "SMB Pool Overflow Vulnerability."
CVSS Score: 10.0 (HIGH)
CWE: CWE-20
References: http://www.us-cert.gov/cas/techalerts/TA10-222A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-054; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11106
CVE: CVE-2010-2551
Published: 2010-08-11
Description: The SMB Server in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate an internal variable in an SMB packet, which allows remote attackers to cause a denial of service (system hang) via a crafted (1) SMBv1 or (2) SMBv2 packet, aka "SMB Variable Validation Vulnerability."
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://www.us-cert.gov/cas/techalerts/TA10-222A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-054; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12015
CVE: CVE-2010-2552
Published: 2010-08-11
Description: Stack consumption vulnerability in the SMB Server in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows remote attackers to cause a denial of service (system hang) via a malformed SMBv2 compounded request, aka "SMB Stack Exhaustion Vulnerability."
CVSS Score: 7.8 (HIGH)
CWE: CWE-399
References: http://www.us-cert.gov/cas/techalerts/TA10-222A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-054; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12072
CVE: CVE-2010-2553
Published: 2010-08-11
Description: The Cinepak codec in Microsoft Windows XP SP2 and SP3, Windows Vista SP1 and SP2, and Windows 7 does not properly decompress media files, which allows remote attackers to execute arbitrary code via a crafted file, aka "Cinepak Codec Decompression Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://www.us-cert.gov/cas/techalerts/TA10-222A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-055; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11773
CVE: CVE-2010-2554
Published: 2010-08-11
Description: The Tracing Feature for Services in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 has incorrect ACLs on its registry keys, which allows local users to gain privileges via vectors involving a named pipe and impersonation, aka "Tracing Registry Key ACL Vulnerability."
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-059; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12082; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-059
CVE: CVE-2010-2555
Published: 2010-08-11
Description: The Tracing Feature for Services in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly determine the length of strings in the registry, which allows local users to gain privileges or cause a denial of service (memory corruption) via vectors involving a long string, aka "Tracing Memory Corruption Vulnerability."
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-264
References: http://www.us-cert.gov/cas/techalerts/TA10-222A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-059; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11426
CVE: CVE-2010-2556
Published: 2010-08-11
Description: Microsoft Internet Explorer 6, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "Uninitialized Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-908
References: http://www.us-cert.gov/cas/techalerts/TA10-222A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-053; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11994
CVE: CVE-2010-2557
Published: 2010-08-11
Description: Microsoft Internet Explorer 6 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "Uninitialized Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-908
References: http://www.us-cert.gov/cas/techalerts/TA10-222A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-053; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11968
CVE: CVE-2010-2558
Published: 2010-08-11
Description: Race condition in Microsoft Internet Explorer 6, 7, and 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via vectors related to an object in memory, aka "Race Condition Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-362
References: http://www.us-cert.gov/cas/techalerts/TA10-222A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-053; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11853
CVE: CVE-2010-2559
Published: 2010-08-11
Description: Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "Uninitialized Memory Corruption Vulnerability," a different vulnerability than CVE-2009-3671, CVE-2009-3674, CVE-2010-0245, and CVE-2010-0246.
CVSS Score: 9.3 (HIGH)
CWE: CWE-908
References: http://www.us-cert.gov/cas/techalerts/TA10-222A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-053; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11984
CVE: CVE-2010-2560
Published: 2010-08-11
Description: Microsoft Internet Explorer 6, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "HTML Layout Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-787
References: http://www.us-cert.gov/cas/techalerts/TA10-222A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-053; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11832
CVE: CVE-2010-2561
Published: 2010-08-11
Description: Microsoft XML Core Services (aka MSXML) 3.0 does not properly handle HTTP responses, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted response, aka "Msxml2.XMLHTTP.3.0 Response Handling Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://www.us-cert.gov/cas/techalerts/TA10-222A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-051; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11730
CVE: CVE-2010-2562
Published: 2010-08-11
Description: Microsoft Office Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly parse the Excel file format, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Excel file, aka "Excel Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://www.us-cert.gov/cas/techalerts/TA10-222A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-057; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12088
CVE: CVE-2010-2564
Published: 2010-08-11
Description: Buffer overflow in Microsoft Windows Movie Maker (WMM) 2.1, 2.6, and 6.0 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted project file, aka "Movie Maker Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://www.us-cert.gov/cas/techalerts/TA10-222A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-050; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12011