deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2009-3812
Published: 2009-10-27
Description: Heap-based buffer overflow in OtsAV DJ trial version 1.85.64.0, Radio trial version 1.85.64.0, TV trial version 1.85.64.0, and Free version 1.77.001 allows remote attackers to execute arbitrary code via a long playlist in an Ots File List (.ofl) file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://osvdb.org/55747; http://packetstormsecurity.org/0907-exploits/otsav-overflow.txt; http://secunia.com/advisories/35738
CVE: CVE-2009-3813
Published: 2009-10-27
Description: Multiple SQL injection vulnerabilities in RunCMS 2M1 allow remote authenticated users to execute arbitrary SQL commands via the (1) forum parameter to modules/forum/post.php and possibly (2) forum_id variable to modules/forum/class/class.permissions.php.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: http://retrogod.altervista.org/9sg_runcms_forum_sql.html; http://secunia.com/advisories/37137; http://retrogod.altervista.org/9sg_runcms_forum_sql.html
CVE: CVE-2009-3814
Published: 2009-10-27
Description: Static code injection vulnerability in RunCMS 2M1 allows remote authenticated administrators to execute arbitrary PHP code via the "Filter/Banning" feature, as demonstrated by modifying modules/system/cache/bademails.php using the "Prohibited: Emails" action, and other unspecified filters.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-94
References: http://retrogod.altervista.org/9sg_runcms_forum_sql.html; http://retrogod.altervista.org/9sg_runcms_forum_sql.html
CVE: CVE-2009-3815
Published: 2009-10-27
Description: RunCMS 2M1, when running with certain error_reporting levels, allows remote attackers to obtain sensitive information via (1) the op[] parameter to modules/contact/index.php or (2) uid[] parameter to userinfo.php, which leaks the installation path in an error message when these parameters are used in a call to the preg_match function.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://retrogod.altervista.org/9sg_runcms_forum_sql.html; http://retrogod.altervista.org/9sg_runcms_forum_sql.html
CVE: CVE-2009-3816
Published: 2009-10-28
Description: Multiple cross-site scripting (XSS) vulnerabilities in Activities pages in the Mobile subsystem in IBM Lotus Connections 2.5.0.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/37106; http://www-01.ibm.com/support/docview.wss?uid=swg24024303; http://www-1.ibm.com/support/docview.wss?uid=swg1LO43637
CVE: CVE-2009-3817
Published: 2009-10-28
Description: PHP remote file inclusion vulnerability in doc/releasenote.php in the BookLibrary (com_booklibrary) component 1.0 for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter, a different vector than CVE-2009-2637.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://www.securityfocus.com/bid/36732; http://www.securityfocus.com/bid/36732/exploit; http://www.vupen.com/english/advisories/2009/2969
CVE: CVE-2009-3818
Published: 2009-10-28
Description: Unspecified vulnerability in the session handling feature in freeCap CAPTCHA (sr_freecap) extension 1.2.0 and earlier for TYPO3 has unknown impact and attack vectors.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/37094; http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-014/; http://secunia.com/advisories/37094
CVE: CVE-2009-3819
Published: 2009-10-28
Description: Unspecified vulnerability in the Random Images (maag_randomimage) extension 1.6.4 and earlier for TYPO3 allows remote attackers to execute arbitrary shell commands via unspecified vectors.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/37095; http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-014/; http://secunia.com/advisories/37095
CVE: CVE-2009-3820
Published: 2009-10-28
Description: SQL injection vulnerability in the Flagbit Filebase (fb_filebase) extension 0.1.0 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-014/; http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-014/
CVE: CVE-2009-3821
Published: 2009-10-28
Description: Cross-site scripting (XSS) vulnerability in the Apache Solr Search (solr) extension 1.0.0 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-014/; http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-014/
CVE: CVE-2009-3822
Published: 2009-10-28
Description: PHP remote file inclusion vulnerability in Fiji Web Design Ajax Chat (com_ajaxchat) component 1.0 for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[mosConfig_absolute_path] parameter to tests/ajcuser.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://secunia.com/advisories/37087; http://www.packetstormsecurity.org/0910-exploits/joomlaajaxchat-rfi.txt; http://www.securityfocus.com/bid/36731
CVE: CVE-2009-3823
Published: 2009-10-28
Description: Directory traversal vulnerability in myhtml.php in Mobilelib GOLD 3.0, when magic_quotes_gpc is enabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the GLOBALS[page] parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-22
References: http://www.exploit-db.com/exploits/9144; https://exchange.xforce.ibmcloud.com/vulnerabilities/51713; http://www.exploit-db.com/exploits/9144
CVE: CVE-2009-3824
Published: 2009-10-28
Description: Directory traversal vulnerability in include/processor.php in Greenwood PHP Content Manager 0.3.2 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the content_path parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://www.exploit-db.com/exploits/9156; https://exchange.xforce.ibmcloud.com/vulnerabilities/51737; http://www.exploit-db.com/exploits/9156
CVE: CVE-2009-3825
Published: 2009-10-28
Description: Multiple directory traversal vulnerabilities in GenCMS 2006 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) p parameter to show.php and the (2) Template parameter to admin/pages/SiteNew.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://www.exploit-db.com/exploits/9103; https://exchange.xforce.ibmcloud.com/vulnerabilities/51653; http://www.exploit-db.com/exploits/9103
CVE: CVE-2009-3639
Published: 2009-10-28
Description: The mod_tls module in ProFTPD before 1.3.2b, and 1.3.3 before 1.3.3rc2, when the dNSNameRequired TLS option is enabled, does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 client certificate, which allows remote attackers to bypass intended client-hostname restrictions via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-310
References: http://bugs.proftpd.org/show_bug.cgi?id=3275; http://marc.info/?l=oss-security&m=[PII_REDACTED]0672&w=2; http://marc.info/?l=oss-security&m=[PII_REDACTED]8211&w=2
CVE: CVE-2009-3641
Published: 2009-10-28
Description: Snort before 2.8.5.1, when the -v option is enabled, allows remote attackers to cause a denial of service (application crash) via a crafted IPv6 packet that uses the (1) TCP or (2) ICMP protocol.
CVSS Score: 4.3 (MEDIUM)
References: http://dl.snort.org/snort-current/release_notes_2851.txt; http://marc.info/?l=oss-security&m=[PII_REDACTED]4700&w=2; http://seclists.org/fulldisclosure/2009/Oct/299
CVE: CVE-2009-3700
Published: 2009-10-28
Description: Buffer overflow in sgLog.c in squidGuard 1.3 and 1.4 allows remote attackers to cause a denial of service (application hang or loss of blocking functionality) via a long URL with many / (slash) characters, related to "emergency mode."
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html; http://secunia.com/advisories/37107; http://secunia.com/advisories/39679
CVE: CVE-2009-3826
Published: 2009-10-28
Description: Multiple buffer overflows in squidGuard 1.4 allow remote attackers to bypass intended URL blocking via a long URL, related to (1) the relationship between a certain buffer size in squidGuard and a certain buffer size in Squid and (2) a redirect URL that contains information about the originally requested URL.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html; http://secunia.com/advisories/37107; http://secunia.com/advisories/39679
CVE: CVE-2009-1563
Published: 2009-10-29
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2009-0689.  Reason: This candidate is a duplicate of CVE-2009-0689.  Certain codebase relationships were not originally clear.  Notes: All CVE users should reference CVE-2009-0689 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2009-3370
Published: 2009-10-29
Description: Mozilla Firefox before 3.0.15, and 3.5.x before 3.5.4, allows remote attackers to read form history by forging mouse and keyboard events that leverage the auto-fill feature to populate form fields, in an attacker-readable form, with history entries.
CVSS Score: 5.0 (MEDIUM)
References: http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1; http://www.mandriva.com/security/advisories?name=MDVSA-2009:294; http://www.mozilla.org/security/announce/2009/mfsa2009-52.html
CVE: CVE-2009-3371
Published: 2009-10-29
Description: Use-after-free vulnerability in Mozilla Firefox 3.5.x before 3.5.4 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code by creating JavaScript web-workers recursively.
CVSS Score: 10.0 (HIGH)
CWE: CWE-399
References: http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1; http://www.mandriva.com/security/advisories?name=MDVSA-2009:294; http://www.mozilla.org/security/announce/2009/mfsa2009-54.html
CVE: CVE-2009-3372
Published: 2009-10-29
Description: Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, allows remote attackers to execute arbitrary code via a crafted regular expression in a Proxy Auto-configuration (PAC) file.
CVSS Score: 9.3 (HIGH)
References: http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1; http://www.mandriva.com/security/advisories?name=MDVSA-2009:294; http://www.mozilla.org/security/announce/2009/mfsa2009-55.html
CVE: CVE-2009-3373
Published: 2009-10-29
Description: Heap-based buffer overflow in the GIF image parser in Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, allows remote attackers to execute arbitrary code via unspecified vectors.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1; http://www.mandriva.com/security/advisories?name=MDVSA-2009:294; http://www.mozilla.org/security/announce/2009/mfsa2009-56.html
CVE: CVE-2009-3374
Published: 2009-10-29
Description: The XPCVariant::VariantDataToJS function in the XPCOM implementation in Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4 does not enforce intended restrictions on interaction between chrome privileged code and objects obtained from remote web sites, which allows remote attackers to execute arbitrary JavaScript with chrome privileges via unspecified method calls, related to "doubly-wrapped objects."
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1; http://www.mandriva.com/security/advisories?name=MDVSA-2009:294; http://www.mozilla.org/security/announce/2009/mfsa2009-57.html
CVE: CVE-2009-3375
Published: 2009-10-29
Description: content/html/document/src/nsHTMLDocument.cpp in Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4 allows user-assisted remote attackers to bypass the Same Origin Policy and read an arbitrary content selection via the document.getSelection function.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-264
References: http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1; http://www.mandriva.com/security/advisories?name=MDVSA-2009:294; http://www.mozilla.org/security/announce/2009/mfsa2009-61.html
CVE: CVE-2009-3376
Published: 2009-10-29
Description: Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, does not properly handle a right-to-left override (aka RLO or U+202E) Unicode character in a download filename, which allows remote attackers to spoof file extensions via a crafted filename, as demonstrated by displaying a non-executable extension for an executable file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-16
References: http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html; http://secunia.com/advisories/38977; http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1
CVE: CVE-2009-3377
Published: 2009-10-29
Description: Multiple unspecified vulnerabilities in liboggz before cf5feeaab69b05e24, as used in Mozilla Firefox 3.5.x before 3.5.4, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unknown vectors.
CVSS Score: 10.0 (HIGH)
References: http://lists.fedoraproject.org/pipermail/package-announce/2010-June/042716.html; http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1; http://www.mandriva.com/security/advisories?name=MDVSA-2009:294
CVE: CVE-2009-3378
Published: 2009-10-29
Description: The oggplay_data_handle_theora_frame function in media/liboggplay/src/liboggplay/oggplay_data.c in liboggplay, as used in Mozilla Firefox 3.5.x before 3.5.4, attempts to reuse an earlier frame data structure upon encountering a decoding error for the first frame, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) or possibly execute arbitrary code via a crafted .ogg video file.
CVSS Score: 9.3 (HIGH)
References: http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1; http://www.mandriva.com/security/advisories?name=MDVSA-2009:294; http://www.mozilla.org/security/announce/2009/mfsa2009-63.html
CVE: CVE-2009-3379
Published: 2009-10-29
Description: Multiple unspecified vulnerabilities in libvorbis, as used in Mozilla Firefox 3.5.x before 3.5.4, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unknown vectors.  NOTE: this might overlap CVE-2009-2663.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/37306; http://secunia.com/advisories/37340; http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1
CVE: CVE-2009-3380
Published: 2009-10-29
Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
CVSS Score: 10.0 (HIGH)
References: http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1; http://www.mandriva.com/security/advisories?name=MDVSA-2009:294; http://www.mozilla.org/security/announce/2009/mfsa2009-64.html
CVE: CVE-2009-3381
Published: 2009-10-29
Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
CVSS Score: 10.0 (HIGH)
References: http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1; http://www.mozilla.org/security/announce/2009/mfsa2009-64.html; http://www.vupen.com/english/advisories/2009/3334
CVE: CVE-2009-3382
Published: 2009-10-29
Description: layout/base/nsCSSFrameConstructor.cpp in the browser engine in Mozilla Firefox 3.0.x before 3.0.15 does not properly handle first-letter frames, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors.
CVSS Score: 10.0 (HIGH)
References: http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1; http://www.mozilla.org/security/announce/2009/mfsa2009-64.html; http://www.vupen.com/english/advisories/2009/3334
CVE: CVE-2009-3383
Published: 2009-10-29
Description: Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox 3.5.x before 3.5.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
CVSS Score: 10.0 (HIGH)
References: http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1; http://www.mozilla.org/security/announce/2009/mfsa2009-64.html; http://www.vupen.com/english/advisories/2009/3334
CVE: CVE-2009-3626
Published: 2009-10-29
Description: Perl 5.10.1 allows context-dependent attackers to cause a denial of service (application crash) via a UTF-8 character with a large, invalid codepoint, which is not properly handled during a regular-expression match.
CVSS Score: 5.0 (MEDIUM)
References: http://perl5.git.perl.org/perl.git/commit/0abd0d78a73da1c4d13b1c700526b7e5d03b32d4; http://rt.perl.org/rt3/Public/Bug/Display.html?id=69973; http://rt.perl.org/rt3/Ticket/Attachment/617489/295383/
CVE: CVE-2009-3627
Published: 2009-10-29
Description: The decode_entities function in util.c in HTML-Parser before 3.63 allows context-dependent attackers to cause a denial of service (infinite loop) via an incomplete SGML numeric character reference, which triggers generation of an invalid UTF-8 character.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://github.com/gisle/html-parser/commit/b9aae1e43eb2c8e989510187cff0ba3e996f9a4c; http://secunia.com/advisories/37155; http://www.openwall.com/lists/oss-security/2009/10/23/9
CVE: CVE-2009-3638
Published: 2009-10-29
Description: Integer overflow in the kvm_dev_ioctl_get_supported_cpuid function in arch/x86/kvm/x86.c in the KVM subsystem in the Linux kernel before 2.6.31.4 allows local users to have an unspecified impact via a KVM_GET_SUPPORTED_CPUID request to the kvm_arch_dev_ioctl function.
CVSS Score: 7.2 (HIGH)
CWE: CWE-189
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6a54435560efdab1a08f429a954df4d6c740bddf; http://marc.info/?l=oss-security&m=[PII_REDACTED]1048&w=2; http://marc.info/?l=oss-security&m=[PII_REDACTED]7373&w=2
CVE: CVE-2009-3640
Published: 2009-10-29
Description: The update_cr8_intercept function in arch/x86/kvm/x86.c in the KVM subsystem in the Linux kernel before 2.6.32-rc1 does not properly handle the absence of an Advanced Programmable Interrupt Controller (APIC), which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly gain privileges via a call to the kvm_vcpu_ioctl function.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-20
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=88c808fd42b53a7e01a2ac3253ef31fef74cb5af; http://marc.info/?l=oss-security&m=[PII_REDACTED]0571&w=2; http://marc.info/?l=oss-security&m=[PII_REDACTED]9385&w=2
CVE: CVE-2009-3828
Published: 2009-10-30
Description: The web interface for Everfocus EDR1600 DVR allows remote attackers to bypass authentication and access live cams via certain vectors.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-287
References: http://seclists.org/fulldisclosure/2009/Oct/293; http://secunia.com/advisories/37108; http://www.osvdb.org/59139
CVE: CVE-2009-3549
Published: 2009-10-30
Description: packet-paltalk.c in the Paltalk dissector in Wireshark 1.2.0 through 1.2.2, on SPARC and certain other platforms, allows remote attackers to cause a denial of service (application crash) via a file that records a malformed packet trace.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://secunia.com/advisories/37175; http://secunia.com/advisories/37409; http://www.securityfocus.com/bid/36846
CVE: CVE-2009-3550
Published: 2009-10-30
Description: The DCERPC/NT dissector in Wireshark 0.10.10 through 1.0.9 and 1.2.0 through 1.2.2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a file that records a malformed packet trace.  NOTE: some of these details are obtained from third party information.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/37175; http://secunia.com/advisories/37409; http://secunia.com/advisories/37477
CVE: CVE-2009-3551
Published: 2009-10-30
Description: Off-by-one error in the dissect_negprot_response function in packet-smb.c in the SMB dissector in Wireshark 1.2.0 through 1.2.2 allows remote attackers to cause a denial of service (application crash) via a file that records a malformed packet trace.  NOTE: some of these details are obtained from third party information.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-189
References: http://secunia.com/advisories/37175; http://secunia.com/advisories/37409; http://www.securityfocus.com/bid/36846
CVE: CVE-2009-3623
Published: 2009-10-30
Description: The lookup_cb_cred function in fs/nfsd/nfs4callback.c in the nfsd4 subsystem in the Linux kernel before 2.6.31.2 attempts to access a credentials cache even when a client specifies the AUTH_NULL authentication flavor, which allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) via an NFSv4 mount request.
CVSS Score: 7.8 (HIGH)
CWE: CWE-287
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=80fc015bdfe1f5b870c1e1ee02d78e709523fee7; http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=886e3b7fe6054230c89ae078a09565ed183ecc73; http://marc.info/?l=oss-security&m=[PII_REDACTED]9631&w=2
CVE: CVE-2009-3722
Published: 2009-10-30
Description: The handle_dr function in arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel before 2.6.31.1 does not properly verify the Current Privilege Level (CPL) before accessing a debug register, which allows guest OS users to cause a denial of service (trap) on the host OS via a crafted application.
CVSS Score: 7.1 (HIGH)
CWE: CWE-264
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=0a79b009525b160081d75cef5dbf45817956acf2; http://marc.info/?l=oss-security&m=[PII_REDACTED]3558&w=2; http://marc.info/?l=oss-security&m=[PII_REDACTED]7148&w=2
CVE: CVE-2009-3829
Published: 2009-10-30
Description: Integer overflow in wiretap/erf.c in Wireshark before 1.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted erf file, related to an "unsigned integer wrap vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: http://anonsvn.wireshark.org/viewvc/trunk/wiretap/erf.c?view=markup&pathrev=29364; http://secunia.com/advisories/37409; http://secunia.com/advisories/37477
CVE: CVE-2009-3830
Published: 2009-10-30
Description: The download functionality in Team Services in Microsoft Office SharePoint Server 2007 12.0.0.4518 and 12.0.0.6219 allows remote attackers to read ASP.NET source code via pathnames in the SourceUrl and Source parameters to _layouts/download.aspx.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://support.microsoft.com/kb/976829; http://www.securityfocus.com/archive/1/507419/100/0/threaded; http://www.securityfocus.com/bid/36817
CVE: CVE-2009-3831
Published: 2009-10-30
Description: Opera before 10.01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted domain name.
CVSS Score: 9.3 (HIGH)
CWE: CWE-787
References: http://secunia.com/advisories/37182; http://www.opera.com/docs/changelogs/mac/1001/; http://www.opera.com/docs/changelogs/unix/1001/