deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2009-4188
Published: 2009-12-03
Description: HP Operations Dashboard has a default password of j2deployer for the j2deployer account, which allows remote attackers to execute arbitrary code via a session that uses the manager role to conduct unrestricted file upload attacks against the /manager servlet in the Tomcat servlet container.  NOTE: this might overlap CVE-2009-3098.
CVSS Score: 10.0 (HIGH)
CWE: CWE-255
References: http://www.intevydis.com/blog/?p=87; http://www.securityfocus.com/bid/36258; http://www.intevydis.com/blog/?p=87
CVE: CVE-2009-4189
Published: 2009-12-03
Description: HP Operations Manager has a default password of OvW*busr1 for the ovwebusr account, which allows remote attackers to execute arbitrary code via a session that uses the manager role to conduct unrestricted file upload attacks against the /manager servlet in the Tomcat servlet container.  NOTE: this might overlap CVE-2009-3099 and CVE-2009-3843.
CVSS Score: 10.0 (HIGH)
CWE: CWE-255
References: http://www.intevydis.com/blog/?p=87; http://www.intevydis.com/blog/?p=87
CVE: CVE-2009-4190
Published: 2009-12-03
Description: Unspecified vulnerability in the kernel in Sun OpenSolaris 2009.06 allows remote attackers to cause a denial of service (panic) via unknown vectors, as demonstrated by the vd_solaris2 module in VulnDisco Pack Professional 8.12.  NOTE: as of 20091203, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes.
CVSS Score: 7.8 (HIGH)
References: http://www.intevydis.com/blog/?p=79; http://www.intevydis.com/vd-list.shtml; http://www.intevydis.com/blog/?p=79
CVE: CVE-2009-4191
Published: 2009-12-03
Description: Unspecified vulnerability in the kernel in Sun Solaris 10 and OpenSolaris 2009.06 on the x86-64 platform allows local users to gain privileges via unknown vectors, as demonstrated by the vd_sol_local module in VulnDisco Pack Professional 8.12.  NOTE: as of 20091203, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes.
CVSS Score: 7.2 (HIGH)
References: http://www.intevydis.com/blog/?p=79; http://www.intevydis.com/vd-list.shtml; http://www.intevydis.com/blog/?p=79
CVE: CVE-2009-1566
Published: 2009-12-03
Description: Integer overflow in Roxio Easy Media Creator 9.0.136, and Roxio Creator 2010 before SP1, might allow remote attackers to execute arbitrary code via an image with crafted dimensions.
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: http://secunia.com/advisories/36069; http://secunia.com/secunia_research/2009-38/; http://www.securityfocus.com/archive/1/508165/100/0/threaded
CVE: CVE-2009-4192
Published: 2009-12-03
Description: Directory traversal vulnerability in dialog/file_manager.php in Interspire Knowledge Manager 5 allows remote attackers to read arbitrary files via a .. (dot dot) in the p parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://www.securityfocus.com/bid/36541; http://www.securityfocus.com/bid/36541
CVE: CVE-2009-4193
Published: 2009-12-03
Description: Merkaartor 0.14 allows local users to append data to arbitrary files via a symlink attack on the /tmp/merkaartor.log temporary file.
CVSS Score: 3.3 (LOW)
CWE: CWE-59
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=548546; http://osvdb.org/58389; http://secunia.com/advisories/36897
CVE: CVE-2009-4194
Published: 2009-12-03
Description: Directory traversal vulnerability in Golden FTP Server 4.30 Free and Professional, 4.50, and possibly other versions allows remote authenticated users to delete arbitrary files via a .. (dot dot) in the DELE command.  NOTE: some of these details are obtained from third party information.
CVSS Score: 8.1 (HIGH)
CWE: CWE-22
References: http://blog.sat0ri.com/?p=292; http://secunia.com/advisories/37527; http://www.exploit-db.com/exploits/10258
CVE: CVE-2009-2631
Published: 2009-12-04
Description: Multiple clientless SSL VPN products that run in web browsers, including Stonesoft StoneGate; Cisco ASA; SonicWALL E-Class SSL VPN and SonicWALL SSL VPN; SafeNet SecureWire Access Gateway; Juniper Networks Secure Access; Nortel CallPilot; Citrix Access Gateway; and other products, when running in configurations that do not restrict access to the same domain as the VPN, retrieve the content of remote URLs from one domain and rewrite them so they originate from the VPN's domain, which violates the same origin policy and allows remote attackers to conduct cross-site scripting attacks, read cookies that originated from other domains, access the Web VPN session to gain access to internal resources, perform key logging, and conduct other attacks.  NOTE: it could be argued that this is a fundamental design problem in any clientless VPN solution, as opposed to a commonly-introduced error that can be fixed in separate implementations. Therefore a single CVE has been assigned for all products that have this design
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-284, CWE-264
References: https://security.paloaltonetworks.com/PAN-SA-2025-0005; https://www.kb.cert.org/vuls/id/261869; http://kb.juniper.net/KB15799
CVE: CVE-2009-4195
Published: 2009-12-04
Description: Buffer overflow in Adobe Illustrator CS4 14.0.0, CS3 13.0.3 and earlier, and CS3 13.0.0 allows remote attackers to execute arbitrary code via a long DSC comment in an Encapsulated PostScript (.eps) file. NOTE: some of these details are obtained from third party information.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://blogs.adobe.com/psirt/2009/12/potential_adobe_illustrator_cs.html; http://osvdb.org/60632; http://retrogod.altervista.org/9sg_adobe_illuso.html
CVE: CVE-2009-4196
Published: 2009-12-04
Description: Multiple cross-site scripting (XSS) vulnerabilities in multiple scripts in Forms/ in Huawei MT882 V100R002B020 ARG-T running firmware 3.7.9.98 allow remote attackers to inject arbitrary web script or HTML via the (1) BackButton parameter to error_1; (2) wzConnFlag parameter to fresh_pppoe_1; (3) diag_pppindex_argen and (4) DiagStartFlag parameters to rpDiag_argen_1; (5) wzdmz_active and (6) wzdmzHostIP parameters to rpNATdmz_argen_1; (7) wzVIRTUALSVR_endPort, (8) wzVIRTUALSVR_endPortLocal, (9) wzVIRTUALSVR_IndexFlag, (10) wzVIRTUALSVR_localIP, (11) wzVIRTUALSVR_startPort, and (12) wzVIRTUALSVR_startPortLocal parameters to rpNATvirsvr_argen_1; (13) Connect_DialFlag, (14) Connect_DialHidden, and (15) Connect_Flag parameters to rpStatus_argen_1; (16) Telephone_select, and (17) wzFirstFlag parameters to rpwizard_1; and (18) wzConnectFlag parameter to rpwizPppoe_1.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.exploit-db.com/exploits/10276; http://www.securityfocus.com/bid/37194; https://exchange.xforce.ibmcloud.com/vulnerabilities/54526
CVE: CVE-2009-4197
Published: 2009-12-04
Description: rpwizPppoe.htm in Huawei MT882 V100R002B020 ARG-T running firmware 3.7.9.98 contains a form that does not disable the autocomplete setting for the password parameter, which makes it easier for local users or physically proximate attackers to obtain the password from web browsers that support autocomplete.
CVSS Score: 4.7 (MEDIUM)
References: http://www.exploit-db.com/exploits/10276; http://www.securityfocus.com/bid/37194; https://exchange.xforce.ibmcloud.com/vulnerabilities/54528
CVE: CVE-2009-3304
Published: 2009-12-04
Description: GForge 4.5.14, 4.7 rc2, and 4.8.2 allows local users to overwrite arbitrary files via a symlink attack on authorized_keys files in users' home directories, related to deb-specific/ssh_dump_update.pl and cronjobs/cvs-cron/ssh_create.php.
CVSS Score: 3.3 (LOW)
CWE: CWE-59
References: http://security.debian.org/pool/updates/main/g/gforge/gforge_4.5.14-22etch13.diff.gz; http://www.debian.org/security/2009/dsa-1945; http://www.securityfocus.com/bid/37195
CVE: CVE-2009-4148
Published: 2009-12-04
Description: DAZ Studio 2.3.3.161, 2.3.3.163, and 3.0.1.135 allows remote attackers to execute arbitrary JavaScript code via a (1) .ds, (2) .dsa, (3) .dse, or (4) .dsb file, as demonstrated by code that loads the WScript.Shell ActiveX control, related to a "script injection vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://www.coresecurity.com/content/dazstudio-scripting-injection; http://www.securityfocus.com/archive/1/508192/100/0/threaded; http://www.securityfocus.com/bid/37176
CVE: CVE-2009-4198
Published: 2009-12-04
Description: SQL injection vulnerability in my_orders.php in MyMiniBill allows remote authenticated users to execute arbitrary SQL commands via the orderid parameter in a status action.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: http://secunia.com/advisories/35285; http://www.exploit-db.com/exploits/8864; http://www.vupen.com/english/advisories/2009/1490
CVE: CVE-2009-4199
Published: 2009-12-04
Description: Multiple SQL injection vulnerabilities in the Mambo Resident (aka Mos Res or com_mosres) component 1.0f for Mambo and Joomla!, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) property_uid parameter in a viewproperty action to index.php and the (2) regID parameter in a showregion action to index.php.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-89
References: http://www.exploit-db.com/exploits/8872; http://www.securityfocus.com/bid/35202; http://www.exploit-db.com/exploits/8872
CVE: CVE-2009-4200
Published: 2009-12-04
Description: SQL injection vulnerability in the Seminar (com_seminar) component 1.28 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a View_seminar action to index.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.exploit-db.com/exploits/8867; http://www.securityfocus.com/bid/35192; http://www.exploit-db.com/exploits/8867
CVE: CVE-2009-4201
Published: 2009-12-04
Description: Multiple stack-based buffer overflows in Mp3 Tag Assistant Professional 2.92 build 300 allow remote attackers to execute arbitrary code via an MP3 file with a long string in the (1) ID3v1, (2) ID3v2, or (3) APEv2 metadata field.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://liquidworm.blogspot.com/2009/05/mp3-tag-assistant-pro-292-tag-metadata.html; http://osvdb.org/54810; http://secunia.com/advisories/35305
CVE: CVE-2009-4202
Published: 2009-12-04
Description: Directory traversal vulnerability in the Omilen Photo Gallery (com_omphotogallery) component Beta 0.5 for Joomla! allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the controller parameter to index.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://www.exploit-db.com/exploits/8870; http://www.securityfocus.com/bid/35201; http://www.vupen.com/english/advisories/2009/1494
CVE: CVE-2009-4203
Published: 2009-12-04
Description: Multiple SQL injection vulnerabilities in admin/aclass/admin_func.php in Arab Portal 2.2 allow remote attackers to execute arbitrary SQL commands via the (1) X-Forwarded-For or (2) Client-IP HTTP header in a request to the default URI under admin/.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/54811; http://secunia.com/advisories/35257; http://www.exploit-db.com/exploits/8828
CVE: CVE-2009-4204
Published: 2009-12-04
Description: SQL injection vulnerability in read.php in Flashlight Free Edition allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.exploit-db.com/exploits/8856; https://exchange.xforce.ibmcloud.com/vulnerabilities/50906; http://www.exploit-db.com/exploits/8856
CVE: CVE-2009-4205
Published: 2009-12-04
Description: Directory traversal vulnerability in admin.php in Flashlight Free Edition allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the action parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://www.exploit-db.com/exploits/8856; https://exchange.xforce.ibmcloud.com/vulnerabilities/50907; http://www.exploit-db.com/exploits/8856
CVE: CVE-2009-4206
Published: 2009-12-04
Description: SQL injection vulnerability in admin.link.modify.php in Million Dollar Text Links 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/34994; http://www.exploit-db.com/exploits/8830; https://exchange.xforce.ibmcloud.com/vulnerabilities/50864
CVE: CVE-2009-4207
Published: 2009-12-04
Description: Cross-site scripting (XSS) vulnerability in the Webform module 5.x before 5.x-2.7 and 6.x before 6.x-2.7, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via a submission.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://drupal.org/node/481258; http://drupal.org/node/481260; http://drupal.org/node/481268
CVE: CVE-2009-4208
Published: 2009-12-04
Description: SQL injection vulnerability in the os_news module in Open-school (OS) 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in a show action to index.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.exploit-db.com/exploits/8839; https://exchange.xforce.ibmcloud.com/vulnerabilities/50873; http://www.exploit-db.com/exploits/8839
CVE: CVE-2009-4209
Published: 2009-12-04
Description: Multiple cross-site scripting (XSS) vulnerabilities in admin/index.php in moziloCMS 1.11.1 allow remote attackers to inject arbitrary web script or HTML via the (1) cat and (2) file parameters in an editsite action, different vectors than CVE-2008-6127 and CVE-2009-1367.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/archive/1/504091/100/0/threaded; http://www.securityfocus.com/bid/35212; http://www.securityfocus.com/archive/1/504091/100/0/threaded
CVE: CVE-2009-3560
Published: 2009-12-04
Description: The big2_toUtf8 function in lib/xmltok.c in libexpat in Expat 2.0.1, as used in the XML-Twig module for Perl, allows context-dependent attackers to cause a denial of service (application crash) via an XML document with malformed UTF-8 sequences that trigger a buffer over-read, related to the doProlog function in lib/xmlparse.c, a different vulnerability than CVE-2009-2625 and CVE-2009-3720.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://expat.cvs.sourceforge.net/viewvc/expat/expat/lib/xmlparse.c?r1=1.164&r2=1.165; http://expat.cvs.sourceforge.net/viewvc/expat/expat/lib/xmlparse.c?view=log#rev1.165; http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00007.html
CVE: CVE-2009-4020
Published: 2009-12-04
Description: Stack-based buffer overflow in the hfs subsystem in the Linux kernel 2.6.32 allows remote attackers to have an unspecified impact via a crafted Hierarchical File System (HFS) filesystem, related to the hfs_readdir function in fs/hfs/dir.c.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00005.html; http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00007.html; http://marc.info/?l=linux-mm-commits&m=[PII_REDACTED]3047&w=2
CVE: CVE-2009-4211
Published: 2009-12-04
Description: The U.S. Defense Information Systems Agency (DISA) Security Readiness Review (SRR) script for the Solaris x86 platform executes files in arbitrary directories as root for filenames equal to (1) java, (2) openssl, (3) php, (4) snort, (5) tshark, (6) vncserver, or (7) wireshark, which allows local users to gain privileges via a Trojan horse program.
CVSS Score: 9.3 (HIGH)
CWE: CWE-264
References: http://securitytracker.com/id?1023265; http://www.kb.cert.org/vuls/id/433821; http://www.securityfocus.com/archive/1/508188/100/0/threaded
CVE: CVE-2009-4214
Published: 2009-12-07
Description: Cross-site scripting (XSS) vulnerability in the strip_tags function in Ruby on Rails before 2.2.s, and 2.3.x before 2.3.5, allows remote attackers to inject arbitrary web script or HTML via vectors involving non-printing ASCII characters, related to HTML::Tokenizer and actionpack/lib/action_controller/vendor/html-scanner/html/node.rb.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://github.com/rails/rails/commit/bfe032858077bb2946abe25e95e485ba6da86bd5; http://groups.google.com/group/rubyonrails-security/browse_thread/thread/4d4f71f2aef4c0ab?pli=1; http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html
CVE: CVE-2009-4215
Published: 2009-12-07
Description: Panda Global Protection 2010, Internet Security 2010, and Antivirus Pro 2010 use weak permissions (Everyone: Full Control) for the product files, which allows local users to gain privileges by replacing executables with Trojan horse programs.
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://secunia.com/advisories/37373; http://www.pandasecurity.com/homeusers/support/card?id=80164&idIdioma=2; http://www.securityfocus.com/archive/1/507811/100/0/threaded
CVE: CVE-2009-4216
Published: 2009-12-07
Description: Directory traversal vulnerability in funzioni/lib/menulast.php in klinza professional cms 5.0.1 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the LANG parameter.
CVSS Score: 9.3 (HIGH)
CWE: CWE-22
References: http://packetstormsecurity.org/0911-exploits/klinza-lfi.txt; http://www.securityfocus.com/bid/37127; https://exchange.xforce.ibmcloud.com/vulnerabilities/54429
CVE: CVE-2009-4217
Published: 2009-12-07
Description: SQL injection vulnerability in the Itamar Elharar MusicGallery (com_musicgallery) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in an itempage action to index.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.securityfocus.com/bid/37146; http://www.securityfocus.com/bid/37146
CVE: CVE-2009-4218
Published: 2009-12-07
Description: Multiple SQL injection vulnerabilities in files/login.asp in JiRo's Banner System eXperience (JBSX) allow remote attackers to execute arbitrary SQL commands via the (1) admin or (2) password field, a related issue to CVE-2007-6091.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.securityfocus.com/bid/37045; https://exchange.xforce.ibmcloud.com/vulnerabilities/54382; http://www.securityfocus.com/bid/37045
CVE: CVE-2009-4219
Published: 2009-12-07
Description: Stack-based buffer overflow in the MYACTIVEX.MyActiveXCtrl.1 ActiveX control in MyActiveX.ocx 1.4.8.0 in Haihaisoft Universal Player allows remote attackers to execute arbitrary code via a long URL property value.  NOTE: some of these details are obtained from third party information.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/37509; http://www.securityfocus.com/bid/82346; http://www.shinnai.net/exploits/ZzLsi6TIfSuVPh1kPHmP.txt
CVE: CVE-2009-4220
Published: 2009-12-07
Description: PHP remote file inclusion vulnerability in includes/classes/pctemplate.php in PointComma 3.8b2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the pcConfig[smartyPath] parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://packetstormsecurity.org/0911-exploits/pointcomma-rfi.txt; http://www.exploit-db.com/exploits/10220; https://exchange.xforce.ibmcloud.com/vulnerabilities/54389
CVE: CVE-2009-4221
Published: 2009-12-07
Description: SQL injection vulnerability in classified.php in phpBazar 2.1.1fix and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter, a different vector than CVE-2008-3767.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.org/0911-exploits/phpbazar211fix-sql.txt; http://www.exploit-db.com/exploits/10245; http://www.securityfocus.com/bid/37144
CVE: CVE-2009-4222
Published: 2009-12-07
Description: phpBazar 2.1.1fix and earlier does not require administrative authentication for admin/admin.php, which allows remote attackers to obtain access to the admin control panel via a direct request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://packetstormsecurity.org/0911-exploits/phpbazar-access.txt; http://www.securityfocus.com/bid/37132; http://packetstormsecurity.org/0911-exploits/phpbazar-access.txt
CVE: CVE-2009-4223
Published: 2009-12-07
Description: PHP remote file inclusion vulnerability in adm/krgourl.php in KR-Web 1.1b2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the DOCUMENT_ROOT parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://www.exploit-db.com/exploits/10216; https://exchange.xforce.ibmcloud.com/vulnerabilities/54395; http://www.exploit-db.com/exploits/10216
CVE: CVE-2009-4224
Published: 2009-12-07
Description: Multiple PHP remote file inclusion vulnerabilities in SweetRice 0.5.4, 0.5.3, and earlier allow remote attackers to execute arbitrary PHP code via a URL in the root_dir parameter to (1) _plugin/subscriber/inc/post.php and (2) as/lib/news_modify.php.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: http://packetstormsecurity.org/0911-exploits/sweetrice-rfilfi.txt; http://secunia.com/advisories/37522; http://www.exploit-db.com/exploits/10246
CVE: CVE-2009-2749
Published: 2009-12-08
Description: Feature Pack for Communications Enabled Applications (CEA) before 1.0.0.1 for IBM WebSphere Application Server 7.0.0.7 uses predictable session values, which allows man-in-the-middle attackers to spoof a collaboration session by guessing the value.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-310
References: http://www-01.ibm.com/support/docview.wss?uid=swg1PM00435; http://www-01.ibm.com/support/docview.wss?uid=swg27017328; http://www.securityfocus.com/bid/37392
CVE: CVE-2009-2843
Published: 2009-12-08
Description: Java for Mac OS X 10.5 before Update 6 and 10.6 before Update 1 accepts expired certificates for applets, which makes it easier for remote attackers to execute arbitrary code via an applet.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-310
References: http://lists.apple.com/archives/security-announce/2009/Dec/msg00000.html; http://lists.apple.com/archives/security-announce/2009/Dec/msg00001.html; http://secunia.com/advisories/37581
CVE: CVE-2009-3994
Published: 2009-12-08
Description: Stack-based buffer overflow in the GetUID function in src-IL/src/il_dicom.c in DevIL 1.7.8 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a crafted DICOM file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.fedoraproject.org/pipermail/package-announce/2010-January/033806.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-January/033809.html; http://secunia.com/advisories/37507
CVE: CVE-2009-3586
Published: 2009-12-08
Description: Off-by-one error in src/http.c in CoreHTTP 0.5.3.1 and earlier allows remote attackers to cause a denial of service or possibly execute arbitrary code via an HTTP request with a long first line that triggers a buffer overflow.  NOTE: this vulnerability reportedly exists because of an incorrect fix for CVE-2007-4060.
CVSS Score: 7.5 (HIGH)
CWE: CWE-189
References: http://census-labs.com/media/corex.txt; http://census-labs.com/news/2009/12/02/corehttp-web-server/; http://www.securityfocus.com/archive/1/508272/100/0/threaded
CVE: CVE-2009-4225
Published: 2009-12-08
Description: Stack-based buffer overflow in the PestPatrol ActiveX control (ppctl.dll) 5.6.7.9 in CA eTrust PestPatrol allows remote attackers to execute arbitrary code via a long argument to the Initialize method.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.fortiguard.com/encyclopedia/vulnerability/ca.etrust.pestpatrol.ppctl.dll.activex.access.html; http://www.metasploit.com/redmine/projects/framework/repository/revisions/7167/entry/modules/exploits/windows/fileformat/etrust_pestscan.rb; http://www.securityfocus.com/bid/37133