deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2012-1059
Published: 2012-02-14
Description: Cross-site scripting (XSS) vulnerability in osCommerce/OM/Core/Site/Shop/Application/Cart/pages/main.php in OSCommerce Online Merchant 3.0.2 allows remote attackers to inject arbitrary web script or HTML via the value_title parameter, as demonstrated using the "Front" field in the shirt module.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.org/files/109389/VL-407.txt; http://www.exploit-db.com/exploits/18455; http://www.securityfocus.com/bid/51831
CVE: CVE-2012-1060
Published: 2012-02-14
Description: Multiple cross-site scripting (XSS) vulnerabilities in revisioning_theme.inc in the Taxonomy module in the Revisioning module 6.x-3.13 and other versions before 6.x-3.14 for Drupal allow remote authenticated users with certain privileges to inject arbitrary web script or HTML via the (1) tags or (2) term parameters.
CVSS Score: 2.1 (LOW)
CWE: CWE-79
References: http://drupal.org/node/1431114; http://drupal.org/node/1433550; http://drupalcode.org/project/revisioning.git/commit/768c882
CVE: CVE-2012-1061
Published: 2012-02-14
Description: SQL injection vulnerability in GForge Advanced Server 6.0.0 and other versions before 6.0.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://gforgegroup.wordpress.com/2012/02/03/gforge-as-6_0_1-release/; http://osvdb.org/78928; http://secunia.com/advisories/47587
CVE: CVE-2012-1062
Published: 2012-02-14
Description: Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine Applications Manager 9.x and 10.x allow remote attackers to inject arbitrary web script or HTML via the (1) period parameter to showHistoryData.do; (2) selectedNetwork, (3) network, or (4) group parameters to showresource.do; (5) header parameter to AlarmView.do; or (6) attName parameter to jsp/PopUp_Graph.jsp.  NOTE: the Search.do/query vector is already covered by CVE-2008-1566, and the jsp/ThresholdActionConfiguration.jsp redirectto vector is already covered by CVE-2008-0474.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/78721; http://osvdb.org/78722; http://packetstormsecurity.org/files/view/109238/VL-115.txt
CVE: CVE-2012-1063
Published: 2012-02-14
Description: Multiple SQL injection vulnerabilities in ManageEngine Applications Manager 9.x and 10.x allow remote attackers to execute arbitrary SQL commands via the (1) viewId parameter to fault/AlarmView.do or (2) period parameter to showHistoryData.do.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.org/files/view/109238/VL-115.txt; http://www.securityfocus.com/bid/51796; http://www.vulnerability-lab.com/get_content.php?id=115
CVE: CVE-2012-0788
Published: 2012-02-14
Description: The PDORow implementation in PHP before 5.3.9 does not properly interact with the session feature, which allows remote attackers to cause a denial of service (application crash) via a crafted application that uses a PDO driver for a fetch and then calls the session_start function, as demonstrated by a crash of the Apache HTTP Server.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00013.html; http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00016.html; http://secunia.com/advisories/48668
CVE: CVE-2012-0789
Published: 2012-02-14
Description: Memory leak in the timezone functionality in PHP before 5.3.9 allows remote attackers to cause a denial of service (memory consumption) by triggering many strtotime function calls, which are not properly handled by the php_date_parse_tzfile cache.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00013.html; http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00016.html; http://secunia.com/advisories/48668
CVE: CVE-2011-5079
Published: 2012-02-14
Description: Open redirect vulnerability in the Modern FAQ (irfaq) extension 1.1.2 and other versions before 1.1.4 for TYPO3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL, probably in the "return url parameter."
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-20
References: http://osvdb.org/78750; http://secunia.com/advisories/47823; http://typo3.org/extensions/repository/view/irfaq/1.1.4/info/ChangeLog/
CVE: CVE-2011-5080
Published: 2012-02-14
Description: Cross-site scripting (XSS) vulnerability in lib/class.tx_jftcaforms_tceFunc.php in the Additional TCA Forms (jftcaforms) extension before 0.2.1 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://forge.typo3.org/projects/extension-jftcaforms/repository/diff?rev=51637&rev_to=51568; http://osvdb.org/78800; http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-001/
CVE: CVE-2012-1009
Published: 2012-02-14
Description: NetSarang Xlpd 4 Build 0100 and NetSarang Xmanager Enterprise 4 Build 0186 allow remote attackers to cause a denial of service (daemon crash) via a malformed LPD request.
CVSS Score: 5.0 (MEDIUM)
References: http://secpod.org/advisories/SecPod_Exploit_NetSarang_Xlpd_Printer_Daemon_DoS_Vuln.txt; http://secpod.org/blog/?p=457; http://www.exploit-db.com/exploits/18454
CVE: CVE-2012-1065
Published: 2012-02-14
Description: Insecure method vulnerability in TuxScripting.dll in the TuxSystem ActiveX control in 2X ApplicationServer 10.1 Build 1224 allows remote attackers to create or overwrite arbitrary files via the ExportSettings method.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/78831; http://secunia.com/advisories/47657; http://www.securityfocus.com/bid/51856
CVE: CVE-2012-1066
Published: 2012-02-14
Description: Cross-site scripting (XSS) vulnerability in the template module in SmartyCMS 0.9.4 allows remote attackers to inject arbitrary web script or HTML via the title bar.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://dl.packetstormsecurity.net/1202-exploits/smartycms-xss.txt; http://www.securityfocus.com/bid/51805; https://exchange.xforce.ibmcloud.com/vulnerabilities/72918
CVE: CVE-2012-1067
Published: 2012-02-14
Description: SQL injection vulnerability in the WP-RecentComments plugin 2.0.7 for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter in an rc-content action to index.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/78820; http://secunia.com/advisories/47870; http://www.securityfocus.com/bid/51859
CVE: CVE-2012-1068
Published: 2012-02-14
Description: Cross-site scripting (XSS) vulnerability in the rc_ajax function in core.php in the WP-RecentComments plugin before 2.0.7 for WordPress allows remote attackers to inject arbitrary web script or HTML via the page parameter, related to AJAX paging.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://plugins.trac.wordpress.org/changeset/416723/wp-recentcomments/trunk/core.php?old=316325&old_path=wp-recentcomments%2Ftrunk%2Fcore.php; http://secunia.com/advisories/46141; http://wordpress.org/extend/plugins/wp-recentcomments/changelog/
CVE: CVE-2012-1069
Published: 2012-02-14
Description: Cross-site scripting (XSS) vulnerability in module/kb/search_word in the search module in lknSupport allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://dl.packetstormsecurity.net/1202-exploits/iknsupport-xss.txt; http://www.securityfocus.com/bid/51803; https://exchange.xforce.ibmcloud.com/vulnerabilities/72926
CVE: CVE-2012-1070
Published: 2012-02-14
Description: Cross-site scripting (XSS) vulnerability in the Modern FAQ (irfaq) extension 1.1.2 and other versions before 1.1.4 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly related to the "return url parameter."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/78749; http://secunia.com/advisories/47823; http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-001/
CVE: CVE-2012-1071
Published: 2012-02-14
Description: SQL injection vulnerability in the Kitchen recipe (mv_cooking) extension before 0.4.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, as exploited in the wild as of February 2012.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/78748; http://secunia.com/advisories/47437; http://typo3.org/extensions/repository/view/mv_cooking/0.4.1/
CVE: CVE-2012-1072
Published: 2012-02-14
Description: SQL injection vulnerability in the Category-System (toi_category) extension 0.6.0 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/78785; http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-001/; http://www.securityfocus.com/bid/51834
CVE: CVE-2012-1073
Published: 2012-02-14
Description: Cross-site scripting (XSS) vulnerability in the Category-System (toi_category) extension 0.6.0 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/78784; http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-001/; http://www.securityfocus.com/bid/51834
CVE: CVE-2012-1074
Published: 2012-02-14
Description: SQL injection vulnerability in the White Papers (mm_whtppr) extension 0.0.4 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/78786; http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-001/; http://www.securityfocus.com/bid/51837
CVE: CVE-2012-1075
Published: 2012-02-14
Description: SQL injection vulnerability in the Documents download (rtg_files) extension before 1.5.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/78788; http://secunia.com/advisories/47842; http://typo3.org/extensions/repository/view/rtg_files/1.5.2/
CVE: CVE-2012-1076
Published: 2012-02-14
Description: Cross-site scripting (XSS) vulnerability in the Documents download (rtg_files) extension before 1.5.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/78787; http://secunia.com/advisories/47842; http://typo3.org/extensions/repository/view/rtg_files/1.5.2/
CVE: CVE-2012-1077
Published: 2012-02-14
Description: SQL injection vulnerability in the Post data records to facebook (bc_post2facebook) extension before 0.2.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/78790; http://typo3.org/extensions/repository/view/bc_post2facebook/0.2.2/; http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-001/
CVE: CVE-2012-1078
Published: 2012-02-14
Description: The System Utilities (sysutils) extension 1.0.3 and earlier for TYPO3 allows remote attackers to obtain sensitive information via unspecified vectors related to improper "protection" of the "backup output directory."
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://typo3.org/extensions/repository/view/sysutils/1.0.4/; http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-001/; http://www.osvdb.org/78791
CVE: CVE-2012-1079
Published: 2012-02-14
Description: Unspecified vulnerability in the Webservices for TYPO3 (typo3_webservice) extension before 0.3.8 for TYPO3 allows remote authenticated users to execute arbitrary code via unknown vectors.
CVSS Score: 6.5 (MEDIUM)
References: http://osvdb.org/78792; http://typo3.org/extensions/repository/view/typo3_webservice/0.3.8/; http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-001/
CVE: CVE-2012-1080
Published: 2012-02-14
Description: Cross-site scripting (XSS) vulnerability in the Euro Calculator (skt_eurocalc) extension 0.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/78794; http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-001/; http://www.securityfocus.com/bid/51848
CVE: CVE-2012-1081
Published: 2012-02-14
Description: Cross-site scripting (XSS) vulnerability in the Yet another Google search (ya_googlesearch) extension before 0.3.10 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/78795; http://typo3.org/extensions/repository/view/ya_googlesearch/0.3.10/; http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-001/
CVE: CVE-2012-1082
Published: 2012-02-14
Description: Cross-site scripting (XSS) vulnerability in the Terminal PHP Shell (terminal) extension 0.3.2 and earlier for TYPO3 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://osvdb.org/78796; http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-001/; http://www.securityfocus.com/bid/51849
CVE: CVE-2012-1083
Published: 2012-02-14
Description: Cross-site request forgery (CSRF) vulnerability in the Terminal PHP Shell (terminal) extension 0.3.2 and earlier for TYPO3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://osvdb.org/78797; http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-001/; http://www.securityfocus.com/bid/51849
CVE: CVE-2012-1084
Published: 2012-02-14
Description: Cross-site scripting (XSS) vulnerability in the BE User Switch (beuserswitch) extension 0.0.1 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/78798; http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-001/; http://www.securityfocus.com/bid/51852
CVE: CVE-2012-1085
Published: 2012-02-14
Description: Unspecified vulnerability in the BE User Switch (beuserswitch) extension 0.0.1 for TYPO3 allows remote attackers to obtain sensitive information via unknown vectors.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/78799; http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-001/; http://www.securityfocus.com/bid/51852
CVE: CVE-2012-1086
Published: 2012-02-14
Description: Cross-site scripting (XSS) vulnerability in the UrlTool (aeurltool) extension 0.1.0 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/78801; http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-001/; http://www.securityfocus.com/bid/51855
CVE: CVE-2012-1087
Published: 2012-02-14
Description: Cross-site scripting (XSS) vulnerability in the Post data records to facebook (bc_post2facebook) extension before 0.2.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/78789; http://typo3.org/extensions/repository/view/bc_post2facebook/0.2.2/; http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-001/
CVE: CVE-2010-5083
Published: 2012-02-14
Description: SQL injection vulnerability in the Web_Links module for PHP-Nuke 8.0 allows remote attackers to execute arbitrary SQL commands via the url parameter in an Add action to modules.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.exploit-db.com/exploits/14589; http://www.itsecteam.com/en/vulnerabilities/vulnerability58.htm; https://exchange.xforce.ibmcloud.com/vulnerabilities/61012
CVE: CVE-2010-5084
Published: 2012-02-14
Description: The cross-site request forgery (CSRF) protection mechanism in e107 before 0.7.23 uses a predictable random token based on the creation date of the administrator account, which allows remote attackers to hijack the authentication of administrators for requests that add new users via e107_admin/users.php.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-352
References: http://e107.org/comment.php?comment.news.872; http://secunia.com/advisories/41034; http://www.madirish.net/?article=471
CVE: CVE-2010-5085
Published: 2012-02-14
Description: Multiple cross-site request forgery (CSRF) vulnerabilities in admin/update_user in Hulihan Amethyst 0.1.5, and possibly earlier, allow remote attackers to hijack the authentication of administrators for requests that (1) change the administrative password or (2) change the site's configuration.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://dev.hulihanapplications.com/issues/show/208; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9200&w=2; http://secunia.com/advisories/40874
CVE: CVE-2012-0010
Published: 2012-02-14
Description: Microsoft Internet Explorer 6 through 9 does not properly perform copy-and-paste operations, which allows user-assisted remote attackers to read content from a different (1) domain or (2) zone via a crafted web site, aka "Copy and Paste Information Disclosure Vulnerability."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-010; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14835; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-010
CVE: CVE-2012-0011
Published: 2012-02-14
Description: Microsoft Internet Explorer 7 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "HTML Layout Remote Code Execution Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://www.us-cert.gov/cas/techalerts/TA12-045A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-010; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14310
CVE: CVE-2012-0012
Published: 2012-02-14
Description: Microsoft Internet Explorer 9 does not properly handle the creation and initialization of string objects, which allows remote attackers to read data from arbitrary process-memory locations via a crafted web site, aka "Null Byte Information Disclosure Vulnerability."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-665
References: http://www.us-cert.gov/cas/techalerts/TA12-045A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-010; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14870
CVE: CVE-2012-0014
Published: 2012-02-14
Description: Microsoft .NET Framework 2.0 SP2, 3.5.1, and 4, and Silverlight 4 before 4.1.10111, does not properly restrict access to memory associated with unmanaged objects, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET application, (3) a crafted .NET Framework application, or (4) a crafted Silverlight application, aka ".NET Framework Unmanaged Objects Vulnerability."
CVSS Score: 7.8 (HIGH)
CWE: CWE-94, CWE-94
References: http://www.us-cert.gov/cas/techalerts/TA12-045A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-016; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13972
CVE: CVE-2012-0015
Published: 2012-02-14
Description: Microsoft .NET Framework 2.0 SP2 and 3.5.1 does not properly calculate the length of an unspecified buffer, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET application, or (3) a crafted .NET Framework application, aka ".NET Framework Heap Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://www.us-cert.gov/cas/techalerts/TA12-045A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-016; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14513
CVE: CVE-2012-0017
Published: 2012-02-14
Description: Cross-site scripting (XSS) vulnerability in inplview.aspx in Microsoft SharePoint Foundation 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via JavaScript sequences in a URL, aka "XSS in inplview.aspx Vulnerability."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.us-cert.gov/cas/techalerts/TA12-045A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-011; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14637
CVE: CVE-2012-0019
Published: 2012-02-14
Description: Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file, aka "VSD File Format Memory Corruption Vulnerability," a different vulnerability than CVE-2012-0020, CVE-2012-0136, CVE-2012-0137, and CVE-2012-0138.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://www.us-cert.gov/cas/techalerts/TA12-045A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-015; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14347
CVE: CVE-2012-0020
Published: 2012-02-14
Description: Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file, aka "VSD File Format Memory Corruption Vulnerability," a different vulnerability than CVE-2012-0019, CVE-2012-0136, CVE-2012-0137, and CVE-2012-0138.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://www.us-cert.gov/cas/techalerts/TA12-045A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-015; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14965
CVE: CVE-2012-0136
Published: 2012-02-14
Description: Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file, aka "VSD File Format Memory Corruption Vulnerability," a different vulnerability than CVE-2012-0019, CVE-2012-0020, CVE-2012-0137, and CVE-2012-0138.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://www.us-cert.gov/cas/techalerts/TA12-045A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-015; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14924
CVE: CVE-2012-0137
Published: 2012-02-14
Description: Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file, aka "VSD File Format Memory Corruption Vulnerability," a different vulnerability than CVE-2012-0019, CVE-2012-0020, CVE-2012-0136, and CVE-2012-0138.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://www.us-cert.gov/cas/techalerts/TA12-045A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-015; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14602