deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2010-0135
Published: 2010-08-17
Description: Heap-based buffer overflow in the WordPerfect 5.x reader (wosr.dll), as used in Autonomy KeyView 10.4 and 10.9 and possibly other products, allows remote attackers to execute arbitrary code via unspecified vectors related to "data blocks."
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/secunia_research/2010-31/; http://www-01.ibm.com/support/docview.wss?uid=swg21440812; http://www.securityfocus.com/bid/41928
CVE: CVE-2010-1524
Published: 2010-08-17
Description: The SpreadSheet Lotus 123 reader (wkssr.dll) in Autonomy KeyView 10.4 and 10.9, as used in multiple IBM, Symantec, and other products, allows remote attackers to execute arbitrary code via unspecified vectors related to allocation of an array of pointers and "string indexing," which triggers memory corruption.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/secunia_research/2010-35/; http://www-01.ibm.com/support/docview.wss?uid=swg21440812; http://www.securityfocus.com/bid/41928
CVE: CVE-2010-1525
Published: 2010-08-17
Description: Integer underflow in the SpreadSheet Lotus 123 reader (wkssr.dll) in Autonomy KeyView 10.4 and 10.9, as used in multiple IBM, Symantec, and other products, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted size for an unspecified record type, which triggers a heap-based buffer overflow.
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: http://secunia.com/secunia_research/2010-49/; http://www-01.ibm.com/support/docview.wss?uid=swg21440812; http://www.securityfocus.com/bid/41928
CVE: CVE-2010-1870
Published: 2010-08-17
Description: The OGNL extensive expression evaluation capability in XWork in Struts 2.0.0 through 2.1.8.1, as used in Atlassian Fisheye, Crucible, and possibly other products, uses a permissive whitelist, which allows remote attackers to modify server-side context objects and bypass the "#" protection mechanism in ParameterInterceptors via the (1) #context, (2) #_memberAccess, (3) #root, (4) #this, (5) #_typeResolver, (6) #_classResolver, (7) #_traceEvaluations, (8) #_lastEvaluation, (9) #_keepLastEvaluation, and possibly other OGNL context variables, a different vulnerability than CVE-2008-6504.
CVSS Score: 5.0 (MEDIUM)
References: http://blog.o0o.nu/2010/07/cve-2010-1870-struts2xwork-remote.html; http://confluence.atlassian.com/display/FISHEYE/FishEye+Security+Advisory+2010-06-16; http://packetstormsecurity.com/files/159643/LISTSERV-Maestro-9.0-8-Remote-Code-Execution.html
CVE: CVE-2010-2241
Published: 2010-08-17
Description: The (1) setup-ds.pl and (2) setup-ds-admin.pl setup scripts for Red Hat Directory Server 8 before 8.2 use world-readable permissions when creating cache files, which allows local users to obtain sensitive information including passwords for Directory and Administration Server administrative accounts.
CVSS Score: 2.1 (LOW)
CWE: CWE-264
References: http://rhn.redhat.com/errata/RHSA-2010-0590.html; http://secunia.com/advisories/40811; http://www.osvdb.org/66962
CVE: CVE-2010-2939
Published: 2010-08-17
Description: Double free vulnerability in the ssl3_get_key_exchange function in the OpenSSL client (ssl/s3_clnt.c) in OpenSSL 1.0.0a, 0.9.8, 0.9.7, and possibly other versions, when using ECDH, allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted private key with an invalid prime.  NOTE: some sources refer to this as a use-after-free issue.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-399
References: http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00005.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]7777&w=2; http://seclists.org/fulldisclosure/2010/Aug/84
CVE: CVE-2010-3030
Published: 2010-08-17
Description: Cross-site request forgery (CSRF) vulnerability in Tomaz Muraus Open Blog 1.2.1, and possibly earlier, allows remote attackers to hijack the authentication of administrators for requests that change the administrative password.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://secunia.com/advisories/40876; http://secunia.com/advisories/40876
CVE: CVE-2010-3031
Published: 2010-08-17
Description: Buffer overflow in Wyse ThinOS HF 4.4.079i, and possibly other versions before ThinOS 6.5, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string to the LPD service.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://www.kb.cert.org/vuls/id/320233; http://www.kb.cert.org/vuls/id/JALR-87AKR5; http://www.kb.cert.org/vuls/id/320233
CVE: CVE-2010-3032
Published: 2010-08-17
Description: Integer overflow in the OBGIOPServerWorker::extractHeader function in the ebus-3-3-2-6.dll module in SAP Crystal Reports 2008 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a GIOP packet with a crafted size, which triggers a heap-based buffer overflow.
CVSS Score: 10.0 (HIGH)
CWE: CWE-189
References: http://dvlabs.tippingpoint.com/advisory/TPTI-10-07; http://osvdb.org/67080; http://secunia.com/advisories/40960
CVE: CVE-2010-1516
Published: 2010-08-17
Description: Multiple integer overflows in SWFTools 0.9.1 allow remote attackers to execute arbitrary code via (1) a crafted PNG file, related to the getPNG function in lib/png.c; or (2) a crafted JPEG file, related to the jpeg_load function in lib/jpeg.c.
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: http://secunia.com/advisories/39970; http://secunia.com/advisories/48821; http://secunia.com/secunia_research/2010-80/
CVE: CVE-2010-2812
Published: 2010-08-17
Description: Client.cpp in ZNC 0.092 allows remote attackers to cause a denial of service (exception and daemon crash) via a PING command that lacks an argument.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://lists.fedoraproject.org/pipermail/package-announce/2010-August/045385.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-August/045386.html; http://marc.info/?l=oss-security&m=[PII_REDACTED]7810&w=2
CVE: CVE-2010-2934
Published: 2010-08-17
Description: Multiple unspecified vulnerabilities in ZNC 0.092 allow remote attackers to cause a denial of service (exception and daemon crash) via unknown vectors related to "unsafe substr() calls."
CVSS Score: 5.0 (MEDIUM)
References: http://lists.fedoraproject.org/pipermail/package-announce/2010-August/045385.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-August/045386.html; http://marc.info/?l=oss-security&m=[PII_REDACTED]7810&w=2
CVE: CVE-2010-2076
Published: 2010-08-19
Description: Apache CXF 2.0.x before 2.0.13, 2.1.x before 2.1.10, and 2.2.x before 2.2.9, as used in Apache ServiceMix, Apache Camel, Apache Chemistry, Apache jUDDI, Apache Geronimo, and other products, does not properly reject DTDs in SOAP messages, which allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and memory consumption) via a crafted DTD, as demonstrated by an entity declaration in a request to samples/wsdl_first_pure_xml, a similar issue to CVE-2010-1632.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-829
References: http://geronimo.apache.org/2010/07/21/apache-geronimo-v216-released.html; http://geronimo.apache.org/21x-security-report.html; http://geronimo.apache.org/22x-security-report.html
CVE: CVE-2010-2237
Published: 2010-08-19
Description: Red Hat libvirt, possibly 0.6.1 through 0.8.2, looks up disk backing stores without referring to the user-defined main disk format, which might allow guest OS users to read arbitrary files on the host OS, and possibly have unspecified other impact, via unknown vectors.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-264
References: http://libvirt.org/news.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044520.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044579.html
CVE: CVE-2010-2238
Published: 2010-08-19
Description: Red Hat libvirt, possibly 0.7.2 through 0.8.2, recurses into disk-image backing stores without extracting the defined disk backing-store format, which might allow guest OS users to read arbitrary files on the host OS, and possibly have unspecified other impact, via unknown vectors.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-264
References: http://libvirt.org/news.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044520.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044579.html
CVE: CVE-2010-2239
Published: 2010-08-19
Description: Red Hat libvirt, possibly 0.6.0 through 0.8.2, creates new images without setting the user-defined backing-store format, which allows guest OS users to read arbitrary files on the host OS via unspecified vectors.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-264
References: http://libvirt.org/news.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044520.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044579.html
CVE: CVE-2010-2242
Published: 2010-08-19
Description: Red Hat libvirt 0.2.0 through 0.8.2 creates iptables rules with improper mappings of privileged source ports, which allows guest OS users to bypass intended access restrictions by leveraging IP address and source-port values, as demonstrated by copying and deleting an NFS directory tree.
CVSS Score: 2.1 (LOW)
CWE: CWE-264
References: http://libvirt.org/news.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044520.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044579.html
CVE: CVE-2010-2497
Published: 2010-08-19
Description: Integer underflow in glyph handling in FreeType before 2.4.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-191
References: http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=7d3d2cc4fef72c6be9c454b3809c387e12b44cfc; http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html; http://lists.nongnu.org/archive/html/freetype/2010-07/msg00001.html
CVE: CVE-2010-2498
Published: 2010-08-19
Description: The psh_glyph_find_strong_points function in pshinter/pshalgo.c in FreeType before 2.4.0 does not properly implement hinting masks, which allows remote attackers to cause a denial of service (heap memory corruption and application crash) or possibly execute arbitrary code via a crafted font file that triggers an invalid free operation.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-787
References: http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=8d22746c9e5af80ff4304aef440986403a5072e2; http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html; http://lists.nongnu.org/archive/html/freetype/2010-07/msg00001.html
CVE: CVE-2010-2499
Published: 2010-08-19
Description: Buffer overflow in the Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.4.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted LaserWriter PS font file with an embedded PFB fragment.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-120
References: http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=c69891a[PII_REDACTED]fbf396e8dd567fe879ce233; http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=f29f741efbba0a5ce2f16464f648fb8d026ed4c8; http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html
CVE: CVE-2010-2500
Published: 2010-08-19
Description: Integer overflow in the gray_render_span function in smooth/ftgrays.c in FreeType before 2.4.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-190
References: http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=6305b869d86ff415a33576df6d43729673c66eee; http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html; http://lists.nongnu.org/archive/html/freetype/2010-07/msg00001.html
CVE: CVE-2010-2519
Published: 2010-08-19
Description: Heap-based buffer overflow in the Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.4.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted length value in a POST fragment header in a font file.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-787
References: http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=5ef20c8c1d4de12a84b50ba497c2a358c90ec44b; http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=b2ea64bcc6c385a8e8318f9c759450a07df58b6d; http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html
CVE: CVE-2010-2520
Published: 2010-08-19
Description: Heap-based buffer overflow in the Ins_IUP function in truetype/ttinterp.c in FreeType before 2.4.0, when TrueType bytecode support is enabled, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-787
References: http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=888cd1843e935fe675cf2ac303116d4ed5b9d54b; http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html; http://lists.nongnu.org/archive/html/freetype/2010-07/msg00001.html
CVE: CVE-2010-2527
Published: 2010-08-19
Description: Multiple buffer overflows in demo programs in FreeType before 2.4.0 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-120
References: http://git.savannah.gnu.org/cgit/freetype/freetype2-demos.git/commit/?id=b995299b73ba4cd259f221f500d4e63095508bec; http://lists.nongnu.org/archive/html/freetype/2010-07/msg00001.html; http://marc.info/?l=oss-security&m=[PII_REDACTED]8467&w=2
CVE: CVE-2010-2541
Published: 2010-08-19
Description: Buffer overflow in ftmulti.c in the ftmulti demo program in FreeType before 2.4.2 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-120
References: http://freetype.sourceforge.net/index2.html#release-freetype-2.4.2; http://secunia.com/advisories/40982; http://secunia.com/advisories/48951
CVE: CVE-2010-2805
Published: 2010-08-19
Description: The FT_Stream_EnterFrame function in base/ftstream.c in FreeType before 2.4.2 does not properly validate certain position values, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: http://freetype.sourceforge.net/index2.html#release-freetype-2.4.2; http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=45a3c76b547511fa9d97aca34b150a[PII_REDACTED]; http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html
CVE: CVE-2010-2806
Published: 2010-08-19
Description: Array index error in the t42_parse_sfnts function in type42/t42parse.c in FreeType before 2.4.2 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via negative size values for certain strings in FontType42 font files, leading to a heap-based buffer overflow.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-129
References: http://freetype.sourceforge.net/index2.html#release-freetype-2.4.2; http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=c06da1ad34663da7b6fc39b030dc3ae185b96557; http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html
CVE: CVE-2010-2807
Published: 2010-08-19
Description: FreeType before 2.4.2 uses incorrect integer data types during bounds checking, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-681
References: http://freetype.sourceforge.net/index2.html#release-freetype-2.4.2; http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=346f1867fd32dae8f56e5b482d1af98f626804ac; http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html
CVE: CVE-2010-2808
Published: 2010-08-19
Description: Buffer overflow in the Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.4.2 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted Adobe Type 1 Mac Font File (aka LWFN) font.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-120
References: http://freetype.sourceforge.net/index2.html#release-freetype-2.4.2; http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=81f3472c0ba7b8f6466e2e214fa8c1c17fade975; http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html
CVE: CVE-2010-2813
Published: 2010-08-19
Description: functions/imap_general.php in SquirrelMail before 1.4.21 does not properly handle 8-bit characters in passwords, which allows remote attackers to cause a denial of service (disk consumption) by making many IMAP login attempts with different usernames, leading to the creation of many preferences files.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-August/045372.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-August/045383.html
CVE: CVE-2010-3053
Published: 2010-08-19
Description: bdf/bdflib.c in FreeType before 2.4.2 allows remote attackers to cause a denial of service (application crash) via a crafted BDF font file, related to an attempted modification of a value in a static string.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html; http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html
CVE: CVE-2010-3054
Published: 2010-08-19
Description: Unspecified vulnerability in FreeType 2.3.9, and other versions before 2.4.2, allows remote attackers to cause a denial of service via vectors involving nested Standard Encoding Accented Character (aka seac) calls, related to psaux.h, cffgload.c, cffgload.h, and t1decode.c.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html; http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html
CVE: CVE-2010-1386
Published: 2010-08-19
Description: page/Geolocation.cpp in WebCore in WebKit before r56188 and before 1.2.5 does not properly restrict access to the lastPosition function, which has unspecified impact and remote attack vectors, aka rdar problem 7746357.
CVSS Score: 10.0 (HIGH)
CWE: CWE-264
References: http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html; http://secunia.com/advisories/41856; http://secunia.com/advisories/43068
CVE: CVE-2010-1760
Published: 2010-08-19
Description: loader/DocumentThreadableLoader.cpp in the XMLHttpRequest implementation in WebCore in WebKit before r58409 does not properly handle credentials during a cross-origin synchronous request, which has unspecified impact and remote attack vectors, aka rdar problem 7905150.
CVSS Score: 10.0 (HIGH)
CWE: CWE-255
References: http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html; http://secunia.com/advisories/41856; http://secunia.com/advisories/43068
CVE: CVE-2010-2234
Published: 2010-08-19
Description: Cross-site request forgery (CSRF) vulnerability in Apache CouchDB 0.8.0 through 0.11.0 allows remote attackers to hijack the authentication of administrators for direct requests to an installation URL.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://seclists.org/fulldisclosure/2010/Aug/199; http://www.securityfocus.com/archive/1/513174/100/0/threaded; http://www.securityfocus.com/bid/42501
CVE: CVE-2010-2809
Published: 2010-08-19
Description: The default configuration of the <Button2> binding in Uzbl before 2010.08.05 does not properly use the @SELECTED_URI feature, which allows user-assisted remote attackers to execute arbitrary commands via a crafted HREF attribute of an A element in an HTML document.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://github.com/Dieterbe/uzbl/commit/9cc39cb5c9396be013b5dc2ba7e4b3eaa647e975; http://github.com/pawelz/uzbl/commit/342f292c27973c9df5f631a38bd12f14a9c5cdc2; http://marc.info/?l=oss-security&m=[PII_REDACTED]9265&w=2
CVE: CVE-2008-7258
Published: 2010-08-20
Description: The standardise function in Anibal Monsalve Salazar sSMTP 2.61 and 2.62 allows local users to cause a denial of service (application exit) via an e-mail message containing a long line that begins with a . (dot) character.  NOTE: CVE disputes this issue because it is solely a usability problem for senders of messages with certain long lines, and has no security impact
CVSS Score: 2.1 (LOW)
CWE: CWE-20
References: http://lists.fedoraproject.org/pipermail/package-announce/2010-August/045407.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-August/045422.html; http://marc.info/?l=oss-security&m=[PII_REDACTED]7262&w=2
CVE: CVE-2010-1172
Published: 2010-08-20
Description: DBus-GLib 0.73 disregards the access flag of exported GObject properties, which allows local users to bypass intended access restrictions and possibly cause a denial of service by modifying properties, as demonstrated by properties of the (1) DeviceKit-Power, (2) NetworkManager, and (3) ModemManager services.
CVSS Score: 3.6 (LOW)
CWE: CWE-264
References: http://cgit.freedesktop.org/dbus/dbus-glib/commit/?h=rhel5&id=9a6bce9b615abca6068348c1606ba8eaf13d9ae0; http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705; http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html
CVE: CVE-2010-2628
Published: 2010-08-20
Description: The IKE daemon in strongSwan 4.3.x before 4.3.7 and 4.4.x before 4.4.1 does not properly check the return values of snprintf calls, which allows remote attackers to execute arbitrary code via crafted (1) certificate or (2) identity data that triggers buffer overflows.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://download.strongswan.org/patches/08_snprintf_patch/strongswan-4.3.3_snprintf.patch; http://download.strongswan.org/patches/08_snprintf_patch/strongswan-4.3.4_snprintf.patch; http://download.strongswan.org/patches/08_snprintf_patch/strongswan-4.3.5_snprintf.patch
CVE: CVE-2010-2810
Published: 2010-08-20
Description: Heap-based buffer overflow in the convert_to_idna function in WWW/Library/Implementation/HTParse.c in Lynx 2.8.8dev.1 through 2.8.8dev.4 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a malformed URL containing a % (percent) character in the domain name.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://marc.info/?l=oss-security&m=[PII_REDACTED]0564&w=2; http://marc.info/?l=oss-security&m=[PII_REDACTED]1677&w=2; http://www.ubuntu.com/usn/USN-1642-1
CVE: CVE-2010-2937
Published: 2010-08-20
Description: The ReadMetaFromId3v2 function in taglib.cpp in the TagLib plugin in VideoLAN VLC media player 0.9.0 through 1.1.2 does not properly process ID3v2 tags, which allows remote attackers to cause a denial of service (application crash) via a crafted media file.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://git.videolan.org/?p=vlc/vlc-1.0.git%3Ba=commit%3Bh=22a22e356c9d[PII_REDACTED]0b2e25b59b55925b3a; http://git.videolan.org/?p=vlc/vlc-1.1.git%3Ba=commit%3Bh=24918843e57c7962e28fcb01845adce82bed6516; http://www.securityfocus.com/bid/42386