deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2011-1674
Published: 2011-04-10
Description: The NetGear ProSafe WNAP210 with firmware 2.0.12 allows remote attackers to bypass authentication and obtain access to the configuration page by visiting recreate.php and then visiting index.php.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-287
References: http://secunia.com/advisories/44045; http://www.kb.cert.org/vuls/id/644812; http://www.vupen.com/english/advisories/2011/0884
CVE: CVE-2011-1675
Published: 2011-04-10
Description: mount in util-linux 2.19 and earlier attempts to append to the /etc/mtab.tmp file without first checking whether resource limits would interfere, which allows local users to trigger corruption of the /etc/mtab file via a process with a small RLIMIT_FSIZE value, a related issue to CVE-2011-1089.
CVSS Score: 3.3 (LOW)
CWE: CWE-399
References: http://openwall.com/lists/oss-security/2011/03/04/10; http://openwall.com/lists/oss-security/2011/03/04/11; http://openwall.com/lists/oss-security/2011/03/04/12
CVE: CVE-2011-1676
Published: 2011-04-10
Description: mount in util-linux 2.19 and earlier does not remove the /etc/mtab.tmp file after a failed attempt to add a mount entry, which allows local users to trigger corruption of the /etc/mtab file via multiple invocations.
CVSS Score: 3.3 (LOW)
CWE: CWE-264
References: http://openwall.com/lists/oss-security/2011/03/04/10; http://openwall.com/lists/oss-security/2011/03/04/11; http://openwall.com/lists/oss-security/2011/03/04/12
CVE: CVE-2011-1677
Published: 2011-04-10
Description: mount in util-linux 2.19 and earlier does not remove the /etc/mtab~ lock file after a failed attempt to add a mount entry, which has unspecified impact and local attack vectors.
CVSS Score: 4.6 (MEDIUM)
References: http://openwall.com/lists/oss-security/2011/03/04/10; http://openwall.com/lists/oss-security/2011/03/04/11; http://openwall.com/lists/oss-security/2011/03/04/12
CVE: CVE-2011-1678
Published: 2011-04-10
Description: smbfs in Samba 3.5.8 and earlier attempts to use (1) mount.cifs to append to the /etc/mtab file and (2) umount.cifs to append to the /etc/mtab.tmp file without first checking whether resource limits would interfere, which allows local users to trigger corruption of the /etc/mtab file via a process with a small RLIMIT_FSIZE value, a related issue to CVE-2011-1089.
CVSS Score: 3.3 (LOW)
CWE: CWE-20
References: http://openwall.com/lists/oss-security/2011/03/04/10; http://openwall.com/lists/oss-security/2011/03/04/11; http://openwall.com/lists/oss-security/2011/03/04/12
CVE: CVE-2011-1679
Published: 2011-04-10
Description: ncpfs 2.2.6 and earlier attempts to use (1) ncpmount to append to the /etc/mtab file and (2) ncpumount to append to the /etc/mtab.tmp file without first checking whether resource limits would interfere, which allows local users to trigger corruption of the /etc/mtab file via a process with a small RLIMIT_FSIZE value, a related issue to CVE-2011-1089.
CVSS Score: 3.3 (LOW)
CWE: CWE-20
References: http://openwall.com/lists/oss-security/2011/03/04/10; http://openwall.com/lists/oss-security/2011/03/04/11; http://openwall.com/lists/oss-security/2011/03/04/12
CVE: CVE-2011-1680
Published: 2011-04-10
Description: ncpmount in ncpfs 2.2.6 and earlier does not remove the /etc/mtab~ lock file after a failed attempt to add a mount entry, which has unspecified impact and local attack vectors.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-264
References: http://openwall.com/lists/oss-security/2011/03/04/10; http://openwall.com/lists/oss-security/2011/03/04/11; http://openwall.com/lists/oss-security/2011/03/04/12
CVE: CVE-2011-1681
Published: 2011-04-10
Description: vmware-hgfsmounter in VMware Open Virtual Machine Tools (aka open-vm-tools) 8.4.2-261024 and earlier attempts to append to the /etc/mtab file without first checking whether resource limits would interfere, which allows local users to trigger corruption of this file via a process with a small RLIMIT_FSIZE value, a related issue to CVE-2011-1089.
CVSS Score: 3.3 (LOW)
CWE: CWE-16
References: http://openwall.com/lists/oss-security/2011/03/04/10; http://openwall.com/lists/oss-security/2011/03/04/11; http://openwall.com/lists/oss-security/2011/03/04/12
CVE: CVE-2009-5065
Published: 2011-04-11
Description: Cross-site scripting (XSS) vulnerability in feedparser.py in Universal Feed Parser (aka feedparser or python-feedparser) before 5.0 allows remote attackers to inject arbitrary web script or HTML via vectors involving nested CDATA stanzas.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://code.google.com/p/feedparser/issues/detail?id=195; http://lists.opensuse.org/opensuse-updates/2011-04/msg00026.html; http://secunia.com/advisories/44074
CVE: CVE-2011-1156
Published: 2011-04-11
Description: feedparser.py in Universal Feed Parser (aka feedparser or python-feedparser) before 5.0.1 allows remote attackers to cause a denial of service (application crash) via a malformed DOCTYPE declaration.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://lists.opensuse.org/opensuse-updates/2011-04/msg00026.html; http://openwall.com/lists/oss-security/2011/03/14/18; http://openwall.com/lists/oss-security/2011/03/15/11
CVE: CVE-2011-1157
Published: 2011-04-11
Description: Cross-site scripting (XSS) vulnerability in feedparser.py in Universal Feed Parser (aka feedparser or python-feedparser) 5.x before 5.0.1 allows remote attackers to inject arbitrary web script or HTML via malformed XML comments.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://lists.opensuse.org/opensuse-updates/2011-04/msg00026.html; http://openwall.com/lists/oss-security/2011/03/14/18; http://openwall.com/lists/oss-security/2011/03/15/11
CVE: CVE-2011-1158
Published: 2011-04-11
Description: Cross-site scripting (XSS) vulnerability in feedparser.py in Universal Feed Parser (aka feedparser or python-feedparser) 5.x before 5.0.1 allows remote attackers to inject arbitrary web script or HTML via an unexpected URI scheme, as demonstrated by a javascript: URI.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://lists.opensuse.org/opensuse-updates/2011-04/msg00026.html; http://openwall.com/lists/oss-security/2011/03/14/18; http://openwall.com/lists/oss-security/2011/03/15/11
CVE: CVE-2011-1401
Published: 2011-04-11
Description: ikiwiki before 3.20110328 does not ascertain whether the htmlscrubber plugin is enabled during processing of the "meta stylesheet" directive, which allows remote authenticated users to conduct cross-site scripting (XSS) attacks via crafted Cascading Style Sheets (CSS) token sequences in (1) the default stylesheet or (2) an alternate stylesheet.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://ikiwiki.info/security/#index39h2; http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058403.html; http://secunia.com/advisories/44079
CVE: CVE-2011-1487
Published: 2011-04-11
Description: The (1) lc, (2) lcfirst, (3) uc, and (4) ucfirst functions in Perl 5.10.x, 5.11.x, and 5.12.x through 5.12.3, and 5.13.x through 5.13.11, do not apply the taint attribute to the return value upon processing tainted input, which might allow context-dependent attackers to bypass the taint protection mechanism via a crafted string.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057891.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057971.html; http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html
CVE: CVE-2011-0611
Published: 2011-04-13
Description: Adobe Flash Player before 10.2.154.27 on Windows, Mac OS X, Linux, and Solaris and 10.2.156.12 and earlier on Android; Adobe AIR before 2.6.19140; and Authplay.dll (aka AuthPlayLib.bundle) in Adobe Reader 9.x before 9.4.4 and 10.x through 10.0.1 on Windows, Adobe Reader 9.x before 9.4.4 and 10.x before 10.0.3 on Mac OS X, and Adobe Acrobat 9.x before 9.4.4 and 10.x before 10.0.3 on Windows and Mac OS X allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content; as demonstrated by a Microsoft Office document with an embedded .swf file that has a size inconsistency in a "group of included constants," object type confusion, ActionScript that adds custom functions to prototypes, and Date objects; and as exploited in the wild in April 2011.
CVSS Score: 8.8 (HIGH)
CWE: CWE-843, CWE-843
References: http://blogs.technet.com/b/mmpc/archive/2011/04/12/analysis-of-the-cve-2011-0611-adobe-flash-player-vulnerability-exploitation.aspx; http://bugix-security.blogspot.com/2011/04/cve-2011-0611-adobe-flash-zero-day.html; http://contagiodump.blogspot.com/2011/04/apr-8-cve-2011-0611-flash-player-zero.html
CVE: CVE-2011-0746
Published: 2011-04-13
Description: Cross-site request forgery (CSRF) vulnerability in Forms/PortForwarding_Edit_1 on the ZyXEL O2 DSL Router Classic allows remote attackers to hijack the authentication of administrators for requests that insert cross-site scripting (XSS) sequences via the PortRule_Name parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: http://int21.de/cve/CVE-2011-0746-o2-router.html; http://securityreason.com/securityalert/8198; http://www.securityfocus.com/archive/1/517399/100/0/threaded
CVE: CVE-2011-0748
Published: 2011-04-13
Description: Multiple cross-site request forgery (CSRF) vulnerabilities in phpList before 2.10.13 allow remote attackers to hijack the authentication of administrators for requests that (1) add or (2) edit administrator accounts.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://int21.de/cve/CVE-2011-0748-phplist.html; http://osvdb.org/78549; http://secunia.com/advisories/44041
CVE: CVE-2011-0996
Published: 2011-04-13
Description: dhcpcd before 5.2.12 allows remote attackers to execute arbitrary commands via shell metacharacters in a hostname obtained from a DHCP message.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: http://roy.marples.name/archives/dhcpcd-discuss/2011/0326.html; http://roy.marples.name/projects/dhcpcd/changeset/c317b39786ac6c3a939dc711db7c78cf099859fd; http://roy.marples.name/projects/dhcpcd/timeline
CVE: CVE-2011-1500
Published: 2011-04-13
Description: PreferencesPithosDialog.py in Pithos 0.3.7 does not properly restrict permissions for the .config/pithos.ini file in a user's home directory, which allows local users to obtain Pandora credentials by reading this file.
CVSS Score: 2.1 (LOW)
CWE: CWE-264
References: http://openwall.com/lists/oss-security/2011/04/08/2; http://openwall.com/lists/oss-security/2011/04/08/4; http://secunia.com/advisories/44059
CVE: CVE-2011-1682
Published: 2011-04-13
Description: Multiple cross-site request forgery (CSRF) vulnerabilities in phpList 2.10.13 and earlier allow remote attackers to hijack the authentication of administrators for requests that (1) create a list or (2) insert cross-site scripting (XSS) sequences.  NOTE: this issue exists because of an incomplete fix for CVE-2011-0748.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: http://secunia.com/advisories/44041; https://exchange.xforce.ibmcloud.com/vulnerabilities/66666; https://exchange.xforce.ibmcloud.com/vulnerabilities/66816
CVE: CVE-2011-1683
Published: 2011-04-13
Description: IBM WebSphere Application Server (WAS) 6.0.x through 6.0.2.43, 6.1.x before 6.1.0.37, and 7.0.x before 7.0.0.17 on z/OS, when a Local OS user registry or Federated Repository with RACF adapter is used, allows remote attackers to obtain unspecified application access via unknown vectors.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-264
References: http://secunia.com/advisories/43965; http://www-01.ibm.com/support/docview.wss?uid=swg21473989; http://www.ibm.com/support/docview.wss?uid=swg1PM35478
CVE: CVE-2010-3958
Published: 2011-04-13
Description: The x86 JIT compiler in Microsoft .NET Framework 2.0 SP2, 3.5 SP1, 3.5.1, and 4.0 does not properly compile function calls, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET application, or (3) a crafted .NET Framework application, aka ".NET Framework Stack Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://www.us-cert.gov/cas/techalerts/TA11-102A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-028; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12406
CVE: CVE-2010-3974
Published: 2011-04-13
Description: fxscover.exe in the Fax Cover Page Editor in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly parse FAX cover pages, which allows remote attackers to execute arbitrary code via a crafted .cov file, aka "Fax Cover Page Editor Memory Corruption Vulnerability."
CVSS Score: 7.6 (HIGH)
CWE: CWE-119
References: http://www.us-cert.gov/cas/techalerts/TA11-102A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-024; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12390
CVE: CVE-2011-0028
Published: 2011-04-13
Description: WordPad in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly parse fields in Word documents, which allows remote attackers to execute arbitrary code via a crafted .doc file, aka "WordPad Converter Parsing Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://www.us-cert.gov/cas/techalerts/TA11-102A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-033; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12301
CVE: CVE-2011-0034
Published: 2011-04-13
Description: Stack-based buffer overflow in the OpenType Compact Font Format (aka OTF or CFF) driver in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via crafted parameter values in an OpenType font, aka "OpenType Font Stack Overflow Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.us-cert.gov/cas/techalerts/TA11-102A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-032; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11860
CVE: CVE-2011-0041
Published: 2011-04-13
Description: Integer overflow in gdiplus.dll in GDI+ in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold and SP2, and Office XP SP3 allows remote attackers to execute arbitrary code via a crafted EMF image, aka "GDI+ Integer Overflow Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: http://www.us-cert.gov/cas/techalerts/TA11-102A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-029; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11854
CVE: CVE-2011-0094
Published: 2011-04-13
Description: Use-after-free vulnerability in Microsoft Internet Explorer 6 and 7 allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, aka "Layouts Handling Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=900; http://www.securitytracker.com/id?1025327; http://www.us-cert.gov/cas/techalerts/TA11-102A.html
CVE: CVE-2011-0097
Published: 2011-04-13
Description: Integer underflow in Microsoft Excel 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 allows remote attackers to execute arbitrary code via a crafted 400h substream in an Excel file, which triggers a stack-based buffer overflow, aka "Excel Integer Overrun Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: http://osvdb.org/71758; http://secunia.com/advisories/39122; http://secunia.com/secunia_research/2011-31
CVE: CVE-2011-0098
Published: 2011-04-13
Description: Integer signedness error in Microsoft Excel 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 allows remote attackers to execute arbitrary code via an XLS file with a large record size, aka "Excel Heap Overflow Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: http://osvdb.org/71759; http://secunia.com/advisories/39122; http://secunia.com/secunia_research/2011-32/
CVE: CVE-2011-0101
Published: 2011-04-13
Description: Microsoft Excel 2002 SP3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted RealTimeData record, related to a stTopic field, double-byte characters, and an incorrect pointer calculation, aka "Excel Record Parsing WriteAV Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://osvdb.org/71766; http://secunia.com/advisories/39122; http://www.securityfocus.com/archive/1/517463/100/0/threaded
CVE: CVE-2011-0103
Published: 2011-04-13
Description: Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted record information in an Excel file, aka "Excel Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=901; http://osvdb.org/71760; http://secunia.com/advisories/39122
CVE: CVE-2011-0104
Published: 2011-04-13
Description: Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted HLink record in an Excel file, aka "Excel Buffer Overwrite Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://osvdb.org/71761; http://secunia.com/advisories/39122; http://www.checkpoint.com/defense/advisories/public/2011/cpai-31-Mard.html
CVE: CVE-2011-0105
Published: 2011-04-13
Description: Microsoft Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac obtain a certain length value from an uninitialized memory location, which allows remote attackers to trigger a buffer overflow and execute arbitrary code via a crafted Excel file, aka "Excel Data Initialization Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/39122; http://www.securitytracker.com/id?1025337; http://www.us-cert.gov/cas/techalerts/TA11-102A.html
CVE: CVE-2011-0107
Published: 2011-04-13
Description: Untrusted search path vulnerability in Microsoft Office XP SP3, Office 2003 SP3, and Office 2007 SP2 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .docx file, aka "Office Component Insecure Library Loading Vulnerability."
CVSS Score: 9.3 (HIGH)
References: http://osvdb.org/71767; http://secunia.com/advisories/44015; http://www.fortiguard.com/advisory/FGA-2011-13.html
CVE: CVE-2011-0655
Published: 2011-04-13
Description: Microsoft PowerPoint 2007 SP2 and 2010; Office 2004, 2008, and 2011 for Mac; Open XML File Format Converter for Mac; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2; PowerPoint Viewer; PowerPoint Viewer 2007 SP2; and PowerPoint Web App do not properly validate TimeColorBehaviorContainer Floating Point records in PowerPoint documents, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted document containing an invalid record, aka "Floating Point Techno-color Time Bandit RCE Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://www.securitytracker.com/id?1025340; http://www.us-cert.gov/cas/techalerts/TA11-102A.html; http://www.vupen.com/english/advisories/2011/0941
CVE: CVE-2011-0656
Published: 2011-04-13
Description: Microsoft PowerPoint 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004, 2008, and 2011 for Mac; Open XML File Format Converter for Mac; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2; PowerPoint Viewer; PowerPoint Viewer 2007 SP2; and PowerPoint Web App do not properly validate PersistDirectoryEntry records in PowerPoint documents, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a Slide with a malformed record, which triggers an exception and later use of an unspecified method, aka "Persist Directory RCE Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://osvdb.org/71770; http://www.securityfocus.com/archive/1/517482/100/0/threaded; http://www.securityfocus.com/bid/47251
CVE: CVE-2011-0657
Published: 2011-04-13
Description: DNSAPI.dll in the DNS client in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly process DNS queries, which allows remote attackers to execute arbitrary code via (1) a crafted LLMNR broadcast query or (2) a crafted application, aka "DNS Query Vulnerability."
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: http://osvdb.org/71780; http://secunia.com/advisories/44161; http://www.securityfocus.com/bid/47242
CVE: CVE-2011-0660
Published: 2011-04-13
Description: The SMB client in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote SMB servers to execute arbitrary code via a crafted (1) SMBv1 or (2) SMBv2 response, aka "SMB Client Response Parsing Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://osvdb.org/71772; http://www.securityfocus.com/bid/47239; http://www.securitytracker.com/id?1025328
CVE: CVE-2011-0661
Published: 2011-04-13
Description: The SMB Server service in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly validate fields in SMB requests, which allows remote attackers to execute arbitrary code via a malformed request in a (1) SMBv1 or (2) SMBv2 packet, aka "SMB Transaction Parsing Vulnerability."
CVSS Score: 10.0 (HIGH)
CWE: CWE-20
References: http://osvdb.org/71781; http://secunia.com/advisories/44072; http://www.securityfocus.com/bid/47198
CVE: CVE-2011-0662
Published: 2011-04-13
Description: Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other "Vulnerability Type 1" CVEs listed in MS11-034, aka "Win32k Use After Free Vulnerability."
CVSS Score: 7.2 (HIGH)
CWE: CWE-399
References: http://blogs.technet.com/b/srd/archive/2011/04/12/ms11-034-addressing-vulnerabilities-in-the-win32k-subsystem.aspx; http://osvdb.org/71740; http://secunia.com/advisories/44156
CVE: CVE-2011-0663
Published: 2011-04-13
Description: Multiple integer overflows in the Microsoft (1) JScript 5.6 through 5.8 and (2) VBScript 5.6 through 5.8 scripting engines allow remote attackers to execute arbitrary code via a crafted web page, aka "Scripting Memory Reallocation Vulnerability."
CVSS Score: 8.8 (HIGH)
CWE: CWE-189, CWE-190
References: http://osvdb.org/71774; http://secunia.com/advisories/44162; http://www.securityfocus.com/bid/47249