deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2014-0044
Published: 2014-02-08
Description: The opus_packet_get_samples_per_frame function in client in Mumble 1.2.4 and the 1.2.3 pre-release snapshots allows remote attackers to cause a denial of service (crash) via a crafted length prefix value, which triggers a NULL pointer dereference or a heap-based buffer over-read (aka "out-of-bounds array access").
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-updates/2014-02/msg00063.html; http://mumble.info/security/Mumble-SA-2014-001.txt; http://osvdb.org/102904
CVE: CVE-2014-0045
Published: 2014-02-08
Description: The needSamples method in AudioOutputSpeech.cpp in the client in Mumble 1.2.4 and the 1.2.3 pre-release snapshots, Mumble for iOS 1.1 through 1.2.2, and MumbleKit before commit fd190328a9b24d37382b269a5674b0c0c7a7e36d does not check the return value of the opus_decode_float function, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted Opus voice packet, which triggers an error in opus_decode_float, a conversion of a negative integer to an unsigned integer, and a heap-based buffer over-read and over-write.
CVSS Score: 7.5 (HIGH)
CWE: CWE-189
References: http://lists.opensuse.org/opensuse-updates/2014-02/msg00063.html; http://mumble.info/security/Mumble-SA-2014-002.txt; http://mumble.info/security/Mumble-SA-2014-004.txt
CVE: CVE-2014-1869
Published: 2014-02-08
Description: Multiple cross-site scripting (XSS) vulnerabilities in ZeroClipboard.swf in ZeroClipboard before 1.3.2, as maintained by Jon Rohan and James M. Greene, allow remote attackers to inject arbitrary web script or HTML via vectors related to certain SWF query parameters (aka loaderInfo.parameters).
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/56821; http://www.securityfocus.com/bid/65484; https://access.redhat.com/errata/RHSA-2016:0070
CVE: CVE-2014-1916
Published: 2014-02-08
Description: The (1) opus_packet_get_nb_frames and (2) opus_packet_get_samples_per_frame functions in the client in MumbleKit before commit fd190328a9b24d37382b269a5674b0c0c7a7e36d and Mumble for iOS 1.1 through 1.2.2 do not properly check the return value of the copyDataBlock method, which allow remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted length prefix value in an Opus voice packet.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://mumble.info/security/Mumble-SA-2014-003.txt; http://osvdb.org/102957; http://mumble.info/security/Mumble-SA-2014-003.txt
CVE: CVE-2010-3090
Published: 2014-02-10
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2010-3089. Reason: This issue was MERGED into CVE-2010-3089 in accordance with CVE content decisions, because it is the same type of vulnerability and affects the same versions.  Notes: All CVE users should reference CVE-2010-3089 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2010-4777
Published: 2014-02-10
Description: The Perl_reg_numbered_buff_fetch function in Perl 5.10.0, 5.12.0, 5.14.0, and other versions, when running with debugging enabled, allows context-dependent attackers to cause a denial of service (assertion failure and application exit) via crafted input that is not properly handled when using certain regular expressions, as demonstrated by causing SpamAssassin and OCSInventory to crash.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=628836; http://forums.ocsinventory-ng.org/viewtopic.php?id=7215; http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html
CVE: CVE-2011-4091
Published: 2014-02-10
Description: The libobby server in inc/server.hpp in libnet6 (aka net6) before 1.3.14 does not perform authentication before checking the user name, which allows remote attackers to obtain sensitive information such as server-usage patterns by a particular user and color preferences.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-287
References: http://git.0x539.de/?p=net6.git%3Ba=commitdiff%3Bh=84afca022f063f89bfcd4bb32b1ee911f555abf1%3Bhp=ac61d7fb42a1f977fb527e024bede319c4a9e169; http://lists.opensuse.org/opensuse-updates/2012-01/msg00044.html; http://lists.opensuse.org/opensuse-updates/2012-01/msg00054.html
CVE: CVE-2011-4092
Published: 2014-02-10
Description: obby (aka libobby) does not verify SSL server certificates, which allows remote attackers to spoof servers via an arbitrary certificate.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-20
References: http://www.openwall.com/lists/oss-security/2011/10/30/5; http://www.openwall.com/lists/oss-security/2011/10/31/1; https://bugzilla.redhat.com/show_bug.cgi?id=750636
CVE: CVE-2011-4093
Published: 2014-02-10
Description: Integer overflow in inc/server.hpp in libnet6 (aka net6) before 1.3.14 might allow remote attackers to hijack connections and gain privileges as other users by making a large number of connections until the overflow occurs and an ID of another user is provided.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-190
References: http://git.0x539.de/?p=net6.git%3Ba=commitdiff%3Bh=ac61d7fb42a1f977fb527e024bede319c4a9e169%3Bhp=08c8e2261604c6fcbbaf62f9ae9d13f7015fcb9a; http://lists.opensuse.org/opensuse-updates/2012-01/msg00044.html; http://lists.opensuse.org/opensuse-updates/2012-01/msg00054.html
CVE: CVE-2011-4930
Published: 2014-02-10
Description: Multiple format string vulnerabilities in Condor 7.2.0 through 7.6.4, and possibly certain 7.7.x versions, as used in Red Hat MRG Grid and possibly other products, allow local users to cause a denial of service (condor_schedd daemon and failure to launch jobs) and possibly execute arbitrary code via format string specifiers in (1) the reason for a hold for a job that uses an XML user log, (2) the filename of a file to be transferred, and possibly other unspecified vectors.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-134
References: http://research.cs.wisc.edu/htcondor/security/vulnerabilities/CONDOR-2012-0001.html; http://rhn.redhat.com/errata/RHSA-2012-0099.html; http://rhn.redhat.com/errata/RHSA-2012-0100.html
CVE: CVE-2012-2328
Published: 2014-02-10
Description: internal/cimxml/sax/NodeFactory.java in Standards-Based Linux Instrumentation for Manageability (SBLIM) Common Information Model (CIM) Client (aka sblim-cim-client2) before 2.1.12 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via a crafted XML file.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-310
References: http://lists.opensuse.org/opensuse-updates/2012-12/msg00015.html; http://lists.opensuse.org/opensuse-updates/2013-01/msg00038.html; http://rhn.redhat.com/errata/RHSA-2012-0987.html
CVE: CVE-2012-3404
Published: 2014-02-10
Description: The vfprintf function in stdio-common/vfprintf.c in libc in GNU C Library (aka glibc) 2.12 and other versions does not properly calculate a buffer length, which allows context-dependent attackers to bypass the FORTIFY_SOURCE format-string protection mechanism and cause a denial of service (stack corruption and crash) via a format string that uses positional parameters and many format specifiers.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-189
References: http://rhn.redhat.com/errata/RHSA-2012-1098.html; http://rhn.redhat.com/errata/RHSA-2012-1200.html; http://www.openwall.com/lists/oss-security/2012/07/11/17
CVE: CVE-2012-3405
Published: 2014-02-10
Description: The vfprintf function in stdio-common/vfprintf.c in libc in GNU C Library (aka glibc) 2.14 and other versions does not properly calculate a buffer length, which allows context-dependent attackers to bypass the FORTIFY_SOURCE format-string protection mechanism and cause a denial of service (segmentation fault and crash) via a format string with a large number of format specifiers that triggers "desynchronization within the buffer size handling," a different vulnerability than CVE-2012-3404.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-189
References: http://rhn.redhat.com/errata/RHSA-2012-1098.html; http://rhn.redhat.com/errata/RHSA-2012-1200.html; http://www.openwall.com/lists/oss-security/2012/07/11/17
CVE: CVE-2012-3406
Published: 2014-02-10
Description: The vfprintf function in stdio-common/vfprintf.c in GNU C Library (aka glibc) 2.5, 2.12, and probably other versions does not "properly restrict the use of" the alloca function when allocating the SPECS array, which allows context-dependent attackers to bypass the FORTIFY_SOURCE format-string protection mechanism and cause a denial of service (crash) or possibly execute arbitrary code via a crafted format string using positional parameters and a large number of format specifiers, a different vulnerability than CVE-2012-3404 and CVE-2012-3405.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-264
References: http://rhn.redhat.com/errata/RHSA-2012-1097.html; http://rhn.redhat.com/errata/RHSA-2012-1098.html; http://rhn.redhat.com/errata/RHSA-2012-1185.html
CVE: CVE-2013-4736
Published: 2014-02-10
Description: Multiple integer overflows in the JPEG engine drivers in the MSM camera driver for the Linux kernel 2.6.x and 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allow attackers to cause a denial of service (system crash) via a large number of commands in an ioctl call, related to (1) camera_v1/gemini/msm_gemini_sync.c, (2) camera_v2/gemini/msm_gemini_sync.c, (3) camera_v2/jpeg_10/msm_jpeg_sync.c, (4) gemini/msm_gemini_sync.c, (5) jpeg_10/msm_jpeg_sync.c, and (6) mercury/msm_mercury_sync.c.
CVSS Score: 7.8 (HIGH)
CWE: CWE-189
References: https://www.codeaurora.org/projects/security-advisories/integer-overflow-and-signedness-issue-camera-jpeg-engines-cve-2013-4736; https://www.codeaurora.org/projects/security-advisories/integer-overflow-and-signedness-issue-camera-jpeg-engines-cve-2013-4736
CVE: CVE-2013-6024
Published: 2014-02-10
Description: The Edge Client components in F5 BIG-IP APM 10.x, 11.x, 12.x, 13.x, and 14.x, BIG-IP Edge Gateway 10.x and 11.x, and FirePass 7.0.0 allow attackers to obtain sensitive information from process memory via unspecified vectors.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-200
References: http://support.f5.com/kb/en-us/solutions/public/14000/900/sol14969.html; http://www.kb.cert.org/vuls/id/146430; http://www.securityfocus.com/bid/65422
CVE: CVE-2014-1930
Published: 2014-02-10
Description: Visibility Software Cyber Recruiter before 8.1.00 does not use the appropriate combination of HTTPS transport and response headers to prevent access to (1) AppSelfService.aspx and (2) AgencyPortal.aspx in the browser history, which allows remote attackers to obtain sensitive information by leveraging an unattended workstation.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://jvn.jp/vu/JVNVU97441356/index.html; http://osvdb.org/102814; http://osvdb.org/102815
CVE: CVE-2014-1931
Published: 2014-02-10
Description: The user login page in Visibility Software Cyber Recruiter before 8.1.00 generates different responses for invalid password-retrieval attempts depending on which data elements are incorrect, which might allow remote attackers to obtain account-related information via a series of requests.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/65564; http://www.vspublic.com/help/Cyber%20Recruiter/default.aspx?pageid=release_details; http://www.securityfocus.com/bid/65564
CVE: CVE-2011-4610
Published: 2014-02-10
Description: JBoss Web, as used in Red Hat JBoss Communications Platform before 5.1.3, Enterprise Web Platform before 5.1.2, Enterprise Application Platform before 5.1.2, and other products, allows remote attackers to cause a denial of service (infinite loop) via vectors related to a crafted UTF-8 and a "surrogate pair character" that is "at the boundary of an internal buffer."
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://rhn.redhat.com/errata/RHSA-2012-0074.html; http://rhn.redhat.com/errata/RHSA-2012-0075.html; http://rhn.redhat.com/errata/RHSA-2012-0076.html
CVE: CVE-2012-0064
Published: 2014-02-10
Description: xkeyboard-config before 2.5 in X.Org before 7.6 enables certain XKB debugging functions by default, which allows physically proximate attackers to bypass an X screen lock via keyboard combinations that break the input grab.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-264
References: http://gu1.aeroxteam.fr/2012/01/19/bypass-screensaver-locker-program-xorg-111-and-up/; http://lists.x.org/archives/xorg-announce/2012-January/001797.html; http://lists.x.org/archives/xorg-devel/2012-January/028691.html
CVE: CVE-2012-5546
Published: 2014-02-10
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This identifier was publicly assigned by its CNA to information that was incorrectly specified due to a typo.  Notes: none
CVE: CVE-2013-2055
Published: 2014-02-10
Description: Unspecified vulnerability in Apache Wicket 1.4.x before 1.4.23, 1.5.x before 1.5.11, and 6.x before 6.8.0 allows remote attackers to obtain sensitive information via vectors that cause raw HTML templates to be rendered without being processed and reading the information that is outside of wicket:panel markup.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/102955; http://seclists.org/fulldisclosure/2014/Feb/38; http://www.securityfocus.com/bid/65431
CVE: CVE-2013-2214
Published: 2014-02-10
Description: status.cgi in Nagios 4.0 before 4.0 beta4 and 3.x before 3.5.1 does not properly restrict access to certain users that are a contact for a service, which allows remote authenticated users to obtain sensitive information about hostnames via the servicegroup (1) overview, (2) summary, or (3) grid style in status.cgi.  NOTE: this behavior is by design in most 3.x versions, but the upstream vendor "decided to change it for Nagios 4" and 3.5.1.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-264
References: http://lists.opensuse.org/opensuse-updates/2013-07/msg00029.html; http://lists.opensuse.org/opensuse-updates/2013-07/msg00031.html; http://seclists.org/oss-sec/2013/q2/619
CVE: CVE-2014-1213
Published: 2014-02-10
Description: Sophos Anti-Virus engine (SAVi) before 3.50.1, as used in VDL 4.97G 9.7.x before 9.7.9, 10.0.x before 10.0.11, and 10.3.x before 10.3.1 does not set an ACL for certain global and session objects, which allows local users to bypass anti-virus protection, cause a denial of service (resource consumption, CPU consumption, and eventual crash) or spoof "ready for update" messages by performing certain operations on mutexes or events including (1) DataUpdateRequest, (2) MmfMutexSAV-****, (3) MmfMutexSAV-Info, (4) ReadyForUpdateSAV-****, (5) ReadyForUpdateSAV-Info, (6) SAV-****, (7) SAV-Info, (8) StateChange, (9) SuspendedSAV-****, (10) SuspendedSAV-Info, (11) UpdateComplete, (12) UpdateMutex, (13) UpdateRequest, or (14) SophosALMonSessionInstance, as demonstrated by triggering a ReadyForUpdateSAV event and modifying the UpdateComplete, UpdateMutex, and UpdateRequest objects.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-264
References: http://osvdb.org/102762; http://packetstormsecurity.com/files/125024/Sophos-Anti-Virus-Denial-Of-Service.html; http://seclists.org/fulldisclosure/2014/Feb/1
CVE: CVE-2014-1876
Published: 2014-02-10
Description: The unpacker::redirect_stdio function in unpack.cpp in unpack200 in OpenJDK 6, 7, and 8; Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 does not securely create temporary files when a log file cannot be opened, which allows local users to overwrite arbitrary files via a symlink attack on /tmp/unpack.log.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-59
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=737562; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8946&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9252&w=2
CVE: CVE-2013-5012
Published: 2014-02-11
Description: Multiple SQL injection vulnerabilities in the management console on the Symantec Web Gateway (SWG) appliance before 5.2 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: http://www.securityfocus.com/bid/65404; http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20140210_00; http://www.securityfocus.com/bid/65404
CVE: CVE-2013-5013
Published: 2014-02-11
Description: Multiple cross-site scripting (XSS) vulnerabilities in the management console on the Symantec Web Gateway (SWG) appliance before 5.2 allow remote attackers to inject arbitrary web script or HTML via (1) vectors involving PHP scripts and (2) unspecified other vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/103144; http://osvdb.org/103145; http://osvdb.org/103147
CVE: CVE-2013-1413
Published: 2014-02-11
Description: Multiple cross-site scripting (XSS) vulnerabilities in synetics i-doit open 0.9.9-7, i-doit pro 1.0 and earlier, and i-doit pro 1.0.2 when the 'sanitize user input' flag is not enabled, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://seclists.org/fulldisclosure/2013/Mar/0; http://secunia.com/advisories/52415; http://secunia.com/advisories/56834
CVE: CVE-2013-1980
Published: 2014-02-11
Description: Buffer overflow in the get_dsmp function in loaders/masi_load.c in libxmp before 4.1.0 allows remote attackers to execute arbitrary code via a crafted MASI file.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://secunia.com/advisories/53114; http://sourceforge.net/p/xmp/libxmp/ci/a015fdfb478a60172fd225632a11bbd02870fc40; http://sourceforge.net/projects/xmp/files/libxmp/4.1.0/Changelog/view
CVE: CVE-2013-2639
Published: 2014-02-11
Description: Cross-site scripting (XSS) vulnerability in CTERA Cloud Storage OS before 3.2.29.0, 3.2.42.0, and earlier allows remote attackers to inject arbitrary web script or HTML via the description in a project folder.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/103117; http://www.exploit-db.com/exploits/31517; http://osvdb.org/103117
CVE: CVE-2013-3294
Published: 2014-02-11
Description: Multiple SQL injection vulnerabilities in Exponent CMS before 2.2.0 release candidate 1 allow remote attackers to execute arbitrary SQL commands via the (1) src or (2) username parameter to index.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/93447; http://packetstormsecurity.com/files/121643/Exponent-CMS-2.2.0-Beta-3-LFI-SQL-Injection.html; http://seclists.org/bugtraq/2013/May/57
CVE: CVE-2013-3933
Published: 2014-02-11
Description: Cross-site scripting (XSS) vulnerability in the JoomShopping (com_joomshopping) component before 4.3.1 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the user_name parameter to index.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/96313; http://secunia.com/advisories/54054; http://www.securityfocus.com/bid/61790
CVE: CVE-2014-0980
Published: 2014-02-11
Description: Buffer overflow in Poster Software PUBLISH-iT 3.6d allows remote attackers to execute arbitrary code via a crafted PUI file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://osvdb.org/102911; http://packetstormsecurity.com/files/125089; http://seclists.org/fulldisclosure/2014/Feb/34
CVE: CVE-2014-1237
Published: 2014-02-11
Description: Cross-site scripting (XSS) vulnerability in synetics i-doit pro before 1.2.4 allows remote attackers to inject arbitrary web script or HTML via the call parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/102910; http://packetstormsecurity.com/files/125062; http://seclists.org/fulldisclosure/2014/Feb/26
CVE: CVE-2014-1401
Published: 2014-02-11
Description: Multiple SQL injection vulnerabilities in AuraCMS 2.3 and earlier allow remote authenticated users to execute arbitrary SQL commands via the (1) search parameter to mod/content/content.php or (2) CLIENT_IP, (3) X_FORWARDED_FOR, (4) X_FORWARDED, (5) FORWARDED_FOR, or (6) FORWARDED HTTP header to index.php.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: http://packetstormsecurity.com/files/125079; http://secunia.com/advisories/56804; http://www.exploit-db.com/exploits/31520
CVE: CVE-2014-1459
Published: 2014-02-11
Description: SQL injection vulnerability in dg-admin/index.php in doorGets CMS 5.2 and earlier allows remote authenticated administrators to execute arbitrary SQL commands via the _position_down_id parameter.  NOTE: this can be leveraged using CSRF to allow remote attackers to execute arbitrary SQL commands.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: http://packetstormsecurity.com/files/125078; http://www.exploit-db.com/exploits/31521; http://www.securityfocus.com/archive/1/530931/100/0/threaded
CVE: CVE-2014-0253
Published: 2014-02-12
Description: Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, 4.5, and 4.5.1 does not properly determine TCP connection states, which allows remote attackers to cause a denial of service (ASP.NET daemon hang) via crafted HTTP requests that trigger persistent resource consumption for a (1) stale or (2) closed connection, as exploited in the wild in February 2014, aka "POST Request DoS Vulnerability."
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://osvdb.org/103162; http://secunia.com/advisories/56793; http://www.securityfocus.com/bid/65415
CVE: CVE-2014-0254
Published: 2014-02-12
Description: The IPv6 implementation in Microsoft Windows 8, Windows Server 2012, and Windows RT does not properly validate packets, which allows remote attackers to cause a denial of service (system hang) via crafted ICMPv6 Router Advertisement packets, aka "TCP/IP Version 6 (IPv6) Denial of Service Vulnerability."
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://osvdb.org/103159; http://secunia.com/advisories/56775; http://www.securityfocus.com/bid/65409
CVE: CVE-2014-0257
Published: 2014-02-12
Description: Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, 4.5, and 4.5.1 does not properly determine whether it is safe to execute a method, which allows remote attackers to execute arbitrary code via (1) a crafted web site or (2) a crafted .NET Framework application that exposes a COM server endpoint, aka "Type Traversal Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://packetstormsecurity.com/files/127246/MS14-009-.NET-Deployment-Service-IE-Sandbox-Escape.html; http://secunia.com/advisories/56793; http://www.exploit-db.com/exploits/33892
CVE: CVE-2014-0263
Published: 2014-02-12
Description: The Direct2D implementation in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a large 2D geometric figure that is encountered with Internet Explorer, aka "Microsoft Graphics Component Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://osvdb.org/103160; http://secunia.com/advisories/56781; http://www.securityfocus.com/bid/65393
CVE: CVE-2014-0266
Published: 2014-02-12
Description: The XMLHTTP ActiveX controls in XML Core Services 3.0 in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow remote attackers to bypass the Same Origin Policy via a web page that is visited in Internet Explorer, aka "MSXML Information Disclosure Vulnerability."
CVSS Score: 7.1 (HIGH)
CWE: CWE-200
References: http://osvdb.org/103189; http://secunia.com/advisories/56771; http://www.securitytracker.com/id/1029746
CVE: CVE-2014-0267
Published: 2014-02-12
Description: Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-0289 and CVE-2014-0290.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://osvdb.org/103168; http://secunia.com/advisories/56796; http://www.securityfocus.com/bid/65361