deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2010-2477
Published: 2010-11-06
Description: Multiple cross-site scripting (XSS) vulnerabilities in the paste.httpexceptions implementation in Paste before 1.7.4 allow remote attackers to inject arbitrary web script or HTML via vectors involving a 404 status code, related to (1) paste.urlparser.StaticURLParser, (2) paste.urlparser.PkgResourcesParser, (3) paste.urlmap.URLMap, and (4) HTTPNotFound.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://bitbucket.org/ianb/paste/changeset/fcae59df8b56; http://groups.google.com/group/paste-users/browse_thread/thread/3b3fff3dadd0b1e5?pli=1; http://groups.google.com/group/pylons-discuss/msg/8c256dc076a408d8?dmode=source&output=gplain
CVE: CVE-2010-3852
Published: 2010-11-06
Description: The default configuration of Luci 0.22.4 and earlier in Red Hat Conga uses "[INSERT SECRET HERE]" as its secret key for cookies, which makes it easier for remote attackers to bypass repoze.who authentication via a forged ticket cookie.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-287
References: http://git.fedorahosted.org/git/?p=luci.git%3Ba=commit%3Bh=9e0bbf0c5faa198379d945474f7d55da5031cacf; http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050244.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050246.html
CVE: CVE-2010-3915
Published: 2010-11-06
Description: Unspecified vulnerability in JustSystems Ichitaro and Ichitaro Government allows remote attackers to execute arbitrary code via a crafted document, a different vulnerability than CVE-2010-3916.
CVSS Score: 9.3 (HIGH)
References: http://jvn.jp/en/jp/JVN19173793/index.html; http://jvndb.jvn.jp/en/contents/2010/JVNDB-2010-000052.html; http://osvdb.org/69020
CVE: CVE-2010-3916
Published: 2010-11-06
Description: Unspecified vulnerability in JustSystems Ichitaro and Ichitaro Government allows remote attackers to execute arbitrary code via a crafted document, a different vulnerability than CVE-2010-3915.
CVSS Score: 9.3 (HIGH)
References: http://jvn.jp/en/jp/JVN01948274/index.html; http://jvndb.jvn.jp/en/contents/2010/JVNDB-2010-000053.html; http://osvdb.org/69021
CVE: CVE-2010-3998
Published: 2010-11-06
Description: The (1) banshee-1 and (2) muinshee scripts in Banshee 1.8.0 and earlier place a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.  NOTE: Banshee might also be affected using GST_PLUGIN_PATH.
CVSS Score: 6.9 (MEDIUM)
References: http://download.banshee.fm/banshee/unstable/1.9.0/banshee-1-1.9.0.news; http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050744.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050747.html
CVE: CVE-2010-4000
Published: 2010-11-06
Description: gnome-shell in GNOME Shell 2.31.5 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-264
References: https://bugzilla.redhat.com/show_bug.cgi?id=644561; https://bugzilla.redhat.com/show_bug.cgi?id=644561
CVE: CVE-2010-4001
Published: 2010-11-06
Description: GMXRC.bash in Gromacs 4.5.1 and earlier places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.  NOTE: CVE disputes this issue because the GMXLDLIB value is always added to the beginning of LD_LIBRARY_PATH at a later point in the script
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-264
References: http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050763.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050783.html; http://www.vupen.com/english/advisories/2010/2971
CVE: CVE-2010-4005
Published: 2010-11-06
Description: The (1) tomboy and (2) tomboy-panel scripts in GNOME Tomboy 1.5.2 and earlier place a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.  NOTE: vector 1 exists because of an incorrect fix for CVE-2005-4790.2.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-94
References: http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00000.html; http://www.mandriva.com/security/advisories?name=MDVSA-2011:035; http://www.vupen.com/english/advisories/2011/0457
CVE: CVE-2010-4197
Published: 2010-11-06
Description: Use-after-free vulnerability in WebKit, as used in Google Chrome before 7.0.517.44, webkitgtk before 1.2.6, and other products, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving text editing.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: http://code.google.com/p/chromium/issues/detail?id=51602; http://googlechromereleases.blogspot.com/2010/11/stable-channel-update.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052906.html
CVE: CVE-2010-4198
Published: 2010-11-06
Description: WebKit, as used in Google Chrome before 7.0.517.44, webkitgtk before 1.2.6, and other products, does not properly handle large text areas, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted HTML document.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: http://code.google.com/p/chromium/issues/detail?id=55257; http://googlechromereleases.blogspot.com/2010/11/stable-channel-update.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052906.html
CVE: CVE-2010-4199
Published: 2010-11-06
Description: Google Chrome before 7.0.517.44 does not properly perform a cast of an unspecified variable during processing of an SVG use element, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted SVG document.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: http://code.google.com/p/chromium/issues/detail?id=58657; http://googlechromereleases.blogspot.com/2010/11/stable-channel-update.html; http://secunia.com/advisories/42109
CVE: CVE-2010-4200
Published: 2010-11-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2010-4008.  Reason: This candidate is a duplicate of CVE-2010-4008.  Notes: All CVE users should reference CVE-2010-4008 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2010-4201
Published: 2010-11-06
Description: Use-after-free vulnerability in Google Chrome before 7.0.517.44 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving text control selections.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: http://code.google.com/p/chromium/issues/detail?id=58741; http://googlechromereleases.blogspot.com/2010/11/stable-channel-update.html; http://secunia.com/advisories/42109
CVE: CVE-2010-4202
Published: 2010-11-06
Description: Multiple integer overflows in Google Chrome before 7.0.517.44 on Linux allow remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted font.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: http://code.google.com/p/chromium/issues/detail?id=59320; http://googlechromereleases.blogspot.com/2010/11/stable-channel-update.html; http://secunia.com/advisories/42109
CVE: CVE-2010-4203
Published: 2010-11-06
Description: WebM libvpx (aka the VP8 Codec SDK) before 0.9.5, as used in Google Chrome before 7.0.517.44, allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via invalid frames.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: http://code.google.com/p/chromium/issues/detail?id=60055; http://googlechromereleases.blogspot.com/2010/11/stable-channel-update.html; http://review.webmproject.org/gitweb?p=libvpx.git%3Ba=blob%3Bf=CHANGELOG
CVE: CVE-2010-4204
Published: 2010-11-06
Description: WebKit, as used in Google Chrome before 7.0.517.44, webkitgtk before 1.2.6, and other products, accesses a frame object after this object has been destroyed, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
CVSS Score: 9.8 (CRITICAL)
References: http://code.google.com/p/chromium/issues/detail?id=60238; http://googlechromereleases.blogspot.com/2010/11/stable-channel-update.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052906.html
CVE: CVE-2010-4205
Published: 2010-11-06
Description: Google Chrome before 7.0.517.44 does not properly handle the data types of event objects, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
CVSS Score: 9.8 (CRITICAL)
References: http://code.google.com/p/chromium/issues/detail?id=60327; http://code.google.com/p/chromium/issues/detail?id=60769; http://code.google.com/p/chromium/issues/detail?id=61255
CVE: CVE-2010-4206
Published: 2010-11-06
Description: Array index error in the FEBlend::apply function in WebCore/platform/graphics/filters/FEBlend.cpp in WebKit, as used in Google Chrome before 7.0.517.44, webkitgtk before 1.2.6, and other products, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted SVG document, related to effects in the application of filters.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://code.google.com/p/chromium/issues/detail?id=60688; http://googlechromereleases.blogspot.com/2010/11/stable-channel-update.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052906.html
CVE: CVE-2010-3636
Published: 2010-11-07
Description: Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, does not properly handle unspecified encodings during the parsing of a cross-domain policy file, which allows remote web servers to bypass intended access restrictions via unknown vectors.
CVSS Score: 9.3 (HIGH)
CWE: CWE-264
References: http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_adobe_flash1; http://jvn.jp/en/jp/JVN48425028/index.html; http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000054.html
CVE: CVE-2010-3637
Published: 2010-11-07
Description: An unspecified ActiveX control in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 (Flash10h.ocx) on Windows allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted FLV video.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_adobe_flash1; http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00002.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1603&w=2
CVE: CVE-2010-3638
Published: 2010-11-07
Description: Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Mac OS X, when Safari is used, allows attackers to obtain sensitive information via unknown vectors.
CVSS Score: 4.3 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html; http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00002.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1603&w=2
CVE: CVE-2010-3639
Published: 2010-11-07
Description: Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, allows attackers to cause a denial of service or possibly execute arbitrary code via unknown vectors.
CVSS Score: 9.3 (HIGH)
References: http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_adobe_flash1; http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html; http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00002.html
CVE: CVE-2010-3640
Published: 2010-11-07
Description: Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, a different vulnerability than CVE-2010-3641, CVE-2010-3642, CVE-2010-3643, CVE-2010-3644, CVE-2010-3645, CVE-2010-3646, CVE-2010-3647, CVE-2010-3648, CVE-2010-3649, CVE-2010-3650, and CVE-2010-3652.
CVSS Score: 9.3 (HIGH)
References: http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_adobe_flash1; http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html; http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00002.html
CVE: CVE-2010-3641
Published: 2010-11-07
Description: Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, a different vulnerability than CVE-2010-3640, CVE-2010-3642, CVE-2010-3643, CVE-2010-3644, CVE-2010-3645, CVE-2010-3646, CVE-2010-3647, CVE-2010-3648, CVE-2010-3649, CVE-2010-3650, and CVE-2010-3652.
CVSS Score: 9.3 (HIGH)
References: http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_adobe_flash1; http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html; http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00002.html
CVE: CVE-2010-3642
Published: 2010-11-07
Description: Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, a different vulnerability than CVE-2010-3640, CVE-2010-3641, CVE-2010-3643, CVE-2010-3644, CVE-2010-3645, CVE-2010-3646, CVE-2010-3647, CVE-2010-3648, CVE-2010-3649, CVE-2010-3650, and CVE-2010-3652.
CVSS Score: 9.3 (HIGH)
References: http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_adobe_flash1; http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html; http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00002.html
CVE: CVE-2010-3643
Published: 2010-11-07
Description: Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, a different vulnerability than CVE-2010-3640, CVE-2010-3641, CVE-2010-3642, CVE-2010-3644, CVE-2010-3645, CVE-2010-3646, CVE-2010-3647, CVE-2010-3648, CVE-2010-3649, CVE-2010-3650, and CVE-2010-3652.
CVSS Score: 9.3 (HIGH)
References: http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_adobe_flash1; http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html; http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00002.html
CVE: CVE-2010-3644
Published: 2010-11-07
Description: Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, a different vulnerability than CVE-2010-3640, CVE-2010-3641, CVE-2010-3642, CVE-2010-3643, CVE-2010-3645, CVE-2010-3646, CVE-2010-3647, CVE-2010-3648, CVE-2010-3649, CVE-2010-3650, and CVE-2010-3652.
CVSS Score: 9.3 (HIGH)
References: http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_adobe_flash1; http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html; http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00002.html
CVE: CVE-2010-3645
Published: 2010-11-07
Description: Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, a different vulnerability than CVE-2010-3640, CVE-2010-3641, CVE-2010-3642, CVE-2010-3643, CVE-2010-3644, CVE-2010-3646, CVE-2010-3647, CVE-2010-3648, CVE-2010-3649, CVE-2010-3650, and CVE-2010-3652.
CVSS Score: 9.3 (HIGH)
References: http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_adobe_flash1; http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html; http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00002.html
CVE: CVE-2010-3646
Published: 2010-11-07
Description: Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, a different vulnerability than CVE-2010-3640, CVE-2010-3641, CVE-2010-3642, CVE-2010-3643, CVE-2010-3644, CVE-2010-3645, CVE-2010-3647, CVE-2010-3648, CVE-2010-3649, CVE-2010-3650, and CVE-2010-3652.
CVSS Score: 9.3 (HIGH)
References: http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_adobe_flash1; http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html; http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00002.html
CVE: CVE-2010-3647
Published: 2010-11-07
Description: Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, a different vulnerability than CVE-2010-3640, CVE-2010-3641, CVE-2010-3642, CVE-2010-3643, CVE-2010-3644, CVE-2010-3645, CVE-2010-3646, CVE-2010-3648, CVE-2010-3649, CVE-2010-3650, and CVE-2010-3652.
CVSS Score: 9.3 (HIGH)
References: http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_adobe_flash1; http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html; http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00002.html
CVE: CVE-2010-3648
Published: 2010-11-07
Description: Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, a different vulnerability than CVE-2010-3640, CVE-2010-3641, CVE-2010-3642, CVE-2010-3643, CVE-2010-3644, CVE-2010-3645, CVE-2010-3646, CVE-2010-3647, CVE-2010-3649, CVE-2010-3650, and CVE-2010-3652.
CVSS Score: 9.3 (HIGH)
References: http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_adobe_flash1; http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html; http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00002.html
CVE: CVE-2010-3649
Published: 2010-11-07
Description: Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, a different vulnerability than CVE-2010-3640, CVE-2010-3641, CVE-2010-3642, CVE-2010-3643, CVE-2010-3644, CVE-2010-3645, CVE-2010-3646, CVE-2010-3647, CVE-2010-3648, CVE-2010-3650, and CVE-2010-3652.
CVSS Score: 9.3 (HIGH)
References: http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_adobe_flash1; http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html; http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00002.html
CVE: CVE-2010-3650
Published: 2010-11-07
Description: Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, a different vulnerability than CVE-2010-3640, CVE-2010-3641, CVE-2010-3642, CVE-2010-3643, CVE-2010-3644, CVE-2010-3645, CVE-2010-3646, CVE-2010-3647, CVE-2010-3648, CVE-2010-3649, and CVE-2010-3652.
CVSS Score: 9.3 (HIGH)
References: http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_adobe_flash1; http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html; http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00002.html
CVE: CVE-2010-3652
Published: 2010-11-07
Description: Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, a different vulnerability than CVE-2010-3640, CVE-2010-3641, CVE-2010-3642, CVE-2010-3643, CVE-2010-3644, CVE-2010-3645, CVE-2010-3646, CVE-2010-3647, CVE-2010-3648, CVE-2010-3649, and CVE-2010-3650.
CVSS Score: 9.3 (HIGH)
References: http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_adobe_flash1; http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html; http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00002.html
CVE: CVE-2010-3866
Published: 2010-11-07
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2010-4207, CVE-2010-4208, CVE-2010-4209.  Reason: This candidate originally combined three issues that affected different versions.  Notes: All CVE users should reference CVE-2010-4207, CVE-2010-4208, or CVE-2010-4209 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2010-4091
Published: 2010-11-07
Description: The EScript.api plugin in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.1, and 8.x before 8.2.6 on Windows and Mac OS X allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF document that triggers memory corruption, involving the printSeps function. NOTE: some of these details are obtained from third party information.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://archives.neohapsis.com/archives/fulldisclosure/2010-11/0024.html; http://blogs.adobe.com/psirt/2010/11/potential-issue-in-adobe-reader.html; http://extraexploit.blogspot.com/2010/11/full-disclosure-xplpdf-adober-reader-94.html
CVE: CVE-2010-4207
Published: 2010-11-07
Description: Cross-site scripting (XSS) vulnerability in the Flash component infrastructure in YUI 2.4.0 through 2.8.1, as used in Bugzilla, Moodle, and other products, allows remote attackers to inject arbitrary web script or HTML via vectors related to charts/assets/charts.swf.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050813.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050820.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050830.html
CVE: CVE-2010-4208
Published: 2010-11-07
Description: Cross-site scripting (XSS) vulnerability in the Flash component infrastructure in YUI 2.5.0 through 2.8.1, as used in Bugzilla, Moodle, and other products, allows remote attackers to inject arbitrary web script or HTML via vectors related to uploader/assets/uploader.swf.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050813.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050820.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050830.html