deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2011-1852
Published: 2011-05-13
Description: Multiple stack-based buffer overflows in tftpserver.exe in HP Intelligent Management Center (IMC) 5.0 before E0101L02 allow remote attackers to execute arbitrary code via crafted packet content accompanying a (1) DATA or (2) ERROR opcode.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02822750; http://securitytracker.com/id?1025519; http://www.securityfocus.com/bid/47789
CVE: CVE-2011-1853
Published: 2011-05-13
Description: tftpserver.exe in HP Intelligent Management Center (IMC) 5.0 before E0101L02 allows remote attackers to execute arbitrary code via a (1) large or (2) invalid opcode field, related to a function pointer table.
CVSS Score: 10.0 (HIGH)
CWE: CWE-20
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02822750; http://securitytracker.com/id?1025519; http://www.securityfocus.com/bid/47789
CVE: CVE-2011-1854
Published: 2011-05-13
Description: Use-after-free vulnerability in HP Intelligent Management Center (IMC) 5.0 before E0101L02 allows remote attackers to execute arbitrary code via a long syslog packet, related to an exception handler.
CVSS Score: 10.0 (HIGH)
CWE: CWE-399
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02822750; http://securitytracker.com/id?1025519; http://www.securityfocus.com/bid/47789
CVE: CVE-2011-1855
Published: 2011-05-13
Description: Unspecified vulnerability in HP Network Node Manager i (NNMi) 9.0x allows local users to read or modify (1) log files or (2) other data via unknown vectors.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2575&w=2; http://securityreason.com/securityalert/8249; http://www.securitytracker.com/id?1025520
CVE: CVE-2011-2087
Published: 2011-05-13
Description: Multiple cross-site scripting (XSS) vulnerabilities in component handlers in the javatemplates (aka Java Templates) plugin in Apache Struts 2.x before 2.2.3 allow remote attackers to inject arbitrary web script or HTML via an arbitrary parameter value to a .action URI, related to improper handling of value attributes in (1) FileHandler.java, (2) HiddenHandler.java, (3) PasswordHandler.java, (4) RadioHandler.java, (5) ResetHandler.java, (6) SelectHandler.java, (7) SubmitHandler.java, and (8) TextFieldHandler.java.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://struts.apache.org/2.2.3/docs/version-notes-223.html; http://www.vupen.com/english/advisories/2011/1198; https://issues.apache.org/jira/browse/WW-3597
CVE: CVE-2011-2088
Published: 2011-05-13
Description: XWork 2.2.1 in Apache Struts 2.2.1, and OpenSymphony XWork in OpenSymphony WebWork, allows remote attackers to obtain potentially sensitive information about internal Java class paths via vectors involving an s:submit element and a nonexistent method, a different vulnerability than CVE-2011-1772.3.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://secureappdev.blogspot.com/2011/05/Struts_2_XWork_WebWork_XSS_in_error_pages.html; http://secureappdev.blogspot.com/2011/05/apache-struts-2-xwork-webwork-reflected.html; http://www.securityfocus.com/archive/1/518066/100/0/threaded
CVE: CVE-2011-2089
Published: 2011-05-13
Description: Stack-based buffer overflow in the SetActiveXGUID method in the VersionInfo ActiveX control in GenVersion.dll 8.0.138.0 in the WebHMI subsystem in ICONICS BizViz 9.x before 9.22 and GENESIS32 9.x before 9.22 allows remote attackers to execute arbitrary code via a long string in the argument.  NOTE: some of these details are obtained from third party information.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/44417; http://www.exploit-db.com/exploits/17240; http://www.exploit-db.com/exploits/17269
CVE: CVE-2011-0579
Published: 2011-05-13
Description: Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows attackers to obtain sensitive information via unspecified vectors.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://www.adobe.com/support/security/bulletins/apsb11-12.html; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13379; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15903
CVE: CVE-2011-0618
Published: 2011-05-13
Description: Integer overflow in Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows attackers to execute arbitrary code via unspecified vectors.
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00006.html; http://www.adobe.com/support/security/bulletins/apsb11-12.html; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14106
CVE: CVE-2011-0619
Published: 2011-05-13
Description: Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0620, CVE-2011-0621, and CVE-2011-0622.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00006.html; http://www.adobe.com/support/security/bulletins/apsb11-12.html; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14088
CVE: CVE-2011-0620
Published: 2011-05-13
Description: Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0619, CVE-2011-0621, and CVE-2011-0622.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00006.html; http://www.adobe.com/support/security/bulletins/apsb11-12.html; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13832
CVE: CVE-2011-0621
Published: 2011-05-13
Description: Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0619, CVE-2011-0620, and CVE-2011-0622.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00006.html; http://www.adobe.com/support/security/bulletins/apsb11-12.html; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14160
CVE: CVE-2011-0622
Published: 2011-05-13
Description: Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0619, CVE-2011-0620, and CVE-2011-0621.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00006.html; http://www.adobe.com/support/security/bulletins/apsb11-12.html; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14113
CVE: CVE-2011-0623
Published: 2011-05-13
Description: Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows attackers to execute arbitrary code via unspecified vectors, related to a "bounds checking" issue, a different vulnerability than CVE-2011-0624, CVE-2011-0625, and CVE-2011-0626.
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00006.html; http://www.adobe.com/support/security/bulletins/apsb11-12.html; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13901
CVE: CVE-2011-0624
Published: 2011-05-13
Description: Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows attackers to execute arbitrary code via unspecified vectors, related to a "bounds checking" issue, a different vulnerability than CVE-2011-0623, CVE-2011-0625, and CVE-2011-0626.
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00006.html; http://www.adobe.com/support/security/bulletins/apsb11-12.html; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13924
CVE: CVE-2011-0625
Published: 2011-05-13
Description: Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows attackers to execute arbitrary code via unspecified vectors, related to a "bounds checking" issue, a different vulnerability than CVE-2011-0623, CVE-2011-0624, and CVE-2011-0626.
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00006.html; http://www.adobe.com/support/security/bulletins/apsb11-12.html; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14077
CVE: CVE-2011-0626
Published: 2011-05-13
Description: Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows attackers to execute arbitrary code via unspecified vectors, related to a "bounds checking" issue, a different vulnerability than CVE-2011-0623, CVE-2011-0624, and CVE-2011-0625.
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00006.html; http://www.adobe.com/support/security/bulletins/apsb11-12.html; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14036
CVE: CVE-2011-0627
Published: 2011-05-13
Description: Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content, as possibly exploited in the wild in May 2011 by a Microsoft Office document with an embedded .swf file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00006.html; http://www.adobe.com/support/security/bulletins/apsb11-12.html; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13914
CVE: CVE-2011-0633
Published: 2011-05-13
Description: The Net::HTTPS module in libwww-perl (LWP) before 6.00, as used in WWW::Mechanize, LWP::UserAgent, and other products, when running in environments that do not set the If-SSL-Cert-Subject header, does not enable full validation of SSL certificates by default, which allows remote attackers to spoof servers via man-in-the-middle (MITM) attacks involving hostnames that are not properly validated.  NOTE: it could be argued that this is a design limitation of the Net::HTTPS API, and separate implementations should be independently assigned CVE identifiers for not working around this limitation. However, because this API was modified within LWP, a single CVE identifier has been assigned.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://cpansearch.perl.org/src/GAAS/libwww-perl-6.02/Changes; http://vttynotes.blogspot.com/2010/12/man-in-middle-fun-with-perl-lwp.html; http://vttynotes.blogspot.com/2011/03/quick-note-on-lwp-and-perl-security-cve.html
CVE: CVE-2011-1326
Published: 2011-05-13
Description: Unspecified vulnerability on the La Fonera+ router with firmware before 1.7.0.1 allows remote attackers to cause a denial of service via unknown vectors.
CVSS Score: 6.1 (MEDIUM)
References: http://jvn.jp/en/jp/JVN96839637/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2011-000027; http://secunia.com/advisories/44508
CVE: CVE-2011-1402
Published: 2011-05-13
Description: Mahara before 1.3.6 allows remote authenticated users to bypass intended access restrictions, and suspend a user account, edit a view, visit a view, edit a plan artefact, read a plans block, read a plan artefact, edit a blog, read a blog block, read a blog artefact, or access a block, via a request associated with (1) admin/users/search.json.php, (2) view/newviewtoken.json.php, (3) lib/mahara.php, (4) artefact/plans/tasks.json.php, (5) artefact/plans/viewtasks.json.php, (6) artefact/blog/view/index.json.php, (7) artefact/blog/posts.json.php, or (8) blocktype/myfriends/myfriends.json.php, related to incorrect privilege enforcement, a missing user id check, and incorrect enforcement of the Overriding Start/Stop Dates setting.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-264
References: http://secunia.com/advisories/44433; http://www.debian.org/security/2011/dsa-2246; http://www.securityfocus.com/bid/47798
CVE: CVE-2011-1403
Published: 2011-05-13
Description: Cross-site request forgery (CSRF) vulnerability in the pieforms implementation in Mahara before 1.3.6 allows remote attackers to hijack the authentication of arbitrary users for requests to any form, related to inappropriate regeneration of session keys.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://secunia.com/advisories/44433; http://www.debian.org/security/2011/dsa-2246; http://www.securityfocus.com/bid/47798
CVE: CVE-2011-1404
Published: 2011-05-13
Description: Mahara before 1.3.6 does not properly restrict the data in responses to AJAX calls, which allows remote authenticated users to obtain sensitive information via a request associated with (1) blocktype/myfriends/myfriends.json.php, (2) json/usersearch.php, (3) group/membersearchresults.json.php, or (4) json/friendsearch.php, as demonstrated by information about friends and e-mail addresses.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-264
References: http://secunia.com/advisories/44433; http://www.debian.org/security/2011/dsa-2246; http://www.securityfocus.com/bid/47798
CVE: CVE-2011-1405
Published: 2011-05-13
Description: Cross-site scripting (XSS) vulnerability in Mahara before 1.3.6 allows remote authenticated users to inject arbitrary web script or HTML via vectors associated with HTML e-mail messages, related to artefact/comment/lib.php and interaction/forum/lib.php.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://secunia.com/advisories/44433; http://www.debian.org/security/2011/dsa-2246; http://www.securityfocus.com/bid/47798
CVE: CVE-2011-1406
Published: 2011-05-13
Description: Mahara before 1.3.6 does not properly handle an https URL in the wwwroot configuration setting, which makes it easier for user-assisted remote attackers to obtain credentials by sniffing the network at a time when an http URL is used for a login.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-16
References: http://www.debian.org/security/2011/dsa-2246; https://exchange.xforce.ibmcloud.com/vulnerabilities/67400; https://launchpad.net/mahara/+bug/685942
CVE: CVE-2011-0419
Published: 2011-05-16
Description: Stack consumption vulnerability in the fnmatch implementation in apr_fnmatch.c in the Apache Portable Runtime (APR) library before 1.4.3 and the Apache HTTP Server before 2.2.18, and in fnmatch.c in libc in NetBSD 5.1, OpenBSD 4.8, FreeBSD, Apple Mac OS X 10.6, Oracle Solaris 10, and Android, allows context-dependent attackers to cause a denial of service (CPU and memory consumption) via *? sequences in the first argument, as demonstrated by attacks against mod_autoindex in httpd.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-770
References: http://cvsweb.netbsd.org/bsdweb.cgi/src/lib/libc/gen/fnmatch.c#rev1.22; http://cxib.net/stuff/apache.fnmatch.phps; http://cxib.net/stuff/apr_fnmatch.txts
CVE: CVE-2011-0612
Published: 2011-05-16
Description: Adobe Flash Media Server (FMS) before 3.5.6, and 4.x before 4.0.2, allows remote attackers to cause a denial of service (XML data corruption) via unspecified vectors.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://www.adobe.com/support/security/bulletins/apsb11-11.html; http://www.adobe.com/support/security/bulletins/apsb11-11.html
CVE: CVE-2011-0613
Published: 2011-05-16
Description: Multiple cross-site scripting (XSS) vulnerabilities in RoboHelp 7 and 8, and RoboHelp Server 7 and 8, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to (1) wf_status.htm and (2) wf_topicfs.htm in RoboHTML/WildFireExt/TemplateStock/.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.adobe.com/support/security/bulletins/apsb11-09.html; http://www.adobe.com/support/security/bulletins/apsb11-09.html
CVE: CVE-2011-0614
Published: 2011-05-16
Description: Buffer overflow in Adobe Audition 3.0.1 and earlier allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted Audition Session (aka .ses) file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://securityreason.com/securityalert/8253; http://www.adobe.com/support/security/bulletins/apsb11-10.html; http://www.exploit-db.com/exploits/17278/
CVE: CVE-2011-0615
Published: 2011-05-16
Description: Multiple buffer overflows in Adobe Audition 3.0.1 and earlier allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted data in unspecified fields in the TRKM chunk in an Audition Session (aka .ses) file, related to inconsistent use of character data types.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.adobe.com/support/security/bulletins/apsb11-10.html; http://www.coresecurity.com/content/Adobe-Audition-malformed-SES-file; http://www.securityfocus.com/bid/47838
CVE: CVE-2011-1799
Published: 2011-05-16
Description: Google Chrome before 11.0.696.68 does not properly perform casts of variables during interaction with the WebKit engine, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-704
References: http://code.google.com/p/chromium/issues/detail?id=64046; http://googlechromereleases.blogspot.com/2011/05/stable-channel-update.html; http://www.debian.org/security/2011/dsa-2245
CVE: CVE-2011-1800
Published: 2011-05-16
Description: Multiple integer overflows in the SVG Filters implementation in WebCore in WebKit in Google Chrome before 11.0.696.68 allow remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: http://code.google.com/p/chromium/issues/detail?id=80608; http://codereview.chromium.org/6949013; http://googlechromereleases.blogspot.com/2011/05/stable-channel-update.html
CVE: CVE-2011-1899
Published: 2011-05-16
Description: Multiple cross-site scripting (XSS) vulnerabilities in CA eHealth 6.0.x, 6.1.x, 6.2.1, and 6.2.2 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/44482; http://securityreason.com/securityalert/8252; http://securitytracker.com/id?1025518
CVE: CVE-2011-1407
Published: 2011-05-16
Description: The DKIM implementation in Exim 4.7x before 4.76 permits matching for DKIM identities to apply to lookup items, instead of only strings, which allows remote attackers to execute arbitrary code or access a filesystem via a crafted identity.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://www.debian.org/security/2011/dsa-2236; http://www.securityfocus.com/bid/47836; http://www.ubuntu.com/usn/USN-1135-1
CVE: CVE-2011-1828
Published: 2011-05-16
Description: usb-creator-helper in usb-creator before 0.2.28.3 does not enforce intended PolicyKit restrictions, which allows local users to perform arbitrary unmount operations via the UnmountFile method in a dbus-send command.
CVSS Score: 2.1 (LOW)
CWE: CWE-264
References: http://secunia.com/advisories/44413; http://www.securityfocus.com/bid/47679; http://www.ubuntu.com/usn/usn-1127-1/
CVE: CVE-2011-1856
Published: 2011-05-16
Description: Cross-site scripting (XSS) vulnerability in HP Business Availability Center (BAC) 8.06 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/44569; http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02823184; http://www.securitytracker.com/id?1025535
CVE: CVE-2011-2141
Published: 2011-05-16
Description: SQL injection vulnerability in TMWeb in IBM Datacap Taskmaster Capture 8.0.1 before FP1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/72314; http://secunia.com/advisories/44553; http://www.ibm.com/support/docview.wss?uid=swg27021511
CVE: CVE-2011-2142
Published: 2011-05-16
Description: The Web Client Service in IBM Datacap Taskmaster Capture 8.0.1 before FP1 requires a cleartext password, which has unspecified impact and attack vectors.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-310
References: http://www.ibm.com/support/docview.wss?uid=swg27021511; https://exchange.xforce.ibmcloud.com/vulnerabilities/67506; http://www.ibm.com/support/docview.wss?uid=swg27021511
CVE: CVE-2011-2143
Published: 2011-05-16
Description: IBM Datacap Taskmaster Capture 8.0.1 before FP1, when Windows Authentication is enabled, allows remote attackers to obtain login access by using an incorrect password in conjunction with an account name from a different domain.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-264
References: http://www.ibm.com/support/docview.wss?uid=swg27021511; http://www.securityfocus.com/bid/47909; https://exchange.xforce.ibmcloud.com/vulnerabilities/67505
CVE: CVE-2011-2144
Published: 2011-05-16
Description: The eDocument Conversion Actions implementation in IBM Datacap Taskmaster Capture 8.0.1 FP1 and earlier allows remote attackers to cause a denial of service (batch abort) via a long subject line in an e-mail message that is represented in a .eml file.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://www.ibm.com/support/docview.wss?uid=swg27021511; http://www.securityfocus.com/bid/47912; https://exchange.xforce.ibmcloud.com/vulnerabilities/67504
CVE: CVE-2006-7245
Published: 2011-05-20
Description: Monkey's Audio before 4.01b2 allows remote attackers to cause a denial of service (application crash) via an APX file that lacks NULL termination.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-399
References: http://www.monkeysaudio.com/versionhistory.html; http://www.monkeysaudio.com/versionhistory.html
CVE: CVE-2009-5075
Published: 2011-05-20
Description: Monkey's Audio before 4.02 allows remote attackers to cause a denial of service (application crash) via a malformed APE file.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-399
References: http://www.monkeysaudio.com/versionhistory.html; http://www.monkeysaudio.com/versionhistory.html
CVE: CVE-2010-0217
Published: 2011-05-20
Description: Zeacom Chat Server before 5.1 uses too short a random string for the JSESSIONID value, which makes it easier for remote attackers to hijack sessions or cause a denial of service (Chat Server crash or Tomcat daemon crash) via a brute-force attack.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-310
References: http://securityreason.com/securityalert/8255; http://www.packetninjas.net/storage/advisories/Zeacom-CVE-2010-0217.txt; http://www.securityfocus.com/archive/1/518037/100/0/threaded
CVE: CVE-2010-3908
Published: 2011-05-20
Description: FFmpeg before 0.5.4, as used in MPlayer and other products, allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a malformed WMV file.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://ffmpeg.mplayerhq.hu/; http://www.debian.org/security/2011/dsa-2306; http://www.mandriva.com/security/advisories?name=MDVSA-2011:061