deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2010-3796
Published: 2010-11-16
Description: Safari RSS in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 does not block Java applets in an RSS feed, which allows remote attackers to obtain sensitive information via a feed: URL containing an applet that performs DOM modifications.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html; http://support.apple.com/kb/HT4435; http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html
CVE: CVE-2010-3797
Published: 2010-11-16
Description: Cross-site scripting (XSS) vulnerability in Wiki Server in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html; http://support.apple.com/kb/HT4435; http://www.securitytracker.com/id?1024723
CVE: CVE-2010-3798
Published: 2010-11-16
Description: Heap-based buffer overflow in xar in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted xar archive.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html; http://support.apple.com/kb/HT4435; http://www.securitytracker.com/id?1024723
CVE: CVE-2010-4010
Published: 2010-11-16
Description: Integer signedness error in Apple Type Services (ATS) in Apple Mac OS X 10.5.8 allows remote attackers to execute arbitrary code via a crafted embedded Compact Font Format (CFF) font in a document.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-189
References: http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html; http://support.apple.com/kb/HT4435; https://exchange.xforce.ibmcloud.com/vulnerabilities/63170
CVE: CVE-2010-4008
Published: 2010-11-17
Description: libxml2 before 2.7.8, as used in Google Chrome before 7.0.517.44, Apple Safari 5.0.2 and earlier, and other products, reads from invalid memory locations during processing of malformed XPath expressions, which allows context-dependent attackers to cause a denial of service (application crash) via a crafted XML document.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-119
References: http://blog.bkis.com/en/libxml2-vulnerability-in-google-chrome-and-apple-safari/; http://code.google.com/p/chromium/issues/detail?id=58731; http://googlechromereleases.blogspot.com/2010/11/stable-channel-update.html
CVE: CVE-2010-4011
Published: 2010-11-17
Description: Dovecot in Apple Mac OS X 10.6.5 10H574 does not properly manage memory for user names, which allows remote authenticated users to read the private e-mail of other persons in opportunistic circumstances via standard e-mail clients accessing a user's own mailbox, related to a "memory aliasing issue."
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-200
References: http://lists.apple.com/archives/security-announce/2010//Nov/msg00001.html; http://support.apple.com/kb/HT4452; http://lists.apple.com/archives/security-announce/2010//Nov/msg00001.html
CVE: CVE-2010-4215
Published: 2010-11-17
Description: UI/Manage.pm in Foswiki 1.1.0 and 1.1.1 allows remote authenticated users to gain privileges by modifying the GROUP and ALLOWTOPICCHANGE preferences in the topic preferences for Main.AdminGroup.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-264
References: http://foswiki.org/Support/SecurityAlertCVE20104215; http://secunia.com/advisories/42275; http://sourceforge.net/mailarchive/message.php?msg_name=4CD9F6F5.4030204%40lavrsen.dk
CVE: CVE-2010-4230
Published: 2010-11-17
Description: Stack-based buffer overflow in a certain ActiveX control for the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Megapixel IP Camera with firmware 1.102A-008 allows remote attackers to execute arbitrary code via a long string in the first argument to the connect method.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.exploit-db.com/exploits/15504; http://www.securityfocus.com/archive/1/514753/100/0/threaded; https://www.trustwave.com/spiderlabs/advisories/TWSL2010-006.txt
CVE: CVE-2010-4231
Published: 2010-11-17
Description: Directory traversal vulnerability in the web-based administration interface on the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Megapixel IP Camera with firmware 1.102A-008 allows remote attackers to read arbitrary files via a .. (dot dot) in the URI.
CVSS Score: 7.8 (HIGH)
CWE: CWE-22
References: http://www.exploit-db.com/exploits/15505/; http://www.securityfocus.com/archive/1/514753/100/0/threaded; https://www.trustwave.com/spiderlabs/advisories/TWSL2010-006.txt
CVE: CVE-2010-4232
Published: 2010-11-17
Description: The web-based administration interface on the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Megapixel IP Camera with firmware 1.102A-008 allows remote attackers to bypass authentication via a // (slash slash) at the beginning of a URI, as demonstrated by the //system.html URI.
CVSS Score: 10.0 (HIGH)
CWE: CWE-287
References: http://www.exploit-db.com/exploits/15506; http://www.securityfocus.com/archive/1/514753/100/0/threaded; https://www.trustwave.com/spiderlabs/advisories/TWSL2010-006.txt
CVE: CVE-2010-4233
Published: 2010-11-17
Description: The Linux installation on the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Megapixel IP Camera with firmware 1.102A-008 has a default password of m for the root account, and a default password of merlin for the mg3500 account, which makes it easier for remote attackers to obtain access via the TELNET interface.
CVSS Score: 10.0 (HIGH)
CWE: CWE-255
References: http://www.exploit-db.com/exploits/15507; http://www.securityfocus.com/archive/1/514753/100/0/threaded; https://www.trustwave.com/spiderlabs/advisories/TWSL2010-006.txt
CVE: CVE-2010-4234
Published: 2010-11-17
Description: The web server on the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Megapixel IP Camera with firmware 1.102A-008 allows remote attackers to cause a denial of service (device reboot) via a large number of requests in a short time interval.
CVSS Score: 7.8 (HIGH)
CWE: CWE-399
References: http://www.exploit-db.com/exploits/15508; http://www.securityfocus.com/archive/1/514753/100/0/threaded; https://www.trustwave.com/spiderlabs/advisories/TWSL2010-006.txt
CVE: CVE-2010-4268
Published: 2010-11-17
Description: SQL injection vulnerability in the Pulse Infotech Flip Wall (com_flipwall) component 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.org/1011-exploits/joomlaflipwall-sql.txt; http://secunia.com/advisories/42073; http://www.exploit-db.com/exploits/15366
CVE: CVE-2010-4269
Published: 2010-11-17
Description: SQL injection vulnerability in managechat.php in Collabtive 0.65 allows remote attackers to execute arbitrary SQL commands via the chatstart[USERTOID] cookie in a pull action.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.org/1011-exploits/collabtive065-sql.txt; http://www.exploit-db.com/exploits/15381; https://exchange.xforce.ibmcloud.com/vulnerabilities/62930
CVE: CVE-2010-4270
Published: 2010-11-17
Description: Directory traversal vulnerability in the nBill (com_netinvoice) component before 2.0.9 standard edition, 2.0.10 lite edition, and 1.2_10 for Joomla! allows remote attackers to read arbitrary files via directory traversal sequences in unspecified vectors related to (1) administrator/components/com_nbill/admin.nbill.php, (2) components/com_nbill/nbill.php, (3) administrator/components/com_netinvoice/admin.netinvoice.php, or (4) components/com_netinvoice/netinvoice.php, as exploited in the wild in November 2010.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://osvdb.org/69066; http://secunia.com/advisories/42186; http://www.nbill.co.uk/forum-smf/index.php/topic%2C2158.0.html
CVE: CVE-2010-4271
Published: 2010-11-17
Description: SQL injection vulnerability in ImpressCMS before 1.2.3 RC2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/69082; http://secunia.com/advisories/42160; http://www.impresscms.org/content.php?page=ImpressCMS_1.2.3
CVE: CVE-2010-4272
Published: 2010-11-17
Description: SQL injection vulnerability in the Pulse Infotech Sponsor Wall (com_sponsorwall) component 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.org/1011-exploits/joomlasponsorwall-sql.txt; http://secunia.com/advisories/42072; http://www.exploit-db.com/exploits/15367
CVE: CVE-2010-4273
Published: 2010-11-17
Description: SQL injection vulnerability in imoveis.php in DescargarVista ACC IMoveis 1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.org/1010-exploits/accimoveis-sql.txt; http://www.exploit-db.com/exploits/15338; http://www.securityfocus.com/bid/44481
CVE: CVE-2010-4274
Published: 2010-11-17
Description: reset_diragent_keys in the Common agent in IBM Systems Director 6.2.0 has 754 permissions, which allows local users to gain privileges by leveraging system group membership.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-264
References: http://secunia.com/advisories/42239; http://securitytracker.com/id?1024736; http://www-01.ibm.com/support/docview.wss?uid=isg1IC71821
CVE: CVE-2010-3864
Published: 2010-11-17
Description: Multiple race conditions in ssl/t1_lib.c in OpenSSL 0.9.8f through 0.9.8o, 1.0.0, and 1.0.0a, when multi-threading and internal caching are enabled on a TLS server, might allow remote attackers to execute arbitrary code via client data that triggers a heap-based buffer overflow, related to (1) the TLS server name extension and (2) elliptic curve cryptography.
CVSS Score: 7.6 (HIGH)
CWE: CWE-362
References: http://blogs.sun.com/security/entry/cve_2010_3864_race_condition; http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02794777; http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html
CVE: CVE-2010-3868
Published: 2010-11-17
Description: Red Hat Certificate System (RHCS) 7.3 and 8 and Dogtag Certificate System do not require authentication for requests to decrypt SCEP one-time PINs, which allows remote attackers to obtain PINs by sniffing the network for SCEP requests and then sending decryption requests to the Certificate Authority component.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-287
References: http://secunia.com/advisories/42181; http://securitytracker.com/id?1024697; http://www.osvdb.org/69149
CVE: CVE-2010-3869
Published: 2010-11-17
Description: Red Hat Certificate System (RHCS) 7.3 and 8 and Dogtag Certificate System allow remote authenticated users to generate an arbitrary number of certificates by replaying a single SCEP one-time PIN.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-310
References: http://secunia.com/advisories/42181; http://securitytracker.com/id?1024697; http://www.osvdb.org/69148
CVE: CVE-2010-3978
Published: 2010-11-17
Description: Spree 0.11.x before 0.11.2 and 0.30.x before 0.30.0 exchanges data using JavaScript Object Notation (JSON) without a mechanism for validating requests, which allows remote attackers to obtain sensitive information via vectors involving (1) admin/products.json, (2) admin/users.json, or (3) admin/overview/get_report_data, related to a "JSON hijacking" issue.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://spreecommerce.com/blog/2010/11/02/json-hijacking-vulnerability/; http://spreecommerce.com/blog/2010/11/09/spree-0-30-0-released/; http://twitter.com/conviso/statuses/[PII_REDACTED]8
CVE: CVE-2010-4107
Published: 2010-11-17
Description: The default configuration of the PJL Access value in the File System External Access settings on HP LaserJet MFP printers, Color LaserJet MFP printers, and LaserJet 4100, 4200, 4300, 5100, 8150, and 9000 printers enables PJL commands that use the device's filesystem, which allows remote attackers to read arbitrary files via a command inside a print job, as demonstrated by a directory traversal attack.
CVSS Score: 7.8 (HIGH)
CWE: CWE-22
References: http://secunia.com/advisories/42238; http://securityreason.com/securityalert/8328; http://securitytracker.com/id?1024741
CVE: CVE-2010-4159
Published: 2010-11-17
Description: Untrusted search path vulnerability in metadata/loader.c in Mono 2.8 and earlier allows local users to gain privileges via a Trojan horse shared library in the current working directory.
CVSS Score: 6.9 (MEDIUM)
References: http://lists.ximian.com/pipermail/mono-patches/2010-October/177900.html; http://marc.info/?l=oss-security&m=[PII_REDACTED]5821&w=2; http://marc.info/?l=oss-security&m=[PII_REDACTED]6499&w=2
CVE: CVE-2010-4168
Published: 2010-11-17
Description: Multiple use-after-free vulnerabilities in OpenTTD 1.0.x before 1.0.5 allow (1) remote attackers to cause a denial of service (invalid write and daemon crash) by abruptly disconnecting during transmission of the map from the server, related to network/network_server.cpp; (2) remote attackers to cause a denial of service (invalid read and daemon crash) by abruptly disconnecting, related to network/network_server.cpp; and (3) remote servers to cause a denial of service (invalid read and application crash) by forcing a disconnection during the join process, related to network/network.cpp.
CVSS Score: 7.5 (HIGH)
CWE: CWE-416
References: http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052187.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052193.html; http://marc.info/?l=oss-security&m=[PII_REDACTED]7670&w=2
CVE: CVE-2010-3872
Published: 2010-11-22
Description: A flaw was found in the mod_fcgid module of httpd. A malformed FastCGI response may result in a stack-based buffer overflow in the modules/fcgid/fcgid_bucket.c file in the fcgid_header_bucket_read() function, resulting in an application crash.
CVSS Score: 7.5 (HIGH)
CWE: CWE-121, CWE-189
References: http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050930.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050932.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050976.html
CVE: CVE-2010-4210
Published: 2010-11-22
Description: The pfs_getextattr function in FreeBSD 7.x before 7.3-RELEASE and 8.x before 8.0-RC1 unlocks a mutex that was not previously locked, which allows local users to cause a denial of service (kernel panic), overwrite arbitrary memory locations, and possibly execute arbitrary code via vectors related to opening a file on a file system that uses pseudofs.
CVSS Score: 7.8 (HIGH)
CWE: CWE-667
References: http://secunia.com/advisories/42200; http://security.FreeBSD.org/advisories/FreeBSD-SA-10:09.pseudofs.asc; http://www.securitytracker.com/id?1024724
CVE: CVE-2010-4299
Published: 2010-11-22
Description: Heap-based buffer overflow in ZfHIPCND.exe in Novell Zenworks 7 Handheld Management (ZHM) allows remote attackers to execute arbitrary code via a crafted request to TCP port 2400.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://marc.info/?l=full-disclosure&m=[PII_REDACTED]3292&w=2; http://secunia.com/advisories/42130; http://www.novell.com/support/viewContent.do?externalId=7007135
CVE: CVE-2010-3432
Published: 2010-11-22
Description: The sctp_packet_config function in net/sctp/output.c in the Linux kernel before 2.6.35.6 performs extraneous initializations of packet data structures, which allows remote attackers to cause a denial of service (panic) via a certain sequence of SCTP traffic.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=4bdab43323b459900578b200a4b8cf9713ac8fab; http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.html; http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html
CVE: CVE-2010-3618
Published: 2010-11-22
Description: PGP Desktop 10.0.x before 10.0.3 SP2 and 10.1.0 before 10.1.0 SP1 does not properly implement the "Decrypt/Verify File via Right-Click" functionality for multi-packet OpenPGP messages that represent multi-message input, which allows remote attackers to spoof signed data by concatenating an additional message to the end of a legitimately signed message, related to a "piggy-back" or "unsigned data injection" issue.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-310
References: http://secunia.com/advisories/42293; http://secunia.com/advisories/42307; http://www.cs.ru.nl/E.Verheul/papers/Govcert/Pretty%20Good%20Piggybagging%20v1.0.pdf
CVE: CVE-2010-3803
Published: 2010-11-22
Description: Integer overflow in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted string.
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: http://lists.apple.com/archives/security-announce/2010//Nov/msg00002.html; http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
CVE: CVE-2010-3804
Published: 2010-11-22
Description: The JavaScript implementation in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, uses a weak algorithm for generating values of random numbers, which makes it easier for remote attackers to track a user by predicting a value, a related issue to CVE-2008-5913 and CVE-2010-3171.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-310
References: http://lists.apple.com/archives/security-announce/2010//Nov/msg00002.html; http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
CVE: CVE-2010-3805
Published: 2010-11-22
Description: Integer underflow in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving WebSockets.  NOTE: this may overlap CVE-2010-3254.
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: http://lists.apple.com/archives/security-announce/2010//Nov/msg00002.html; http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
CVE: CVE-2010-3808
Published: 2010-11-22
Description: WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, does not properly perform a cast of an unspecified variable during processing of editing commands, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted web site.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://lists.apple.com/archives/security-announce/2010//Nov/msg00002.html; http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
CVE: CVE-2010-3809
Published: 2010-11-22
Description: WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, does not properly perform a cast of an unspecified variable during processing of inline styling, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted web site.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://lists.apple.com/archives/security-announce/2010//Nov/msg00002.html; http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
CVE: CVE-2010-3810
Published: 2010-11-22
Description: WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, does not properly handle the History object, which allows remote attackers to spoof the location bar's URL or add URLs to the history via a cross-origin attack.
CVSS Score: 4.3 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2010//Nov/msg00002.html; http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
CVE: CVE-2010-3811
Published: 2010-11-22
Description: Use-after-free vulnerability in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving element attributes.
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://lists.apple.com/archives/security-announce/2010//Nov/msg00002.html; http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
CVE: CVE-2010-3812
Published: 2010-11-22
Description: Integer overflow in the Text::wholeText method in dom/Text.cpp in WebKit, as used in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4; webkitgtk before 1.2.6; and possibly other products allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving Text objects.
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: http://lists.apple.com/archives/security-announce/2010//Nov/msg00002.html; http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052906.html
CVE: CVE-2010-3813
Published: 2010-11-22
Description: The WebCore::HTMLLinkElement::process function in WebCore/html/HTMLLinkElement.cpp in WebKit, as used in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4; webkitgtk before 1.2.6; and possibly other products does not verify whether DNS prefetching is enabled when processing an HTML LINK element, which allows remote attackers to bypass intended access restrictions, as demonstrated by an HTML e-mail message that uses a LINK element for X-Confirm-Reading-To functionality.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-264
References: http://lists.apple.com/archives/security-announce/2010//Nov/msg00002.html; http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052906.html
CVE: CVE-2010-3816
Published: 2010-11-22
Description: Use-after-free vulnerability in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving scrollbars.
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://lists.apple.com/archives/security-announce/2010//Nov/msg00002.html; http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
CVE: CVE-2010-3817
Published: 2010-11-22
Description: WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, does not properly perform a cast of an unspecified variable during processing of Cascading Style Sheets (CSS) 3D transforms, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted web site.
CVSS Score: 9.3 (HIGH)
References: http://lists.apple.com/archives/security-announce/2010//Nov/msg00002.html; http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html