deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2011-0235
Published: 2011-07-21
Description: WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2011-07-20-1.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html; http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html; http://lists.apple.com/archives/security-announce/2011//Jul/msg00002.html
CVE: CVE-2011-0237
Published: 2011-07-21
Description: WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2011-07-20-1.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html; http://lists.apple.com/archives/security-announce/2011//Jul/msg00002.html; http://support.apple.com/kb/HT4808
CVE: CVE-2011-0238
Published: 2011-07-21
Description: WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2011-07-20-1.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html; http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html; http://lists.apple.com/archives/security-announce/2011//Jul/msg00002.html
CVE: CVE-2011-0240
Published: 2011-07-21
Description: WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2011-07-20-1.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html; http://lists.apple.com/archives/security-announce/2011//Jul/msg00002.html; http://support.apple.com/kb/HT4808
CVE: CVE-2011-0241
Published: 2011-07-21
Description: Heap-based buffer overflow in ImageIO in Apple Safari before 5.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted TIFF image with CCITT Group 4 encoding.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html; http://lists.apple.com/archives/Security-announce/2011//Oct/msg00002.html; http://lists.apple.com/archives/security-announce/2011//Jul/msg00002.html
CVE: CVE-2011-0242
Published: 2011-07-21
Description: Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 5.0.6 allows remote attackers to inject arbitrary web script or HTML via vectors involving a URL that contains a username.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html; http://lists.apple.com/archives/security-announce/2011//Jul/msg00002.html; http://support.apple.com/kb/HT4808
CVE: CVE-2011-0244
Published: 2011-07-21
Description: WebKit in Apple Safari before 5.0.6 allows user-assisted remote attackers to read arbitrary files via vectors related to improper canonicalization of URLs within RSS feeds.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://lists.apple.com/archives/security-announce/2011//Jul/msg00002.html; http://support.apple.com/kb/HT4808; http://lists.apple.com/archives/security-announce/2011//Jul/msg00002.html
CVE: CVE-2011-0253
Published: 2011-07-21
Description: WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2011-07-20-1.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html; http://lists.apple.com/archives/security-announce/2011//Jul/msg00002.html; http://support.apple.com/kb/HT4808
CVE: CVE-2011-0254
Published: 2011-07-21
Description: WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2011-07-20-1.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html; http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html; http://lists.apple.com/archives/security-announce/2011//Jul/msg00002.html
CVE: CVE-2011-0255
Published: 2011-07-21
Description: WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2011-07-20-1.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html; http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html; http://lists.apple.com/archives/security-announce/2011//Jul/msg00002.html
CVE: CVE-2011-1288
Published: 2011-07-21
Description: WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2011-07-20-1.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html; http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html; http://lists.apple.com/archives/security-announce/2011//Jul/msg00002.html
CVE: CVE-2011-1453
Published: 2011-07-21
Description: WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2011-07-20-1.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html; http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html; http://lists.apple.com/archives/security-announce/2011//Jul/msg00002.html
CVE: CVE-2011-1457
Published: 2011-07-21
Description: WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2011-07-20-1.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html; http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html; http://lists.apple.com/archives/security-announce/2011//Jul/msg00002.html
CVE: CVE-2011-1462
Published: 2011-07-21
Description: WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2011-07-20-1.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html; http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html; http://lists.apple.com/archives/security-announce/2011//Jul/msg00002.html
CVE: CVE-2011-1774
Published: 2011-07-21
Description: WebKit in Apple Safari before 5.0.6 has improper libxslt security settings, which allows remote attackers to create arbitrary files, and consequently execute arbitrary code, via a crafted web site.  NOTE: this may overlap CVE-2011-1425.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html; http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html; http://lists.apple.com/archives/security-announce/2011//Jul/msg00002.html
CVE: CVE-2011-1797
Published: 2011-07-21
Description: WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2011-07-20-1.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://crbug.com/79075; http://launchpad.net/bugs/778822; http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html
CVE: CVE-2011-2520
Published: 2011-07-21
Description: fw_dbus.py in system-config-firewall 1.2.29 and earlier uses the pickle Python module unsafely during D-Bus communication between the GUI and the backend, which might allow local users to gain privileges via a crafted serialized object.
CVSS Score: 7.8 (HIGH)
CWE: CWE-502
References: http://lists.fedoraproject.org/pipermail/package-announce/2011-August/063314.html; http://secunia.com/advisories/45294; http://securitytracker.com/id?1025793
CVE: CVE-2011-2685
Published: 2011-07-21
Description: Stack-based buffer overflow in the Lotus Word Pro import filter in LibreOffice before 3.3.3 allows remote attackers to execute arbitrary code via a crafted .lwp file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://cgit.freedesktop.org/libreoffice/filters/commit/?id=278831e37a23e9e2e29ca811c3a5398b7c67464d; http://cgit.freedesktop.org/libreoffice/filters/commit/?id=d93fa011d713100775cd3ac88c468b6830d48877; http://lists.opensuse.org/opensuse-updates/2011-10/msg00019.html
CVE: CVE-2011-2882
Published: 2011-07-21
Description: Stack-based buffer overflow in the NSEPA.NsepaCtrl.1 ActiveX control in nsepa.ocx in Citrix Access Gateway Enterprise Edition 8.1 before 8.1-67.7, 9.0 before 9.0-70.5, and 9.1 before 9.1-96.4 allows remote attackers to execute arbitrary code via crafted HTTP header data.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=929; http://securityreason.com/securityalert/8358; http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=929
CVE: CVE-2011-2883
Published: 2011-07-21
Description: The NSEPA.NsepaCtrl.1 ActiveX control in nsepa.ocx in Citrix Access Gateway Enterprise Edition 8.1 before 8.1-67.7, 9.0 before 9.0-70.5, and 9.1 before 9.1-96.4 attempts to validate signed DLLs by checking the certificate subject, not the signature, which allows man-in-the-middle attackers to execute arbitrary code via HTTP header data referencing a DLL that was signed with a crafted certificate.
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=928; http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=928
CVE: CVE-2011-1484
Published: 2011-07-27
Description: jboss-seam.jar in the JBoss Seam 2 framework 2.2.x and earlier, as distributed in Red Hat JBoss Enterprise SOA Platform 4.3.0.CP04 and 5.1.0 and JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3.0.CP09 and 5.1.0, does not properly restrict use of Expression Language (EL) statements in FacesMessages during page exception handling, which allows remote attackers to execute arbitrary Java code via a crafted URL to an application.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-264
References: http://www.redhat.com/support/errata/RHSA-2011-0460.html; http://www.redhat.com/support/errata/RHSA-2011-0461.html; http://www.redhat.com/support/errata/RHSA-2011-0462.html
CVE: CVE-2011-1782
Published: 2011-07-27
Description: Heap-based buffer overflow in the read_channel_data function in file-psp.c in the Paint Shop Pro (PSP) plugin in GIMP 2.6.11 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a PSP_COMP_RLE (aka RLE compression) image file that begins a long run count at the end of the image.  NOTE: some of these details are obtained from third party information.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-4543.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: http://secunia.com/advisories/48236; http://www.debian.org/security/2012/dsa-2426; http://www.mandriva.com/security/advisories?name=MDVSA-2011:103
CVE: CVE-2009-4139
Published: 2011-07-27
Description: A flaw was found in Spacewalk Java site packages. This cross-site request forgery (CSRF) vulnerability allows a remote attacker to hijack the authentication of arbitrary users. This can lead to unauthorized actions, including disabling user accounts, adding new user accounts, or escalating privileges by modifying existing user accounts to have administrator access.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-346, CWE-352
References: http://securitytracker.com/id?1025674; http://www.redhat.com/support/errata/RHSA-2011-0879.html; https://access.redhat.com/security/cve/CVE-2009-4139
CVE: CVE-2011-1829
Published: 2011-07-27
Description: APT before 0.8.15.2 does not properly validate inline GPG signatures, which allows man-in-the-middle attackers to install modified packages via vectors involving lack of an initial clearsigned message.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://launchpadlibrarian.net/75126628/apt_0.8.13.2ubuntu2_0.8.13.2ubuntu4.1.diff.gz; http://packages.debian.org/changelogs/pool/main/a/apt/current/changelog; http://www.securityfocus.com/bid/48671
CVE: CVE-2011-2185
Published: 2011-07-27
Description: Fabric before 1.1.0 allows local users to overwrite arbitrary files via a symlink attack on (1) a /tmp/fab.*.tar file or (2) certain other files in the top level of /tmp/.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-59
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=629003; http://code.fabfile.org/projects/fabric/files/Fabric-1.1.0.tar.gz; http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062534.html
CVE: CVE-2011-2196
Published: 2011-07-27
Description: jboss-seam.jar in the JBoss Seam 2 framework 2.2.x and earlier, as distributed in Red Hat JBoss Enterprise SOA Platform 4.3.0.CP05 and 5.1.0; JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3.0, 4.3.0.CP09, and 5.1.1; and JBoss Enterprise Web Platform 5.1.1, does not properly restrict use of Expression Language (EL) statements in FacesMessages during page exception handling, which allows remote attackers to execute arbitrary Java code via a crafted URL to an application.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-1484.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-264
References: http://www.redhat.com/support/errata/RHSA-2011-0945.html; http://www.redhat.com/support/errata/RHSA-2011-0946.html; http://www.redhat.com/support/errata/RHSA-2011-0947.html
CVE: CVE-2011-2467
Published: 2011-07-27
Description: SQL injection vulnerability in lsassd in Lsass in the Likewise Security Authority in Likewise Open 5.4 through 6.1, and Likewise Enterprise 6.0, allows local users to execute arbitrary SQL commands via unspecified vectors.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-89
References: http://secunia.com/advisories/45276; http://secunia.com/advisories/45326; http://www.likewise.com/community/index.php/forums/viewannounce/1212_6/
CVE: CVE-2011-2489
Published: 2011-07-27
Description: Multiple off-by-one errors in opiesu.c in opiesu in OPIE 2.4.1-test1 and earlier might allow local users to gain privileges via a crafted command line.
CVSS Score: 7.2 (HIGH)
CWE: CWE-189
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=631344; http://secunia.com/advisories/45136; http://secunia.com/advisories/45448
CVE: CVE-2011-2490
Published: 2011-07-27
Description: opielogin.c in opielogin in OPIE 2.4.1-test1 and earlier does not check the return value of the setuid system call, which allows local users to gain privileges by arranging for an account to already be running its maximum number of processes.
CVSS Score: 7.2 (HIGH)
CWE: CWE-20
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=631345; http://secunia.com/advisories/39966; http://secunia.com/advisories/45136
CVE: CVE-2011-2587
Published: 2011-07-27
Description: Heap-based buffer overflow in the DemuxAudioSipr function in real.c in the RealMedia demuxer in VideoLAN VLC media player 1.1.x before 1.1.11 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted Real Media file.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://git.videolan.org/?p=vlc.git%3Ba=commit%3Bh=1bce40644cddee93b4b1877a94a6ce345f32852c; http://secunia.com/advisories/45066; http://www.securityfocus.com/bid/48664
CVE: CVE-2011-2588
Published: 2011-07-27
Description: Heap-based buffer overflow in the AVI_ChunkRead_strf function in libavi.c in the AVI demuxer in VideoLAN VLC media player before 1.1.11 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted AVI media file.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://git.videolan.org/?p=vlc.git%3Ba=commit%3Bh=9c14964bd11482d5c1d6c0e223440f9f1e5b1831; http://secunia.com/advisories/45066; http://www.securityfocus.com/bid/48664
CVE: CVE-2011-2687
Published: 2011-07-27
Description: Drupal 7.x before 7.3 allows remote attackers to bypass intended node_access restrictions via vectors related to a listing that shows nodes but lacks a JOIN clause for the node table.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=633385; http://drupal.org/node/1204582; http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062714.html
CVE: CVE-2011-2696
Published: 2011-07-27
Description: Integer overflow in libsndfile before 1.0.25 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PARIS Audio Format (PAF) file that triggers a heap-based buffer overflow.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062955.html; http://secunia.com/advisories/45125; http://secunia.com/advisories/45351
CVE: CVE-2011-2745
Published: 2011-07-27
Description: upload_handler.php in the swfupload extension in Chyrp 2.0 and earlier relies on client-side JavaScript code to restrict the file extensions of uploaded files, which allows remote authenticated users to upload a .php file, and consequently execute arbitrary PHP code, via a write_post action to the default URI under admin/.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-264
References: http://securityreason.com/securityalert/8314; http://www.justanotherhacker.com/advisories/JAHx113.txt; http://www.openwall.com/lists/oss-security/2011/07/13/5
CVE: CVE-2011-1152
Published: 2011-07-27
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2010-3712.  Reason: This candidate is a duplicate of CVE-2010-3712.  Notes: All CVE users should reference CVE-2010-3712 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2011-2488
Published: 2011-07-27
Description: Joomla! before 1.5.23 does not properly check for errors, which allows remote attackers to obtain sensitive information via unspecified vectors.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://developer.joomla.org/security/news/9-security/10-core-security/[PII_REDACTED]1-core-information-disclosure.html; http://secunia.com/advisories/44028; http://www.joomla.org/announcements/release-news/5367-joomla-1523-released.html
CVE: CVE-2011-2509
Published: 2011-07-27
Description: Multiple cross-site scripting (XSS) vulnerabilities in Joomla! before 1.6.4 allow remote attackers to inject arbitrary web script or HTML via (1) the query string to the com_contact component, as demonstrated by the Itemid parameter to index.php; (2) the query string to the com_content component, as demonstrated by the filter_order parameter to index.php; (3) the query string to the com_newsfeeds component, as demonstrated by an arbitrary parameter to index.php; or (4) the option parameter in a reset.request action to index.php; and, when Internet Explorer or Konqueror is used, (5) allow remote attackers to inject arbitrary web script or HTML via the searchword parameter in a search action to index.php in the com_search component.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://developer.joomla.org/security/news/[PII_REDACTED]4-xss-vulnerability.html; http://www.openwall.com/lists/oss-security/2011/06/28/4; http://www.openwall.com/lists/oss-security/2011/06/29/12
CVE: CVE-2011-2710
Published: 2011-07-27
Description: Multiple cross-site scripting (XSS) vulnerabilities in Joomla! before 1.7.0 allow remote attackers to inject arbitrary web script or HTML via (1) the URI to includes/application.php, reachable through index.php; and, when Internet Explorer or Konqueror is used, (2) allow remote attackers to inject arbitrary web script or HTML via the searchword parameter in a search action to index.php in the com_search component.  NOTE: vector 2 exists because of an incomplete fix for CVE-2011-2509.5.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://developer.joomla.org/security/news/[PII_REDACTED]1-xss-vulnerability.html; http://www.openwall.com/lists/oss-security/2011/07/22/1; http://www.openwall.com/lists/oss-security/2011/07/22/5
CVE: CVE-2011-2884
Published: 2011-07-27
Description: Multiple unspecified vulnerabilities in IBM Lotus Symphony 3 before FP3 have unknown impact and attack vectors, related to "critical security vulnerability issues."
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/45271; http://www.ibm.com/software/lotus/symphony/buzz.nsf/web_DisPlayPlugin?open&unid=9717F6F587AAA939852578D300404BCF&category=announcements; http://www.ibm.com/software/lotus/symphony/idcontents/releasenotes/en/readme_fixpack3_standalone_long.htm
CVE: CVE-2011-2885
Published: 2011-07-27
Description: IBM Lotus Symphony 3 before FP3 allows remote attackers to cause a denial of service (application crash) via the sample .doc document that incorporates a user-defined toolbar.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-399
References: http://osvdb.org/74159; http://www.ibm.com/software/lotus/symphony/buzz.nsf/web_DisPlayPlugin?open&unid=9717F6F587AAA939852578D300404BCF&category=announcements; http://www.ibm.com/software/lotus/symphony/idcontents/releasenotes/en/readme_fixpack3_standalone_long.htm
CVE: CVE-2011-2886
Published: 2011-07-27
Description: IBM Lotus Symphony 3 before FP3 allows remote attackers to cause a denial of service (application crash) via a .docx document with empty bullet styles for parent bullets.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-399
References: http://osvdb.org/74160; http://www.ibm.com/software/lotus/symphony/buzz.nsf/web_DisPlayPlugin?open&unid=9717F6F587AAA939852578D300404BCF&category=announcements; http://www.ibm.com/software/lotus/symphony/idcontents/releasenotes/en/readme_fixpack3_standalone_long.htm
CVE: CVE-2011-2887
Published: 2011-07-27
Description: IBM Lotus Symphony 3 before FP3 on Linux allows remote attackers to cause a denial of service (application crash) via a certain sample document.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-399
References: http://osvdb.org/74163; http://www.ibm.com/software/lotus/symphony/buzz.nsf/web_DisPlayPlugin?open&unid=9717F6F587AAA939852578D300404BCF&category=announcements; http://www.ibm.com/software/lotus/symphony/idcontents/releasenotes/en/readme_fixpack3_standalone_long.htm