deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2009-1258
Published: 2009-04-07
Description: SQL injection vulnerability in the RD-Autos (com_rdautos) component 1.5.7 for Joomla! allows remote attackers to execute arbitrary SQL commands via the makeid parameter in index.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/53138; http://secunia.com/advisories/34578; http://www.securityfocus.com/bid/34364
CVE: CVE-2009-1259
Published: 2009-04-07
Description: SQL injection vulnerability in inc/bb/topic.php in Insane Visions AdaptBB 1.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the topic_id parameter in a topic action to index.php.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-89
References: http://www.securityfocus.com/bid/34371; https://exchange.xforce.ibmcloud.com/vulnerabilities/49681; https://www.exploit-db.com/exploits/8351
CVE: CVE-2009-1260
Published: 2009-04-07
Description: Multiple stack-based buffer overflows in UltraISO 9.3.3.2685 and earlier allow remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted (1) CCD or (2) IMG file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://osvdb.org/53275; http://secunia.com/advisories/34581; http://www.securityfocus.com/bid/34363
CVE: CVE-2009-1261
Published: 2009-04-07
Description: Multiple cross-site scripting (XSS) vulnerabilities in Web Help Desk 9.1.22 (evaluation version) allow remote attackers to inject arbitrary web script or HTML via the (1) Report Name, (2) Asset No., and (3) Full Name fields in a Models action.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/53422; http://osvdb.org/53423; http://osvdb.org/53424
CVE: CVE-2009-1262
Published: 2009-04-07
Description: Format string vulnerability in Fortinet FortiClient 3.0.614, and possibly earlier, allows local users to execute arbitrary code via format string specifiers in the VPN connection name.
CVSS Score: 7.2 (HIGH)
CWE: CWE-134
References: http://lists.grok.org.uk/pipermail/full-disclosure/2009-April/068583.html; http://osvdb.org/53266; http://secunia.com/advisories/34524
CVE: CVE-2009-1263
Published: 2009-04-07
Description: SQL injection vulnerability in sub_commententry.php in the BookJoomlas (com_bookjoomlas) component 0.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the gbid parameter in a comment action to index.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/53421; http://www.securityfocus.com/bid/34392; http://www.vupen.com/english/advisories/2009/0952
CVE: CVE-2009-1264
Published: 2009-04-07
Description: Frontend User Registration (sr_feuser_register) extension 2.5.20 and earlier for TYPO3 does not properly verify access rights, which allows remote authenticated users to obtain sensitive information such as passwords via unknown attack vectors.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-264
References: http://osvdb.org/53278; http://secunia.com/advisories/34586; http://typo3.org/extensions/repository/view/sr_feuser_register/2.5.21/
CVE: CVE-2009-0795
Published: 2009-04-08
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2009-0796, CVE-2009-1265.  Reason: this candidate was intended for one issue, but a typo caused it to be associated with a different issue.  Notes: All CVE users should consult CVE-2009-0796 and CVE-2009-1265 to determine which ID is appropriate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2009-1265
Published: 2009-04-08
Description: Integer overflow in rose_sendmsg (sys/net/af_rose.c) in the Linux kernel 2.6.24.4, and other versions before 2.6.30-rc1, might allow remote attackers to obtain sensitive information via a large length value, which causes "garbage" memory to be sent.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-189
References: http://bugzilla.kernel.org/show_bug.cgi?id=10423; http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=83e0bbcbe2145f160fbaa109b0439dae7f4a38a9; http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00002.html
CVE: CVE-2008-6663
Published: 2009-04-08
Description: SQL injection vulnerability in profile.php in PHPAuctions.info PHPAuctions (aka PHPAuctionSystem) allows remote attackers to execute arbitrary SQL commands via the auction_id parameter, a different vector than CVE-2009-0106.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.securityfocus.com/bid/29856; https://exchange.xforce.ibmcloud.com/vulnerabilities/43264; https://exchange.xforce.ibmcloud.com/vulnerabilities/50472
CVE: CVE-2008-6664
Published: 2009-04-08
Description: action.php in SH-News 3.0 allows remote attackers to bypass authentication and gain administrator privileges by setting the shuser and shpass cookies to non-zero values.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: http://www.securityfocus.com/bid/29725; http://www.shnews.de/change-log; https://exchange.xforce.ibmcloud.com/vulnerabilities/43123
CVE: CVE-2008-6665
Published: 2009-04-08
Description: change.php in Ananta CMS 1.0b5, with magic_quotes_gpc disabled, allows remote attackers to gain administrator privileges via a crafted email parameter, possibly related to code injection.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://www.securityfocus.com/bid/29752; https://exchange.xforce.ibmcloud.com/vulnerabilities/43119; https://www.exploit-db.com/exploits/5824
CVE: CVE-2008-6666
Published: 2009-04-08
Description: Multiple cross-site scripting (XSS) vulnerabilities in Kronos webTA allow remote attackers to inject arbitrary web script or HTML via the description field to (1) servlet/com.threeis.webta.H710selProject and (2) servlet/com.threeis.webta.H720editProjectInfo.  NOTE: BID:29610 states that the initial report was incorrect, but the reason for this conclusion is unknown.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/46207; http://osvdb.org/46208; http://secunia.com/advisories/30588
CVE: CVE-2008-6667
Published: 2009-04-08
Description: A+ PHP Scripts News Management System (NMS) allows remote attackers to bypass authentication and gain administrator privileges by setting the mobsuser and mobspass cookies to 1.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: http://www.securityfocus.com/bid/29977; https://exchange.xforce.ibmcloud.com/vulnerabilities/43431; https://www.exploit-db.com/exploits/5954
CVE: CVE-2008-6668
Published: 2009-04-08
Description: Multiple directory traversal vulnerabilities in nweb2fax 0.2.7 and earlier allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) id parameter to comm.php and (2) var_filename parameter to viewrq.php.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://www.securityfocus.com/bid/29804; https://exchange.xforce.ibmcloud.com/vulnerabilities/43172; https://exchange.xforce.ibmcloud.com/vulnerabilities/43173
CVE: CVE-2008-6669
Published: 2009-04-08
Description: viewrq.php in nweb2fax 0.2.7 and earlier allows remote attackers to execute arbitrary code via shell metacharacters in the var_filename parameter in a (1) tif or (2) pdf format action.
CVSS Score: 7.5 (HIGH)
CWE: CWE-78
References: http://www.securityfocus.com/bid/29804; https://exchange.xforce.ibmcloud.com/vulnerabilities/43174; https://www.exploit-db.com/exploits/5856
CVE: CVE-2008-6670
Published: 2009-04-08
Description: Integer overflow in Vertex4 SunAge 1.08.1 and earlier allows remote attackers to cause a denial of service (crash) via a crafted packet to UDP port 27960.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-189
References: http://aluigi.altervista.org/adv/sunagex-adv.txt; http://aluigi.org/poc/sunagex.zip; http://osvdb.org/46561
CVE: CVE-2008-6671
Published: 2009-04-08
Description: Vertex4 SunAge 1.08.1 and earlier allows remote attackers to cause a denial of service (infinite loop and hang) via a crafted join packet to UDP port 27960.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-189
References: http://aluigi.altervista.org/adv/sunagex-adv.txt; http://aluigi.org/poc/sunagex.zip; http://osvdb.org/46562
CVE: CVE-2008-6672
Published: 2009-04-08
Description: Vertex4 SunAge 1.08.1 and earlier allows remote attackers to cause a denial of service ("runtime error") via a crafted join packet to UDP port 27960, probably related to an invalid nickname command.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-189
References: http://aluigi.altervista.org/adv/sunagex-adv.txt; http://aluigi.org/poc/sunagex.zip; http://secunia.com/advisories/30823
CVE: CVE-2008-6673
Published: 2009-04-08
Description: asp/bs_login.asp in QuickerSite 1.8.5 does not properly restrict access to administrative functionality, which allows remote attackers to (1) change the admin password via the cSaveAdminPW action; (2) modify site information, such as the contact address, via the saveAdmin; and (3) modify the site design via the saveDesign action.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://secunia.com/advisories/30501; http://www.bugreport.ir/39/exploit.htm; http://www.bugreport.ir/index_39.htm
CVE: CVE-2008-6674
Published: 2009-04-08
Description: mailPage.asp in QuickerSite 1.8.5 allows remote attackers to flood e-mail accounts with messages via a large number of requests with a modified sEmail parameter.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://secunia.com/advisories/30501; http://www.bugreport.ir/39/exploit.htm; http://www.bugreport.ir/index_39.htm
CVE: CVE-2008-6675
Published: 2009-04-08
Description: Multiple cross-site scripting (XSS) vulnerabilities in QuickerSite 1.8.5 allow remote attackers to inject arbitrary web script or HTML via (1) the close parameter to showThumb.aspx; (2) SB_redirect and (3) SB_feedback parameters in process_send.asp, as reachable through default.asp; (4) paramCode and (5) cColor parameters to picker.asp; and the (6) query string, (7) Referer header, and (8) X-FORWARDED-FOR header to rss.asp.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/46221; http://secunia.com/advisories/30501; http://www.bugreport.ir/39/exploit.htm
CVE: CVE-2008-6676
Published: 2009-04-08
Description: QuickerSite 1.8.5 allows remote attackers to obtain sensitive information via a request to showThumb.aspx without any parameters, which reveals the installation path in an error message.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://osvdb.org/46222; http://secunia.com/advisories/30501; http://www.bugreport.ir/39/exploit.htm
CVE: CVE-2008-6677
Published: 2009-04-08
Description: Unrestricted file upload vulnerability in fckeditor251/editor/filemanager/connectors/asp/upload.asp in QuickerSite 1.8.5 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://secunia.com/advisories/30501; http://www.bugreport.ir/39/exploit.htm; http://www.bugreport.ir/index_39.htm
CVE: CVE-2008-6678
Published: 2009-04-08
Description: SQL injection vulnerability in asp/includes/contact.asp in QuickerSite 1.8.5 allows remote attackers to execute arbitrary SQL commands via the sNickName parameter in a profile action to default.asp.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/46228; http://secunia.com/advisories/30501; http://www.bugreport.ir/39/exploit.htm
CVE: CVE-2007-6725
Published: 2009-04-08
Description: The CCITTFax decoding filter in Ghostscript 8.60, 8.61, and possibly other versions, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PDF file that triggers a buffer underflow in the cf_decode_2d function.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html; http://secunia.com/advisories/34726; http://secunia.com/advisories/34729
CVE: CVE-2008-6679
Published: 2009-04-08
Description: Buffer overflow in the BaseFont writer module in Ghostscript 8.62, and possibly other versions, allows remote attackers to cause a denial of service (ps2pdf crash) and possibly execute arbitrary code via a crafted Postscript file.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://bugs.ghostscript.com/show_bug.cgi?id=690211; http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html; http://secunia.com/advisories/34667
CVE: CVE-2008-6680
Published: 2009-04-08
Description: libclamav/pe.c in ClamAV before 0.95 allows remote attackers to cause a denial of service (crash) via a crafted EXE file that triggers a divide-by-zero error.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-189
References: http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html; http://secunia.com/advisories/34716; http://secunia.com/advisories/36701
CVE: CVE-2009-1270
Published: 2009-04-08
Description: libclamav/untar.c in ClamAV before 0.95 allows remote attackers to cause a denial of service (infinite loop) via a crafted TAR file that causes (1) clamd and (2) clamscan to hang.
CVSS Score: 7.8 (HIGH)
CWE: CWE-835
References: http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html; http://osvdb.org/53461; http://secunia.com/advisories/34716
CVE: CVE-2009-1271
Published: 2009-04-08
Description: The JSON_parser function (ext/json/JSON_parser.c) in PHP 5.2.x before 5.2.9 allows remote attackers to cause a denial of service (segmentation fault) via a malformed string to the json_decode API function.
CVSS Score: 5.0 (MEDIUM)
References: http://cvs.php.net/viewvc.cgi/php-src/ext/json/JSON_parser.c?r1=1.1.2.14&r2=1.1.2.15; http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html; http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html
CVE: CVE-2009-1272
Published: 2009-04-08
Description: The php_zip_make_relative_path function in php_zip.c in PHP 5.2.x before 5.2.9 allows context-dependent attackers to cause a denial of service (crash) via a ZIP file that contains filenames with relative paths, which is not properly handled during extraction.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://cvs.php.net/viewvc.cgi/php-src/ext/zip/php_zip.c?r1=1.1.2.48&r2=1.1.2.49; http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html; http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html
CVE: CVE-2009-1273
Published: 2009-04-08
Description: pam_ssh 1.92 and possibly other versions, as used when PAM is compiled with USE=ssh, generates different error messages depending on whether the username is valid or invalid, which makes it easier for remote attackers to enumerate usernames.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-255
References: http://bugs.gentoo.org/show_bug.cgi?id=263579; http://secunia.com/advisories/34536; http://secunia.com/advisories/34986
CVE: CVE-2009-1274
Published: 2009-04-08
Description: Integer overflow in the qt_error parse_trak_atom function in demuxers/demux_qt.c in xine-lib 1.1.16.2 and earlier allows remote attackers to execute arbitrary code via a Quicktime movie file with a large count value in an STTS atom, which triggers a heap-based buffer overflow.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://bugs.xine-project.org/show_bug.cgi?id=224; http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html; http://osvdb.org/53288
CVE: CVE-2009-0844
Published: 2009-04-09
Description: The get_input_token function in the SPNEGO implementation in MIT Kerberos 5 (aka krb5) 1.5 through 1.6.3 allows remote attackers to cause a denial of service (daemon crash) and possibly obtain sensitive information via a crafted length value that triggers a buffer over-read.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2009/May/msg00002.html; http://secunia.com/advisories/34594; http://secunia.com/advisories/34617
CVE: CVE-2009-0846
Published: 2009-04-09
Description: The asn1_decode_generaltime function in lib/krb5/asn.1/asn1_decode.c in the ASN.1 GeneralizedTime decoder in MIT Kerberos 5 (aka krb5) before 1.6.4 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via vectors involving an invalid DER encoding that triggers a free of an uninitialized pointer.
CVSS Score: 10.0 (HIGH)
CWE: CWE-824
References: http://lists.apple.com/archives/security-announce/2009/May/msg00002.html; http://lists.vmware.com/pipermail/security-announce/2009/000059.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1168&w=2
CVE: CVE-2009-0847
Published: 2009-04-09
Description: The asn1buf_imbed function in the ASN.1 decoder in MIT Kerberos 5 (aka krb5) 1.6.3, when PK-INIT is used, allows remote attackers to cause a denial of service (application crash) via a crafted length value that triggers an erroneous malloc call, related to incorrect calculations with pointer arithmetic.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-189
References: http://lists.apple.com/archives/security-announce/2009/May/msg00002.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1168&w=2; http://secunia.com/advisories/34594
CVE: CVE-2009-1250
Published: 2009-04-09
Description: The cache manager in the client in OpenAFS 1.0 through 1.4.8 and 1.5.0 through 1.5.58, and IBM AFS 3.6 before Patch 19, on Linux allows remote attackers to cause a denial of service (system crash) via an RX response with a large error-code value that is interpreted as a pointer and dereferenced, related to use of the ERR_PTR macro.
CVSS Score: 7.8 (HIGH)
CWE: CWE-189
References: http://secunia.com/advisories/34655; http://secunia.com/advisories/34684; http://secunia.com/advisories/36310
CVE: CVE-2009-1251
Published: 2009-04-09
Description: Heap-based buffer overflow in the cache manager in the client in OpenAFS 1.0 through 1.4.8 and 1.5.0 through 1.5.58 on Unix platforms allows remote attackers to cause a denial of service (system crash) or possibly execute arbitrary code via an RX response containing more data than specified in a request, related to use of XDR arrays.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/34655; http://secunia.com/advisories/34684; http://secunia.com/advisories/42896
CVE: CVE-2009-1253
Published: 2009-04-09
Description: James Stone Tunapie 2.1 allows local users to overwrite arbitrary files via a symlink attack on an unspecified temporary file.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-59
References: http://osvdb.org/53426; http://secunia.com/advisories/34643; http://www.debian.org/security/2009/dsa-1764
CVE: CVE-2009-1254
Published: 2009-04-09
Description: James Stone Tunapie 2.1 allows remote attackers to execute arbitrary commands via shell metacharacters in a stream URL.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: http://osvdb.org/53427; http://secunia.com/advisories/34643; http://www.debian.org/security/2009/dsa-1764
CVE: CVE-2007-6726
Published: 2009-04-09
Description: Multiple cross-site scripting (XSS) vulnerabilities in Dojo 0.4.1 and 0.4.2, as used in Apache Struts and other products, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving (1) xip_client.html and (2) xip_server.html in src/io/.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.dojotoolkit.org/0-4-3-and-updated-0-4-1-0-4-2-builds; http://www.dojotoolkit.org/2007/05/26/0-4-3-released-0-4-2-and-0-4-1-users-should-upgrade-immediately; http://www.dojotoolkit.org/releaseNotes/0.4.3
CVE: CVE-2008-2025
Published: 2009-04-09
Description: Cross-site scripting (XSS) vulnerability in Apache Struts before 1.2.9-162.31.1 on SUSE Linux Enterprise (SLE) 11, before 1.2.9-108.2 on SUSE openSUSE 10.3, before 1.2.9-198.2 on SUSE openSUSE 11.0, and before 1.2.9-162.163.2 on SUSE openSUSE 11.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "insufficient quoting of parameters."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://download.opensuse.org/update/10.3-test/repodata/patch-struts-5872.xml; http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html; http://osvdb.org/53380
CVE: CVE-2008-5519
Published: 2009-04-09
Description: The JK Connector (aka mod_jk) 1.2.0 through 1.2.26 in Apache Tomcat allows remote attackers to obtain sensitive information via an arbitrary request from an HTTP client, in opportunistic circumstances involving (1) a request from a different client that included a Content-Length header but no POST data or (2) a rapid series of requests, related to noncompliance with the AJP protocol's requirements for requests containing Content-Length headers.
CVSS Score: 2.6 (LOW)
CWE: CWE-200
References: http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html; http://mail-archives.apache.org/mod_mbox/www-announce/200904.mbox/%3C49DBBAC0.2080400%40apache.org%3E; http://marc.info/?l=tomcat-dev&m=[PII_REDACTED]0879
CVE: CVE-2008-6681
Published: 2009-04-09
Description: Cross-site scripting (XSS) vulnerability in dijit.Editor in Dojo before 1.1 allows remote attackers to inject arbitrary web script or HTML via XML entities in a TEXTAREA element.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://trac.dojotoolkit.org/ticket/2140; http://www.dojotoolkit.org/book/dojo-1-1-release-notes; http://www.securityfocus.com/bid/34661
CVE: CVE-2008-6682
Published: 2009-04-09
Description: Multiple cross-site scripting (XSS) vulnerabilities in Apache Struts 2.0.x before 2.0.11.1 and 2.1.x before 2.1.1 allow remote attackers to inject arbitrary web script or HTML via vectors associated with improper handling of (1) " (double quote) characters in the href attribute of an s:a tag and (2) parameters in the action attribute of an s:url tag.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.nabble.com/Feedback%3A-WW-2414%2C-XSS-attack-is-possible-if-using-%3Cs%3Aurl-...%3E-and-%3Cs%3Aa-...%3E-td14771449.html; http://www.nabble.com/Feedback%3A-WW-2414%2C-XSS-attack-is-possible-if-using-%3Cs%3Aurl-...%3E-and-%3Cs%3Aa-...%3E-td14771449i20.html; http://www.securityfocus.com/bid/34686
CVE: CVE-2009-0197
Published: 2009-04-09
Description: Integer overflow in the FORMATS Plugin before 4.23 for IrfanView allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a large XPM file that triggers a heap-based buffer overflow.
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: http://secunia.com/advisories/34525; http://secunia.com/secunia_research/2009-20/; http://www.irfanview.com/plugins.htm
CVE: CVE-2009-0793
Published: 2009-04-09
Description: cmsxform.c in LittleCMS (aka lcms or liblcms) 1.18, as used in OpenJDK and other products, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted image that triggers execution of incorrect code for "transformations of monochrome profiles."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://secunia.com/advisories/34623; http://secunia.com/advisories/34632; http://secunia.com/advisories/34634
CVE: CVE-2009-1144
Published: 2009-04-09
Description: Untrusted search path vulnerability in the Gentoo package of Xpdf before 3.02-r2 allows local users to gain privileges via a Trojan horse xpdfrc file in the current working directory, related to an unset SYSTEM_XPDFRC macro in a Gentoo build process that uses the poppler library.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-94
References: http://bugs.gentoo.org/show_bug.cgi?id=200023; http://bugs.gentoo.org/show_bug.cgi?id=242930; http://osvdb.org/53529
CVE: CVE-2009-1155
Published: 2009-04-09
Description: Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.1(1) through 7.1(2)82, 7.2 before 7.2(4)27, 8.0 before 8.0(4)25, and 8.1 before 8.1(2)15, when AAA override-account-disable is entered in a general-attributes field, allow remote attackers to bypass authentication and establish a VPN session to an ASA device via unspecified vectors.
CVSS Score: 7.8 (HIGH)
CWE: CWE-287
References: http://osvdb.org/53441; http://secunia.com/advisories/34607; http://www.cisco.com/en/US/products/products_security_advisory09186a0080a994f6.shtml