deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2010-2235
Published: 2010-12-09
Description: template_api.py in Cobbler before 2.0.7, as used in Red Hat Network Satellite Server and other products, does not disable the ability of the Cheetah template engine to execute Python statements contained in templates, which allows remote authenticated administrators to execute arbitrary code via a crafted kickstart template file, a different vulnerability than CVE-2008-6954.
CVSS Score: 8.5 (HIGH)
CWE: CWE-94
References: http://people.fedoraproject.org/~shenson/cobbler/cobbler-2.0.8.tar.gz; http://www.redhat.com/support/errata/RHSA-2010-0775.html; https://bugzilla.redhat.com/show_bug.cgi?id=607662
CVE: CVE-2010-3800
Published: 2010-12-09
Description: Apple QuickTime before 7.6.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted PICT file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=882; http://lists.apple.com/archives/security-announce/2010//Dec/msg00000.html; http://osvdb.org/69754
CVE: CVE-2010-3801
Published: 2010-12-09
Description: Apple QuickTime before 7.6.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted FlashPix file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2010//Dec/msg00000.html; http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html; http://osvdb.org/69755
CVE: CVE-2010-3802
Published: 2010-12-09
Description: Integer signedness error in Apple QuickTime before 7.6.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted panorama atom in a QuickTime Virtual Reality (QTVR) movie file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: http://lists.apple.com/archives/security-announce/2010//Dec/msg00000.html; http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html; http://osvdb.org/69756
CVE: CVE-2010-3921
Published: 2010-12-09
Description: Cross-site scripting (XSS) vulnerability in Movable Type 4.x before 4.35 and 5.x before 5.04 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN36673836/index.html; http://jvndb.jvn.jp/en/contents/2010/JVNDB-2010-000060.html; http://secunia.com/advisories/42539
CVE: CVE-2010-3922
Published: 2010-12-09
Description: SQL injection vulnerability in Movable Type 4.x before 4.35 and 5.x before 5.04 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://jvn.jp/en/jp/JVN78536512/index.html; http://jvndb.jvn.jp/en/contents/2010/JVNDB-2010-000061.html; http://secunia.com/advisories/42539
CVE: CVE-2010-4009
Published: 2010-12-09
Description: Integer overflow in Apple QuickTime before 7.6.9 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: http://lists.apple.com/archives/security-announce/2010//Dec/msg00000.html; http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html; http://support.apple.com/kb/HT4447
CVE: CVE-2010-4508
Published: 2010-12-09
Description: The WebSockets implementation in Mozilla Firefox 4 through 4.0 Beta 7 does not properly perform proxy upgrade negotiation, which has unspecified impact and remote attack vectors, related to an "inherent problem" with the WebSocket specification.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html; http://osvdb.org/69758; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12251
CVE: CVE-2010-4509
Published: 2010-12-09
Description: Multiple unspecified vulnerabilities in Movable Type 4.x before 4.35 and 5.x before 5.04 have unknown impact and attack vectors related to the (1) mt:AssetProperty and (2) mt:EntryFlag tags.
CVSS Score: 10.0 (HIGH)
References: http://www.movabletype.org/documentation/appendices/release-notes/movable-type-504-435-release-notes.html; http://www.securityfocus.com/bid/45383; https://exchange.xforce.ibmcloud.com/vulnerabilities/64130
CVE: CVE-2010-4511
Published: 2010-12-09
Description: Unspecified vulnerability in Movable Type 4.x before 4.35 and 5.x before 5.04 has unknown impact and attack vectors related to the "dynamic publishing error message."
CVSS Score: 10.0 (HIGH)
References: http://osvdb.org/69751; http://www.movabletype.org/documentation/appendices/release-notes/movable-type-504-435-release-notes.html; http://www.securityfocus.com/bid/45380
CVE: CVE-2010-4512
Published: 2010-12-09
Description: Cobbler before 2.0.4 uses an incorrect umask value, which allows local users to have an unspecified impact by leveraging world writable permissions for files and directories.
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://people.fedoraproject.org/~shenson/cobbler/cobbler-2.0.8.tar.gz; http://secunia.com/advisories/42602; https://bugzilla.redhat.com/show_bug.cgi?id=554567
CVE: CVE-2010-4513
Published: 2010-12-09
Description: Multiple cross-site scripting (XSS) vulnerabilities in Zimplit CMS 3.0, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) file parameter in a load action to zimplit.php and (2) client parameter to English_manual_version_2.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0541&w=2; http://packetstormsecurity.org/files/view/96466/zimplit-xss.txt; http://secunia.com/advisories/41629
CVE: CVE-2010-4514
Published: 2010-12-09
Description: Cross-site scripting (XSS) vulnerability in Install/InstallWizard.aspx in DotNetNuke 5.05.01 and 5.06.00 allows remote attackers to inject arbitrary web script or HTML via the __VIEWSTATE parameter.  NOTE: some of these details are obtained from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.org/files/view/96378/PR10-19.txt; http://secunia.com/advisories/42478; http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr10-19
CVE: CVE-2010-4515
Published: 2010-12-09
Description: Cross-site scripting (XSS) vulnerability in Citrix Web Interface 5.0, 5.1, and 5.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2007-6477 and CVE-2009-2454.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/69676; http://secunia.com/advisories/39514; http://support.citrix.com/article/CTX127541
CVE: CVE-2010-4516
Published: 2010-12-09
Description: Multiple cross-site scripting (XSS) vulnerabilities in the JXtended Comments component before 1.3.1 for Joomla allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://jxtended.com/blog/releases/375-jxtended-comments-131-stable-released.html; http://secunia.com/advisories/42534; http://www.securityfocus.com/bid/45296
CVE: CVE-2010-4517
Published: 2010-12-09
Description: SQL injection vulnerability in the JExtensions JE Auto (com_jeauto) component 1.0 for Joomla!, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the char parameter in an item action to index.php.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-89
References: http://www.exploit-db.com/exploits/15714; http://www.exploit-db.com/exploits/15714
CVE: CVE-2010-4518
Published: 2010-12-09
Description: Cross-site scripting (XSS) vulnerability in wp-safe-search/wp-safe-search-jx.php in the Safe Search plugin 0.7 for WordPress allows remote attackers to inject arbitrary web script or HTML via the v1 parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/69762; http://secunia.com/advisories/42544; http://www.johnleitch.net/Vulnerabilities/WordPress.Safe.Search.0.7.Reflected.Cross-site.Scripting/66
CVE: CVE-2010-3766
Published: 2010-12-10
Description: Use-after-free vulnerability in Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, allows remote attackers to execute arbitrary code via vectors involving a change to an nsDOMAttribute node.
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052022.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052032.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052502.html
CVE: CVE-2010-3767
Published: 2010-12-10
Description: Integer overflow in the NewIdArray function in Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, allows remote attackers to execute arbitrary code via a JavaScript array with many elements.
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052022.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052032.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052502.html
CVE: CVE-2010-3768
Published: 2010-12-10
Description: Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, Thunderbird before 3.0.11 and 3.1.x before 3.1.7, and SeaMonkey before 2.0.11 do not properly validate downloadable fonts before use within an operating system's font implementation, which allows remote attackers to execute arbitrary code via vectors related to @font-face Cascading Style Sheets (CSS) rules.
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052022.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052032.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052110.html
CVE: CVE-2010-3769
Published: 2010-12-10
Description: The line-breaking implementation in Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, Thunderbird before 3.0.11 and 3.1.x before 3.1.7, and SeaMonkey before 2.0.11 on Windows does not properly handle long strings, which allows remote attackers to execute arbitrary code via a crafted document.write call that triggers a buffer over-read.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052502.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052504.html; http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00002.html
CVE: CVE-2010-3770
Published: 2010-12-10
Description: Multiple cross-site scripting (XSS) vulnerabilities in the rendering engine in Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, allow remote attackers to inject arbitrary web script or HTML via (1) x-mac-arabic, (2) x-mac-farsi, or (3) x-mac-hebrew characters that may be converted to angle brackets during rendering.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052022.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052032.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052502.html
CVE: CVE-2010-3771
Published: 2010-12-10
Description: Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, does not properly handle injection of an ISINDEX element into an about:blank page, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges via vectors related to redirection to a chrome: URI.
CVSS Score: 6.8 (MEDIUM)
References: http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052022.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052032.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052502.html
CVE: CVE-2010-3772
Published: 2010-12-10
Description: Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, does not properly calculate index values for certain child content in a XUL tree, which allows remote attackers to execute arbitrary code via vectors involving a DIV element within a treechildren element.
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052022.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052032.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052502.html
CVE: CVE-2010-3773
Published: 2010-12-10
Description: Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, when the XMLHttpRequestSpy module in the Firebug add-on is used, does not properly handle interaction between the XMLHttpRequestSpy object and chrome privileged objects, which allows remote attackers to execute arbitrary JavaScript via a crafted HTTP response.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-0179.
CVSS Score: 6.8 (MEDIUM)
References: http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052022.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052032.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052502.html
CVE: CVE-2010-3774
Published: 2010-12-10
Description: The NS_SecurityCompareURIs function in netwerk/base/public/nsNetUtil.h in Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, does not properly handle (1) about:neterror and (2) about:certerror pages, which allows remote attackers to spoof the location bar via a crafted web site.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052022.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052032.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052502.html
CVE: CVE-2010-3775
Published: 2010-12-10
Description: Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, does not properly handle certain redirections involving data: URLs and Java LiveConnect scripts, which allows remote attackers to start processes, read arbitrary local files, and establish network connections via vectors involving a refresh value in the http-equiv attribute of a META element, which causes the wrong security principal to be used.
CVSS Score: 9.3 (HIGH)
References: http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052022.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052032.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052502.html
CVE: CVE-2010-3776
Published: 2010-12-10
Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, Thunderbird before 3.0.11 and 3.1.x before 3.1.7, and SeaMonkey before 2.0.11 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052022.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052032.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052110.html
CVE: CVE-2010-3777
Published: 2010-12-10
Description: Unspecified vulnerability in Mozilla Firefox 3.6.x before 3.6.13 and Thunderbird 3.1.x before 3.1.7 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052022.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052032.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052110.html
CVE: CVE-2010-3778
Published: 2010-12-10
Description: Unspecified vulnerability in Mozilla Firefox 3.5.x before 3.5.16, Thunderbird before 3.0.11, and SeaMonkey before 2.0.11 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052502.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052504.html; http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00002.html
CVE: CVE-2010-3861
Published: 2010-12-10
Description: The ethtool_get_rxnfc function in net/core/ethtool.c in the Linux kernel before 2.6.36 does not initialize a certain block of heap memory, which allows local users to obtain potentially sensitive information via an ETHTOOL_GRXCLSRLALL ethtool command with a large info.rule_cnt value, a different vulnerability than CVE-2010-2478.
CVSS Score: 2.1 (LOW)
CWE: CWE-200
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ae6df5f96a51818d6376da5307d773baeece4014; http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.html; http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00001.html
CVE: CVE-2010-3880
Published: 2010-12-10
Description: net/ipv4/inet_diag.c in the Linux kernel before 2.6.37-rc2 does not properly audit INET_DIAG bytecode, which allows local users to cause a denial of service (kernel infinite loop) via crafted INET_DIAG_REQ_BYTECODE instructions in a netlink message that contains multiple attribute elements, as demonstrated by INET_DIAG_BC_JMP instructions.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-835
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=22e76c849d505d87c5ecf3d3e6742a65f0ff4860; http://openwall.com/lists/oss-security/2010/11/04/9; http://openwall.com/lists/oss-security/2010/11/05/3
CVE: CVE-2010-3918
Published: 2010-12-10
Description: Fenrir Sleipnir 2.9.6 and earlier does not prevent interaction between web script and the clipboard, which allows remote attackers to read or modify the clipboard contents via a crafted web site.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-264
References: http://fenrir-inc.blogspot.com/2010/11/vulnerability-regarding-allow-paste.html; http://jvn.jp/en/jp/JVN64764004/index.html; http://jvndb.jvn.jp/en/contents/2010/JVNDB-2010-000057.html
CVE: CVE-2010-3919
Published: 2010-12-10
Description: Fenrir Grani 4.5 and earlier does not prevent interaction between web script and the clipboard, which allows remote attackers to read or modify the clipboard contents via a crafted web site.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-264
References: http://jvn.jp/en/jp/JVN76662040/index.html; http://jvndb.jvn.jp/en/contents/2010/JVNDB-2010-000058.html; http://secunia.com/advisories/42428
CVE: CVE-2010-4157
Published: 2010-12-10
Description: Integer overflow in the ioc_general function in drivers/scsi/gdth.c in the Linux kernel before 2.6.36.1 on 64-bit platforms allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact via a large argument in an ioctl call.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-190
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f63ae56e4e97fb12053590e41a4fa59e7daa74a4; http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052513.html; http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.html
CVE: CVE-2010-0121
Published: 2010-12-14
Description: The cook codec in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, Mac RealPlayer 11.0 through 12.0.0.1444, and Linux RealPlayer 11.0.2.1744 does not properly perform initialization, which has unspecified impact and attack vectors.
CVSS Score: 10.0 (HIGH)
References: http://service.real.com/realplayer/security/12102010_player/en/; http://www.securitytracker.com/id?1024861; http://service.real.com/realplayer/security/12102010_player/en/
CVE: CVE-2010-0125
Published: 2010-12-14
Description: RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, and Mac RealPlayer 11.0 through 12.0.0.1444 do not properly parse spectral data in AAC files, which has unspecified impact and remote attack vectors.
CVSS Score: 10.0 (HIGH)
CWE: CWE-264
References: http://service.real.com/realplayer/security/12102010_player/en/; http://www.securitytracker.com/id?1024861; http://service.real.com/realplayer/security/12102010_player/en/
CVE: CVE-2010-2579
Published: 2010-12-14
Description: The cook codec in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, Mac RealPlayer 11.0 through 11.1, and Linux RealPlayer 11.0.2.1744 does not properly initialize the number of channels, which allows attackers to obtain unspecified "memory access" via unknown vectors.
CVSS Score: 5.0 (MEDIUM)
References: http://service.real.com/realplayer/security/12102010_player/en/; http://www.securitytracker.com/id?1024861; http://service.real.com/realplayer/security/12102010_player/en/
CVE: CVE-2010-2997
Published: 2010-12-14
Description: Use-after-free vulnerability in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.0.1, Mac RealPlayer 11.0 through 11.1, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted StreamTitle tag in an ICY SHOUTcast stream, related to the SMIL file format.
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://service.real.com/realplayer/security/12102010_player/en/; http://www.redhat.com/support/errata/RHSA-2010-0981.html; http://www.securitytracker.com/id?1024861
CVE: CVE-2010-2999
Published: 2010-12-14
Description: Integer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.0.1, Mac RealPlayer 11.0 through 11.1, and Linux RealPlayer 11.0.2.1744 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a malformed MLLT atom in an AAC file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: http://service.real.com/realplayer/security/12102010_player/en/; http://www.securitytracker.com/id?1024861; http://www.zerodayinitiative.com/advisories/ZDI-10-273
CVE: CVE-2010-4344
Published: 2010-12-14
Description: Heap-based buffer overflow in the string_vformat function in string.c in Exim before 4.70 allows remote attackers to execute arbitrary code via an SMTP session that includes two MAIL commands in conjunction with a large message containing crafted headers, leading to improper rejection logging.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: ftp://ftp.exim.org/pub/exim/ChangeLogs/ChangeLog-4.70; http://atmail.com/blog/2010/atmail-6204-now-available/; http://bugs.exim.org/show_bug.cgi?id=787
CVE: CVE-2010-4345
Published: 2010-12-14
Description: Exim 4.72 and earlier allows local users to gain privileges by leveraging the ability of the exim user account to specify an alternate configuration file with a directive that contains arbitrary commands, as demonstrated by the spool_directory directive.
CVSS Score: 7.8 (HIGH)
CWE: CWE-77
References: http://bugs.exim.org/show_bug.cgi?id=1044; http://lists.exim.org/lurker/message/20[PII_REDACTED]33.abcba158.en.html; http://lists.exim.org/lurker/message/20[PII_REDACTED]35.385e04d0.en.html
CVE: CVE-2010-4375
Published: 2010-12-14
Description: Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, Mac RealPlayer 11.0 through 11.1, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allows remote attackers to execute arbitrary code via malformed multi-rate data in an audio stream.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://service.real.com/realplayer/security/12102010_player/en/; http://www.redhat.com/support/errata/RHSA-2010-0981.html; http://www.securitytracker.com/id?1024861