deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2009-3884
Published: 2009-11-09
Description: The TimeZone.getTimeZone method in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, allows remote attackers to determine the existence of local files via vectors related to handling of zoneinfo (aka tz) files, aka Bug Id 6824265.
CVSS Score: 5.0 (MEDIUM)
References: http://java.sun.com/j2se/1.5.0/ReleaseNotes.html; http://java.sun.com/javase/6/webnotes/6u17.html; http://lists.apple.com/archives/security-announce/2009/Dec/msg00000.html
CVE: CVE-2009-3885
Published: 2009-11-09
Description: Sun Java SE 5.0 before Update 22 and 6 before Update 17 on Windows allows remote attackers to cause a denial of service via a BMP file containing a link to a UNC share pathname for an International Color Consortium (ICC) profile file, probably a related issue to CVE-2007-2789, aka Bug Id 6632445.
CVSS Score: 5.0 (MEDIUM)
References: http://java.sun.com/j2se/1.5.0/ReleaseNotes.html; http://java.sun.com/javase/6/webnotes/6u17.html; http://www.mandriva.com/security/advisories?name=MDVSA-2010:084
CVE: CVE-2009-3886
Published: 2009-11-09
Description: The Java Web Start implementation in Sun Java SE 6 before Update 17 does not properly handle the interaction between a signed JAR file and a JNLP (1) application or (2) applet, which has unspecified impact and attack vectors, related to a "regression," aka Bug Id 6870531.
CVSS Score: 7.5 (HIGH)
References: http://java.sun.com/javase/6/webnotes/6u17.html; http://secunia.com/advisories/37386; http://security.gentoo.org/glsa/glsa-200911-02.xml
CVE: CVE-2009-3923
Published: 2009-11-10
Description: The VirtualBox 2.0.8 and 2.0.10 web service in Sun Virtual Desktop Infrastructure (VDI) 3.0 does not require authentication, which allows remote attackers to obtain unspecified access via vectors involving requests to an Apache HTTP Server.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: http://sunsolve.sun.com/search/document.do?assetkey=1-21-141481-03-1; http://sunsolve.sun.com/search/document.do?assetkey=1-66-268328-1; http://www.securityfocus.com/bid/36917
CVE: CVE-2009-3610
Published: 2009-11-10
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2009-3695.  Reason: This candidate is a duplicate of CVE-2009-3695.  Notes: All CVE users should reference CVE-2009-3695 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2009-3618
Published: 2009-11-10
Description: Cross-site scripting (XSS) vulnerability in viewvc.py in ViewVC 1.0 before 1.0.9 and 1.1 before 1.1.2 allows remote attackers to inject arbitrary web script or HTML via the view parameter.  NOTE: some of these details are obtained from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html; http://osvdb.org/56997; http://secunia.com/advisories/36292
CVE: CVE-2009-3619
Published: 2009-11-10
Description: Unspecified vulnerability in ViewVC 1.0 before 1.0.9 and 1.1 before 1.1.2 has unknown impact and remote attack vectors related to "printing illegal parameter names and values."
CVSS Score: 5.0 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html; http://secunia.com/advisories/36292; http://secunia.com/advisories/36311
CVE: CVE-2009-3924
Published: 2009-11-10
Description: Buffer overflow in pbsv.dll, as used in Soldier of Fortune II and possibly other applications when Even Balance PunkBuster 1.728 or earlier is enabled, allows remote attackers to cause a denial of service (application server crash) and possibly execute arbitrary code via a long restart packet.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://aluigi.altervista.org/adv/sof2pbbof-adv.txt; http://aluigi.org/poc/sof2pbbof.zip; http://secunia.com/advisories/36221
CVE: CVE-2009-3727
Published: 2009-11-10
Description: Asterisk Open Source 1.2.x before 1.2.35, 1.4.x before 1.4.26.3, 1.6.0.x before 1.6.0.17, and 1.6.1.x before 1.6.1.9; Business Edition A.x.x, B.x.x before B.2.5.12, C.2.x.x before C.2.4.5, and C.3.x.x before C.3.2.2; AsteriskNOW 1.5; and s800i 1.3.x before 1.3.0.5 generate different error messages depending on whether a SIP username is valid, which allows remote attackers to enumerate valid usernames via multiple crafted REGISTER messages with inconsistent usernames in the URI in the To header and the Digest in the Authorization header.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://downloads.asterisk.org/pub/security/AST-2009-008.html; http://osvdb.org/59697; http://secunia.com/advisories/37265
CVE: CVE-2009-2808
Published: 2009-11-10
Description: Help Viewer in Apple Mac OS X before 10.6.2 does not use an HTTPS connection to retrieve Apple Help content from a web site, which allows man-in-the-middle attackers to send a crafted help:runscript link, and thereby execute arbitrary code, via a spoofed response.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-310
References: http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html; http://support.apple.com/kb/HT3937; http://www.securityfocus.com/bid/36956
CVE: CVE-2009-2810
Published: 2009-11-10
Description: Launch Services in Apple Mac OS X 10.6.x before 10.6.2 recursively clears quarantine information upon opening a quarantined folder, which allows user-assisted remote attackers to execute arbitrary code via a quarantined application that does not trigger a "potentially unsafe" warning message.
CVSS Score: 6.8 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html; http://support.apple.com/kb/HT3937; http://www.securityfocus.com/bid/36956
CVE: CVE-2009-2818
Published: 2009-11-10
Description: Adaptive Firewall in Apple Mac OS X before 10.6.2 does not properly handle invalid usernames in SSH login attempts, which makes it easier for remote attackers to obtain login access via a brute-force attack (aka dictionary attack).
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html; http://support.apple.com/kb/HT3937; http://www.securityfocus.com/bid/36956
CVE: CVE-2009-2819
Published: 2009-11-10
Description: AFP Client in Apple Mac OS X 10.5.8 allows remote AFP servers to execute arbitrary code or cause a denial of service (memory corruption and system crash) via unspecified vectors.
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html; http://support.apple.com/kb/HT3937; http://www.securityfocus.com/bid/36956
CVE: CVE-2009-2820
Published: 2009-11-10
Description: The web interface in CUPS before 1.4.2, as used on Apple Mac OS X before 10.6.2 and other platforms, does not properly handle (1) HTTP headers and (2) HTML templates, which allows remote attackers to conduct cross-site scripting (XSS) attacks and HTTP response splitting attacks via vectors related to (a) the product's web interface, (b) the configuration of the print system, and (c) the titles of printed jobs, as demonstrated by an XSS attack that uses the kerberos parameter to the admin program, and leverages attribute injection and HTTP Parameter Pollution (HPP) issues.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html; http://secunia.com/advisories/37308; http://secunia.com/advisories/37360
CVE: CVE-2009-2823
Published: 2009-11-10
Description: The Apache HTTP Server in Apple Mac OS X before 10.6.2 enables the HTTP TRACE method, which allows remote attackers to conduct cross-site scripting (XSS) attacks via unspecified web client software.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html; http://support.apple.com/kb/HT3937; http://www.mandriva.com/security/advisories?name=MDVSA-2009:300
CVE: CVE-2009-2824
Published: 2009-11-10
Description: Multiple buffer overflows in Apple Type Services (ATS) in Apple Mac OS X 10.5.8 allow remote attackers to execute arbitrary code via a crafted embedded font in a document.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html; http://support.apple.com/kb/HT3937; http://www.securityfocus.com/bid/36956
CVE: CVE-2009-2825
Published: 2009-11-10
Description: Certificate Assistant in Apple Mac OS X before 10.6.2 does not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which might allow man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-310
References: http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html; http://support.apple.com/kb/HT3937; http://www.securityfocus.com/bid/36956
CVE: CVE-2009-2826
Published: 2009-11-10
Description: Multiple integer overflows in CoreGraphics in Apple Mac OS X 10.5.8 allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF document that triggers a heap-based buffer overflow.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-189
References: http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html; http://support.apple.com/kb/HT3937; http://www.securityfocus.com/bid/36956
CVE: CVE-2009-2827
Published: 2009-11-10
Description: Heap-based buffer overflow in Disk Images in Apple Mac OS X 10.5.8 allows user-assisted remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted FAT filesystem on a disk image.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html; http://support.apple.com/kb/HT3937; http://www.securityfocus.com/bid/36956
CVE: CVE-2009-2828
Published: 2009-11-10
Description: The server in DirectoryService in Apple Mac OS X 10.5.8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-399
References: http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html; http://support.apple.com/kb/HT3937; http://www.securityfocus.com/bid/36956
CVE: CVE-2009-2829
Published: 2009-11-10
Description: Event Monitor in Apple Mac OS X 10.5.8 does not properly handle crafted authentication data sent to an SSH daemon, which allows remote attackers to cause a denial of service via vectors involving processing of XML log documents by other services, related to a "log injection" issue.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-255
References: http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html; http://support.apple.com/kb/HT3937; http://www.securityfocus.com/bid/36956
CVE: CVE-2009-2830
Published: 2009-11-10
Description: Multiple buffer overflows in Christos Zoulas file before 5.03 in Apple Mac OS X 10.6.x before 10.6.2 allow user-assisted remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted Common Document Format (CDF) file.  NOTE: this might overlap CVE-2009-1515.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html; http://support.apple.com/kb/HT3937; http://www.securityfocus.com/bid/36956
CVE: CVE-2009-2831
Published: 2009-11-10
Description: Dictionary in Apple Mac OS X 10.5.8 allows remote attackers to create arbitrary files with any contents, and thereby execute arbitrary code, via crafted JavaScript, related to a "design issue."
CVSS Score: 5.8 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html; http://support.apple.com/kb/HT3937; http://www.securityfocus.com/bid/36956
CVE: CVE-2009-2832
Published: 2009-11-10
Description: Buffer overflow in FTP Server in Apple Mac OS X before 10.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via a CWD command specifying a pathname in a deeply nested hierarchy of directories, related to a "CWD command line tool."
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html; http://support.apple.com/kb/HT3937; http://www.securityfocus.com/bid/36956
CVE: CVE-2009-2833
Published: 2009-11-10
Description: Buffer overflow in the UCCompareTextDefault API in International Components for Unicode in Apple Mac OS X 10.5.8 allows context-dependent attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html; http://support.apple.com/kb/HT3937; http://www.securityfocus.com/bid/36956
CVE: CVE-2009-2834
Published: 2009-11-10
Description: IOKit in Apple Mac OS X before 10.6.2 allows local users to modify the firmware of a (1) USB or (2) Bluetooth keyboard via unspecified vectors.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-264
References: http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html; http://support.apple.com/kb/HT3937; http://www.securityfocus.com/bid/36956
CVE: CVE-2009-2835
Published: 2009-11-10
Description: The kernel in Apple Mac OS X before 10.6.2 does not properly handle task state segments, which allows local users to gain privileges, cause a denial of service (system crash), or obtain sensitive information via unspecified vectors.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-20
References: http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html; http://support.apple.com/kb/HT3937; http://www.securityfocus.com/bid/36956
CVE: CVE-2009-2836
Published: 2009-11-10
Description: Race condition in Login Window in Apple Mac OS X 10.6.x before 10.6.2, when at least one account has a blank password, allows attackers to bypass password authentication and obtain login access to an arbitrary account via unspecified vectors.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-362
References: http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html; http://support.apple.com/kb/HT3937; http://www.securityfocus.com/bid/36956
CVE: CVE-2009-2837
Published: 2009-11-10
Description: Heap-based buffer overflow in QuickDraw Manager in Apple Mac OS X before 10.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PICT image.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html; http://lists.apple.com/archives/security-announce/2010//Mar/msg00002.html; http://support.apple.com/kb/HT3937
CVE: CVE-2009-2838
Published: 2009-11-10
Description: Integer overflow in QuickLook in Apple Mac OS X 10.5.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted Microsoft Office document that triggers a buffer overflow.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-189
References: http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html; http://support.apple.com/kb/HT3937; http://www.securityfocus.com/bid/36956
CVE: CVE-2009-2839
Published: 2009-11-10
Description: Screen Sharing in Apple Mac OS X 10.5.8 allows remote VNC servers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via unspecified vectors.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-399
References: http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html; http://osvdb.org/59997; http://support.apple.com/kb/HT3937
CVE: CVE-2009-2840
Published: 2009-11-10
Description: Spotlight in Apple Mac OS X 10.5.8 does not properly handle temporary files, which allows local users to overwrite arbitrary files in the context of a different user's privileges via unspecified vectors.
CVSS Score: 4.9 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html; http://support.apple.com/kb/HT3937; http://www.securityfocus.com/bid/36956
CVE: CVE-2009-3930
Published: 2009-11-10
Description: Multiple integer overflows in Christos Zoulas file before 5.02 allow user-assisted remote attackers to have an unspecified impact via a malformed compound document (aka cdf) file that triggers a buffer overflow.
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: http://mx.gw.com/pipermail/file/2009/000382.html; http://www.securityfocus.com/bid/37074; http://mx.gw.com/pipermail/file/2009/000382.html
CVE: CVE-2009-1127
Published: 2009-11-11
Description: win32k.sys in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 does not correctly validate an argument to an unspecified system call, which allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference, aka "Win32k NULL Pointer Dereferencing Vulnerability."
CVSS Score: 7.2 (HIGH)
CWE: CWE-20
References: http://www.us-cert.gov/cas/techalerts/TA09-314A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-065; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5588
CVE: CVE-2009-1928
Published: 2009-11-11
Description: Stack consumption vulnerability in the LDAP service in Active Directory on Microsoft Windows 2000 SP4, Server 2003 SP2, and Server 2008 Gold and SP2; Active Directory Application Mode (ADAM) on Windows XP SP2 and SP3 and Server 2003 SP2; and Active Directory Lightweight Directory Service (AD LDS) on Windows Server 2008 Gold and SP2 allows remote attackers to cause a denial of service (system hang) via a malformed (1) LDAP or (2) LDAPS request, aka "LSASS Recursive Stack Overflow Vulnerability."
CVSS Score: 7.8 (HIGH)
CWE: CWE-399
References: http://www.us-cert.gov/cas/techalerts/TA09-314A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-066; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5890
CVE: CVE-2009-2512
Published: 2009-11-11
Description: The Web Services on Devices API (WSDAPI) in Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 does not properly process the headers of WSD messages, which allows remote attackers to execute arbitrary code via a crafted (1) message or (2) response, aka "Web Services on Devices API Memory Corruption Vulnerability."
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94, CWE-94
References: http://www.us-cert.gov/cas/techalerts/TA09-314A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-063; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6079
CVE: CVE-2009-2513
Published: 2009-11-11
Description: The Graphics Device Interface (GDI) in win32k.sys in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 does not properly validate user-mode input, which allows local users to gain privileges via a crafted application, aka "Win32k Insufficient Data Validation Vulnerability."
CVSS Score: 7.2 (HIGH)
CWE: CWE-20
References: http://www.us-cert.gov/cas/techalerts/TA09-314A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-065; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6277
CVE: CVE-2009-2514
Published: 2009-11-11
Description: win32k.sys in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not correctly parse font code during construction of a directory-entry table, which allows remote attackers to execute arbitrary code via a crafted Embedded OpenType (EOT) font, aka "Win32k EOT Parsing Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://www.us-cert.gov/cas/techalerts/TA09-314A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-065; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6406
CVE: CVE-2009-2523
Published: 2009-11-11
Description: The License Logging Server (llssrv.exe) in Microsoft Windows 2000 SP4 allows remote attackers to execute arbitrary code via an RPC message containing a string without a null terminator, which triggers a heap-based buffer overflow in the LlsrLicenseRequestW method, aka "License Logging Server Heap Overflow Vulnerability."
CVSS Score: 10.0 (HIGH)
CWE: CWE-125, CWE-787
References: http://www.us-cert.gov/cas/techalerts/TA09-314A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-064; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6300
CVE: CVE-2009-3127
Published: 2009-11-11
Description: Microsoft Office Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, Open XML File Format Converter for Mac, and Office Excel Viewer 2003 SP3 do not properly parse the Excel file format, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel Cache Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://www.securitytracker.com/id?1023157; http://www.us-cert.gov/cas/techalerts/TA09-314A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-067
CVE: CVE-2009-3128
Published: 2009-11-11
Description: Microsoft Office Excel 2002 SP3 and 2003 SP3, and Office Excel Viewer 2003 SP3, does not properly parse the Excel file format, which allows remote attackers to execute arbitrary code via a spreadsheet with a malformed record object, aka "Excel SxView Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://www.securitytracker.com/id?1023157; http://www.us-cert.gov/cas/techalerts/TA09-314A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-067
CVE: CVE-2009-3129
Published: 2009-11-11
Description: Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer 2003 SP3; Office Excel Viewer SP1 and SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allows remote attackers to execute arbitrary code via a spreadsheet with a FEATHEADER record containing an invalid cbHdrData size element that affects a pointer offset, aka "Excel Featheader Record Memory Corruption Vulnerability."
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: http://archives.neohapsis.com/archives/bugtraq/2009-11/0080.html; http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=832; http://osvdb.org/59860
CVE: CVE-2009-3135
Published: 2009-11-11
Description: Stack-based buffer overflow in Microsoft Office Word 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, Open XML File Format Converter for Mac, Office Word Viewer 2003 SP3, and Office Word Viewer allow remote attackers to execute arbitrary code via a Word document with a malformed File Information Block (FIB) structure, aka "Microsoft Office Word File Information Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=831; http://osvdb.org/59857; http://secunia.com/advisories/37277
CVE: CVE-2009-3130
Published: 2009-11-11
Description: Heap-based buffer overflow in Microsoft Office Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via a spreadsheet containing a malformed Binary File Format (aka BIFF) record that triggers memory corruption, aka "Excel Document Parsing Heap Overflow Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id?1023157; http://www.us-cert.gov/cas/techalerts/TA09-314A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-067