deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2010-2587
Published: 2011-02-10
Description: The dirapi.dll module in Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2010-2588 and CVE-2010-4188.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.adobe.com/support/security/bulletins/apsb11-01.html; http://www.securityfocus.com/bid/46316; http://www.securitytracker.com/id?1025056
CVE: CVE-2010-2588
Published: 2011-02-10
Description: The dirapi.dll module in Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2010-2587 and CVE-2010-4188.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.adobe.com/support/security/bulletins/apsb11-01.html; http://www.securityfocus.com/bid/46318; http://www.securitytracker.com/id?1025056
CVE: CVE-2010-2589
Published: 2011-02-10
Description: Integer overflow in the dirapi.dll module in Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code via unspecified vectors.
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: http://www.adobe.com/support/security/bulletins/apsb11-01.html; http://www.securityfocus.com/bid/46329; http://www.securitytracker.com/id?1025056
CVE: CVE-2010-4093
Published: 2011-02-10
Description: Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0555, CVE-2010-4187, CVE-2010-4190, CVE-2010-4191, CVE-2010-4192, and CVE-2010-4306.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.adobe.com/support/security/bulletins/apsb11-01.html; http://www.kb.cert.org/vuls/id/189929; http://www.securityfocus.com/bid/46321
CVE: CVE-2010-4187
Published: 2011-02-10
Description: Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a malformed chunk in a Director file, a different vulnerability than CVE-2011-0555, CVE-2010-4093, CVE-2010-4190, CVE-2010-4191, CVE-2010-4192, and CVE-2010-4306.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=892; http://www.adobe.com/support/security/bulletins/apsb11-01.html; http://www.securityfocus.com/bid/46317
CVE: CVE-2010-4188
Published: 2011-02-10
Description: The dirapi.dll module in Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a Director movie with an IFWV chunk with a size field of 0, which is used in the calculation of a file offset and causes invalid data to be used as a loop counter, triggering a heap-based buffer overflow, a different vulnerability than CVE-2010-2587 and CVE-2010-2588.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://dvlabs.tippingpoint.com/advisory/TPTI-11-01; http://www.adobe.com/support/security/bulletins/apsb11-01.html; http://www.securityfocus.com/archive/1/516332/100/0/threaded
CVE: CVE-2010-4189
Published: 2011-02-10
Description: The IML32 module in Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a Director movie containing a GIF image with a crafted global color table size value, which causes an out-of-range pointer offset.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://dvlabs.tippingpoint.com/advisory/TPTI-11-04; http://www.adobe.com/support/security/bulletins/apsb11-01.html; http://www.securityfocus.com/archive/1/516334/100/0/threaded
CVE: CVE-2010-4190
Published: 2011-02-10
Description: Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a Director movie with a crafted CSWV RIFF chunk that causes an incorrect calculation of an offset for a substructure, which causes an out-of-bounds "seek" of heap memory, a different vulnerability than CVE-2011-0555, CVE-2010-4093, CVE-2010-4187, CVE-2010-4191, CVE-2010-4192, and CVE-2010-4306.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.adobe.com/support/security/bulletins/apsb11-01.html; http://www.securityfocus.com/archive/1/516324/100/0/threaded; http://www.securityfocus.com/bid/46324
CVE: CVE-2010-4191
Published: 2011-02-10
Description: Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0555, CVE-2010-4093, CVE-2010-4187, CVE-2010-4190, CVE-2010-4192, and CVE-2010-4306.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.adobe.com/support/security/bulletins/apsb11-01.html; http://www.securityfocus.com/bid/46325; http://www.securitytracker.com/id?1025056
CVE: CVE-2010-4192
Published: 2011-02-10
Description: Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a Director movie with a crafted 3D Assets 0xFFFFFF88 type record that triggers an incorrect memory allocation, a different vulnerability than CVE-2011-0555, CVE-2010-4093, CVE-2010-4187, CVE-2010-4190, CVE-2010-4191, and CVE-2010-4306.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.adobe.com/support/security/bulletins/apsb11-01.html; http://www.securityfocus.com/archive/1/516322/100/0/threaded; http://www.securityfocus.com/bid/46326
CVE: CVE-2010-4193
Published: 2011-02-10
Description: Adobe Shockwave Player before 11.5.9.620 does not properly validate unspecified input data, which allows attackers to execute arbitrary code via unknown vectors.
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://www.adobe.com/support/security/bulletins/apsb11-01.html; http://www.kb.cert.org/vuls/id/189929; http://www.securityfocus.com/bid/46334
CVE: CVE-2010-4194
Published: 2011-02-10
Description: The dirapi.dll module in Adobe Shockwave Player before 11.5.9.620 does not properly validate unspecified input data, which allows attackers to execute arbitrary code via unknown vectors.
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://www.adobe.com/support/security/bulletins/apsb11-01.html; http://www.kb.cert.org/vuls/id/189929; http://www.securityfocus.com/bid/46335
CVE: CVE-2010-4195
Published: 2011-02-10
Description: The TextXtra module in Adobe Shockwave Player before 11.5.9.620 does not properly validate unspecified input data, which allows attackers to execute arbitrary code via unknown vectors.
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://www.adobe.com/support/security/bulletins/apsb11-01.html; http://www.kb.cert.org/vuls/id/189929; http://www.securityfocus.com/bid/46336
CVE: CVE-2010-4196
Published: 2011-02-10
Description: The Shockwave 3d Asset module in Adobe Shockwave Player before 11.5.9.620 does not properly validate unspecified input data, which allows attackers to execute arbitrary code via unknown vectors.
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://www.adobe.com/support/security/bulletins/apsb11-01.html; http://www.kb.cert.org/vuls/id/189929; http://www.securityfocus.com/bid/46338
CVE: CVE-2010-4306
Published: 2011-02-10
Description: Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0555, CVE-2010-4093, CVE-2010-4187, CVE-2010-4190, CVE-2010-4191, and CVE-2010-4192.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.adobe.com/support/security/bulletins/apsb11-01.html; http://www.securityfocus.com/bid/46333; http://www.securitytracker.com/id?1025056
CVE: CVE-2010-4307
Published: 2011-02-10
Description: Buffer overflow in Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code via unspecified vectors.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.adobe.com/support/security/bulletins/apsb11-01.html; http://www.securityfocus.com/bid/46339; http://www.securitytracker.com/id?1025056
CVE: CVE-2011-0033
Published: 2011-02-10
Description: The OpenType Compact Font Format (CFF) driver in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate parameter values in OpenType fonts, which allows remote attackers to execute arbitrary code via a crafted font, aka "OpenType Font Encoded Character Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://osvdb.org/70821; http://secunia.com/advisories/43252; http://support.avaya.com/css/P8/documents/100127239
CVE: CVE-2011-0035
Published: 2011-02-10
Description: Microsoft Internet Explorer 6, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "Uninitialized Memory Corruption Vulnerability," a different vulnerability than CVE-2010-2556 and CVE-2011-0036.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://osvdb.org/70831; http://support.avaya.com/css/P8/documents/100127294; http://www.securityfocus.com/bid/46157
CVE: CVE-2011-0036
Published: 2011-02-10
Description: Microsoft Internet Explorer 6, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, related to a "dangling pointer," aka "Uninitialized Memory Corruption Vulnerability," a different vulnerability than CVE-2010-2556 and CVE-2011-0035.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://osvdb.org/70832; http://support.avaya.com/css/P8/documents/100127294; http://www.securityfocus.com/bid/46158
CVE: CVE-2011-0038
Published: 2011-02-10
Description: Untrusted search path vulnerability in Microsoft Internet Explorer 8 might allow local users to gain privileges via a Trojan horse IEShims.dll in the current working directory, as demonstrated by a Desktop directory that contains an HTML file, aka "Internet Explorer Insecure Library Loading Vulnerability."
CVSS Score: 9.3 (HIGH)
References: http://osvdb.org/70833; http://support.avaya.com/css/P8/documents/100127294; http://www.fortiguard.com/advisory/FGA-2011-04.html
CVE: CVE-2011-0043
Published: 2011-02-10
Description: Kerberos in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 supports weak hashing algorithms, which allows local users to gain privileges by operating a service that sends crafted service tickets, as demonstrated by the CRC32 algorithm, aka "Kerberos Unkeyed Checksum Vulnerability."
CVSS Score: 7.2 (HIGH)
CWE: CWE-310
References: http://osvdb.org/70834; http://secunia.com/advisories/43251; http://support.avaya.com/css/P8/documents/100127250
CVE: CVE-2011-0091
Published: 2011-02-10
Description: Kerberos in Microsoft Windows Server 2008 R2 and Windows 7 does not prevent a session from changing from strong encryption to DES encryption, which allows man-in-the-middle attackers to spoof network traffic and obtain sensitive information via a DES downgrade, aka "Kerberos Spoofing Vulnerability."
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-287
References: http://osvdb.org/70835; http://secunia.com/advisories/43257; http://support.avaya.com/css/P8/documents/100127250
CVE: CVE-2011-0092
Published: 2011-02-10
Description: The LZW stream decompression functionality in ORMELEMS.DLL in Microsoft Visio 2002 SP2, 2003 SP3, and 2007 SP2 allows remote attackers to execute arbitrary code via a Visio file with a malformed VisioDocument stream that triggers an exception handler that accesses an object that has not been fully initialized, which triggers memory corruption, aka "Visio Object Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://osvdb.org/70828; http://secunia.com/advisories/43254; http://www.securityfocus.com/archive/1/516274/100/0/threaded
CVE: CVE-2011-0093
Published: 2011-02-10
Description: ELEMENTS.DLL in Microsoft Visio 2002 SP2, 2003 SP3, and 2007 SP2 does not properly parse structures during the opening of a Visio file, which allows remote attackers to execute arbitrary code via a file containing a malformed structure, aka "Visio Data Type Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://osvdb.org/70829; http://secunia.com/advisories/43254; http://www.securityfocus.com/bid/46138
CVE: CVE-2011-0555
Published: 2011-02-10
Description: The TextXtra.x32 module in Adobe Shockwave Player before 11.5.9.620 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a Director file with a crafted DEMX RIFF chunk that triggers incorrect buffer allocation, a different vulnerability than CVE-2010-4093, CVE-2010-4187, CVE-2010-4190, CVE-2010-4191, CVE-2010-4192, and CVE-2010-4306.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://dvlabs.tippingpoint.com/advisory/TPTI-11-02; http://www.adobe.com/support/security/bulletins/apsb11-01.html; http://www.securityfocus.com/archive/1/516333/100/0/threaded
CVE: CVE-2011-0556
Published: 2011-02-10
Description: The Font Xtra.x32 module in Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted PFR1 chunk that leads to an unexpected sign extension and an invalid pointer dereference, a different vulnerability than CVE-2011-0569.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://dvlabs.tippingpoint.com/advisory/TPTI-11-03; http://www.adobe.com/support/security/bulletins/apsb11-01.html; http://www.securityfocus.com/archive/1/516336/100/0/threaded
CVE: CVE-2011-0557
Published: 2011-02-10
Description: Integer overflow in Adobe Shockwave Player before 11.5.9.620 allows remote attackers to execute arbitrary code via a Director movie with a large count value in 3D assets type 0xFFFFFF45 record, which triggers a "faulty allocation" and memory corruption.
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: http://www.adobe.com/support/security/bulletins/apsb11-01.html; http://www.securityfocus.com/archive/1/516323/100/0/threaded; http://www.securityfocus.com/bid/46330
CVE: CVE-2011-0558
Published: 2011-02-10
Description: Integer overflow in Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code via a large array length value in the ActionScript method of the Function class.
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_adobe_flash2; http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=893; http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00003.html
CVE: CVE-2011-0559
Published: 2011-02-10
Description: Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted parameters to an unspecified ActionScript method that cause a parameter to be used as an object pointer, a different vulnerability than CVE-2011-0560, CVE-2011-0561, CVE-2011-0571, CVE-2011-0572, CVE-2011-0573, CVE-2011-0574, CVE-2011-0578, CVE-2011-0607, and CVE-2011-0608.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_adobe_flash2; http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=894; http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00003.html
CVE: CVE-2011-0560
Published: 2011-02-10
Description: Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0559, CVE-2011-0561, CVE-2011-0571, CVE-2011-0572, CVE-2011-0573, CVE-2011-0574, CVE-2011-0578, CVE-2011-0607, and CVE-2011-0608.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_adobe_flash2; http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00003.html; http://secunia.com/advisories/43267
CVE: CVE-2011-0561
Published: 2011-02-10
Description: Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0559, CVE-2011-0560, CVE-2011-0571, CVE-2011-0572, CVE-2011-0573, CVE-2011-0574, CVE-2011-0578, CVE-2011-0607, and CVE-2011-0608.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_adobe_flash2; http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00003.html; http://secunia.com/advisories/43267
CVE: CVE-2011-0569
Published: 2011-02-10
Description: The Font Xtra.x32 module in Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a PFR1 chunk containing an invalid size value that leads to an unexpected sign extension and a buffer overflow, a different vulnerability than CVE-2011-0556.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://dvlabs.tippingpoint.com/advisory/TPTI-11-05; http://www.adobe.com/support/security/bulletins/apsb11-01.html; http://www.securityfocus.com/archive/1/516335/100/0/threaded
CVE: CVE-2011-0571
Published: 2011-02-10
Description: Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0559, CVE-2011-0560, CVE-2011-0561, CVE-2011-0572, CVE-2011-0573, CVE-2011-0574, CVE-2011-0578, CVE-2011-0607, and CVE-2011-0608.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_adobe_flash2; http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00003.html; http://osvdb.org/70915
CVE: CVE-2011-0572
Published: 2011-02-10
Description: Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0559, CVE-2011-0560, CVE-2011-0561, CVE-2011-0571, CVE-2011-0573, CVE-2011-0574, CVE-2011-0578, CVE-2011-0607, and CVE-2011-0608.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_adobe_flash2; http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00003.html; http://osvdb.org/70916
CVE: CVE-2011-0573
Published: 2011-02-10
Description: Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0559, CVE-2011-0560, CVE-2011-0561, CVE-2011-0571, CVE-2011-0572, CVE-2011-0574, CVE-2011-0578, CVE-2011-0607, and CVE-2011-0608.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_adobe_flash2; http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00003.html; http://osvdb.org/70917
CVE: CVE-2011-0574
Published: 2011-02-10
Description: Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0559, CVE-2011-0560, CVE-2011-0561, CVE-2011-0571, CVE-2011-0572, CVE-2011-0573, CVE-2011-0578, CVE-2011-0607, and CVE-2011-0608.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_adobe_flash2; http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00003.html; http://osvdb.org/70918
CVE: CVE-2011-0575
Published: 2011-02-10
Description: Untrusted search path vulnerability in Adobe Flash Player before 10.2.152.26 allows local users to gain privileges via a Trojan horse DLL in the current working directory.
CVSS Score: 6.9 (MEDIUM)
References: http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_adobe_flash2; http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00003.html; http://osvdb.org/70919
CVE: CVE-2011-0577
Published: 2011-02-10
Description: Unspecified vulnerability in Adobe Flash Player before 10.2.152.26 allows remote attackers to execute arbitrary code via a crafted font.
CVSS Score: 9.3 (HIGH)
References: http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_adobe_flash2; http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00003.html; http://osvdb.org/70920
CVE: CVE-2011-0578
Published: 2011-02-10
Description: Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors related to a constructor for an unspecified ActionScript3 object and improper type checking, a different vulnerability than CVE-2011-0559, CVE-2011-0560, CVE-2011-0561, CVE-2011-0571, CVE-2011-0572, CVE-2011-0573, CVE-2011-0574, CVE-2011-0607, and CVE-2011-0608.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_adobe_flash2; http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00003.html; http://osvdb.org/70921
CVE: CVE-2011-0580
Published: 2011-02-10
Description: Multiple cross-site scripting (XSS) vulnerabilities in the administrator console in Adobe ColdFusion 8.0 through 9.0.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/43264; http://www.adobe.com/support/security/bulletins/apsb11-04.html; http://www.securityfocus.com/bid/46273
CVE: CVE-2011-0581
Published: 2011-02-10
Description: Multiple CRLF injection vulnerabilities in Adobe ColdFusion 8.0 through 9.0.1 allow remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified tags.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://secunia.com/advisories/43264; http://www.adobe.com/support/security/bulletins/apsb11-04.html; http://www.securityfocus.com/bid/46281
CVE: CVE-2011-0582
Published: 2011-02-10
Description: Unspecified vulnerability in the administrator console in Adobe ColdFusion 8.0 through 9.0.1 allows attackers to obtain sensitive information via unknown vectors.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/43264; http://www.adobe.com/support/security/bulletins/apsb11-04.html; http://www.securityfocus.com/bid/46274
CVE: CVE-2011-0583
Published: 2011-02-10
Description: Cross-site scripting (XSS) vulnerability in Adobe ColdFusion 8.0 through 9.0.1 allows remote attackers to inject arbitrary web script or HTML via the cfform tag.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/43264; http://www.adobe.com/support/security/bulletins/apsb11-04.html; http://www.securityfocus.com/bid/46277
CVE: CVE-2011-0584
Published: 2011-02-10
Description: Session fixation vulnerability in Adobe ColdFusion 8.0 through 9.0.1 allows remote attackers to hijack web sessions via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/43264; http://www.adobe.com/support/security/bulletins/apsb11-04.html; http://www.securityfocus.com/bid/46278
CVE: CVE-2011-0607
Published: 2011-02-10
Description: Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0559, CVE-2011-0560, CVE-2011-0561, CVE-2011-0571, CVE-2011-0572, CVE-2011-0573, CVE-2011-0574, CVE-2011-0578, and CVE-2011-0608.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_adobe_flash2; http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00003.html; http://osvdb.org/70922