deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2012-0857
Published: 2012-08-20
Description: Multiple buffer overflows in the get_qcx function in the J2K decoder (j2kdec.c) in libavcode in FFmpeg before 0.9.1 allow remote attackers to cause a denial of service (application crash) via unspecified vectors.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://ffmpeg.org/security.html; http://www.openwall.com/lists/oss-security/2012/02/01/11; http://www.openwall.com/lists/oss-security/2012/02/14/4
CVE: CVE-2012-3455
Published: 2012-08-20
Description: Heap-based buffer overflow in the read function in filters/words/msword-odf/wv2/src/styles.cpp in the Microsoft import filter in KOffice 2.3.3 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted ODF style in an ODF document.  NOTE: this is the same vulnerability as CVE-2012-3456, but it was SPLIT by the CNA even though Calligra and KOffice share the same codebase.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-updates/2012-08/msg00040.html; http://media.blackhat.com/bh-us-12/Briefings/C_Miller/BH_US_12_Miller_NFC_attack_surface_WP.pdf; http://secunia.com/advisories/50199
CVE: CVE-2012-3461
Published: 2012-08-20
Description: The (1) otrl_base64_otr_decode function in src/b64.c; (2) otrl_proto_data_read_flags and (3) otrl_proto_accept_data functions in src/proto.c; and (4) decode function in toolkit/parse.c in libotr before 3.2.1 allocates a zero-length buffer when decoding a base64 string, which allows remote attackers to cause a denial of service (application crash) via a message with the value "?OTR:===.", which triggers a heap-based buffer overflow.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-119
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=684121; http://lists.cypherpunks.ca/pipermail/otr-dev/2012-July/001347.html; http://lists.cypherpunks.ca/pipermail/otr-dev/2012-July/001348.html
CVE: CVE-2012-4236
Published: 2012-08-20
Description: Cross-site scripting (XSS) vulnerability in the refresh_page function in application/modules/_main/views/_top.php in Total Shop UK eCommerce Open Source before 2.1.2_p1 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/50238; http://www.openwall.com/lists/oss-security/2012/08/13/7; http://www.reactionpenetrationtesting.co.uk/totalshop-uk-generic-xss.html
CVE: CVE-2011-3945
Published: 2012-08-20
Description: The decode_frame function in the KVG1 decoder (kgv1dec.c) in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted media file.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://ffmpeg.org/; http://git.libav.org/?p=libav.git%3Ba=commit%3Bh=a02e8df973f5478ec82f4c507f5b5b191a5ecb6b; http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=807a045ab7f51993a2c1b3116016cbbd4f3d20d6
CVE: CVE-2011-4352
Published: 2012-08-20
Description: Integer overflow in the vp3_dequant function in the VP3 decoder (vp3.c) in libavcodec in FFmpeg 0.5.x before 0.5.7, 0.6.x before 0.6.4, 0.7.x before 0.7.9, and 0.8.x before 0.8.8; and in Libav 0.5.x before 0.5.6, 0.6.x before 0.6.4, and 0.7.x before 0.7.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted VP3 stream, which triggers a buffer overflow.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-189
References: http://ffmpeg.org/; http://git.libav.org/?p=libav.git%3Ba=commit%3Bh=8b94df0f2047e9728cb872adc9e64557b7a5152f; http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=eef5c35b4352ec49ca41f6198bee8a976b1f81e5
CVE: CVE-2011-4353
Published: 2012-08-20
Description: The (1) av_image_fill_pointers, (2) vp5_parse_coeff, and (3) vp6_parse_coeff functions in FFmpeg 0.5.x before 0.5.7, 0.6.x before 0.6.4, 0.7.x before 0.7.9, and 0.8.x before 0.8.8; and in Libav 0.5.x before 0.5.6, 0.6.x before 0.6.4, and 0.7.x before 0.7.3 allow remote attackers to cause a denial of service (out-of-bounds read) via a crafted VP5 or VP6 stream.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-119
References: http://ffmpeg.org/; http://libav.org/; http://libav.org/releases/libav-0.5.6.changelog
CVE: CVE-2011-4364
Published: 2012-08-20
Description: Buffer overflow in the Sierra VMD decoder in libavcodec in FFmpeg 0.5.x before 0.5.7, 0.6.x before 0.6.4, 0.7.x before 0.7.9 and 0.8.x before 0.8.8; and in Libav 0.5.x before 0.5.6, 0.6.x before 0.6.4, and 0.7.x before 0.7.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted VMD file, related to corrupted streams.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://ffmpeg.org/; http://git.libav.org/?p=libav.git%3Ba=commit%3Bh=c0cbe36b18ab3eb13a53fe684ec1f63a00df2c86; http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=c0cbe36b18ab3eb13a53fe684ec1f63a00df2c86
CVE: CVE-2011-4579
Published: 2012-08-20
Description: The svq1_decode_frame function in the SVQ1 decoder (svq1dec.c) in libavcodec in FFmpeg 0.5.x before 0.5.7, 0.6.x before 0.6.4, 0.7.x before 0.7.9, and 0.8.x before 0.8.8; and in Libav 0.5.x before 0.5.6, 0.6.x before 0.6.4, and 0.7.x before 0.7.3 allows remote attackers to cause a denial of service (memory corruption) via a crafted SVQ1 stream, related to "dimensions changed."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-119
References: http://ffmpeg.org/; http://git.libav.org/?p=libav.git%3Ba=commit%3Bh=6e24b9488e67849a28e64a8056e05f83cf439229; http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=6e24b9488e67849a28e64a8056e05f83cf439229
CVE: CVE-2012-4052
Published: 2012-08-20
Description: Multiple cross-site scripting (XSS) vulnerabilities in Jease before 2.9, when creating a comment, allow remote attackers to inject arbitrary web script or HTML via the (1) author, (2) subject, or (3) comment parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.jease.org/download/2.9/; https://groups.google.com/forum/?fromgroups#%21topic/jease/2BHaDww-5ac%5B1-25%5D; https://www.htbridge.com/advisory/HTB23104
CVE: CVE-2012-4237
Published: 2012-08-20
Description: Multiple SQL injection vulnerabilities in TCExam before 11.3.008 allow remote authenticated users with level 5 or greater permissions to execute arbitrary SQL commands via the subject_module_id parameter to (1) tce_edit_answer.php or (2) tce_edit_question.php.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-89
References: http://archives.neohapsis.com/archives/bugtraq/2012-08/0079.html; http://freecode.com/projects/tcexam/releases/347125; http://secunia.com/advisories/50141
CVE: CVE-2012-4238
Published: 2012-08-20
Description: Cross-site scripting (XSS) vulnerability in admin/code/tce_edit_answer.php in TCExam before 11.3.008 allows remote authenticated users with level 5 or greater permissions to inject arbitrary web script or HTML via the question_subject_id parameter.
CVSS Score: 2.1 (LOW)
CWE: CWE-79
References: http://archives.neohapsis.com/archives/bugtraq/2012-08/0090.html; http://freecode.com/projects/tcexam/releases/347125; http://secunia.com/advisories/50141
CVE: CVE-2012-2986
Published: 2012-08-20
Description: lhn/public/network/ping in HP SAN/iQ 9.5 on the HP Virtual SAN Appliance allows remote authenticated users to execute arbitrary commands via shell metacharacters in the (1) first, (2) third, or (3) fourth parameter.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-4361.
CVSS Score: 7.7 (HIGH)
CWE: CWE-78
References: http://www.kb.cert.org/vuls/id/441363; http://www.kb.cert.org/vuls/id/441363
CVE: CVE-2012-3252
Published: 2012-08-20
Description: Unspecified vulnerability in HP Serviceguard A.11.19 and A.11.20 allows remote attackers to cause a denial of service via unknown vectors.
CVSS Score: 7.8 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1227&w=2; https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03457976; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1227&w=2
CVE: CVE-2012-4361
Published: 2012-08-20
Description: lhn/public/network/ping in HP SAN/iQ before 9.5 on the HP Virtual SAN Appliance allows remote authenticated users to execute arbitrary commands via shell metacharacters in the second parameter.
CVSS Score: 7.7 (HIGH)
CWE: CWE-78
References: http://www.exploit-db.com/exploits/18893/; http://www.exploit-db.com/exploits/18901/; http://www.kb.cert.org/vuls/id/441363
CVE: CVE-2012-4362
Published: 2012-08-20
Description: hydra.exe in HP SAN/iQ before 9.5 on the HP Virtual SAN Appliance has a hardcoded password of L0CAlu53R for the global$agent account, which allows remote attackers to obtain access to a management service via a login: request to TCP port 13838.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-255
References: http://www.exploit-db.com/exploits/18893/; http://www.exploit-db.com/exploits/18901/; http://www.kb.cert.org/vuls/id/441363
CVE: CVE-2012-2190
Published: 2012-08-21
Description: IBM Global Security Kit (aka GSKit), as used in IBM HTTP Server in IBM WebSphere Application Server (WAS) 6.1.x before 6.1.0.45, 7.0.x before 7.0.0.25, 8.0.x before 8.0.0.4, and 8.5.x before 8.5.0.1, allows remote attackers to cause a denial of service (daemon crash) via a crafted ClientHello message in the TLS Handshake Protocol.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-310
References: http://www-01.ibm.com/support/docview.wss?uid=swg1PM66218; http://www-01.ibm.com/support/docview.wss?uid=swg21606096; https://exchange.xforce.ibmcloud.com/vulnerabilities/75994
CVE: CVE-2012-2980
Published: 2012-08-21
Description: The Samsung and HTC onTouchEvent method implementation for Android on the T-Mobile myTouch 3G Slide, HTC Merge, Sprint EVO Shift 4G, HTC ChaCha, AT&T Status, HTC Desire Z, T-Mobile G2, T-Mobile myTouch 4G Slide, and Samsung Galaxy S stores touch coordinates in the dmesg buffer, which allows remote attackers to obtain sensitive information via a crafted application, as demonstrated by PIN numbers, telephone numbers, and text messages.
CVSS Score: 7.1 (HIGH)
CWE: CWE-255
References: http://www.htc.com/www/help/app-security-fix/; http://www.kb.cert.org/vuls/id/251635; http://www.kb.cert.org/vuls/id/MAPG-8R5LD6
CVE: CVE-2012-2985
Published: 2012-08-21
Description: Cross-site scripting (XSS) vulnerability in InsertDocument.aspx in CuteSoft Cute Editor 6.4 allows remote authenticated users to inject arbitrary web script or HTML via the _UploadID parameter.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://www.kb.cert.org/vuls/id/247235; http://www.kb.cert.org/vuls/id/247235
CVE: CVE-2012-3293
Published: 2012-08-21
Description: Cross-site scripting (XSS) vulnerability in the Administrative Console in IBM WebSphere Application Server (WAS) 6.1.x before 6.1.0.45, 7.0.x before 7.0.0.25, 8.0.x before 8.0.0.4, and 8.5.x before 8.5.0.1 allows remote attackers to inject arbitrary web script or HTML via vectors involving FRAME elements, related to a cross-frame scripting (XFS) issue.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www-01.ibm.com/support/docview.wss?uid=swg1PM60839; http://www-01.ibm.com/support/docview.wss?uid=swg21606096; http://www-01.ibm.com/support/docview.wss?uid=swg27022958
CVE: CVE-2012-3301
Published: 2012-08-21
Description: Multiple CRLF injection vulnerabilities in the HTTP server in IBM Lotus Domino 8.5.x before 8.5.4 allow remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via crafted input involving (1) Mozilla Firefox 3.0.9 and earlier or (2) unspecified browsers.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://websecurity.com.ua/5839/; http://www-01.ibm.com/support/docview.wss?uid=swg21608160; https://exchange.xforce.ibmcloud.com/vulnerabilities/77400
CVE: CVE-2012-3302
Published: 2012-08-21
Description: Multiple cross-site scripting (XSS) vulnerabilities in IBM Lotus Domino 7.x and 8.x before 8.5.4 allow remote attackers to inject arbitrary web script or HTML via (1) a URL accessed during use of the Mail template in the WebMail UI or (2) a URL accessed during use of Domino Help through the Domino HTTP server.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://websecurity.com.ua/5839/; http://www-01.ibm.com/support/docview.wss?uid=swg21608160; https://exchange.xforce.ibmcloud.com/vulnerabilities/77401
CVE: CVE-2012-4363
Published: 2012-08-21
Description: Multiple unspecified vulnerabilities in Adobe Reader through 10.1.4 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF document, related to "sixteen more crashes affecting Windows, OS X, or both systems."
CVSS Score: 9.3 (HIGH)
References: http://gynvael.coldwind.pl/?id=483; http://j00ru.vexillium.org/?p=1175; http://security.gentoo.org/glsa/glsa-201308-03.xml
CVE: CVE-2012-4577
Published: 2012-08-21
Description: The Linux firmware image on (1) Korenix Jetport 5600 series serial-device servers and (2) ORing Industrial DIN-Rail serial-device servers has a hardcoded password of "password" for the root account, which allows remote attackers to obtain administrative access via an SSH session.
CVSS Score: 10.0 (HIGH)
CWE: CWE-255
References: http://ics-cert.us-cert.gov/advisories/ICSA-12-263-02; http://ics-cert.us-cert.gov/advisories/ICSA-12-297-02; http://www.digitalbond.com/2012/06/13/korenix-and-oring-insecurity
CVE: CVE-2012-4219
Published: 2012-08-21
Description: show_config_errors.php in phpMyAdmin 3.5.x before 3.5.2.1 allows remote attackers to obtain sensitive information via a direct request, which reveals the installation path in an error message, related to lack of inclusion of the common.inc.php library file.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://www.phpmyadmin.net/home_page/security/PMASA-2012-3.php; https://github.com/phpmyadmin/phpmyadmin/commit/0f0c2f1e2b3ece41cc1bb99a9931c8fcc7c917bc; https://hermes.opensuse.org/messages/15513071
CVE: CVE-2012-4578
Published: 2012-08-21
Description: The geli encryption provider 7 before r239184 on FreeBSD 10 uses a weak Master Key, which makes it easier for local users to defeat a cryptographic protection mechanism via a brute-force attack.
CVSS Score: 2.1 (LOW)
CWE: CWE-310
References: http://lists.freebsd.org/pipermail/freebsd-security/2012-August/006541.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/78057; http://lists.freebsd.org/pipermail/freebsd-security/2012-August/006541.html
CVE: CVE-2012-1534
Published: 2012-08-21
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2012-4167.  Reason: This candidate is a reservation duplicate of CVE-2012-4167.  Notes: All CVE users should reference CVE-2012-4167 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2012-4163
Published: 2012-08-21
Description: Adobe Flash Player before 10.3.183.23 and 11.x before 11.4.402.265 on Windows and Mac OS X, before 10.3.183.23 and 11.x before 11.2.202.238 on Linux, before 11.1.111.16 on Android 2.x and 3.x, and before 11.1.115.17 on Android 4.x; Adobe AIR before 3.4.0.2540; and Adobe AIR SDK before 3.4.0.2540 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-4164 and CVE-2012-4165.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8399&w=2; http://rhn.redhat.com/errata/RHSA-2012-1203.html; http://security.gentoo.org/glsa/glsa-201209-01.xml
CVE: CVE-2012-4164
Published: 2012-08-21
Description: Adobe Flash Player before 10.3.183.23 and 11.x before 11.4.402.265 on Windows and Mac OS X, before 10.3.183.23 and 11.x before 11.2.202.238 on Linux, before 11.1.111.16 on Android 2.x and 3.x, and before 11.1.115.17 on Android 4.x; Adobe AIR before 3.4.0.2540; and Adobe AIR SDK before 3.4.0.2540 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-4163 and CVE-2012-4165.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8399&w=2; http://rhn.redhat.com/errata/RHSA-2012-1203.html; http://security.gentoo.org/glsa/glsa-201209-01.xml
CVE: CVE-2012-4165
Published: 2012-08-21
Description: Adobe Flash Player before 10.3.183.23 and 11.x before 11.4.402.265 on Windows and Mac OS X, before 10.3.183.23 and 11.x before 11.2.202.238 on Linux, before 11.1.111.16 on Android 2.x and 3.x, and before 11.1.115.17 on Android 4.x; Adobe AIR before 3.4.0.2540; and Adobe AIR SDK before 3.4.0.2540 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-4163 and CVE-2012-4164.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8399&w=2; http://rhn.redhat.com/errata/RHSA-2012-1203.html; http://security.gentoo.org/glsa/glsa-201209-01.xml
CVE: CVE-2012-4166
Published: 2012-08-21
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2012-4165.  Reason: This candidate is a duplicate of CVE-2012-4165.  Notes: All CVE users should reference CVE-2012-4165 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2012-4167
Published: 2012-08-21
Description: Integer overflow in Adobe Flash Player before 10.3.183.23 and 11.x before 11.4.402.265 on Windows and Mac OS X, before 10.3.183.23 and 11.x before 11.2.202.238 on Linux, before 11.1.111.16 on Android 2.x and 3.x, and before 11.1.115.17 on Android 4.x; Adobe AIR before 3.4.0.2540; and Adobe AIR SDK before 3.4.0.2540 allows attackers to execute arbitrary code via unspecified vectors.
CVSS Score: 10.0 (HIGH)
CWE: CWE-189
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8399&w=2; http://rhn.redhat.com/errata/RHSA-2012-1203.html; http://security.gentoo.org/glsa/glsa-201209-01.xml
CVE: CVE-2012-4168
Published: 2012-08-21
Description: Adobe Flash Player before 10.3.183.23 and 11.x before 11.4.402.265 on Windows and Mac OS X, before 10.3.183.23 and 11.x before 11.2.202.238 on Linux, before 11.1.111.16 on Android 2.x and 3.x, and before 11.1.115.17 on Android 4.x; Adobe AIR before 3.4.0.2540; and Adobe AIR SDK before 3.4.0.2540 allow remote attackers to read content from a different domain via a crafted web site.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8399&w=2; http://rhn.redhat.com/errata/RHSA-2012-1203.html; http://security.gentoo.org/glsa/glsa-201209-01.xml
CVE: CVE-2012-4345
Published: 2012-08-21
Description: Multiple cross-site scripting (XSS) vulnerabilities in the Database Structure page in phpMyAdmin 3.4.x before 3.4.11.1 and 3.5.x before 3.5.2.2 allow remote authenticated users to inject arbitrary web script or HTML via (1) a crafted table name during table creation, or a (2) Empty link or (3) Drop link for a crafted table name.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://www.mandriva.com/security/advisories?name=MDVSA-2012:136; http://www.phpmyadmin.net/home_page/security/PMASA-2012-4.php; https://hermes.opensuse.org/messages/15513071
CVE: CVE-2012-4579
Published: 2012-08-21
Description: Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 3.5.x before 3.5.2.2 allow remote authenticated users to inject arbitrary web script or HTML via a Table Operations (1) TRUNCATE or (2) DROP link for a crafted table name, (3) the Add Trigger popup within a Triggers page that references crafted table names, (4) an invalid trigger-creation attempt for a crafted table name, (5) crafted data in a table, or (6) a crafted tooltip label name during GIS data visualization, a different issue than CVE-2012-4345.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://www.phpmyadmin.net/home_page/security/PMASA-2012-4.php; http://www.phpmyadmin.net/home_page/security/PMASA-2012-4.php
CVE: CVE-2009-5115
Published: 2012-08-22
Description: McAfee Common Management Agent (CMA) 3.5.5 through 3.5.5.588 and 3.6.0 through 3.6.0.608, and McAfee Agent 4.0 before Patch 3, allows remote authenticated users to overwrite arbitrary files by accessing a report-writing ActiveX control COM object.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-264
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/78446; https://kc.mcafee.com/corporate/index?page=content&id=SB10002; https://exchange.xforce.ibmcloud.com/vulnerabilities/78446
CVE: CVE-2009-5116
Published: 2012-08-22
Description: McAfee LinuxShield 1.5.1 and earlier does not properly implement client authentication, which allows remote authenticated users to obtain Admin access to the statistics server by leveraging a client account.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-287
References: https://kc.mcafee.com/corporate/index?page=content&id=SB10007; https://kc.mcafee.com/corporate/index?page=content&id=SB10007
CVE: CVE-2009-5117
Published: 2012-08-22
Description: The Web Post Protection feature in McAfee Host Data Loss Prevention (DLP) 3.x before 3.0.100.10 and 9.x before 9.0.0.422, when HTTP Capture mode is enabled, allows local users to obtain sensitive information from web traffic by reading unspecified files.
CVSS Score: 1.9 (LOW)
CWE: CWE-200
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/78447; https://kc.mcafee.com/corporate/index?page=content&id=SB10011; https://exchange.xforce.ibmcloud.com/vulnerabilities/78447
CVE: CVE-2009-5118
Published: 2012-08-22
Description: Untrusted search path vulnerability in McAfee VirusScan Enterprise before 8.7i allows local users to gain privileges via a Trojan horse DLL in an unspecified directory, as demonstrated by scanning a document located on a remote share.
CVSS Score: 9.3 (HIGH)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/78448; https://kc.mcafee.com/corporate/index?page=content&id=SB10013; https://exchange.xforce.ibmcloud.com/vulnerabilities/78448
CVE: CVE-2010-3496
Published: 2012-08-22
Description: McAfee VirusScan Enterprise 8.5i and 8.7i does not properly interact with the processing of hcp:// URLs by the Microsoft Help and Support Center, which makes it easier for remote attackers to execute arbitrary code via malware that is correctly detected by this product, but with a detection approach that occurs too late to stop the code execution.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-264
References: http://www.n00bz.net/antivirus-cve; http://www.securityfocus.com/archive/1/514356; https://kc.mcafee.com/corporate/index?page=content&id=SB10012
CVE: CVE-2010-3497
Published: 2012-08-22
Description: Symantec Norton AntiVirus 2011 does not properly interact with the processing of hcp:// URLs by the Microsoft Help and Support Center, which makes it easier for remote attackers to execute arbitrary code via malware that is correctly detected by this product, but with a detection approach that occurs too late to stop the code execution. NOTE: the researcher indicates that a vendor response was received, stating that this issue "falls into the work of our Firewall and not our AV (per our methodology of layers of defense)."
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-264
References: http://www.n00bz.net/antivirus-cve; http://www.securityfocus.com/archive/1/514356; http://www.n00bz.net/antivirus-cve
CVE: CVE-2010-3498
Published: 2012-08-22
Description: AVG Anti-Virus does not properly interact with the processing of hcp:// URLs by the Microsoft Help and Support Center, which makes it easier for remote attackers to execute arbitrary code via malware that is correctly detected by this product, but with a detection approach that occurs too late to stop the code execution.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-264
References: http://www.n00bz.net/antivirus-cve; http://www.securityfocus.com/archive/1/514356; http://www.n00bz.net/antivirus-cve