deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2012-1136
Published: 2012-04-25
Description: FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap write operation and memory corruption) or possibly execute arbitrary code via crafted glyph or bitmap data in a BDF font that lacks an ENCODING field.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html; http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html
CVE: CVE-2012-1137
Published: 2012-04-25
Description: FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via a crafted header in a BDF font.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html; http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html
CVE: CVE-2012-1138
Published: 2012-04-25
Description: FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via vectors involving the MIRP instruction in a TrueType font.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html; http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html
CVE: CVE-2012-1139
Published: 2012-04-25
Description: Array index error in FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid stack read operation and memory corruption) or possibly execute arbitrary code via crafted glyph data in a BDF font.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html; http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html
CVE: CVE-2012-1140
Published: 2012-04-25
Description: FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via a crafted PostScript font object.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00004.html
CVE: CVE-2012-1141
Published: 2012-04-25
Description: FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via a crafted ASCII string in a BDF font.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html; http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html
CVE: CVE-2012-1142
Published: 2012-04-25
Description: FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap write operation and memory corruption) or possibly execute arbitrary code via crafted glyph-outline data in a font.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html; http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html
CVE: CVE-2012-1143
Published: 2012-04-25
Description: FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted font.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-189
References: http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html; http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html
CVE: CVE-2012-1144
Published: 2012-04-25
Description: FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap write operation and memory corruption) or possibly execute arbitrary code via a crafted TrueType font.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00004.html
CVE: CVE-2012-2418
Published: 2012-04-25
Description: Heap-based buffer overflow in the intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 through 2012, when Internet Explorer is used, allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a URI with a % (percent) character as its (1) last or (2) second-to-last character.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://osvdb.org/80820; http://www.kb.cert.org/vuls/id/232979; http://www.securityfocus.com/archive/1/522138
CVE: CVE-2012-2419
Published: 2012-04-25
Description: Memory leak in the intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 through 2012, when Internet Explorer is used, allows remote attackers to cause a denial of service (memory consumption) via a URI with multiple references to the same name-value pair.
CVSS Score: 1.8 (LOW)
CWE: CWE-399
References: http://www.kb.cert.org/vuls/id/232979; http://www.securityfocus.com/archive/1/522138; https://exchange.xforce.ibmcloud.com/vulnerabilities/75171
CVE: CVE-2012-2420
Published: 2012-04-25
Description: The intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 through 2012, when Internet Explorer is used, might allow remote attackers to obtain sensitive information via a URI with a % (percent) character as its (1) last or (2) second-to-last character, in situations where a certain "post-URL data" buffer contains a 0x0000 character but a buffer overflow does not occur.
CVSS Score: 1.8 (LOW)
CWE: CWE-200
References: http://osvdb.org/80820; http://www.kb.cert.org/vuls/id/232979; http://www.securityfocus.com/archive/1/522138
CVE: CVE-2012-2421
Published: 2012-04-25
Description: Absolute path traversal vulnerability in the intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 through 2012, when Internet Explorer is used, might allow remote attackers to read arbitrary files in ZIP archives via a full pathname in the URI.
CVSS Score: 1.8 (LOW)
CWE: CWE-22
References: http://www.kb.cert.org/vuls/id/232979; http://www.securityfocus.com/archive/1/522139; https://exchange.xforce.ibmcloud.com/vulnerabilities/75172
CVE: CVE-2012-2422
Published: 2012-04-25
Description: Intuit QuickBooks 2009 through 2012 might allow remote attackers to obtain pathname information via the qbwc://docontrol/GetCompanyFile functionality.
CVSS Score: 2.9 (LOW)
CWE: CWE-200
References: http://www.kb.cert.org/vuls/id/232979; http://www.securityfocus.com/archive/1/522139; https://exchange.xforce.ibmcloud.com/vulnerabilities/75173
CVE: CVE-2012-2423
Published: 2012-04-25
Description: The intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 through 2012, when Internet Explorer is used, provide different responses to remote requests depending on whether a ZIP pathname is valid, which allows remote attackers to obtain potentially sensitive information about the installation path and product version via a series of requests involving the Msxml2.XMLHTTP object.
CVSS Score: 1.8 (LOW)
CWE: CWE-200
References: http://www.kb.cert.org/vuls/id/232979; http://www.securityfocus.com/archive/1/522139; https://exchange.xforce.ibmcloud.com/vulnerabilities/75174
CVE: CVE-2012-2424
Published: 2012-04-25
Description: The intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 through 2012, when Internet Explorer is used, allow remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a URI that lacks a required delimiter.
CVSS Score: 1.8 (LOW)
References: http://www.kb.cert.org/vuls/id/232979; http://www.securityfocus.com/archive/1/522138; http://www.securityfocus.com/archive/1/522139
CVE: CVE-2012-2425
Published: 2012-04-25
Description: The intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 through 2012, when Internet Explorer is used, allow remote attackers to cause a denial of service (application crash) via a long URI.
CVSS Score: 1.8 (LOW)
CWE: CWE-20
References: http://packetstormsecurity.org/files/111403/Intuit-Help-System-Protocol-File-Retrieval.html; http://www.kb.cert.org/vuls/id/232979; http://www.securityfocus.com/archive/1/522138
CVE: CVE-2012-1245
Published: 2012-04-27
Description: Cross-site scripting (XSS) vulnerability in the cleanup_urls function in forum/utils/html.py in OSQA before 1234, and 0.9.0 Beta 3 and earlier, allows remote attackers to inject arbitrary web script or HTML via vectors related to a crafted URI.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN15503729/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2012-000036; http://svn.osqa.net/changelog/OSQA/osqa/trunk?cs=1234
CVE: CVE-2012-0269
Published: 2012-04-27
Description: Buffer overflow in JustSystems Ichitaro 2011 Sou, Ichitaro 2006 through 2011, Ichitaro Government 2006 through 2010, Ichitaro Portable with oreplug, Ichitaro Viewer, JUST School, JUST School 2009 and 2010, JUST Jump 4, JUST Frontier, oreplug, Shuriken Pro4, Shuriken 2007 through 2010, Shuriken Pro4 Corporate Edition, Shuriken CE/2007 through CE/2009 Corporate Edition, Shuriken 2010 Corporate Edition, Rekishimail Sengokubusho no missho, and Bakumatsushishi no missho allows remote attackers to execute arbitrary code via a crafted image file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://jvn.jp/en/jp/JVN09619876/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2012-000035; http://www.justsystems.com/jp/info/js12001.html
CVE: CVE-2012-1242
Published: 2012-04-27
Description: Untrusted search path vulnerability in JustSystems Ichitaro 2011 Sou, Ichitaro 2006 through 2011, Ichitaro Government 2006 through 2010, Ichitaro Portable with oreplug, Ichitaro Viewer, JUST School, JUST School 2009 and 2010, JUST Jump 4, JUST Frontier, and oreplug allows local users to gain privileges via a Trojan horse DLL in the current working directory.
CVSS Score: 6.9 (MEDIUM)
References: http://jvn.jp/en/jp/JVN95378720/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2012-000034; http://osvdb.org/81472
CVE: CVE-2012-1244
Published: 2012-04-27
Description: The NTT DOCOMO sp mode mail application 5400 and earlier for Android does not properly verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-310
References: http://jvn.jp/en/jp/JVN82029095/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2012-000037; http://osvdb.org/81629
CVE: CVE-2012-0465
Published: 2012-04-27
Description: Bugzilla 3.5.x and 3.6.x before 3.6.9, 3.7.x and 4.0.x before 4.0.6, and 4.1.x and 4.2.x before 4.2.1, when the inbound_proxies option is enabled, does not properly validate the X-Forwarded-For HTTP header, which allows remote attackers to bypass the lockout policy via a series of authentication requests with (1) different IP address strings in this header or (2) a long string in this header.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-264
References: http://archives.neohapsis.com/archives/bugtraq/2012-04/0135.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079432.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079481.html
CVE: CVE-2012-0466
Published: 2012-04-27
Description: template/en/default/list/list.js.tmpl in Bugzilla 2.x and 3.x before 3.6.9, 3.7.x and 4.0.x before 4.0.6, and 4.1.x and 4.2.x before 4.2.1 does not properly handle multiple logins, which allows remote attackers to conduct cross-site scripting (XSS) attacks and obtain sensitive bug information via a crafted web page.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-264
References: http://archives.neohapsis.com/archives/bugtraq/2012-04/0135.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079432.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079481.html
CVE: CVE-2012-1803
Published: 2012-04-28
Description: RuggedCom Rugged Operating System (ROS) 3.10.x and earlier has a factory account with a password derived from the MAC Address field in the banner, which makes it easier for remote attackers to obtain access by performing a calculation on this address value, and then establishing a (1) TELNET, (2) remote shell (aka rsh), or (3) serial-console session.
CVSS Score: 8.5 (HIGH)
CWE: CWE-310
References: http://archives.neohapsis.com/archives/bugtraq/2012-04/0186.html; http://arstechnica.com/business/news/2012/04/backdoor-in-mission-critical-hardware-threatens-power-traffic-control-systems.ars; http://ics-cert.us-cert.gov/advisories/ICSA-12-146-01A
CVE: CVE-2012-2439
Published: 2012-04-28
Description: The default configuration of the NETGEAR ProSafe FVS318N firewall enables web-based administration on the WAN interface, which allows remote attackers to establish an HTTP connection and possibly have unspecified other impact via unknown vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://www.kb.cert.org/vuls/id/928795; http://www.kb.cert.org/vuls/id/928795
CVE: CVE-2012-2440
Published: 2012-04-28
Description: The default configuration of the TP-Link 8840T router enables web-based administration on the WAN interface, which allows remote attackers to establish an HTTP connection and possibly have unspecified other impact via unknown vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://www.kb.cert.org/vuls/id/834723; https://exchange.xforce.ibmcloud.com/vulnerabilities/74624; http://www.kb.cert.org/vuls/id/834723
CVE: CVE-2012-2441
Published: 2012-04-28
Description: RuggedCom Rugged Operating System (ROS) before 3.3 has a factory account with a password derived from the MAC Address field in a banner, which makes it easier for remote attackers to obtain access by performing a calculation on this address value, and then establishing a (1) SSH or (2) HTTPS session, a different vulnerability than CVE-2012-1803.
CVSS Score: 8.5 (HIGH)
CWE: CWE-521
References: http://arstechnica.com/business/news/2012/04/backdoor-in-mission-critical-hardware-threatens-power-traffic-control-systems.ars; http://seclists.org/fulldisclosure/2012/Apr/277; http://www.kb.cert.org/vuls/id/889195
CVE: CVE-2012-2212
Published: 2012-04-28
Description: McAfee Web Gateway 7.0 allows remote attackers to bypass the access configuration for the CONNECT method by providing an arbitrary allowed hostname in the Host HTTP header.  NOTE: this issue might not be reproducible, because the researcher did not provide configuration details for the vulnerable system, and the observed behavior might be consistent with a configuration that was (perhaps inadvertently) designed to allow access based on Host HTTP headers
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://archives.neohapsis.com/archives/bugtraq/2012-04/0118.html; http://archives.neohapsis.com/archives/bugtraq/2012-04/0164.html; http://archives.neohapsis.com/archives/bugtraq/2012-04/0189.html
CVE: CVE-2012-2213
Published: 2012-04-28
Description: Squid 3.1.9 allows remote attackers to bypass the access configuration for the CONNECT method by providing an arbitrary allowed hostname in the Host HTTP header.  NOTE: this issue might not be reproducible, because the researcher is unable to provide a squid.conf file for a vulnerable system, and the observed behavior is consistent with a squid.conf file that was (perhaps inadvertently) designed to allow access based on a "req_header Host" acl regex that matches www.uol.com.br
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://archives.neohapsis.com/archives/bugtraq/2012-04/0117.html; http://archives.neohapsis.com/archives/bugtraq/2012-04/0131.html; http://archives.neohapsis.com/archives/bugtraq/2012-04/0140.html
CVE: CVE-2012-0863
Published: 2012-04-30
Description: Mumble 1.2.3 and earlier uses world-readable permissions for .local/share/data/Mumble/.mumble.sqlite files in home directories, which might allow local users to obtain a cleartext password and configuration data by reading a file.
CVSS Score: 2.1 (LOW)
CWE: CWE-310
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=659039; http://bugs.gentoo.org/show_bug.cgi?id=403939; http://secunia.com/advisories/47951
CVE: CVE-2012-2111
Published: 2012-04-30
Description: The (1) CreateAccount, (2) OpenAccount, (3) AddAccountRights, and (4) RemoveAccountRights LSA RPC procedures in smbd in Samba 3.4.x before 3.4.17, 3.5.x before 3.5.15, and 3.6.x before 3.6.5 do not properly restrict modifications to the privileges database, which allows remote authenticated users to obtain the "take ownership" privilege via an LSA connection.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-264
References: http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079662.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079670.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079677.html
CVE: CVE-2012-2414
Published: 2012-04-30
Description: main/manager.c in the Manager Interface in Asterisk Open Source 1.6.2.x before 1.6.2.24, 1.8.x before 1.8.11.1, and 10.x before 10.3.1 and Asterisk Business Edition C.3.x before C.3.7.4 does not properly enforce System class authorization requirements, which allows remote authenticated users to execute arbitrary commands via (1) the originate action in the MixMonitor application, (2) the SHELL and EVAL functions in the GetVar manager action, or (3) the SHELL and EVAL functions in the Status manager action.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-287
References: http://downloads.asterisk.org/pub/security/AST-2012-004.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079759.html; http://osvdb.org/81454
CVE: CVE-2012-2415
Published: 2012-04-30
Description: Heap-based buffer overflow in chan_skinny.c in the Skinny channel driver in Asterisk Open Source 1.6.2.x before 1.6.2.24, 1.8.x before 1.8.11.1, and 10.x before 10.3.1 allows remote authenticated users to cause a denial of service or possibly have unspecified other impact via a series of KEYPAD_BUTTON_MESSAGE events.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: http://downloads.asterisk.org/pub/security/AST-2012-005.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079759.html; http://osvdb.org/81455
CVE: CVE-2012-2416
Published: 2012-04-30
Description: chan_sip.c in the SIP channel driver in Asterisk Open Source 1.8.x before 1.8.11.1 and 10.x before 10.3.1 and Asterisk Business Edition C.3.x before C.3.7.4, when the trustrpid option is enabled, allows remote authenticated users to cause a denial of service (daemon crash) by sending a SIP UPDATE message that triggers a connected-line update attempt without an associated channel.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: http://downloads.asterisk.org/pub/security/AST-2012-006.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079759.html; http://osvdb.org/81456
CVE: CVE-2011-3078
Published: 2012-05-01
Description: Use-after-free vulnerability in Google Chrome before 18.0.1025.168 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the floating of elements, a different vulnerability than CVE-2011-3081.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-416
References: http://code.google.com/p/chromium/issues/detail?id=106413; http://googlechromereleases.blogspot.com/2012/04/stable-channel-update_30.html; http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html
CVE: CVE-2011-3079
Published: 2012-05-01
Description: The Inter-process Communication (IPC) implementation in Google Chrome before 18.0.1025.168, as used in Mozilla Firefox before 38.0 and other products, does not properly validate messages, which has unspecified impact and attack vectors.
CVSS Score: 10.0 (HIGH)
CWE: CWE-399
References: http://code.google.com/p/chromium/issues/detail?id=117627; http://googlechromereleases.blogspot.com/2012/04/stable-channel-update_30.html; http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00012.html
CVE: CVE-2011-3080
Published: 2012-05-01
Description: Race condition in the Inter-process Communication (IPC) implementation in Google Chrome before 18.0.1025.168 allows attackers to bypass intended sandbox restrictions via unspecified vectors.
CVSS Score: 7.6 (HIGH)
CWE: CWE-362
References: http://code.google.com/p/chromium/issues/detail?id=121726; http://googlechromereleases.blogspot.com/2012/04/stable-channel-update_30.html; http://osvdb.org/81646
CVE: CVE-2011-3081
Published: 2012-05-01
Description: Use-after-free vulnerability in Google Chrome before 18.0.1025.168 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the floating of elements, a different vulnerability than CVE-2011-3078.
CVSS Score: 9.3 (HIGH)
CWE: CWE-416
References: http://code.google.com/p/chromium/issues/detail?id=121899; http://googlechromereleases.blogspot.com/2012/04/stable-channel-update_30.html; http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html
CVE: CVE-2012-1521
Published: 2012-05-01
Description: Use-after-free vulnerability in the XML parser in Google Chrome before 18.0.1025.168 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-416
References: http://code.google.com/p/chromium/issues/detail?id=117110; http://googlechromereleases.blogspot.com/2012/04/stable-channel-update_30.html; http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html
CVE: CVE-2012-2217
Published: 2012-05-01
Description: The HTC IQRD service for Android on the HTC EVO 4G before 4.67.651.3, EVO Design 4G before 2.12.651.5, Shift 4G before 2.77.651.3, EVO 3D before 2.17.651.5, EVO View 4G before 2.23.651.1, Vivid before 3.26.502.56, and Hero does not restrict localhost access to TCP port 2479, which allows remote attackers to (1) send SMS messages, (2) obtain the Network Access Identifier (NAI) and its password, or trigger (3) popup messages or (4) tones via a crafted application that leverages the android.permission.INTERNET permission.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-264
References: http://archives.neohapsis.com/archives/bugtraq/2012-04/0176.html; http://www.securityfocus.com/bid/53187; http://www.vsecurity.com/resources/advisory/20120420-1/