deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2010-4376
Published: 2010-12-14
Description: Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.1, Mac RealPlayer 11.0 through 11.1, and Linux RealPlayer 11.0.2.1744 allows remote attackers to execute arbitrary code via a large Screen Width value in the Screen Descriptor header of a GIF87a file in an RTSP stream.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://service.real.com/realplayer/security/12102010_player/en/; http://www.securityfocus.com/bid/45411; http://www.securitytracker.com/id?1024861
CVE: CVE-2010-4377
Published: 2010-12-14
Description: Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, Mac RealPlayer 11.0 through 12.0.0.1444, and Linux RealPlayer 11.0.2.1744 allows remote attackers to execute arbitrary code by specifying many subbands in cook audio codec information in a Real Audio file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://service.real.com/realplayer/security/12102010_player/en/; http://www.securitytracker.com/id?1024861; http://www.zerodayinitiative.com/advisories/ZDI-10-272
CVE: CVE-2010-4378
Published: 2010-12-14
Description: The drv2.dll (aka RV20 decompression) module in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, RealPlayer Enterprise 2.1.2 and 2.1.3, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted value of an unspecified length field in an RV20 video stream.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://service.real.com/realplayer/security/12102010_player/en/; http://www.redhat.com/support/errata/RHSA-2010-0981.html; http://www.securitytracker.com/id?1024861
CVE: CVE-2010-4379
Published: 2010-12-14
Description: Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, Mac RealPlayer 11.0 through 11.1, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allows remote attackers to have an unspecified impact via a crafted SIPR file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://service.real.com/realplayer/security/12102010_player/en/; http://www.redhat.com/support/errata/RHSA-2010-0981.html; http://www.securitytracker.com/id?1024861
CVE: CVE-2010-4380
Published: 2010-12-14
Description: Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, and RealPlayer Enterprise 2.1.2 allows remote attackers to have an unspecified impact via a crafted SOUND file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://service.real.com/realplayer/security/12102010_player/en/; http://www.securitytracker.com/id?1024861; http://service.real.com/realplayer/security/12102010_player/en/
CVE: CVE-2010-4381
Published: 2010-12-14
Description: Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, and Mac RealPlayer 11.0 through 12.0.0.1444 allows remote attackers to have an unspecified impact via a crafted AAC file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://service.real.com/realplayer/security/12102010_player/en/; http://www.securitytracker.com/id?1024861; http://service.real.com/realplayer/security/12102010_player/en/
CVE: CVE-2010-4382
Published: 2010-12-14
Description: Multiple heap-based buffer overflows in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allow remote attackers to have an unspecified impact via a crafted RealMedia file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://service.real.com/realplayer/security/12102010_player/en/; http://www.redhat.com/support/errata/RHSA-2010-0981.html; http://www.securitytracker.com/id?1024861
CVE: CVE-2010-4383
Published: 2010-12-14
Description: Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, Mac RealPlayer 11.0 through 12.0.0.1444, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allows remote attackers to have an unspecified impact via a crafted RA5 file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://service.real.com/realplayer/security/12102010_player/en/; http://www.redhat.com/support/errata/RHSA-2010-0981.html; http://www.securitytracker.com/id?1024861
CVE: CVE-2010-4384
Published: 2010-12-14
Description: Array index error in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer Enterprise 2.1.2, Mac RealPlayer 11.0 through 11.1, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allows remote attackers to execute arbitrary code via a malformed Media Properties Header (aka MDPR) in a RealMedia file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://service.real.com/realplayer/security/12102010_player/en/; http://www.redhat.com/support/errata/RHSA-2010-0981.html; http://www.securitytracker.com/id?1024861
CVE: CVE-2010-4385
Published: 2010-12-14
Description: Integer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allows remote attackers to have an unspecified impact via crafted frame dimensions in an SIPR stream.
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: http://service.real.com/realplayer/security/12102010_player/en/; http://www.redhat.com/support/errata/RHSA-2010-0981.html; http://www.securitytracker.com/id?1024861
CVE: CVE-2010-4386
Published: 2010-12-14
Description: RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allow remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted RealMedia video file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=883; http://service.real.com/realplayer/security/12102010_player/en/; http://www.redhat.com/support/errata/RHSA-2010-0981.html
CVE: CVE-2010-4387
Published: 2010-12-14
Description: The RealAudio codec in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, Mac RealPlayer 11.0 through 12.0.0.1444, and Linux RealPlayer 11.0.2.1744 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted audio stream in a RealMedia file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=884; http://service.real.com/realplayer/security/12102010_player/en/; http://www.securitytracker.com/id?1024861
CVE: CVE-2010-4388
Published: 2010-12-14
Description: The (1) Upsell.htm, (2) Main.html, and (3) Custsupport.html components in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, and RealPlayer Enterprise 2.1.2 and 2.1.3 allow remote attackers to inject code into the RealOneActiveXObject process, and consequently bypass intended Local Machine Zone restrictions and load arbitrary ActiveX controls, via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://osvdb.org/69857; http://osvdb.org/69858; http://osvdb.org/69859
CVE: CVE-2010-4389
Published: 2010-12-14
Description: Heap-based buffer overflow in the cook codec in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, and Linux RealPlayer 11.0.2.1744 allows remote attackers to execute arbitrary code via unspecified data in the initialization buffer.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://osvdb.org/69849; http://service.real.com/realplayer/security/12102010_player/en/; http://www.securitytracker.com/id?1024861
CVE: CVE-2010-4390
Published: 2010-12-14
Description: Multiple heap-based buffer overflows in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, and Linux RealPlayer 11.0.2.1744 allow remote attackers to have an unspecified impact via a crafted header in an IVR file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://osvdb.org/69850; http://service.real.com/realplayer/security/12102010_player/en/; http://www.securitytracker.com/id?1024861
CVE: CVE-2010-4391
Published: 2010-12-14
Description: Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, and RealPlayer Enterprise 2.1.2 and 2.1.3 allows remote attackers to execute arbitrary code via a crafted value in an unspecified header field in an RMX file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://osvdb.org/69851; http://service.real.com/realplayer/security/12102010_player/en/; http://www.securitytracker.com/id?1024861
CVE: CVE-2010-4392
Published: 2010-12-14
Description: Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, RealPlayer Enterprise 2.1.2 and 2.1.3, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allows remote attackers to execute arbitrary code via crafted ImageMap data in a RealMedia file, related to certain improper integer calculations.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://osvdb.org/69852; http://service.real.com/realplayer/security/12102010_player/en/; http://www.redhat.com/support/errata/RHSA-2010-0981.html
CVE: CVE-2010-4394
Published: 2010-12-14
Description: Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1.5 allows remote web servers to execute arbitrary code via a long Server header in a response to an HTTP request that occurs during parsing of a RealPix file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://osvdb.org/69853; http://service.real.com/realplayer/security/12102010_player/en/; http://www.securitytracker.com/id?1024861
CVE: CVE-2010-4395
Published: 2010-12-14
Description: Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, and Linux RealPlayer 11.0.2.1744 allows remote attackers to execute arbitrary code via a crafted conditional component in AAC frame data.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://osvdb.org/69854; http://service.real.com/realplayer/security/12102010_player/en/; http://www.securitytracker.com/id?1024861
CVE: CVE-2010-4396
Published: 2010-12-14
Description: Cross-zone scripting vulnerability in the HandleAction method in a certain ActiveX control in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, and RealPlayer Enterprise 2.1.2 allows remote attackers to inject arbitrary web script or HTML in the Local Zone by specifying a local file in a NavigateToURL action, as demonstrated by a local skin file.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://osvdb.org/69855; http://service.real.com/realplayer/security/12102010_player/en/; http://www.securitytracker.com/id?1024861
CVE: CVE-2010-4397
Published: 2010-12-14
Description: Integer overflow in the pnen3260.dll module in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.1, Mac RealPlayer 11.0 through 11.1, and Linux RealPlayer 11.0.2.1744 allows remote attackers to execute arbitrary code via a crafted TIT2 atom in an AAC file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: http://osvdb.org/69856; http://service.real.com/realplayer/security/12102010_player/en/; http://www.securitytracker.com/id?1024861
CVE: CVE-2010-2569
Published: 2010-12-16
Description: pubconv.dll (aka the Publisher Converter DLL) in Microsoft Publisher 2002 SP3, 2003 SP3, and 2007 SP2 does not properly handle an unspecified size field in certain older file formats, which allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted Publisher file, aka "Size Value Heap Corruption in pubconv.dll Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://www.securitytracker.com/id?1024885; http://www.us-cert.gov/cas/techalerts/TA10-348A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-103
CVE: CVE-2010-2570
Published: 2010-12-16
Description: Heap-based buffer overflow in pubconv.dll (aka the Publisher Converter DLL) in Microsoft Publisher 2002 SP3, 2003 SP3, 2007 SP2, and 2010 allows remote attackers to execute arbitrary code via a crafted Publisher file that uses an old file format, aka "Heap Overrun in pubconv.dll Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id?1024885; http://www.us-cert.gov/cas/techalerts/TA10-348A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-103
CVE: CVE-2010-2571
Published: 2010-12-16
Description: Array index error in pubconv.dll (aka the Publisher Converter DLL) in Microsoft Publisher 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher 97 file, aka "Memory Corruption Due To Invalid Index Into Array in Pubconv.dll Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://www.securitytracker.com/id?1024885; http://www.us-cert.gov/cas/techalerts/TA10-348A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-103
CVE: CVE-2010-2742
Published: 2010-12-16
Description: The Netlogon RPC Service in Microsoft Windows Server 2003 SP2 and Server 2008 Gold, SP2, and R2, when the domain controller role is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference and reboot) via a crafted RPC packet, aka "Netlogon RPC Null dereference DOS Vulnerability."
CVSS Score: 5.4 (MEDIUM)
References: http://www.securitytracker.com/id?1024883; http://www.us-cert.gov/cas/techalerts/TA10-348A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-101
CVE: CVE-2010-3338
Published: 2010-12-16
Description: The Windows Task Scheduler in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly determine the security context of scheduled tasks, which allows local users to gain privileges via a crafted application, aka "Task Scheduler Vulnerability." NOTE: this might overlap CVE-2010-3888.
CVSS Score: 7.2 (HIGH)
CWE: CWE-20
References: http://www.securitytracker.com/id?1024874; http://www.us-cert.gov/cas/techalerts/TA10-348A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-092
CVE: CVE-2010-3340
Published: 2010-12-16
Description: Microsoft Internet Explorer 6 and 7 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "HTML Object Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://www.securitytracker.com/id?1024872; http://www.us-cert.gov/cas/techalerts/TA10-348A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-090
CVE: CVE-2010-3342
Published: 2010-12-16
Description: Microsoft Internet Explorer 6, 7, and 8 does not prevent rendering of cached content as HTML, which allows remote attackers to access content from a different (1) domain or (2) zone via unspecified script code, aka "Cross-Domain Information Disclosure Vulnerability," a different vulnerability than CVE-2010-3348.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www.securitytracker.com/id?1024872; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-090; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11447
CVE: CVE-2010-3343
Published: 2010-12-16
Description: Microsoft Internet Explorer 6 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "HTML Object Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-908
References: http://www.securitytracker.com/id?1024872; http://www.us-cert.gov/cas/techalerts/TA10-348A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-090
CVE: CVE-2010-3345
Published: 2010-12-16
Description: Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "HTML Element Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-908
References: http://www.securitytracker.com/id?1024872; http://www.us-cert.gov/cas/techalerts/TA10-348A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-090
CVE: CVE-2010-3346
Published: 2010-12-16
Description: Microsoft Internet Explorer 6, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "HTML Element Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-908
References: http://www.securitytracker.com/id?1024872; http://www.us-cert.gov/cas/techalerts/TA10-348A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-090
CVE: CVE-2010-3348
Published: 2010-12-16
Description: Microsoft Internet Explorer 6, 7, and 8 does not prevent rendering of cached content as HTML, which allows remote attackers to access content from a different (1) domain or (2) zone via unspecified script code, aka "Cross-Domain Information Disclosure Vulnerability," a different vulnerability than CVE-2010-3342.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www.securitytracker.com/id?1024872; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-090; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12055
CVE: CVE-2010-3937
Published: 2010-12-16
Description: Microsoft Exchange Server 2007 SP2 on the x64 platform allows remote authenticated users to cause a denial of service (infinite loop and MSExchangeIS outage) via a crafted RPC request, aka "Exchange Server Infinite Loop Vulnerability."
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-399
References: http://www.securityfocus.com/bid/45297; http://www.securitytracker.com/id?1024888; http://www.us-cert.gov/cas/techalerts/TA10-348A.html
CVE: CVE-2010-3939
Published: 2010-12-16
Description: Buffer overflow in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows local users to gain privileges via vectors related to improper memory allocation for copies from user mode, aka "Win32k Buffer Overflow Vulnerability."
CVSS Score: 7.2 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id?1024880; http://www.us-cert.gov/cas/techalerts/TA10-348A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-098
CVE: CVE-2010-3940
Published: 2010-12-16
Description: Double free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows local users to gain privileges via a crafted application, aka "Win32k PFE Pointer Double Free Vulnerability."
CVSS Score: 7.2 (HIGH)
CWE: CWE-399
References: http://www.securitytracker.com/id?1024880; http://www.us-cert.gov/cas/techalerts/TA10-348A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-098
CVE: CVE-2010-3941
Published: 2010-12-16
Description: Double free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold and SP2, and Windows 7 allows local users to gain privileges via a crafted application, aka "Win32k Double Free Vulnerability."
CVSS Score: 8.4 (HIGH)
CWE: CWE-399
References: http://www.securitytracker.com/id?1024880; http://www.us-cert.gov/cas/techalerts/TA10-348A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-098
CVE: CVE-2010-3942
Published: 2010-12-16
Description: win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly allocate memory for copies from user mode, which allows local users to gain privileges via a crafted application, aka "Win32k WriteAV Vulnerability."
CVSS Score: 7.2 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id?1024880; http://www.us-cert.gov/cas/techalerts/TA10-348A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-098
CVE: CVE-2010-3943
Published: 2010-12-16
Description: win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly link driver objects, which allows local users to gain privileges via a crafted application that triggers linked-list corruption, aka "Win32k Cursor Linking Vulnerability."
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://www.securitytracker.com/id?1024880; http://www.us-cert.gov/cas/techalerts/TA10-348A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-098
CVE: CVE-2010-3944
Published: 2010-12-16
Description: win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2008 R2 and Windows 7 does not properly validate user-mode input, which allows local users to gain privileges via a crafted application, aka "Win32k Memory Corruption Vulnerability."
CVSS Score: 7.2 (HIGH)
CWE: CWE-20
References: http://www.securitytracker.com/id?1024880; http://www.us-cert.gov/cas/techalerts/TA10-348A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-098
CVE: CVE-2010-3945
Published: 2010-12-16
Description: Buffer overflow in the CGM image converter in the graphics filters in Microsoft Office XP SP3, Office 2003 SP3, and Office Converter Pack allows remote attackers to execute arbitrary code via a crafted CGM image in an Office document, aka "CGM Image Converter Buffer Overrun Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id?1024887; http://www.us-cert.gov/cas/techalerts/TA10-348A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-105
CVE: CVE-2010-3946
Published: 2010-12-16
Description: Integer overflow in the PICT image converter in the graphics filters in Microsoft Office XP SP3, Office 2003 SP3, and Office Converter Pack allows remote attackers to execute arbitrary code via a crafted PICT image in an Office document, aka "PICT Image Converter Integer Overflow Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: http://www.securitytracker.com/id?1024887; http://www.us-cert.gov/cas/techalerts/TA10-348A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-105
CVE: CVE-2010-3947
Published: 2010-12-16
Description: Heap-based buffer overflow in the TIFF image converter in the graphics filters in Microsoft Office XP SP3, Office Converter Pack, and Works 9 allows remote attackers to execute arbitrary code via a crafted TIFF image in an Office document, aka "TIFF Image Converter Heap Overflow Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id?1024887; http://www.us-cert.gov/cas/techalerts/TA10-348A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-105