deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2003-1585
Published: 2010-02-05
Description: Cross-site scripting (XSS) vulnerability in WebLogExpert allows remote attackers to inject arbitrary web script or HTML via a crafted client domain name, related to an "Inverse Lookup Log Corruption (ILLC)" issue.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/archive/1/313867; https://exchange.xforce.ibmcloud.com/vulnerabilities/56647; http://www.securityfocus.com/archive/1/313867
CVE: CVE-2003-1586
Published: 2010-02-05
Description: Cross-site scripting (XSS) vulnerability in WebExpert allows remote attackers to inject arbitrary web script or HTML via a crafted User-Agent HTTP header.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/archive/1/313867; https://exchange.xforce.ibmcloud.com/vulnerabilities/56646; http://www.securityfocus.com/archive/1/313867
CVE: CVE-2003-1587
Published: 2010-02-05
Description: Cross-site scripting (XSS) vulnerability in LoganPro allows remote attackers to inject arbitrary web script or HTML via a crafted User-Agent HTTP header.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/archive/1/313867; https://exchange.xforce.ibmcloud.com/vulnerabilities/56645; http://www.securityfocus.com/archive/1/313867
CVE: CVE-2009-2751
Published: 2010-02-05
Description: IBM WebSphere Commerce 7.0 uses the same cryptographic key for session attributes and merchant data encryption, which has unspecified impact and remote attack vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-310
References: http://www-01.ibm.com/support/docview.wss?uid=swg21418443; http://www-1.ibm.com/support/docview.wss?uid=swg1JR35136; https://exchange.xforce.ibmcloud.com/vulnerabilities/56089
CVE: CVE-2009-2752
Published: 2010-02-05
Description: IBM WebSphere Commerce 7.0 does not properly encrypt data in a database, which makes it easier for local users to obtain sensitive information by defeating cryptographic protection mechanisms.
CVSS Score: 1.5 (LOW)
CWE: CWE-310
References: http://www-01.ibm.com/support/docview.wss?uid=swg21418445; http://www-1.ibm.com/support/docview.wss?uid=swg1JR35136; http://www-1.ibm.com/support/docview.wss?uid=swg1JR35199
CVE: CVE-2009-4185
Published: 2010-02-05
Description: Cross-site scripting (XSS) vulnerability in proxy/smhui/getuiinfo in HP System Management Homepage (SMH) before 6.0 allows remote attackers to inject arbitrary web script or HTML via the servercert parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0358&w=2; http://secunia.com/advisories/38341; http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr09-15
CVE: CVE-2010-0557
Published: 2010-02-05
Description: IBM Cognos Express 9.0 allows attackers to obtain unspecified access to the Tomcat Manager component, and cause a denial of service, by leveraging hardcoded credentials.
CVSS Score: 7.5 (HIGH)
CWE: CWE-255
References: http://secunia.com/advisories/38457; http://www-01.ibm.com/support/docview.wss?uid=swg21419179; http://www.osvdb.org/62118
CVE: CVE-2010-0558
Published: 2010-02-05
Description: The default configuration of Oracle OpenSolaris snv_77 through snv_131 allows attackers to have an unspecified impact via vectors related to using smbadm to join a Windows Active Directory domain.
CVSS Score: 7.5 (HIGH)
CWE: CWE-16
References: http://sunsolve.sun.com/search/document.do?assetkey=1-66-275790-1; http://www.securitytracker.com/id?1023545; https://exchange.xforce.ibmcloud.com/vulnerabilities/56521
CVE: CVE-2010-0559
Published: 2010-02-05
Description: The default configuration of Oracle OpenSolaris snv_91 through snv_131 allows attackers to have an unspecified impact via vectors related to using kclient to join a Windows Active Directory domain.
CVSS Score: 7.5 (HIGH)
CWE: CWE-16
References: http://sunsolve.sun.com/search/document.do?assetkey=1-66-275790-1; http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021793.1-1; http://www.securitytracker.com/id?1023545
CVE: CVE-2003-1588
Published: 2010-02-08
Description: Sun Cluster 2.2, when HA-Oracle or HA-Sybase DBMS services are used, stores database credentials in cleartext in a cluster configuration file, which allows local users to obtain sensitive information by reading this file.
CVSS Score: 1.9 (LOW)
CWE: CWE-255
References: http://sunsolve.sun.com/search/document.do?assetkey=1-66-201460-1; https://exchange.xforce.ibmcloud.com/vulnerabilities/56617; http://sunsolve.sun.com/search/document.do?assetkey=1-66-201460-1
CVE: CVE-2010-0292
Published: 2010-02-08
Description: The read_from_cmd_socket function in cmdmon.c in chronyd in Chrony before 1.23.1, and 1.24-pre1, allows remote attackers to cause a denial of service (CPU and bandwidth consumption) by sending a spoofed cmdmon packet that triggers a continuous exchange of NOHOSTACCESS messages between two daemons, a related issue to CVE-2009-3563.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://chrony.tuxfamily.org/News.html; http://git.tuxfamily.org/chrony/chrony.git/?p=gitroot/chrony/chrony.git%3Ba=commit%3Bh=7864c7a70ce00369194e734eb2842ecc5f8db531; http://secunia.com/advisories/38428
CVE: CVE-2010-0293
Published: 2010-02-08
Description: The client logging functionality in chronyd in Chrony before 1.23.1 does not restrict the amount of memory used for storage of client information, which allows remote attackers to cause a denial of service (memory consumption) via spoofed (1) NTP or (2) cmdmon packets.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://chrony.tuxfamily.org/News.html; http://git.tuxfamily.org/chrony/chrony.git/?p=gitroot/chrony/chrony.git%3Ba=commit%3Bh=2f63cf448560fdb96b80d8488aae6a15b802a753; http://secunia.com/advisories/38428
CVE: CVE-2010-0294
Published: 2010-02-08
Description: chronyd in Chrony before 1.23.1, and possibly 1.24-pre1, generates a syslog message for each unauthorized cmdmon packet, which allows remote attackers to cause a denial of service (disk consumption) via a large number of invalid packets.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://chrony.tuxfamily.org/News.html; http://git.tuxfamily.org/chrony/chrony.git/?p=gitroot/chrony/chrony.git%3Ba=commit%3Bh=0b710499f994823bd938fc6895f097eefb9cc59f; http://secunia.com/advisories/38428
CVE: CVE-2010-0411
Published: 2010-02-08
Description: Multiple integer signedness errors in the (1) __get_argv and (2) __get_compat_argv functions in tapset/aux_syscalls.stp in SystemTap 1.1 allow local users to cause a denial of service (script crash, or system crash or hang) via a process with a large number of arguments, leading to a buffer overflow.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-189
References: http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035201.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035261.html; http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00006.html
CVE: CVE-2010-0409
Published: 2010-02-08
Description: Buffer overflow in the GMIME_UUENCODE_LEN macro in gmime/gmime-encodings.h in GMime before 2.4.15 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via input data for a uuencode operation.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://ftp.gnome.org/pub/GNOME/sources/gmime/2.4/gmime-2.4.14-2.4.15.diff.gz; http://ftp.gnome.org/pub/GNOME/sources/gmime/2.4/gmime-2.4.15.changes; http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html
CVE: CVE-2010-0560
Published: 2010-02-08
Description: Unspecified vulnerability in the BIOS in Intel Desktop Board DB, DG, DH, DP, and DQ Series allows local administrators to execute arbitrary code in System Management Mode (SSM) via unknown attack vectors.
CVSS Score: 4.6 (MEDIUM)
References: http://osvdb.org/62071; http://secunia.com/advisories/38413; http://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00022&languageid=en-fr
CVE: CVE-2010-0561
Published: 2010-02-08
Description: Integer signedness error in NetBSD 4.0, 5.0, and NetBSD-current before 2010-01-21 allows local users to cause a denial of service (kernel panic) via a negative mixer index number being passed to (1) the azalia_query_devinfo function in the azalia audio driver (src/sys/dev/pci/azalia.c) or (2) the hdaudio_afg_query_devinfo function in the hdaudio audio driver (src/sys/dev/pci/hdaudio/hdaudio_afg.c).
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-189
References: http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2010-003.txt.asc; http://osvdb.org/62081; http://osvdb.org/62082
CVE: CVE-2010-0562
Published: 2010-02-08
Description: The sdump function in sdump.c in fetchmail 6.3.11, 6.3.12, and 6.3.13, when running in verbose mode on platforms for which char is signed, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an SSL X.509 certificate containing non-printable characters with the high bit set, which triggers a heap-based buffer overflow during escaping.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://mknod.org/svn/fetchmail/branches/BRANCH_6-3/fetchmail-SA-2010-01.txt; http://osvdb.org/62114; http://secunia.com/advisories/38391
CVE: CVE-2010-0563
Published: 2010-02-08
Description: The Single Sign-on (SSO) functionality in IBM WebSphere Application Server (WAS) 7.0.0.0 through 7.0.0.8 does not recognize the Requires SSL configuration option, which might allow remote attackers to obtain sensitive information by sniffing network sessions that were expected to be encrypted.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://secunia.com/advisories/38425; http://securitytracker.com/id?1023551; http://www-01.ibm.com/support/docview.wss?uid=swg21417839
CVE: CVE-2010-0438
Published: 2010-02-09
Description: Multiple SQL injection vulnerabilities in Kernel/System/Ticket.pm in OTRS-Core in Open Ticket Request System (OTRS) 2.1.x before 2.1.9, 2.2.x before 2.2.9, 2.3.x before 2.3.5, and 2.4.x before 2.4.7 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html; http://otrs.org/advisory/OSA-2010-01-en/; http://otrs.org/releases/2.4.7/
CVE: CVE-2010-0444
Published: 2010-02-09
Description: HP Operations Agent 8.51, 8.52, 8.53, and 8.60 on Solaris 10 uses a blank password for the opc_op account, which allows remote attackers to execute arbitrary code via unspecified vectors.
CVSS Score: 10.0 (HIGH)
CWE: CWE-255
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2040&w=2; http://osvdb.org/62213; http://securitytracker.com/id?1023555
CVE: CVE-2009-4631
Published: 2010-02-10
Description: Off-by-one error in the VP3 decoder (vp3.c) in FFmpeg 0.5 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted VP3 file that triggers an out-of-bounds read and possibly memory corruption.
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: http://scarybeastsecurity.blogspot.com/2009/09/patching-ffmpeg-into-shape.html; http://secunia.com/advisories/36805; http://secunia.com/advisories/38643
CVE: CVE-2009-4632
Published: 2010-02-10
Description: oggparsevorbis.c in FFmpeg 0.5 does not properly perform certain pointer arithmetic, which might allow remote attackers to obtain sensitive memory contents and cause a denial of service via a crafted file that triggers an out-of-bounds read.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-189
References: http://scarybeastsecurity.blogspot.com/2009/09/patching-ffmpeg-into-shape.html; http://secunia.com/advisories/36805; http://secunia.com/advisories/38643
CVE: CVE-2009-4633
Published: 2010-02-10
Description: vorbis_dec.c in FFmpeg 0.5 uses an assignment operator when a comparison operator was intended, which might allow remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted file that modifies a loop counter and triggers a heap-based buffer overflow.
CVSS Score: 10.0 (HIGH)
CWE: CWE-189
References: http://scarybeastsecurity.blogspot.com/2009/09/patching-ffmpeg-into-shape.html; http://secunia.com/advisories/36805; http://secunia.com/advisories/38643
CVE: CVE-2009-4634
Published: 2010-02-10
Description: Multiple integer underflows in FFmpeg 0.5 allow remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted file that (1) bypasses a validation check in vorbis_dec.c and triggers a wraparound of the stack pointer, or (2) access a pointer from out-of-bounds memory in mov.c, related to an elst tag that appears before a tag that creates a stream.
CVSS Score: 10.0 (HIGH)
CWE: CWE-189
References: http://scarybeastsecurity.blogspot.com/2009/09/patching-ffmpeg-into-shape.html; http://secunia.com/advisories/36805; http://secunia.com/advisories/38643
CVE: CVE-2009-4635
Published: 2010-02-10
Description: FFmpeg 0.5 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted MOV container with improperly ordered tags that cause (1) mov.c and (2) utils.c to use inconsistent codec types and identifiers, leading to processing of a video-structure pointer by the mp3 decoder, and a stack-based buffer overflow.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://scarybeastsecurity.blogspot.com/2009/09/patching-ffmpeg-into-shape.html; http://secunia.com/advisories/36805; http://secunia.com/advisories/38643
CVE: CVE-2009-4636
Published: 2010-02-10
Description: FFmpeg 0.5 allows remote attackers to cause a denial of service (hang) via a crafted file that triggers an infinite loop.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-94
References: http://scarybeastsecurity.blogspot.com/2009/09/patching-ffmpeg-into-shape.html; http://secunia.com/advisories/36805; http://secunia.com/advisories/38643
CVE: CVE-2009-4637
Published: 2010-02-10
Description: FFmpeg 0.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors that trigger a stack-based buffer overflow.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://scarybeastsecurity.blogspot.com/2009/09/patching-ffmpeg-into-shape.html; http://secunia.com/advisories/36805; http://secunia.com/advisories/38643
CVE: CVE-2009-4638
Published: 2010-02-10
Description: Integer overflow in FFmpeg 0.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-189
References: http://scarybeastsecurity.blogspot.com/2009/09/patching-ffmpeg-into-shape.html; http://secunia.com/advisories/36805; http://secunia.com/advisories/38643
CVE: CVE-2009-4639
Published: 2010-02-10
Description: The av_rescale_rnd function in the AVI demuxer in FFmpeg 0.5 allows remote attackers to cause a denial of service (crash) via a crafted AVI file that triggers a divide-by-zero error.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-189
References: http://scarybeastsecurity.blogspot.com/2009/09/patching-ffmpeg-into-shape.html; http://secunia.com/advisories/36805; http://secunia.com/advisories/39482
CVE: CVE-2009-4640
Published: 2010-02-10
Description: Array index error in vorbis_dec.c in FFmpeg 0.5 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted Vorbis file that triggers an out-of-bounds read.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-189
References: http://scarybeastsecurity.blogspot.com/2009/09/patching-ffmpeg-into-shape.html; http://secunia.com/advisories/36805; http://secunia.com/advisories/38643
CVE: CVE-2010-0394
Published: 2010-02-10
Description: PyGIT.py in the Trac Git plugin (trac-git) before 0.0.20080710-3+lenny1 and before 0.0.20090320-1 on Debian GNU/Linux, when enabled in Trac, allows remote attackers to execute arbitrary commands via shell metacharacters in a crafted HTTP query that is used to generate a certain git command.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=567039; http://osvdb.org/62147; http://secunia.com/advisories/38325
CVE: CVE-2010-0564
Published: 2010-02-10
Description: Buffer overflow in Trend Micro URL Filtering Engine (TMUFE) in OfficeScan 8.0 before SP1 Patch 5 - Build 3510, possibly tmufeng.dll before 3.0.0.1029, allows attackers to cause a denial of service (crash or OfficeScan hang) via unspecified vectors.  NOTE: it is likely that this issue also affects tmufeng.dll before 2.0.0.1049 for OfficeScan 10.0.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://secunia.com/advisories/38396; http://www.securityfocus.com/bid/38083; http://www.securitytracker.com/id?1023553
CVE: CVE-2010-0016
Published: 2010-02-10
Description: The SMB client implementation in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not properly validate response fields, which allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code via a crafted response, aka "SMB Client Pool Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://www.us-cert.gov/cas/techalerts/TA10-040A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-006; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8278
CVE: CVE-2010-0017
Published: 2010-02-10
Description: Race condition in the SMB client implementation in Microsoft Windows Server 2008 R2 and Windows 7 allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code, and in the SMB client implementation in Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 allows local users to gain privileges, via a crafted SMB Negotiate response, aka "SMB Client Race Condition Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-362
References: http://www.us-cert.gov/cas/techalerts/TA10-040A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-006; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8298
CVE: CVE-2010-0020
Published: 2010-02-10
Description: The SMB implementation in the Server service in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate request fields, which allows remote authenticated users to execute arbitrary code via a malformed request, aka "SMB Pathname Overflow Vulnerability."
CVSS Score: 9.0 (HIGH)
CWE: CWE-20, CWE-94
References: http://www.us-cert.gov/cas/techalerts/TA10-040A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-012; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8438
CVE: CVE-2010-0021
Published: 2010-02-10
Description: Multiple race conditions in the SMB implementation in the Server service in Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allow remote attackers to cause a denial of service (system hang) via a crafted (1) SMBv1 or (2) SMBv2 Negotiate packet, aka "SMB Memory Corruption Vulnerability."
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-362, CWE-362
References: http://www.us-cert.gov/cas/techalerts/TA10-040A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-012; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8524
CVE: CVE-2010-0022
Published: 2010-02-10
Description: The SMB implementation in the Server service in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate the share and servername fields in SMB packets, which allows remote attackers to cause a denial of service (system hang) via a crafted packet, aka "SMB Null Pointer Vulnerability."
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://www.us-cert.gov/cas/techalerts/TA10-040A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-012; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8314
CVE: CVE-2010-0023
Published: 2010-02-10
Description: The Client/Server Run-time Subsystem (CSRSS) in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not properly kill processes after a logout, which allows local users to obtain sensitive information or gain privileges via a crafted application that continues to execute throughout the logout of one user and the login session of the next user, aka "CSRSS Local Privilege Elevation Vulnerability."
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-264
References: http://secunia.com/advisories/38509; http://www.us-cert.gov/cas/techalerts/TA10-040A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-011
CVE: CVE-2010-0026
Published: 2010-02-10
Description: The Hyper-V server implementation in Microsoft Windows Server 2008 Gold, SP2, and R2 on the x64 platform allows guest OS users to cause a denial of service (host OS hang) via a crafted application that executes a malformed series of machine instructions, aka "Hyper-V Instruction Set Validation Vulnerability."
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-20
References: http://www.us-cert.gov/cas/techalerts/TA10-040A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-010; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8006
CVE: CVE-2010-0028
Published: 2010-02-10
Description: Integer overflow in Microsoft Paint in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted JPEG (.JPG) file, aka "MS Paint Integer Overflow Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: http://secunia.com/advisories/36634; http://www.us-cert.gov/cas/techalerts/TA10-040A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-005
CVE: CVE-2010-0029
Published: 2010-02-10
Description: Buffer overflow in Microsoft Office PowerPoint 2002 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka "PowerPoint File Path Handling Buffer Overflow Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id?1023563; http://www.us-cert.gov/cas/techalerts/TA10-040A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-004
CVE: CVE-2010-0030
Published: 2010-02-10
Description: Heap-based buffer overflow in Microsoft Office PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka "PowerPoint LinkedSlideAtom Heap Overflow Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id?1023563; http://www.us-cert.gov/cas/techalerts/TA10-040A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-004
CVE: CVE-2010-0031
Published: 2010-02-10
Description: Array index error in Microsoft Office PowerPoint 2002 SP3 and 2003 SP3, and PowerPoint in Office 2004 for Mac, allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka "PowerPoint OEPlaceholderAtom 'placementId' Invalid Array Indexing Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://www.securitytracker.com/id?1023563; http://www.us-cert.gov/cas/techalerts/TA10-040A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-004
CVE: CVE-2010-0032
Published: 2010-02-10
Description: Use-after-free vulnerability in Microsoft Office PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka "OEPlaceholderAtom Use After Free Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://www.securitytracker.com/id?1023563; http://www.us-cert.gov/cas/techalerts/TA10-040A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-004