deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2011-3037
Published: 2012-03-05
Description: Google Chrome before 17.0.963.65 does not properly perform casts of unspecified variables during the splitting of anonymous blocks, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted document.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-704
References: http://code.google.com/p/chromium/issues/detail?id=113439; http://code.google.com/p/chromium/issues/detail?id=114924; http://code.google.com/p/chromium/issues/detail?id=115028
CVE: CVE-2011-3038
Published: 2012-03-05
Description: Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to multi-column handling.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-416
References: http://code.google.com/p/chromium/issues/detail?id=113497; http://googlechromereleases.blogspot.com/2012/03/chrome-stable-update.html; http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html
CVE: CVE-2011-3039
Published: 2012-03-05
Description: Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to quote handling.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-416
References: http://code.google.com/p/chromium/issues/detail?id=113707; http://googlechromereleases.blogspot.com/2012/03/chrome-stable-update.html; http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html
CVE: CVE-2011-3040
Published: 2012-03-05
Description: Google Chrome before 17.0.963.65 does not properly handle text, which allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted document.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-125
References: http://code.google.com/p/chromium/issues/detail?id=114054; http://googlechromereleases.blogspot.com/2012/03/chrome-stable-update.html; http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html
CVE: CVE-2011-3041
Published: 2012-03-05
Description: Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of class attributes.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-416
References: http://code.google.com/p/chromium/issues/detail?id=114068; http://googlechromereleases.blogspot.com/2012/03/chrome-stable-update.html; http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html
CVE: CVE-2011-3042
Published: 2012-03-05
Description: Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of table sections.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-416
References: http://code.google.com/p/chromium/issues/detail?id=114219; http://googlechromereleases.blogspot.com/2012/03/chrome-stable-update.html; http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html
CVE: CVE-2011-3043
Published: 2012-03-05
Description: Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a flexbox (aka flexible box) in conjunction with the floating of elements.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-416
References: http://code.google.com/p/chromium/issues/detail?id=115681; http://googlechromereleases.blogspot.com/2012/03/chrome-stable-update.html; http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html
CVE: CVE-2011-3044
Published: 2012-03-05
Description: Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving SVG animation elements.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-416
References: http://code.google.com/p/chromium/issues/detail?id=116093; http://googlechromereleases.blogspot.com/2012/03/chrome-stable-update.html; http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html
CVE: CVE-2012-0322
Published: 2012-03-05
Description: The EStrongs ES File Explorer application 1.6.0.2 through 1.6.1.1 for Android does not properly restrict access, which allows remote attackers to read arbitrary files via vectors involving an unspecified function.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-264
References: http://jvn.jp/en/jp/JVN08871006/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2012-000020; http://jvn.jp/en/jp/JVN08871006/index.html
CVE: CVE-2012-0768
Published: 2012-03-05
Description: The Matrix3D component in Adobe Flash Player before 10.3.183.16 and 11.x before 11.1.102.63 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.7 on Android 2.x and 3.x; and before 11.1.115.7 on Android 4.x allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVSS Score: 10.0 (HIGH)
CWE: CWE-399
References: http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00005.html; http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00006.html; http://secunia.com/advisories/48819
CVE: CVE-2012-0769
Published: 2012-03-05
Description: Adobe Flash Player before 10.3.183.16 and 11.x before 11.1.102.63 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.7 on Android 2.x and 3.x; and before 11.1.115.7 on Android 4.x does not properly handle integers, which allows attackers to obtain sensitive information via unspecified vectors.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-189
References: http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00005.html; http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00006.html; http://secunia.com/advisories/48819
CVE: CVE-2012-0198
Published: 2012-03-06
Description: Stack-based buffer overflow in the RunAndUploadFile method in the Isig.isigCtl.1 ActiveX control in IBM Tivoli Provisioning Manager Express for Software Distribution 4.1.1 allows remote attackers to execute arbitrary code via vectors related to an Asset Information file.
CVSS Score: 9.3 (HIGH)
References: http://www.zerodayinitiative.com/advisories/ZDI-12-040/; https://exchange.xforce.ibmcloud.com/vulnerabilities/73033; http://www.zerodayinitiative.com/advisories/ZDI-12-040/
CVE: CVE-2012-0199
Published: 2012-03-06
Description: Multiple SQL injection vulnerabilities in IBM Tivoli Provisioning Manager Express for Software Distribution 4.1.1 allow remote attackers to execute arbitrary SQL commands via (1) a SOAP message to the Printer.getPrinterAgentKey function in the SoapServlet servlet, (2) the User.updateUserValue function in the register.do servlet, (3) the User.isExistingUser function in the logon.do servlet, (4) the Asset.getHWKey function in the CallHomeExec servlet, (5) the Asset.getMimeType function in the getAttachment (aka GetAttachmentServlet) servlet, (6) the addAsset.do servlet, or (7) a crafted EG2 file.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.zerodayinitiative.com/advisories/ZDI-12-040/; https://exchange.xforce.ibmcloud.com/vulnerabilities/73034; http://www.zerodayinitiative.com/advisories/ZDI-12-040/
CVE: CVE-2012-0397
Published: 2012-03-06
Description: Buffer overflow in EMC RSA SecurID Software Token Converter before 2.6.1 allows remote attackers to cause a denial of service or possibly execute arbitrary code via unspecified vectors.
CVSS Score: 7.6 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/archive/1/521885; http://www.securityfocus.com/archive/1/521885
CVE: CVE-2012-1380
Published: 2012-03-07
Description: Unspecified vulnerability in the NetEaseWeibo (com.netease.wb) application 1.2.1 and 1.2.2 for Android has unknown impact and attack vectors.
CVSS Score: 10.0 (HIGH)
References: http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1380-vulnerability-in-NetEaseWeibo.html; http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1380-vulnerability-in-NetEaseWeibo.html
CVE: CVE-2012-1381
Published: 2012-03-07
Description: Unspecified vulnerability in the NetEase CloudAlbum (com.netease.cloudalbum) application 2.0.0 and 2.2.0 for Android has unknown impact and attack vectors.
CVSS Score: 10.0 (HIGH)
References: http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1381-vulnerability-in-NetEaseCloudAlbum.html; http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1381-vulnerability-in-NetEaseCloudAlbum.html
CVE: CVE-2012-1382
Published: 2012-03-07
Description: Unspecified vulnerability in the Youdao Dictionary (com.youdao.dict) application 1.6.1, 2.0.1(2), and 3.0.0(1) for Android has unknown impact and attack vectors.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/48356; http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1382-vulnerability-in-YoudaoDictionary.html; http://secunia.com/advisories/48356
CVE: CVE-2012-1383
Published: 2012-03-07
Description: Unspecified vulnerability in the NetEase Reader (com.netease.pris) application 1.1.2 and 1.2.0 for Android has unknown impact and attack vectors.
CVSS Score: 10.0 (HIGH)
References: http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1383-vulnerability-in-NetEaseReader.html; http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1383-vulnerability-in-NetEaseReader.html
CVE: CVE-2012-1384
Published: 2012-03-07
Description: Unspecified vulnerability in the NetEase Pmail (com.netease.rpmms) application 0.5.0 and 0.5.2 for Android has unknown impact and attack vectors.
CVSS Score: 10.0 (HIGH)
References: http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1384-vulnerability-in-NetEasePmail.html; http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1384-vulnerability-in-NetEasePmail.html
CVE: CVE-2012-1385
Published: 2012-03-07
Description: Unspecified vulnerability in the NetEase WeiboHD (com.netease.wbhd) application 1.0.0 for Android has unknown impact and attack vectors.
CVSS Score: 10.0 (HIGH)
References: http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1385-vulnerability-in-NetEaseWeiboHD.html; http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1385-vulnerability-in-NetEaseWeiboHD.html
CVE: CVE-2012-1386
Published: 2012-03-07
Description: Unspecified vulnerability in the YouMail Visual Voicemail Plus (com.youmail.android.vvm) application 2.0.45 and 2.1.43 for Android has unknown impact and attack vectors.
CVSS Score: 10.0 (HIGH)
References: http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1386-vulnerability-in-YouMailVisualVoicemailPlus.html; http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1386-vulnerability-in-YouMailVisualVoicemailPlus.html
CVE: CVE-2012-1387
Published: 2012-03-07
Description: Unspecified vulnerability in the RealTalk (com.tmsmanager.tms) application A.0.9.250 for Android has unknown impact and attack vectors.
CVSS Score: 10.0 (HIGH)
References: http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1387-vulnerability-in-RealTalk.html; http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1387-vulnerability-in-RealTalk.html
CVE: CVE-2012-1388
Published: 2012-03-07
Description: Unspecified vulnerability in the XiXunTianTian (com.xixun.tiantian) application 0.6.2 beta for Android has unknown impact and attack vectors.
CVSS Score: 10.0 (HIGH)
References: http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1388-vulnerability-in-XiXunTianTian.html; http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1388-vulnerability-in-XiXunTianTian.html
CVE: CVE-2012-1389
Published: 2012-03-07
Description: Unspecified vulnerability in the Di Long Weibo (com.icekirin.weibos) application 1.9.9 for Android has unknown impact and attack vectors.
CVSS Score: 10.0 (HIGH)
References: http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1389-vulnerability-in-DiLongWeibo.html; http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1389-vulnerability-in-DiLongWeibo.html
CVE: CVE-2012-1390
Published: 2012-03-07
Description: Unspecified vulnerability in the Miso (com.bazaarlabs.miso) application 2.2 for Android has unknown impact and attack vectors.
CVSS Score: 10.0 (HIGH)
References: http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1390-vulnerability-in-Miso.html; http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1390-vulnerability-in-Miso.html
CVE: CVE-2012-1391
Published: 2012-03-07
Description: Unspecified vulnerability in the mOffice - Outlook sync (com.innov8tion.isharesync) application 3.1 for Android has unknown impact and attack vectors.
CVSS Score: 10.0 (HIGH)
References: http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1391-vulnerability-in-mOffice.html; http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1391-vulnerability-in-mOffice.html
CVE: CVE-2012-1392
Published: 2012-03-07
Description: Unspecified vulnerability in the Dolphin Browser HD (mobi.mgeek.TunnyBrowser) application 6.2.0, 7.2.1, 7.3.0, and 7.4.0 for Android has unknown impact and attack vectors.
CVSS Score: 10.0 (HIGH)
References: http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1392-vulnerability-in-DolphinBrowserHD.html; http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1392-vulnerability-in-DolphinBrowserHD.html
CVE: CVE-2012-1393
Published: 2012-03-07
Description: Unspecified vulnerability in the GO SMS Pro (com.jb.gosms) application 3.72, 4.10, and 4.35 for Android has unknown impact and attack vectors.
CVSS Score: 10.0 (HIGH)
References: http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1393-vulnerability-in-GOSMSPro.html; http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1393-vulnerability-in-GOSMSPro.html
CVE: CVE-2012-1394
Published: 2012-03-07
Description: Unspecified vulnerability in the GO Email Widget (com.gau.go.launcherex.gowidget.emailwidget) application 1.3.1, 1.8, and 1.81 for Android has unknown impact and attack vectors.
CVSS Score: 10.0 (HIGH)
References: http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1394-vulnerability-in-GOEmailWidget.html; http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1394-vulnerability-in-GOEmailWidget.html
CVE: CVE-2012-1395
Published: 2012-03-07
Description: Unspecified vulnerability in the GO TwiWidget (com.gau.go.launcherex.gowidget.twitterwidget) application 1.7 and 2.1 for Android has unknown impact and attack vectors.
CVSS Score: 10.0 (HIGH)
References: http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1395-vulnerability-in-GOTwiWidget.html; http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1395-vulnerability-in-GOTwiWidget.html
CVE: CVE-2012-1396
Published: 2012-03-07
Description: Unspecified vulnerability in the GO FBWidget (com.gau.go.launcherex.gowidget.fbwidget) application 1.9 and 2.1 for Android has unknown impact and attack vectors.
CVSS Score: 10.0 (HIGH)
References: http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1396-vulnerability-in-GOFBWidget.html; http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1396-vulnerability-in-GOFBWidget.html
CVE: CVE-2012-1397
Published: 2012-03-07
Description: Unspecified vulnerability in the GO QQWeiboWidget (com.gau.go.launcherex.gowidget.qqweibowidget) application 1.2 for Android has unknown impact and attack vectors.
CVSS Score: 10.0 (HIGH)
References: http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1397-vulnerability-in-GOQQWeiboWidget.html; http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1397-vulnerability-in-GOQQWeiboWidget.html
CVE: CVE-2012-1398
Published: 2012-03-07
Description: Unspecified vulnerability in the GO WeiboWidget (com.gau.go.launcherex.gowidget.weibowidget) application 2.4 for Android has unknown impact and attack vectors.
CVSS Score: 10.0 (HIGH)
References: http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1398-vulnerability-in-GOWeiboWidget.html; http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1398-vulnerability-in-GOWeiboWidget.html
CVE: CVE-2012-1399
Published: 2012-03-07
Description: Unspecified vulnerability in the U+Box 2.0 (lg.uplusbox) application 2.0.2 and 2.0.8.4 for Android has unknown impact and attack vectors.
CVSS Score: 10.0 (HIGH)
References: http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1399-vulnerability-in-U%2BBox.html; http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1399-vulnerability-in-U%2BBox.html
CVE: CVE-2012-1400
Published: 2012-03-07
Description: Unspecified vulnerability in the U+Box 2.0 Pad (lg.uplusbox.pad) application 2.0.8.4 for Android has unknown impact and attack vectors.
CVSS Score: 10.0 (HIGH)
References: http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1400-vulnerability-in-U%2BBoxPad.html; http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1400-vulnerability-in-U%2BBoxPad.html
CVE: CVE-2012-1401
Published: 2012-03-07
Description: Unspecified vulnerability in the CamScanner (com.intsig.camscanner) application 1.2.2.20110823 and 1.3.2.20120116 for Android has unknown impact and attack vectors.
CVSS Score: 10.0 (HIGH)
References: http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1401-vulnerability-in-CamScanner.html; http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1401-vulnerability-in-CamScanner.html
CVE: CVE-2012-1402
Published: 2012-03-07
Description: Unspecified vulnerability in the QianXun YingShi (com.qianxun.yingshi) application 1.2.3 and 1.3.4 for Android has unknown impact and attack vectors.
CVSS Score: 10.0 (HIGH)
References: http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1402-vulnerability-in-QianXunYingShi.html; http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1402-vulnerability-in-QianXunYingShi.html
CVE: CVE-2012-1403
Published: 2012-03-07
Description: Unspecified vulnerability in the Dolphin Browser CN (com.dolphin.browser.cn) application 6.3.1 and 7.2.1 for Android has unknown impact and attack vectors.
CVSS Score: 10.0 (HIGH)
References: http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1403-vulnerability-in-DolphinBrowserCN.html; http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1403-vulnerability-in-DolphinBrowserCN.html
CVE: CVE-2012-1404
Published: 2012-03-07
Description: Unspecified vulnerability in the Dolphin Browser Mini (com.dolphin.browser) application 2.2 for Android has unknown impact and attack vectors.
CVSS Score: 10.0 (HIGH)
References: http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1404-vulnerability-in-DolphinBrowserMini.html; http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1404-vulnerability-in-DolphinBrowserMini.html
CVE: CVE-2012-1405
Published: 2012-03-07
Description: Unspecified vulnerability in the GO Note Widget (com.gau.go.launcherex.gowidget.notewidget) application 1.5 and 1.9 for Android has unknown impact and attack vectors.
CVSS Score: 10.0 (HIGH)
References: http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1405-vulnerability-in-GONoteWidget.html; http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1405-vulnerability-in-GONoteWidget.html
CVE: CVE-2012-1406
Published: 2012-03-07
Description: Unspecified vulnerability in the GO Bookmark Widget (com.gau.go.launcherex.gowidget.bookmark) application 1.1 for Android has unknown impact and attack vectors.
CVSS Score: 10.0 (HIGH)
References: http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1406-vulnerability-in-GOBookmarkWidget.html; http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1406-vulnerability-in-GOBookmarkWidget.html
CVE: CVE-2012-1407
Published: 2012-03-07
Description: Unspecified vulnerability in the GO Message Widget (com.gau.go.launcherex.gowidget.smswidget) application 1.9, 2.1, and 2.3 for Android has unknown impact and attack vectors.
CVSS Score: 10.0 (HIGH)
References: http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1407-vulnerability-in-GOMessageWidget.html; http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2012-1407-vulnerability-in-GOMessageWidget.html
CVE: CVE-2011-3844
Published: 2012-03-08
Description: Apple Safari 5.0.5 does not properly implement the setInterval function, which allows remote attackers to spoof the address bar via a crafted web page.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://osvdb.org/79848; http://secunia.com/advisories/44976; http://www.securityfocus.com/bid/52323
CVE: CVE-2011-3845
Published: 2012-03-08
Description: Use-after-free vulnerability in Apple Safari 5.1.2, when a plug-in with a blocking function is installed, allows user-assisted remote attackers to execute arbitrary code via a crafted web page that is accessed during user interaction with the plug-in, leading to improper coordination between an API call and the plug-in unloading functionality, as demonstrated by the Adobe Flash and RealPlayer plug-ins.
CVSS Score: 7.6 (HIGH)
CWE: CWE-399
References: http://osvdb.org/79849; http://secunia.com/advisories/45758; http://www.securityfocus.com/bid/52325
CVE: CVE-2012-0292
Published: 2012-03-08
Description: The awhost32 service in Symantec pcAnywhere through 12.5.3, Altiris IT Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), Altiris Client Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), and Altiris Deployment Solution Remote pcAnywhere Solution 7.1 (aka 12.5.x and 12.6.x) allows remote attackers to cause a denial of service (daemon crash) via a crafted TCP session on port 5631.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://secunia.com/advisories/48092; http://www.exploit-db.com/exploits/18493/; http://www.securityfocus.com/bid/52094
CVE: CVE-2011-2833
Published: 2012-03-08
Description: WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and APPLE-SA-2012-03-07-2.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2012/Mar/msg00000.html; http://lists.apple.com/archives/security-announce/2012/Mar/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Mar/msg00003.html
CVE: CVE-2011-2866
Published: 2012-03-08
Description: WebKit, as used in Apple iTunes before 10.6, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2012-03-07-1.
CVSS Score: 7.6 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2012/Mar/msg00000.html; http://lists.apple.com/archives/security-announce/2012/Mar/msg00003.html; http://osvdb.org/79957
CVE: CVE-2011-2867
Published: 2012-03-08
Description: WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and APPLE-SA-2012-03-07-2.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2012/Mar/msg00000.html; http://lists.apple.com/archives/security-announce/2012/Mar/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Mar/msg00003.html
CVE: CVE-2011-2868
Published: 2012-03-08
Description: WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and APPLE-SA-2012-03-07-2.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2012/Mar/msg00000.html; http://lists.apple.com/archives/security-announce/2012/Mar/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Mar/msg00003.html
CVE: CVE-2011-2869
Published: 2012-03-08
Description: WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and APPLE-SA-2012-03-07-2.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2012/Mar/msg00000.html; http://lists.apple.com/archives/security-announce/2012/Mar/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Mar/msg00003.html