deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2009-2008
Published: 2009-06-08
Description: Multiple SQL injection vulnerabilities in Dokeos 1.8.5, and possibly earlier, allow remote attackers to execute arbitrary SQL commands via the (1) uInfo parameter to main/tracking/userLog.php and the (2) course parameter to main/mySpace/lp_tracking.php, a different vector than CVE-2009-2006.2.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-89
References: http://gsasec.blogspot.com/2009/05/dokeos-free-185-multiple.html; http://www.dokeos.com/wiki/index.php/Security#Dokeos_1.8; http://www.securityfocus.com/bid/34928
CVE: CVE-2009-2009
Published: 2009-06-08
Description: Multiple cross-site scripting (XSS) vulnerabilities in Dokeos 1.8.5, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) curdirpath parameter to main/document/slideshow.php and the (2) file parameter to main/exercice/testheaderpage.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://gsasec.blogspot.com/2009/05/dokeos-free-185-multiple.html; http://www.dokeos.com/wiki/index.php/Security#Dokeos_1.8; http://www.securityfocus.com/bid/34928
CVE: CVE-2009-2010
Published: 2009-06-08
Description: Multiple SQL injection vulnerabilities in Haudenschilt Family Connections CMS (FCMS) 1.9 and earlier allow remote authenticated users to execute arbitrary SQL commands via the (1) thread parameter to messageboard.php, (2) member parameter to profile.php, (3) pid parameter to gallery/index.php, and the (4) fcms_login_id cookie parameter.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: http://secunia.com/advisories/35039; http://www.securityfocus.com/archive/1/503477/100/0/threaded; http://www.securityfocus.com/bid/34935
CVE: CVE-2009-0791
Published: 2009-06-09
Description: Multiple integer overflows in Xpdf 2.x and 3.x and Poppler 0.x, as used in the pdftops filter in CUPS 1.1.17, 1.1.22, and 1.3.7, GPdf, and kdegraphics KPDF, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF file that triggers a heap-based buffer overflow, possibly related to (1) Decrypt.cxx, (2) FoFiTrueType.cxx, (3) gmem.c, (4) JBIG2Stream.cxx, and (5) PSOutputDev.cxx in pdftops/. NOTE: the JBIG2Stream.cxx vector may overlap CVE-2009-1179.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-189
References: http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html; http://secunia.com/advisories/35340; http://secunia.com/advisories/35685
CVE: CVE-2009-0949
Published: 2009-06-09
Description: The ippReadIO function in cups/ipp.c in cupsd in CUPS before 1.3.10 does not properly initialize memory for IPP request packets, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a scheduler request with two consecutive IPP_TAG_UNSUPPORTED tags.
CVSS Score: 7.5 (HIGH)
CWE: CWE-908
References: http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html; http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html; http://secunia.com/advisories/35322
CVE: CVE-2009-1196
Published: 2009-06-09
Description: The directory-services functionality in the scheduler in CUPS 1.1.17 and 1.1.22 allows remote attackers to cause a denial of service (cupsd daemon outage or crash) via manipulations of the timing of CUPS browse packets, related to a "pointer use-after-delete flaw."
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://secunia.com/advisories/35340; http://securitytracker.com/id?1022327; http://www.redhat.com/support/errata/RHSA-2009-1083.html
CVE: CVE-2009-2012
Published: 2009-06-09
Description: Unspecified vulnerability in idmap in Sun OpenSolaris snv_88 through snv_110, when a CIFS server is enabled, allows local users to cause a denial of service (idpmapd daemon crash and idmapd outage) via unknown vectors.
CVSS Score: 1.9 (LOW)
References: http://sunsolve.sun.com/search/document.do?assetkey=1-66-260508-1; http://www.securityfocus.com/bid/35252; http://www.vupen.com/english/advisories/2009/1519
CVE: CVE-2009-2013
Published: 2009-06-09
Description: SQL injection vulnerability in bin/aps_browse_sources.php in Frontis 3.9.01.24 allows remote attackers to execute arbitrary SQL commands via the source_class parameter in a browse_classes action.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/35369; http://www.vupen.com/english/advisories/2009/1531; https://www.exploit-db.com/exploits/8900
CVE: CVE-2009-2014
Published: 2009-06-09
Description: SQL injection vulnerability in the ComSchool (com_school) component 1.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the classid parameter in a showclass action to index.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.securityfocus.com/bid/35257; https://exchange.xforce.ibmcloud.com/vulnerabilities/50988; https://www.exploit-db.com/exploits/8891
CVE: CVE-2009-2015
Published: 2009-06-09
Description: Directory traversal vulnerability in includes/file_includer.php in the Ideal MooFAQ (com_moofaq) component 1.0 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://secunia.com/advisories/35370; http://www.securityfocus.com/bid/35259; http://www.vupen.com/english/advisories/2009/1530
CVE: CVE-2009-2016
Published: 2009-06-09
Description: SQL injection vulnerability in products.php in Virtue Shopping Mall allows remote attackers to execute arbitrary SQL commands via the cid parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/35374; http://www.vupen.com/english/advisories/2009/1527; https://www.exploit-db.com/exploits/8894
CVE: CVE-2009-2017
Published: 2009-06-09
Description: SQL injection vulnerability in products.php in Virtue Book Store allows remote attackers to execute arbitrary SQL commands via the cid parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/35375; http://www.vupen.com/english/advisories/2009/1526; https://www.exploit-db.com/exploits/8893
CVE: CVE-2009-2018
Published: 2009-06-09
Description: SQL injection vulnerability in admin/index.php in Jared Eckersley MyCars, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the authuserid parameter.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-89
References: http://secunia.com/advisories/35281; http://www.vupen.com/english/advisories/2009/1523; https://exchange.xforce.ibmcloud.com/vulnerabilities/50985
CVE: CVE-2009-2019
Published: 2009-06-09
Description: SQL injection vulnerability in news_detail.php in Virtue News Manager allows remote attackers to execute arbitrary SQL commands via the nid parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/35368; http://www.vupen.com/english/advisories/2009/1528; https://www.exploit-db.com/exploits/8901
CVE: CVE-2009-2020
Published: 2009-06-09
Description: Cross-site scripting (XSS) vulnerability in news_detail.php in Virtue News Manager allows remote attackers to inject arbitrary web script or HTML via the nid parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.vupen.com/english/advisories/2009/1528; https://www.exploit-db.com/exploits/8901; http://www.vupen.com/english/advisories/2009/1528
CVE: CVE-2009-2021
Published: 2009-06-09
Description: SQL injection vulnerability in search.php in Virtue Classifieds allows remote attackers to execute arbitrary SQL commands via the category parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/35376; http://www.vupen.com/english/advisories/2009/1525; https://www.exploit-db.com/exploits/8892
CVE: CVE-2009-2022
Published: 2009-06-09
Description: fipsCMS Light 2.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file and obtain sensitive information via a direct request for _fipsdb/db.mdb.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/50987; https://www.exploit-db.com/exploits/8890; https://exchange.xforce.ibmcloud.com/vulnerabilities/50987
CVE: CVE-2009-2023
Published: 2009-06-09
Description: SQL injection vulnerability in index.php in Shop-Script Pro 2.12, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the current_currency parameter.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-89
References: http://secunia.com/advisories/33634; http://www.vupen.com/english/advisories/2009/1533; https://www.exploit-db.com/exploits/8906
CVE: CVE-2009-2024
Published: 2009-06-09
Description: Vlad Titarenko ASP VT Auth 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file and obtain usernames and passwords via a direct request for zHk8dEes3.txt.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/50986; https://www.exploit-db.com/exploits/8889; https://exchange.xforce.ibmcloud.com/vulnerabilities/50986
CVE: CVE-2009-2025
Published: 2009-06-09
Description: admin/login.php in DM FileManager 3.9.2 allows remote attackers to bypass authentication and gain administrative access by setting the (1) USER, (2) GROUPID, (3) GROUP, and (4) USERID cookies to certain values.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://secunia.com/advisories/35167; http://www.vupen.com/english/advisories/2009/1532; https://www.exploit-db.com/exploits/8903
CVE: CVE-2008-2475
Published: 2009-06-09
Description: eBay Enhanced Picture Uploader ActiveX control (EPUWALcontrol.dll) before 1.0.27 allows remote attackers to execute arbitrary commands via the PictureUrls property.
CVSS Score: 9.3 (HIGH)
CWE: CWE-78
References: http://osvdb.org/54968; http://pages.ebay.com/securitycenter/activex/index.html; http://secunia.com/advisories/35412
CVE: CVE-2009-1296
Published: 2009-06-09
Description: The eCryptfs support utilities (ecryptfs-utils) 73-0ubuntu6.1 on Ubuntu 9.04 stores the mount passphrase in installation logs, which might allow local users to obtain access to the filesystem by reading the log files from disk.  NOTE: the log files are only readable by root.
CVSS Score: 1.9 (LOW)
CWE: CWE-200
References: http://secunia.com/advisories/35383; http://www.securitytracker.com/id?1022347; http://www.ubuntu.com/usn/usn-783-1
CVE: CVE-2009-1535
Published: 2009-06-10
Description: The WebDAV extension in Microsoft Internet Information Services (IIS) 5.1 and 6.0 allows remote attackers to bypass URI-based protection mechanisms, and list folders or read, create, or modify files, via a %c0%af (Unicode / character) at an arbitrary position in the URI, as demonstrated by inserting %c0%af into a "/protected/" initial pathname component to bypass the password protection on the protected\ folder, aka "IIS 5.1 and 6.0 WebDAV Authentication Bypass Vulnerability," a different vulnerability than CVE-2009-1122.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: http://archives.neohapsis.com/archives/fulldisclosure/2009-05/0135.html; http://archives.neohapsis.com/archives/fulldisclosure/2009-05/0139.html; http://archives.neohapsis.com/archives/fulldisclosure/2009-05/0144.html
CVE: CVE-2009-1681
Published: 2009-06-10
Description: WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not prevent web sites from loading third-party content into a subframe, which allows remote attackers to bypass the Same Origin Policy and conduct "clickjacking" attacks via a crafted HTML document.
CVSS Score: 4.3 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html; http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html; http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
CVE: CVE-2009-1682
Published: 2009-06-10
Description: Apple Safari before 4.0 does not properly check for revoked Extended Validation (EV) certificates, which makes it easier for remote attackers to trick a user into accepting an invalid certificate.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-255
References: http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html; http://osvdb.org/54982; http://secunia.com/advisories/35379
CVE: CVE-2009-1684
Published: 2009-06-10
Description: Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to inject arbitrary web script or HTML via an event handler that triggers script execution in the context of the next loaded document.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html; http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html; http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
CVE: CVE-2009-1685
Published: 2009-06-10
Description: Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to inject arbitrary web script or HTML by overwriting the document.implementation property of (1) an embedded document or (2) a parent document.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html; http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html; http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
CVE: CVE-2009-1686
Published: 2009-06-10
Description: WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not properly handle constant (aka const) declarations in a type-conversion operation during JavaScript exception handling, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted HTML document.
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html; http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html; http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
CVE: CVE-2009-1687
Published: 2009-06-10
Description: The JavaScript garbage collector in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not properly handle allocation failures, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted HTML document that triggers write access to an "offset of a NULL pointer."
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html; http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html; http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
CVE: CVE-2009-1688
Published: 2009-06-10
Description: Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to inject arbitrary web script or HTML via vectors related to determining a security context through an approach that is not the "HTML 5 standard method."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html; http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html; http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
CVE: CVE-2009-1689
Published: 2009-06-10
Description: Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to inject arbitrary web script or HTML via vectors involving submission of a form to the about:blank URL, leading to security-context replacement.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html; http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html; http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
CVE: CVE-2009-1690
Published: 2009-06-10
Description: Use-after-free vulnerability in WebKit, as used in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Google Chrome 1.0.154.53, and possibly other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) by setting an unspecified property of an HTML tag that causes child elements to be freed and later accessed when an HTML error occurs, related to "recursion in certain DOM event handlers."
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=803; http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html; http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html
CVE: CVE-2009-1691
Published: 2009-06-10
Description: Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to inject arbitrary web script or HTML via vectors related to insufficient access control for standard JavaScript prototypes in other domains.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html; http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html; http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
CVE: CVE-2009-1693
Published: 2009-06-10
Description: WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to read images from arbitrary web sites via a CANVAS element with an SVG image, related to a "cross-site image capture issue."
CVSS Score: 5.8 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html; http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html; http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
CVE: CVE-2009-1694
Published: 2009-06-10
Description: WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not properly handle redirects, which allows remote attackers to read images from arbitrary web sites via vectors involving a CANVAS element and redirection, related to a "cross-site image capture issue."
CVSS Score: 5.8 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html; http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html; http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
CVE: CVE-2009-0228
Published: 2009-06-10
Description: Stack-based buffer overflow in the EnumeratePrintShares function in Windows Print Spooler Service (win32spl.dll) in Microsoft Windows 2000 SP4 allows remote printer servers to execute arbitrary code via a crafted ShareName in a response to an RPC request, related to "printing data structures," aka "Buffer Overflow in Print Spooler Vulnerability."
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=806; http://osvdb.org/54932; http://secunia.com/advisories/35365
CVE: CVE-2009-0229
Published: 2009-06-10
Description: The Windows Printing Service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 allows local users to read arbitrary files via a crafted separator page, aka "Print Spooler Read File Vulnerability."
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-200
References: http://osvdb.org/54933; http://secunia.com/advisories/35365; http://support.avaya.com/elmodocs2/security/ASA-2009-217.htm
CVE: CVE-2009-0230
Published: 2009-06-10
Description: The Windows Print Spooler in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 allows remote authenticated users to gain privileges via a crafted RPC message that triggers loading of a DLL file from an arbitrary directory, aka "Print Spooler Load Library Vulnerability."
CVSS Score: 9.0 (HIGH)
CWE: CWE-264
References: http://osvdb.org/54934; http://secunia.com/advisories/35365; http://support.avaya.com/elmodocs2/security/ASA-2009-217.htm
CVE: CVE-2009-0239
Published: 2009-06-10
Description: Cross-site scripting (XSS) vulnerability in Windows Search 4.0 for Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows user-assisted remote attackers to inject arbitrary web script or HTML via a crafted file that appears in a preview in a search result, aka "Script Execution in Windows Search Vulnerability."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/54935; http://secunia.com/advisories/35366; http://www.securitytracker.com/id?1022353
CVE: CVE-2009-0563
Published: 2009-06-10
Description: Stack-based buffer overflow in Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Microsoft Office for Mac 2004 and 2008; Open XML File Format Converter for Mac; Microsoft Office Word Viewer 2003 SP3; Microsoft Office Word Viewer; and Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allows remote attackers to execute arbitrary code via a Word document with a crafted tag containing an invalid length field, aka "Word Buffer Overflow Vulnerability."
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: http://osvdb.org/54959; http://www.securityfocus.com/archive/1/504204/100/0/threaded; http://www.securityfocus.com/bid/35188
CVE: CVE-2009-0565
Published: 2009-06-10
Description: Buffer overflow in Microsoft Office Word 2000 SP3, 2002 SP3, and 2007 SP1 and SP2; Microsoft Office for Mac 2004 and 2008; Open XML File Format Converter for Mac; and Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allows remote attackers to execute arbitrary code via a Word document with a malformed record that triggers memory corruption, aka "Word Buffer Overflow Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://osvdb.org/54960; http://securityreason.com/securityalert/8206; http://www.securityfocus.com/bid/35190
CVE: CVE-2009-0568
Published: 2009-06-10
Description: The RPC Marshalling Engine (aka NDR) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 does not properly maintain its internal state, which allows remote attackers to overwrite arbitrary memory locations via a crafted RPC message that triggers incorrect pointer reading, related to "IDL interfaces containing a non-conformant varying array" and FC_SMVARRAY, FC_LGVARRAY, FC_VARIABLE_REPEAT, and FC_VARIABLE_OFFSET, aka "RPC Marshalling Engine Vulnerability."
CVSS Score: 10.0 (HIGH)
CWE: CWE-264
References: http://blogs.technet.com/srd/archive/2009/06/09/ms09-026-how-a-developer-can-know-if-their-rpc-interface-is-affected.aspx; http://osvdb.org/54936; http://www.securityfocus.com/bid/35219
CVE: CVE-2009-1138
Published: 2009-06-10
Description: The LDAP service in Active Directory on Microsoft Windows 2000 SP4 does not properly free memory for LDAP and LDAPS requests, which allows remote attackers to execute arbitrary code via a request that uses hexadecimal encoding, whose associated memory is not released, related to a "DN AttributeValue," aka "Active Directory Invalid Free Vulnerability."  NOTE: this issue is probably a memory leak.
CVSS Score: 10.0 (HIGH)
CWE: CWE-399
References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=804; http://osvdb.org/54937; http://secunia.com/advisories/35355