deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2010-0894
Published: 2010-04-13
Description: Unspecified vulnerability in the Sun Java System Access Manager component in Oracle Sun Product Suite 7.1, 7 2005Q4, and OpenSSO Enterprise 8.0 allows remote attackers to affect confidentiality and integrity via unknown vectors.
CVSS Score: 5.8 (MEDIUM)
References: http://secunia.com/advisories/39431; http://sunsolve.sun.com/search/document.do?assetkey=1-66-267568-1; http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020934.1-1
CVE: CVE-2010-0895
Published: 2010-04-13
Description: Unspecified vulnerability in the Solaris component in Oracle Sun Product Suite OpenSolaris snv_119 allows local users to affect integrity and availability via unknown vectors related to IP Filter.
CVSS Score: 3.6 (LOW)
References: http://www.oracle.com/technetwork/topics/security/cpuapr2010-099504.html; http://www.securityfocus.com/bid/39455; http://www.us-cert.gov/cas/techalerts/TA10-103B.html
CVE: CVE-2010-0896
Published: 2010-04-13
Description: Unspecified vulnerability in the Sun Convergence component in Oracle Sun Product Suite 1.0 allows remote attackers to affect confidentiality via unknown vectors related to Address Book and Mail Filter.
CVSS Score: 7.1 (HIGH)
References: http://www.oracle.com/technetwork/topics/security/cpuapr2010-099504.html; http://www.us-cert.gov/cas/techalerts/TA10-103B.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/57748
CVE: CVE-2010-0897
Published: 2010-04-13
Description: Unspecified vulnerability in the Sun Java System Directory Server component in Oracle Sun Product Suite 5.2, 6.0, 6.1, 6.2, 6.3, and 6.3.1 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Directory Service Markup Language.
CVSS Score: 7.5 (HIGH)
References: http://sunsolve.sun.com/search/document.do?assetkey=1-66-276210-1; http://www.oracle.com/technetwork/topics/security/cpuapr2010-099504.html; http://www.securityfocus.com/bid/39453
CVE: CVE-2010-0024
Published: 2010-04-14
Description: The SMTP component in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, and Server 2008 Gold, SP2, and R2, and Exchange Server 2003 SP2, does not properly parse MX records, which allows remote DNS servers to cause a denial of service (service outage) via a crafted response to a DNS MX record query, aka "SMTP Server MX Record Vulnerability."
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://www.us-cert.gov/cas/techalerts/TA10-103A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-024; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7067
CVE: CVE-2010-0025
Published: 2010-04-14
Description: The SMTP component in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, and Server 2008 Gold, SP2, and R2, and Exchange Server 2000 SP3, does not properly allocate memory for SMTP command replies, which allows remote attackers to read fragments of e-mail messages by sending a series of invalid commands and then sending a STARTTLS command, aka "SMTP Memory Allocation Vulnerability."
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://secunia.com/advisories/39253; http://www.us-cert.gov/cas/techalerts/TA10-103A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-024
CVE: CVE-2010-0190
Published: 2010-04-14
Description: Cross-site scripting (XSS) vulnerability in Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.adobe.com/support/security/bulletins/apsb10-09.html; http://www.securityfocus.com/bid/39329; http://www.us-cert.gov/cas/techalerts/TA10-103C.html
CVE: CVE-2010-0191
Published: 2010-04-14
Description: Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allow attackers to execute arbitrary code via unspecified vectors, related to a "prefix protocol handler vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://www.adobe.com/support/security/bulletins/apsb10-09.html; http://www.securityfocus.com/bid/39329; http://www.us-cert.gov/cas/techalerts/TA10-103C.html
CVE: CVE-2010-0192
Published: 2010-04-14
Description: Unspecified vulnerability in Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allows attackers to cause a denial of service or possibly execute arbitrary code via unknown vectors, a different vulnerability than CVE-2010-0193 and CVE-2010-0196.
CVSS Score: 9.3 (HIGH)
References: http://www.adobe.com/support/security/bulletins/apsb10-09.html; http://www.securityfocus.com/bid/39329; http://www.us-cert.gov/cas/techalerts/TA10-103C.html
CVE: CVE-2010-0193
Published: 2010-04-14
Description: Unspecified vulnerability in Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allows attackers to cause a denial of service or possibly execute arbitrary code via unknown vectors, a different vulnerability than CVE-2010-0192 and CVE-2010-0196.
CVSS Score: 9.3 (HIGH)
References: http://www.adobe.com/support/security/bulletins/apsb10-09.html; http://www.securityfocus.com/bid/39329; http://www.us-cert.gov/cas/techalerts/TA10-103C.html
CVE: CVE-2010-0194
Published: 2010-04-14
Description: Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allow attackers to cause a denial of service (memory corruption) or execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-0197, CVE-2010-0201, and CVE-2010-0204.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.adobe.com/support/security/bulletins/apsb10-09.html; http://www.securityfocus.com/bid/39329; http://www.us-cert.gov/cas/techalerts/TA10-103C.html
CVE: CVE-2010-0195
Published: 2010-04-14
Description: Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, do not properly handle fonts, which allows attackers to execute arbitrary code via unspecified vectors.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://www.adobe.com/support/security/bulletins/apsb10-09.html; http://www.securityfocus.com/bid/39329; http://www.us-cert.gov/cas/techalerts/TA10-103C.html
CVE: CVE-2010-0196
Published: 2010-04-14
Description: Unspecified vulnerability in Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allows attackers to cause a denial of service or possibly execute arbitrary code via unknown vectors, a different vulnerability than CVE-2010-0192 and CVE-2010-0193.
CVSS Score: 9.3 (HIGH)
References: http://www.adobe.com/support/security/bulletins/apsb10-09.html; http://www.securityfocus.com/bid/39329; http://www.us-cert.gov/cas/techalerts/TA10-103C.html
CVE: CVE-2010-0197
Published: 2010-04-14
Description: Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allow attackers to cause a denial of service (memory corruption) or execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-0194, CVE-2010-0201, and CVE-2010-0204.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.adobe.com/support/security/bulletins/apsb10-09.html; http://www.securityfocus.com/bid/39329; http://www.us-cert.gov/cas/techalerts/TA10-103C.html
CVE: CVE-2010-0198
Published: 2010-04-14
Description: Buffer overflow in Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-0199, CVE-2010-0202, and CVE-2010-0203.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.adobe.com/support/security/bulletins/apsb10-09.html; http://www.securityfocus.com/bid/39329; http://www.us-cert.gov/cas/techalerts/TA10-103C.html
CVE: CVE-2010-0199
Published: 2010-04-14
Description: Buffer overflow in Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-0198, CVE-2010-0202, and CVE-2010-0203.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.adobe.com/support/security/bulletins/apsb10-09.html; http://www.securityfocus.com/bid/39329; http://www.us-cert.gov/cas/techalerts/TA10-103C.html
CVE: CVE-2010-0200
Published: 2010-04-14
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2010-1241.  Reason: This candidate is a duplicate of CVE-2010-1241.  Notes: All CVE users should reference CVE-2010-1241 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2010-0201
Published: 2010-04-14
Description: Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allow attackers to cause a denial of service (memory corruption) or execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-0194, CVE-2010-0197, and CVE-2010-0204.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.adobe.com/support/security/bulletins/apsb10-09.html; http://www.securityfocus.com/bid/39329; http://www.us-cert.gov/cas/techalerts/TA10-103C.html
CVE: CVE-2010-0202
Published: 2010-04-14
Description: Buffer overflow in Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-0198, CVE-2010-0199, and CVE-2010-0203.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.adobe.com/support/security/bulletins/apsb10-09.html; http://www.securityfocus.com/bid/39329; http://www.us-cert.gov/cas/techalerts/TA10-103C.html
CVE: CVE-2010-0203
Published: 2010-04-14
Description: Buffer overflow in Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-0198, CVE-2010-0199, and CVE-2010-0202.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.adobe.com/support/security/bulletins/apsb10-09.html; http://www.securityfocus.com/bid/39329; http://www.us-cert.gov/cas/techalerts/TA10-103C.html
CVE: CVE-2010-0204
Published: 2010-04-14
Description: Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allow attackers to cause a denial of service (memory corruption) or execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-0194, CVE-2010-0197, and CVE-2010-0201.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.adobe.com/support/security/bulletins/apsb10-09.html; http://www.securityfocus.com/bid/39329; http://www.securityfocus.com/bid/39522
CVE: CVE-2010-0234
Published: 2010-04-14
Description: The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 does not properly validate a registry-key argument to an unspecified system call, which allows local users to cause a denial of service (reboot) via a crafted application, aka "Windows Kernel Null Pointer Vulnerability."
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-20
References: http://secunia.com/advisories/39373; http://secunia.com/advisories/39374; http://www.securitytracker.com/id?1023850
CVE: CVE-2010-0235
Published: 2010-04-14
Description: The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, and Vista Gold does not perform the expected validation before creating a symbolic link, which allows local users to cause a denial of service (reboot) via a crafted application, aka "Windows Kernel Symbolic Link Value Vulnerability."
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-20
References: http://secunia.com/advisories/39373; http://www.securitytracker.com/id?1023850; http://www.us-cert.gov/cas/techalerts/TA10-103A.html
CVE: CVE-2010-0236
Published: 2010-04-14
Description: The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, and Vista Gold does not properly allocate memory for the destination key associated with a symbolic-link registry key, which allows local users to gain privileges via a crafted application, aka "Windows Kernel Memory Allocation Vulnerability."
CVSS Score: 7.2 (HIGH)
CWE: CWE-399
References: http://secunia.com/advisories/39373; http://www.securitytracker.com/id?1023850; http://www.us-cert.gov/cas/techalerts/TA10-103A.html
CVE: CVE-2010-0237
Published: 2010-04-14
Description: The kernel in Microsoft Windows 2000 SP4 and XP SP2 and SP3 allows local users to gain privileges by creating a symbolic link from an untrusted registry hive to a trusted registry hive, aka "Windows Kernel Symbolic Link Creation Vulnerability."
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-264
References: http://secunia.com/advisories/39373; http://www.securitytracker.com/id?1023850; http://www.us-cert.gov/cas/techalerts/TA10-103A.html
CVE: CVE-2010-0238
Published: 2010-04-14
Description: Unspecified vulnerability in registry-key validation in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, and Vista Gold allows local users to cause a denial of service (reboot) via a crafted application, aka "Windows Kernel Registry Key Vulnerability."
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-20
References: http://secunia.com/advisories/39373; http://www.securitytracker.com/id?1023850; http://www.us-cert.gov/cas/techalerts/TA10-103A.html
CVE: CVE-2010-0254
Published: 2010-04-14
Description: Microsoft Office Visio 2002 SP2, 2003 SP3, and 2007 SP1 and SP2 does not properly validate attributes in Visio files, which allows remote attackers to execute arbitrary code via a crafted file, aka "Visio Attribute Validation Memory Corruption Vulnerability."
CVSS Score: 7.6 (HIGH)
CWE: CWE-94
References: http://www.us-cert.gov/cas/techalerts/TA10-103A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-028; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6819
CVE: CVE-2010-0256
Published: 2010-04-14
Description: Microsoft Office Visio 2002 SP2, 2003 SP3, and 2007 SP1 and SP2 does not properly calculate unspecified indexes associated with Visio files, which allows remote attackers to execute arbitrary code via a crafted file, aka "Visio Index Calculation Memory Corruption Vulnerability."
CVSS Score: 7.6 (HIGH)
CWE: CWE-94
References: http://www.us-cert.gov/cas/techalerts/TA10-103A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-028; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6732
CVE: CVE-2010-0268
Published: 2010-04-14
Description: Unspecified vulnerability in the Windows Media Player ActiveX control in Windows Media Player (WMP) 9 on Microsoft Windows 2000 SP4 and XP SP2 and SP3 allows remote attackers to execute arbitrary code via crafted media content, aka "Media Player Remote Code Execution Vulnerability."
CVSS Score: 9.3 (HIGH)
References: http://www.us-cert.gov/cas/techalerts/TA10-103A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-027; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7281
CVE: CVE-2010-0269
Published: 2010-04-14
Description: The SMB client in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly allocate memory for SMB responses, which allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code via a crafted (1) SMBv1 or (2) SMBv2 response, aka "SMB Client Memory Allocation Vulnerability."
CVSS Score: 10.0 (HIGH)
CWE: CWE-399
References: http://secunia.com/advisories/39372; http://www.us-cert.gov/cas/techalerts/TA10-103A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-020
CVE: CVE-2010-0270
Published: 2010-04-14
Description: The SMB client in Microsoft Windows Server 2008 R2 and Windows 7 does not properly validate fields in SMB transaction responses, which allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and reboot) via a crafted (1) SMBv1 or (2) SMBv2 response, aka "SMB Client Transaction Vulnerability."
CVSS Score: 10.0 (HIGH)
CWE: CWE-20
References: http://secunia.com/advisories/39372; http://www.us-cert.gov/cas/techalerts/TA10-103A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-020
CVE: CVE-2010-0476
Published: 2010-04-14
Description: The SMB client in Microsoft Windows Server 2003 SP2, Vista Gold, SP1, and SP2, and Windows Server 2008 Gold and SP2 allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and reboot) via a crafted SMB transaction response that uses (1) SMBv1 or (2) SMBv2, aka "SMB Client Response Parsing Vulnerability."
CVSS Score: 10.0 (HIGH)
CWE: CWE-399
References: http://secunia.com/advisories/39372; http://www.securityfocus.com/bid/39336; http://www.us-cert.gov/cas/techalerts/TA10-103A.html
CVE: CVE-2010-0477
Published: 2010-04-14
Description: The SMB client in Microsoft Windows Server 2008 R2 and Windows 7 does not properly handle (1) SMBv1 and (2) SMBv2 response packets, which allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code via a crafted packet that causes the client to read the entirety of the response, and then improperly interact with the Winsock Kernel (WSK), aka "SMB Client Message Size Vulnerability."
CVSS Score: 10.0 (HIGH)
CWE: CWE-399
References: http://secunia.com/advisories/39372; http://www.us-cert.gov/cas/techalerts/TA10-103A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-020
CVE: CVE-2010-0478
Published: 2010-04-14
Description: Stack-based buffer overflow in nsum.exe in the Windows Media Unicast Service in Media Services for Microsoft Windows 2000 Server SP4 allows remote attackers to execute arbitrary code via crafted packets associated with transport information, aka "Media Services Stack-based Buffer Overflow Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.us-cert.gov/cas/techalerts/TA10-103A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-025; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7001
CVE: CVE-2010-0479
Published: 2010-04-14
Description: Buffer overflow in Microsoft Office Publisher 2002 SP3, 2003 SP3, and 2007 SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted Publisher file, aka "Microsoft Office Publisher File Conversion TextBox Processing Buffer Overflow Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.us-cert.gov/cas/techalerts/TA10-103A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-023; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7141
CVE: CVE-2010-0480
Published: 2010-04-14
Description: Multiple stack-based buffer overflows in the MPEG Layer-3 audio codecs in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allow remote attackers to execute arbitrary code via a crafted AVI file, aka "MPEG Layer-3 Audio Decoder Stack Overflow Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://securityreason.com/securityalert/8336; http://www.us-cert.gov/cas/techalerts/TA10-103A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-026
CVE: CVE-2010-0481
Published: 2010-04-14
Description: The kernel in Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly translate a registry key's virtual path to its real path, which allows local users to cause a denial of service (reboot) via a crafted application, aka "Windows Virtual Path Parsing Vulnerability."
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-22
References: http://secunia.com/advisories/39373; http://secunia.com/advisories/39374; http://www.securitytracker.com/id?1023850
CVE: CVE-2010-0482
Published: 2010-04-14
Description: The kernel in Microsoft Windows Server 2008 R2 and Windows 7 does not properly validate relocation sections of image files, which allows local users to cause a denial of service (reboot) via a crafted file, aka "Windows Kernel Malformed Image Vulnerability."
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-20
References: http://secunia.com/advisories/39374; http://www.securitytracker.com/id?1023850; http://www.us-cert.gov/cas/techalerts/TA10-103A.html
CVE: CVE-2010-0486
Published: 2010-04-14
Description: The WinVerifyTrust function in Authenticode Signature Verification 5.1, 6.0, and 6.1 in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly use unspecified fields in a file digest, which allows user-assisted remote attackers to execute arbitrary code via a modified (1) Portable Executable (PE) or (2) cabinet (aka .CAB) file that incorrectly appears to have a valid signature, aka "WinVerifyTrust Signature Validation Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://www.us-cert.gov/cas/techalerts/TA10-103A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-019; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6787
CVE: CVE-2010-0487
Published: 2010-04-14
Description: The Authenticode Signature verification functionality in cabview.dll in Cabinet File Viewer Shell Extension 5.1, 6.0, and 6.1 in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly use unspecified fields in a file digest, which allows remote attackers to execute arbitrary code via a modified cabinet (aka .CAB) file that incorrectly appears to have a valid signature, aka "Cabview Corruption Validation Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://www.us-cert.gov/cas/techalerts/TA10-103A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-019; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6886
CVE: CVE-2010-0810
Published: 2010-04-14
Description: The kernel in Microsoft Windows Vista Gold, SP1, and SP2, and Windows Server 2008 Gold and SP2, does not properly handle unspecified exceptions, which allows local users to cause a denial of service (reboot) via a crafted application, aka "Windows Kernel Exception Handler Vulnerability."
CVSS Score: 4.7 (MEDIUM)
References: http://secunia.com/advisories/39373; http://www.securitytracker.com/id?1023850; http://www.us-cert.gov/cas/techalerts/TA10-103A.html
CVE: CVE-2010-0812
Published: 2010-04-14
Description: Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allow remote attackers to bypass intended IPv4 source-address restrictions via a mismatched IPv6 source address in a tunneled ISATAP packet, aka "ISATAP IPv6 Source Address Spoofing Vulnerability."
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-264
References: http://secunia.com/advisories/39382; http://www.us-cert.gov/cas/techalerts/TA10-103A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-029
CVE: CVE-2010-1316
Published: 2010-04-14
Description: Multiple stack-based buffer overflows in Tembria Server Monitor before 5.6.1 allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted (1) GET, (2) PUT, or (3) HEAD request, as demonstrated by a malformed GET request containing a long PATH_INFO to index.asp.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://secunia.com/advisories/39270; http://www.corelan.be:8800/advisories.php?id=CORELAN-10-022; http://www.corelan.be:8800/wp-content/forum-file-uploads/admin1/exploits/corelan_lincoln_tembria.py_.txt