deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2010-4425
Published: 2011-01-19
Description: Unspecified vulnerability in the Oracle BI Publisher component in Oracle Fusion Middleware 10.1.3.3.2, 10.1.3.4.0, and 10.1.3.4.1 allows remote authenticated users to affect integrity via unknown vectors related to Web Server.
CVSS Score: 3.5 (LOW)
References: http://secunia.com/advisories/42977; http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html; http://www.securityfocus.com/bid/45897
CVE: CVE-2010-4426
Published: 2011-01-19
Description: Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft and JDEdwards Suite 8.49.0 through 8.49.29, 8.50.0 through 8.50.14, and 8.51.0 through 8.51.04 allows remote attackers to affect integrity, related to PIA Core Technology.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/70560; http://secunia.com/advisories/42924; http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html
CVE: CVE-2010-4427
Published: 2011-01-19
Description: Unspecified vulnerability in the Oracle BI Publisher component in Oracle Fusion Middleware 10.1.3.4.0, 10.1.3.4.1, and 11.1.1.3 allows remote authenticated users to affect integrity via unknown vectors related to Web Server.
CVSS Score: 3.5 (LOW)
References: http://osvdb.org/70561; http://secunia.com/advisories/42977; http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html
CVE: CVE-2010-4428
Published: 2011-01-19
Description: Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft and JDEdwards Suite 9.0 Update 2010-F allows remote authenticated users to affect confidentiality via unknown vectors related to Absence Management.
CVSS Score: 4.0 (MEDIUM)
References: http://osvdb.org/70562; http://secunia.com/advisories/42982; http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html
CVE: CVE-2010-4429
Published: 2011-01-19
Description: Unspecified vulnerability in the Agile Core component in Oracle Supply Chain Products Suite 9.3.0.2 and 9.3.1 allows remote authenticated users to affect integrity via unknown vectors related to Web Client, a different vulnerability than CVE-2010-3505.
CVSS Score: 3.5 (LOW)
References: http://osvdb.org/70563; http://secunia.com/advisories/42923; http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html
CVE: CVE-2010-4430
Published: 2011-01-19
Description: Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft and JDEdwards Suite 9.1 Update 2010-F allows remote authenticated users to affect confidentiality via unknown vectors related to Absence Management.
CVSS Score: 4.0 (MEDIUM)
References: http://osvdb.org/70564; http://secunia.com/advisories/42982; http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html
CVE: CVE-2010-4431
Published: 2011-01-19
Description: Unspecified vulnerability in Oracle Sun Java System Portal Server 7.1 and 7.2 allows local users to affect confidentiality via unknown vectors related to Proxy.
CVSS Score: 1.0 (LOW)
References: http://osvdb.org/70565; http://secunia.com/advisories/42991; http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html
CVE: CVE-2010-4432
Published: 2011-01-19
Description: Unspecified vulnerability in the Oracle Transportation Manager component in Oracle Supply Chain Products Suite 5.5.06, 6.0, 6.1, and 6.2 allows remote authenticated users to affect confidentiality via unknown vectors related to UI Infrastructure.
CVSS Score: 3.5 (LOW)
References: http://osvdb.org/70566; http://secunia.com/advisories/42993; http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html
CVE: CVE-2010-4433
Published: 2011-01-19
Description: Unspecified vulnerability in Oracle Solaris 10 allows remote attackers to affect confidentiality via unknown vectors related to Ethernet and the Driver sub-component.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/70567; http://secunia.com/advisories/42984; http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html
CVE: CVE-2010-4434
Published: 2011-01-19
Description: Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft and JDEdwards Suite 8.50.0 through 8.50.14 and 8.51.0 through 8.51.04 allows remote authenticated users to affect confidentiality via unknown vectors related to Portal.
CVSS Score: 4.0 (MEDIUM)
References: http://osvdb.org/70568; http://secunia.com/advisories/42924; http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html
CVE: CVE-2010-4435
Published: 2011-01-19
Description: Unspecified vulnerability in Oracle Solaris 8, 9, and 10 allows remote attackers to affect confidentiality, integrity, and availability, related to CDE Calendar Manager Service Daemon and RPC.  NOTE: the previous information was obtained from the January 2011 CPU.  Oracle has not commented on claims from other software vendors that this affects other operating systems, such as HP-UX, or claims from a reliable third party that this is a buffer overflow in rpc.cmsd via long XDR-encoded ASCII strings in RPC call 10.
CVSS Score: 10.0 (HIGH)
References: http://aix.software.ibm.com/aix/efixes/security/cmsd_advisory.asc; http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02702395; http://osvdb.org/70569
CVE: CVE-2010-4436
Published: 2011-01-19
Description: Unspecified vulnerability in Oracle Sun Management Center (SunMC) 4.0 allows remote attackers to affect confidentiality via unknown vectors related to Web Console.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/70570; http://secunia.com/advisories/42989; http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html
CVE: CVE-2010-4437
Published: 2011-01-19
Description: Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.0, 9.1, 9.2.4, 10.0.2, 10.3.2, and 10.3.3 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Servlet Container.
CVSS Score: 5.8 (MEDIUM)
References: http://osvdb.org/70571; http://secunia.com/advisories/42975; http://securityreason.com/securityalert/8126
CVE: CVE-2010-4438
Published: 2011-01-19
Description: Unspecified vulnerability in Oracle GlassFish 2.1, 2.1.1, and 3.0.1, and Java System Message Queue 4.1 allows local users to affect confidentiality, integrity, and availability, related to Java Message Service (JMS).
CVSS Score: 5.7 (MEDIUM)
References: http://osvdb.org/70572; http://osvdb.org/70573; http://secunia.com/advisories/42988
CVE: CVE-2010-4439
Published: 2011-01-19
Description: Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft and JDEdwards Suite 9.0 Bundle #14 and 9.1 Bundle #4 allows remote authenticated users to affect confidentiality via unknown vectors related to eProfile - Manager Desktop.
CVSS Score: 4.0 (MEDIUM)
References: http://osvdb.org/70574; http://secunia.com/advisories/42982; http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html
CVE: CVE-2010-4440
Published: 2011-01-19
Description: Unspecified vulnerability in Oracle 10 and 11 Express allows local users to affect availability via unknown vectors related to the Kernel.
CVSS Score: 4.4 (MEDIUM)
References: http://osvdb.org/70575; http://secunia.com/advisories/42984; http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html
CVE: CVE-2010-4441
Published: 2011-01-19
Description: Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft and JDEdwards Suite 9.1 Bundle #4 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Talent Acquisition Manager.
CVSS Score: 5.5 (MEDIUM)
References: http://osvdb.org/70576; http://secunia.com/advisories/42982; http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html
CVE: CVE-2010-4442
Published: 2011-01-19
Description: Unspecified vulnerability in Oracle Solaris 10 and 11 Express allows local users to affect availability via unknown vectors related to the Kernel.
CVSS Score: 4.4 (MEDIUM)
References: http://osvdb.org/70577; http://secunia.com/advisories/42984; http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html
CVE: CVE-2010-4443
Published: 2011-01-19
Description: Unspecified vulnerability in Oracle Solaris 10 and 11 Express allows local users to affect availability, related to Kernel/NFS.
CVSS Score: 4.4 (MEDIUM)
References: http://osvdb.org/70578; http://secunia.com/advisories/42984; http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html
CVE: CVE-2010-4444
Published: 2011-01-19
Description: Unspecified vulnerability in Oracle Sun Java System Access Manager and Oracle OpenSSO 7, 7.1, and 8 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
CVSS Score: 6.8 (MEDIUM)
References: http://osvdb.org/70579; http://osvdb.org/70580; http://secunia.com/advisories/42986
CVE: CVE-2010-4445
Published: 2011-01-19
Description: Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft and JDEdwards Suite 9.0 Bundle #14 and 9.1 Bundle #4 allows remote authenticated users to affect confidentiality via unknown vectors related to Talent Acquisition Manager.
CVSS Score: 4.0 (MEDIUM)
References: http://osvdb.org/70581; http://secunia.com/advisories/42982; http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html
CVE: CVE-2010-4446
Published: 2011-01-19
Description: Unspecified vulnerability in Oracle Solaris 11 Express allows local users to affect availability via unknown vectors related to RDS and Kernel/InfiniBand.
CVSS Score: 4.6 (MEDIUM)
References: http://osvdb.org/70582; http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html; http://www.securityfocus.com/bid/45892
CVE: CVE-2010-4449
Published: 2011-01-19
Description: Unspecified vulnerability in the Audit Vault component in Oracle Audit Vault 10.2.3.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.  NOTE: the previous information was obtained from the January 2011 CPU.  Oracle has not commented on claims from a reliable third party coordinator that this issue is related to a crafted parameter in an action.execute request to the av component on TCP port 5700.
CVSS Score: 10.0 (HIGH)
References: http://osvdb.org/70583; http://secunia.com/advisories/42919; http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html
CVE: CVE-2010-4453
Published: 2011-01-19
Description: Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 7.0.7, 8.1.6, 9.0, 9.1, 9.2.4, 10.0.2, 10.3.2, and 10.3.3 allows remote attackers to affect integrity via unknown vectors related to Servlet Container.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/70584; http://secunia.com/advisories/42975; http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html
CVE: CVE-2010-4455
Published: 2011-01-19
Description: Unspecified vulnerability in the Oracle HTTP Server component in Oracle Fusion Middleware 11.1.1.2 and 11.1.1.3 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Apache Plugin.
CVSS Score: 6.4 (MEDIUM)
References: http://osvdb.org/70585; http://secunia.com/advisories/42920; http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html
CVE: CVE-2010-4456
Published: 2011-01-19
Description: Unspecified vulnerability in Oracle Sun Java System Communications Express 6.2 and 6.3 allows remote attackers to affect integrity via unknown vectors related to Web Mail.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/70586; http://secunia.com/advisories/42990; http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html
CVE: CVE-2010-4457
Published: 2011-01-19
Description: Unspecified vulnerability in Oracle Solaris 11 Express allows remote attackers to affect availability, related to SMB and CIFS.
CVSS Score: 7.8 (HIGH)
References: http://osvdb.org/70587; http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html; http://www.securityfocus.com/bid/45864
CVE: CVE-2010-4458
Published: 2011-01-19
Description: Unspecified vulnerability in Oracle Solaris 11 Express allows local users to affect availability, related to ZFS.
CVSS Score: 4.1 (MEDIUM)
References: http://osvdb.org/70588; http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html; http://www.securityfocus.com/bid/45889
CVE: CVE-2010-4459
Published: 2011-01-19
Description: Unspecified vulnerability in Oracle Solaris 11 Express allows local users to affect availability via unknown vectors related to SCTP and Kernel/sockfs.
CVSS Score: 4.6 (MEDIUM)
References: http://osvdb.org/70589; http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html; http://www.securityfocus.com/bid/45878
CVE: CVE-2010-4460
Published: 2011-01-19
Description: Unspecified vulnerability in Oracle Solaris 10 allows local users to affect confidentiality and integrity via unknown vectors related to Fault Manager Daemon.
CVSS Score: 3.6 (LOW)
References: http://osvdb.org/70590; http://secunia.com/advisories/42984; http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html
CVE: CVE-2010-4461
Published: 2011-01-19
Description: Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft and JDEdwards Suite 8.9 Bundle #23, 9.0 Bundle #14, and 9.1 Bundle #4 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to ePerformance.
CVSS Score: 5.5 (MEDIUM)
References: http://osvdb.org/70591; http://secunia.com/advisories/42982; http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html
CVE: CVE-2010-4464
Published: 2011-01-19
Description: Unspecified vulnerability in Oracle Sun Convergence 1.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Webmail.
CVSS Score: 6.4 (MEDIUM)
References: http://osvdb.org/70592; http://secunia.com/advisories/42987; http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html
CVE: CVE-2010-3928
Published: 2011-01-20
Description: Ruby Version Manager (RVM) before 1.2.1 writes file contents to a terminal without sanitizing non-printable characters, which might allow remote attackers to execute arbitrary commands via a crafted file, related to an "escape sequence injection vulnerability." NOTE: some of these details are obtained from third party information.
CVSS Score: 6.8 (MEDIUM)
References: http://jvn.jp/en/jp/JVN30414126/index.html; http://jvndb.jvn.jp/en/contents/2011/JVNDB-2011-000005.html; http://osvdb.org/70521
CVE: CVE-2010-3931
Published: 2011-01-20
Description: Cross-site scripting (XSS) vulnerability in multiple Rocomotion products, including P board 1.18 and other versions, P forum 1.30 and earlier, P up board 1.38 and other versions, P diary R 1.13 and earlier, P link 1.11 and earlier, P link compact 1.04 and earlier, pplog 3.31 and earlier, pplog2 3.37 and earlier, PM bbs 1.07 and earlier, PM up bbs 1.08 and earlier, and PM forum 1.18 and earlier, allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://another.rocomotion.jp/[PII_REDACTED]653.html; http://jvn.jp/en/jp/JVN09115481/index.html; http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000006.html
CVE: CVE-2010-4071
Published: 2011-01-20
Description: Cross-site scripting (XSS) vulnerability in AgentTicketZoom in OTRS 2.4.x before 2.4.9, when RichText is enabled, allows remote attackers to inject arbitrary web script or HTML via JavaScript in an HTML e-mail.
CVSS Score: 2.6 (LOW)
CWE: CWE-79
References: http://bugs.gentoo.org/342687; http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html; http://otrs.org/advisory/OSA-2010-03-en/
CVE: CVE-2010-4267
Published: 2011-01-20
Description: Stack-based buffer overflow in the hpmud_get_pml function in io/hpmud/pml.c in Hewlett-Packard Linux Imaging and Printing (HPLIP) 1.6.7, 3.9.8, 3.10.9, and probably other versions allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted SNMP response with a large length value.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053472.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053474.html; http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
CVE: CVE-2010-4331
Published: 2011-01-20
Description: Multiple cross-site scripting (XSS) vulnerabilities in Seo Panel 2.2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) default_news or (2) sponsors cookies, which are not properly handled by (a) controllers/index.ctrl.php or (b) controllers/settings.ctrl.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.exploit-db.com/exploits/16000; http://www.securityfocus.com/archive/1/515768/100/0/threaded; http://www.securityfocus.com/bid/45828
CVE: CVE-2010-4338
Published: 2011-01-20
Description: ocrodjvu 0.4.6-1 on Debian GNU/Linux allows local users to modify arbitrary files via a symlink attack on temporary files that are generated when Cuneiform is invoked as the OCR engine.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-59
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=598134; http://www.securityfocus.com/bid/45234; https://exchange.xforce.ibmcloud.com/vulnerabilities/64892
CVE: CVE-2010-4351
Published: 2011-01-20
Description: The JNLP SecurityManager in IcedTea (IcedTea.so) 1.7 before 1.7.7, 1.8 before 1.8.4, and 1.9 before 1.9.4 for Java OpenJDK returns from the checkPermission method instead of throwing an exception in certain circumstances, which might allow context-dependent attackers to bypass the intended security policy by creating instances of ClassLoader.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-264
References: http://blog.fuseyism.com/index.php/2011/01/18/security-icedtea6-177-184-194-released/; http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053276.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053288.html
CVE: CVE-2010-4701
Published: 2011-01-20
Description: Heap-based buffer overflow in the CDrawPoly::Serialize function in fxscover.exe in Microsoft Windows Fax Services Cover Page Editor 5.2 r2 in Windows XP Professional SP3, Server 2003 R2 Enterprise Edition SP2, and Windows 7 Professional allows remote attackers to execute arbitrary code via a long record in a Fax Cover Page (.cov) file. NOTE: some of these details are obtained from third party information.
CVSS Score: 7.6 (HIGH)
CWE: CWE-119
References: http://retrogod.altervista.org/9sg_cov_bof.html; http://secunia.com/advisories/42747; http://www.exploit-db.com/exploits/15839
CVE: CVE-2010-4702
Published: 2011-01-20
Description: SQL injection vulnerability in JRadio (com_jradio) component before 1.5.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/42600; http://www.fxwebdesign.nl/index.php?option=com_content&view=article&id=20&Itemid=56; http://www.securityfocus.com/bid/46040
CVE: CVE-2010-4703
Published: 2011-01-20
Description: SQL injection vulnerability in default.asp in HotWebScripts HotWeb Rentals allows remote attackers to execute arbitrary SQL commands via the PageId parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/36747; http://www.securityfocus.com/archive/1/515476; http://www.securityfocus.com/bid/45567
CVE: CVE-2011-0008
Published: 2011-01-20
Description: A certain Fedora patch for parse.c in sudo before 1.7.4p5-1.fc14 on Fedora 14 does not properly interpret a system group (aka %group) in the sudoers file during authorization decisions for a user who belongs to that group, which allows local users to leverage an applicable sudoers file and gain root privileges via a sudo command.  NOTE: this vulnerability exists because of a CVE-2009-0034 regression.
CVSS Score: 6.9 (MEDIUM)
References: http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053263.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053341.html; http://secunia.com/advisories/42968
CVE: CVE-2011-0495
Published: 2011-01-20
Description: Stack-based buffer overflow in the ast_uri_encode function in main/utils.c in Asterisk Open Source before 1.4.38.1, 1.4.39.1, 1.6.1.21, 1.6.2.15.1, 1.6.2.16.1, 1.8.1.2, 1.8.2.; and Business Edition before C.3.6.2; when running in pedantic mode allows remote authenticated users to execute arbitrary code via crafted caller ID data in vectors involving the (1) SIP channel driver, (2) URIENCODE dialplan function, or (3) AGI dialplan function.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-787
References: http://downloads.asterisk.org/pub/security/AST-2011-001-1.6.2.diff; http://downloads.asterisk.org/pub/security/AST-2011-001.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-February/053689.html
CVE: CVE-2011-0496
Published: 2011-01-20
Description: Unspecified vulnerability in Sybase EAServer 5.x and 6.x before 6.3 ESD#2, as used in Appeon, Replication Server Messaging Edition (RSME), and WorkSpace, allows remote attackers to install arbitrary web services and execute arbitrary code, related to a "design vulnerability."
CVSS Score: 10.0 (HIGH)
References: http://osvdb.org/70428; http://secunia.com/advisories/42904; http://www.securityfocus.com/bid/45809
CVE: CVE-2011-0497
Published: 2011-01-20
Description: Directory traversal vulnerability in Sybase EAServer 6.x before 6.3 ESD#2, as used in Appeon, Replication Server Messaging Edition (RSME), and WorkSpace, allows remote attackers to read arbitrary files via "../\" (dot dot forward-slash backslash) sequences in a crafted request.
CVSS Score: 7.8 (HIGH)
CWE: CWE-22
References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=889; http://osvdb.org/70427; http://secunia.com/advisories/42904
CVE: CVE-2011-0498
Published: 2011-01-20
Description: Stack-based buffer overflow in Nokia Multimedia Player 1.00.55.5010, and possibly other versions, allows user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long entry in a playlist (.npl) file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://osvdb.org/70416; http://secunia.com/advisories/42852; http://www.exploit-db.com/exploits/15975
CVE: CVE-2011-0499
Published: 2011-01-20
Description: Buffer overflow in VideoSpirit Pro 1.6.8.1 and possibly earlier versions, and VideoSpirit Lite 1.4.0.1 and possibly other versions, allows user-assisted remote attackers to execute arbitrary code via a VideoSpirit project (.visprj) file containing a valitem element with a long "name" attribute.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/42866; http://secunia.com/advisories/42876; https://exchange.xforce.ibmcloud.com/vulnerabilities/64863
CVE: CVE-2011-0500
Published: 2011-01-20
Description: Buffer overflow in VideoSpirit Pro 1.6.8.1, 1.68, and earlier; and VideoSpirit Lite 1.4.0.1 and possibly other versions; allows user-assisted remote attackers to execute arbitrary code via a VideoSpirit project (.visprj) file containing a valitem element with a long "value" attribute, as demonstrated using a valitem with the mp3 name.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/42866; http://secunia.com/advisories/42876; http://www.exploit-db.com/exploits/15936
CVE: CVE-2011-0501
Published: 2011-01-20
Description: Stack-based buffer overflow in Music Animation Machine MIDI Player 2006aug19 Release 035 and possibly other versions allows user-assisted remote attackers to execute arbitrary code via a long line in a .mamx file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/42790; http://www.exploit-db.com/exploits/15901; http://secunia.com/advisories/42790