deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2012-3751
Published: 2012-11-09
Description: Use-after-free vulnerability in the plugin in Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via an HTML document with a crafted _qtactivex_ parameter in an OBJECT element.
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://lists.apple.com/archives/security-announce/2012/Nov/msg00002.html; http://secunia.com/advisories/51226; http://support.apple.com/kb/HT5581
CVE: CVE-2012-3752
Published: 2012-11-09
Description: Multiple buffer overflows in Apple QuickTime before 7.7.3 allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted style element in a QuickTime TeXML file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2012/Nov/msg00002.html; http://packetstormsecurity.com/files/118359/Apple-QuickTime-7.7.2-TeXML-Style-Element-font-table-Field-Stack-Buffer-Overflow.html; http://secunia.com/advisories/51226
CVE: CVE-2012-3753
Published: 2012-11-09
Description: Buffer overflow in the plugin in Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted MIME type.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2012/Nov/msg00002.html; http://packetstormsecurity.com/files/118421/Apple-QuickTime-7.7.2-MIME-Type-Buffer-Overflow.html; http://secunia.com/advisories/51226
CVE: CVE-2012-3754
Published: 2012-11-09
Description: Use-after-free vulnerability in the Clear method in the ActiveX control in Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors.
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://lists.apple.com/archives/security-announce/2012/Nov/msg00002.html; http://secunia.com/advisories/51226; http://support.apple.com/kb/HT5581
CVE: CVE-2012-3755
Published: 2012-11-09
Description: Buffer overflow in Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted Targa image.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2012/Nov/msg00002.html; http://packetstormsecurity.org/files/118231/Apple-QuickTime-7.7.2-Buffer-Overflow.html; http://secunia.com/advisories/51226
CVE: CVE-2012-3756
Published: 2012-11-09
Description: Buffer overflow in Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted rnet box in an MP4 movie file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2012/Nov/msg00002.html; http://lists.apple.com/archives/security-announce/2013/Mar/msg00002.html; http://osvdb.org/87091
CVE: CVE-2012-3757
Published: 2012-11-09
Description: Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted PICT file.
CVSS Score: 9.3 (HIGH)
References: http://lists.apple.com/archives/security-announce/2012/Nov/msg00002.html; http://osvdb.org/87092; http://secunia.com/advisories/51226
CVE: CVE-2012-3758
Published: 2012-11-09
Description: Buffer overflow in Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted transform attribute in a text3GTrack element in a QuickTime TeXML file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2012/Nov/msg00002.html; http://secunia.com/advisories/51226; http://support.apple.com/kb/HT5581
CVE: CVE-2012-2455
Published: 2012-11-10
Description: Advanced Productivity Software DTE Axiom before 12.3.3 does not validate the registration ID, which allows remote attackers to bypass authentication and read or modify data about users, customers, and projects via unspecified vectors.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-264
References: http://seclists.org/fulldisclosure/2012/Sep/62; http://secunia.com/advisories/50508; http://www.osvdb.org/85499
CVE: CVE-2012-3523
Published: 2012-11-11
Description: The STARTTLS implementation in nnrpd in INN before 2.5.3 does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted sessions by sending a cleartext command that is processed after TLS is in place, related to a "plaintext command injection" attack, a similar issue to CVE-2011-0411.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-264
References: http://lists.opensuse.org/opensuse-updates/2012-09/msg00058.html; http://secunia.com/advisories/50661; http://www.mandriva.com/security/advisories?name=MDVSA-2012:156
CVE: CVE-2012-4504
Published: 2012-11-11
Description: Stack-based buffer overflow in the url::get_pac function in url.cpp in libproxy 0.4.x before 0.4.9 allows remote servers to have an unspecified impact via a large proxy.pac file.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://code.google.com/p/libproxy/source/detail?r=853; http://lists.opensuse.org/opensuse-updates/2012-10/msg00065.html; http://secunia.com/advisories/51048
CVE: CVE-2012-4505
Published: 2012-11-11
Description: Heap-based buffer overflow in the px_pac_reload function in lib/pac.c in libproxy 0.2.x and 0.3.x allows remote servers to have an unspecified impact via a crafted Content-Length size in an HTTP response header for a proxy.pac file request, a different vulnerability than CVE-2012-4504.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-updates/2012-10/msg00065.html; http://rhn.redhat.com/errata/RHSA-2012-1461.html; http://secunia.com/advisories/51048
CVE: CVE-2012-4513
Published: 2012-11-11
Description: khtml/imload/scaledimageplane.h in Konqueror in KDE 4.7.3 allows remote attackers to cause a denial of service (crash) and possibly read memory via large canvas dimensions, which leads to an unexpected sign extension and a heap-based buffer over-read.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-119
References: http://archives.neohapsis.com/archives/bugtraq/2012-11/0005.html; http://quickgit.kde.org/index.php?p=kdelibs.git&a=commitdiff&h=1f8b1b034ccf1713a5d123a4c327290f86d17d53; http://rhn.redhat.com/errata/RHSA-2012-1416.html
CVE: CVE-2012-4514
Published: 2012-11-11
Description: rendering/render_replaced.cpp in Konqueror in KDE before 4.9.3 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted web page, related to "trying to reuse a frame with a null part."
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2012-11/0005.html; http://quickgit.kde.org/index.php?p=kdelibs.git&a=commitdiff&h=[PII_REDACTED]1e0df9b5d80c2eb3cc7458d54923ae; http://www.nth-dimension.org.uk/pub/NDSA20121010.txt.asc
CVE: CVE-2012-4515
Published: 2012-11-11
Description: Use-after-free vulnerability in khtml/rendering/render_replaced.cpp in Konqueror in KDE 4.7.3, when the context menu is shown, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by accessing an iframe when it is being updated.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-399
References: http://archives.neohapsis.com/archives/bugtraq/2012-11/0005.html; http://quickgit.kde.org/index.php?p=kdelibs.git&a=commitdiff&h=4f2eb356f1c23444fff2cfe0a7ae10efe303d6d8; http://secunia.com/advisories/51097
CVE: CVE-2012-4521
Published: 2012-11-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2012-4505. Reason: This candidate is a duplicate of CVE-2012-4505.  Notes: All CVE users should reference CVE-2012-4505 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2012-4540
Published: 2012-11-11
Description: Off-by-one error in the invoke function in IcedTeaScriptablePluginObject.cc in IcedTea-Web 1.1.x before 1.1.7, 1.2.x before 1.2.2, 1.3.x before 1.3.1, and 1.4.x before 1.4.1 allows remote attackers to obtain sensitive information, cause a denial of service (crash), or possibly execute arbitrary code via a crafted webpage that triggers a heap-based buffer overflow, related to an error message and a "triggering event attached to applet." NOTE: the 1.4.x versions were originally associated with CVE-2013-4349, but that entry has been MERGED with this one.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-189
References: http://icedtea.classpath.org/hg/release/icedtea-web-1.1/file/d759ec560073/NEWS; http://icedtea.classpath.org/hg/release/icedtea-web-1.2/rev/596a718be03f; http://icedtea.classpath.org/hg/release/icedtea-web-1.3/rev/e7970f3da5fe
CVE: CVE-2012-4548
Published: 2012-11-11
Description: Argument injection vulnerability in syntax-highlighting.sh in cgit 9.0.3 and earlier allows remote authenticated users with permissions to add files to execute arbitrary commands via the --plug-in argument to the highlight command.
CVSS Score: 6.0 (MEDIUM)
References: http://git.zx2c4.com/cgit/commit/?id=7ea35f9f8ecf61ab42be9947aae1176ab6e089bd; http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00021.html; http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00022.html
CVE: CVE-2012-4553
Published: 2012-11-11
Description: Drupal 7.x before 7.16 allows remote attackers to obtain sensitive information and possibly re-install Drupal and execute arbitrary PHP code via an external database server, related to "transient conditions."
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-264
References: http://drupal.org/node/1815904; http://drupal.org/node/1815912; http://drupalcode.org/project/drupal.git/commit/b912710
CVE: CVE-2012-4554
Published: 2012-11-11
Description: The OpenID module in Drupal 7.x before 7.16 allows remote OpenID servers to read arbitrary files via a crafted DOCTYPE declaration in an XRDS file.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://drupal.org/node/1815912; http://drupalcode.org/project/drupal.git/commit/b912710; http://www.openwall.com/lists/oss-security/2012/10/29/4
CVE: CVE-2012-4564
Published: 2012-11-11
Description: ppm2tiff does not check the return value of the TIFFScanlineSize function, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PPM image that triggers an integer overflow, a zero-memory allocation, and a heap-based buffer overflow.
CVSS Score: 6.8 (MEDIUM)
References: http://lists.opensuse.org/opensuse-updates/2013-01/msg00076.html; http://rhn.redhat.com/errata/RHSA-2012-1590.html; http://secunia.com/advisories/51133
CVE: CVE-2012-4573
Published: 2012-11-11
Description: The v1 API in OpenStack Glance Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote authenticated users to delete arbitrary non-protected images via an image deletion request, a different vulnerability than CVE-2012-5482.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-264
References: http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092192.html; http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00002.html; http://osvdb.org/87248
CVE: CVE-2012-4730
Published: 2012-11-11
Description: Request Tracker (RT) 3.8.x before 3.8.15 and 4.0.x before 4.0.8 allows remote authenticated users with ModifySelf or AdminUser privileges to inject arbitrary email headers and conduct phishing attacks or obtain sensitive information via unknown vectors.
CVSS Score: 3.5 (LOW)
CWE: CWE-264
References: http://lists.bestpractical.com/pipermail/rt-announce/2012-October/000212.html; http://lists.bestpractical.com/pipermail/rt-announce/2012-October/000212.html
CVE: CVE-2012-4731
Published: 2012-11-11
Description: FAQ manager for Request Tracker (RTFM) before 2.4.5 does not properly check user rights, which allows remote authenticated users to create arbitrary articles in arbitrary classes via unknown vectors.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-264
References: http://lists.bestpractical.com/pipermail/rt-announce/2012-October/000212.html; http://lists.bestpractical.com/pipermail/rt-announce/2012-October/000215.html; http://secunia.com/advisories/51062
CVE: CVE-2012-4732
Published: 2012-11-11
Description: Cross-site request forgery (CSRF) vulnerability in Request Tracker (RT) 3.8.12 and other versions before 3.8.15, and 4.0.6 and other versions before 4.0.8, allows remote attackers to hijack the authentication of users for requests that toggle ticket bookmarks.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://lists.bestpractical.com/pipermail/rt-announce/2012-October/000212.html; http://osvdb.org/86714; http://lists.bestpractical.com/pipermail/rt-announce/2012-October/000212.html
CVE: CVE-2012-4734
Published: 2012-11-11
Description: Request Tracker (RT) 3.8.x before 3.8.15 and 4.0.x before 4.0.8 allows remote attackers to conduct a "confused deputy" attack to bypass the CSRF warning protection mechanism and cause victims to "modify arbitrary state" via unknown vectors related to a crafted link.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://lists.bestpractical.com/pipermail/rt-announce/2012-October/000212.html; http://osvdb.org/86709; http://lists.bestpractical.com/pipermail/rt-announce/2012-October/000212.html
CVE: CVE-2012-4884
Published: 2012-11-11
Description: Argument injection vulnerability in Request Tracker (RT) 3.8.x before 3.8.15 and 4.0.x before 4.0.8 allows remote attackers to create arbitrary files via unspecified vectors related to the GnuPG client.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-94
References: http://lists.bestpractical.com/pipermail/rt-announce/2012-October/000212.html; http://www.debian.org/security/2012/dsa-2567; http://lists.bestpractical.com/pipermail/rt-announce/2012-October/000212.html
CVE: CVE-2012-5482
Published: 2012-11-11
Description: The v2 API in OpenStack Glance Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote authenticated users to delete arbitrary non-protected images via an image deletion request.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-4573.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-264
References: http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092192.html; http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00002.html; http://osvdb.org/87248
CVE: CVE-2012-5827
Published: 2012-11-11
Description: Joomla! 2.5.x before 2.5.8 and 3.0.x before 3.0.2 allows remote attackers to conduct clickjacking attacks via unspecified vectors involving "Inadequate protection."
CVSS Score: 4.3 (MEDIUM)
References: http://developer.joomla.org/security/news/[PII_REDACTED]1-core-clickjacking.html; http://developer.joomla.org/security/news/[PII_REDACTED]2-core-clickjacking.html; http://secunia.com/advisories/51187
CVE: CVE-2012-1810
Published: 2012-11-13
Description: EOSCoreScada.exe in C3-ilex EOScada before 11.0.19.2 allows remote attackers to cause a denial of service (daemon restart) by sending data to TCP port (1) 5050 or (2) 24004.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://secunia.com/advisories/51171; http://www.securityfocus.com/bid/56364; http://www.us-cert.gov/control_systems/pdf/ICSA-12-271-01.pdf
CVE: CVE-2012-1811
Published: 2012-11-13
Description: EOSDataServer.exe in C3-ilex EOScada before 11.0.19.2 allows remote attackers to cause a denial of service by sending a large amount of data to TCP port 24006.
CVSS Score: 7.8 (HIGH)
CWE: CWE-399
References: http://secunia.com/advisories/51171; http://www.securityfocus.com/bid/56364; http://www.us-cert.gov/control_systems/pdf/ICSA-12-271-01.pdf
CVE: CVE-2012-1812
Published: 2012-11-13
Description: eosfailoverservice.exe in C3-ilex EOScada before 11.0.19.2 allows remote attackers to obtain sensitive cleartext information via a session on TCP port 12000.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://secunia.com/advisories/51171; http://www.securityfocus.com/bid/56364; http://www.us-cert.gov/control_systems/pdf/ICSA-12-271-01.pdf
CVE: CVE-2012-1813
Published: 2012-11-13
Description: eosfailoverservice.exe in C3-ilex EOScada before 11.0.19.2 allows remote attackers to cause a denial of service by sending a large amount of data to TCP port 12000.
CVSS Score: 7.8 (HIGH)
CWE: CWE-399
References: http://secunia.com/advisories/51171; http://www.securityfocus.com/bid/56364; http://www.us-cert.gov/control_systems/pdf/ICSA-12-271-01.pdf
CVE: CVE-2012-5285
Published: 2012-11-13
Description: Buffer overflow in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 on Linux, before 11.1.111.19 on Android 2.x and 3.x, and before 11.1.115.20 on Android 4.x; Adobe AIR before 3.4.0.2710; and Adobe AIR SDK before 3.4.0.2710 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than other Flash Player buffer overflow CVEs listed in APSB12-22.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://osvdb.org/86874; http://www.adobe.com/support/security/bulletins/apsb12-22.html; http://www.securityfocus.com/bid/56374
CVE: CVE-2012-5286
Published: 2012-11-13
Description: Buffer overflow in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 on Linux, before 11.1.111.19 on Android 2.x and 3.x, and before 11.1.115.20 on Android 4.x; Adobe AIR before 3.4.0.2710; and Adobe AIR SDK before 3.4.0.2710 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than other Flash Player buffer overflow CVEs listed in APSB12-22.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://osvdb.org/86875; http://www.adobe.com/support/security/bulletins/apsb12-22.html; http://www.securityfocus.com/bid/56375
CVE: CVE-2012-5287
Published: 2012-11-13
Description: Buffer overflow in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 on Linux, before 11.1.111.19 on Android 2.x and 3.x, and before 11.1.115.20 on Android 4.x; Adobe AIR before 3.4.0.2710; and Adobe AIR SDK before 3.4.0.2710 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than other Flash Player buffer overflow CVEs listed in APSB12-22.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://osvdb.org/86876; http://www.adobe.com/support/security/bulletins/apsb12-22.html; http://www.securityfocus.com/bid/56376
CVE: CVE-2012-5673
Published: 2012-11-13
Description: Unspecified vulnerability in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 on Linux, before 11.1.111.19 on Android 2.x and 3.x, and before 11.1.115.20 on Android 4.x; Adobe AIR before 3.4.0.2710; and Adobe AIR SDK before 3.4.0.2710 has unknown impact and attack vectors.
CVSS Score: 10.0 (HIGH)
References: http://osvdb.org/86877; http://www.adobe.com/support/security/bulletins/apsb12-22.html; http://www.securityfocus.com/bid/56377
CVE: CVE-2012-1527
Published: 2012-11-14
Description: Integer underflow in Windows Shell in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, and Windows Server 2012 allows local users to gain privileges via a crafted briefcase, aka "Windows Briefcase Integer Underflow Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: http://secunia.com/advisories/51221; http://www.securitytracker.com/id?1027748; http://www.us-cert.gov/cas/techalerts/TA12-318A.html
CVE: CVE-2012-1528
Published: 2012-11-14
Description: Integer overflow in Windows Shell in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, and Windows Server 2012 allows local users to gain privileges via a crafted briefcase, aka "Windows Briefcase Integer Overflow Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: http://secunia.com/advisories/51221; http://www.securitytracker.com/id?1027748; http://www.us-cert.gov/cas/techalerts/TA12-318A.html
CVE: CVE-2012-1538
Published: 2012-11-14
Description: Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code via a crafted web site, aka "CFormElement Use After Free Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://secunia.com/advisories/51202; http://www.securityfocus.com/bid/56420; http://www.securitytracker.com/id?1027749
CVE: CVE-2012-1539
Published: 2012-11-14
Description: Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code via a crafted web site, aka "CTreePos Use After Free Vulnerability."
CVSS Score: 8.1 (HIGH)
CWE: CWE-399, CWE-416
References: http://secunia.com/advisories/51202; http://www.securityfocus.com/bid/56421; http://www.securitytracker.com/id?1027749
CVE: CVE-2012-1885
Published: 2012-11-14
Description: Heap-based buffer overflow in Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Office 2008 and 2011 for Mac; and Office Compatibility Pack SP2 and SP3 allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel SerAuxErrBar Heap Overflow Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/56425; http://www.securitytracker.com/id?1027752; http://www.us-cert.gov/cas/techalerts/TA12-318A.html
CVE: CVE-2012-1886
Published: 2012-11-14
Description: Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Excel Viewer; and Office Compatibility Pack SP2 and SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted spreadsheet, aka "Excel Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/56426; http://www.securitytracker.com/id?1027752; http://www.us-cert.gov/cas/techalerts/TA12-318A.html
CVE: CVE-2012-1887
Published: 2012-11-14
Description: Use-after-free vulnerability in Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 SP1, and Office 2008 and 2011 for Mac, allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel SST Invalid Length Use After Free Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://www.securityfocus.com/bid/56430; http://www.securitytracker.com/id?1027752; http://www.us-cert.gov/cas/techalerts/TA12-318A.html
CVE: CVE-2012-1895
Published: 2012-11-14
Description: The reflection implementation in Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5.1, and 4 does not properly enforce object permissions, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP) or (2) a crafted .NET Framework application, aka "Reflection Bypass Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-264
References: http://secunia.com/advisories/51236; http://www.securitytracker.com/id?1027753; http://www.us-cert.gov/cas/techalerts/TA12-318A.html
CVE: CVE-2012-1896
Published: 2012-11-14
Description: Microsoft .NET Framework 2.0 SP2 and 3.5.1 does not properly consider trust levels during construction of output data, which allows remote attackers to obtain sensitive information via (1) a crafted XAML browser application (aka XBAP) or (2) a crafted .NET Framework application, aka "Code Access Security Info Disclosure Vulnerability."
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://secunia.com/advisories/51236; http://www.securityfocus.com/bid/56456; http://www.securitytracker.com/id?1027753
CVE: CVE-2012-2519
Published: 2012-11-14
Description: Untrusted search path vulnerability in Entity Framework in ADO.NET in Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, and 4 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .NET application, aka ".NET Framework Insecure Library Loading Vulnerability."
CVSS Score: 7.9 (HIGH)
References: http://secunia.com/advisories/51236; http://www.securitytracker.com/id?1027753; http://www.us-cert.gov/cas/techalerts/TA12-318A.html