deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2013-3902
Published: 2013-12-11
Description: Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2008 R2 SP1 and Windows 7 SP1 on 64-bit platforms allows local users to gain privileges via a crafted application, aka "Win32k Use After Free Vulnerability."
CVSS Score: 7.2 (HIGH)
CWE: CWE-399
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-101; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-101
CVE: CVE-2013-3903
Published: 2013-12-11
Description: Array index error in win32k.sys in the kernel-mode drivers in Microsoft Windows 8, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to cause a denial of service (reboot) via a crafted TrueType font (TTF) file, aka "TrueType Font Parsing Vulnerability."
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-20
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-101; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-101
CVE: CVE-2013-3907
Published: 2013-12-11
Description: portcls.sys in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT allows local users to gain privileges via a crafted application, aka "Port-Class Driver Double Fetch Vulnerability."
CVSS Score: 7.2 (HIGH)
CWE: CWE-119
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-101; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-101
CVE: CVE-2013-5042
Published: 2013-12-11
Description: Cross-site scripting (XSS) vulnerability in Microsoft ASP.NET SignalR 1.1.x before 1.1.4 and 2.0.x before 2.0.1, and Visual Studio Team Foundation Server 2013, allows remote attackers to inject arbitrary web script or HTML via crafted Forever Frame transport protocol data, aka "SignalR XSS Vulnerability."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.securitytracker.com/id/1029463; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-103; http://www.securitytracker.com/id/1029463
CVE: CVE-2013-5045
Published: 2013-12-11
Description: Microsoft Internet Explorer 10 and 11 allows local users to bypass the Protected Mode protection mechanism, and consequently gain privileges, by leveraging the ability to execute sandboxed code, aka "Internet Explorer Elevation of Privilege Vulnerability."
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-20
References: http://packetstormsecurity.com/files/127245/MS13-097-Registry-Symlink-IE-Sandbox-Escape.html; http://www.exploit-db.com/exploits/33893; http://www.osvdb.org/100757
CVE: CVE-2013-5046
Published: 2013-12-11
Description: Microsoft Internet Explorer 7 through 11 allows local users to bypass the Protected Mode protection mechanism, and consequently gain privileges, by leveraging the ability to execute sandboxed code, aka "Internet Explorer Elevation of Privilege Vulnerability."
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-20
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-097; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-097
CVE: CVE-2013-5047
Published: 2013-12-11
Description: Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-5048.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-097; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-097
CVE: CVE-2013-5048
Published: 2013-12-11
Description: Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-5047.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-097; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-097
CVE: CVE-2013-5049
Published: 2013-12-11
Description: Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-097; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-097
CVE: CVE-2013-5051
Published: 2013-12-11
Description: Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-097; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-097
CVE: CVE-2013-5052
Published: 2013-12-11
Description: Microsoft Internet Explorer 7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-097; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-097
CVE: CVE-2013-5054
Published: 2013-12-11
Description: Microsoft Office 2013 and 2013 RT allows remote attackers to discover authentication tokens via a crafted response to a file-open request for an Office file on a web site, as exploited in the wild in 2013, aka "Token Hijacking Vulnerability."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-104; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-104
CVE: CVE-2013-5056
Published: 2013-12-11
Description: Use-after-free vulnerability in the Scripting Runtime Object Library in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site that is visited with Internet Explorer, aka "Use-After-Free Vulnerability in Microsoft Scripting Runtime Object Library."
CVSS Score: 9.3 (HIGH)
CWE: CWE-416
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-099; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-099
CVE: CVE-2013-5057
Published: 2013-12-11
Description: hxds.dll in Microsoft Office 2007 SP3 and 2010 SP1 and SP2 does not implement the ASLR protection mechanism, which makes it easier for remote attackers to execute arbitrary code via a crafted COM component on a web site that is visited with Internet Explorer, as exploited in the wild in December 2013, aka "HXDS ASLR Vulnerability."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-264
References: http://blogs.technet.com/b/srd/archive/2013/12/09/ms13-106-another-aslr-bypass-is-gone.aspx; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-106; http://blogs.technet.com/b/srd/archive/2013/12/09/ms13-106-another-aslr-bypass-is-gone.aspx
CVE: CVE-2013-5058
Published: 2013-12-11
Description: Integer overflow in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows local users to gain privileges via a crafted application, aka "Win32k Integer Overflow Vulnerability."
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-190
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-101; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-101
CVE: CVE-2013-5059
Published: 2013-12-11
Description: Microsoft SharePoint Server 2010 SP1 and SP2 and 2013, and Office Web Apps 2013, allows remote attackers to execute arbitrary code via crafted page content, aka "SharePoint Page Content Vulnerabilities."
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-100; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-100
CVE: CVE-2013-5072
Published: 2013-12-11
Description: Cross-site scripting (XSS) vulnerability in Outlook Web Access in Microsoft Exchange Server 2010 SP2 and SP3 and 2013 Cumulative Update 2 and 3 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "OWA XSS Vulnerability."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/64085; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-105; http://www.securityfocus.com/bid/64085
CVE: CVE-2013-5331
Published: 2013-12-11
Description: Adobe Flash Player before 11.7.700.257 and 11.8.x and 11.9.x before 11.9.900.170 on Windows and Mac OS X and before 11.2.202.332 on Linux, Adobe AIR before 3.9.0.1380, Adobe AIR SDK before 3.9.0.1380, and Adobe AIR SDK & Compiler before 3.9.0.1380 allow remote attackers to execute arbitrary code via crafted .swf content that leverages an unspecified "type confusion," as exploited in the wild in December 2013.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://helpx.adobe.com/security/products/flash-player/apsb13-28.html; http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00008.html; http://lists.opensuse.org/opensuse-updates/2013-12/msg00075.html
CVE: CVE-2013-5332
Published: 2013-12-11
Description: Adobe Flash Player before 11.7.700.257 and 11.8.x and 11.9.x before 11.9.900.170 on Windows and Mac OS X and before 11.2.202.332 on Linux, Adobe AIR before 3.9.0.1380, Adobe AIR SDK before 3.9.0.1380, and Adobe AIR SDK & Compiler before 3.9.0.1380 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://helpx.adobe.com/security/products/flash-player/apsb13-28.html; http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00008.html; http://lists.opensuse.org/opensuse-updates/2013-12/msg00075.html
CVE: CVE-2013-5333
Published: 2013-12-11
Description: Adobe Shockwave Player before 12.0.7.148 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-5334.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://helpx.adobe.com/security/products/shockwave/apsb13-29.html; http://helpx.adobe.com/security/products/shockwave/apsb13-29.html
CVE: CVE-2013-5334
Published: 2013-12-11
Description: Adobe Shockwave Player before 12.0.7.148 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-5333.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://helpx.adobe.com/security/products/shockwave/apsb13-29.html; http://helpx.adobe.com/security/products/shockwave/apsb13-29.html
CVE: CVE-2013-5609
Published: 2013-12-11
Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
CVSS Score: 9.8 (CRITICAL)
References: http://lists.fedoraproject.org/pipermail/package-announce/2013-December/123437.html; http://lists.fedoraproject.org/pipermail/package-announce/2013-December/124108.html; http://lists.fedoraproject.org/pipermail/package-announce/2013-December/124257.html
CVE: CVE-2013-5610
Published: 2013-12-11
Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 26.0 and SeaMonkey before 2.23 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
CVSS Score: 10.0 (HIGH)
CWE: CWE-787
References: http://lists.fedoraproject.org/pipermail/package-announce/2013-December/123437.html; http://lists.fedoraproject.org/pipermail/package-announce/2013-December/124108.html; http://lists.fedoraproject.org/pipermail/package-announce/2013-December/124257.html
CVE: CVE-2013-5611
Published: 2013-12-11
Description: Mozilla Firefox before 26.0 does not properly remove the Application Installation doorhanger, which makes it easier for remote attackers to spoof a Web App installation site by controlling the timing of page navigation.
CVSS Score: 5.8 (MEDIUM)
References: http://lists.fedoraproject.org/pipermail/package-announce/2013-December/123437.html; http://lists.fedoraproject.org/pipermail/package-announce/2013-December/124257.html; http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00010.html
CVE: CVE-2013-5612
Published: 2013-12-11
Description: Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 26.0 and SeaMonkey before 2.23 makes it easier for remote attackers to inject arbitrary web script or HTML by leveraging a Same Origin Policy violation triggered by lack of a charset parameter in a Content-Type HTTP header.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://lists.fedoraproject.org/pipermail/package-announce/2013-December/123437.html; http://lists.fedoraproject.org/pipermail/package-announce/2013-December/124257.html; http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00010.html
CVE: CVE-2013-5613
Published: 2013-12-11
Description: Use-after-free vulnerability in the PresShell::DispatchSynthMouseMove function in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors involving synthetic mouse movement, related to the RestyleManager::GetHoverGeneration function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: http://lists.fedoraproject.org/pipermail/package-announce/2013-December/123437.html; http://lists.fedoraproject.org/pipermail/package-announce/2013-December/124108.html; http://lists.fedoraproject.org/pipermail/package-announce/2013-December/124257.html
CVE: CVE-2013-5614
Published: 2013-12-11
Description: Mozilla Firefox before 26.0 and SeaMonkey before 2.23 do not properly consider the sandbox attribute of an IFRAME element during processing of a contained OBJECT element, which allows remote attackers to bypass intended sandbox restrictions via a crafted web site.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-1021
References: http://lists.fedoraproject.org/pipermail/package-announce/2013-December/123437.html; http://lists.fedoraproject.org/pipermail/package-announce/2013-December/124257.html; http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00010.html
CVE: CVE-2013-5615
Published: 2013-12-11
Description: The JavaScript implementation in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 does not properly enforce certain typeset restrictions on the generation of GetElementIC typed array stubs, which has unspecified impact and remote attack vectors.
CVSS Score: 9.8 (CRITICAL)
References: http://lists.fedoraproject.org/pipermail/package-announce/2013-December/123437.html; http://lists.fedoraproject.org/pipermail/package-announce/2013-December/124108.html; http://lists.fedoraproject.org/pipermail/package-announce/2013-December/124257.html
CVE: CVE-2013-5616
Published: 2013-12-11
Description: Use-after-free vulnerability in the nsEventListenerManager::HandleEventSubType function in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors related to mListeners event listeners.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: http://lists.fedoraproject.org/pipermail/package-announce/2013-December/123437.html; http://lists.fedoraproject.org/pipermail/package-announce/2013-December/124108.html; http://lists.fedoraproject.org/pipermail/package-announce/2013-December/124257.html
CVE: CVE-2013-5618
Published: 2013-12-11
Description: Use-after-free vulnerability in the nsNodeUtils::LastRelease function in the table-editing user interface in the editor component in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 allows remote attackers to execute arbitrary code by triggering improper garbage collection.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: http://lists.fedoraproject.org/pipermail/package-announce/2013-December/123437.html; http://lists.fedoraproject.org/pipermail/package-announce/2013-December/124108.html; http://lists.fedoraproject.org/pipermail/package-announce/2013-December/124257.html
CVE: CVE-2013-5619
Published: 2013-12-11
Description: Multiple integer overflows in the binary-search implementation in SpiderMonkey in Mozilla Firefox before 26.0 and SeaMonkey before 2.23 might allow remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted JavaScript code.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: http://lists.fedoraproject.org/pipermail/package-announce/2013-December/123437.html; http://lists.fedoraproject.org/pipermail/package-announce/2013-December/124257.html; http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00010.html
CVE: CVE-2013-6671
Published: 2013-12-11
Description: The nsGfxScrollFrameInner::IsLTR function in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 allows remote attackers to execute arbitrary code via crafted use of JavaScript code for ordered list elements.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: http://lists.fedoraproject.org/pipermail/package-announce/2013-December/123437.html; http://lists.fedoraproject.org/pipermail/package-announce/2013-December/124108.html; http://lists.fedoraproject.org/pipermail/package-announce/2013-December/124257.html
CVE: CVE-2013-6672
Published: 2013-12-11
Description: Mozilla Firefox before 26.0 and SeaMonkey before 2.23 on Linux allow user-assisted remote attackers to read clipboard data by leveraging certain middle-click paste operations.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://lists.fedoraproject.org/pipermail/package-announce/2013-December/123437.html; http://lists.fedoraproject.org/pipermail/package-announce/2013-December/124257.html; http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00010.html
CVE: CVE-2013-6673
Published: 2013-12-11
Description: Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 do not recognize a user's removal of trust from an EV X.509 certificate, which makes it easier for man-in-the-middle attackers to spoof SSL servers in opportunistic circumstances via a valid certificate that is unacceptable to the user.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-310
References: http://lists.fedoraproject.org/pipermail/package-announce/2013-December/123437.html; http://lists.fedoraproject.org/pipermail/package-announce/2013-December/124108.html; http://lists.fedoraproject.org/pipermail/package-announce/2013-December/124257.html
CVE: CVE-2013-6810
Published: 2013-12-12
Description: The server in Brocade Network Advisor before 12.1.0, as used in EMC Connectrix Manager Converged Network Edition (CMCNE), HP B-series SAN Network Advisor, and possibly other products, allows remote attackers to execute arbitrary code by using a servlet to upload an executable file.
CVSS Score: 10.0 (HIGH)
CWE: CWE-94
References: http://archives.neohapsis.com/archives/bugtraq/2013-12/0053.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1347&w=2; http://secunia.com/advisories/56143
CVE: CVE-2013-6986
Published: 2013-12-12
Description: The ZippyYum Subway CA Kiosk app 3.4 for iOS uses cleartext storage in SQLite cache databases, which allows attackers to obtain sensitive information by reading data elements, as demonstrated by password elements.
CVSS Score: 2.1 (LOW)
CWE: CWE-310
References: http://archives.neohapsis.com/archives/bugtraq/2013-12/0040.html; http://osvdb.org/100745; http://packetstormsecurity.com/files/124330/ZippyYum-3.4-Insecure-Data-Storage.html
CVE: CVE-2013-7030
Published: 2013-12-12
Description: The TFTP service in Cisco Unified Communications Manager (aka CUCM or Unified CM) allows remote attackers to obtain sensitive information from a phone via an RRQ operation, as demonstrated by discovering a cleartext UseUserCredential field in an SPDefault.cnf.xml file.  NOTE: the vendor reportedly disputes the significance of this report, stating that this is an expected default behavior, and that the product's documentation describes use of the TFTP Encrypted Config option in addressing this issue
CVSS Score: 7.3 (HIGH)
CWE: CWE-310
References: http://osvdb.org/100916; http://www.exploit-db.com/exploits/30237/; https://exchange.xforce.ibmcloud.com/vulnerabilities/89649
CVE: CVE-2011-4971
Published: 2013-12-12
Description: Multiple integer signedness errors in the (1) process_bin_sasl_auth, (2) process_bin_complete_sasl_auth, (3) process_bin_update, and (4) process_bin_append_prepend functions in Memcached 1.4.5 and earlier allow remote attackers to cause a denial of service (crash) via a large body length value in a packet.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-189
References: http://insecurety.net/?p=872; http://secunia.com/advisories/56183; http://www.debian.org/security/2014/dsa-2832
CVE: CVE-2013-1447
Published: 2013-12-12
Description: OpenJPEG 1.3 and earlier allows remote attackers to cause a denial of service (memory consumption or crash) via unspecified vectors related to NULL pointer dereferences, division-by-zero, and other errors.
CVSS Score: 5.0 (MEDIUM)
References: http://openjpeg.googlecode.com/svn/tags/version.1.5.2/NEWS; http://rhn.redhat.com/errata/RHSA-2013-1850.html; http://seclists.org/oss-sec/2013/q4/412
CVE: CVE-2013-1812
Published: 2013-12-12
Description: The ruby-openid gem before 2.2.2 for Ruby allows remote OpenID providers to cause a denial of service (CPU consumption) via (1) a large XRDS document or (2) an XML Entity Expansion (XEE) attack.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-399
References: http://lists.fedoraproject.org/pipermail/package-announce/2013-November/120204.html; http://lists.fedoraproject.org/pipermail/package-announce/2013-November/120361.html; http://www.openwall.com/lists/oss-security/2013/03/03/8
CVE: CVE-2013-1913
Published: 2013-12-12
Description: Integer overflow in the load_image function in file-xwd.c in the X Window Dump (XWD) plug-in in GIMP 2.6.9 and earlier, when used with glib before 2.24, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large color entries value in an X Window System (XWD) image dump.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-190
References: http://rhn.redhat.com/errata/RHSA-2013-1778.html; http://www.debian.org/security/2013/dsa-2813; http://www.securityfocus.com/bid/64105
CVE: CVE-2013-1978
Published: 2013-12-12
Description: Heap-based buffer overflow in the read_xwd_cols function in file-xwd.c in the X Window Dump (XWD) plug-in in GIMP 2.6.9 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an X Window System (XWD) image dump with more colors than color map entries.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-787
References: http://rhn.redhat.com/errata/RHSA-2013-1778.html; http://www.debian.org/security/2013/dsa-2813; http://www.securityfocus.com/bid/64098