deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2008-7292
Published: 2011-08-09
Description: Bugzilla 2.20.x before 2.20.5, 2.22.x before 2.22.3, and 3.0.x before 3.0.3 on Windows does not delete the temporary files associated with uploaded attachments, which allows local users to obtain sensitive information by reading these files, a different vulnerability than CVE-2011-2977.
CVSS Score: 2.1 (LOW)
CWE: CWE-200
References: https://bugzilla.mozilla.org/show_bug.cgi?id=414002; https://bugzilla.mozilla.org/show_bug.cgi?id=660502; https://bugzilla.mozilla.org/show_bug.cgi?id=414002
CVE: CVE-2008-7293
Published: 2011-08-09
Description: Mozilla Firefox before 4 cannot properly restrict modifications to cookies established in HTTPS sessions, which allows man-in-the-middle attackers to overwrite or delete arbitrary cookies via a Set-Cookie header in an HTTP response, related to lack of the HTTP Strict Transport Security (HSTS) includeSubDomains feature, aka a "cookie forcing" issue.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-264
References: http://code.google.com/p/browsersec/wiki/Part2#Same-origin_policy_for_cookies; http://hacks.mozilla.org/2010/08/firefox-4-http-strict-transport-security-force-https/; http://michael-coates.blogspot.com/2010/01/cookie-forcing-trust-your-cookies-no.html
CVE: CVE-2008-7294
Published: 2011-08-09
Description: Google Chrome before 4.0.211.0 cannot properly restrict modifications to cookies established in HTTPS sessions, which allows man-in-the-middle attackers to overwrite or delete arbitrary cookies via a Set-Cookie header in an HTTP response, related to lack of the HTTP Strict Transport Security (HSTS) includeSubDomains feature, aka a "cookie forcing" issue.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-264
References: http://code.google.com/p/browsersec/wiki/Part2#Same-origin_policy_for_cookies; http://lists.w3.org/Archives/Public/public-webapps/2009JulSep/1148.html; http://michael-coates.blogspot.com/2010/01/cookie-forcing-trust-your-cookies-no.html
CVE: CVE-2008-7295
Published: 2011-08-09
Description: Microsoft Internet Explorer cannot properly restrict modifications to cookies established in HTTPS sessions, which allows man-in-the-middle attackers to overwrite or delete arbitrary cookies via a Set-Cookie header in an HTTP response, related to lack of the HTTP Strict Transport Security (HSTS) includeSubDomains feature, aka a "cookie forcing" issue.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-264
References: http://code.google.com/p/browsersec/wiki/Part2#Same-origin_policy_for_cookies; http://michael-coates.blogspot.com/2010/01/cookie-forcing-trust-your-cookies-no.html; http://scarybeastsecurity.blogspot.com/2008/11/cookie-forcing.html
CVE: CVE-2008-7296
Published: 2011-08-09
Description: Apple Safari cannot properly restrict modifications to cookies established in HTTPS sessions, which allows man-in-the-middle attackers to overwrite or delete arbitrary cookies via a Set-Cookie header in an HTTP response, related to lack of the HTTP Strict Transport Security (HSTS) includeSubDomains feature, aka a "cookie forcing" issue.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-264
References: http://code.google.com/p/browsersec/wiki/Part2#Same-origin_policy_for_cookies; http://michael-coates.blogspot.com/2010/01/cookie-forcing-trust-your-cookies-no.html; http://scarybeastsecurity.blogspot.com/2008/11/cookie-forcing.html
CVE: CVE-2008-7297
Published: 2011-08-09
Description: Opera cannot properly restrict modifications to cookies established in HTTPS sessions, which allows man-in-the-middle attackers to overwrite or delete arbitrary cookies via a Set-Cookie header in an HTTP response, related to lack of the HTTP Strict Transport Security (HSTS) includeSubDomains feature, aka a "cookie forcing" issue.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-264
References: http://code.google.com/p/browsersec/wiki/Part2#Same-origin_policy_for_cookies; http://michael-coates.blogspot.com/2010/01/cookie-forcing-trust-your-cookies-no.html; http://scarybeastsecurity.blogspot.com/2008/11/cookie-forcing.html
CVE: CVE-2008-7298
Published: 2011-08-09
Description: The Android browser in Android cannot properly restrict modifications to cookies established in HTTPS sessions, which allows man-in-the-middle attackers to overwrite or delete arbitrary cookies via a Set-Cookie header in an HTTP response, related to lack of the HTTP Strict Transport Security (HSTS) includeSubDomains feature, aka a "cookie forcing" issue.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-264
References: http://code.google.com/p/browsersec/wiki/Part2#Same-origin_policy_for_cookies; http://michael-coates.blogspot.com/2010/01/cookie-forcing-trust-your-cookies-no.html; http://scarybeastsecurity.blogspot.com/2008/11/cookie-forcing.html
CVE: CVE-2011-2379
Published: 2011-08-09
Description: Cross-site scripting (XSS) vulnerability in Bugzilla 2.4 through 2.22.7, 3.0.x through 3.3.x, 3.4.x before 3.4.12, 3.5.x, 3.6.x before 3.6.6, 3.7.x, 4.0.x before 4.0.2, and 4.1.x before 4.1.3, when Internet Explorer before 9 or Safari before 5.0.6 is used for Raw Unified mode, allows remote attackers to inject arbitrary web script or HTML via a crafted patch, related to content sniffing.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/45501; http://www.bugzilla.org/security/3.4.11/; http://www.debian.org/security/2011/dsa-2322
CVE: CVE-2011-2380
Published: 2011-08-09
Description: Bugzilla 2.23.3 through 2.22.7, 3.0.x through 3.3.x, 3.4.x before 3.4.12, 3.5.x, 3.6.x before 3.6.6, 3.7.x, 4.0.x before 4.0.2, and 4.1.x before 4.1.3 allows remote attackers to determine the existence of private group names via a crafted parameter during (1) bug creation or (2) bug editing.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://secunia.com/advisories/45501; http://www.bugzilla.org/security/3.4.11/; http://www.debian.org/security/2011/dsa-2322
CVE: CVE-2011-2381
Published: 2011-08-09
Description: CRLF injection vulnerability in Bugzilla 2.17.1 through 2.22.7, 3.0.x through 3.3.x, 3.4.x before 3.4.12, 3.5.x, 3.6.x before 3.6.6, 3.7.x, 4.0.x before 4.0.2, and 4.1.x before 4.1.3 allows remote attackers to inject arbitrary e-mail headers via an attachment description in a flagmail notification.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-94
References: http://secunia.com/advisories/45501; http://www.bugzilla.org/security/3.4.11/; http://www.debian.org/security/2011/dsa-2322
CVE: CVE-2011-2976
Published: 2011-08-09
Description: Cross-site scripting (XSS) vulnerability in Bugzilla 2.16rc1 through 2.22.7, 3.0.x through 3.3.x, and 3.4.x before 3.4.12 allows remote attackers to inject arbitrary web script or HTML via vectors involving a BUGLIST cookie.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/45501; http://www.bugzilla.org/security/3.4.11/; http://www.osvdb.org/74303
CVE: CVE-2011-2977
Published: 2011-08-09
Description: Bugzilla 3.6.x before 3.6.6, 3.7.x, 4.0.x before 4.0.2, and 4.1.x before 4.1.3 on Windows does not delete the temporary files associated with uploaded attachments, which allows local users to obtain sensitive information by reading these files.  NOTE: this issue exists because of a regression in 3.6.
CVSS Score: 2.1 (LOW)
References: http://secunia.com/advisories/45501; http://www.bugzilla.org/security/3.4.11/; http://www.osvdb.org/74302
CVE: CVE-2011-2978
Published: 2011-08-09
Description: Bugzilla 2.16rc1 through 2.22.7, 3.0.x through 3.3.x, 3.4.x before 3.4.12, 3.5.x, 3.6.x before 3.6.6, 3.7.x, 4.0.x before 4.0.2, and 4.1.x before 4.1.3 does not prevent changes to the confirmation e-mail address (aka old_email field) for e-mail change notifications, which makes it easier for remote attackers to perform arbitrary address changes by leveraging an unattended workstation.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://secunia.com/advisories/45501; http://www.bugzilla.org/security/3.4.11/; http://www.debian.org/security/2011/dsa-2322
CVE: CVE-2011-2979
Published: 2011-08-09
Description: Bugzilla 4.1.x before 4.1.3 generates different responses for certain assignee queries depending on whether the group name is valid, which allows remote attackers to determine the existence of private group names via a custom search.  NOTE: this vulnerability exists because of a CVE-2010-2756 regression.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/45501; http://www.bugzilla.org/security/3.4.11/; http://www.debian.org/security/2011/dsa-2322
CVE: CVE-2011-3012
Published: 2011-08-09
Description: The ioQuake3 engine, as used in World of Padman 1.2 and earlier, Tremulous 1.1.0, and ioUrbanTerror 2007-12-20, does not check for dangerous file extensions before writing to the quake3 directory, which allows remote attackers to execute arbitrary code via a crafted third-party addon that creates a Trojan horse DLL file, a different vulnerability than CVE-2011-2764.
CVSS Score: 10.0 (HIGH)
CWE: CWE-20
References: http://archives.neohapsis.com/archives/fulldisclosure/2011-07/0338.html; http://securityreason.com/securityalert/8324; http://www.securityfocus.com/archive/1/519051/100/0/threaded
CVE: CVE-2011-2221
Published: 2011-08-09
Description: The Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 allows remote attackers to bypass WebAdmin authentication and obtain sensitive GroupWise information via unspecified vectors.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://secunia.com/advisories/45527; http://www.novell.com/support/viewContent.do?externalId=7009053; http://www.securityfocus.com/bid/49069
CVE: CVE-2011-2222
Published: 2011-08-09
Description: Session fixation vulnerability in WebAdmin in the Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 allows remote attackers to hijack web sessions via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/45527; http://www.novell.com/support/viewContent.do?externalId=7009054; http://www.securityfocus.com/bid/49069
CVE: CVE-2011-2223
Published: 2011-08-09
Description: The Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 sends the Admin LDAP password in cleartext, which allows remote attackers to obtain sensitive information by sniffing the network.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-310
References: http://secunia.com/advisories/45527; http://www.novell.com/support/viewContent.do?externalId=7009055; http://www.securityfocus.com/bid/49069
CVE: CVE-2011-2224
Published: 2011-08-09
Description: The Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 does not include the HTTPOnly flag in a Set-Cookie header, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/45527; http://www.novell.com/support/viewContent.do?externalId=7009058; http://www.securityfocus.com/bid/49069
CVE: CVE-2011-2589
Published: 2011-08-09
Description: Heap-based buffer overflow in the SendLogAction method in the UUPlayer ActiveX control 6.0.0.1 in UUSee 2010 6.11.0609.2 might allow remote attackers to execute arbitrary code via a long argument.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/44885; http://secunia.com/secunia_research/2011-60/; http://www.osvdb.org/74216
CVE: CVE-2011-2590
Published: 2011-08-09
Description: The Play method in the UUPlayer ActiveX control 6.0.0.1 in UUSee 2010 6.11.0609.2 allows remote attackers to execute arbitrary programs via a UNC share pathname in the MPlayerPath parameter.
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://secunia.com/advisories/44885; http://secunia.com/secunia_research/2011-59/; http://www.osvdb.org/74217
CVE: CVE-2011-3013
Published: 2011-08-09
Description: WebAdmin in the Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 supports weak SSL ciphers, which makes it easier for remote attackers to obtain access via a brute-force attack.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-310
References: http://www.novell.com/support/viewContent.do?externalId=7009056; https://exchange.xforce.ibmcloud.com/vulnerabilities/69168; http://www.novell.com/support/viewContent.do?externalId=7009056
CVE: CVE-2011-3014
Published: 2011-08-09
Description: The Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 does not properly restrict caching of HTTPS responses, which makes it easier for remote attackers to obtain sensitive information by leveraging an unattended workstation.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://www.novell.com/support/viewContent.do?externalId=7009057; https://exchange.xforce.ibmcloud.com/vulnerabilities/69167; http://www.novell.com/support/viewContent.do?externalId=7009057
CVE: CVE-2011-2178
Published: 2011-08-10
Description: The virSecurityManagerGetPrivateData function in security/security_manager.c in libvirt 0.8.8 through 0.9.1 uses the wrong argument for a sizeof call, which causes incorrect processing of "security manager private data" that "reopens disk probing" and might allow guest OS users to read arbitrary files on the host OS.  NOTE: this vulnerability exists because of a CVE-2010-2238 regression.
CVSS Score: 4.4 (MEDIUM)
References: http://libvirt.org/news.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062515.html; http://lists.opensuse.org/opensuse-updates/2011-06/msg00030.html
CVE: CVE-2011-2511
Published: 2011-08-10
Description: Integer overflow in libvirt before 0.9.3 allows remote authenticated users to cause a denial of service (libvirtd crash) and possibly execute arbitrary code via a crafted VirDomainGetVcpus RPC call that triggers memory corruption.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-189
References: http://libvirt.org/news.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062515.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062855.html
CVE: CVE-2011-3006
Published: 2011-08-10
Description: The MyAsUtil ActiveX control in MyAsUtil5.2.0.603.dll in McAfee SaaS Endpoint Protection 5.2.1 and earlier allows remote attackers to bypass the MyASUtil.SecureObjectFactory.CreateSecureObject domain execution policy using a cross-site scripting (XSS) attack, execute arbitrary code using the MyASUtil.InstallInfo.RunUserProgram function, and possibly conduct other unspecified attacks.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-264
References: http://dvlabs.tippingpoint.com/advisory/TPTI-11-12; http://osvdb.org/74512; https://exchange.xforce.ibmcloud.com/vulnerabilities/69094
CVE: CVE-2011-3007
Published: 2011-08-10
Description: The myCIOScn ActiveX control (myCIOScn.dll) in McAfee SaaS Endpoint Protection 5.2.1 and earlier allows remote attackers to write to arbitrary files by specifying an arbitrary filename in the MyCioScan.Scan.ReportFile parameter, as demonstrated by injecting script into a log file and executing arbitrary code using the MyCioScan.Scan.Start method.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://dvlabs.tippingpoint.com/advisory/TPTI-11-13; http://osvdb.org/74513; https://exchange.xforce.ibmcloud.com/vulnerabilities/69093
CVE: CVE-2011-3122
Published: 2011-08-10
Description: Unspecified vulnerability in WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 has unknown impact and attack vectors related to "Media security."
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/49138; http://wordpress.org/news/2011/05/wordpress-3-1-3/; http://www.debian.org/security/2012/dsa-2470
CVE: CVE-2011-3123
Published: 2011-08-10
Description: IBM InfoSphere Information Server 8.5 and 8.5.0.1 on Unix and Linux, as used in IBM InfoSphere DataStage 8.5 and 8.5.0.1 and other products, uses weak permissions for unspecified files, which allows local users to gain privileges via unknown vectors.
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://secunia.com/advisories/45036; http://www-01.ibm.com/support/docview.wss?uid=swg1JR39769; http://www.ibm.com/support/docview.wss?uid=swg21504279
CVE: CVE-2011-3124
Published: 2011-08-10
Description: IBM InfoSphere Information Server 8.5 and 8.5.0.1 on Unix and Linux, as used in IBM InfoSphere DataStage 8.5 and 8.5.0.1 and other products, assigns incorrect ownership to unspecified files, which allows local users to gain privileges via unknown vectors.
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://secunia.com/advisories/45036; http://www-01.ibm.com/support/docview.wss?uid=swg1JR39769; http://www.ibm.com/support/docview.wss?uid=swg21504279
CVE: CVE-2011-1257
Published: 2011-08-10
Description: Race condition in Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via vectors involving access to an object, aka "Window Open Race Condition Vulnerability."
CVSS Score: 7.6 (HIGH)
CWE: CWE-362
References: http://www.us-cert.gov/cas/techalerts/TA11-221A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-057; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12787
CVE: CVE-2011-1263
Published: 2011-08-10
Description: Cross-site scripting (XSS) vulnerability in the logon page in Remote Desktop Web Access (RD Web Access) in Microsoft Windows Server 2008 R2 and R2 SP1 allows remote attackers to inject arbitrary web script or HTML via the URI, aka "Remote Desktop Web Access Vulnerability."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.us-cert.gov/cas/techalerts/TA11-221A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-061; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12792
CVE: CVE-2011-1871
Published: 2011-08-10
Description: Tcpip.sys in the TCP/IP stack in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to cause a denial of service (reboot) via a series of crafted ICMP messages, aka "ICMP Denial of Service Vulnerability."
CVSS Score: 7.8 (HIGH)
CWE: CWE-399
References: http://www.us-cert.gov/cas/techalerts/TA11-221A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-064; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12971
CVE: CVE-2011-1960
Published: 2011-08-10
Description: Microsoft Internet Explorer 6 through 9 does not properly implement JavaScript event handlers, which allows remote attackers to access content from a different (1) domain or (2) zone via unspecified script code, aka "Event Handlers Information Disclosure Vulnerability."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-668
References: http://www.us-cert.gov/cas/techalerts/TA11-221A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-057; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12383
CVE: CVE-2011-1961
Published: 2011-08-10
Description: The telnet URI handler in Microsoft Internet Explorer 6 through 9 does not properly launch the handler application, which allows remote attackers to execute arbitrary programs via a crafted web site, aka "Telnet Handler Remote Code Execution Vulnerability."
CVSS Score: 9.3 (HIGH)
References: http://jvn.jp/en/jp/JVN80404511/index.html; http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000060.html; http://www.us-cert.gov/cas/techalerts/TA11-221A.html
CVE: CVE-2011-1962
Published: 2011-08-10
Description: Microsoft Internet Explorer 6 through 9 does not properly handle unspecified character sequences, which allows remote attackers to read content from a different (1) domain or (2) zone via a crafted web site that triggers "inactive filtering," aka "Shift JIS Character Encoding Vulnerability."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-057; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12657; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-057
CVE: CVE-2011-1963
Published: 2011-08-10
Description: Microsoft Internet Explorer 7 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, aka "XSLT Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-908
References: http://www.us-cert.gov/cas/techalerts/TA11-221A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-057; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12753
CVE: CVE-2011-1964
Published: 2011-08-10
Description: Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, aka "Style Object Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-908
References: http://www.us-cert.gov/cas/techalerts/TA11-221A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-057; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12617
CVE: CVE-2011-1965
Published: 2011-08-10
Description: Tcpip.sys in the TCP/IP stack in Microsoft Windows 7 Gold and SP1 and Windows Server 2008 R2 and R2 SP1 does not properly implement URL-based QoS, which allows remote attackers to cause a denial of service (reboot) via a crafted URL to a web server, aka "TCP/IP QOS Denial of Service Vulnerability."
CVSS Score: 7.1 (HIGH)
CWE: CWE-399
References: http://securityreason.com/securityalert/8474; http://www.us-cert.gov/cas/techalerts/TA11-221A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-064
CVE: CVE-2011-1966
Published: 2011-08-10
Description: The DNS server in Microsoft Windows Server 2008 SP2, R2, and R2 SP1 does not properly handle NAPTR queries that trigger recursive processing, which allows remote attackers to execute arbitrary code via a crafted query, aka "DNS NAPTR Query Vulnerability."
CVSS Score: 10.0 (HIGH)
CWE: CWE-20
References: http://www.us-cert.gov/cas/techalerts/TA11-221A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-058; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12764
CVE: CVE-2011-1967
Published: 2011-08-10
Description: Winsrv.dll in the Client/Server Run-time Subsystem (aka CSRSS) in the Win32 subsystem in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly check permissions for sending inter-process device-event messages from low-integrity processes to high-integrity processes, which allows local users to gain privileges via a crafted application, aka "CSRSS Vulnerability."
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://www.us-cert.gov/cas/techalerts/TA11-221A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-063; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12911
CVE: CVE-2011-1968
Published: 2011-08-10
Description: The Remote Desktop Protocol (RDP) implementation in Microsoft Windows XP SP2 and SP3 and Windows Server 2003 SP2 does not properly process packets in memory, which allows remote attackers to cause a denial of service (reboot) by sending crafted RDP packets triggering access to an object that (1) was not properly initialized or (2) is deleted, as exploited in the wild in 2011, aka "Remote Desktop Protocol Vulnerability."
CVSS Score: 7.1 (HIGH)
CWE: CWE-399
References: http://www.us-cert.gov/cas/techalerts/TA11-221A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-065; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12806