deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2008-6385
Published: 2009-03-02
Description: Cross-site scripting (XSS) vulnerability in index.php in W3matter RevSense 1.0 allows remote attackers to inject arbitrary web script or HTML via the section parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://packetstorm.linuxsecurity.com/0812-exploits/revsense-sqlxss.txt; http://secunia.com/advisories/32996; https://exchange.xforce.ibmcloud.com/vulnerabilities/47066
CVE: CVE-2008-6386
Published: 2009-03-02
Description: Cross-site scripting (XSS) vulnerability in showads.php in Z1Exchange 1.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.org/0812-exploits/z1exchange-sqlxss.txt; http://www.securityfocus.com/bid/32598; https://exchange.xforce.ibmcloud.com/vulnerabilities/47028
CVE: CVE-2008-6387
Published: 2009-03-02
Description: Quick Tree View .NET 3.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request to qtv.mdb.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://www.vupen.com/english/advisories/2008/3293; https://exchange.xforce.ibmcloud.com/vulnerabilities/46956; https://www.exploit-db.com/exploits/7303
CVE: CVE-2008-6388
Published: 2009-03-02
Description: Rapid Classified 3.1 and 3.15 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request to cldb.mdb.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/47016; https://www.exploit-db.com/exploits/7324; https://exchange.xforce.ibmcloud.com/vulnerabilities/47016
CVE: CVE-2008-6389
Published: 2009-03-02
Description: SQL injection vulnerability in asadmin/default.asp in Rae Media Contact Management Software SOHO, Standard, and Enterprise allows remote attackers to execute arbitrary SQL commands via the Password parameter.  NOTE: some of these details are obtained from third party information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/32988; http://www.securityfocus.com/bid/32616; https://www.exploit-db.com/exploits/7333
CVE: CVE-2008-6390
Published: 2009-03-02
Description: SQL injection vulnerability in login.asp in Ocean12 Membership Manager Pro allows remote attackers to execute arbitrary SQL commands via the Password parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/32893; http://www.osvdb.org/50318; https://exchange.xforce.ibmcloud.com/vulnerabilities/46959
CVE: CVE-2008-6391
Published: 2009-03-02
Description: SQL injection vulnerability in main.asp in Jbook allows remote attackers to execute arbitrary SQL commands via the username (user parameter).
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/47033; https://exchange.xforce.ibmcloud.com/vulnerabilities/47033
CVE: CVE-2008-6392
Published: 2009-03-02
Description: SQL injection vulnerability in showads.php in Z1Exchange allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.org/0812-exploits/z1exchange-sqlxss.txt; http://www.securityfocus.com/bid/32598; https://exchange.xforce.ibmcloud.com/vulnerabilities/46938
CVE: CVE-2009-0749
Published: 2009-03-02
Description: Use-after-free vulnerability in the GIFReadNextExtension function in lib/pngxtern/gif/gifread.c in OptiPNG 0.6.2 and earlier allows context-dependent attackers to cause a denial of service (application crash) via a crafted GIF image that causes the realloc function to return a new pointer, which triggers memory corruption when the old pointer is accessed.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html; http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html; http://optipng.sourceforge.net
CVE: CVE-2009-0368
Published: 2009-03-02
Description: OpenSC before 0.11.7 allows physically proximate attackers to bypass intended PIN requirements and read private data objects via a (1) low level APDU command or (2) debugging tool, as demonstrated by reading the 4601 or 4701 file with the opensc-explorer or opensc-tool program.
CVSS Score: 2.1 (LOW)
CWE: CWE-310
References: http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html; http://openwall.com/lists/oss-security/2009/02/26/1; http://secunia.com/advisories/34052
CVE: CVE-2009-0750
Published: 2009-03-02
Description: SQL injection vulnerability in login.php in the smNews example script for txtSQL 2.2 Final allows remote attackers to execute arbitrary SQL commands via the username parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/48813; https://www.exploit-db.com/exploits/8076; https://exchange.xforce.ibmcloud.com/vulnerabilities/48813
CVE: CVE-2009-0751
Published: 2009-03-02
Description: Yaws before 1.80 allows remote attackers to cause a denial of service (memory consumption and crash) via a request with a large number of headers.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://secunia.com/advisories/33979; http://secunia.com/advisories/34239; http://www.debian.org/security/2009/dsa-1740
CVE: CVE-2009-0752
Published: 2009-03-03
Description: Unspecified vulnerability in Movable Type Pro and Community Solution 4.x before 4.24 has unknown impact and attack vectors, possibly related to the password recovery mechanism.
CVSS Score: 10.0 (HIGH)
References: http://www.movabletype.com/blog/2009/02/movable-type-424-get-updated-with-better-password-recovery.html; http://www.movabletype.com/blog/2009/02/movable-type-424-get-updated-with-better-password-recovery.html
CVE: CVE-2008-6393
Published: 2009-03-03
Description: PSI Jabber client before 0.12.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a file transfer request with a negative value in a SOCKS5 option, which bypasses a signed integer check and triggers an integer overflow and a heap-based buffer overflow.
CVSS Score: 10.0 (HIGH)
CWE: CWE-189
References: http://bugs.gentoo.org/show_bug.cgi?id=252830; http://jolmos.blogspot.com/2008/12/psi-remote-integer-overflow.html; http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html
CVE: CVE-2009-0753
Published: 2009-03-03
Description: Absolute path traversal vulnerability in MLDonkey 2.8.4 through 2.9.7 allows remote attackers to read arbitrary files via a leading "//" (double slash) in the filename.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://savannah.nongnu.org/bugs/?25667; http://secunia.com/advisories/34008; http://secunia.com/advisories/34306
CVE: CVE-2009-0754
Published: 2009-03-03
Description: PHP 4.4.4, 5.1.6, and other versions, when running on Apache, allows local users to modify behavior of other sites hosted on the same web server by modifying the mbstring.func_overload setting within .htaccess, which causes this setting to be applied to other virtual hosts on the same server.
CVSS Score: 2.1 (LOW)
CWE: CWE-134
References: http://bugs.php.net/bug.php?id=27421; http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html; http://secunia.com/advisories/34642
CVE: CVE-2009-0755
Published: 2009-03-03
Description: The FormWidgetChoice::loadDefaults function in Poppler before 0.10.4 allows remote attackers to cause a denial of service (crash) via a PDF file with an invalid Form Opt entry.
CVSS Score: 5.0 (MEDIUM)
References: http://bugs.freedesktop.org/show_bug.cgi?id=19790; http://lists.freedesktop.org/archives/poppler/2009-January/004406.html; http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html
CVE: CVE-2009-0756
Published: 2009-03-03
Description: The JBIG2Stream::readSymbolDictSeg function in Poppler before 0.10.4 allows remote attackers to cause a denial of service (crash) via a PDF file that triggers a parsing error, which is not properly handled by JBIG2SymbolDict::~JBIG2SymbolDict and triggers an invalid memory dereference.
CVSS Score: 5.0 (MEDIUM)
References: http://bugs.freedesktop.org/show_bug.cgi?id=19702; http://lists.freedesktop.org/archives/poppler/2009-January/004403.html; http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html
CVE: CVE-2009-0757
Published: 2009-03-03
Description: Multiple buffer overflows in GNU MPFR 2.4.0 allow context-dependent attackers to cause a denial of service (crash) via the (1) mpfr_snprintf and (2) mpfr_vsnprintf functions.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://mpfr.loria.fr/mpfr-2.4.1/; http://secunia.com/advisories/34204; http://secunia.com/advisories/35028
CVE: CVE-2009-0758
Published: 2009-03-03
Description: The originates_from_local_legacy_unicast_socket function in avahi-core/server.c in avahi-daemon 0.6.23 does not account for the network byte order of a port number when processing incoming multicast packets, which allows remote attackers to cause a denial of service (network bandwidth and CPU consumption) via a crafted legacy unicast mDNS query packet that triggers a multicast packet storm.
CVSS Score: 7.8 (HIGH)
CWE: CWE-399
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=517683; http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00000.html; http://secunia.com/advisories/38420
CVE: CVE-2009-0759
Published: 2009-03-03
Description: Multiple CRLF injection vulnerabilities in webadmin in ZNC before 0.066 allow remote authenticated users to modify the znc.conf configuration file and gain privileges via CRLF sequences in the quit message and other vectors.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-94
References: http://osvdb.org/52295; http://secunia.com/advisories/34230; http://www.debian.org/security/2009/dsa-1735
CVE: CVE-2009-0779
Published: 2009-03-04
Description: Buffer overflow in pppdial in IBM AIX 5.3 and 6.1 allows local users to gain privileges via a long "input string."
CVSS Score: 7.2 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/34005; http://securitytracker.com/id?1021741; http://www-01.ibm.com/support/docview.wss?uid=isg1IZ44199
CVE: CVE-2009-0780
Published: 2009-03-04
Description: The aspath_prepend function in rde_attr.c in bgpd in OpenBSD 4.3 and 4.4 allows remote attackers to cause a denial of service (application crash) via an Autonomous System (AS) advertisement containing a long AS path.
CVSS Score: 5.0 (MEDIUM)
References: http://openbsd.org/errata43.html#010_bgpd; http://openbsd.org/errata44.html#010_bgpd; http://osvdb.org/52271
CVE: CVE-2009-0801
Published: 2009-03-04
Description: Squid, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoint, which allows remote attackers to bypass access controls for Flash, Java, Silverlight, and probably other technologies, and possibly communicate with restricted intranet sites, via a crafted web page that causes a client to send HTTP requests with a modified Host header.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-264
References: http://www.kb.cert.org/vuls/id/435052; http://www.securityfocus.com/bid/33858; http://www.kb.cert.org/vuls/id/435052
CVE: CVE-2009-0802
Published: 2009-03-04
Description: Qbik WinGate, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoint, which allows remote attackers to bypass access controls for Flash, Java, Silverlight, and probably other technologies, and possibly communicate with restricted intranet sites, via a crafted web page that causes a client to send HTTP requests with a modified Host header.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-264
References: http://www.kb.cert.org/vuls/id/435052; http://www.securityfocus.com/bid/33858; http://www.kb.cert.org/vuls/id/435052
CVE: CVE-2009-0803
Published: 2009-03-04
Description: SmoothWall SmoothGuardian, as used in SmoothWall Firewall, NetworkGuardian, and SchoolGuardian 2008, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoint, which allows remote attackers to bypass access controls for Flash, Java, Silverlight, and probably other technologies, and possibly communicate with restricted intranet sites, via a crafted web page that causes a client to send HTTP requests with a modified Host header.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-264
References: http://www.kb.cert.org/vuls/id/435052; http://www.kb.cert.org/vuls/id/MAPG-7M6SM7; http://www.securityfocus.com/bid/33858
CVE: CVE-2009-0804
Published: 2009-03-04
Description: Ziproxy 2.6.0, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoint, which allows remote attackers to bypass access controls for Flash, Java, Silverlight, and probably other technologies, and possibly communicate with restricted intranet sites, via a crafted web page that causes a client to send HTTP requests with a modified Host header.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-264
References: http://www.kb.cert.org/vuls/id/435052; http://www.kb.cert.org/vuls/id/MAPG-7N9GN8; http://www.securityfocus.com/bid/33858
CVE: CVE-2008-6394
Published: 2009-03-04
Description: SQL injection vulnerability in core/user.php in CS-Cart 1.3.5 and earlier allows remote attackers to execute arbitrary SQL commands via the cs_cookies[customer_user_id] cookie parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/31686; http://www.gulftech.org/?node=research&article_id=00[PII_REDACTED]8; http://www.securityfocus.com/archive/1/495907/100/0/threaded
CVE: CVE-2008-6395
Published: 2009-03-04
Description: The web management interface in 3Com Wireless 8760 Dual Radio 11a/b/g PoE Access Point allows remote attackers to cause a denial of service (device crash) via a malformed HTTP POST request.
CVSS Score: 7.8 (HIGH)
CWE: CWE-134
References: http://lists.grok.org.uk/pipermail/full-disclosure/2008-September/064226.html; http://secunia.com/advisories/31714; http://www.securityfocus.com/bid/30988
CVE: CVE-2008-6396
Published: 2009-03-04
Description: Cross-site scripting (XSS) vulnerability in account.php in Celerondude Uploader 6.1 allows remote attackers to inject arbitrary web script or HTML via the username parameter.  NOTE: some of these details are obtained from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.org/0809-exploits/uploader6-xss.txt; http://secunia.com/advisories/31735; http://www.securityfocus.com/bid/31010
CVE: CVE-2008-6397
Published: 2009-03-04
Description: rlatex in AlcoveBook sgml2x 1.0.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-59
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496368; http://lists.debian.org/debian-devel/2008/08/msg00312.html; http://www.securityfocus.com/bid/30963
CVE: CVE-2008-6398
Published: 2009-03-04
Description: sng_regress in SNG 1.0.2 allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/recompiled$$.png, (2) /tmp/decompiled$$.sng, and (3) /tmp/canonicalized$$.sng temporary files.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-59
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496407; http://lists.debian.org/debian-devel/2008/08/msg00283.html; http://www.securityfocus.com/bid/30965
CVE: CVE-2009-0805
Published: 2009-03-04
Description: Cross-site scripting (XSS) vulnerability in piCal 0.91h and earlier, a module for XOOPS, allows remote attackers to inject arbitrary web script or HTML via the event_id parameter in index.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN91591874/index.html; http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000013.html; http://secunia.com/advisories/33986
CVE: CVE-2009-0806
Published: 2009-03-04
Description: Unspecified vulnerability in OpenGoo before 1.2.1 allows remote authenticated users to modify their own permissions via unknown attack vectors.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-264
References: http://secunia.com/advisories/34044; http://sourceforge.net/project/shownotes.php?release_id=663706; http://www.securityfocus.com/bid/33897
CVE: CVE-2009-0807
Published: 2009-03-04
Description: zFeeder 1.6 allows remote attackers to gain administrative access via a direct request to admin.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/48866; https://www.exploit-db.com/exploits/8092; https://exchange.xforce.ibmcloud.com/vulnerabilities/48866
CVE: CVE-2009-0808
Published: 2009-03-04
Description: Multiple SQL injection vulnerabilities in SimpleCMMS before 0.1.0 allow remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://sourceforge.net/project/shownotes.php?release_id=661656&group_id=245458; http://www.vupen.com/english/advisories/2009/0490; https://exchange.xforce.ibmcloud.com/vulnerabilities/48883
CVE: CVE-2009-0809
Published: 2009-03-04
Description: The Web Editor in Dassault Systemes ENOVIA SmarTeam V5 before Release 18 Service Pack 8, and possibly CATIA and other products, allows remote authenticated users to read the profile card of an object in the document class via a link that is sent from the owner of the document object.
CVSS Score: 3.5 (LOW)
CWE: CWE-264
References: http://secunia.com/advisories/34037; http://www-01.ibm.com/support/docview.wss?uid=swg1HD80332; http://www.securityfocus.com/bid/33895
CVE: CVE-2009-0810
Published: 2009-03-04
Description: SQL injection vulnerability in login.php in xGuestbook 2.0 allows remote attackers to execute arbitrary SQL commands via the user parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.securityfocus.com/bid/33875; http://www.vupen.com/english/advisories/2009/0523; https://exchange.xforce.ibmcloud.com/vulnerabilities/48881
CVE: CVE-2009-0811
Published: 2009-03-04
Description: Insecure method vulnerability in the SopCast SopCore ActiveX control in sopocx.ocx 3.0.3.501 allows remote attackers to execute arbitrary programs via an executable file name in the argument to the SetExternalPlayer method.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://retrogod.altervista.org/9sg_sopcastia.html; http://www.securityfocus.com/archive/1/501252/100/0/threaded; http://www.securityfocus.com/bid/33920
CVE: CVE-2009-0812
Published: 2009-03-04
Description: Stack-based buffer overflow in BreakPoint Software Hex Workshop 4.23, 6.0.1.4603, and other 6.x and earlier versions allows remote attackers to execute arbitrary code via a crafted Intel Hex Code (.hex) file. NOTE: some of these details are obtained from third party information.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/34021; http://www.exploit-db.com/exploits/9550; http://www.securityfocus.com/archive/1/501300/100/0/threaded
CVE: CVE-2009-0037
Published: 2009-03-05
Description: The redirect implementation in curl and libcurl 5.11 through 7.19.3, when CURLOPT_FOLLOWLOCATION is enabled, accepts arbitrary Location values, which might allow remote HTTP servers to (1) trigger arbitrary requests to intranet servers, (2) read or overwrite arbitrary files via a redirect to a file: URL, or (3) execute arbitrary commands via a redirect to an scp: URL.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://curl.haxx.se/docs/adv_20090303.html; http://curl.haxx.se/lxr/source/CHANGES; http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html
CVE: CVE-2009-0186
Published: 2009-03-05
Description: Integer overflow in libsndfile 1.0.18, as used in Winamp and other products, allows context-dependent attackers to execute arbitrary code via crafted description chunks in a CAF audio file, leading to a heap-based buffer overflow.
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html; http://secunia.com/advisories/33980; http://secunia.com/advisories/33981
CVE: CVE-2009-0365
Published: 2009-03-05
Description: nm-applet.conf in GNOME NetworkManager before 0.7.0.99 contains an incorrect deny setting, which allows local users to discover (1) network connection passwords and (2) pre-shared keys via calls to the GetSecrets method in the dbus request handler.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-264
References: http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html; http://secunia.com/advisories/34067
CVE: CVE-2009-0367
Published: 2009-03-05
Description: The Python AI module in Wesnoth 1.4.x and 1.5 before 1.5.11 allows remote attackers to escape the sandbox and execute arbitrary code by using a whitelisted module that imports an unsafe module, then using a hierarchical module name to access the unsafe module through the whitelisted module.
CVSS Score: 9.3 (HIGH)
CWE: CWE-264
References: http://launchpad.net/bugs/335089; http://launchpad.net/bugs/336396; http://launchpad.net/bugs/cve/2009-0367
CVE: CVE-2009-0578
Published: 2009-03-05
Description: GNOME NetworkManager before 0.7.0.99 does not properly verify privileges for dbus (1) modify and (2) delete requests, which allows local users to change or remove the network connections of arbitrary users via unspecified vectors related to org.freedesktop.NetworkManagerUserSettings and at_console.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-264
References: http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html; http://secunia.com/advisories/34067
CVE: CVE-2009-0619
Published: 2009-03-05
Description: Unspecified vulnerability in the Session Border Controller (SBC) before 3.0(2) for Cisco 7600 series routers allows remote attackers to cause a denial of service (SBC card reload) via crafted packets to TCP port 2000.
CVSS Score: 7.8 (HIGH)
References: http://www.cisco.com/en/US/products/products_security_advisory09186a0080a80faa.shtml; http://www.securityfocus.com/bid/33975; http://www.securitytracker.com/id?1021787
CVE: CVE-2009-0771
Published: 2009-03-05
Description: The layout engine in Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey 1.1.15 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via certain vectors that trigger memory corruption and assertion failures.
CVSS Score: 10.0 (HIGH)
CWE: CWE-399
References: http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00002.html; http://secunia.com/advisories/34140; http://secunia.com/advisories/34145
CVE: CVE-2009-0772
Published: 2009-03-05
Description: The layout engine in Mozilla Firefox 2 and 3 before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey 1.1.15 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to nsCSSStyleSheet::GetOwnerNode, events, and garbage collection, which triggers memory corruption.
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00002.html; http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00009.html; http://secunia.com/advisories/34137
CVE: CVE-2009-0773
Published: 2009-03-05
Description: The JavaScript engine in Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey 1.1.15 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) a splice of an array that contains "some non-set elements," which causes jsarray.cpp to pass an incorrect argument to the ResizeSlots function, which triggers memory corruption; (2) vectors related to js_DecompileValueGenerator, jsopcode.cpp, __defineSetter__, and watch, which triggers an assertion failure or a segmentation fault; and (3) vectors related to gczeal, __defineSetter__, and watch, which triggers a hang.
CVSS Score: 10.0 (HIGH)
CWE: CWE-399
References: http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00002.html; http://secunia.com/advisories/34140; http://secunia.com/advisories/34145