deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2013-3116
Published: 2013-06-12
Description: Microsoft Internet Explorer 7 through 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.us-cert.gov/ncas/alerts/TA13-168A; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-047; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16914
CVE: CVE-2013-3117
Published: 2013-06-12
Description: Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3122 and CVE-2013-3124.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.us-cert.gov/ncas/alerts/TA13-168A; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-047; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16393
CVE: CVE-2013-3118
Published: 2013-06-12
Description: Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3120 and CVE-2013-3125.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.us-cert.gov/ncas/alerts/TA13-168A; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-047; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16917
CVE: CVE-2013-3119
Published: 2013-06-12
Description: Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3114.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.us-cert.gov/ncas/alerts/TA13-168A; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-047; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16860
CVE: CVE-2013-3120
Published: 2013-06-12
Description: Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3118 and CVE-2013-3125.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://blog.skylined.nl/[PII_REDACTED]1.html; http://www.us-cert.gov/ncas/alerts/TA13-168A; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-047
CVE: CVE-2013-3121
Published: 2013-06-12
Description: Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3112, CVE-2013-3113, CVE-2013-3139, and CVE-2013-3142.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.us-cert.gov/ncas/alerts/TA13-168A; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-047; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16875
CVE: CVE-2013-3122
Published: 2013-06-12
Description: Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3117 and CVE-2013-3124.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.us-cert.gov/ncas/alerts/TA13-168A; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-047; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16352
CVE: CVE-2013-3123
Published: 2013-06-12
Description: Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3111.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.us-cert.gov/ncas/alerts/TA13-168A; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-047; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16655
CVE: CVE-2013-3124
Published: 2013-06-12
Description: Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3117 and CVE-2013-3122.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.us-cert.gov/ncas/alerts/TA13-168A; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-047; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16720
CVE: CVE-2013-3125
Published: 2013-06-12
Description: Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3118 and CVE-2013-3120.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.us-cert.gov/ncas/alerts/TA13-168A; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-047; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16858
CVE: CVE-2013-3126
Published: 2013-06-12
Description: Microsoft Internet Explorer 9 and 10, when script debugging is enabled, does not properly handle objects in memory during the processing of script, which allows remote attackers to execute arbitrary code via a crafted web site, aka "Internet Explorer Script Debug Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-047; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16687; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-047
CVE: CVE-2013-3136
Published: 2013-06-12
Description: The kernel in Microsoft Windows XP SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, Windows 7 SP1, and Windows 8 on 32-bit platforms does not properly handle unspecified page-fault system calls, which allows local users to obtain sensitive information from kernel memory via a crafted application, aka "Kernel Information Disclosure Vulnerability."
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-399
References: http://www.us-cert.gov/ncas/alerts/TA13-168A; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-048; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16847
CVE: CVE-2013-3138
Published: 2013-06-12
Description: Integer overflow in the TCP/IP kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT allows remote attackers to cause a denial of service (system hang) via crafted TCP packets, aka "TCP/IP Integer Overflow Vulnerability."
CVSS Score: 7.1 (HIGH)
CWE: CWE-189
References: http://www.us-cert.gov/ncas/alerts/TA13-168A; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-049; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16943
CVE: CVE-2013-3139
Published: 2013-06-12
Description: Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3112, CVE-2013-3113, CVE-2013-3121, and CVE-2013-3142.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.us-cert.gov/ncas/alerts/TA13-168A; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-047; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16517
CVE: CVE-2013-3141
Published: 2013-06-12
Description: Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3110.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.us-cert.gov/ncas/alerts/TA13-168A; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-047; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15981
CVE: CVE-2013-3142
Published: 2013-06-12
Description: Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3112, CVE-2013-3113, CVE-2013-3121, and CVE-2013-3139.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.us-cert.gov/ncas/alerts/TA13-168A; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-047; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16704
CVE: CVE-2013-3343
Published: 2013-06-12
Description: Adobe Flash Player before 10.3.183.90 and 11.x before 11.7.700.224 on Windows, before 10.3.183.90 and 11.x before 11.7.700.225 on Mac OS X, before 10.3.183.90 and 11.x before 11.2.202.291 on Linux, before 11.1.111.59 on Android 2.x and 3.x, and before 11.1.115.63 on Android 4.x; Adobe AIR before 3.7.0.2090 on Windows and Android and before 3.7.0.2100 on Mac OS X; and Adobe AIR SDK & Compiler before 3.7.0.2090 on Windows and before 3.7.0.2100 on Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00016.html; http://lists.opensuse.org/opensuse-updates/2013-06/msg00164.html; http://lists.opensuse.org/opensuse-updates/2013-06/msg00179.html
CVE: CVE-2013-3380
Published: 2013-06-12
Description: The administrative web interface in the Access Control Server in Cisco Secure Access Control System (ACS) does not properly restrict the report view page, which allows remote authenticated users to obtain sensitive information via a direct request, aka Bug ID CSCue79279.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-200
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3380; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3380
CVE: CVE-2013-3381
Published: 2013-06-12
Description: Cisco Hosted Collaboration Mediation allows remote attackers to cause a denial of service (CPU consumption) via a flood of malformed UDP packets on port 162, aka Bug ID CSCug85756.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3381; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3381
CVE: CVE-2013-1355
Published: 2013-06-13
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: The CNA or individual who requested this candidate subsequently withdrew it.  Notes: none
CVE: CVE-2013-3970
Published: 2013-06-13
Description: Juniper Junos Pulse Secure Access Service (aka SSL VPN) with IVE OS 7.0r2 through 7.0r8 and 7.1r1 through 7.1r5 and Junos Pulse Access Control Service (aka UAC) with UAC OS 4.1r1 through 4.1r5 include a test Certification Authority (CA) certificate in the Trusted Server CAs list, which makes it easier for man-in-the-middle attackers to spoof SSL servers by leveraging control over that test CA.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-310
References: http://kb.juniper.net/JSA10571; http://kb.juniper.net/JSA10571
CVE: CVE-2013-3375
Published: 2013-06-14
Description: Cross-site scripting (XSS) vulnerability in the portal page in Cisco Prime Central for Hosted Collaboration Solution allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCue23798.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3375; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3375
CVE: CVE-2013-3376
Published: 2013-06-14
Description: Open redirect vulnerability in the help page in Cisco Video Surveillance Operations Manager allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL, aka Bug ID CSCty74490.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3376; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3376
CVE: CVE-2013-3573
Published: 2013-06-14
Description: HP Insight Diagnostics 9.4.0.4710 allows remote attackers to conduct unspecified injection attacks via unknown vectors.
CVSS Score: 10.0 (HIGH)
CWE: CWE-20
References: http://www.kb.cert.org/vuls/id/324668; http://www.kb.cert.org/vuls/id/324668
CVE: CVE-2013-3574
Published: 2013-06-14
Description: Absolute path traversal vulnerability in hpdiags/frontend2/commands/saveCompareConfig.php in HP Insight Diagnostics 9.4.0.4710 allows remote attackers to write data to arbitrary files via a full pathname in the argument to the devicePath (aka mount) parameter.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://www.kb.cert.org/vuls/id/324668; http://www.kb.cert.org/vuls/id/324668
CVE: CVE-2013-3575
Published: 2013-06-14
Description: hpdiags/frontend2/help/pageview.php in HP Insight Diagnostics 9.4.0.4710 does not properly restrict PHP include or require statements, which allows remote attackers to include arbitrary hpdiags/frontend2/help/ .html files via the path parameter.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://www.kb.cert.org/vuls/id/324668; http://www.kb.cert.org/vuls/id/324668
CVE: CVE-2013-3645
Published: 2013-06-14
Description: Cross-site scripting (XSS) vulnerability in the Orchard.Comments module in Orchard before 1.6.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://docs.orchardproject.net/Documentation/Patch-4-30-2013; http://jvn.jp/en/jp/JVN53622030/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2013-000057
CVE: CVE-2013-2336
Published: 2013-06-14
Description: HP Service Manager 7.11, 9.21, 9.30, and 9.31, and ServiceCenter 6.2.8, allows remote attackers to obtain sensitive information via unspecified vectors.
CVSS Score: 5.0 (MEDIUM)
References: http://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay/?docId=emr_na-c03784101; http://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay/?docId=emr_na-c03784101
CVE: CVE-2013-2337
Published: 2013-06-14
Description: Cross-site scripting (XSS) vulnerability in HP Service Manager 7.11, 9.21, 9.30, and 9.31, and ServiceCenter 6.2.8, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay/?docId=emr_na-c03784101; http://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay/?docId=emr_na-c03784101
CVE: CVE-2013-3576
Published: 2013-06-14
Description: ginkgosnmp.inc in HP System Management Homepage (SMH) allows remote authenticated users to execute arbitrary commands via shell metacharacters in the PATH_INFO to smhutil/snmpchp.php.en.
CVSS Score: 9.0 (HIGH)
CWE: CWE-78
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]5683&w=2; http://www.kb.cert.org/vuls/id/735364; http://marc.info/?l=bugtraq&m=[PII_REDACTED]5683&w=2
CVE: CVE-2013-2338
Published: 2013-06-14
Description: Unspecified vulnerability on HP Integrated Lights-Out 3 (aka iLO3) cards with firmware before 1.57 and 4 (aka iLO4) cards with firmware before 1.22, when Single-Sign-On (SSO) is used, allows remote attackers to execute arbitrary code via unknown vectors.
CVSS Score: 10.0 (HIGH)
References: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03787836; https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03787836
CVE: CVE-2013-2783
Published: 2013-06-14
Description: The DNP3 driver in IOServer drivers 1.0.19.0 allows remote attackers to cause a denial of service (infinite loop) or obtain unspecified control via crafted data to TCP port 20000.
CVSS Score: 7.1 (HIGH)
CWE: CWE-20
References: http://ics-cert.us-cert.gov/advisories/ICSA-13-161-01; http://ics-cert.us-cert.gov/advisories/ICSA-13-161-01
CVE: CVE-2013-3957
Published: 2013-06-14
Description: SQL injection vulnerability in the login screen in the Web Navigator in Siemens WinCC before 7.2 Update 1, as used in SIMATIC PCS7 8.0 SP1 and earlier and other products, allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-345843.pdf; http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-345843.pdf
CVE: CVE-2013-3958
Published: 2013-06-14
Description: The login implementation in the Web Navigator in Siemens WinCC before 7.2 Update 1, as used in SIMATIC PCS7 8.0 SP1 and earlier and other products, has a hardcoded account, which makes it easier for remote attackers to obtain access via an unspecified request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-255
References: http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-345843.pdf; http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-345843.pdf
CVE: CVE-2013-3959
Published: 2013-06-14
Description: The Web Navigator in Siemens WinCC before 7.2 Update 1, as used in SIMATIC PCS7 8.0 SP1 and earlier and other products, exhibits different behavior for NetBIOS user names depending on whether the user account exists, which allows remote authenticated users to enumerate account names via crafted URL parameters.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-200
References: http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-345843.pdf; http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-345843.pdf
CVE: CVE-2013-1981
Published: 2013-06-15
Description: Multiple integer overflows in X.org libX11 1.5.99.901 (1.6 RC1) and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XQueryFont, (2) _XF86BigfontQueryFont, (3) XListFontsWithInfo, (4) XGetMotionEvents, (5) XListHosts, (6) XGetModifierMapping, (7) XGetPointerMapping, (8) XGetKeyboardMapping, (9) XGetWindowProperty, (10) XGetImage, (11) LoadColornameDB, (12) XrmGetFileDatabase, (13) _XimParseStringFile, or (14) TransFileName functions.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-189
References: http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106781.html; http://www.debian.org/security/2013/dsa-2693; http://www.openwall.com/lists/oss-security/2013/05/23/3
CVE: CVE-2013-1982
Published: 2013-06-15
Description: Multiple integer overflows in X.org libXext 1.3.1 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XcupGetReservedColormapEntries, (2) XcupStoreColors, (3) XdbeGetVisualInfo, (4) XeviGetVisualInfo, (5) XShapeGetRectangles, and (6) XSyncListSystemCounters functions.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-189
References: http://lists.opensuse.org/opensuse-updates/2013-06/msg00139.html; http://www.debian.org/security/2013/dsa-2682; http://www.openwall.com/lists/oss-security/2013/05/23/3
CVE: CVE-2013-1983
Published: 2013-06-15
Description: Integer overflow in X.org libXfixes 5.0 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the XFixesGetCursorImage function.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-189
References: http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106794.html; http://lists.opensuse.org/opensuse-updates/2013-06/msg00144.html; http://www.debian.org/security/2013/dsa-2676
CVE: CVE-2013-1984
Published: 2013-06-15
Description: Multiple integer overflows in X.org libXi 1.7.1 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XGetDeviceControl, (2) XGetFeedbackControl, (3) XGetDeviceDontPropagateList, (4) XGetDeviceMotionEvents, (5) XIGetProperty, (6) XIGetSelectedEvents, (7) XGetDeviceProperties, and (8) XListInputDevices functions.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-189
References: http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106913.html; http://lists.opensuse.org/opensuse-updates/2013-06/msg00161.html; http://www.debian.org/security/2013/dsa-2683
CVE: CVE-2013-1985
Published: 2013-06-15
Description: Integer overflow in X.org libXinerama 1.1.2 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the XineramaQueryScreens function.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106845.html; http://lists.opensuse.org/opensuse-updates/2013-06/msg00154.html; http://www.debian.org/security/2013/dsa-2691
CVE: CVE-2013-1986
Published: 2013-06-15
Description: Multiple integer overflows in X.org libXrandr 1.4.0 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XRRQueryOutputProperty and (2) XRRQueryProviderProperty functions.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-189
References: http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106857.html; http://lists.opensuse.org/opensuse-updates/2013-06/msg00156.html; http://www.debian.org/security/2013/dsa-2684
CVE: CVE-2013-1987
Published: 2013-06-15
Description: Multiple integer overflows in X.org libXrender 0.9.7 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XRenderQueryFilters, (2) XRenderQueryFormats, and (3) XRenderQueryPictIndexValues functions.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-189
References: http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106862.html; http://lists.opensuse.org/opensuse-updates/2013-06/msg00141.html; http://www.debian.org/security/2013/dsa-2677
CVE: CVE-2013-1988
Published: 2013-06-15
Description: Multiple integer overflows in X.org libXRes 1.0.6 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XResQueryClients and (2) XResQueryClientResources functions.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-189
References: http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106880.html; http://lists.opensuse.org/opensuse-updates/2013-06/msg00155.html; http://www.debian.org/security/2013/dsa-2688
CVE: CVE-2013-1989
Published: 2013-06-15
Description: Multiple integer overflows in X.org libXv 1.0.7 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XvQueryPortAttributes, (2) XvListImageFormats, and (3) XvCreateImage function.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-189
References: http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106889.html; http://lists.opensuse.org/opensuse-updates/2013-06/msg00140.html; http://www.debian.org/security/2013/dsa-2674